collectd-5.12.0-7.2 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:10691-1 Final 1 1 2024-06-15T00:00:00Z current 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z collectd-5.12.0-7.2 on GA media These are all security issues fixed in the collectd-5.12.0-7.2 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-10691 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2017-7401/ SUSE CVE CVE-2017-7401 page openSUSE Tumbleweed collectd-5.12.0-7.2 collectd-plugin-amqp-5.12.0-7.2 collectd-plugin-buddyinfo-5.12.0-7.2 collectd-plugin-connectivity-5.12.0-7.2 collectd-plugin-dbi-5.12.0-7.2 collectd-plugin-gps-5.12.0-7.2 collectd-plugin-ipmi-5.12.0-7.2 collectd-plugin-java-5.12.0-7.2 collectd-plugin-logparser-5.12.0-7.2 collectd-plugin-lua-5.12.0-7.2 collectd-plugin-mcelog-5.12.0-7.2 collectd-plugin-memcachec-5.12.0-7.2 collectd-plugin-modbus-5.12.0-7.2 collectd-plugin-mqtt-5.12.0-7.2 collectd-plugin-mysql-5.12.0-7.2 collectd-plugin-notify-desktop-5.12.0-7.2 collectd-plugin-nut-5.12.0-7.2 collectd-plugin-openldap-5.12.0-7.2 collectd-plugin-ovs-5.12.0-7.2 collectd-plugin-pcie-5.12.0-7.2 collectd-plugin-pinba-5.12.0-7.2 collectd-plugin-postgresql-5.12.0-7.2 collectd-plugin-procevent-5.12.0-7.2 collectd-plugin-python3-5.12.0-7.2 collectd-plugin-sigrok-5.12.0-7.2 collectd-plugin-smart-5.12.0-7.2 collectd-plugin-snmp-5.12.0-7.2 collectd-plugin-synproxy-5.12.0-7.2 collectd-plugin-sysevent-5.12.0-7.2 collectd-plugin-ubi-5.12.0-7.2 collectd-plugin-uptime-5.12.0-7.2 collectd-plugin-virt-5.12.0-7.2 collectd-plugin-write_influxdb_udp-5.12.0-7.2 collectd-plugin-write_stackdriver-5.12.0-7.2 collectd-plugin-write_syslog-5.12.0-7.2 collectd-plugins-all-5.12.0-7.2 collectd-spamassassin-5.12.0-7.2 collectd-web-5.12.0-7.2 collectd-web-js-5.12.0-7.2 libcollectdclient-devel-5.12.0-7.2 libcollectdclient1-5.12.0-7.2 collectd-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-amqp-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-buddyinfo-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-connectivity-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-dbi-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-gps-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-ipmi-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-java-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-logparser-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-lua-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-mcelog-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-memcachec-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-modbus-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-mqtt-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-mysql-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-notify-desktop-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-nut-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-openldap-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-ovs-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-pcie-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-pinba-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-postgresql-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-procevent-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-python3-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-sigrok-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-smart-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-snmp-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-synproxy-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-sysevent-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-ubi-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-uptime-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-virt-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-write_influxdb_udp-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-write_stackdriver-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugin-write_syslog-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-plugins-all-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-spamassassin-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-web-5.12.0-7.2 as a component of openSUSE Tumbleweed collectd-web-js-5.12.0-7.2 as a component of openSUSE Tumbleweed libcollectdclient-devel-5.12.0-7.2 as a component of openSUSE Tumbleweed libcollectdclient1-5.12.0-7.2 as a component of openSUSE Tumbleweed Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a collectd instance (configured with "SecurityLevel None" and with empty "AuthFile" options) via a crafted UDP packet. CVE-2017-7401 openSUSE Tumbleweed:collectd-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-amqp-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-buddyinfo-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-connectivity-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-dbi-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-gps-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-ipmi-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-java-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-logparser-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-lua-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-mcelog-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-memcachec-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-modbus-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-mqtt-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-mysql-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-notify-desktop-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-nut-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-openldap-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-ovs-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-pcie-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-pinba-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-postgresql-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-procevent-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-python3-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-sigrok-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-smart-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-snmp-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-synproxy-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-sysevent-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-ubi-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-uptime-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-virt-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-write_influxdb_udp-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-write_stackdriver-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugin-write_syslog-5.12.0-7.2 openSUSE Tumbleweed:collectd-plugins-all-5.12.0-7.2 openSUSE Tumbleweed:collectd-spamassassin-5.12.0-7.2 openSUSE Tumbleweed:collectd-web-5.12.0-7.2 openSUSE Tumbleweed:collectd-web-js-5.12.0-7.2 openSUSE Tumbleweed:libcollectdclient-devel-5.12.0-7.2 openSUSE Tumbleweed:libcollectdclient1-5.12.0-7.2 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-7401.html CVE-2017-7401 https://bugzilla.suse.com/1032307 SUSE Bug 1032307