SUSE-IU-2022:661-1 SUSE Image security@suse.de SUSE Security Team SUSE Image SUSE-IU-2022:661-1 Interim 1 1 2023-01-20T08:29:02Z current 2022-06-02T01:00:00Z 2022-06-02T01:00:00Z cve-database/bin/generate-cvrf-publiccloud.pl 2021-02-18T01:00:00Z Image update for SUSE-IU-2022:661-1 / google/sles-15-sp3-sap-v20220602-x86-64 This image update for google/sles-15-sp3-sap-v20220602-x86-64 contains the following changes: Package NetworkManager was updated: - Add 0001-supplicant-interface-Match-more-ciphers-to-determine.patch: supplicant/interface: Match more ciphers todetermine AP security (glfo#NetworkManager/NetworkManager/commit/e0191320, bsc#1198381); Package cups was updated: - cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691 cups: authentication bypass and code execution (bsc#1199474) Package curl was updated: - Securiy fix: [bsc#1199223, CVE-2022-27781] * CERTINFO never-ending busy-loop * Add curl-CVE-2022-27781.patch - Securiy fix: [bsc#1199224, CVE-2022-27782] * TLS and SSH connection too eager reuse * Add curl-CVE-2022-27782.patch Package dhcp was updated: Package firewalld was updated: - Fix regression introduced in previous patch (an api change to a function also needed backporting) (bsc#1198814) * feature-upstream-new-check-config-1.patch * feature-upstream-new-check-config-2.patch Package fribidi was updated: - Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147 CVE-2022-25308). - Add fribidi-CVE-2022-25309.patch: protect against garbage in the CapRTL encoder (boo#1196148 CVE-2022-25309). - Add fribidi-CVE-2022-25310.patch: fix a SEGV in fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310). Package glibc was updated: Package grep was updated: Package libtirpc was updated: - check for nullpointer in check_address (bsc#1198176) update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch Package nftables was updated: - add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare crashes that could occur e.g. in firewalld (bsc#1197606). Package pcre2 was updated: - Added pcre2-10.31-bsc1199232-unicode-property-matching.patch * bsc#1199232 / CVE-2022-1586 * Fixes unicode property matching issue Package perl-XML-LibXML was updated: - (bsc#1197798) FTBFS: compile against latest version available of libxml in SP4 so perl-XML-LibXSLT compiles cleanly. Package suse-build-key was updated: - still ship the old ptf key (was not added to documentation by mistake). (bsc#1198504) Package tiff was updated: - security update * CVE-2022-0561 [bsc#1195964] + tiff-CVE-2022-0561.patch * CVE-2022-0562 [bsc#1195965] + tiff-CVE-2022-0562.patch * CVE-2022-0865 [bsc#1197066] + tiff-CVE-2022-0865.patch * CVE-2022-0909 [bsc#1197072] + tiff-CVE-2022-0909.patch * CVE-2022-0924 [bsc#1197073] + tiff-CVE-2022-0924.patch * CVE-2022-0908 [bsc#1197074] + tiff-CVE-2022-0908.patch - security update * CVE-2022-1056 [bsc#1197631] * CVE-2022-0891 [bsc#1197068] + tiff-CVE-2022-1056,CVE-2022-0891.patch The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://publiccloudimagechangeinfo.suse.com/google/sles-15-sp3-sap-v20220602-x86-64/ Public Cloud Image Info https://www.suse.com/support/security/rating/ SUSE Security Ratings Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 cups-config-2.2.7-150000.3.32.1 curl-7.66.0-150200.4.33.1 dhcp-4.3.6.P1-150000.6.14.1 dhcp-client-4.3.6.P1-150000.6.14.1 firewall-macros-0.9.3-150300.3.9.1 firewalld-0.9.3-150300.3.9.1 glibc-2.31-150300.26.5 glibc-i18ndata-2.31-150300.26.5 glibc-locale-2.31-150300.26.5 glibc-locale-base-2.31-150300.26.5 grep-3.1-150000.4.6.1 libcups2-2.2.7-150000.3.32.1 libcurl4-7.66.0-150200.4.33.1 libfribidi0-1.0.5-150200.3.6.1 libnftables1-0.9.8-150300.3.3.1 libnm0-1.22.10-150200.3.18.1 libpcre2-16-0-10.31-150000.3.7.1 libpcre2-8-0-10.31-150000.3.7.1 libtiff5-4.0.9-150000.45.8.1 libtirpc-netconfig-1.2.6-150300.3.6.1 libtirpc3-1.2.6-150300.3.6.1 nftables-0.9.8-150300.3.3.1 nscd-2.31-150300.26.5 perl-XML-LibXML-2.0132-150000.3.3.1 python3-firewall-0.9.3-150300.3.9.1 python3-nftables-0.9.8-150300.3.3.1 sle-module-legacy-release-15.3-150300.122.3.1 suse-build-key-12.0-150000.8.25.1 typelib-1_0-NM-1_0-1.22.10-150200.3.18.1 cups-config-2.2.7-150000.3.32.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 curl-7.66.0-150200.4.33.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 dhcp-4.3.6.P1-150000.6.14.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 dhcp-client-4.3.6.P1-150000.6.14.