SUSE-SU-2023:2956-1

Опубликовано: 25 июл. 2023

Источник: suse-cvrf

Описание

Security update for libcap

This update for libcap fixes the following issues:

CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).

Список пакетов

Container caasp/v4/cilium-operator:1.6.6

libcap2-2.26-150000.4.9.1

Container caasp/v4/cilium:1.6.6

libcap2-2.26-150000.4.9.1

Container ses/7.1/ceph/grafana:latest

libcap2-2.26-150000.4.9.1

Container ses/7.1/ceph/haproxy:latest

libcap2-2.26-150000.4.9.1

Container ses/7.1/ceph/keepalived:latest

libcap2-2.26-150000.4.9.1

Container ses/7.1/ceph/prometheus-alertmanager:latest

libcap2-2.26-150000.4.9.1

Container ses/7.1/ceph/prometheus-node-exporter:latest

libcap2-2.26-150000.4.9.1

Container ses/7.1/ceph/prometheus-server:latest

libcap2-2.26-150000.4.9.1

Container ses/7.1/ceph/prometheus-snmp_notifier:latest

libcap2-2.26-150000.4.9.1

Container ses/7.1/cephcsi/cephcsi:latest

libcap2-2.26-150000.4.9.1

Container ses/7.1/cephcsi/csi-attacher:v4.1.0

libcap2-2.26-150000.4.9.1

Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0

libcap2-2.26-150000.4.9.1

Container ses/7.1/cephcsi/csi-provisioner:v3.4.0

libcap2-2.26-150000.4.9.1

Container ses/7.1/cephcsi/csi-resizer:v1.7.0

libcap2-2.26-150000.4.9.1

Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1

libcap2-2.26-150000.4.9.1

Container ses/7.1/rook/ceph:latest

libcap2-2.26-150000.4.9.1

Container suse/ltss/sle15.3/bci-base-fips:latest

libcap2-2.26-150000.4.9.1

Container suse/ltss/sle15.3/bci-base:latest

libcap2-2.26-150000.4.9.1

Container suse/sle-micro-rancher/5.2:latest

libcap2-2.26-150000.4.9.1

Container suse/sle-micro/5.1/toolbox:latest

libcap-progs-2.26-150000.4.9.1

libcap2-2.26-150000.4.9.1

Container suse/sle-micro/5.2/toolbox:latest

libcap-progs-2.26-150000.4.9.1

libcap2-2.26-150000.4.9.1

Container suse/sle15:15.1

libcap2-2.26-150000.4.9.1

Container suse/sle15:15.2

libcap2-2.26-150000.4.9.1

Container suse/sle15:15.3

libcap2-2.26-150000.4.9.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

libcap2-2.26-150000.4.9.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

libcap2-2.26-150000.4.9.1

Image SLES15-SP2-BYOS-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP2-HPC-BYOS-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP2-SAP-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libcap2-2.26-150000.4.9.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libcap2-2.26-150000.4.9.1

Image SLES15-SP2-SAP-BYOS-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libcap2-2.26-150000.4.9.1

Image SLES15-SP2-SAP-BYOS-GCE

libcap2-2.26-150000.4.9.1

Image SLES15-SP2-SAP-EC2-HVM

libcap2-2.26-150000.4.9.1

Image SLES15-SP2-SAP-GCE

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-BYOS-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-BYOS-EC2-HVM

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-BYOS-GCE

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-CHOST-BYOS-Aliyun

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-CHOST-BYOS-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-CHOST-BYOS-EC2

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-CHOST-BYOS-GCE

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-HPC-BYOS-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-HPC-BYOS-GCE

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Micro-5-1-BYOS-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Micro-5-1-BYOS-GCE

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Micro-5-2-BYOS-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-Micro-5-2-BYOS-GCE

