Security update for procps SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0450-1 Final 1 1 2019-02-20T15:43:19Z current 2019-02-20T15:43:19Z 2019-02-20T15:43:19Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for procps This update for procps fixes the following security issues: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the config_file() function (bsc#1092100). - CVE-2018-1123: Prevent denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maped a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service) (bsc#1092100). - CVE-2018-1124: Prevent multiple integer overflows leading to a heap corruption in file2strvec function. This allowed a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users (bsc#1092100). - CVE-2018-1125: Prevent stack buffer overflow in pgrep. This vulnerability was mitigated by FORTIFY limiting the impact to a crash (bsc#1092100). - CVE-2018-1126: Ensure correct integer size in proc/alloc.* to prevent truncation/integer overflow issues (bsc#1092100). (These issues were previously released for SUSE Linux Enterprise 12 SP3 and SP4.) Also the following non-security issue was fixed: - Fix CPU summary showing old data. (bsc#1121753) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/nginx-ingress-controller:beta1-2019-450,Container suse/sles12sp3:latest-2019-450,Container suse/sles12sp4:latest-2019-450,Container suse/sles12sp5:latest-2019-450,Image SLES12-SP4-Azure-BYOS-2019-450,Image SLES12-SP4-EC2-HVM-BYOS-2019-450,Image SLES12-SP4-GCE-BYOS-2019-450,Image SLES12-SP4-OCI-BYOS-2019-450,Image SLES12-SP4-SAP-Azure-2019-450,Image SLES12-SP4-SAP-Azure-BYOS-2019-450,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2019-450,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2019-450,Image SLES12-SP4-SAP-EC2-HVM-2019-450,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2019-450,Image SLES12-SP4-SAP-GCE-2019-450,Image SLES12-SP4-SAP-GCE-BYOS-2019-450,Image SLES12-SP4-SAP-OCI-BYOS-2019-450,Image SLES12-SP5-Azure-BYOS-2019-450,Image SLES12-SP5-Azure-Basic-On-Demand-2019-450,Image SLES12-SP5-Azure-HPC-BYOS-2019-450,Image SLES12-SP5-Azure-HPC-On-Demand-2019-450,Image SLES12-SP5-Azure-SAP-BYOS-2019-450,Image SLES12-SP5-Azure-SAP-On-Demand-2019-450,Image SLES12-SP5-Azure-Standard-On-Demand-2019-450,Image SLES12-SP5-EC2-BYOS-2019-450,Image SLES12-SP5-EC2-ECS-On-Demand-2019-450,Image SLES12-SP5-EC2-On-Demand-2019-450,Image SLES12-SP5-EC2-SAP-BYOS-2019-450,Image SLES12-SP5-EC2-SAP-On-Demand-2019-450,Image SLES12-SP5-GCE-BYOS-2019-450,Image SLES12-SP5-GCE-On-Demand-2019-450,Image SLES12-SP5-GCE-SAP-BYOS-2019-450,Image SLES12-SP5-GCE-SAP-On-Demand-2019-450,Image SLES12-SP5-OCI-BYOS-BYOS-2019-450,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2019-450,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2019-450,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2019-450,SUSE-2019-450,SUSE-OpenStack-Cloud-7-2019-450,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-450,SUSE-SLE-DESKTOP-12-SP3-2019-450,SUSE-SLE-DESKTOP-12-SP4-2019-450,SUSE-SLE-SAP-12-SP2-2019-450,SUSE-SLE-SDK-12-SP3-2019-450,SUSE-SLE-SDK-12-SP4-2019-450,SUSE-SLE-SERVER-12-2019-450,SUSE-SLE-SERVER-12-SP1-2019-450,SUSE-SLE-SERVER-12-SP2-2019-450,SUSE-SLE-SERVER-12-SP2-BCL-2019-450,SUSE-SLE-SERVER-12-SP3-2019-450,SUSE-SLE-SERVER-12-SP4-2019-450,SUSE-Storage-4-2019-450 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190450-1/ Link for SUSE-SU-2019:0450-1 https://lists.suse.com/pipermail/sle-security-updates/2019-February/005142.html E-Mail link for SUSE-SU-2019:0450-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1092100 SUSE Bug 1092100 https://bugzilla.suse.com/1121753 SUSE Bug 1121753 https://www.suse.com/security/cve/CVE-2018-1122/ SUSE CVE CVE-2018-1122 page https://www.suse.com/security/cve/CVE-2018-1123/ SUSE CVE CVE-2018-1123 page https://www.suse.com/security/cve/CVE-2018-1124/ SUSE CVE CVE-2018-1124 page https://www.suse.com/security/cve/CVE-2018-1125/ SUSE CVE CVE-2018-1125 page https://www.suse.com/security/cve/CVE-2018-1126/ SUSE CVE CVE-2018-1126 page Container caasp/v4/nginx-ingress-controller:beta1 Container suse/sles12sp3:latest Container suse/sles12sp4:latest Container suse/sles12sp5:latest Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Enterprise Storage 4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE OpenStack Cloud 7 libprocps3-3.3.9-11.18.1 procps-3.3.9-11.18.1 procps-devel-3.3.9-11.18.1 libprocps3-3.3.9-11.18.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 procps-3.3.9-11.18.