Security update for google-osconfig-agent SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0602-1 Final 1 1 2023-03-02T13:54:18Z current 2023-03-02T13:54:18Z 2023-03-02T13:54:18Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for google-osconfig-agent This update for google-osconfig-agent fixes the following issues: Updated to version 20230222.00 and bumped go API version to 1.18 to address the following (bsc#1208723): - CVE-2021-38297: Fixed data overwrite when passing large arguments to GOARCH=wasm GOOS=js (bsc#1191468). - CVE-2022-23806: Fixed Curve.IsOnCurve to incorrectly return true (bsc#1195838). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP3-CHOST-BYOS-GCE-2023-602,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2023-602,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2023-602,Image SLES15-SP4-2023-602,Image SLES15-SP4-BYOS-2023-602,Image SLES15-SP4-BYOS-GCE-2023-602,Image SLES15-SP4-CHOST-BYOS-GCE-2023-602,Image SLES15-SP4-GCE-2023-602,Image SLES15-SP4-HPC-BYOS-GCE-2023-602,Image SLES15-SP4-HPC-GCE-2023-602,Image SLES15-SP4-Hardened-BYOS-GCE-2023-602,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE-2023-602,Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE-2023-602,Image SLES15-SP4-SAP-2023-602,Image SLES15-SP4-SAP-BYOS-2023-602,Image SLES15-SP4-SAP-BYOS-GCE-2023-602,Image SLES15-SP4-SAP-GCE-2023-602,Image SLES15-SP4-SAP-Hardened-BYOS-GCE-2023-602,Image SLES15-SP4-SAP-Hardened-GCE-2023-602,Image SLES15-SP4-SAPCAL-2023-602,Image SLES15-SP4-SAPCAL-GCE-2023-602,Image SLES15-SP5-BYOS-GCE-2023-602,Image SLES15-SP5-CHOST-BYOS-GCE-2023-602,Image SLES15-SP5-GCE-2023-602,Image SLES15-SP5-HPC-BYOS-GCE-2023-602,Image SLES15-SP5-HPC-GCE-2023-602,Image SLES15-SP5-Hardened-BYOS-GCE-2023-602,Image SLES15-SP5-SAP-BYOS-GCE-2023-602,Image SLES15-SP5-SAP-GCE-2023-602,Image SLES15-SP5-SAP-Hardened-BYOS-GCE-2023-602,Image SLES15-SP5-SAP-Hardened-GCE-2023-602,Image SLES15-SP5-SAPCAL-GCE-2023-602,SUSE-2023-602,SUSE-SLE-Module-Public-Cloud-15-SP1-2023-602,SUSE-SLE-Module-Public-Cloud-15-SP2-2023-602,SUSE-SLE-Module-Public-Cloud-15-SP3-2023-602,SUSE-SLE-Module-Public-Cloud-15-SP4-2023-602,openSUSE-SLE-15.4-2023-602 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230602-1/ Link for SUSE-SU-2023:0602-1 https://lists.suse.com/pipermail/sle-security-updates/2023-March/013962.html E-Mail link for SUSE-SU-2023:0602-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1191468 SUSE Bug 1191468 https://bugzilla.suse.com/1195838 SUSE Bug 1195838 https://bugzilla.suse.com/1208723 SUSE Bug 1208723 https://www.suse.com/security/cve/CVE-2021-38297/ SUSE CVE CVE-2021-38297 page https://www.suse.com/security/cve/CVE-2022-23806/ SUSE CVE CVE-2022-23806 page Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP4 Image SLES15-SP4-BYOS Image SLES15-SP4-BYOS-GCE Image SLES15-SP4-CHOST-BYOS-GCE Image SLES15-SP4-GCE Image SLES15-SP4-HPC-BYOS-GCE Image SLES15-SP4-HPC-GCE Image SLES15-SP4-Hardened-BYOS-GCE Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-SAP Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-GCE Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-GCE Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-GCE Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-GCE Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-HPC-GCE Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-GCE Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-GCE Image SLES15-SP5-SAPCAL-GCE SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SP3 SUSE Linux Enterprise Module for Public Cloud 15 SP4 openSUSE Leap 15.4 google-osconfig-agent-20230222.00-150000.1.27.1 google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4 google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-BYOS google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-CHOST-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-HPC-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-HPC-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-Hardened-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-SAP google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-SAP-BYOS google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-SAP-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-SAP-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-SAP-Hardened-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-SAPCAL google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP4-SAPCAL-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP5-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP5-CHOST-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP5-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP5-HPC-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP5-HPC-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP5-Hardened-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP5-SAP-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP5-SAP-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP5-SAP-Hardened-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of Image SLES15-SP5-SAPCAL-GCE google-osconfig-agent-20230222.00-150000.1.27.