SUSE-SU-2023:4135-1

Опубликовано: 19 окт. 2023

Источник: suse-cvrf

Описание

Security update for suse-module-tools

This update for suse-module-tools fixes the following issues:

Updated to version 15.4.18:
- CVE-2023-1829: Blacklisted the Linux kernel tcindex classifier module (bsc#1210335).
- CVE-2023-23559: Blacklisted the Linux kernel RNDIS modules (bsc#1205767, jsc#PED-5731).

Список пакетов

Container rancher/elemental-teal-rt/5.4:latest

suse-module-tools-15.4.18-150400.3.14.1

Container rancher/elemental-teal/5.4:latest

suse-module-tools-15.4.18-150400.3.14.1

Container suse/sle-micro-rancher/5.3:latest

suse-module-tools-15.4.18-150400.3.14.1

Container suse/sle-micro-rancher/5.4:latest

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-BYOS-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-BYOS-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-BYOS-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-CHOST-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-CHOST-BYOS-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-CHOST-BYOS-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-CHOST-BYOS-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-HPC-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-HPC-BYOS-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-HPC-BYOS-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-HPC-BYOS-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-HPC-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-HPC-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Hardened-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Hardened-BYOS-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Hardened-BYOS-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Hardened-BYOS-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Server-4-3

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-3

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-3-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-3-BYOS-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-3-BYOS-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-3-BYOS-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-3-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-4

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-4-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-4-BYOS-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-4-BYOS-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-4-BYOS-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-4-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-Micro-5-4-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-BYOS-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-BYOS-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-BYOS-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Hardened

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Hardened-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Hardened-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAP-Hardened-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAPCAL

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAPCAL-Azure

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAPCAL-EC2

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SAPCAL-GCE

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS

suse-module-tools-15.4.18-150400.3.14.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2

suse-module-tools-15.4.18-150400.3.14.1

SUSE Linux Enterprise Micro 5.3

suse-module-tools-15.4.18-150400.3.14.1

SUSE Linux Enterprise Micro 5.4

suse-module-tools-15.4.18-150400.3.14.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

suse-module-tools-15.4.18-150400.3.14.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20234135-1/
Link for SUSE-SU-2023:4135-1
https://lists.suse.com/pipermail/sle-security-updates/2023-October/016758.html
E-Mail link for SUSE-SU-2023:4135-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1205767
SUSE Bug 1205767
https://bugzilla.suse.com/1210335
SUSE Bug 1210335
https://www.suse.com/security/cve/CVE-2023-1829/
SUSE CVE CVE-2023-1829 page
https://www.suse.com/security/cve/CVE-2023-23559/
SUSE CVE CVE-2023-23559 page

Описание

A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28.

Затронутые продукты

Container rancher/elemental-teal-rt/5.4:latest:suse-module-tools-15.4.18-150400.3.14.1

Container rancher/elemental-teal/5.4:latest:suse-module-tools-15.4.18-150400.3.14.1

Container suse/sle-micro-rancher/5.3:latest:suse-module-tools-15.4.18-150400.3.14.1

Container suse/sle-micro-rancher/5.4:latest:suse-module-tools-15.4.18-150400.3.14.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-1829.html
CVE-2023-1829
https://bugzilla.suse.com/1210335
SUSE Bug 1210335
https://bugzilla.suse.com/1210619
SUSE Bug 1210619
https://bugzilla.suse.com/1217444
SUSE Bug 1217444
https://bugzilla.suse.com/1217531
SUSE Bug 1217531
https://bugzilla.suse.com/1220886
SUSE Bug 1220886
https://bugzilla.suse.com/1228311
SUSE Bug 1228311

Описание

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

Затронутые продукты

Container rancher/elemental-teal-rt/5.4:latest:suse-module-tools-15.4.18-150400.3.14.1

Container rancher/elemental-teal/5.4:latest:suse-module-tools-15.4.18-150400.3.14.1

Container suse/sle-micro-rancher/5.3:latest:suse-module-tools-15.4.18-150400.3.14.1

Container suse/sle-micro-rancher/5.4:latest:suse-module-tools-15.4.18-150400.3.14.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-23559.html
CVE-2023-23559
https://bugzilla.suse.com/1207051
SUSE Bug 1207051