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libprocps3-3.3.9-11.18.1 as a component of Container suse/sles12sp3:latest procps-3.3.9-11.18.1 as a component of Container suse/sles12sp3:latest libprocps3-3.3.9-11.18.1 as a component of Container suse/sles12sp4:latest procps-3.3.9-11.18.1 as a component of Container suse/sles12sp4:latest libprocps3-3.3.9-11.18.1 as a component of Container suse/sles12sp5:latest procps-3.3.9-11.18.1 as a component of Container suse/sles12sp5:latest libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-Azure-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-Azure-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-GCE-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-GCE-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-OCI-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-OCI-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-Azure procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-Azure libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-EC2-HVM procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-EC2-HVM libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-GCE procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-GCE libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-EC2-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-EC2-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-EC2-On-Demand procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-EC2-On-Demand libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-GCE-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-GCE-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-GCE-On-Demand procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-GCE-On-Demand libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libprocps3-3.3.9-11.18.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production procps-3.3.9-11.18.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libprocps3-3.3.9-11.18.1 as a component of SUSE Enterprise Storage 4 procps-3.3.9-11.18.1 as a component of SUSE Enterprise Storage 4 libprocps3-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 procps-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libprocps3-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 procps-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libprocps3-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS procps-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libprocps3-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL procps-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libprocps3-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS procps-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libprocps3-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12 SP3 procps-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12 SP3 libprocps3-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12 SP4 procps-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12 SP4 libprocps3-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12-LTSS procps-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server 12-LTSS libprocps3-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 procps-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libprocps3-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 procps-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libprocps3-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 procps-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 procps-devel-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 procps-devel-3.3.9-11.18.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libprocps3-3.3.9-11.18.1 as a component of SUSE OpenStack Cloud 7 procps-3.3.9-11.18.1 as a component of SUSE OpenStack Cloud 7 procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the config_file() function. CVE-2018-1122 Container caasp/v4/nginx-ingress-controller:beta1:libprocps3-3.3.9-11.18.1 Container caasp/v4/nginx-ingress-controller:beta1:procps-3.3.9-11.18.1 Container suse/sles12sp3:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp3:latest:procps-3.3.9-11.18.1 Container suse/sles12sp4:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp4:latest:procps-3.3.9-11.18.1 Container suse/sles12sp5:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp5:latest:procps-3.3.9-11.18.1 Image SLES12-SP4-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-EC2-HVM-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-EC2-HVM-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-OCI-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-OCI-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-OCI-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-OCI-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-Basic-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-Basic-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-Standard-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-Standard-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-ECS-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-ECS-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:procps-3.3.9-11.18.1 SUSE Enterprise Storage 4:libprocps3-3.3.9-11.18.1 SUSE Enterprise Storage 4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP1-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-BCL:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-BCL:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Software Development Kit 12 SP3:procps-devel-3.3.9-11.18.1 SUSE Linux Enterprise Software Development Kit 12 SP4:procps-devel-3.3.9-11.18.1 SUSE OpenStack Cloud 7:libprocps3-3.3.9-11.18.1 SUSE OpenStack Cloud 7:procps-3.3.9-11.18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190450-1/ https://www.suse.com/security/cve/CVE-2018-1122.html CVE-2018-1122 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1092100 SUSE Bug 1092100 https://bugzilla.suse.com/1093158 