Security update for libeconf SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3954-1 Final 1 1 2023-10-03T18:10:09Z current 2023-10-03T18:10:09Z 2023-10-03T18:10:09Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libeconf This update for libeconf fixes the following issues: Update to version 0.5.2. - CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078). - CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/bci-init:15.4-2023-3954,Container bci/bci-init:latest-2023-3954,Container bci/dotnet-aspnet:6.0-2023-3954,Container bci/dotnet-aspnet:latest-2023-3954,Container bci/dotnet-runtime:6.0-2023-3954,Container bci/dotnet-runtime:latest-2023-3954,Container bci/dotnet-sdk:6.0-2023-3954,Container bci/dotnet-sdk:latest-2023-3954,Container bci/golang:1.19-openssl-2023-3954,Container bci/golang:1.20-2023-3954,Container bci/golang:latest-2023-3954,Container bci/nodejs:latest-2023-3954,Container bci/openjdk-devel:11-2023-3954,Container bci/openjdk-devel:latest-2023-3954,Container bci/openjdk:11-2023-3954,Container bci/openjdk:latest-2023-3954,Container bci/php-apache:8-2023-3954,Container bci/php-fpm:8-2023-3954,Container bci/php:8-2023-3954,Container bci/python:3-2023-3954,Container bci/python:latest-2023-3954,Container bci/ruby:latest-2023-3954,Container bci/rust:1.71-2023-3954,Container bci/rust:latest-2023-3954,Container suse/389-ds:latest-2023-3954,Container suse/nginx:latest-2023-3954,Container suse/pcp:5-2023-3954,Container suse/pcp:latest-2023-3954,Container suse/postgres:14-2023-3954,Container suse/postgres:latest-2023-3954,Container suse/registry:latest-2023-3954,Container suse/rmt-server:latest-2023-3954,Container suse/sle-micro-rancher/5.3:latest-2023-3954,Container suse/sle-micro-rancher/5.4:latest-2023-3954,Container suse/sle-micro/5.3/toolbox:latest-2023-3954,Container suse/sle-micro/5.4/toolbox:latest-2023-3954,Container suse/sle-micro/5.5/toolbox:latest-2023-3954,Container suse/sle15:15.4-2023-3954,Container suse/sle15:15.5-2023-3954,Image SLES15-SP4-SAP-Azure-LI-BYOS-2023-3954,Image SLES15-SP4-SAP-Azure-LI-BYOS-Production-2023-3954,Image SLES15-SP4-SAP-Azure-VLI-BYOS-2023-3954,Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production-2023-3954,Image SLES15-SP5-Micro-5-5-2023-3954,Image SLES15-SP5-Micro-5-5-Azure-2023-3954,Image SLES15-SP5-Micro-5-5-BYOS-2023-3954,Image SLES15-SP5-Micro-5-5-BYOS-Azure-2023-3954,Image SLES15-SP5-Micro-5-5-BYOS-EC2-2023-3954,Image SLES15-SP5-Micro-5-5-BYOS-GCE-2023-3954,Image SLES15-SP5-Micro-5-5-EC2-2023-3954,Image SLES15-SP5-Micro-5-5-GCE-2023-3954,SUSE-2023-3954,SUSE-SLE-Micro-5.3-2023-3954,SUSE-SLE-Micro-5.4-2023-3954,SUSE-SLE-Module-Basesystem-15-SP4-2023-3954,SUSE-SLE-Module-Basesystem-15-SP5-2023-3954,openSUSE-SLE-15.4-2023-3954,openSUSE-SLE-15.5-2023-3954 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233954-1/ Link for SUSE-SU-2023:3954-1 https://lists.suse.com/pipermail/sle-security-updates/2023-October/016487.html E-Mail link for SUSE-SU-2023:3954-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1211078 SUSE Bug 1211078 https://www.suse.com/security/cve/CVE-2023-22652/ SUSE CVE CVE-2023-22652 page https://www.suse.com/security/cve/CVE-2023-30078/ SUSE CVE CVE-2023-30078 page https://www.suse.com/security/cve/CVE-2023-30079/ SUSE CVE CVE-2023-30079 page https://www.suse.com/security/cve/CVE-2023-32181/ SUSE CVE CVE-2023-32181 page Container bci/bci-init:15.4 Container bci/bci-init:latest Container bci/dotnet-aspnet:6.0 Container bci/dotnet-aspnet:latest Container bci/dotnet-runtime:6.0 Container bci/dotnet-runtime:latest Container bci/dotnet-sdk:6.0 Container bci/dotnet-sdk:latest Container bci/golang:1.19-openssl Container bci/golang:1.20 Container bci/golang:latest Container bci/nodejs:latest Container bci/openjdk-devel:11 Container bci/openjdk-devel:latest Container bci/openjdk:11 Container bci/openjdk:latest Container bci/php-apache:8 Container bci/php-fpm:8 Container bci/php:8 Container bci/python:3 Container bci/python:latest Container bci/ruby:latest Container bci/rust:1.71 Container bci/rust:latest Container suse/389-ds:latest Container suse/nginx:latest Container suse/pcp:5 Container suse/pcp:latest Container suse/postgres:14 Container suse/postgres:latest Container suse/registry:latest Container suse/rmt-server:latest Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest Container suse/sle-micro/5.3/toolbox:latest Container suse/sle-micro/5.4/toolbox:latest Container suse/sle-micro/5.5/toolbox:latest Container suse/sle15:15.4 Container suse/sle15:15.5 Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 openSUSE Leap 15.4 openSUSE Leap 15.5 libeconf0-0.5.2-150400.3.6.1 libeconf-devel-0.5.2-150400.3.6.1 libeconf-utils-0.5.2-150400.3.6.1 libeconf0-32bit-0.5.2-150400.3.6.1 libeconf0-64bit-0.5.2-150400.3.6.1 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/bci-init:15.4 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/bci-init:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/dotnet-aspnet:6.0 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/dotnet-aspnet:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/dotnet-runtime:6.0 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/dotnet-runtime:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/dotnet-sdk:6.0 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/dotnet-sdk:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/golang:1.19-openssl libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/golang:1.20 