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 firewall-macros-0.9.3-150300.3.9.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 firewalld-0.9.3-150300.3.9.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 glibc-2.31-150300.26.5 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 glibc-i18ndata-2.31-150300.26.5 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 glibc-locale-2.31-150300.26.5 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 glibc-locale-base-2.31-150300.26.5 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 grep-3.1-150000.4.6.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 libcups2-2.2.7-150000.3.32.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 libcurl4-7.66.0-150200.4.33.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 libfribidi0-1.0.5-150200.3.6.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 libnftables1-0.9.8-150300.3.3.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 libnm0-1.22.10-150200.3.18.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 libpcre2-16-0-10.31-150000.3.7.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 libpcre2-8-0-10.31-150000.3.7.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 libtiff5-4.0.9-150000.45.8.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 libtirpc-netconfig-1.2.6-150300.3.6.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 libtirpc3-1.2.6-150300.3.6.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 nftables-0.9.8-150300.3.3.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 nscd-2.31-150300.26.5 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 perl-XML-LibXML-2.0132-150000.3.3.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 python3-firewall-0.9.3-150300.3.9.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 python3-nftables-0.9.8-150300.3.3.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 sle-module-legacy-release-15.3-150300.122.3.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 suse-build-key-12.0-150000.8.25.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 typelib-1_0-NM-1_0-1.22.10-150200.3.18.1 as a component of Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64 Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712. CVE-2022-0561 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c. CVE-2022-0562 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045. CVE-2022-0865 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact CVE-2022-0891 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 important 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file. CVE-2022-0908 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa. CVE-2022-0909 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4. CVE-2022-0924 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd. CVE-2022-1056 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT. CVE-2022-1586 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libpcre2-16-0-10.31-150000.3.7.1 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libpcre2-8-0-10.31-150000.3.7.1 important 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service. CVE-2022-25308 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libfribidi0-1.0.5-150200.3.6.1 moderate A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service. CVE-2022-25309 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libfribidi0-1.0.5-150200.3.6.1 moderate A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service. CVE-2022-25310 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libfribidi0-1.0.5-150200.3.6.1 moderate A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges. CVE-2022-26691 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:cups-config-2.2.7-150000.3.32.1 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libcups2-2.2.7-150000.3.32.1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation. CVE-2022-27781 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:curl-7.66.0-150200.4.33.1 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libcurl4-7.66.0-150200.4.33.1 low 5 AV:N/AC:L/Au:N/C:N/I:N/A:P libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily. CVE-2022-27782 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:curl-7.66.0-150200.4.33.1 Public Cloud Image google/sles-15-sp3-sap-v20220602-x86-64:libcurl4-7.66.0-150200.4.33.1 important 5 AV:N/AC:L/Au:N/C:N/I:P/A:N