Security update for CaaS Platform 1.0 images SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:2470-1 Final 1 1 2017-09-14T13:24:48Z current 2017-09-14T13:24:48Z 2017-09-14T13:24:48Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for CaaS Platform 1.0 images The Docker images provided with SUSE CaaS Platform 1.0 have been updated to include the following updates: libzypp: - CVE-2017-7435, CVE-2017-7436, CVE-2017-9269: Fix GPG check workflows, mainly for unsigned repositories and packages. (bsc#1045735, bsc#1038984) - Fix gpg-pubkey release (creation time) computation. (bsc#1036659) - Update lsof blacklist. (bsc#1046417) - Re-probe on refresh if the repository type changes. (bsc#1048315) - Propagate proper error code to DownloadProgressReport. (bsc#1047785) - Allow to trigger an appdata refresh unconditionally. (bsc#1009745) - Support custom repo variables defined in /etc/zypp/vars.d. - Adapt loop mounting of ISO images. (bsc#1038132, bsc#1033236) - Fix potential crash if repository has no baseurl. (bsc#1043218) zypper: - CVE-2017-7436: Adapt download callback to report and handle unsigned packages. (bsc#1038984) - Report missing/optional files as 'not found' rather than 'error'. (bsc#1047785) - Document support for custom repository variables defined in /etc/zypp/vars.d. - Emphasize that it depends on how fast PackageKit will respond to a 'quit' request sent if PK blocks package management. libgcrypt: - Fix infinite loop in gnome-keyring-daemon caused by attempt to read from random device left open by libgcrypt. (bsc#1043333) - Avoid seeding the DRBG during FIPS power-up selftests. (bsc#1046659) - Fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping some of the tests. (bsc#1046659) - dlsym returns PLT address on s390x, dlopen libgcrypt20.so before calling dlsym. (bsc#1047008) lua51: - Add Lua(API) and Lua(devel) symbols to fix building of lua51-luasocket. (bsc#1051626) cyrus-sasl: - Fix unknown authentication mechanism: kerberos5 (bsc#1026825) - Really use SASLAUTHD_PARAMS variable (bsc#938657) - Make sure /usr/sbin/rcsaslauthd exists - Add /usr/sbin/rcsaslauthd symbolic link to /usr/sbin/service (bsc#1014471) - Silence 'GSSAPI client step 1' debug log message (bsc#1044840) libxml2: - CVE-2017-8872: Out-of-bounds read in htmlParseTryOrFinish. (bsc#1038444) curl: - CVE-2017-1000100: TFP sends more than buffer size and it could lead to a denial of service. (bsc#1051644) - CVE-2017-1000101: URL globbing out of bounds read could lead to a denial of service. (bsc#1051643) ncurses: - CVE-2017-11112: Illegal address access in append_acs. (bsc#1047964) - CVE-2017-11113: Dereferencing NULL pointer in _nc_parse_entry. (bsc#1047965) - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to avoid broken termcap format (bsc#1046853, bsc#1046858, bsc#1049344) sed: - Don't terminate with a segmentation fault if close of last file descriptor fails. (bsc#954661) openssl: - Remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE to address SWEET32 problem. (bsc#1027908) - Use getrandom syscall instead of reading from /dev/urandom to get at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14. (bsc#1027079 bsc#1044175) - Fix x86 extended feature detection (bsc#1029523) - Allow runtime switching of s390x capabilities via the 'OPENSSL_s390xcap' environmental variable. (bsc#1028723) - Add back certificate initialization set_cert_key_stuff() which was removed in a previous update. (bsc#1028281) - Fix a bug in XTS key handling. (bsc#1019637) - Don't run FIPS power-up self-tests when the checksum files