openSUSE-SU-2022:10134-1
Security update for connman
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for connman fixes the following issues: - CVE-2022-32292: Add refcounting to wispr portal detection to avoid heap overflow (boo#1200190) - CVE-2022-32292: Fix OOB write in received_data (boo#1200189)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.3 | connman, connman-client, connman-devel y 12 más | 1.41-bp153.2.6.1 |
Mostrar las 15 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.3 | connman | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-client | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-devel | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-doc | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-nmcompat | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-hh2serial-gps | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-iospm | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-l2tp | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-openvpn | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-polkit | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-pptp | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-tist | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-vpnc | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-wireguard | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-test | 1.41-bp153.2.6.1 |
Referencias
- https://bugzilla.suse.com/1200189
- https://bugzilla.suse.com/1200190
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B4BBTRFMU2YGB6OYSRTK6AGKO32CD5I3/
- https://www.suse.com/security/cve/CVE-2022-32292/
- https://www.suse.com/security/cve/CVE-2022-32293/
- https://www.suse.com/support/security/rating/