Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

SUSE: 2021:167-1 Important: lz4 Memory Corruption Issue Fix

suse
Calendar Grey May 20, 2021
Dist Suse Esm H88
Critical memory vulnerabilities in the SUSE container suse/sle15 have been addressed in a recent security update, enhancing overall system integrity and operational efficiency.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-RU-2021:1643-1 Released: Wed May 19 13:51:48 2021 Summary: Recommended update for pam Type: recommended Severity: important Advisory ID: SUSE-SU-2021:1647-1 Released: Wed May 19 13:59:12 2021 Summary: Security update for lz4 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory memory corruption security fix important suse pam container update lz4 sles15

References

References : 1181443 1184358 1185438 1185562 CVE-2021-3520

1181443,1184358,1185562

This update for pam fixes the following issues:

- Fixed a bug, where the 'unlimited'/'-1' value was not interpreted correctly (bsc#1181443)

- Fixed a bug, where pam_access interpreted the keyword 'LOCAL' incorrectly, leading to

an attempt to resolve it as a hostname (bsc#1184358)

- In the 32-bit compatibility package for 64-bit architectures, require 'systemd-32bit' to be also installed as it contains pam_systemd.so for 32 bit applications. (bsc#1185562)

1185438,CVE-2021-3520

This update for lz4 fixes the following issues:

- CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument (bsc#1185438).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2021:167-1
Container Tags : suse/sle15:15.0 , suse/sle15:15.0.4.22.395
Container Release : 4.22.395
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory memory corruption security fix important suse pam container update lz4 sles15

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here