SUSE-SU-2023:0680-1

Опубликовано: 08 мар. 2023

Источник: suse-cvrf

Описание

Security update for libxslt

This update for libxslt fixes the following issues:

CVE-2021-30560: Fixing a use after free vulnerability in Blink XSLT (bsc#1208574).

Список пакетов

Container ses/7.1/cephcsi/cephcsi:latest

libxslt1-1.1.32-150000.3.14.1

Container ses/7.1/rook/ceph:latest

libxslt1-1.1.32-150000.3.14.1

Container suse/sle-micro-rancher/5.2:latest

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP2-BYOS-Azure

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP2-HPC-BYOS-Azure

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP2-SAP-Azure

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP2-SAP-BYOS-Azure

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP2-SAP-BYOS-GCE

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP2-SAP-EC2-HVM

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP2-SAP-GCE

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-BYOS-Azure

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-BYOS-EC2-HVM

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-BYOS-GCE

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-CHOST-BYOS-Aliyun

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-CHOST-BYOS-Azure

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-CHOST-BYOS-EC2

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-CHOST-BYOS-GCE

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-HPC-BYOS-Azure

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-HPC-BYOS-GCE

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-SAP-BYOS-Azure

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-SAP-BYOS-GCE

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-SAPCAL-Azure

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP3-SAPCAL-GCE

libxslt1-1.1.32-150000.3.14.1

SUSE Enterprise Storage 7

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Enterprise Storage 7.1

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise Micro 5.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise Micro 5.2

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise Real Time 15 SP3

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise Server 15 SP1-LTSS

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise Server 15 SP2-LTSS

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Manager Proxy 4.2

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

SUSE Manager Server 4.2

libxslt-devel-1.1.32-150000.3.14.1

libxslt-tools-1.1.32-150000.3.14.1

libxslt1-1.1.32-150000.3.14.1

openSUSE Leap 15.4

libxslt-python-1.1.32-150000.3.14.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20230680-1/
Link for SUSE-SU-2023:0680-1
https://lists.suse.com/pipermail/sle-security-updates/2023-March/014003.html
E-Mail link for SUSE-SU-2023:0680-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1208574
SUSE Bug 1208574
https://www.suse.com/security/cve/CVE-2021-30560/
SUSE CVE CVE-2021-30560 page

Описание

Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты

Container ses/7.1/cephcsi/cephcsi:latest:libxslt1-1.1.32-150000.3.14.1

Container ses/7.1/rook/ceph:latest:libxslt1-1.1.32-150000.3.14.1

Container suse/sle-micro-rancher/5.2:latest:libxslt1-1.1.32-150000.3.14.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libxslt-tools-1.1.32-150000.3.14.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-30560.html
CVE-2021-30560
https://bugzilla.suse.com/1188373
SUSE Bug 1188373
https://bugzilla.suse.com/1208574
SUSE Bug 1208574
https://bugzilla.suse.com/1211500
SUSE Bug 1211500
https://bugzilla.suse.com/1211501
SUSE Bug 1211501
https://bugzilla.suse.com/1211544
SUSE Bug 1211544

SUSE-SU-2023:0680-1

Описание

Список пакетов

Container ses/7.1/cephcsi/cephcsi:latest

Container ses/7.1/rook/ceph:latest

Container suse/sle-micro-rancher/5.2:latest

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-BYOS-Azure

Image SLES15-SP2-HPC-BYOS-Azure

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

Image SLES15-SP3-BYOS-Azure

Image SLES15-SP3-BYOS-EC2-HVM

Image SLES15-SP3-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-Aliyun

Image SLES15-SP3-CHOST-BYOS-Azure

Image SLES15-SP3-CHOST-BYOS-EC2

Image SLES15-SP3-CHOST-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

Image SLES15-SP3-HPC-BYOS-Azure

Image SLES15-SP3-HPC-BYOS-EC2-HVM

Image SLES15-SP3-HPC-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Enterprise Storage 7

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise Micro 5.1

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Real Time 15 SP3

SUSE Linux Enterprise Server 15 SP1-LTSS

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Manager Proxy 4.2

SUSE Manager Server 4.2

openSUSE Leap 15.4

Ссылки

Уязвимость: CVE-2021-30560

Описание

Затронутые продукты

Ссылки