SUSE-SU-2023:4225-1

UNKNOWN

Security update for zchunk

Published Oct 27, 2023

Modified 2 years ago

Fix available

Details

This update for zchunk fixes the following issues:

CVE-2023-46228: Fixed a handle overflow errors in malformed zchunk files. (bsc#1216268)

Affected Packages

libzck1

SUSE Linux Enterprise Installer Updates 15 SP4SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP4

Fixed in:

1.1.16-150400.3.7.1

zchunk

SUSE Linux Enterprise Installer Updates 15 SP4SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP4

Fixed in:

1.1.16-150400.3.7.1

libzck-devel

SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Module for Basesystem 15 SP4SUSE Linux Enterprise Module for Basesystem 15 SP5SUSE Linux Enterprise Module for Package Hub 15 SP5openSUSE Leap 15.4

Fixed in:

1.1.16-150400.3.7.1

References

REPORT

https://bugzilla.suse.com/1216268

WEB

https://www.suse.com/security/cve/CVE-2023-46228

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20234225-1/

Upstream

CVE-2023-46228

Ecosystems(11)

SUSE Linux Enterprise Installer Updates 15 SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Basesystem 15 SP4

Timeline

PublishedOct 27, 2023

ModifiedOct 27, 2023