SUSE-SU-2025:1381-1

Опубликовано: 28 апр. 2025

Источник: suse-cvrf

Описание

Security update for cifs-utils

This update for cifs-utils fixes the following issues:

CVE-2025-2312: Fixed cifs.upcall making an upcall to the wrong namespace in containerized environments while trying to get Kerberos credentials (bsc#1239680)

Список пакетов

Image SLES15-SP4-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-CHOST-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-CHOST-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-CHOST-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-CHOST-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-HPC-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-HPC-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-HPC-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-HPC-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-HPC-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-HPC-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Hardened-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Hardened-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Hardened-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Hardened-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Hardened

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Hardened-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Hardened-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAP-Hardened-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAPCAL

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAPCAL-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAPCAL-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-SAPCAL-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-Azure-3P

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-Azure-Basic

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-Azure-Standard

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-CHOST-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-CHOST-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-CHOST-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-CHOST-BYOS-GDC

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-HPC-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-HPC-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-HPC-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-HPC-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-Hardened-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-Hardened-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-Hardened-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-Azure-3P

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-Hardened-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAP-Hardened-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAPCAL-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAPCAL-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP5-SAPCAL-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-Azure-3P

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-Azure-Basic

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-Azure-Standard

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-CHOST-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-CHOST-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-CHOST-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-CHOST-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-CHOST-BYOS-GDC

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-EC2-ECS-HVM

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-HPC

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-HPC-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-HPC-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-HPC-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-HPC-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-HPC-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-HPC-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-HPC-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-Hardened-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-Hardened-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-Hardened-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-Hardened-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Azure-3P

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Hardened

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Hardened-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Hardened-BYOS

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Hardened-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAP-Hardened-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAPCAL

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAPCAL-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAPCAL-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP6-SAPCAL-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-Azure-3P

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-Azure-Basic

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-Azure-Standard

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-CHOST-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-CHOST-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-CHOST-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-CHOST-BYOS-GDC

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-EC2-ECS-HVM

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-GCE-3P

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-HPC-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-HPC-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-HPC-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-HPC-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-Hardened-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-Hardened-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-Hardened-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-Azure-3P

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-GCE-3P

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-Hardened-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAP-Hardened-GCE

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAPCAL-Azure

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAPCAL-EC2

cifs-utils-6.15-150400.3.12.1

Image SLES15-SP7-SAPCAL-GCE

cifs-utils-6.15-150400.3.12.1

SUSE Linux Enterprise Micro 5.3

cifs-utils-6.15-150400.3.12.1

SUSE Linux Enterprise Micro 5.4

cifs-utils-6.15-150400.3.12.1

SUSE Linux Enterprise Micro 5.5

cifs-utils-6.15-150400.3.12.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

cifs-utils-6.15-150400.3.12.1

cifs-utils-devel-6.15-150400.3.12.1

openSUSE Leap 15.6

cifs-utils-6.15-150400.3.12.1

cifs-utils-devel-6.15-150400.3.12.1

pam_cifscreds-6.15-150400.3.12.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20251381-1/
Link for SUSE-SU-2025:1381-1
https://lists.suse.com/pipermail/sle-updates/2025-April/039091.html
E-Mail link for SUSE-SU-2025:1381-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1239680
SUSE Bug 1239680
https://www.suse.com/security/cve/CVE-2025-2312/
SUSE CVE CVE-2025-2312 page

Описание

A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache.

Затронутые продукты

Image SLES15-SP4-BYOS-Azure:cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-BYOS-EC2:cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-BYOS-GCE:cifs-utils-6.15-150400.3.12.1

Image SLES15-SP4-BYOS:cifs-utils-6.15-150400.3.12.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-2312.html
CVE-2025-2312
https://bugzilla.suse.com/1239680
SUSE Bug 1239680