Security update for gpg2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0023-1 Final 1 1 2019-01-07T15:30:36Z current 2019-01-07T15:30:36Z 2019-01-07T15:30:36Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gpg2 This update for gpg2 fixes the following issue: Security issue fixed: - CVE-2018-1000858: Fixed a Cross Site Request Forgery(CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF (bsc#1120346). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/389-ds:1.4.2-2019-23,Container caasp/v4/busybox:1.34.1-2019-23,Container caasp/v4/caasp-dex:2.16.0-2019-23,Container caasp/v4/caaspctl-tooling:beta-2019-23,Container caasp/v4/cert-exporter:2.3.0-2019-23,Container caasp/v4/cilium-etcd-operator:2.0.5-2019-23,Container caasp/v4/cilium-init:1.5.3-2019-23,Container caasp/v4/cilium-operator:1.6.6-2019-23,Container caasp/v4/cilium:1.6.6-2019-23,Container caasp/v4/cloud-provider-openstack:1.15.0-2019-23,Container caasp/v4/configmap-reload:0.3.0-2019-23,Container caasp/v4/coredns:1.6.7-2019-23,Container caasp/v4/curl:7.60.0-2019-23,Container caasp/v4/etcd:3.4.13-2019-23,Container caasp/v4/gangway:3.1.0-2019-23,Container caasp/v4/grafana:7.5.12-2019-23,Container caasp/v4/helm-tiller:2.16.12-2019-23,Container caasp/v4/hyperkube:v1.17.17-2019-23,Container caasp/v4/k8s-sidecar:0.1.75-2019-23,Container caasp/v4/kube-state-metrics:1.9.3-2019-23,Container caasp/v4/kubernetes-client:1.17.17-2019-23,Container caasp/v4/kucero:1.3.0-2019-23,Container caasp/v4/kured:1.3.0-2019-23,Container caasp/v4/metrics-server:0.3.6-2019-23,Container caasp/v4/prometheus-alertmanager:0.16.2-2019-23,Container caasp/v4/prometheus-node-exporter:1.1.2-2019-23,Container caasp/v4/prometheus-pushgateway:0.6.0-2019-23,Container caasp/v4/prometheus-server:2.7.1-2019-23,Container caasp/v4/rsyslog:8.39.0-2019-23,Container caasp/v4/skuba-tooling:0.1.0-2019-23,Container caasp/v4/test-update:beta-2019-23,Container caasp/v4/velero-plugin-for-aws:1.0.1-2019-23,Container caasp/v4/velero-plugin-for-gcp:1.0.1-2019-23,Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1-2019-23,Container caasp/v4/velero-restic-restore-helper:1.3.1-2019-23,Container caasp/v4/velero:1.3.1-2019-23,Container ses/6/cephcsi/cephcsi:latest-2019-23,Container ses/6/rook/ceph:latest-2019-23,Container ses/7/ceph/ceph:latest-2019-23,Container ses/7/ceph/grafana:latest-2019-23,Container ses/7/ceph/prometheus-alertmanager:latest-2019-23,Container ses/7/ceph/prometheus-node-exporter:latest-2019-23,Container ses/7/ceph/prometheus-server:latest-2019-23,Container ses/7/cephcsi/cephcsi:latest-2019-23,Container ses/7/cephcsi/csi-attacher:v2.1.0-2019-23,Container ses/7/cephcsi/csi-attacher:v3.3.0-2019-23,Container ses/7/cephcsi/csi-livenessprobe:v1.1.0-2019-23,Container ses/7/cephcsi/csi-node-driver-registrar:v1.2.0-2019-23,Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0-2019-23,Container ses/7/cephcsi/csi-provisioner:v1.6.0-2019-23,Container ses/7/cephcsi/csi-provisioner:v3.0.0-2019-23,Container ses/7/cephcsi/csi-resizer:v0.4.0-2019-23,Container ses/7/cephcsi/csi-resizer:v1.3.0-2019-23,Container ses/7/cephcsi/csi-snapshotter:v2.1.0-2019-23,Container ses/7/cephcsi/csi-snapshotter:v2.1.1-2019-23,Container ses/7/cephcsi/csi-snapshotter:v4.2.0-2019-23,Container ses/7/prometheus-webhook-snmp:latest-2019-23,Container ses/7/rook/ceph:latest-2019-23,Container suse/sle-micro/5.0/toolbox:latest-2019-23,Container suse/sle15:15.0-2019-23,Container suse/sle15:15.1-2019-23,Container suse/sle15:15.2-2019-23,Image SLES15-Azure-BYOS-2019-23,Image SLES15-EC2-CHOST-HVM-BYOS-2019-23,Image SLES15-EC2-HVM-BYOS-2019-23,Image SLES15-GCE-BYOS-2019-23,Image SLES15-OCI-BYOS-2019-23,Image SLES15-SAP-Azure-2019-23,Image SLES15-SAP-Azure-BYOS-2019-23,Image SLES15-SAP-Azure-LI-BYOS-Production-2019-23,Image SLES15-SAP-Azure-VLI-BYOS-Production-2019-23,Image SLES15-SAP-EC2-HVM-2019-23,Image SLES15-SAP-EC2-HVM-BYOS-2019-23,Image SLES15-SAP-GCE-2019-23,Image