openSUSE-SU-2022:10134-1
Security update for connman
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for connman fixes the following issues: - CVE-2022-32292: Add refcounting to wispr portal detection to avoid heap overflow (boo#1200190) - CVE-2022-32292: Fix OOB write in received_data (boo#1200189)
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.3 | connman, connman-client, connman-devel et 12 autres | 1.41-bp153.2.6.1 |
Afficher les 15 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.3 | connman | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-client | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-devel | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-doc | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-nmcompat | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-hh2serial-gps | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-iospm | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-l2tp | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-openvpn | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-polkit | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-pptp | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-tist | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-vpnc | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-plugin-wireguard | 1.41-bp153.2.6.1 |
| openSUSE Leap 15.3 | connman-test | 1.41-bp153.2.6.1 |
Références
- https://bugzilla.suse.com/1200189
- https://bugzilla.suse.com/1200190
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B4BBTRFMU2YGB6OYSRTK6AGKO32CD5I3/
- https://www.suse.com/security/cve/CVE-2022-32292/
- https://www.suse.com/security/cve/CVE-2022-32293/
- https://www.suse.com/support/security/rating/