Security update for libcap SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:2956-1 Final 1 1 2023-07-25T06:33:56Z current 2023-07-25T06:33:56Z 2023-07-25T06:33:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libcap This update for libcap fixes the following issues: - CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container ses/7.1/ceph/grafana:latest-2023-2956,Container ses/7.1/ceph/haproxy:latest-2023-2956,Container ses/7.1/ceph/keepalived:latest-2023-2956,Container ses/7.1/ceph/prometheus-alertmanager:latest-2023-2956,Container ses/7.1/ceph/prometheus-node-exporter:latest-2023-2956,Container ses/7.1/ceph/prometheus-server:latest-2023-2956,Container ses/7.1/ceph/prometheus-snmp_notifier:latest-2023-2956,Container ses/7.1/cephcsi/cephcsi:latest-2023-2956,Container ses/7.1/cephcsi/csi-attacher:v4.1.0-2023-2956,Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0-2023-2956,Container ses/7.1/cephcsi/csi-provisioner:v3.4.0-2023-2956,Container ses/7.1/cephcsi/csi-resizer:v1.7.0-2023-2956,Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1-2023-2956,Container ses/7.1/rook/ceph:latest-2023-2956,Container suse/ltss/sle15.3/bci-base-fips:15.3-2023-2956,Container suse/sle-micro-rancher/5.2:latest-2023-2956,Container suse/sle-micro/5.1/toolbox:latest-2023-2956,Container suse/sle-micro/5.2/toolbox:latest-2023-2956,Container suse/sle15:15.1-2023-2956,Container suse/sle15:15.2-2023-2956,Container suse/sle15:15.3-2023-2956,Container trento/trento-wanda:latest-2023-2956,Container trento/trento-web:latest-2023-2956,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2023-2956,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2023-2956,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2023-2956,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2023-2956,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2023-2956,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2023-2956,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2023-2956,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2023-2956,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2023-2956,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2023-2956,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2023-2956,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2023-2956,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2023-2956,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2023-2956,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2023-2956,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2023-2956,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2023-2956,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2023-2956,SUSE-2023-2956,SUSE-SLE-Product-RT-15-SP3-2023-2956,SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-2956,SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-2956,SUSE-SUSE-MicroOS-5.1-2023-2956,SUSE-SUSE-MicroOS-5.2-2023-2956,openSUSE-SLE-15.4-2023-2956 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20232956-1/ Link for SUSE-SU-2023:2956-1 https://lists.suse.com/pipermail/sle-security-updates/2023-July/015622.html E-Mail link for SUSE-SU-2023:2956-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1211419 SUSE Bug 1211419 https://www.suse.com/security/cve/CVE-2023-2603/ SUSE CVE CVE-2023-2603 page Container ses/7.1/ceph/grafana:latest Container ses/7.1/ceph/haproxy:latest Container ses/7.1/ceph/keepalived:latest Container ses/7.1/ceph/prometheus-alertmanager:latest Container ses/7.1/ceph/prometheus-node-exporter:latest Container ses/7.1/ceph/prometheus-server:latest Container ses/7.1/ceph/prometheus-snmp_notifier:latest Container ses/7.1/cephcsi/cephcsi:latest Container ses/7.1/cephcsi/csi-attacher:v4.1.0 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 Container ses/7.1/cephcsi/csi-resizer:v1.7.0 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 Container ses/7.1/rook/ceph:latest Container suse/ltss/sle15.3/bci-base-fips:15.3 Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro/5.1/toolbox:latest Container suse/sle-micro/5.2/toolbox:latest Container suse/sle15:15.1 Container suse/sle15:15.2 Container suse/sle15:15.3 Container trento/trento-wanda:latest Container trento/trento-web:latest Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Real Time 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.4 libcap2-2.26-150000.4.9.1 libcap-progs-2.26-150000.4.9.1 libcap-devel-2.26-150000.4.9.1 libcap2-32bit-2.26-150000.4.9.1 libcap2-64bit-2.26-150000.4.9.1 pam_cap-2.26-150000.4.9.1 pam_cap-32bit-2.26-150000.4.9.1 pam_cap-64bit-2.26-150000.4.9.1 libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/ceph/grafana:latest libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/ceph/haproxy:latest libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/ceph/keepalived:latest libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/ceph/prometheus-alertmanager:latest libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/ceph/prometheus-node-exporter:latest libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/ceph/prometheus-server:latest libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/ceph/prometheus-snmp_notifier:latest libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/cephcsi/cephcsi:latest libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/cephcsi/csi-attacher:v4.1.0 libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/cephcsi/csi-resizer:v1.7.0 libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 libcap2-2.26-150000.4.9.1 as a component of Container