SLES15-SAP-GCE-BYOS-2019-23,Image SLES15-SAP-OCI-BYOS-2019-23,Image SLES15-SP1-Azure-BYOS-2019-23,Image SLES15-SP1-Azure-HPC-BYOS-2019-23,Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM-2019-23,Image SLES15-SP1-CAP-Deployment-BYOS-GCE-2019-23,Image SLES15-SP1-CHOST-BYOS-Azure-2019-23,Image SLES15-SP1-CHOST-BYOS-EC2-2019-23,Image SLES15-SP1-CHOST-BYOS-GCE-2019-23,Image SLES15-SP1-EC2-HPC-HVM-BYOS-2019-23,Image SLES15-SP1-EC2-HVM-BYOS-2019-23,Image SLES15-SP1-GCE-BYOS-2019-23,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy-2019-23,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server-2019-23,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy-2019-23,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server-2019-23,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy-2019-23,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server-2019-23,Image SLES15-SP1-OCI-BYOS-2019-23,Image SLES15-SP1-SAP-Azure-2019-23,Image SLES15-SP1-SAP-Azure-BYOS-2019-23,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2019-23,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2019-23,Image SLES15-SP1-SAP-EC2-HVM-2019-23,Image SLES15-SP1-SAP-EC2-HVM-BYOS-2019-23,Image SLES15-SP1-SAP-GCE-2019-23,Image SLES15-SP1-SAP-GCE-BYOS-2019-23,Image SLES15-SP1-SAP-OCI-BYOS-2019-23,Image SLES15-SP1-SAPCAL-Azure-2019-23,Image SLES15-SP1-SAPCAL-EC2-HVM-2019-23,Image SLES15-SP1-SAPCAL-GCE-2019-23,Image SLES15-SP2-Azure-Basic-2019-23,Image SLES15-SP2-Azure-Standard-2019-23,Image SLES15-SP2-BYOS-Azure-2019-23,Image SLES15-SP2-BYOS-EC2-HVM-2019-23,Image SLES15-SP2-BYOS-GCE-2019-23,Image SLES15-SP2-CAP-Deployment-BYOS-Azure-2019-23,Image SLES15-SP2-CHOST-BYOS-Aliyun-2019-23,Image SLES15-SP2-CHOST-BYOS-Azure-2019-23,Image SLES15-SP2-CHOST-BYOS-EC2-2019-23,Image SLES15-SP2-CHOST-BYOS-GCE-2019-23,Image SLES15-SP2-EC2-ECS-HVM-2019-23,Image SLES15-SP2-EC2-HVM-2019-23,Image SLES15-SP2-GCE-2019-23,Image SLES15-SP2-HPC-Azure-2019-23,Image SLES15-SP2-HPC-BYOS-Azure-2019-23,Image SLES15-SP2-HPC-BYOS-EC2-HVM-2019-23,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure-2019-23,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM-2019-23,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE-2019-23,Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure-2019-23,Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM-2019-23,Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE-2019-23,Image SLES15-SP2-SAP-Azure-2019-23,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2019-23,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2019-23,Image SLES15-SP2-SAP-BYOS-Azure-2019-23,Image SLES15-SP2-SAP-BYOS-EC2-HVM-2019-23,Image SLES15-SP2-SAP-BYOS-GCE-2019-23,Image SLES15-SP2-SAP-EC2-HVM-2019-23,Image SLES15-SP2-SAP-GCE-2019-23,SUSE-2019-23,SUSE-SLE-Module-Basesystem-15-2019-23 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190023-1/ Link for SUSE-SU-2019:0023-1 https://lists.suse.com/pipermail/sle-security-updates/2019-January/005018.html E-Mail link for SUSE-SU-2019:0023-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1120346 SUSE Bug 1120346 https://www.suse.com/security/cve/CVE-2018-1000858/ SUSE CVE CVE-2018-1000858 page Container caasp/v4/389-ds:1.4.2 Container caasp/v4/busybox:1.34.1 Container caasp/v4/caasp-dex:2.16.0 Container caasp/v4/caaspctl-tooling:beta Container caasp/v4/cert-exporter:2.3.0 Container caasp/v4/cilium-etcd-operator:2.0.5 Container caasp/v4/cilium-init:1.5.3 Container caasp/v4/cilium-operator:1.6.6 Container caasp/v4/cilium:1.6.6 Container caasp/v4/cloud-provider-openstack:1.15.0 Container caasp/v4/configmap-reload:0.3.0 Container caasp/v4/coredns:1.6.7 Container caasp/v4/curl:7.60.0 Container caasp/v4/etcd:3.4.13 Container caasp/v4/gangway:3.1.0 Container caasp/v4/grafana:7.5.12 Container caasp/v4/helm-tiller:2.16.12 Container caasp/v4/hyperkube:v1.17.17 Container caasp/v4/k8s-sidecar:0.1.75 Container caasp/v4/kube-state-metrics:1.9.3 Container caasp/v4/kubernetes-client:1.17.17 Container caasp/v4/kucero:1.3.0 Container caasp/v4/kured:1.3.0 Container caasp/v4/metrics-server:0.3.6 Container caasp/v4/prometheus-alertmanager:0.16.2 Container caasp/v4/prometheus-node-exporter:1.1.2 Container caasp/v4/prometheus-pushgateway:0.6.0 Container caasp/v4/prometheus-server:2.7.1 Container caasp/v4/rsyslog:8.39.0 Container caasp/v4/skuba-tooling:0.1.0 Container caasp/v4/test-update:beta Container caasp/v4/velero-plugin-for-aws:1.0.