Описание
Security update for suse-module-tools
This update for suse-module-tools fixes the following issues:
-
Update to version 15.5.3:
- CVE-2023-1829: Blacklisted the Linux kernel tcindex classifier module (bsc#1210335).
- CVE-2023-23559: Blacklisted the Linux kernel RNDIS modules (bsc#1205767, jsc#PED-5731).
Список пакетов
Container bci/bci-sle15-kernel-module-devel:15.5
suse-module-tools-15.5.3-150500.3.6.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest
suse-module-tools-15.5.3-150500.3.6.1
Container suse/sle-micro/5.5:latest
suse-module-tools-15.5.3-150500.3.6.1
Container suse/sle-micro/base-5.5:latest
suse-module-tools-15.5.3-150500.3.6.1
Container suse/sle-micro/kvm-5.5:latest
suse-module-tools-15.5.3-150500.3.6.1
Container suse/sle-micro/rt-5.5:latest
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Azure-3P
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Azure-Basic
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Azure-Standard
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-BYOS-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-BYOS-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-BYOS-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-CHOST-BYOS-Aliyun
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-CHOST-BYOS-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-CHOST-BYOS-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-CHOST-BYOS-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-CHOST-BYOS-GDC
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-CHOST-BYOS-SAP-CCloud
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-HPC-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-HPC-BYOS-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-HPC-BYOS-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-HPC-BYOS-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Hardened-BYOS-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Hardened-BYOS-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Hardened-BYOS-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Server-5-0
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Server-5-0-Azure-llc
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Server-5-0-Azure-ltd
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Server-5-0-BYOS
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Server-5-0-EC2-llc
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Manager-Server-5-0-EC2-ltd
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Micro-5-5
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Micro-5-5-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Micro-5-5-BYOS
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Micro-5-5-BYOS-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Micro-5-5-BYOS-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Micro-5-5-BYOS-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Micro-5-5-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-Micro-5-5-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-Azure-3P
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-Azure-LI-BYOS
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-BYOS-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-BYOS-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-BYOS-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-Hardened-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAP-Hardened-GCE
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAPCAL-Azure
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAPCAL-EC2
suse-module-tools-15.5.3-150500.3.6.1
Image SLES15-SP5-SAPCAL-GCE
suse-module-tools-15.5.3-150500.3.6.1
SUSE Linux Enterprise Micro 5.5
suse-module-tools-15.5.3-150500.3.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
suse-module-tools-15.5.3-150500.3.6.1
Ссылки
- Link for SUSE-SU-2023:4136-1
- E-Mail link for SUSE-SU-2023:4136-1
- SUSE Security Ratings
- SUSE Bug 1205767
- SUSE Bug 1210335
- SUSE CVE CVE-2023-1829 page
- SUSE CVE CVE-2023-23559 page
Описание
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28.
Затронутые продукты
Container bci/bci-sle15-kernel-module-devel:15.5:suse-module-tools-15.5.3-150500.3.6.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:suse-module-tools-15.5.3-150500.3.6.1
Container suse/sle-micro/5.5:latest:suse-module-tools-15.5.3-150500.3.6.1
Container suse/sle-micro/base-5.5:latest:suse-module-tools-15.5.3-150500.3.6.1
Ссылки
- CVE-2023-1829
- SUSE Bug 1210335
- SUSE Bug 1210619
- SUSE Bug 1217444
- SUSE Bug 1217531
- SUSE Bug 1220886
- SUSE Bug 1228311
Описание
In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.
Затронутые продукты
Container bci/bci-sle15-kernel-module-devel:15.5:suse-module-tools-15.5.3-150500.3.6.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:suse-module-tools-15.5.3-150500.3.6.1
Container suse/sle-micro/5.5:latest:suse-module-tools-15.5.3-150500.3.6.1
Container suse/sle-micro/base-5.5:latest:suse-module-tools-15.5.3-150500.3.6.1
Ссылки
- CVE-2023-23559
- SUSE Bug 1207051