Stay Secure with the Latest Linux Advisories

security advisorycriticalinformation disclosure

SUSE: 2023:2897-1 Critical: Information Disclosure in Python Azure Core

* bsc#1199282 * bsc#1202088 * jsc#PM-3243 * jsc#SLE-24629 . # Security update for python-azure-core, python-azure-storage-blob Announcement ID: SUSE-SU-2023:2897-1 Rating: critical References: * bsc#1199282 * bsc#1202088 * jsc#PM-3243 * jsc#SLE-24629 Cross-References: * CVE-2022-30187 CVSS scores: * CVE-2022-30187 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2022-30187 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP1 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.0 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.0 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.0 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability, contains two features and has one security fix can now be installed. ## Description: This update for python-azure-core, python-azure-storage-blob fixes thefollowing issues: Security fixes: * CVE-2022-30187: Fixed information disclosure vulnerability (bsc#1202088). Recommended fixes: * New upstream release version 1.23.1 to SLE 15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2897=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2897=1 * Public Cloud Module 15-SP1 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2023-2897=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2023-2897=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2023-2897=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-2897=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-2897=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python3-azure-core-1.23.1-150100.3.13.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * openSUSE Leap 15.5 (noarch) * python3-azure-core-1.23.1-150100.3.13.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * Public Cloud Module 15-SP1 (noarch) * python2-azure-core-1.23.1-150100.3.13.1 * python2-typing_extensions-3.10.0.0-150100.3.5.1 * python3-azure-core-1.23.1-150100.3.13.1 * python3-typing_extensions-3.10.0.0-150100.3.5.1 * python2-azure-storage-blob-12.13.1-150100.3.10.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * Public Cloud Module 15-SP2 (noarch) * python2-azure-core-1.23.1-150100.3.13.1 * python2-typing_extensions-3.10.0.0-150100.3.5.1 * python3-azure-core-1.23.1-150100.3.13.1 * python3-typing_extensions-3.10.0.0-150100.3.5.1 * python2-azure-storage-blob-12.13.1-150100.3.10.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * Public Cloud Module 15-SP3 (noarch) *python3-azure-core-1.23.1-150100.3.13.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * python3-typing_extensions-3.10.0.0-150100.3.5.1 * Public Cloud Module 15-SP4 (noarch) * python3-azure-core-1.23.1-150100.3.13.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 * Public Cloud Module 15-SP5 (noarch) * python3-azure-core-1.23.1-150100.3.13.1 * python3-azure-storage-blob-12.13.1-150100.3.10.1 ## References: * https://www.suse.com/security/cve/CVE-2022-30187.html * https://bugzilla.suse.com/show_bug.cgi?id=1199282 * https://bugzilla.suse.com/show_bug.cgi?id=1202088 * * . The python-azure-core and python-azure-storage-blob updates resolve significant vulnerabilities. Maintain your security with SUSE!. SUSE, Python Azure Core, Python Storage Blob. . Severity: Critical. LinuxSecurity.com Team

Feb 27, 2024 •Critical SuSE