Security update for shadow SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:2648-1 Final 1 1 2024-07-30T10:03:57Z current 2024-07-30T10:03:57Z 2024-07-30T10:03:57Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for shadow This update for shadow fixes the following issues: - CVE-2013-4235: Fixed a race condition when copying and removing directory trees (bsc#916845). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/ltss/sle15.3/bci-base:latest-2024-2648,Container suse/sle-micro-rancher/5.2:latest-2024-2648,Container suse/sle-micro/5.1/toolbox:latest-2024-2648,Container suse/sle-micro/5.2/toolbox:latest-2024-2648,Image SLES15-SP3-BYOS-Azure-2024-2648,Image SLES15-SP3-BYOS-EC2-HVM-2024-2648,Image SLES15-SP3-BYOS-GCE-2024-2648,Image SLES15-SP3-CHOST-BYOS-Aliyun-2024-2648,Image SLES15-SP3-CHOST-BYOS-Azure-2024-2648,Image SLES15-SP3-CHOST-BYOS-EC2-2024-2648,Image SLES15-SP3-CHOST-BYOS-GCE-2024-2648,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2024-2648,Image SLES15-SP3-HPC-BYOS-Azure-2024-2648,Image SLES15-SP3-HPC-BYOS-EC2-HVM-2024-2648,Image SLES15-SP3-HPC-BYOS-GCE-2024-2648,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2024-2648,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2024-2648,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2024-2648,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2024-2648,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2024-2648,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2024-2648,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2024-2648,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2024-2648,Image SLES15-SP3-SAP-BYOS-Azure-2024-2648,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2024-2648,Image SLES15-SP3-SAP-BYOS-GCE-2024-2648,Image SLES15-SP3-SAPCAL-Azure-2024-2648,Image SLES15-SP3-SAPCAL-EC2-HVM-2024-2648,Image SLES15-SP3-SAPCAL-GCE-2024-2648,SUSE-2024-2648,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2648,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2648,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2648,SUSE-SUSE-MicroOS-5.1-2024-2648,SUSE-SUSE-MicroOS-5.2-2024-2648,SUSE-Storage-7.1-2024-2648 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20242648-1/ Link for SUSE-SU-2024:2648-1 https://lists.suse.com/pipermail/sle-updates/2024-July/036170.html E-Mail link for SUSE-SU-2024:2648-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/916845 SUSE Bug 916845 https://www.suse.com/security/cve/CVE-2013-4235/ SUSE CVE CVE-2013-4235 page Container suse/ltss/sle15.3/bci-base:latest Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro/5.1/toolbox:latest Container suse/sle-micro/5.2/toolbox:latest Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP3 login_defs-4.8.1-150300.4.15.1 shadow-4.8.1-150300.4.15.1 login_defs-4.8.1-150300.4.15.1 as a component of Container suse/ltss/sle15.3/bci-base:latest shadow-4.8.1-150300.4.15.1 as a component of Container suse/ltss/sle15.3/bci-base:latest login_defs-4.8.1-150300.4.15.1 as a component of Container suse/sle-micro-rancher/5.2:latest shadow-4.8.1-150300.4.15.1 as a component of Container suse/sle-micro-rancher/5.2:latest login_defs-4.8.1-150300.4.15.1 as a component of Container suse/sle-micro/5.1/toolbox:latest shadow-4.8.1-150300.4.15.1 as a component of Container suse/sle-micro/5.1/toolbox:latest login_defs-4.8.1-150300.4.15.1 as a component of Container suse/sle-micro/5.2/toolbox:latest shadow-4.8.1-150300.4.15.1 as a component of Container suse/sle-micro/5.2/toolbox:latest login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-BYOS-Azure shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-BYOS-Azure login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-BYOS-GCE shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-BYOS-GCE login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAPCAL-Azure shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAPCAL-Azure login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM login_defs-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAPCAL-GCE shadow-4.8.1-150300.4.15.1 as a component of Image SLES15-SP3-SAPCAL-GCE login_defs-4.8.1-150300.4.15.1 as a component of SUSE Enterprise Storage 7.1 shadow-4.8.1-150300.4.15.1 as a component of SUSE Enterprise Storage 7.1 login_defs-4.8.1-150300.