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/golang:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/nodejs:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/openjdk-devel:11 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/openjdk-devel:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/openjdk:11 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/openjdk:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/php-apache:8 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/php-fpm:8 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/php:8 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/python:3 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/python:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/ruby:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/rust:1.71 libeconf0-0.5.2-150400.3.6.1 as a component of Container bci/rust:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/389-ds:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/nginx:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/pcp:5 libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/pcp:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/postgres:14 libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/postgres:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/registry:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/rmt-server:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/sle-micro-rancher/5.3:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/sle-micro-rancher/5.4:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/sle-micro/5.3/toolbox:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/sle-micro/5.4/toolbox:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/sle-micro/5.5/toolbox:latest libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/sle15:15.4 libeconf0-0.5.2-150400.3.6.1 as a component of Container suse/sle15:15.5 libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP5-Micro-5-5 libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP5-Micro-5-5-Azure libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-Azure libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2 libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-GCE libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP5-Micro-5-5-EC2 libeconf0-0.5.2-150400.3.6.1 as a component of Image SLES15-SP5-Micro-5-5-GCE libeconf0-0.5.2-150400.3.6.1 as a component of SUSE Linux Enterprise Micro 5.3 libeconf0-0.5.2-150400.3.6.1 as a component of SUSE Linux Enterprise Micro 5.4 libeconf0-0.5.2-150400.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libeconf0-0.5.2-150400.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libeconf-devel-0.5.2-150400.3.6.1 as a component of openSUSE Leap 15.4 libeconf-utils-0.5.2-150400.3.6.1 as a component of openSUSE Leap 15.4 libeconf0-0.5.2-150400.3.6.1 as a component of openSUSE Leap 15.4 libeconf0-32bit-0.5.2-150400.3.6.1 as a component of openSUSE Leap 15.4 libeconf-devel-0.5.2-150400.3.6.1 as a component of openSUSE Leap 15.5 libeconf-utils-0.5.2-150400.3.6.1 as a component of openSUSE Leap 15.5 libeconf0-0.5.2-150400.3.6.1 as a component of openSUSE Leap 15.5 libeconf0-32bit-0.5.2-150400.3.6.1 as a component of openSUSE Leap 15.5 A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2. CVE-2023-22652 Container bci/bci-init:15.4:libeconf0-0.5.2-150400.3.6.1 Container bci/bci-init:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-aspnet:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-aspnet:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-runtime:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-runtime:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-sdk:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-sdk:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:1.19-openssl:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:1.20:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/nodejs:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk-devel:11:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk-devel:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk:11:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/php-apache:8:libeconf0-0.5.2-150400.3.6.1 Container bci/php-fpm:8:libeconf0-0.5.2-150400.3.6.1 Container bci/php:8:libeconf0-0.5.2-150400.3.6.1 Container bci/python:3:libeconf0-0.5.2-150400.3.6.1 Container bci/python:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/ruby:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/rust:1.71:libeconf0-0.5.2-150400.3.6.1 Container bci/rust:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/389-ds:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/nginx:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/pcp:5:libeconf0-0.5.2-150400.3.6.1 Container suse/pcp:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/postgres:14:libeconf0-0.5.2-150400.3.6.1 Container suse/postgres:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/registry:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/rmt-server:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro-rancher/5.3:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro-rancher/5.4:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.3/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.4/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.5/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle15:15.4:libeconf0-0.5.2-150400.3.6.1 Container suse/sle15:15.5:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-Azure:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-Azure:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-GCE:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-EC2:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-GCE:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Micro 5.3:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Micro 5.4:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf-devel-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf-utils-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf0-32bit-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf-devel-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf-utils-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf0-32bit-0.5.2-150400.3.