Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2021:278-1 Important Update for Security Issues in Containers

suse
Calendar Grey August 7, 2021
Dist Suse Esm H88
A security patch for the SUSE container suse/sles12sp5 has been released, tackling various concerns, notably vulnerabilities in libxml2 and curl.
The container suse/sles12sp5 was updated

Summary

Advisory ID: SUSE-SU-2021:2016-1 Released: Fri Jun 18 09:39:25 2021 Summary: Security update for libxml2 Type: security Severity: moderate Advisory ID: SUSE-RU-2021:2086-1 Released: Fri Jun 18 17:28:57 2021 Summary: Recommended update for pam Type: recommended Severity: important Advisory ID: SUSE-SU-2021:2156-1 Released: Thu Jun 24 15:39:39 2021 Summary: Security update for libgcrypt Type: security

Topics%20covered

Topics Covered

security advisory curl issue suse container security systemd update libxml2 fix libgcrypt fix

References

References : 1027496 1047247 1050467 1093414 1097665 1123886 1131330 1150734

1155939 1157198 1160594 1160764 1161510 1161779 1163922 1171883

1181443 1182899 1184761 1185562 1185807 1186015 1186229 1187212

1187784 1187911 1188063 1188217 1188218 1188219 1188220 CVE-2016-10228

CVE-2019-20387 CVE-2019-3688 CVE-2019-3690 CVE-2020-8013 CVE-2021-22922

CVE-2021-22923 CVE-2021-22924 CVE-2021-22925 CVE-2021-3200 CVE-2021-33560

CVE-2021-33910 CVE-2021-3541 CVE-2021-35942

1186015,CVE-2021-3541

This update for libxml2 fixes the following issues:

- CVE-2021-3541: Fixed exponential entity expansion attack that could bypass all existing protection mechanisms (bsc#1186015).

1181443,1185562

This update for pam fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2021:278-1
Container Tags : suse/sles12sp5:6.5.210 , suse/sles12sp5:latest
Container Release : 6.5.210
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory curl issue suse container security systemd update libxml2 fix libgcrypt fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here