SUSE-SU-2023:0225-1

Details

This update for ctags fixes the following issues:

CVE-2022-4515: Fixed a command injection issue via a tag file wih a crafted filename (bsc#1206543).

Affected Packages

ctags

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

Fixed in:

5.8-150000.3.3.1

References

REPORT

https://bugzilla.suse.com/1206543

WEB

https://www.suse.com/security/cve/CVE-2022-4515

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20230225-1/