SUSE-SU-2022:2991-1

Опубликовано: 01 сент. 2022

Источник: suse-cvrf

Описание

Security update for libtirpc

This update for libtirpc fixes the following issues:

CVE-2021-46828: Fixed an uncontrolled file descriptor consumption, which could be exploited by remote attackers to prevent applications using the library from accepting new connections (bsc#1201680).

Non-security fixes:

Exclude ipv6 addresses in client protocol version 2 code (bsc#1200800)
Fix memory leak in params.r_addr assignement (bsc#1198752)

Список пакетов

Container caasp/v4/cilium-operator:1.6.6

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Container caasp/v4/cilium:1.6.6

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Container caasp/v4/helm-tiller:2.16.12

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Container suse/sle15:15.0

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Container suse/sle15:15.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Container suse/sle15:15.2

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP1-SAPCAL-Azure

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

Image SLES15-SP1-SAPCAL-EC2-HVM

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

Image SLES15-SP1-SAPCAL-GCE

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

Image SLES15-SP2-BYOS-Azure

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-BYOS-EC2-HVM

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-BYOS-GCE

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-HPC-BYOS-Azure

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-HPC-BYOS-EC2-HVM

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-SAP-Azure

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-SAP-BYOS-Azure

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-SAP-BYOS-GCE

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-SAP-EC2-HVM

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

Image SLES15-SP2-SAP-GCE

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

SUSE Enterprise Storage 6

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Enterprise Storage 7

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise High Performance Computing 15-ESPOS

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise High Performance Computing 15-LTSS

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise Server 15 SP1-BCL

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise Server 15 SP1-LTSS

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise Server 15 SP2-BCL

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise Server 15 SP2-LTSS

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise Server 15-LTSS

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise Server for SAP Applications 15

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Manager Proxy 4.1

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Manager Retail Branch Server 4.1

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

SUSE Manager Server 4.1

libtirpc-devel-1.0.2-150000.3.18.1

libtirpc-netconfig-1.0.2-150000.3.18.1

libtirpc3-1.0.2-150000.3.18.1

libtirpc3-32bit-1.0.2-150000.3.18.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20222991-1/
Link for SUSE-SU-2022:2991-1
https://lists.suse.com/pipermail/sle-security-updates/2022-September/012060.html
E-Mail link for SUSE-SU-2022:2991-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1198752
SUSE Bug 1198752
https://bugzilla.suse.com/1200800
SUSE Bug 1200800
https://bugzilla.suse.com/1201680
SUSE Bug 1201680
https://www.suse.com/security/cve/CVE-2021-46828/
SUSE CVE CVE-2021-46828 page

Описание

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.

Затронутые продукты

Container caasp/v4/cilium-operator:1.6.6:libtirpc-netconfig-1.0.2-150000.3.18.1

Container caasp/v4/cilium-operator:1.6.6:libtirpc3-1.0.2-150000.3.18.1

Container caasp/v4/cilium:1.6.6:libtirpc-netconfig-1.0.2-150000.3.18.1

Container caasp/v4/cilium:1.6.6:libtirpc3-1.0.2-150000.3.18.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-46828.html
CVE-2021-46828
https://bugzilla.suse.com/1201680
SUSE Bug 1201680
https://bugzilla.suse.com/1206259
SUSE Bug 1206259
https://bugzilla.suse.com/1209708
SUSE Bug 1209708

SUSE-SU-2022:2991-1

Описание

Список пакетов

Container caasp/v4/cilium-operator:1.6.6

Container caasp/v4/cilium:1.6.6

Container caasp/v4/helm-tiller:2.16.12

Container suse/sle15:15.0

Container suse/sle15:15.1

Container suse/sle15:15.2

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP1-SAPCAL-Azure

Image SLES15-SP1-SAPCAL-EC2-HVM

Image SLES15-SP1-SAPCAL-GCE

Image SLES15-SP2-BYOS-Azure

Image SLES15-SP2-BYOS-EC2-HVM

Image SLES15-SP2-BYOS-GCE

Image SLES15-SP2-HPC-BYOS-Azure

Image SLES15-SP2-HPC-BYOS-EC2-HVM

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

SUSE Enterprise Storage 6

SUSE Enterprise Storage 7

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise High Performance Computing 15-ESPOS

SUSE Linux Enterprise High Performance Computing 15-LTSS

SUSE Linux Enterprise Server 15 SP1-BCL

SUSE Linux Enterprise Server 15 SP1-LTSS

SUSE Linux Enterprise Server 15 SP2-BCL

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server 15-LTSS

SUSE Linux Enterprise Server for SAP Applications 15

SUSE Linux Enterprise Server for SAP Applications 15 SP1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Manager Proxy 4.1

SUSE Manager Retail Branch Server 4.1

SUSE Manager Server 4.1

Ссылки

Уязвимость: CVE-2021-46828

Описание

Затронутые продукты

Ссылки