SUSE-SU-2023:3819-1

Details

This update for busybox fixes the following issues:

CVE-2022-48174: Fixed stack overflow vulnerability. (bsc#1214538)

Affected Packages

busybox

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

1.35.0-150000.4.20.1

busybox-static

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

1.35.0-150000.4.20.1

References

REPORT

https://bugzilla.suse.com/1214538

WEB

https://www.suse.com/security/cve/CVE-2022-48174

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20233819-1/