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS shadow-4.8.1-150300.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS login_defs-4.8.1-150300.4.15.1 as a component of SUSE Linux Enterprise Micro 5.1 shadow-4.8.1-150300.4.15.1 as a component of SUSE Linux Enterprise Micro 5.1 login_defs-4.8.1-150300.4.15.1 as a component of SUSE Linux Enterprise Micro 5.2 shadow-4.8.1-150300.4.15.1 as a component of SUSE Linux Enterprise Micro 5.2 login_defs-4.8.1-150300.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS shadow-4.8.1-150300.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS login_defs-4.8.1-150300.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 shadow-4.8.1-150300.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees CVE-2013-4235 Container suse/ltss/sle15.3/bci-base:latest:login_defs-4.8.1-150300.4.15.1 Container suse/ltss/sle15.3/bci-base:latest:shadow-4.8.1-150300.4.15.1 Container suse/sle-micro-rancher/5.2:latest:login_defs-4.8.1-150300.4.15.1 Container suse/sle-micro-rancher/5.2:latest:shadow-4.8.1-150300.4.15.1 Container suse/sle-micro/5.1/toolbox:latest:login_defs-4.8.1-150300.4.15.1 Container suse/sle-micro/5.1/toolbox:latest:shadow-4.8.1-150300.4.15.1 Container suse/sle-micro/5.2/toolbox:latest:login_defs-4.8.1-150300.4.15.1 Container suse/sle-micro/5.2/toolbox:latest:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-BYOS-Azure:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-BYOS-Azure:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-BYOS-EC2-HVM:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-BYOS-EC2-HVM:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-BYOS-GCE:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-BYOS-GCE:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-CHOST-BYOS-Azure:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-CHOST-BYOS-Azure:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-CHOST-BYOS-EC2:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-CHOST-BYOS-EC2:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-CHOST-BYOS-GCE:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-CHOST-BYOS-GCE:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-HPC-BYOS-Azure:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-HPC-BYOS-Azure:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-HPC-BYOS-GCE:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-HPC-BYOS-GCE:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-SAP-BYOS-Azure:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-SAP-BYOS-Azure:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-SAP-BYOS-GCE:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-SAP-BYOS-GCE:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-SAPCAL-Azure:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-SAPCAL-Azure:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-SAPCAL-EC2-HVM:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-SAPCAL-EC2-HVM:shadow-4.8.1-150300.4.15.1 Image SLES15-SP3-SAPCAL-GCE:login_defs-4.8.1-150300.4.15.1 Image SLES15-SP3-SAPCAL-GCE:shadow-4.8.1-150300.4.15.1 SUSE Enterprise Storage 7.1:login_defs-4.8.1-150300.4.15.1 SUSE Enterprise Storage 7.1:shadow-4.8.1-150300.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:login_defs-4.8.1-150300.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:shadow-4.8.1-150300.4.15.1 SUSE Linux Enterprise Micro 5.1:login_defs-4.8.1-150300.4.15.1 SUSE Linux Enterprise Micro 5.1:shadow-4.8.1-150300.4.15.1 SUSE Linux Enterprise Micro 5.2:login_defs-4.8.1-150300.4.15.1 SUSE Linux Enterprise Micro 5.2:shadow-4.8.1-150300.4.15.1 SUSE Linux Enterprise Server 15 SP3-LTSS:login_defs-4.8.1-150300.4.15.1 SUSE Linux Enterprise Server 15 SP3-LTSS:shadow-4.8.1-150300.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:login_defs-4.8.1-150300.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:shadow-4.8.1-150300.4.15.1 moderate 3.3 AV:L/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242648-1/ https://www.suse.com/security/cve/CVE-2013-4235.html CVE-2013-4235 https://bugzilla.suse.com/916845 SUSE Bug 916845