SUSE-SU-2023:4225-1

Опубликовано: 27 окт. 2023

Источник: suse-cvrf

Описание

Security update for zchunk

This update for zchunk fixes the following issues:

CVE-2023-46228: Fixed a handle overflow errors in malformed zchunk files. (bsc#1216268)

Список пакетов

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

libzck1-1.1.16-150400.3.7.1

Container suse/ltss/sle15.4/bci-base:latest

libzck1-1.1.16-150400.3.7.1

Container suse/ltss/sle15.5/sle15:latest

libzck1-1.1.16-150400.3.7.1

Container suse/manager/4.3/proxy-httpd:latest

libzck1-1.1.16-150400.3.7.1

Container suse/manager/4.3/proxy-salt-broker:latest

libzck1-1.1.16-150400.3.7.1

Container suse/sle-micro-rancher/5.3:latest

libzck1-1.1.16-150400.3.7.1

Container suse/sle-micro-rancher/5.4:latest

libzck1-1.1.16-150400.3.7.1

Container suse/sle-micro/5.3/toolbox:latest

libzck1-1.1.16-150400.3.7.1

Container suse/sle-micro/5.4/toolbox:latest

libzck1-1.1.16-150400.3.7.1

Container suse/sle-micro/5.5/toolbox:latest

libzck1-1.1.16-150400.3.7.1

Container suse/sle-micro/base-5.5:latest

libzck1-1.1.16-150400.3.7.1

Container suse/sle15:15.4

libzck1-1.1.16-150400.3.7.1

Container suse/sle15:15.5

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-CHOST-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-CHOST-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-CHOST-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-CHOST-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-HPC-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-HPC-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-HPC-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-HPC-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-HPC-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-HPC-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Hardened-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Hardened-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Hardened-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Hardened-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Server-4-3

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-3

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-3-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-3-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-3-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-3-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-3-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-4

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-4-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-4-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-4-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-4-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-4-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-Micro-5-4-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Hardened

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Hardened-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Hardened-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAP-Hardened-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAPCAL

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAPCAL-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAPCAL-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SAPCAL-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Azure-3P

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Azure-Basic

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Azure-Standard

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-CHOST-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-CHOST-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-CHOST-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-CHOST-BYOS-GDC

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-HPC-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-HPC-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-HPC-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-HPC-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Hardened-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Hardened-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Hardened-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Server-5-0

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Server-5-0-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Micro-5-5

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Micro-5-5-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Micro-5-5-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Micro-5-5-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Micro-5-5-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-Micro-5-5-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-Azure-3P

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-Hardened-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAP-Hardened-GCE

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAPCAL-Azure

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAPCAL-EC2

libzck1-1.1.16-150400.3.7.1

Image SLES15-SP5-SAPCAL-GCE

libzck1-1.1.16-150400.3.7.1

SUSE Linux Enterprise Installer Updates 15 SP4

libzck1-1.1.16-150400.3.7.1

SUSE Linux Enterprise Micro 5.3

libzck-devel-1.1.16-150400.3.7.1

libzck1-1.1.16-150400.3.7.1

zchunk-1.1.16-150400.3.7.1

SUSE Linux Enterprise Micro 5.4

libzck1-1.1.16-150400.3.7.1

SUSE Linux Enterprise Micro 5.5

libzck1-1.1.16-150400.3.7.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

libzck-devel-1.1.16-150400.3.7.1

libzck1-1.1.16-150400.3.7.1

zchunk-1.1.16-150400.3.7.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

libzck-devel-1.1.16-150400.3.7.1

libzck1-1.1.16-150400.3.7.1

zchunk-1.1.16-150400.3.7.1

SUSE Linux Enterprise Module for Package Hub 15 SP5

libzck-devel-1.1.16-150400.3.7.1

openSUSE Leap 15.4

libzck-devel-1.1.16-150400.3.7.1

libzck1-1.1.16-150400.3.7.1

zchunk-1.1.16-150400.3.7.1

openSUSE Leap 15.5

libzck-devel-1.1.16-150400.3.7.1

libzck1-1.1.16-150400.3.7.1

zchunk-1.1.16-150400.3.7.1

openSUSE Leap Micro 5.3

libzck-devel-1.1.16-150400.3.7.1

libzck1-1.1.16-150400.3.7.1

zchunk-1.1.16-150400.3.7.1

openSUSE Leap Micro 5.4

libzck1-1.1.16-150400.3.7.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20234225-1/
Link for SUSE-SU-2023:4225-1
https://lists.suse.com/pipermail/sle-security-updates/2023-October/016891.html
E-Mail link for SUSE-SU-2023:4225-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1216268
SUSE Bug 1216268
https://www.suse.com/security/cve/CVE-2023-46228/
SUSE CVE CVE-2023-46228 page

Описание

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c.

Затронутые продукты

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:libzck1-1.1.16-150400.3.7.1

Container suse/ltss/sle15.4/bci-base:latest:libzck1-1.1.16-150400.3.7.1

Container suse/ltss/sle15.5/sle15:latest:libzck1-1.1.16-150400.3.7.1

Container suse/manager/4.3/proxy-httpd:latest:libzck1-1.1.16-150400.3.7.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-46228.html
CVE-2023-46228
https://bugzilla.suse.com/1216268
SUSE Bug 1216268