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-SAP-BYOS-Azure

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-SAP-BYOS-GCE

libcap2-2.26-150000.4.9.1

Image SLES15-SP3-SAPCAL-Azure

libcap2-2.26-150000.4.9.1

libcap2-32bit-2.26-150000.4.9.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libcap2-2.26-150000.4.9.1

libcap2-32bit-2.26-150000.4.9.1

Image SLES15-SP3-SAPCAL-GCE

libcap2-2.26-150000.4.9.1

libcap2-32bit-2.26-150000.4.9.1

SUSE Linux Enterprise Micro 5.1

libcap2-2.26-150000.4.9.1

SUSE Linux Enterprise Micro 5.2

libcap2-2.26-150000.4.9.1

SUSE Linux Enterprise Real Time 15 SP3

libcap-devel-2.26-150000.4.9.1

libcap-progs-2.26-150000.4.9.1

libcap2-2.26-150000.4.9.1

libcap2-32bit-2.26-150000.4.9.1

SUSE Manager Proxy 4.2

libcap-devel-2.26-150000.4.9.1

libcap-progs-2.26-150000.4.9.1

libcap2-2.26-150000.4.9.1

libcap2-32bit-2.26-150000.4.9.1

SUSE Manager Server 4.2

libcap-devel-2.26-150000.4.9.1

libcap-progs-2.26-150000.4.9.1

libcap2-2.26-150000.4.9.1

libcap2-32bit-2.26-150000.4.9.1

openSUSE Leap 15.4

pam_cap-2.26-150000.4.9.1

pam_cap-32bit-2.26-150000.4.9.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20232956-1/
Link for SUSE-SU-2023:2956-1
https://lists.suse.com/pipermail/sle-security-updates/2023-July/015622.html
E-Mail link for SUSE-SU-2023:2956-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1211419
SUSE Bug 1211419
https://www.suse.com/security/cve/CVE-2023-2603/
SUSE CVE CVE-2023-2603 page

Описание

A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.

Затронутые продукты

Container caasp/v4/cilium-operator:1.6.6:libcap2-2.26-150000.4.9.1

Container caasp/v4/cilium:1.6.6:libcap2-2.26-150000.4.9.1

Container ses/7.1/ceph/grafana:latest:libcap2-2.26-150000.4.9.1

Container ses/7.1/ceph/haproxy:latest:libcap2-2.26-150000.4.9.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-2603.html
CVE-2023-2603
https://bugzilla.suse.com/1211419
SUSE Bug 1211419

SUSE-SU-2023:2956-1

Описание

Список пакетов

Container caasp/v4/cilium-operator:1.6.6

Container caasp/v4/cilium:1.6.6

Container ses/7.1/ceph/grafana:latest

Container ses/7.1/ceph/haproxy:latest

Container ses/7.1/ceph/keepalived:latest

Container ses/7.1/ceph/prometheus-alertmanager:latest

Container ses/7.1/ceph/prometheus-node-exporter:latest

Container ses/7.1/ceph/prometheus-server:latest

Container ses/7.1/ceph/prometheus-snmp_notifier:latest

Container ses/7.1/cephcsi/cephcsi:latest

Container ses/7.1/cephcsi/csi-attacher:v4.1.0

Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0

Container ses/7.1/cephcsi/csi-provisioner:v3.4.0

Container ses/7.1/cephcsi/csi-resizer:v1.7.0

Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1

Container ses/7.1/rook/ceph:latest

Container suse/ltss/sle15.3/bci-base-fips:latest

Container suse/ltss/sle15.3/bci-base:latest

Container suse/sle-micro-rancher/5.2:latest

Container suse/sle-micro/5.1/toolbox:latest

Container suse/sle-micro/5.2/toolbox:latest

Container suse/sle15:15.1

Container suse/sle15:15.2

Container suse/sle15:15.3

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-BYOS-Azure

Image SLES15-SP2-HPC-BYOS-Azure

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

Image SLES15-SP3-BYOS-Azure

Image SLES15-SP3-BYOS-EC2-HVM

Image SLES15-SP3-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-Aliyun

Image SLES15-SP3-CHOST-BYOS-Azure

Image SLES15-SP3-CHOST-BYOS-EC2

Image SLES15-SP3-CHOST-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

Image SLES15-SP3-HPC-BYOS-Azure

Image SLES15-SP3-HPC-BYOS-EC2-HVM

Image SLES15-SP3-HPC-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-Micro-5-1-BYOS-Azure

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-1-BYOS-GCE

Image SLES15-SP3-Micro-5-2-BYOS-Azure

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-2-BYOS-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Linux Enterprise Micro 5.1

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Real Time 15 SP3

SUSE Manager Proxy 4.2

SUSE Manager Server 4.2

openSUSE Leap 15.4

Ссылки

Уязвимость: CVE-2023-2603

Описание

Затронутые продукты