SUSE-SU-2023:2879-1

Опубликовано: 19 июл. 2023

Источник: suse-cvrf

Описание

Security update for dbus-1

This update for dbus-1 fixes the following issues:

CVE-2023-34969: Fixed a possible dbus-daemon crash by an unprivileged users (bsc#1212126).

Список пакетов

Container caasp/v4/cilium:1.6.6

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Container ses/7.1/ceph/haproxy:latest

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Container ses/7.1/ceph/keepalived:latest

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Container ses/7.1/cephcsi/cephcsi:latest

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Container ses/7.1/rook/ceph:latest

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Container suse/sle-micro-rancher/5.2:latest

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Container suse/sle-micro/5.1/toolbox:latest

libdbus-1-3-1.12.2-150100.8.17.1

Container suse/sle-micro/5.2/toolbox:latest

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP2-BYOS-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP2-HPC-BYOS-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP2-SAP-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP2-SAP-BYOS-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP2-SAP-BYOS-GCE

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP2-SAP-EC2-HVM

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP2-SAP-GCE

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-BYOS-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-BYOS-EC2-HVM

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-BYOS-GCE

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-CHOST-BYOS-Aliyun

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-CHOST-BYOS-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-CHOST-BYOS-EC2

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-CHOST-BYOS-GCE

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-HPC-BYOS-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-HPC-BYOS-GCE

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Micro-5-1-BYOS-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Micro-5-1-BYOS-GCE

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Micro-5-2-BYOS-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-Micro-5-2-BYOS-GCE

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-SAP-BYOS-Azure

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-SAP-BYOS-GCE

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

Image SLES15-SP3-SAPCAL-Azure

dbus-1-1.12.2-150100.8.17.1

dbus-1-x11-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

libdbus-1-3-32bit-1.12.2-150100.8.17.1

Image SLES15-SP3-SAPCAL-EC2-HVM

dbus-1-1.12.2-150100.8.17.1

dbus-1-x11-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

libdbus-1-3-32bit-1.12.2-150100.8.17.1

Image SLES15-SP3-SAPCAL-GCE

dbus-1-1.12.2-150100.8.17.1

dbus-1-x11-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

libdbus-1-3-32bit-1.12.2-150100.8.17.1

SUSE Linux Enterprise Micro 5.1

dbus-1-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

SUSE Linux Enterprise Micro 5.2

dbus-1-1.12.2-150100.8.17.1

dbus-1-x11-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

SUSE Linux Enterprise Real Time 15 SP3

dbus-1-1.12.2-150100.8.17.1

dbus-1-devel-1.12.2-150100.8.17.1

dbus-1-x11-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

libdbus-1-3-32bit-1.12.2-150100.8.17.1

SUSE Manager Proxy 4.2

dbus-1-1.12.2-150100.8.17.1

dbus-1-devel-1.12.2-150100.8.17.1

dbus-1-x11-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

libdbus-1-3-32bit-1.12.2-150100.8.17.1

SUSE Manager Server 4.2

dbus-1-1.12.2-150100.8.17.1

dbus-1-devel-1.12.2-150100.8.17.1

dbus-1-x11-1.12.2-150100.8.17.1

libdbus-1-3-1.12.2-150100.8.17.1

libdbus-1-3-32bit-1.12.2-150100.8.17.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20232879-1/
Link for SUSE-SU-2023:2879-1
https://lists.suse.com/pipermail/sle-security-updates/2023-July/015525.html
E-Mail link for SUSE-SU-2023:2879-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1212126
SUSE Bug 1212126
https://www.suse.com/security/cve/CVE-2023-34969/
SUSE CVE CVE-2023-34969 page

Описание

D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.

Затронутые продукты

Container caasp/v4/cilium:1.6.6:dbus-1-1.12.2-150100.8.17.1

Container caasp/v4/cilium:1.6.6:libdbus-1-3-1.12.2-150100.8.17.1

Container ses/7.1/ceph/haproxy:latest:dbus-1-1.12.2-150100.8.17.1

Container ses/7.1/ceph/haproxy:latest:libdbus-1-3-1.12.2-150100.8.17.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-34969.html
CVE-2023-34969
https://bugzilla.suse.com/1212126
SUSE Bug 1212126

SUSE-SU-2023:2879-1

Описание

Список пакетов

Container caasp/v4/cilium:1.6.6

Container ses/7.1/ceph/haproxy:latest

Container ses/7.1/ceph/keepalived:latest

Container ses/7.1/cephcsi/cephcsi:latest

Container ses/7.1/rook/ceph:latest

Container suse/sle-micro-rancher/5.2:latest

Container suse/sle-micro/5.1/toolbox:latest

Container suse/sle-micro/5.2/toolbox:latest

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-BYOS-Azure

Image SLES15-SP2-HPC-BYOS-Azure

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

Image SLES15-SP3-BYOS-Azure

Image SLES15-SP3-BYOS-EC2-HVM

Image SLES15-SP3-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-Aliyun

Image SLES15-SP3-CHOST-BYOS-Azure

Image SLES15-SP3-CHOST-BYOS-EC2

Image SLES15-SP3-CHOST-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

Image SLES15-SP3-HPC-BYOS-Azure

Image SLES15-SP3-HPC-BYOS-EC2-HVM

Image SLES15-SP3-HPC-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-Micro-5-1-BYOS-Azure

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-1-BYOS-GCE

Image SLES15-SP3-Micro-5-2-BYOS-Azure

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-2-BYOS-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Linux Enterprise Micro 5.1

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Real Time 15 SP3

SUSE Manager Proxy 4.2

SUSE Manager Server 4.2

Ссылки

Уязвимость: CVE-2023-34969

Описание

Затронутые продукты

Ссылки