SUSE-SU-2022:3399-1

Опубликовано: 26 сент. 2022

Источник: suse-cvrf

Описание

Security update for unzip

This update for unzip fixes the following issues:

CVE-2022-0530: Fixed SIGSEGV during the conversion of an utf-8 string to a local string (bsc#1196177).
CVE-2022-0529: Fixed heap out-of-bound writes and reads during conversion of wide string to local string (bsc#1196180)

Список пакетов

Container bci/spack:0.23

unzip-6.00-150000.4.11.1

Container bci/spack:latest

unzip-6.00-150000.4.11.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP1-SAPCAL-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP1-SAPCAL-EC2-HVM

unzip-6.00-150000.4.11.1

Image SLES15-SP1-SAPCAL-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP2-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP2-BYOS-EC2-HVM

unzip-6.00-150000.4.11.1

Image SLES15-SP2-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP2-HPC-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP2-HPC-BYOS-EC2-HVM

unzip-6.00-150000.4.11.1

Image SLES15-SP2-SAP-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP2-SAP-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

unzip-6.00-150000.4.11.1

Image SLES15-SP2-SAP-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP2-SAP-EC2-HVM

unzip-6.00-150000.4.11.1

Image SLES15-SP2-SAP-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP3-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP3-BYOS-EC2-HVM

unzip-6.00-150000.4.11.1

Image SLES15-SP3-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP3-HPC-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

unzip-6.00-150000.4.11.1

Image SLES15-SP3-HPC-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

unzip-6.00-150000.4.11.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

unzip-6.00-150000.4.11.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP3-SAP-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

unzip-6.00-150000.4.11.1

Image SLES15-SP3-SAP-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP3-SAPCAL-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP3-SAPCAL-EC2-HVM

unzip-6.00-150000.4.11.1

Image SLES15-SP3-SAPCAL-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Azure-Basic

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Azure-Standard

unzip-6.00-150000.4.11.1

Image SLES15-SP4-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP4-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP4-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4-HPC

unzip-6.00-150000.4.11.1

Image SLES15-SP4-HPC-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP4-HPC-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP4-HPC-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP4-HPC-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-HPC-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4-HPC-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-HPC-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Hardened-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Hardened-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Hardened-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Hardened-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Server-4-3

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

unzip-6.00-150000.4.11.1

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Hardened

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Hardened-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Hardened-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Hardened-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAP-Hardened-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAPCAL

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAPCAL-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAPCAL-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP4-SAPCAL-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP5-Azure-3P

unzip-6.00-150000.4.11.1

Image SLES15-SP5-Azure-Basic

unzip-6.00-150000.4.11.1

Image SLES15-SP5-Azure-Standard

unzip-6.00-150000.4.11.1

Image SLES15-SP5-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP5-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP5-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP5-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP5-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP5-HPC-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP5-HPC-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP5-HPC-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP5-HPC-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP5-HPC-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP5-HPC-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP5-Hardened-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP5-Hardened-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP5-Hardened-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Azure-3P

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Hardened-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Hardened-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAP-Hardened-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAPCAL-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAPCAL-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP5-SAPCAL-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP6

unzip-6.00-150000.4.11.1

Image SLES15-SP6-Azure-Basic

unzip-6.00-150000.4.11.1

Image SLES15-SP6-Azure-Standard

unzip-6.00-150000.4.11.1

Image SLES15-SP6-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP6-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP6-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP6-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP6-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP6-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP6-HPC

unzip-6.00-150000.4.11.1

Image SLES15-SP6-HPC-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP6-HPC-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP6-HPC-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP6-HPC-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP6-HPC-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP6-HPC-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP6-HPC-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP6-Hardened-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP6-Hardened-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP6-Hardened-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP6-Hardened-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Hardened

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Hardened-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Hardened-BYOS

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Hardened-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAP-Hardened-GCE

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAPCAL

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAPCAL-Azure

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAPCAL-EC2

unzip-6.00-150000.4.11.1

Image SLES15-SP6-SAPCAL-GCE

unzip-6.00-150000.4.11.1

SUSE Linux Enterprise Module for Basesystem 15 SP3

unzip-6.00-150000.4.11.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

unzip-6.00-150000.4.11.1

openSUSE Leap 15.3

unzip-6.00-150000.4.11.1

unzip-doc-6.00-150000.4.11.1

openSUSE Leap 15.4

unzip-6.00-150000.4.11.1

unzip-doc-6.00-150000.4.11.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20223399-1/
Link for SUSE-SU-2022:3399-1
https://lists.suse.com/pipermail/sle-security-updates/2022-September/012379.html
E-Mail link for SUSE-SU-2022:3399-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1196177
SUSE Bug 1196177
https://bugzilla.suse.com/1196180
SUSE Bug 1196180
https://www.suse.com/security/cve/CVE-2022-0529/
SUSE CVE CVE-2022-0529 page
https://www.suse.com/security/cve/CVE-2022-0530/
SUSE CVE CVE-2022-0530 page

Описание

A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

Затронутые продукты

Container bci/spack:0.23:unzip-6.00-150000.4.11.1

Container bci/spack:latest:unzip-6.00-150000.4.11.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:unzip-6.00-150000.4.11.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:unzip-6.00-150000.4.11.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-0529.html
CVE-2022-0529
https://bugzilla.suse.com/1196180
SUSE Bug 1196180

Описание

Затронутые продукты

Container bci/spack:0.23:unzip-6.00-150000.4.11.1

Container bci/spack:latest:unzip-6.00-150000.4.11.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:unzip-6.00-150000.4.11.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:unzip-6.00-150000.4.11.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-0530.html
CVE-2022-0530
https://bugzilla.suse.com/1196177
SUSE Bug 1196177