SUSE-SU-2024:2808-1

Опубликовано: 07 авг. 2024

Источник: suse-cvrf

Описание

Security update for shadow

This update for shadow fixes the following issues:

Fixed not copying of skel files (bsc#1228770)

Список пакетов

Container bci/bci-init:15.7

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/bci-init:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/bci-sle15-kernel-module-devel:15.7

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/bci-sle15-kernel-module-devel:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/kiwi:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/node:22

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/nodejs:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/openjdk-devel:17

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/openjdk-devel:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/php-apache:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/php-fpm:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/ruby:3

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/ruby:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/spack:0.23

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container bci/spack:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container containers/apache-tomcat:10.1-openjdk11

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container containers/apache-tomcat:10.1-openjdk17

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container containers/apache-tomcat:10.1-openjdk21

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container containers/apache-tomcat:9-openjdk11

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container containers/apache-tomcat:9-openjdk17

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container containers/apache-tomcat:9-openjdk21

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container containers/apache-tomcat:9-openjdk8

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container containers/milvus:2.4

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container containers/ollama:0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container containers/open-webui:0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/389-ds:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/manager/5.0/x86_64/proxy-httpd:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/manager/5.0/x86_64/proxy-salt-broker:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/manager/5.0/x86_64/proxy-squid:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/manager/5.0/x86_64/proxy-ssh:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/manager/5.0/x86_64/server-migration-14-16:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/manager/5.0/x86_64/server:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/mariadb-client:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/mariadb:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/nginx:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/pcp:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/postgres:16

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/postgres:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/registry:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/rmt-server:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sle15:15.6

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sle15:15.7

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/cdi-apiserver:1.58.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/cdi-cloner:1.58.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/cdi-controller:1.58.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/cdi-importer:1.58.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/cdi-operator:1.58.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/cdi-uploadproxy:1.58.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/cdi-uploadserver:1.58.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/libguestfs-tools:1.4.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/virt-api:1.4.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/virt-controller:1.4.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/virt-exportproxy:1.4.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/virt-exportserver:1.4.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/virt-handler:1.4.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/virt-launcher:1.4.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/sles/15.7/virt-operator:1.4.0

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container suse/stunnel:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container trento/trento-wanda:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Container trento/trento-web:latest

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-Azure-Basic

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-Azure-Standard

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-BYOS

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-BYOS-Azure

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-BYOS-EC2

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-BYOS-GCE

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-CHOST-BYOS

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-CHOST-BYOS-Azure

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-CHOST-BYOS-EC2

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-CHOST-BYOS-GCE

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-CHOST-BYOS-GDC

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-EC2

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-EC2-ECS-HVM

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-GCE

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-HPC

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-HPC-Azure

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-HPC-BYOS

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-HPC-BYOS-Azure

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-HPC-BYOS-EC2

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-HPC-BYOS-GCE

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-HPC-EC2

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-HPC-GCE

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-Hardened-BYOS

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-Hardened-BYOS-Azure

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-Hardened-BYOS-EC2

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-Hardened-BYOS-GCE

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Azure

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-BYOS

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-BYOS-Azure

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-BYOS-EC2

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-BYOS-GCE

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-EC2

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-GCE

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Hardened

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Hardened-Azure

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Hardened-BYOS

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Hardened-EC2

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAP-Hardened-GCE

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAPCAL

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAPCAL-Azure

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAPCAL-EC2

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image SLES15-SP6-SAPCAL-GCE

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image proxy-httpd-image

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image proxy-salt-broker-image

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image proxy-squid-image

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image proxy-ssh-image

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image server-hub-xmlrpc-api-image

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image server-image

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image server-migration-14-16-image

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Image tomcat_15_6

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

openSUSE Leap 15.6

login_defs-4.8.1-150600.17.6.1

shadow-4.8.1-150600.17.6.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20242808-1/
Link for SUSE-SU-2024:2808-1
https://lists.suse.com/pipermail/sle-updates/2024-August/036348.html
E-Mail link for SUSE-SU-2024:2808-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1228770
SUSE Bug 1228770
https://www.suse.com/security/cve/CVE-2013-4235/
SUSE CVE CVE-2013-4235 page

Описание

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

Затронутые продукты

Container bci/bci-init:15.7:login_defs-4.8.1-150600.17.6.1

Container bci/bci-init:15.7:shadow-4.8.1-150600.17.6.1

Container bci/bci-init:latest:login_defs-4.8.1-150600.17.6.1

Container bci/bci-init:latest:shadow-4.8.1-150600.17.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2013-4235.html
CVE-2013-4235
https://bugzilla.suse.com/916845
SUSE Bug 916845