SUSE-SU-2023:0225-1

Details

This update for ctags fixes the following issues:

CVE-2022-4515: Fixed a command injection issue via a tag file wih a crafted filename (bsc#1206543).

Affected Packages

SUSE:Enterprise Storage 6ctags

Fixed in:

5.8-150000.3.3.1

SUSE:Enterprise Storage 7ctags

Fixed in:

5.8-150000.3.3.1

SUSE:Enterprise Storage 7.1ctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise Module for Development Tools 15 SP4ctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise Real Time 15 SP3ctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise Server 15 SP1-LTSSctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise Server 15 SP2-LTSSctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise Server 15 SP3-LTSSctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1ctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2ctags

Fixed in:

5.8-150000.3.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3ctags

Fixed in:

5.8-150000.3.3.1

openSUSE:Leap 15.4ctags

Fixed in:

5.8-150000.3.3.1

References

REPORThttps://bugzilla.suse.com/1206543 WEBhttps://www.suse.com/security/cve/CVE-2022-4515 ADVISORYhttps://www.suse.com/support/update/announcement/2023/suse-su-20230225-1/

SUSE-SU-2023:0225-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline