SUSE-SU-2025:0741-1

Опубликовано: 28 фев. 2025

Источник: suse-cvrf

Описание

Security update for procps

This update for procps fixes the following issues:

Integer overflow due to incomplete fix for CVE-2023-4016 can lead to segmentation fault in ps command when pid argument has a leading space (bsc#1236842, bsc#1214290).

Список пакетов

Container bci/gcc:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/golang:1.22-openssl

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/golang:1.23

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/golang:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/kiwi:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/node:22

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/nodejs:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/openjdk:17

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/openjdk:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/python:3

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/python:3.13

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/python:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/ruby:3

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container bci/ruby:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container containers/open-webui:0

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container containers/python:3.11

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container containers/python:3.9

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/ltss/sle15.3/bci-base:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/ltss/sle15.4/bci-base:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/ltss/sle15.5/sle15:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/manager/4.3/proxy-salt-broker:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/pcp:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/sle-micro-rancher/5.2:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/sle-micro-rancher/5.3:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/sle-micro-rancher/5.4:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/sle-micro/5.1/toolbox:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/sle-micro/5.2/toolbox:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/sle-micro/5.3/toolbox:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/sle-micro/5.4/toolbox:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/sle-micro/5.5/toolbox:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/sle-micro/5.5:latest

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Container suse/sles/15.7/virt-launcher:1.4.0

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP4-Micro-5-3

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP4-Micro-5-3-BYOS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP4-Micro-5-3-BYOS-EC2

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP4-Micro-5-3-EC2

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP4-Micro-5-4

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP4-Micro-5-4-BYOS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP4-Micro-5-4-BYOS-EC2

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP4-Micro-5-4-EC2

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP5-Azure-3P

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP5-Manager-Server-5-0

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP5-Manager-Server-5-0-BYOS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP5-SAP-Azure-3P

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP6-CHOST-BYOS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP6-CHOST-BYOS-Azure

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP6-CHOST-BYOS-EC2

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP6-CHOST-BYOS-GCE

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP6-CHOST-BYOS-GDC

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

Image python_15_6

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

SUSE Enterprise Storage 7.1

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise Micro 5.1

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

SUSE Linux Enterprise Micro 5.2

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

SUSE Linux Enterprise Micro 5.3

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

SUSE Linux Enterprise Micro 5.4

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

SUSE Linux Enterprise Micro 5.5

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise Server 15 SP5-LTSS

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Manager Proxy 4.3

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

SUSE Manager Server 4.3

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

openSUSE Leap 15.6

libprocps8-3.3.17-150000.7.42.1

procps-3.3.17-150000.7.42.1

procps-devel-3.3.17-150000.7.42.1

procps-lang-3.3.17-150000.7.42.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20250741-1/
Link for SUSE-SU-2025:0741-1
https://lists.suse.com/pipermail/sle-security-updates/2025-February/020453.html
E-Mail link for SUSE-SU-2025:0741-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1214290
SUSE Bug 1214290
https://bugzilla.suse.com/1236842
SUSE Bug 1236842
https://www.suse.com/security/cve/CVE-2023-4016/
SUSE CVE CVE-2023-4016 page

Описание

Under some circumstances, this weakness allows a user who has access to run the "ps" utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

Затронутые продукты

Container bci/gcc:latest:libprocps8-3.3.17-150000.7.42.1

Container bci/gcc:latest:procps-3.3.17-150000.7.42.1

Container bci/golang:1.22-openssl:libprocps8-3.3.17-150000.7.42.1

Container bci/golang:1.22-openssl:procps-3.3.17-150000.7.42.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-4016.html
CVE-2023-4016
https://bugzilla.suse.com/1214290
SUSE Bug 1214290