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233954-1/ https://www.suse.com/security/cve/CVE-2023-22652.html CVE-2023-22652 https://bugzilla.suse.com/1211078 SUSE Bug 1211078 A stack overflow vulnerability exists in function econf_writeFile in file atlibeconf/lib/libeconf.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. CVE-2023-30078 Container bci/bci-init:15.4:libeconf0-0.5.2-150400.3.6.1 Container bci/bci-init:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-aspnet:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-aspnet:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-runtime:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-runtime:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-sdk:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-sdk:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:1.19-openssl:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:1.20:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/nodejs:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk-devel:11:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk-devel:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk:11:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/php-apache:8:libeconf0-0.5.2-150400.3.6.1 Container bci/php-fpm:8:libeconf0-0.5.2-150400.3.6.1 Container bci/php:8:libeconf0-0.5.2-150400.3.6.1 Container bci/python:3:libeconf0-0.5.2-150400.3.6.1 Container bci/python:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/ruby:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/rust:1.71:libeconf0-0.5.2-150400.3.6.1 Container bci/rust:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/389-ds:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/nginx:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/pcp:5:libeconf0-0.5.2-150400.3.6.1 Container suse/pcp:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/postgres:14:libeconf0-0.5.2-150400.3.6.1 Container suse/postgres:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/registry:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/rmt-server:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro-rancher/5.3:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro-rancher/5.4:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.3/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.4/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.5/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle15:15.4:libeconf0-0.5.2-150400.3.6.1 Container suse/sle15:15.5:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-Azure:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-Azure:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-GCE:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-EC2:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-GCE:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Micro 5.3:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Micro 5.4:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf-devel-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf-utils-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf0-32bit-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf-devel-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf-utils-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf0-32bit-0.5.2-150400.3.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233954-1/ https://www.suse.com/security/cve/CVE-2023-30078.html CVE-2023-30078 https://bugzilla.suse.com/1214597 SUSE Bug 1214597 A stack overflow vulnerability exists in function read_file in atlibeconf/lib/getfilecontents.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. CVE-2023-30079 Container bci/bci-init:15.4:libeconf0-0.5.2-150400.3.6.1 Container bci/bci-init:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-aspnet:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-aspnet:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-runtime:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-runtime:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-sdk:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-sdk:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:1.19-openssl:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:1.20:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/nodejs:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk-devel:11:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk-devel:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk:11:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/php-apache:8:libeconf0-0.5.2-150400.3.6.1 Container bci/php-fpm:8:libeconf0-0.5.2-150400.3.6.1 Container bci/php:8:libeconf0-0.5.2-150400.3.6.1 Container bci/python:3:libeconf0-0.5.2-150400.3.6.1 Container bci/python:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/ruby:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/rust:1.71:libeconf0-0.5.2-150400.3.6.1 