Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2020:815-2 Critical: OpenShift Kubernetes Patch Notification

suse
Calendar Grey November 26, 2020
Dist Suse Esm H88
The SUSE Container Update Notification delivers essential upgrades for cephcsi, emphasizing crucial security patches and recommendations.

Summary

Advisory ID: SUSE-RU-2020:3290-1 Released: Wed Nov 11 12:25:32 2020 Summary: Recommended update for findutils Type: recommended Severity: moderate Advisory ID: SUSE-SU-2020:3313-1 Released: Thu Nov 12 16:07:37 2020 Summary: Security update for openldap2 Type: security Severity: important Advisory ID: SUSE-SU-2020:3377-1 Released: Thu Nov 19 09:29:32 2020 Summary: Security update for krb5

Topics%20covered

Topics Covered

security advisory denial of service important SUSE cephcsi container update

References

References : 1174232 1174593 1177458 1177490 1177510 1177858 1178387 1178512

1178727 CVE-2020-25692 CVE-2020-28196

1174232

This update for findutils fixes the following issues:

- Do not unconditionally use leaf optimization for NFS. (bsc#1174232)

NFS st_nlink are not accurate on all implementations, leading to aborts() if that assumption is made.

1178387,CVE-2020-25692

This update for openldap2 fixes the following issues:

- CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387).

1178512,CVE-2020-28196

This update for krb5 fixes the following security issue:

- CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).

1177458,1177490,1177510

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2020:706-1
Container Tags : ses/7/cephcsi/csi-resizer:v0.5.0 , ses/7/cephcsi/csi-resizer:v0.5.0-rev1 , ses/7/cephcsi/csi-resizer:v0.5.0-rev1-build3.94
Container Release : 3.94
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory denial of service important SUSE cephcsi container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here