Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 517
Alerts This Week
Warning Icon 1 517

SUSE: 2021:276-1 Important Update for Container Security Issues

suse
Calendar Grey August 7, 2021
Dist Suse Esm H88
Stay informed about key improvements in SUSE container technology, encompassing vital security updates and optimizations across multiple elements.
The container suse/sles12sp3 was updated

Summary

Advisory ID: SUSE-SU-2021:2016-1 Released: Fri Jun 18 09:39:25 2021 Summary: Security update for libxml2 Type: security Severity: moderate Advisory ID: SUSE-RU-2021:2086-1 Released: Fri Jun 18 17:28:57 2021 Summary: Recommended update for pam Type: recommended Severity: important Advisory ID: SUSE-SU-2021:2156-1 Released: Thu Jun 24 15:39:39 2021 Summary: Security update for libgcrypt Type: security

Topics%20covered

Topics Covered

security advisory curl libxml2 security patches systemd container update Suse

References

References : 1161510 1172505 1178561 1181443 1184761 1184967 1185046 1185331

1185562 1185807 1186015 1186229 1187105 1187212 1188063 1188217

1188218 1188219 1188220 CVE-2019-20387 CVE-2020-12049 CVE-2020-35512

CVE-2021-22922 CVE-2021-22923 CVE-2021-22924 CVE-2021-22925 CVE-2021-3200

CVE-2021-33560 CVE-2021-33910 CVE-2021-3541

1186015,CVE-2021-3541

This update for libxml2 fixes the following issues:

- CVE-2021-3541: Fixed exponential entity expansion attack that could bypass all existing protection mechanisms (bsc#1186015).

1181443,1185562

This update for pam fixes the following issues:

- Fixed a bug, where the 'unlimited'/'-1' value was not interpreted correctly (bsc#1181443)

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2021:276-1
Container Tags : suse/sles12sp3:2.0.2 , suse/sles12sp3:24.284 , suse/sles12sp3:latest
Container Release : 24.284
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory curl libxml2 security patches systemd container update Suse

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.