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 Container caasp/v4/velero-restic-restore-helper:1.3.1 Container caasp/v4/velero:1.3.1 Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest Container ses/7/ceph/ceph:latest Container ses/7/ceph/grafana:latest Container ses/7/ceph/prometheus-alertmanager:latest Container ses/7/ceph/prometheus-node-exporter:latest Container ses/7/ceph/prometheus-server:latest Container ses/7/cephcsi/cephcsi:latest Container ses/7/cephcsi/csi-attacher:v2.1.0 Container ses/7/cephcsi/csi-attacher:v3.3.0 Container ses/7/cephcsi/csi-livenessprobe:v1.1.0 Container ses/7/cephcsi/csi-node-driver-registrar:v1.2.0 Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0 Container ses/7/cephcsi/csi-provisioner:v1.6.0 Container ses/7/cephcsi/csi-provisioner:v3.0.0 Container ses/7/cephcsi/csi-resizer:v0.4.0 Container ses/7/cephcsi/csi-resizer:v1.3.0 Container ses/7/cephcsi/csi-snapshotter:v2.1.0 Container ses/7/cephcsi/csi-snapshotter:v2.1.1 Container ses/7/cephcsi/csi-snapshotter:v4.2.0 Container ses/7/prometheus-webhook-snmp:latest Container ses/7/rook/ceph:latest Container suse/sle-micro/5.0/toolbox:latest Container suse/sle15:15.0 Container suse/sle15:15.1 Container suse/sle15:15.2 Image SLES15-Azure-BYOS Image SLES15-EC2-CHOST-HVM-BYOS Image SLES15-EC2-HVM-BYOS Image SLES15-GCE-BYOS Image SLES15-OCI-BYOS Image SLES15-SAP-Azure Image SLES15-SAP-Azure-BYOS Image SLES15-SAP-Azure-LI-BYOS-Production Image SLES15-SAP-Azure-VLI-BYOS-Production Image SLES15-SAP-EC2-HVM Image SLES15-SAP-EC2-HVM-BYOS Image SLES15-SAP-GCE Image SLES15-SAP-GCE-BYOS Image SLES15-SAP-OCI-BYOS Image SLES15-SP1-Azure-BYOS Image SLES15-SP1-Azure-HPC-BYOS Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM Image SLES15-SP1-CAP-Deployment-BYOS-GCE Image SLES15-SP1-CHOST-BYOS-Azure Image SLES15-SP1-CHOST-BYOS-EC2 Image SLES15-SP1-CHOST-BYOS-GCE Image SLES15-SP1-EC2-HPC-HVM-BYOS Image SLES15-SP1-EC2-HVM-BYOS Image SLES15-SP1-GCE-BYOS Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server Image SLES15-SP1-OCI-BYOS Image SLES15-SP1-SAP-Azure Image SLES15-SP1-SAP-Azure-BYOS Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP1-SAP-EC2-HVM Image SLES15-SP1-SAP-EC2-HVM-BYOS Image SLES15-SP1-SAP-GCE Image SLES15-SP1-SAP-GCE-BYOS Image SLES15-SP1-SAP-OCI-BYOS Image SLES15-SP1-SAPCAL-Azure Image SLES15-SP1-SAPCAL-EC2-HVM Image SLES15-SP1-SAPCAL-GCE Image SLES15-SP2-Azure-Basic Image SLES15-SP2-Azure-Standard Image SLES15-SP2-BYOS-Azure Image SLES15-SP2-BYOS-EC2-HVM Image SLES15-SP2-BYOS-GCE Image SLES15-SP2-CAP-Deployment-BYOS-Azure Image SLES15-SP2-CHOST-BYOS-Aliyun Image SLES15-SP2-CHOST-BYOS-Azure Image SLES15-SP2-CHOST-BYOS-EC2 Image SLES15-SP2-CHOST-BYOS-GCE Image SLES15-SP2-EC2-ECS-HVM Image SLES15-SP2-EC2-HVM Image SLES15-SP2-GCE Image SLES15-SP2-HPC-Azure Image SLES15-SP2-HPC-BYOS-Azure Image SLES15-SP2-HPC-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE SUSE Linux Enterprise Module for Basesystem 15 gpg2-2.2.5-4.6.2 gpg2-lang-2.2.5-4.6.2 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/389-ds:1.4.2 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/busybox:1.34.1 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/caasp-dex:2.16.0 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/caaspctl-tooling:beta gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/cert-exporter:2.3.0 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/cilium-etcd-operator:2.0.5 