ses/7.1/rook/ceph:latest libcap2-2.26-150000.4.9.1 as a component of Container suse/ltss/sle15.3/bci-base-fips:15.3 libcap2-2.26-150000.4.9.1 as a component of Container suse/sle-micro-rancher/5.2:latest libcap-progs-2.26-150000.4.9.1 as a component of Container suse/sle-micro/5.1/toolbox:latest libcap2-2.26-150000.4.9.1 as a component of Container suse/sle-micro/5.1/toolbox:latest libcap-progs-2.26-150000.4.9.1 as a component of Container suse/sle-micro/5.2/toolbox:latest libcap2-2.26-150000.4.9.1 as a component of Container suse/sle-micro/5.2/toolbox:latest libcap2-2.26-150000.4.9.1 as a component of Container suse/sle15:15.1 libcap2-2.26-150000.4.9.1 as a component of Container suse/sle15:15.2 libcap2-2.26-150000.4.9.1 as a component of Container suse/sle15:15.3 libcap2-2.26-150000.4.9.1 as a component of Container trento/trento-wanda:latest libcap2-2.26-150000.4.9.1 as a component of Container trento/trento-web:latest libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libcap2-2.26-150000.4.9.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libcap2-2.26-150000.4.9.1 as a component of SUSE Linux Enterprise Micro 5.1 libcap2-2.26-150000.4.9.1 as a component of SUSE Linux Enterprise Micro 5.2 libcap-devel-2.26-150000.4.9.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libcap-progs-2.26-150000.4.9.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libcap2-2.26-150000.4.9.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libcap2-32bit-2.26-150000.4.9.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libcap-devel-2.26-150000.4.9.1 as a component of SUSE Manager Proxy 4.2 libcap-progs-2.26-150000.4.9.1 as a component of SUSE Manager Proxy 4.2 libcap2-2.26-150000.4.9.1 as a component of SUSE Manager Proxy 4.2 libcap2-32bit-2.26-150000.4.9.1 as a component of SUSE Manager Proxy 4.2 libcap-devel-2.26-150000.4.9.1 as a component of SUSE Manager Server 4.2 libcap-progs-2.26-150000.4.9.1 as a component of SUSE Manager Server 4.2 libcap2-2.26-150000.4.9.1 as a component of SUSE Manager Server 4.2 libcap2-32bit-2.26-150000.4.9.1 as a component of SUSE Manager Server 4.2 pam_cap-2.26-150000.4.9.1 as a component of openSUSE Leap 15.4 pam_cap-32bit-2.26-150000.4.9.1 as a component of openSUSE Leap 15.4 A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB. CVE-2023-2603 Container ses/7.1/ceph/grafana:latest:libcap2-2.26-150000.4.9.1 Container ses/7.1/ceph/haproxy:latest:libcap2-2.26-150000.4.9.1 Container ses/7.1/ceph/keepalived:latest:libcap2-2.26-150000.4.9.1 Container ses/7.1/ceph/prometheus-alertmanager:latest:libcap2-2.26-150000.4.9.1 Container ses/7.1/ceph/prometheus-node-exporter:latest:libcap2-2.26-150000.4.9.1 Container ses/7.1/ceph/prometheus-server:latest:libcap2-2.26-150000.4.9.1 Container ses/7.1/ceph/prometheus-snmp_notifier:latest:libcap2-2.26-150000.4.9.1 Container ses/7.1/cephcsi/cephcsi:latest:libcap2-2.26-150000.4.9.1 Container ses/7.1/cephcsi/csi-attacher:v4.1.0:libcap2-2.26-150000.4.9.1 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0:libcap2-2.26-150000.4.9.1 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0:libcap2-2.26-150000.4.9.1 Container ses/7.1/cephcsi/csi-resizer:v1.7.0:libcap2-2.26-150000.4.9.1 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1:libcap2-2.26-150000.4.9.1 Container ses/7.1/rook/ceph:latest:libcap2-2.26-150000.4.9.1 Container suse/ltss/sle15.3/bci-base-fips:15.3:libcap2-2.26-150000.4.9.1 Container suse/sle-micro-rancher/5.2:latest:libcap2-2.26-150000.4.9.1 Container suse/sle-micro/5.1/toolbox:latest:libcap-progs-2.26-150000.4.9.1 Container suse/sle-micro/5.1/toolbox:latest:libcap2-2.26-150000.4.9.1 Container suse/sle-micro/5.2/toolbox:latest:libcap-progs-2.26-150000.4.9.1 Container suse/sle-micro/5.2/toolbox:latest:libcap2-2.26-150000.4.9.1 Container suse/sle15:15.1:libcap2-2.26-150000.4.9.1 Container suse/sle15:15.2:libcap2-2.26-150000.4.9.1 Container suse/sle15:15.3:libcap2-2.26-150000.4.9.1 Container trento/trento-wanda:latest:libcap2-2.26-150000.4.9.1 Container trento/trento-web:latest:libcap2-2.26-150000.4.9.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libcap2-2.26-150000.4.9.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libcap2-2.26-150000.4.9.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libcap2-2.26-150000.4.9.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libcap2-2.26-150000.4.9.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libcap2-2.26-150000.4.9.1 SUSE Linux Enterprise Micro 5.1:libcap2-2.26-150000.4.9.1 SUSE Linux Enterprise Micro 5.2:libcap2-2.26-150000.4.9.1 SUSE Linux Enterprise Real Time 15 SP3:libcap-devel-2.26-150000.4.9.1 SUSE Linux Enterprise Real Time 15 SP3:libcap-progs-2.26-150000.4.9.1 SUSE Linux Enterprise Real Time 15 SP3:libcap2-2.26-150000.4.9.1 SUSE Linux Enterprise Real Time 15 SP3:libcap2-32bit-2.26-150000.4.9.1 SUSE Manager Proxy 4.2:libcap-devel-2.26-150000.4.9.1 SUSE Manager Proxy 4.2:libcap-progs-2.26-150000.4.9.1 SUSE Manager Proxy 4.2:libcap2-2.26-150000.4.9.1 SUSE Manager Proxy 4.2:libcap2-32bit-2.26-150000.4.9.1 SUSE Manager Server 4.2:libcap-devel-2.26-150000.4.9.1 SUSE Manager Server 4.2:libcap-progs-2.26-150000.4.9.1 SUSE Manager Server 4.2:libcap2-2.26-150000.4.9.1 SUSE Manager Server 4.2:libcap2-32bit-2.26-150000.4.9.1 openSUSE Leap 15.4:pam_cap-2.26-150000.4.9.1 openSUSE Leap 15.4:pam_cap-32bit-2.26-150000.4.9.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232956-1/ https://www.suse.com/security/cve/CVE-2023-2603.html CVE-2023-2603 https://bugzilla.suse.com/1211419 SUSE Bug 1211419