Security update for libcroco SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:3123-1 Final 1 1 2021-09-16T17:45:21Z current 2021-09-16T17:45:21Z 2021-09-16T17:45:21Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libcroco This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed recursion issue in block and any productions (bsc#1171685). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP2-BYOS-Azure-2021-3123,Image SLES15-SP2-BYOS-EC2-HVM-2021-3123,Image SLES15-SP2-BYOS-GCE-2021-3123,Image SLES15-SP2-CHOST-BYOS-Aliyun-2021-3123,Image SLES15-SP2-CHOST-BYOS-Azure-2021-3123,Image SLES15-SP2-CHOST-BYOS-EC2-2021-3123,Image SLES15-SP2-CHOST-BYOS-GCE-2021-3123,Image SLES15-SP2-HPC-BYOS-Azure-2021-3123,Image SLES15-SP2-HPC-BYOS-EC2-HVM-2021-3123,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure-2021-3123,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM-2021-3123,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE-2021-3123,Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure-2021-3123,Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM-2021-3123,Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE-2021-3123,Image SLES15-SP2-SAP-Azure-2021-3123,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2021-3123,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2021-3123,Image SLES15-SP2-SAP-BYOS-Azure-2021-3123,Image SLES15-SP2-SAP-BYOS-EC2-HVM-2021-3123,Image SLES15-SP2-SAP-BYOS-GCE-2021-3123,Image SLES15-SP2-SAP-EC2-HVM-2021-3123,Image SLES15-SP2-SAP-GCE-2021-3123,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2021-3123,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2021-3123,SUSE-2021-3123,SUSE-SLE-Module-Basesystem-15-SP2-2021-3123,SUSE-SLE-Module-Basesystem-15-SP3-2021-3123,SUSE-SUSE-MicroOS-5.0-2021-3123 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20213123-1/ Link for SUSE-SU-2021:3123-1 https://lists.suse.com/pipermail/sle-security-updates/2021-September/009452.html E-Mail link for SUSE-SU-2021:3123-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1171685 SUSE Bug 1171685 https://www.suse.com/security/cve/CVE-2020-12825/ SUSE CVE CVE-2020-12825 page Image SLES15-SP2-BYOS-Azure Image SLES15-SP2-BYOS-EC2-HVM Image SLES15-SP2-BYOS-GCE Image SLES15-SP2-CHOST-BYOS-Aliyun Image SLES15-SP2-CHOST-BYOS-Azure Image SLES15-SP2-CHOST-BYOS-EC2 Image SLES15-SP2-CHOST-BYOS-GCE Image SLES15-SP2-HPC-BYOS-Azure Image SLES15-SP2-HPC-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 libcroco-0_6-3-0.6.13-3.3.1 libcroco-0.6.13-3.3.1 libcroco-0_6-3-32bit-0.6.13-3.3.1 libcroco-0_6-3-64bit-0.6.13-3.3.1 libcroco-devel-0.6.13-3.3.1 libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-BYOS-Azure libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-BYOS-GCE libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-CHOST-BYOS-Aliyun libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-CHOST-BYOS-Azure libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-CHOST-BYOS-EC2 libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-CHOST-BYOS-GCE libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-SAP-Azure libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-SAP-EC2-HVM libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP2-SAP-GCE libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libcroco-0_6-3-0.6.13-3.3.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libcroco-0_6-3-0.6.13-3.3.1 as a component of SUSE Linux Enterprise Micro 5.0 libcroco-0.6.13-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libcroco-0_6-3-0.6.13-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libcroco-0_6-3-32bit-0.6.13-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libcroco-devel-0.6.13-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libcroco-0.6.13-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcroco-0_6-3-0.6.13-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcroco-devel-0.6.13-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption. CVE-2020-12825 Image SLES15-SP2-BYOS-Azure:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-BYOS-EC2-HVM:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-BYOS-GCE:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-CHOST-BYOS-Aliyun:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-CHOST-BYOS-Azure:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-CHOST-BYOS-EC2:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-CHOST-BYOS-GCE:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-HPC-BYOS-Azure:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-SAP-Azure:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-SAP-BYOS-Azure:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-SAP-BYOS-GCE:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-SAP-EC2-HVM:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP2-SAP-GCE:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libcroco-0_6-3-0.6.13-3.3.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libcroco-0_6-3-0.6.13-3.3.1 SUSE Linux Enterprise Micro 5.0:libcroco-0_6-3-0.6.13-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libcroco-0.6.13-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libcroco-0_6-3-0.6.13-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libcroco-0_6-3-32bit-0.6.13-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libcroco-devel-0.6.13-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libcroco-0.6.13-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libcroco-0_6-3-0.6.13-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libcroco-devel-0.6.13-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213123-1/ https://www.suse.com/security/cve/CVE-2020-12825.html CVE-2020-12825 https://bugzilla.suse.com/1171685 SUSE Bug 1171685 https://bugzilla.suse.com/1203730 SUSE Bug 1203730 https://bugzilla.suse.com/1208647 SUSE Bug 1208647