Описание
Security update for mdadm
This update for mdadm fixes the following issues:
- CVE-2023-28736: Fixed a buffer overflow (bsc#1214244).
- CVE-2023-28938: Fixed uncontrolled resource consumption (bsc#1214245).
Список пакетов
Image SLES12-SP5-Azure-SAP-BYOS
mdadm-4.1-4.29.1
Image SLES12-SP5-Azure-SAP-On-Demand
mdadm-4.1-4.29.1
Image SLES12-SP5-EC2-SAP-BYOS
mdadm-4.1-4.29.1
Image SLES12-SP5-EC2-SAP-On-Demand
mdadm-4.1-4.29.1
Image SLES12-SP5-GCE-SAP-BYOS
mdadm-4.1-4.29.1
Image SLES12-SP5-GCE-SAP-On-Demand
mdadm-4.1-4.29.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
mdadm-4.1-4.29.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
mdadm-4.1-4.29.1
SUSE Linux Enterprise Server 12 SP5
mdadm-4.1-4.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
mdadm-4.1-4.29.1
Ссылки
- Link for SUSE-SU-2023:3691-1
- E-Mail link for SUSE-SU-2023:3691-1
- SUSE Security Ratings
- SUSE Bug 1214244
- SUSE Bug 1214245
- SUSE Bug 1214974
- SUSE CVE CVE-2023-28736 page
- SUSE CVE CVE-2023-28938 page
Описание
Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access.
Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:mdadm-4.1-4.29.1
Image SLES12-SP5-Azure-SAP-On-Demand:mdadm-4.1-4.29.1
Image SLES12-SP5-EC2-SAP-BYOS:mdadm-4.1-4.29.1
Image SLES12-SP5-EC2-SAP-On-Demand:mdadm-4.1-4.29.1
Ссылки
- CVE-2023-28736
- SUSE Bug 1214244
Описание
Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of service via local access.
Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:mdadm-4.1-4.29.1
Image SLES12-SP5-Azure-SAP-On-Demand:mdadm-4.1-4.29.1
Image SLES12-SP5-EC2-SAP-BYOS:mdadm-4.1-4.29.1
Image SLES12-SP5-EC2-SAP-On-Demand:mdadm-4.1-4.29.1
Ссылки
- CVE-2023-28938
- SUSE Bug 1214245