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/cilium-init:1.5.3 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/cilium-operator:1.6.6 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/cilium:1.6.6 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/cloud-provider-openstack:1.15.0 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/configmap-reload:0.3.0 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/coredns:1.6.7 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/curl:7.60.0 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/etcd:3.4.13 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/gangway:3.1.0 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/grafana:7.5.12 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/helm-tiller:2.16.12 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/hyperkube:v1.17.17 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/k8s-sidecar:0.1.75 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/kube-state-metrics:1.9.3 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/kubernetes-client:1.17.17 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/kucero:1.3.0 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/kured:1.3.0 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/metrics-server:0.3.6 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/prometheus-alertmanager:0.16.2 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/prometheus-node-exporter:1.1.2 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/prometheus-pushgateway:0.6.0 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/prometheus-server:2.7.1 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/rsyslog:8.39.0 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/skuba-tooling:0.1.0 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/test-update:beta gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/velero-plugin-for-aws:1.0.1 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/velero-plugin-for-gcp:1.0.1 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/velero-restic-restore-helper:1.3.1 gpg2-2.2.5-4.6.2 as a component of Container caasp/v4/velero:1.3.1 gpg2-2.2.5-4.6.2 as a component of Container ses/6/cephcsi/cephcsi:latest gpg2-2.2.5-4.6.2 as a component of Container ses/6/rook/ceph:latest gpg2-2.2.5-4.6.2 as a component of Container ses/7/ceph/ceph:latest gpg2-2.2.5-4.6.2 as a component of Container ses/7/ceph/grafana:latest gpg2-2.2.5-4.6.2 as a component of Container ses/7/ceph/prometheus-alertmanager:latest gpg2-2.2.5-4.6.2 as a component of Container ses/7/ceph/prometheus-node-exporter:latest gpg2-2.2.5-4.6.2 as a component of Container ses/7/ceph/prometheus-server:latest gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/cephcsi:latest gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-attacher:v2.1.0 gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-attacher:v3.3.0 gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-livenessprobe:v1.1.0 gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-node-driver-registrar:v1.2.0 gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0 gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-provisioner:v1.6.0 gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-provisioner:v3.0.0 gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-resizer:v0.4.0 gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-resizer:v1.3.0 gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-snapshotter:v2.1.0 gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-snapshotter:v2.1.1 gpg2-2.2.5-4.6.2 as a component of Container ses/7/cephcsi/csi-snapshotter:v4.2.0 gpg2-2.2.5-4.6.2 as a component of Container ses/7/prometheus-webhook-snmp:latest gpg2-2.2.5-4.6.2 as a component of Container ses/7/rook/ceph:latest gpg2-2.2.5-4.6.2 as a component of Container suse/sle-micro/5.0/toolbox:latest gpg2-2.2.5-4.6.2 