Security update for zstd SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:2074-1 Final 1 1 2023-04-28T15:02:34Z current 2023-04-28T15:02:34Z 2023-04-28T15:02:34Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for zstd This update for zstd fixes the following issues: - CVE-2022-4899: Fixed buffer overrun in util.c (bsc#1209533). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/cilium-operator:1.6.6-2023-2074,Container caasp/v4/cilium:1.6.6-2023-2074,Container ses/7.1/ceph/grafana:latest-2023-2074,Container ses/7.1/ceph/haproxy:latest-2023-2074,Container ses/7.1/ceph/keepalived:latest-2023-2074,Container ses/7.1/ceph/prometheus-alertmanager:latest-2023-2074,Container ses/7.1/ceph/prometheus-node-exporter:latest-2023-2074,Container ses/7.1/ceph/prometheus-server:latest-2023-2074,Container ses/7.1/ceph/prometheus-snmp_notifier:latest-2023-2074,Container ses/7.1/cephcsi/cephcsi:latest-2023-2074,Container ses/7.1/cephcsi/csi-attacher:v4.1.0-2023-2074,Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0-2023-2074,Container ses/7.1/cephcsi/csi-provisioner:v3.4.0-2023-2074,Container ses/7.1/cephcsi/csi-resizer:v1.7.0-2023-2074,Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1-2023-2074,Container ses/7.1/rook/ceph:latest-2023-2074,Container suse/sle-micro-rancher/5.2:latest-2023-2074,Container suse/sle-micro/5.1/toolbox:latest-2023-2074,Container suse/sle-micro/5.2/toolbox:latest-2023-2074,Container suse/sle15:15.1-2023-2074,Container suse/sle15:15.2-2023-2074,Container suse/sle15:15.3-2023-2074,Image SLES15-SP3-BYOS-Azure-2023-2074,Image SLES15-SP3-BYOS-EC2-HVM-2023-2074,Image SLES15-SP3-BYOS-GCE-2023-2074,Image SLES15-SP3-CHOST-BYOS-Aliyun-2023-2074,Image SLES15-SP3-CHOST-BYOS-Azure-2023-2074,Image SLES15-SP3-CHOST-BYOS-EC2-2023-2074,Image SLES15-SP3-CHOST-BYOS-GCE-2023-2074,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2023-2074,Image SLES15-SP3-HPC-BYOS-Azure-2023-2074,Image SLES15-SP3-HPC-BYOS-EC2-HVM-2023-2074,Image SLES15-SP3-HPC-BYOS-GCE-2023-2074,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2023-2074,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2023-2074,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2023-2074,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2023-2074,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2023-2074,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2023-2074,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2023-2074,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2023-2074,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2023-2074,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2023-2074,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2023-2074,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2023-2074,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2023-2074,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2023-2074,Image SLES15-SP3-SAP-BYOS-Azure-2023-2074,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2023-2074,Image SLES15-SP3-SAP-BYOS-GCE-2023-2074,Image SLES15-SP3-SAPCAL-Azure-2023-2074,Image SLES15-SP3-SAPCAL-EC2-HVM-2023-2074,Image SLES15-SP3-SAPCAL-GCE-2023-2074,SUSE-2023-2074,SUSE-SLE-Product-RT-15-SP3-2023-2074,SUSE-SUSE-MicroOS-5.1-2023-2074,SUSE-SUSE-MicroOS-5.2-2023-2074 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20232074-1/ Link for SUSE-SU-2023:2074-1 https://lists.suse.com/pipermail/sle-security-updates/2023-May/014777.html E-Mail link for SUSE-SU-2023:2074-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1209533 SUSE Bug 1209533 https://www.suse.com/security/cve/CVE-2022-4899/ SUSE CVE CVE-2022-4899 page Container caasp/v4/cilium-operator:1.6.6 Container caasp/v4/cilium:1.6.6 Container ses/7.1/ceph/grafana:latest Container ses/7.1/ceph/haproxy:latest Container ses/7.1/ceph/keepalived:latest Container ses/7.1/ceph/prometheus-alertmanager:latest Container ses/7.1/ceph/prometheus-node-exporter:latest Container ses/7.1/ceph/prometheus-server:latest Container ses/7.1/ceph/prometheus-snmp_notifier:latest Container ses/7.1/cephcsi/cephcsi:latest Container ses/7.1/cephcsi/csi-attacher:v4.1.0 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 Container ses/7.1/cephcsi/csi-resizer:v1.7.0 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 Container ses/7.1/rook/ceph:latest Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro/5.1/toolbox:latest Container suse/sle-micro/5.2/toolbox:latest Container suse/sle15:15.1 Container suse/sle15:15.2 Container suse/sle15:15.3 Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Real Time 15 SP3 libzstd1-1.4.4-150000.1.9.1 zstd-1.4.4-150000.1.9.1 libzstd1-32bit-1.4.4-150000.1.9.1 libzstd-devel-1.4.4-150000.1.9.1 libzstd-devel-static-1.4.4-150000.1.9.1 libzstd1-64bit-1.4.4-150000.1.9.1 libzstd1-1.4.4-150000.1.9.1 as a component of Container caasp/v4/cilium-operator:1.6.6 libzstd1-1.4.4-150000.1.9.1 as a component of Container caasp/v4/cilium:1.6.6 libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/ceph/grafana:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/ceph/haproxy:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/ceph/keepalived:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/ceph/prometheus-alertmanager:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/ceph/prometheus-node-exporter:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/ceph/prometheus-server:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/ceph/prometheus-snmp_notifier:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/cephcsi/cephcsi:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/cephcsi/csi-attacher:v4.1.0 libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/cephcsi/csi-resizer:v1.7.0 libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 libzstd1-1.4.4-150000.1.9.1 as a component of Container ses/7.1/rook/ceph:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container suse/sle-micro-rancher/5.2:latest zstd-1.4.4-150000.1.9.1 as a component of Container suse/sle-micro-rancher/5.2:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container suse/sle-micro/5.1/toolbox:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container suse/sle-micro/5.2/toolbox:latest libzstd1-1.4.4-150000.1.9.1 as a component of Container suse/sle15:15.1 libzstd1-1.4.4-150000.1.9.1 as a component of Container suse/sle15:15.2 libzstd1-1.4.4-150000.1.9.1 as a component of Container suse/sle15:15.3 libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-BYOS-Azure libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-BYOS-GCE libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-SAPCAL-Azure libzstd1-32bit-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-SAPCAL-Azure libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libzstd1-32bit-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libzstd1-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-SAPCAL-GCE libzstd1-32bit-1.4.4-150000.1.9.1 as a component of Image SLES15-SP3-SAPCAL-GCE libzstd1-1.4.4-150000.1.9.1 as a component of SUSE Linux Enterprise Micro 5.1 libzstd1-1.4.4-150000.1.9.1 as a component of SUSE Linux Enterprise Micro 5.2 zstd-1.4.4-150000.1.9.1 as a component of SUSE Linux Enterprise Micro 5.2 libzstd-devel-1.4.4-150000.1.9.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libzstd1-1.4.4-150000.1.9.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libzstd1-32bit-1.4.4-150000.1.9.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 zstd-1.4.4-150000.1.9.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun. CVE-2022-4899 Container caasp/v4/cilium-operator:1.6.6:libzstd1-1.4.4-150000.1.9.1 Container caasp/v4/cilium:1.6.6:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/ceph/grafana:latest:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/ceph/haproxy:latest:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/ceph/keepalived:latest:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/ceph/prometheus-alertmanager:latest:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/ceph/prometheus-node-exporter:latest:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/ceph/prometheus-server:latest:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/ceph/prometheus-snmp_notifier:latest:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/cephcsi/cephcsi:latest:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/cephcsi/csi-attacher:v4.1.0:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/cephcsi/csi-resizer:v1.7.0:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1:libzstd1-1.4.4-150000.1.9.1 Container ses/7.1/rook/ceph:latest:libzstd1-1.4.4-150000.1.9.1 Container suse/sle-micro-rancher/5.2:latest:libzstd1-1.4.4-150000.1.9.1 Container suse/sle-micro-rancher/5.2:latest:zstd-1.4.4-150000.1.9.1 Container suse/sle-micro/5.1/toolbox:latest:libzstd1-1.4.4-150000.1.9.1 Container suse/sle-micro/5.2/toolbox:latest:libzstd1-1.4.4-150000.1.9.1 Container suse/sle15:15.1:libzstd1-1.4.4-150000.1.9.1 Container suse/sle15:15.2:libzstd1-1.4.4-150000.1.9.1 Container suse/sle15:15.3:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-BYOS-Azure:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-BYOS-EC2-HVM:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-BYOS-GCE:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-CHOST-BYOS-Azure:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-CHOST-BYOS-EC2:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-CHOST-BYOS-GCE:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-HPC-BYOS-Azure:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-HPC-BYOS-GCE:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-SAP-BYOS-Azure:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-SAP-BYOS-GCE:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-SAPCAL-Azure:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-SAPCAL-Azure:libzstd1-32bit-1.4.4-150000.1.9.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libzstd1-32bit-1.4.4-150000.1.9.1 Image SLES15-SP3-SAPCAL-GCE:libzstd1-1.4.4-150000.1.9.1 Image SLES15-SP3-SAPCAL-GCE:libzstd1-32bit-1.4.4-150000.1.9.1 SUSE Linux Enterprise Micro 5.1:libzstd1-1.4.4-150000.1.9.1 SUSE Linux Enterprise Micro 5.2:libzstd1-1.4.4-150000.1.9.1 SUSE Linux Enterprise Micro 5.2:zstd-1.4.4-150000.1.9.1 SUSE Linux Enterprise Real Time 15 SP3:libzstd-devel-1.4.4-150000.1.9.1 SUSE Linux Enterprise Real Time 15 SP3:libzstd1-1.4.4-150000.1.9.1 SUSE Linux Enterprise Real Time 15 SP3:libzstd1-32bit-1.4.4-150000.1.9.1 SUSE Linux Enterprise Real Time 15 SP3:zstd-1.4.4-150000.1.9.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232074-1/ https://www.suse.com/security/cve/CVE-2022-4899.html CVE-2022-4899 https://bugzilla.suse.com/1209533 SUSE Bug 1209533