SUSE-SU-2022:3394-1

Опубликовано: 26 сент. 2022

Источник: suse-cvrf

Описание

Security update for permissions

This update for permissions fixes the following issues:

CVE-2022-31252: Fixed chkstat group controlled paths (bsc#1203018).

Список пакетов

Container bci/bci-init:15.3

permissions-20181225-150200.23.15.1

Container bci/node:12

permissions-20181225-150200.23.15.1

Container bci/python:3

permissions-20181225-150200.23.15.1

Container ses/7.1/ceph/grafana:latest

permissions-20181225-150200.23.15.1

Container ses/7.1/ceph/haproxy:latest

permissions-20181225-150200.23.15.1

Container ses/7.1/ceph/keepalived:latest

permissions-20181225-150200.23.15.1

Container ses/7.1/ceph/prometheus-alertmanager:latest

permissions-20181225-150200.23.15.1

Container ses/7.1/ceph/prometheus-node-exporter:latest

permissions-20181225-150200.23.15.1

Container ses/7.1/ceph/prometheus-server:latest

permissions-20181225-150200.23.15.1

Container ses/7.1/ceph/prometheus-snmp_notifier:latest

permissions-20181225-150200.23.15.1

Container ses/7.1/cephcsi/cephcsi:latest

permissions-20181225-150200.23.15.1

Container ses/7.1/cephcsi/csi-attacher:v4.1.0

permissions-20181225-150200.23.15.1

Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0

permissions-20181225-150200.23.15.1

Container ses/7.1/cephcsi/csi-provisioner:v3.4.0

permissions-20181225-150200.23.15.1

Container ses/7.1/cephcsi/csi-resizer:v1.7.0

permissions-20181225-150200.23.15.1

Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1

permissions-20181225-150200.23.15.1

Container ses/7.1/rook/ceph:latest

permissions-20181225-150200.23.15.1

Container suse/ltss/sle15.3/bci-base:latest

permissions-20181225-150200.23.15.1

Container suse/sle-micro-rancher/5.2:latest

permissions-20181225-150200.23.15.1

Container suse/sle-micro/5.1/toolbox:latest

permissions-20181225-150200.23.15.1

Container suse/sle-micro/5.2/toolbox:latest

permissions-20181225-150200.23.15.1

Container suse/sle15:15.2

permissions-20181225-150200.23.15.1

Container suse/sle15:15.3

permissions-20181225-150200.23.15.1

Container trento/trento-db:latest

permissions-20181225-150200.23.15.1

Container trento/trento-runner:latest

permissions-20181225-150200.23.15.1

Image SLES15-SP2-BYOS-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP2-BYOS-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP2-BYOS-GCE

permissions-20181225-150200.23.15.1

Image SLES15-SP2-HPC-BYOS-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP2-HPC-BYOS-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP2-SAP-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

permissions-20181225-150200.23.15.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

permissions-20181225-150200.23.15.1

Image SLES15-SP2-SAP-BYOS-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP2-SAP-BYOS-GCE

permissions-20181225-150200.23.15.1

Image SLES15-SP2-SAP-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP2-SAP-GCE

permissions-20181225-150200.23.15.1

Image SLES15-SP3-BYOS-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP3-BYOS-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP3-BYOS-GCE

permissions-20181225-150200.23.15.1

Image SLES15-SP3-CHOST-BYOS-Aliyun

permissions-20181225-150200.23.15.1

Image SLES15-SP3-CHOST-BYOS-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP3-CHOST-BYOS-EC2

permissions-20181225-150200.23.15.1

Image SLES15-SP3-CHOST-BYOS-GCE

permissions-20181225-150200.23.15.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

permissions-20181225-150200.23.15.1

Image SLES15-SP3-HPC-BYOS-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP3-HPC-BYOS-GCE

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Micro-5-1-BYOS-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Micro-5-1-BYOS-GCE