as a component of Container suse/sle15:15.0 gpg2-2.2.5-4.6.2 as a component of Container suse/sle15:15.1 gpg2-2.2.5-4.6.2 as a component of Container suse/sle15:15.2 gpg2-2.2.5-4.6.2 as a component of Image SLES15-Azure-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-EC2-CHOST-HVM-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-EC2-HVM-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-GCE-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-OCI-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SAP-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SAP-Azure-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production gpg2-2.2.5-4.6.2 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production gpg2-2.2.5-4.6.2 as a component of Image SLES15-SAP-EC2-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SAP-EC2-HVM-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SAP-GCE gpg2-2.2.5-4.6.2 as a component of Image SLES15-SAP-GCE-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SAP-OCI-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-Azure-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-Azure-HPC-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-GCE gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-CHOST-BYOS-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-CHOST-BYOS-EC2 gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-CHOST-BYOS-GCE gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-EC2-HPC-HVM-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-EC2-HVM-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-GCE-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-OCI-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAP-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAP-Azure-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAP-EC2-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAP-EC2-HVM-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAP-GCE gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAP-GCE-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAP-OCI-BYOS gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAPCAL-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP1-SAPCAL-GCE gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-Azure-Basic gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-Azure-Standard gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-BYOS-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-BYOS-EC2-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-BYOS-GCE gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-CAP-Deployment-BYOS-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-CHOST-BYOS-Aliyun gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-CHOST-BYOS-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-CHOST-BYOS-EC2 gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-CHOST-BYOS-GCE gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-EC2-ECS-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-EC2-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-GCE gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-HPC-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-HPC-BYOS-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-SAP-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-SAP-BYOS-Azure gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-SAP-BYOS-GCE gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-SAP-EC2-HVM gpg2-2.2.5-4.6.2 as a component of Image SLES15-SP2-SAP-GCE gpg2-2.2.5-4.6.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 gpg2-lang-2.2.5-4.6.