aren't installed. (bsc#1042392) procps: - Don't set buffering on invalid file descriptor. (bsc#1053409) expat: - CVE-2016-9063: Possible integer overflow to fix inside XML_Parse leading to unexpected behaviour. (bsc#1047240) - CVE-2017-9233: External Entity Vulnerability could lead to denial of service. (bsc#1047236) systemd: - Revert fix for bsc#1004995 which could have caused boot failure on LVM (bsc#1048605) - compat-rules: drop the bogus 'import everything' rule (bsc#1046268) - core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (bsc#1045384 bsc#1047379) - udev/path_id: introduce support for NVMe devices (bsc#1045987) - compat-rules: Don't rely on ID_SERIAL when generating 'by-id' links for NVMe devices. (bsc#1048679) - fstab-generator: Handle NFS 'bg' mounts correctly. (bsc#874665, fate#323464) - timesyncd: Don't use compiled-in list if FallbackNTP has been configured explicitly. insserv-compat: - Add /etc/init.d hierarchy from former 'filesystem' package. (bsc#1035062) - Fix directory argument parsing. (bsc#944903) - Add perl(Getopt::Long) to list of requirements. mariadb: - Update libmysqlclient18 from version 10.0.30 to 10.0.31. python-pycrypto: - CVE-2013-7459: Fixed a potential heap buffer overflow in ALGnew (bsc#1017420). velum: - Fix loopback IP for proxy exception during initial configuration. (bsc#1052759) - Set secure flag in cookie. (bsc#1050484) - Set VERSION to 1.0.0. (bsc#1050396) - Allow kubeconfig download when master is ready. (bsc#1048483) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ Link for SUSE-SU-2017:2470-1 https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html E-Mail link for SUSE-SU-2017:2470-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1004995 SUSE Bug 1004995 https://bugzilla.suse.com/1009745 SUSE Bug 1009745 https://bugzilla.suse.com/1014471 SUSE Bug 1014471 https://bugzilla.suse.com/1017420 SUSE Bug 1017420 https://bugzilla.suse.com/1019637 SUSE Bug 1019637 https://bugzilla.suse.com/1026825 SUSE Bug 1026825 https://bugzilla.suse.com/1027079 SUSE Bug 1027079 https://bugzilla.suse.com/1027688 SUSE Bug 1027688 https://bugzilla.suse.com/1027908 SUSE Bug 1027908 https://bugzilla.suse.com/1028281 SUSE Bug 1028281 https://bugzilla.suse.com/1028723 SUSE Bug 1028723 https://bugzilla.suse.com/1029523 SUSE Bug 1029523 https://bugzilla.suse.com/1031756 SUSE Bug 1031756 https://bugzilla.suse.com/1032706 SUSE Bug 1032706 https://bugzilla.suse.com/1033236 SUSE Bug 1033236 https://bugzilla.suse.com/1035062 SUSE Bug 1035062 https://bugzilla.suse.com/1036659 SUSE Bug 1036659 https://bugzilla.suse.com/1038132 SUSE Bug 1038132 https://bugzilla.suse.com/1038444 SUSE Bug 1038444 https://bugzilla.suse.com/1038984 SUSE Bug 1038984 https://bugzilla.suse.com/1042392 SUSE Bug 1042392 https://bugzilla.suse.com/1043218 SUSE Bug 1043218 https://bugzilla.suse.com/1043333 SUSE Bug 1043333 https://bugzilla.suse.com/1044095 SUSE Bug 1044095 https://bugzilla.suse.com/1044107 SUSE Bug 1044107 https://bugzilla.suse.com/1044175 SUSE Bug 1044175 https://bugzilla.suse.com/1044840 SUSE Bug 1044840 https://bugzilla.suse.com/1045384 SUSE Bug 1045384 https://bugzilla.suse.com/1045735 SUSE Bug 1045735 https://bugzilla.suse.com/1045987 SUSE Bug 1045987 https://bugzilla.suse.com/1046268 SUSE Bug 1046268 https://bugzilla.suse.com/1046417 SUSE Bug 1046417 https://bugzilla.suse.com/1046659 SUSE Bug 1046659 https://bugzilla.suse.com/1046853 SUSE Bug 1046853 https://bugzilla.suse.com/1046858 SUSE Bug 1046858 https://bugzilla.suse.com/1047008 SUSE Bug 1047008 https://bugzilla.suse.com/1047236 