Container bci/rust:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/389-ds:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/nginx:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/pcp:5:libeconf0-0.5.2-150400.3.6.1 Container suse/pcp:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/postgres:14:libeconf0-0.5.2-150400.3.6.1 Container suse/postgres:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/registry:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/rmt-server:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro-rancher/5.3:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro-rancher/5.4:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.3/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.4/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.5/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle15:15.4:libeconf0-0.5.2-150400.3.6.1 Container suse/sle15:15.5:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-Azure:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-Azure:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-GCE:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-EC2:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-GCE:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Micro 5.3:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Micro 5.4:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf-devel-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf-utils-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf0-32bit-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf-devel-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf-utils-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf0-32bit-0.5.2-150400.3.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233954-1/ https://www.suse.com/security/cve/CVE-2023-30079.html CVE-2023-30079 https://bugzilla.suse.com/1214598 SUSE Bug 1214598 A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2. CVE-2023-32181 Container bci/bci-init:15.4:libeconf0-0.5.2-150400.3.6.1 Container bci/bci-init:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-aspnet:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-aspnet:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-runtime:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-runtime:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-sdk:6.0:libeconf0-0.5.2-150400.3.6.1 Container bci/dotnet-sdk:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:1.19-openssl:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:1.20:libeconf0-0.5.2-150400.3.6.1 Container bci/golang:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/nodejs:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk-devel:11:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk-devel:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk:11:libeconf0-0.5.2-150400.3.6.1 Container bci/openjdk:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/php-apache:8:libeconf0-0.5.2-150400.3.6.1 Container bci/php-fpm:8:libeconf0-0.5.2-150400.3.6.1 Container bci/php:8:libeconf0-0.5.2-150400.3.6.1 Container bci/python:3:libeconf0-0.5.2-150400.3.6.1 Container bci/python:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/ruby:latest:libeconf0-0.5.2-150400.3.6.1 Container bci/rust:1.71:libeconf0-0.5.2-150400.3.6.1 Container bci/rust:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/389-ds:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/nginx:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/pcp:5:libeconf0-0.5.2-150400.3.6.1 Container suse/pcp:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/postgres:14:libeconf0-0.5.2-150400.3.6.1 Container suse/postgres:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/registry:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/rmt-server:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro-rancher/5.3:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro-rancher/5.4:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.3/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.4/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle-micro/5.5/toolbox:latest:libeconf0-0.5.2-150400.3.6.1 Container suse/sle15:15.4:libeconf0-0.5.2-150400.3.6.1 Container suse/sle15:15.5:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-Azure:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-Azure:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-GCE:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-BYOS:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-EC2:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5-GCE:libeconf0-0.5.2-150400.3.6.1 Image SLES15-SP5-Micro-5-5:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Micro 5.3:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Micro 5.4:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libeconf0-0.5.2-150400.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf-devel-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf-utils-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.4:libeconf0-32bit-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf-devel-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf-utils-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf0-0.5.2-150400.3.6.1 openSUSE Leap 15.5:libeconf0-32bit-0.5.2-150400.3.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233954-1/ https://www.suse.com/security/cve/CVE-2023-32181.html CVE-2023-32181 https://bugzilla.suse.com/1211078 SUSE Bug 1211078