SUSE-SU-2023:4224-1

UNKNOWN

Security update for zchunk

Published Oct 27, 2023

Modified 2 years ago

Fix available

Details

This update for zchunk fixes the following issues:

CVE-2023-46228: Fixed a handle overflow errors in malformed zchunk files. (bsc#1216268)

Affected Packages

libzck-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP2-LTSS

Fixed in:

1.1.5-150200.3.5.1

libzck1

Fixed in:

1.1.5-150200.3.5.1

zchunk

Fixed in:

1.1.5-150200.3.5.1

References

REPORT

https://bugzilla.suse.com/1216268

WEB

https://www.suse.com/security/cve/CVE-2023-46228

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20234224-1/

Upstream

CVE-2023-46228

Ecosystems(10)

SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS

Timeline

PublishedOct 27, 2023

ModifiedOct 27, 2023