SUSE-SU-2025:1549-1

Опубликовано: 14 мая 2025

Источник: suse-cvrf

Описание

Security update for apparmor

This update for apparmor fixes the following issues:

Add dac_read_search capability for unix_chkpwd to allow it to read the shadow file even if it has 000 permissions. This is needed after the CVE-2024-10041 fix in PAM. (bsc#1241678)

Список пакетов

Container suse/manager/4.3/proxy-httpd:latest

libapparmor1-3.0.4-150400.5.18.1

Container suse/sle-micro-rancher/5.3:latest

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Container suse/sle-micro-rancher/5.4:latest

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-BYOS

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-BYOS-Azure

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-BYOS-EC2

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-BYOS-GCE

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-CHOST-BYOS

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-CHOST-BYOS-Azure

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-CHOST-BYOS-EC2

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-CHOST-BYOS-GCE

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-HPC-BYOS

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-HPC-BYOS-Azure

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-HPC-BYOS-EC2

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-HPC-BYOS-GCE

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-HPC-EC2

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-HPC-GCE

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Hardened-BYOS

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Hardened-BYOS-Azure

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Hardened-BYOS-EC2

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Hardened-BYOS-GCE

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-3

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-3-BYOS

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-3-BYOS-Azure

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-3-BYOS-EC2

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-3-BYOS-GCE

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-3-EC2

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-4

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-4-BYOS

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-4-BYOS-Azure

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-4-BYOS-EC2

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-4-BYOS-GCE

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-4-EC2

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-Micro-5-4-GCE

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Azure

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-BYOS

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-BYOS-Azure

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-BYOS-EC2

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-BYOS-GCE

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-EC2

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-GCE

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Hardened

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Hardened-Azure

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Hardened-BYOS

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAP-Hardened-GCE

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAPCAL

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAPCAL-Azure

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAPCAL-EC2

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

Image SLES15-SP4-SAPCAL-GCE

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

apache2-mod_apparmor-3.0.4-150400.5.18.1

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-docs-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

apparmor-parser-lang-3.0.4-150400.5.18.1

apparmor-profiles-3.0.4-150400.5.18.1

apparmor-utils-3.0.4-150400.5.18.1

apparmor-utils-lang-3.0.4-150400.5.18.1

libapparmor-devel-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

libapparmor1-32bit-3.0.4-150400.5.18.1

pam_apparmor-3.0.4-150400.5.18.1

pam_apparmor-32bit-3.0.4-150400.5.18.1

perl-apparmor-3.0.4-150400.5.18.1

python3-apparmor-3.0.4-150400.5.18.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

apache2-mod_apparmor-3.0.4-150400.5.18.1

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-docs-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

apparmor-parser-lang-3.0.4-150400.5.18.1

apparmor-profiles-3.0.4-150400.5.18.1

apparmor-utils-3.0.4-150400.5.18.1

apparmor-utils-lang-3.0.4-150400.5.18.1

libapparmor-devel-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

libapparmor1-32bit-3.0.4-150400.5.18.1

pam_apparmor-3.0.4-150400.5.18.1

pam_apparmor-32bit-3.0.4-150400.5.18.1

perl-apparmor-3.0.4-150400.5.18.1

python3-apparmor-3.0.4-150400.5.18.1

SUSE Linux Enterprise Micro 5.3

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

pam_apparmor-3.0.4-150400.5.18.1

SUSE Linux Enterprise Micro 5.4

apparmor-parser-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

pam_apparmor-3.0.4-150400.5.18.1

SUSE Linux Enterprise Server 15 SP4-LTSS

apache2-mod_apparmor-3.0.4-150400.5.18.1

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-docs-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

apparmor-parser-lang-3.0.4-150400.5.18.1

apparmor-profiles-3.0.4-150400.5.18.1

apparmor-utils-3.0.4-150400.5.18.1

apparmor-utils-lang-3.0.4-150400.5.18.1

libapparmor-devel-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

libapparmor1-32bit-3.0.4-150400.5.18.1

pam_apparmor-3.0.4-150400.5.18.1

pam_apparmor-32bit-3.0.4-150400.5.18.1

perl-apparmor-3.0.4-150400.5.18.1

python3-apparmor-3.0.4-150400.5.18.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

apache2-mod_apparmor-3.0.4-150400.5.18.1

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-docs-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

apparmor-parser-lang-3.0.4-150400.5.18.1

apparmor-profiles-3.0.4-150400.5.18.1

apparmor-utils-3.0.4-150400.5.18.1

apparmor-utils-lang-3.0.4-150400.5.18.1

libapparmor-devel-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

libapparmor1-32bit-3.0.4-150400.5.18.1

pam_apparmor-3.0.4-150400.5.18.1

pam_apparmor-32bit-3.0.4-150400.5.18.1

perl-apparmor-3.0.4-150400.5.18.1

python3-apparmor-3.0.4-150400.5.18.1

SUSE Manager Proxy 4.3

apache2-mod_apparmor-3.0.4-150400.5.18.1

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-docs-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