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS. This attack appear to be exploitable via Victim must perform a WKD request, e.g. enter an email address in the composer window of Thunderbird/Enigmail. This vulnerability appears to have been fixed in after commit 4a4bb874f63741026bd26264c43bb32b1099f060. CVE-2018-1000858 Container caasp/v4/389-ds:1.4.2:gpg2-2.2.5-4.6.2 Container caasp/v4/busybox:1.34.1:gpg2-2.2.5-4.6.2 Container caasp/v4/caasp-dex:2.16.0:gpg2-2.2.5-4.6.2 Container caasp/v4/caaspctl-tooling:beta:gpg2-2.2.5-4.6.2 Container caasp/v4/cert-exporter:2.3.0:gpg2-2.2.5-4.6.2 Container caasp/v4/cilium-etcd-operator:2.0.5:gpg2-2.2.5-4.6.2 Container caasp/v4/cilium-init:1.5.3:gpg2-2.2.5-4.6.2 Container caasp/v4/cilium-operator:1.6.6:gpg2-2.2.5-4.6.2 Container caasp/v4/cilium:1.6.6:gpg2-2.2.5-4.6.2 Container caasp/v4/cloud-provider-openstack:1.15.0:gpg2-2.2.5-4.6.2 Container caasp/v4/configmap-reload:0.3.0:gpg2-2.2.5-4.6.2 Container caasp/v4/coredns:1.6.7:gpg2-2.2.5-4.6.2 Container caasp/v4/curl:7.60.0:gpg2-2.2.5-4.6.2 Container caasp/v4/etcd:3.4.13:gpg2-2.2.5-4.6.2 Container caasp/v4/gangway:3.1.0:gpg2-2.2.5-4.6.2 Container caasp/v4/grafana:7.5.12:gpg2-2.2.5-4.6.2 Container caasp/v4/helm-tiller:2.16.12:gpg2-2.2.5-4.6.2 Container caasp/v4/hyperkube:v1.17.17:gpg2-2.2.5-4.6.2 Container caasp/v4/k8s-sidecar:0.1.75:gpg2-2.2.5-4.6.2 Container caasp/v4/kube-state-metrics:1.9.3:gpg2-2.2.5-4.6.2 Container caasp/v4/kubernetes-client:1.17.17:gpg2-2.2.5-4.6.2 Container caasp/v4/kucero:1.3.0:gpg2-2.2.5-4.6.2 Container caasp/v4/kured:1.3.0:gpg2-2.2.5-4.6.2 Container caasp/v4/metrics-server:0.3.6:gpg2-2.2.5-4.6.2 Container caasp/v4/prometheus-alertmanager:0.16.2:gpg2-2.2.5-4.6.2 Container caasp/v4/prometheus-node-exporter:1.1.2:gpg2-2.2.5-4.6.2 Container caasp/v4/prometheus-pushgateway:0.6.0:gpg2-2.2.5-4.6.2 Container caasp/v4/prometheus-server:2.7.1:gpg2-2.2.5-4.6.2 Container caasp/v4/rsyslog:8.39.0:gpg2-2.2.5-4.6.2 Container caasp/v4/skuba-tooling:0.1.0:gpg2-2.2.5-4.6.2 Container caasp/v4/test-update:beta:gpg2-2.2.5-4.6.2 Container caasp/v4/velero-plugin-for-aws:1.0.1:gpg2-2.2.5-4.6.2 Container caasp/v4/velero-plugin-for-gcp:1.0.1:gpg2-2.2.5-4.6.2 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:gpg2-2.2.5-4.6.2 Container caasp/v4/velero-restic-restore-helper:1.3.1:gpg2-2.2.5-4.6.2 Container caasp/v4/velero:1.3.1:gpg2-2.2.5-4.6.2 Container ses/6/cephcsi/cephcsi:latest:gpg2-2.2.5-4.6.2 Container ses/6/rook/ceph:latest:gpg2-2.2.5-4.6.2 Container ses/7/ceph/ceph:latest:gpg2-2.2.5-4.6.2 Container ses/7/ceph/grafana:latest:gpg2-2.2.5-4.6.2 Container ses/7/ceph/prometheus-alertmanager:latest:gpg2-2.2.5-4.6.2 Container ses/7/ceph/prometheus-node-exporter:latest:gpg2-2.2.5-4.6.2 Container ses/7/ceph/prometheus-server:latest:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/cephcsi:latest:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-attacher:v2.1.0:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-attacher:v3.3.0:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-livenessprobe:v1.1.0:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-node-driver-registrar:v1.2.0:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-provisioner:v1.6.0:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-provisioner:v3.0.0:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-resizer:v0.4.0:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-resizer:v1.3.0:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-snapshotter:v2.1.0:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-snapshotter:v2.1.1:gpg2-2.2.5-4.6.2 Container ses/7/cephcsi/csi-snapshotter:v4.2.0:gpg2-2.2.5-4.6.2 Container ses/7/prometheus-webhook-snmp:latest:gpg2-2.2.5-4.6.2 Container ses/7/rook/ceph:latest:gpg2-2.2.5-4.6.2 Container suse/sle-micro/5.0/toolbox:latest:gpg2-2.2.5-4.6.2 Container suse/sle15:15.0:gpg2-2.2.5-4.6.2 Container suse/sle15:15.1:gpg2-2.2.5-4.6.2 Container suse/sle15:15.2:gpg2-2.2.5-4.6.2 Image SLES15-Azure-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-EC2-CHOST-HVM-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-EC2-HVM-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-GCE-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-OCI-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SAP-Azure-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SAP-Azure-LI-BYOS-Production:gpg2-2.2.5-4.6.2 Image SLES15-SAP-Azure-VLI-BYOS-Production:gpg2-2.2.5-4.6.2 Image SLES15-SAP-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SAP-EC2-HVM-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SAP-EC2-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SAP-GCE-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SAP-GCE:gpg2-2.2.5-4.6.2 Image SLES15-SAP-OCI-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SP1-Azure-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SP1-Azure-HPC-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SP1-CAP-Deployment-BYOS-GCE:gpg2-2.2.5-4.6.2 Image SLES15-SP1-CHOST-BYOS-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP1-CHOST-BYOS-EC2:gpg2-2.2.5-4.6.2 Image SLES15-SP1-CHOST-BYOS-GCE:gpg2-2.2.5-4.6.2 Image SLES15-SP1-EC2-HPC-HVM-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SP1-EC2-HVM-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SP1-GCE-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:gpg2-2.2.5-4.6.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:gpg2-2.2.5-4.6.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:gpg2-2.2.5-4.6.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:gpg2-2.2.5-4.6.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:gpg2-2.2.5-4.6.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:gpg2-2.2.5-4.6.2 Image SLES15-SP1-OCI-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAP-Azure-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAP-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAP-EC2-HVM-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAP-EC2-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAP-GCE-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAP-GCE:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAP-OCI-BYOS:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAPCAL-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAPCAL-EC2-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SP1-SAPCAL-GCE:gpg2-2.2.5-4.6.2 Image SLES15-SP2-Azure-Basic:gpg2-2.2.5-4.6.2 Image SLES15-SP2-Azure-Standard:gpg2-2.2.5-4.6.2 Image SLES15-SP2-BYOS-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP2-BYOS-EC2-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SP2-BYOS-GCE:gpg2-2.2.5-4.6.2 Image SLES15-SP2-CAP-Deployment-BYOS-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP2-CHOST-BYOS-Aliyun:gpg2-2.2.5-4.6.2 Image SLES15-SP2-CHOST-BYOS-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP2-CHOST-BYOS-EC2:gpg2-2.2.5-4.6.2 Image SLES15-SP2-CHOST-BYOS-GCE:gpg2-2.2.5-4.6.2 Image SLES15-SP2-EC2-ECS-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SP2-EC2-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SP2-GCE:gpg2-2.2.5-4.6.2 Image SLES15-SP2-HPC-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP2-HPC-BYOS-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP2-HPC-BYOS-EC2-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE:gpg2-2.2.5-4.6.2 Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE:gpg2-2.2.5-4.6.2 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:gpg2-2.2.5-4.6.2 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:gpg2-2.2.5-4.6.2 Image SLES15-SP2-SAP-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP2-SAP-BYOS-Azure:gpg2-2.2.5-4.6.2 Image SLES15-SP2-SAP-BYOS-EC2-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SP2-SAP-BYOS-GCE:gpg2-2.2.5-4.6.2 Image SLES15-SP2-SAP-EC2-HVM:gpg2-2.2.5-4.6.2 Image SLES15-SP2-SAP-GCE:gpg2-2.2.5-4.6.2 SUSE Linux Enterprise Module for Basesystem 15:gpg2-2.2.5-4.6.2 SUSE Linux Enterprise Module for Basesystem 15:gpg2-lang-2.2.5-4.6.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190023-1/ https://www.suse.com/security/cve/CVE-2018-1000858.html CVE-2018-1000858 https://bugzilla.suse.com/1120346 SUSE Bug 1120346