SUSE: 2023:2897-1 critical: python-azure-core, python-azure-storage-bl
Summary
## This update for python-azure-core, python-azure-storage-blob fixes the following issues: Security fixes: * CVE-2022-30187: Fixed information disclosure vulnerability (bsc#1202088). Recommended fixes: * New upstream release version 1.23.1 to SLE 15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2897=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2897=1 * Public Cloud Module 15-SP1 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2023-2897=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2023-2897=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2023-2897=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-2897=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-2897=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python3-azure-core-1.23.1-150100.3.13.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * openSUSE Leap 15.5 (noarch) * python3-azure-core-1.23.1-150100.3.13.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * Public Cloud Module 15-SP1 (noarch) * python2-azure-core-1.23.1-150100.3.13.1 * python2-typing_extensions-3.10.0.0-150100.3.5.1 * python3-azure-core-1.23.1-150100.3.13.1 * python3-typing_extensions-3.10.0.0-150100.3.5.1 * python2-azure-storage-blob-12.13.1-150100.3.10.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * Public Cloud Module 15-SP2 (noarch) * python2-azure-core-1.23.1-150100.3.13.1 * python2-typing_extensions-3.10.0.0-150100.3.5.1 * python3-azure-core-1.23.1-150100.3.13.1 * python3-typing_extensions-3.10.0.0-150100.3.5.1 * python2-azure-storage-blob-12.13.1-150100.3.10.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * Public Cloud Module 15-SP3 (noarch) * python3-azure-core-1.23.1-150100.3.13.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * python3-typing_extensions-3.10.0.0-150100.3.5.1 * Public Cloud Module 15-SP4 (noarch) * python3-azure-core-1.23.1-150100.3.13.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * Public Cloud Module 15-SP5 (noarch) * python3-azure-core-1.23.1-150100.3.13.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1
References
* bsc#1199282
* bsc#1202088
* jsc#PM-3243
* jsc#SLE-24629
Cross-
* CVE-2022-30187
CVSS scores:
* CVE-2022-30187 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2022-30187 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products:
* openSUSE Leap 15.4
* openSUSE Leap 15.5
* Public Cloud Module 15-SP2
* Public Cloud Module 15-SP1
* Public Cloud Module 15-SP3
* Public Cloud Module 15-SP4
* Public Cloud Module 15-SP5
* SUSE Linux Enterprise High Performance Computing 15 SP1
* SUSE Linux Enterprise High Performance Computing 15 SP2
* SUSE Linux Enterprise High Performance Computing 15 SP3
* SUSE Linux Enterprise High Performance Computing 15 SP4
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise Server 15 SP1
* SUSE Linux Enterprise Server 15 SP2
* SUSE Linux Enterprise Server 15 SP3
* SUSE Linux Enterprise Server 15 SP4
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server for SAP Applications 15 SP1
* SUSE Linux Enterprise Server for SAP Applications 15 SP2
* SUSE Linux Enterprise Server for SAP Applications 15 SP3
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
* SUSE Manager Proxy 4.0
* SUSE Manager Proxy 4.1
* SUSE Manager Proxy 4.2
* SUSE Manager Proxy 4.3
* SUSE Manager Retail Branch Server 4.0
* SUSE Manager Retail Branch Server 4.1
* SUSE Manager Retail Branch Server 4.2
* SUSE Manager Retail Branch Server 4.3
* SUSE Manager Server 4.0
* SUSE Manager Server 4.1
* SUSE Manager Server 4.2
* SUSE Manager Server 4.3
An update that solves one vulnerability, contains two features and has one
security fix can now be installed.
##
* https://www.suse.com/security/cve/CVE-2022-30187.html
* https://bugzilla.suse.com/show_bug.cgi?id=1199282
* https://bugzilla.suse.com/show_bug.cgi?id=1202088
* https://jira.suse.com/login.jsp
* https://jira.suse.com/login.jsp
![Dist Suse](/images/distros/dist-suse.gif)