apparmor-parser-lang-3.0.4-150400.5.18.1

apparmor-profiles-3.0.4-150400.5.18.1

apparmor-utils-3.0.4-150400.5.18.1

apparmor-utils-lang-3.0.4-150400.5.18.1

libapparmor-devel-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

libapparmor1-32bit-3.0.4-150400.5.18.1

pam_apparmor-3.0.4-150400.5.18.1

pam_apparmor-32bit-3.0.4-150400.5.18.1

python3-apparmor-3.0.4-150400.5.18.1

SUSE Manager Server 4.3

apache2-mod_apparmor-3.0.4-150400.5.18.1

apparmor-abstractions-3.0.4-150400.5.18.1

apparmor-docs-3.0.4-150400.5.18.1

apparmor-parser-3.0.4-150400.5.18.1

apparmor-parser-lang-3.0.4-150400.5.18.1

apparmor-profiles-3.0.4-150400.5.18.1

apparmor-utils-3.0.4-150400.5.18.1

apparmor-utils-lang-3.0.4-150400.5.18.1

libapparmor-devel-3.0.4-150400.5.18.1

libapparmor1-3.0.4-150400.5.18.1

libapparmor1-32bit-3.0.4-150400.5.18.1

pam_apparmor-3.0.4-150400.5.18.1

pam_apparmor-32bit-3.0.4-150400.5.18.1

python3-apparmor-3.0.4-150400.5.18.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20251549-1/
Link for SUSE-SU-2025:1549-1
https://lists.suse.com/pipermail/sle-updates/2025-May/039212.html
E-Mail link for SUSE-SU-2025:1549-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1241678
SUSE Bug 1241678
https://www.suse.com/security/cve/CVE-2024-10041/
SUSE CVE CVE-2024-10041 page

Описание

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.

Затронутые продукты

Container suse/manager/4.3/proxy-httpd:latest:libapparmor1-3.0.4-150400.5.18.1

Container suse/sle-micro-rancher/5.3:latest:apparmor-parser-3.0.4-150400.5.18.1

Container suse/sle-micro-rancher/5.3:latest:libapparmor1-3.0.4-150400.5.18.1

Container suse/sle-micro-rancher/5.4:latest:apparmor-parser-3.0.4-150400.5.18.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-10041.html
CVE-2024-10041
https://bugzilla.suse.com/1232234
SUSE Bug 1232234

SUSE-SU-2025:1549-1

Описание

Список пакетов

Container suse/manager/4.3/proxy-httpd:latest

Container suse/sle-micro-rancher/5.3:latest

Container suse/sle-micro-rancher/5.4:latest

Image SLES15-SP4-BYOS

Image SLES15-SP4-BYOS-Azure

Image SLES15-SP4-BYOS-EC2

Image SLES15-SP4-BYOS-GCE

Image SLES15-SP4-CHOST-BYOS

Image SLES15-SP4-CHOST-BYOS-Aliyun

Image SLES15-SP4-CHOST-BYOS-Azure

Image SLES15-SP4-CHOST-BYOS-EC2

Image SLES15-SP4-CHOST-BYOS-GCE

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

Image SLES15-SP4-HPC-BYOS

Image SLES15-SP4-HPC-BYOS-Azure

Image SLES15-SP4-HPC-BYOS-EC2

Image SLES15-SP4-HPC-BYOS-GCE

Image SLES15-SP4-HPC-EC2

Image SLES15-SP4-HPC-GCE

Image SLES15-SP4-Hardened-BYOS

Image SLES15-SP4-Hardened-BYOS-Azure

Image SLES15-SP4-Hardened-BYOS-EC2

Image SLES15-SP4-Hardened-BYOS-GCE

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

Image SLES15-SP4-Manager-Server-4-3-BYOS

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

Image SLES15-SP4-Micro-5-3

Image SLES15-SP4-Micro-5-3-BYOS

Image SLES15-SP4-Micro-5-3-BYOS-Azure

Image SLES15-SP4-Micro-5-3-BYOS-EC2

Image SLES15-SP4-Micro-5-3-BYOS-GCE

Image SLES15-SP4-Micro-5-3-EC2

Image SLES15-SP4-Micro-5-4

Image SLES15-SP4-Micro-5-4-BYOS

Image SLES15-SP4-Micro-5-4-BYOS-Azure

Image SLES15-SP4-Micro-5-4-BYOS-EC2

Image SLES15-SP4-Micro-5-4-BYOS-GCE

Image SLES15-SP4-Micro-5-4-EC2

Image SLES15-SP4-Micro-5-4-GCE

Image SLES15-SP4-SAP

Image SLES15-SP4-SAP-Azure

Image SLES15-SP4-SAP-Azure-LI-BYOS

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

Image SLES15-SP4-SAP-Azure-VLI-BYOS

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP4-SAP-BYOS

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-BYOS-GCE

Image SLES15-SP4-SAP-EC2

Image SLES15-SP4-SAP-GCE

Image SLES15-SP4-SAP-Hardened

Image SLES15-SP4-SAP-Hardened-Azure

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

Image SLES15-SP4-SAP-Hardened-GCE

Image SLES15-SP4-SAPCAL

Image SLES15-SP4-SAPCAL-Azure

Image SLES15-SP4-SAPCAL-EC2

Image SLES15-SP4-SAPCAL-GCE

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Manager Proxy 4.3

SUSE Manager Server 4.3

Ссылки

Уязвимость: CVE-2024-10041