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 google-osconfig-agent-20230222.00-150000.1.27.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP2 google-osconfig-agent-20230222.00-150000.1.27.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP3 google-osconfig-agent-20230222.00-150000.1.27.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 google-osconfig-agent-20230222.00-150000.1.27.1 as a component of openSUSE Leap 15.4 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used. CVE-2021-38297 Image SLES15-SP3-CHOST-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-BYOS:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-CHOST-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-HPC-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-HPC-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-Hardened-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP-BYOS:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP-Hardened-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP-Hardened-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAPCAL-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAPCAL:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-CHOST-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-HPC-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-HPC-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-Hardened-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-SAP-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-SAP-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-SAP-Hardened-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-SAPCAL-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 SUSE Linux Enterprise Module for Public Cloud 15 SP1:google-osconfig-agent-20230222.00-150000.1.27.1 SUSE Linux Enterprise Module for Public Cloud 15 SP2:google-osconfig-agent-20230222.00-150000.1.27.1 SUSE Linux Enterprise Module for Public Cloud 15 SP3:google-osconfig-agent-20230222.00-150000.1.27.1 SUSE Linux Enterprise Module for Public Cloud 15 SP4:google-osconfig-agent-20230222.00-150000.1.27.1 openSUSE Leap 15.4:google-osconfig-agent-20230222.00-150000.1.27.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230602-1/ https://www.suse.com/security/cve/CVE-2021-38297.html CVE-2021-38297 https://bugzilla.suse.com/1191468 SUSE Bug 1191468 https://bugzilla.suse.com/1206559 SUSE Bug 1206559 https://bugzilla.suse.com/1208723 SUSE Bug 1208723 Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element. CVE-2022-23806 Image SLES15-SP3-CHOST-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-BYOS:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-CHOST-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-HPC-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-HPC-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-Hardened-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP-BYOS:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP-Hardened-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP-Hardened-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAP:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAPCAL-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4-SAPCAL:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP4:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-CHOST-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-HPC-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-HPC-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-Hardened-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-SAP-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-SAP-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-SAP-Hardened-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 Image SLES15-SP5-SAPCAL-GCE:google-osconfig-agent-20230222.00-150000.1.27.1 SUSE Linux Enterprise Module for Public Cloud 15 SP1:google-osconfig-agent-20230222.00-150000.1.27.1 SUSE Linux Enterprise Module for Public Cloud 15 SP2:google-osconfig-agent-20230222.00-150000.1.27.1 SUSE Linux Enterprise Module for Public Cloud 15 SP3:google-osconfig-agent-20230222.00-150000.1.27.1 SUSE Linux Enterprise Module for Public Cloud 15 SP4:google-osconfig-agent-20230222.00-150000.1.27.1 openSUSE Leap 15.4:google-osconfig-agent-20230222.00-150000.1.27.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230602-1/ https://www.suse.com/security/cve/CVE-2022-23806.html CVE-2022-23806 https://bugzilla.suse.com/1195838 SUSE Bug 1195838 https://bugzilla.suse.com/1206559 SUSE Bug 1206559 https://bugzilla.suse.com/1208723 SUSE Bug 1208723