SUSE Bug 1047236 https://bugzilla.suse.com/1047240 SUSE Bug 1047240 https://bugzilla.suse.com/1047310 SUSE Bug 1047310 https://bugzilla.suse.com/1047379 SUSE Bug 1047379 https://bugzilla.suse.com/1047785 SUSE Bug 1047785 https://bugzilla.suse.com/1047964 SUSE Bug 1047964 https://bugzilla.suse.com/1047965 SUSE Bug 1047965 https://bugzilla.suse.com/1048315 SUSE Bug 1048315 https://bugzilla.suse.com/1048483 SUSE Bug 1048483 https://bugzilla.suse.com/1048605 SUSE Bug 1048605 https://bugzilla.suse.com/1048679 SUSE Bug 1048679 https://bugzilla.suse.com/1048715 SUSE Bug 1048715 https://bugzilla.suse.com/1049344 SUSE Bug 1049344 https://bugzilla.suse.com/1050396 SUSE Bug 1050396 https://bugzilla.suse.com/1050484 SUSE Bug 1050484 https://bugzilla.suse.com/1051626 SUSE Bug 1051626 https://bugzilla.suse.com/1051643 SUSE Bug 1051643 https://bugzilla.suse.com/1051644 SUSE Bug 1051644 https://bugzilla.suse.com/1052030 SUSE Bug 1052030 https://bugzilla.suse.com/1052759 SUSE Bug 1052759 https://bugzilla.suse.com/1053409 SUSE Bug 1053409 https://bugzilla.suse.com/874665 SUSE Bug 874665 https://bugzilla.suse.com/902364 SUSE Bug 902364 https://bugzilla.suse.com/938657 SUSE Bug 938657 https://bugzilla.suse.com/944903 SUSE Bug 944903 https://bugzilla.suse.com/954661 SUSE Bug 954661 https://bugzilla.suse.com/960820 SUSE Bug 960820 https://bugzilla.suse.com/963041 SUSE Bug 963041 https://www.suse.com/security/cve/CVE-2013-7459/ SUSE CVE CVE-2013-7459 page https://www.suse.com/security/cve/CVE-2016-9063/ SUSE CVE CVE-2016-9063 page https://www.suse.com/security/cve/CVE-2017-1000100/ SUSE CVE CVE-2017-1000100 page https://www.suse.com/security/cve/CVE-2017-1000101/ SUSE CVE CVE-2017-1000101 page https://www.suse.com/security/cve/CVE-2017-10684/ SUSE CVE CVE-2017-10684 page https://www.suse.com/security/cve/CVE-2017-10685/ SUSE CVE CVE-2017-10685 page https://www.suse.com/security/cve/CVE-2017-11112/ SUSE CVE CVE-2017-11112 page https://www.suse.com/security/cve/CVE-2017-11113/ SUSE CVE CVE-2017-11113 page https://www.suse.com/security/cve/CVE-2017-3308/ SUSE CVE CVE-2017-3308 page https://www.suse.com/security/cve/CVE-2017-3309/ SUSE CVE CVE-2017-3309 page https://www.suse.com/security/cve/CVE-2017-3453/ SUSE CVE CVE-2017-3453 page https://www.suse.com/security/cve/CVE-2017-3456/ SUSE CVE CVE-2017-3456 page https://www.suse.com/security/cve/CVE-2017-3464/ SUSE CVE CVE-2017-3464 page https://www.suse.com/security/cve/CVE-2017-7435/ SUSE CVE CVE-2017-7435 page https://www.suse.com/security/cve/CVE-2017-7436/ SUSE CVE CVE-2017-7436 page https://www.suse.com/security/cve/CVE-2017-8872/ SUSE CVE CVE-2017-8872 page https://www.suse.com/security/cve/CVE-2017-9233/ SUSE CVE CVE-2017-9233 page https://www.suse.com/security/cve/CVE-2017-9269/ SUSE CVE CVE-2017-9269 page SUSE CaaS Platform ALL caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 sles12-mariadb-docker-image-1.1.0-2.3.10 sles12-pause-docker-image-1.1.0-2.3.11 sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 sles12-salt-api-docker-image-1.1.0-2.3.9 sles12-salt-master-docker-image-1.1.0-4.3.10 sles12-salt-minion-docker-image-1.1.0-2.3.8 sles12-velum-docker-image-1.1.0-4.3.9 caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 as a component of SUSE CaaS Platform ALL container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 as a component of SUSE CaaS Platform ALL sles12-mariadb-docker-image-1.1.0-2.3.10 as a component of SUSE CaaS Platform ALL sles12-pause-docker-image-1.1.0-2.3.11 as a component of SUSE CaaS Platform ALL sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 as a component of SUSE CaaS Platform ALL sles12-salt-api-docker-image-1.1.0-2.3.9 as a component of SUSE CaaS Platform ALL sles12-salt-master-docker-image-1.1.0-4.3.10 as a component of SUSE CaaS Platform ALL sles12-salt-minion-docker-image-1.1.0-2.3.8 as a component of SUSE CaaS Platform ALL sles12-velum-docker-image-1.1.0-4.3.9 as a component of SUSE CaaS Platform ALL Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py. CVE-2013-7459 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2013-7459.html CVE-2013-7459 https://bugzilla.suse.com/1017420 SUSE Bug 1017420 https://bugzilla.suse.com/1047666 SUSE Bug 1047666 https://bugzilla.suse.com/1087140 SUSE Bug 1087140 An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50. CVE-2016-9063 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 critical 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2016-9063.html CVE-2016-9063 https://bugzilla.suse.com/1009026 SUSE Bug 1009026 https://bugzilla.suse.com/1010424 SUSE Bug 1010424 https://bugzilla.suse.com/1047240 SUSE Bug 1047240 https://bugzilla.suse.com/1123115 SUSE Bug 1123115 When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl's redirect protocols with --proto-redir and libcurl's with CURLOPT_REDIR_PROTOCOLS. CVE-2017-1000100 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 1.5 AV:L/AC:M/Au:S/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-1000100.html CVE-2017-1000100 https://bugzilla.suse.com/1051644 SUSE Bug 1051644 curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`. CVE-2017-1000101 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-1000101.html CVE-2017-1000101 https://bugzilla.suse.com/1051643 SUSE Bug 1051643 In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack. CVE-2017-10684 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-10684.html CVE-2017-10684 https://bugzilla.suse.com/1046858 SUSE Bug 1046858 https://bugzilla.suse.com/1115932 SUSE Bug 1115932 https://bugzilla.suse.com/1175501 SUSE Bug 1175501 In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack. CVE-2017-10685 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-10685.html CVE-2017-10685 https://bugzilla.suse.com/1046853 SUSE Bug 1046853 https://bugzilla.suse.com/1115932 SUSE Bug 1115932 https://bugzilla.suse.com/1175501 SUSE Bug 1175501 In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data. CVE-2017-11112 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 4.1 AV:L/AC:M/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-11112.html CVE-2017-11112 https://bugzilla.suse.com/1046853 SUSE Bug 1046853 https://bugzilla.suse.com/1047964 SUSE Bug 1047964 https://bugzilla.suse.com/1175501 SUSE Bug 1175501 In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data. CVE-2017-11113 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 4.1 AV:L/AC:M/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-11113.html CVE-2017-11113 https://bugzilla.suse.com/1046853 SUSE Bug 1046853 https://bugzilla.suse.com/1047965 SUSE Bug 1047965 https://bugzilla.suse.com/1175501 SUSE Bug 1175501 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). CVE-2017-3308 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 2.1 AV:N/AC:H/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-3308.html CVE-2017-3308 https://bugzilla.suse.com/1034850 SUSE Bug 1034850 https://bugzilla.suse.com/1048715 SUSE Bug 1048715 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). CVE-2017-3309 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 2.1 AV:N/AC:H/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-3309.html