SUSE Bug 1093158 https://bugzilla.suse.com/1123135 SUSE Bug 1123135 https://bugzilla.suse.com/1126909 SUSE Bug 1126909 https://bugzilla.suse.com/1128955 SUSE Bug 1128955 procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service). CVE-2018-1123 Container caasp/v4/nginx-ingress-controller:beta1:libprocps3-3.3.9-11.18.1 Container caasp/v4/nginx-ingress-controller:beta1:procps-3.3.9-11.18.1 Container suse/sles12sp3:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp3:latest:procps-3.3.9-11.18.1 Container suse/sles12sp4:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp4:latest:procps-3.3.9-11.18.1 Container suse/sles12sp5:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp5:latest:procps-3.3.9-11.18.1 Image SLES12-SP4-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-EC2-HVM-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-EC2-HVM-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-OCI-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-OCI-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-OCI-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-OCI-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-Basic-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-Basic-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-Standard-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-Standard-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-ECS-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-ECS-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:procps-3.3.9-11.18.1 SUSE Enterprise Storage 4:libprocps3-3.3.9-11.18.1 SUSE Enterprise Storage 4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP1-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-BCL:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-BCL:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Software Development Kit 12 SP3:procps-devel-3.3.9-11.18.1 SUSE Linux Enterprise Software Development Kit 12 SP4:procps-devel-3.3.9-11.18.1 SUSE OpenStack Cloud 7:libprocps3-3.3.9-11.18.1 SUSE OpenStack Cloud 7:procps-3.3.9-11.18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190450-1/ https://www.suse.com/security/cve/CVE-2018-1123.html CVE-2018-1123 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1092100 SUSE Bug 1092100 https://bugzilla.suse.com/1093158 SUSE Bug 1093158 https://bugzilla.suse.com/1123135 SUSE Bug 1123135 https://bugzilla.suse.com/1126909 SUSE Bug 1126909 https://bugzilla.suse.com/1128955 SUSE Bug 1128955 procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users. CVE-2018-1124 Container caasp/v4/nginx-ingress-controller:beta1:libprocps3-3.3.9-11.18.1 Container caasp/v4/nginx-ingress-controller:beta1:procps-3.3.9-11.18.1 Container suse/sles12sp3:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp3:latest:procps-3.3.9-11.18.1 Container suse/sles12sp4:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp4:latest:procps-3.3.9-11.18.1 Container suse/sles12sp5:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp5:latest:procps-3.3.9-11.18.1 Image SLES12-SP4-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-EC2-HVM-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-EC2-HVM-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-OCI-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-OCI-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-OCI-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-OCI-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-Basic-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-Basic-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-Standard-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-Standard-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-ECS-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-ECS-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:procps-3.3.9-11.18.1 SUSE Enterprise Storage 4:libprocps3-3.3.9-11.18.1 SUSE Enterprise Storage 4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP1-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-BCL:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-BCL:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Software Development Kit 12 SP3:procps-devel-3.3.9-11.18.1 SUSE Linux Enterprise Software Development Kit 12 SP4:procps-devel-3.3.9-11.18.1 SUSE OpenStack Cloud 7:libprocps3-3.3.9-11.18.1 SUSE OpenStack Cloud 7:procps-3.3.9-11.18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190450-1/ https://www.suse.com/security/cve/CVE-2018-1124.html CVE-2018-1124 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1092100 SUSE Bug 1092100 https://bugzilla.suse.com/1093158 SUSE Bug 1093158 https://bugzilla.suse.com/1123135 SUSE Bug 1123135 https://bugzilla.suse.com/1126909 SUSE Bug 1126909 https://bugzilla.suse.com/1128955 SUSE Bug 1128955 procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash. CVE-2018-1125 Container caasp/v4/nginx-ingress-controller:beta1:libprocps3-3.3.9-11.18.1 Container caasp/v4/nginx-ingress-controller:beta1:procps-3.3.9-11.18.1 Container suse/sles12sp3:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp3:latest:procps-3.3.9-11.18.1 Container suse/sles12sp4:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp4:latest:procps-3.3.9-11.18.1 Container