openSUSE-SU-2023:0419-1

Details

This update for zabbix fixes the following issues:

Updated to latest release 4.0.50:

CVE-2023-32727: Fixed potential arbitrary code execution in icmpping (boo#1218199)

Affected Packages(11 packages)

zabbix

SUSE Package Hub 15 SP4openSUSE Leap 15.4

Fixed in:

4.0.50-bp154.2.9.1

zabbix-agent

SUSE Package Hub 15 SP4openSUSE Leap 15.4

Fixed in:

4.0.50-bp154.2.9.1

zabbix-java-gateway

SUSE Package Hub 15 SP4openSUSE Leap 15.4

Fixed in:

4.0.50-bp154.2.9.1

zabbix-phpfrontend

SUSE Package Hub 15 SP4openSUSE Leap 15.4

Fixed in:

4.0.50-bp154.2.9.1

zabbix-proxy

SUSE Package Hub 15 SP4openSUSE Leap 15.4

Fixed in:

4.0.50-bp154.2.9.1

zabbix-proxy-mysql

SUSE Package Hub 15 SP4openSUSE Leap 15.4

Fixed in:

4.0.50-bp154.2.9.1

zabbix-proxy-postgresql

SUSE Package Hub 15 SP4openSUSE Leap 15.4

Fixed in:

4.0.50-bp154.2.9.1

zabbix-proxy-sqlite

SUSE Package Hub 15 SP4openSUSE Leap 15.4

Fixed in:

4.0.50-bp154.2.9.1

zabbix-server

SUSE Package Hub 15 SP4openSUSE Leap 15.4

Fixed in:

4.0.50-bp154.2.9.1

zabbix-server-mysql

SUSE Package Hub 15 SP4openSUSE Leap 15.4

Fixed in:

4.0.50-bp154.2.9.1

References

REPORT

https://bugzilla.suse.com/1218199

ADVISORY

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YROQAWLUFWE7IZ7J6SBCJGQ67DC2ZUHR/

WEB

https://www.suse.com/security/cve/CVE-2023-32727