SUSE-SU-2020:3064-1

Source
https://www.suse.com/support/update/announcement/2020/suse-su-20203064-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3064-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2020:3064-1
Published
2020-10-28T08:09:50Z
Modified
2020-10-28T08:09:50Z
Summary
Security update for zeromq
Details

This update for zeromq fixes the following issues:

  • Fixed a memory leak in client induced by malicious server(s) without CURVE/ZAP (bsc#1176257)
  • Fixed a stack overflow in PUB/XPUB subscription store (bsc#1176258)
References

Affected packages

SUSE:Enterprise Storage 5
zeromq

Package

Name
zeromq
Purl
pkg:rpm/suse/zeromq&distro=SUSE%20Enterprise%20Storage%205

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.4-15.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "libzmq3":  "4.0.4-15.6.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3064-1.json"
SUSE:Linux Enterprise Module for Advanced Systems Management 12
zeromq

Package

Name
zeromq
Purl
pkg:rpm/suse/zeromq&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Advanced%20Systems%20Management%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.4-15.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "libzmq3":  "4.0.4-15.6.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3064-1.json"
SUSE:Linux Enterprise Point of Sale 12 SP2
zeromq

Package

Name
zeromq
Purl
pkg:rpm/suse/zeromq&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.4-15.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "libzmq3":  "4.0.4-15.6.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3064-1.json"
SUSE:Linux Enterprise Software Development Kit 12 SP5
zeromq

Package

Name
zeromq
Purl
pkg:rpm/suse/zeromq&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.4-15.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "libzmq3":  "4.0.4-15.6.1",
            "zeromq-devel":  "4.0.4-15.6.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3064-1.json"
SUSE:Linux Enterprise Workstation Extension 12 SP5
zeromq

Package

Name
zeromq
Purl
pkg:rpm/suse/zeromq&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.4-15.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "libzmq3":  "4.0.4-15.6.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3064-1.json"
SUSE:Manager Client Tools 12
zeromq

Package

Name
zeromq
Purl
pkg:rpm/suse/zeromq&distro=SUSE%20Manager%20Client%20Tools%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.4-15.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "libzmq3":  "4.0.4-15.6.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3064-1.json"
SUSE:Manager Proxy 3.2
zeromq

Package

Name
zeromq
Purl
pkg:rpm/suse/zeromq&distro=SUSE%20Manager%20Proxy%203.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.4-15.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "libzmq3":  "4.0.4-15.6.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3064-1.json"
SUSE:Manager Server 3.2
zeromq

Package

Name
zeromq
Purl
pkg:rpm/suse/zeromq&distro=SUSE%20Manager%20Server%203.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.4-15.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "libzmq3":  "4.0.4-15.6.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3064-1.json"