Security update for libtirpc SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:3791-1 Final 1 1 2022-10-27T07:49:44Z current 2022-10-27T07:49:44Z 2022-10-27T07:49:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libtirpc This update for libtirpc fixes the following issues: - CVE-2021-46828: Fixed denial of service vulnerability with lots of connections (bsc#1201680). - Exclude ipv6 addresses in client protocol version 2 code (bsc#1200800) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2022-3791,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2022-3791,Image SLES12-SP5-Azure-BYOS-2022-3791,Image SLES12-SP5-Azure-Basic-On-Demand-2022-3791,Image SLES12-SP5-Azure-HPC-BYOS-2022-3791,Image SLES12-SP5-Azure-HPC-On-Demand-2022-3791,Image SLES12-SP5-Azure-SAP-BYOS-2022-3791,Image SLES12-SP5-Azure-SAP-On-Demand-2022-3791,Image SLES12-SP5-Azure-Standard-On-Demand-2022-3791,Image SLES12-SP5-EC2-BYOS-2022-3791,Image SLES12-SP5-EC2-ECS-On-Demand-2022-3791,Image SLES12-SP5-EC2-On-Demand-2022-3791,Image SLES12-SP5-EC2-SAP-BYOS-2022-3791,Image SLES12-SP5-EC2-SAP-On-Demand-2022-3791,Image SLES12-SP5-GCE-BYOS-2022-3791,Image SLES12-SP5-GCE-On-Demand-2022-3791,Image SLES12-SP5-GCE-SAP-BYOS-2022-3791,Image SLES12-SP5-GCE-SAP-On-Demand-2022-3791,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2022-3791,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2022-3791,SUSE-2022-3791,SUSE-OpenStack-Cloud-9-2022-3791,SUSE-OpenStack-Cloud-Crowbar-9-2022-3791,SUSE-SLE-SAP-12-SP4-2022-3791,SUSE-SLE-SDK-12-SP5-2022-3791,SUSE-SLE-SERVER-12-SP2-BCL-2022-3791,SUSE-SLE-SERVER-12-SP3-BCL-2022-3791,SUSE-SLE-SERVER-12-SP4-LTSS-2022-3791,SUSE-SLE-SERVER-12-SP5-2022-3791 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20223791-1/ Link for SUSE-SU-2022:3791-1 https://lists.suse.com/pipermail/sle-security-updates/2022-October/012722.html E-Mail link for SUSE-SU-2022:3791-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1200800 SUSE Bug 1200800 https://bugzilla.suse.com/1201680 SUSE Bug 1201680 https://www.suse.com/security/cve/CVE-2021-46828/ SUSE CVE CVE-2021-46828 page Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 libtirpc-netconfig-1.0.1-17.24.1 libtirpc3-1.0.1-17.24.1 libtirpc-devel-1.0.1-17.24.1 libtirpc3-32bit-1.0.1-17.24.1 libtirpc3-64bit-1.0.1-17.24.1 libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-BYOS libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-BYOS libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-EC2-BYOS libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-EC2-BYOS libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-EC2-On-Demand libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-EC2-On-Demand libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-GCE-BYOS libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-GCE-BYOS libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-GCE-On-Demand libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-GCE-On-Demand libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libtirpc-netconfig-1.0.1-17.24.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libtirpc3-1.0.1-17.24.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libtirpc-netconfig-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtirpc3-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtirpc3-32bit-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtirpc-netconfig-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libtirpc3-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libtirpc3-32bit-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libtirpc-netconfig-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libtirpc3-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libtirpc3-32bit-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libtirpc-netconfig-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP5 libtirpc3-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP5 libtirpc3-32bit-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server 12 SP5 libtirpc-netconfig-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtirpc3-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtirpc3-32bit-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtirpc-netconfig-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libtirpc3-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libtirpc3-32bit-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libtirpc-devel-1.0.1-17.24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libtirpc-netconfig-1.0.1-17.24.1 as a component of SUSE OpenStack Cloud 9 libtirpc3-1.0.1-17.24.1 as a component of SUSE OpenStack Cloud 9 libtirpc3-32bit-1.0.1-17.24.1 as a component of SUSE OpenStack Cloud 9 libtirpc-netconfig-1.0.1-17.24.1 as a component of SUSE OpenStack Cloud Crowbar 9 libtirpc3-1.0.1-17.24.1 as a component of SUSE OpenStack Cloud Crowbar 9 libtirpc3-32bit-1.0.1-17.24.1 as a component of SUSE OpenStack Cloud Crowbar 9 In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections. CVE-2021-46828 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtirpc3-1.0.1-17.24.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-Azure-BYOS:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-Azure-BYOS:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-Azure-Basic-On-Demand:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-Azure-Basic-On-Demand:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-Azure-HPC-BYOS:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-Azure-HPC-BYOS:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-Azure-HPC-On-Demand:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-Azure-HPC-On-Demand:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-Azure-SAP-BYOS:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-Azure-SAP-BYOS:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-Azure-Standard-On-Demand:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-Azure-Standard-On-Demand:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-EC2-BYOS:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-EC2-BYOS:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-EC2-ECS-On-Demand:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-EC2-ECS-On-Demand:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-EC2-On-Demand:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-EC2-On-Demand:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-EC2-SAP-BYOS:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-EC2-SAP-BYOS:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-GCE-BYOS:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-GCE-BYOS:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-GCE-On-Demand:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-GCE-On-Demand:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-GCE-SAP-BYOS:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-GCE-SAP-BYOS:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtirpc3-1.0.1-17.24.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtirpc-netconfig-1.0.1-17.24.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtirpc3-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtirpc-netconfig-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtirpc3-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtirpc3-32bit-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtirpc-netconfig-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtirpc3-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtirpc3-32bit-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtirpc-netconfig-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtirpc3-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtirpc3-32bit-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP5:libtirpc-netconfig-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP5:libtirpc3-1.0.1-17.24.1 SUSE Linux Enterprise Server 12 SP5:libtirpc3-32bit-1.0.1-17.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtirpc-netconfig-1.0.1-17.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtirpc3-1.0.1-17.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtirpc3-32bit-1.0.1-17.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtirpc-netconfig-1.0.1-17.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtirpc3-1.0.1-17.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtirpc3-32bit-1.0.1-17.24.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtirpc-devel-1.0.1-17.24.1 SUSE OpenStack Cloud 9:libtirpc-netconfig-1.0.1-17.24.1 SUSE OpenStack Cloud 9:libtirpc3-1.0.1-17.24.1 SUSE OpenStack Cloud 9:libtirpc3-32bit-1.0.1-17.24.1 SUSE OpenStack Cloud Crowbar 9:libtirpc-netconfig-1.0.1-17.24.1 SUSE OpenStack Cloud Crowbar 9:libtirpc3-1.0.1-17.24.1 SUSE OpenStack Cloud Crowbar 9:libtirpc3-32bit-1.0.1-17.24.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223791-1/ https://www.suse.com/security/cve/CVE-2021-46828.html CVE-2021-46828 https://bugzilla.suse.com/1201680 SUSE Bug 1201680 https://bugzilla.suse.com/1206259 SUSE Bug 1206259 https://bugzilla.suse.com/1209708 SUSE Bug 1209708