suse/sles12sp5:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp5:latest:procps-3.3.9-11.18.1 Image SLES12-SP4-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-EC2-HVM-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-EC2-HVM-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-OCI-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-OCI-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-OCI-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-OCI-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-Basic-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-Basic-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-Standard-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-Standard-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-ECS-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-ECS-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:procps-3.3.9-11.18.1 SUSE Enterprise Storage 4:libprocps3-3.3.9-11.18.1 SUSE Enterprise Storage 4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP1-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-BCL:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-BCL:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Software Development Kit 12 SP3:procps-devel-3.3.9-11.18.1 SUSE Linux Enterprise Software Development Kit 12 SP4:procps-devel-3.3.9-11.18.1 SUSE OpenStack Cloud 7:libprocps3-3.3.9-11.18.1 SUSE OpenStack Cloud 7:procps-3.3.9-11.18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190450-1/ https://www.suse.com/security/cve/CVE-2018-1125.html CVE-2018-1125 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1092100 SUSE Bug 1092100 https://bugzilla.suse.com/1093158 SUSE Bug 1093158 https://bugzilla.suse.com/1123135 SUSE Bug 1123135 https://bugzilla.suse.com/1126909 SUSE Bug 1126909 https://bugzilla.suse.com/1128955 SUSE Bug 1128955 procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124. CVE-2018-1126 Container caasp/v4/nginx-ingress-controller:beta1:libprocps3-3.3.9-11.18.1 Container caasp/v4/nginx-ingress-controller:beta1:procps-3.3.9-11.18.1 Container suse/sles12sp3:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp3:latest:procps-3.3.9-11.18.1 Container suse/sles12sp4:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp4:latest:procps-3.3.9-11.18.1 Container suse/sles12sp5:latest:libprocps3-3.3.9-11.18.1 Container suse/sles12sp5:latest:procps-3.3.9-11.18.1 Image SLES12-SP4-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-EC2-HVM-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-EC2-HVM-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-OCI-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-OCI-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-Azure:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-EC2-HVM:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-GCE:procps-3.3.9-11.18.1 Image SLES12-SP4-SAP-OCI-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP4-SAP-OCI-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-Basic-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-Basic-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-HPC-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-Azure-Standard-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-Azure-Standard-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-ECS-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-ECS-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-EC2-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-On-Demand:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-GCE-SAP-On-Demand:procps-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:procps-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:procps-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libprocps3-3.3.9-11.18.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:procps-3.3.9-11.18.1 SUSE Enterprise Storage 4:libprocps3-3.3.9-11.18.1 SUSE Enterprise Storage 4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Desktop 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP1-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-BCL:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-BCL:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP2-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server 12-LTSS:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server 12-LTSS:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:procps-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libprocps3-3.3.9-11.18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:procps-3.3.9-11.18.1 SUSE Linux Enterprise Software Development Kit 12 SP3:procps-devel-3.3.9-11.18.1 SUSE Linux Enterprise Software Development Kit 12 SP4:procps-devel-3.3.9-11.18.1 SUSE OpenStack Cloud 7:libprocps3-3.3.9-11.18.1 SUSE OpenStack Cloud 7:procps-3.3.9-11.18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190450-1/ https://www.suse.com/security/cve/CVE-2018-1126.html CVE-2018-1126 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1092100 SUSE Bug 1092100 https://bugzilla.suse.com/1093158 SUSE Bug 1093158 https://bugzilla.suse.com/1123135 SUSE Bug 1123135 https://bugzilla.suse.com/1126909 SUSE Bug 1126909 https://bugzilla.suse.com/1128955 SUSE Bug 1128955