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Micro-5-2-BYOS-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP3-Micro-5-2-BYOS-GCE

permissions-20181225-150200.23.15.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

permissions-20181225-150200.23.15.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

permissions-20181225-150200.23.15.1

Image SLES15-SP3-SAP-BYOS-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP3-SAP-BYOS-GCE

permissions-20181225-150200.23.15.1

Image SLES15-SP3-SAPCAL-Azure

permissions-20181225-150200.23.15.1

Image SLES15-SP3-SAPCAL-EC2-HVM

permissions-20181225-150200.23.15.1

Image SLES15-SP3-SAPCAL-GCE

permissions-20181225-150200.23.15.1

SUSE Linux Enterprise Micro 5.1

permissions-20181225-150200.23.15.1

SUSE Linux Enterprise Micro 5.2

permissions-20181225-150200.23.15.1

SUSE Linux Enterprise Module for Basesystem 15 SP3

permissions-20181225-150200.23.15.1

permissions-zypp-plugin-20181225-150200.23.15.1

openSUSE Leap 15.3

permissions-20181225-150200.23.15.1

permissions-zypp-plugin-20181225-150200.23.15.1

openSUSE Leap Micro 5.2

permissions-20181225-150200.23.15.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20223394-1/
Link for SUSE-SU-2022:3394-1
https://lists.suse.com/pipermail/sle-security-updates/2022-September/012380.html
E-Mail link for SUSE-SU-2022:3394-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1203018
SUSE Bug 1203018
https://www.suse.com/security/cve/CVE-2022-31252/
SUSE CVE CVE-2022-31252 page

Описание

A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225.

Затронутые продукты

Container bci/bci-init:15.3:permissions-20181225-150200.23.15.1

Container bci/node:12:permissions-20181225-150200.23.15.1

Container bci/python:3:permissions-20181225-150200.23.15.1

Container ses/7.1/ceph/grafana:latest:permissions-20181225-150200.23.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-31252.html
CVE-2022-31252
https://bugzilla.suse.com/1203018
SUSE Bug 1203018

SUSE-SU-2022:3394-1

Описание

Список пакетов

Container bci/bci-init:15.3

Container bci/node:12

Container bci/python:3

Container ses/7.1/ceph/grafana:latest

Container ses/7.1/ceph/haproxy:latest

Container ses/7.1/ceph/keepalived:latest

Container ses/7.1/ceph/prometheus-alertmanager:latest

Container ses/7.1/ceph/prometheus-node-exporter:latest

Container ses/7.1/ceph/prometheus-server:latest

Container ses/7.1/ceph/prometheus-snmp_notifier:latest

Container ses/7.1/cephcsi/cephcsi:latest

Container ses/7.1/cephcsi/csi-attacher:v4.1.0

Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0

Container ses/7.1/cephcsi/csi-provisioner:v3.4.0

Container ses/7.1/cephcsi/csi-resizer:v1.7.0

Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1

Container ses/7.1/rook/ceph:latest

Container suse/ltss/sle15.3/bci-base:latest

Container suse/sle-micro-rancher/5.2:latest

Container suse/sle-micro/5.1/toolbox:latest

Container suse/sle-micro/5.2/toolbox:latest

Container suse/sle15:15.2

Container suse/sle15:15.3

Container trento/trento-db:latest

Container trento/trento-runner:latest

Image SLES15-SP2-BYOS-Azure

Image SLES15-SP2-BYOS-EC2-HVM

Image SLES15-SP2-BYOS-GCE

Image SLES15-SP2-HPC-BYOS-Azure

Image SLES15-SP2-HPC-BYOS-EC2-HVM

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

Image SLES15-SP3-BYOS-Azure

Image SLES15-SP3-BYOS-EC2-HVM

Image SLES15-SP3-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-Aliyun

Image SLES15-SP3-CHOST-BYOS-Azure

Image SLES15-SP3-CHOST-BYOS-EC2

Image SLES15-SP3-CHOST-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

Image SLES15-SP3-HPC-BYOS-Azure

Image SLES15-SP3-HPC-BYOS-EC2-HVM

Image SLES15-SP3-HPC-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-Micro-5-1-BYOS-Azure

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-1-BYOS-GCE

Image SLES15-SP3-Micro-5-2-BYOS-Azure

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-2-BYOS-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Linux Enterprise Micro 5.1

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Module for Basesystem 15 SP3

openSUSE Leap 15.3

openSUSE Leap Micro 5.2

Ссылки

Уязвимость: CVE-2022-31252

Описание