Security update for python-rtslib-fb SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:2109-1 Final 1 1 2020-08-03T14:47:14Z current 2020-08-03T14:47:14Z 2020-08-03T14:47:14Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python-rtslib-fb This update for python-rtslib-fb fixes the following issues: - Update to version v2.1.73 (bsc#1173257 CVE-2020-14019): * version 2.1.73 * save_to_file: fix fd open mode * saveconfig: copy temp configfile with permissions * saveconfig: open the temp configfile with modes set * Fix 'is not' with a literal SyntaxWarning * Fix an incorrect config path in two comments * version 2.1.72 * Do not change dbroot after drivers have been registered * Remove '_if_needed' from RTSRoot._set_dbroot()'s name Replacing old tarball with python-rtslib-fb-v2.1.73.tar.xz The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container ses/7/ceph/ceph:latest-2020-2109,Container ses/7/cephcsi/cephcsi:latest-2020-2109,Container ses/7/rook/ceph:latest-2020-2109,Image SLES15-SP2-Azure-Basic-2020-2109,Image SLES15-SP2-Azure-Standard-2020-2109,Image SLES15-SP2-BYOS-Azure-2020-2109,Image SLES15-SP2-BYOS-EC2-HVM-2020-2109,Image SLES15-SP2-BYOS-GCE-2020-2109,Image SLES15-SP2-EC2-HVM-2020-2109,Image SLES15-SP2-GCE-2020-2109,Image SLES15-SP2-HPC-Azure-2020-2109,Image SLES15-SP2-HPC-BYOS-Azure-2020-2109,Image SLES15-SP2-HPC-BYOS-EC2-HVM-2020-2109,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure-2020-2109,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM-2020-2109,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE-2020-2109,Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure-2020-2109,Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM-2020-2109,Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE-2020-2109,Image SLES15-SP2-SAP-Azure-2020-2109,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2020-2109,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2020-2109,Image SLES15-SP2-SAP-BYOS-Azure-2020-2109,Image SLES15-SP2-SAP-BYOS-EC2-HVM-2020-2109,Image SLES15-SP2-SAP-BYOS-GCE-2020-2109,Image SLES15-SP2-SAP-EC2-HVM-2020-2109,Image SLES15-SP2-SAP-GCE-2020-2109,SUSE-2020-2109,SUSE-SLE-Module-Basesystem-15-SP2-2020-2109,SUSE-SLE-Module-Python2-15-SP2-2020-2109 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20202109-1/ Link for SUSE-SU-2020:2109-1 https://lists.suse.com/pipermail/sle-security-updates/2020-August/007211.html E-Mail link for SUSE-SU-2020:2109-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1173257 SUSE Bug 1173257 https://www.suse.com/security/cve/CVE-2020-14019/ SUSE CVE CVE-2020-14019 page Container ses/7/ceph/ceph:latest Container ses/7/cephcsi/cephcsi:latest Container ses/7/rook/ceph:latest Image SLES15-SP2-Azure-Basic Image SLES15-SP2-Azure-Standard Image SLES15-SP2-BYOS-Azure Image SLES15-SP2-BYOS-EC2-HVM Image SLES15-SP2-BYOS-GCE Image SLES15-SP2-EC2-HVM Image SLES15-SP2-GCE Image SLES15-SP2-HPC-Azure Image SLES15-SP2-HPC-BYOS-Azure Image SLES15-SP2-HPC-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP2 python3-rtslib-fb-2.1.73-3.3.1 python2-rtslib-fb-2.1.73-3.3.1 python3-rtslib-fb-2.1.73-3.3.1 as a component of Container ses/7/ceph/ceph:latest python3-rtslib-fb-2.1.73-3.3.1 as a component of Container ses/7/cephcsi/cephcsi:latest python3-rtslib-fb-2.1.73-3.3.1 as a component of Container ses/7/rook/ceph:latest python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-Azure-Basic python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-Azure-Standard python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-BYOS-Azure python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-BYOS-GCE python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-EC2-HVM python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-GCE python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-HPC-Azure python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-SAP-Azure python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-SAP-EC2-HVM python3-rtslib-fb-2.1.73-3.3.1 as a component of Image SLES15-SP2-SAP-GCE python3-rtslib-fb-2.1.73-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python2-rtslib-fb-2.1.73-3.3.1 as a component of SUSE Linux Enterprise Module for Python 2 15 SP2 Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved. CVE-2020-14019 Container ses/7/ceph/ceph:latest:python3-rtslib-fb-2.1.73-3.3.1 Container ses/7/cephcsi/cephcsi:latest:python3-rtslib-fb-2.1.73-3.3.1 Container ses/7/rook/ceph:latest:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-Azure-Basic:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-Azure-Standard:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-BYOS-Azure:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-BYOS-EC2-HVM:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-BYOS-GCE:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-EC2-HVM:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-GCE:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-HPC-Azure:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-HPC-BYOS-Azure:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-SAP-Azure:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-SAP-BYOS-Azure:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-SAP-BYOS-GCE:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-SAP-EC2-HVM:python3-rtslib-fb-2.1.73-3.3.1 Image SLES15-SP2-SAP-GCE:python3-rtslib-fb-2.1.73-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:python3-rtslib-fb-2.1.73-3.3.1 SUSE Linux Enterprise Module for Python 2 15 SP2:python2-rtslib-fb-2.1.73-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202109-1/ https://www.suse.com/security/cve/CVE-2020-14019.html CVE-2020-14019 https://bugzilla.suse.com/1173257 SUSE Bug 1173257