CVE-2017-3309 https://bugzilla.suse.com/1034850 SUSE Bug 1034850 https://bugzilla.suse.com/1048715 SUSE Bug 1048715 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2017-3453 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 2.1 AV:N/AC:H/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-3453.html CVE-2017-3453 https://bugzilla.suse.com/1034850 SUSE Bug 1034850 https://bugzilla.suse.com/1048715 SUSE Bug 1048715 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2017-3456 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 2.1 AV:N/AC:H/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-3456.html CVE-2017-3456 https://bugzilla.suse.com/1034850 SUSE Bug 1034850 https://bugzilla.suse.com/1048715 SUSE Bug 1048715 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). CVE-2017-3464 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 2.1 AV:N/AC:H/Au:S/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-3464.html CVE-2017-3464 https://bugzilla.suse.com/1034850 SUSE Bug 1034850 https://bugzilla.suse.com/1048715 SUSE Bug 1048715 In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead to man in the middle or malicious servers to inject malicious RPM packages into a users system. CVE-2017-7435 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-7435.html CVE-2017-7435 https://bugzilla.suse.com/1009127 SUSE Bug 1009127 https://bugzilla.suse.com/1038984 SUSE Bug 1038984 https://bugzilla.suse.com/1045735 SUSE Bug 1045735 In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead to man in the middle or malicious servers to inject malicious RPM packages into a users system. CVE-2017-7436 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-7436.html CVE-2017-7436 https://bugzilla.suse.com/1008325 SUSE Bug 1008325 https://bugzilla.suse.com/1009127 SUSE Bug 1009127 https://bugzilla.suse.com/1038984 SUSE Bug 1038984 https://bugzilla.suse.com/1045735 SUSE Bug 1045735 The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure. CVE-2017-8872 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-8872.html CVE-2017-8872 https://bugzilla.suse.com/1038444 SUSE Bug 1038444 https://bugzilla.suse.com/1123919 SUSE Bug 1123919 XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD. CVE-2017-9233 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-9233.html CVE-2017-9233 https://bugzilla.suse.com/1030296 SUSE Bug 1030296 https://bugzilla.suse.com/1047236 SUSE Bug 1047236 https://bugzilla.suse.com/1073350 SUSE Bug 1073350 https://bugzilla.suse.com/1123115 SUSE Bug 1123115 https://bugzilla.suse.com/983216 SUSE Bug 983216 In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories with potential malicious content. CVE-2017-9269 SUSE CaaS Platform ALL:caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3 SUSE CaaS Platform ALL:container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3 SUSE CaaS Platform ALL:sles12-mariadb-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-pause-docker-image-1.1.0-2.3.11 SUSE CaaS Platform ALL:sles12-pv-recycler-node-docker-image-1.1.0-2.3.10 SUSE CaaS Platform ALL:sles12-salt-api-docker-image-1.1.0-2.3.9 SUSE CaaS Platform ALL:sles12-salt-master-docker-image-1.1.0-4.3.10 SUSE CaaS Platform ALL:sles12-salt-minion-docker-image-1.1.0-2.3.8 SUSE CaaS Platform ALL:sles12-velum-docker-image-1.1.0-4.3.9 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1/ https://www.suse.com/security/cve/CVE-2017-9269.html CVE-2017-9269 https://bugzilla.suse.com/1038984 SUSE Bug 1038984 https://bugzilla.suse.com/1045735 SUSE Bug 1045735