Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 534
Alerts This Week
Warning Icon 1 534

SUSE: 2021:284-1 Critical: SUSE/SLE15 Image Security Patch

suse
Calendar Grey August 24, 2021
Dist Suse Esm H88
Recent security enhancements for the SUSE container suse/sle15 tackle urgent vulnerabilities present in multiple modules and associated dependencies.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2021:2682-1 Released: Thu Aug 12 20:06:19 2021 Summary: Security update for rpm Type: security Severity: important Advisory ID: SUSE-SU-2021:2689-1 Released: Mon Aug 16 10:54:52 2021 Summary: Security update for cpio Type: security Severity: important Advisory ID: SUSE-RU-2021:2763-1 Released: Tue Aug 17 17:16:22 2021 Summary: Recommended update for cpio Type: recommended

Topics%20covered

Topics Covered

security advisory critical system integrity suse rpm container update

References

References : 1057452 1166028 1171962 1179416 1181805 1183543 1183545 1184994

1185972 1188063 1188287 1188571 1189206 1189465 1189465 CVE-2020-13529

CVE-2021-20266 CVE-2021-20271 CVE-2021-33910 CVE-2021-3421 CVE-2021-36222

CVE-2021-38185 CVE-2021-38185

1179416,1181805,1183543,1183545,CVE-2021-20266,CVE-2021-20271,CVE-2021-3421

This update for rpm fixes the following issues:

- Changed default package verification level to 'none' to be compatible to rpm-4.14.1

- Made illegal obsoletes a warning

- Fixed a potential access of freed mem in ndb's glue code (bsc#1179416)

- Added support for enforcing signature policy and payload verification step to

transactions (jsc#SLE-17817)

- Added :humansi and :hmaniec query formatters for human readable output

Severity
critical
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2021:283-1
Container Tags : suse/sle15:15.3 , suse/sle15:15.3.17.5.33
Container Release : 17.5.33
Severity : critical
Type : security

Topics%20covered

Topics Covered

security advisory critical system integrity suse rpm container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.