Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2022:1094-1 Important Security Update for Containers

suse
Calendar Grey September 26, 2022
Dist Suse Esm H88
SUSE Image Maintenance Notification: critical enhancements for key elements within the container suse-sles-15-sp4-minimal.
The container suse-sles-15-sp4-chost-byos-v20220923-hvm-ssd-x86_64 was updated

Summary

Advisory ID: SUSE-RU-2022:2796-1 Released: Fri Aug 12 14:34:31 2022 Summary: Recommended update for jitterentropy Type: recommended Severity: moderate Advisory ID: SUSE-RU-2022:3304-1 Released: Mon Sep 19 11:43:25 2022 Summary: Recommended update for libassuan Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:3305-1

Topics%20covered

Topics Covered

security advisory denial of service update security important suse container

References

References : 1142847 1150130 1157805 1164550 1164569 1177179 1189802 1190698

1191021 1195773 1201680 1201783 1202146 1202870 1203018 CVE-2019-13224

CVE-2019-16163 CVE-2019-19203 CVE-2019-19204 CVE-2019-19246 CVE-2020-26159

CVE-2021-36690 CVE-2021-46828 CVE-2022-31252 CVE-2022-35737

This update for jitterentropy fixes the following issues:

jitterentropy is included in version 3.4.0 (jsc#SLE-24941):

This is a FIPS 140-3 / NIST 800-90b compliant userspace jitter entropy generator library,

used by other FIPS libraries.

This update for libassuan fixes the following issues:

- Add a timeout for writing to a SOCKS5 proxy

- Add workaround for a problem with LD_LIBRARY_PATH on newer systems

- Fix issue in the logging code

- Fix some build trivialities

- Upgrade autoconf

1201680,CVE-2021-46828

Severity
important
Lowest
Low
Medium
High
Critical

Image Advisory ID : SUSE-IU-2022:1094-1
Image Tags : suse-sles-15-sp4-chost-byos-v20220923-hvm-ssd-x86_64:20220923
Image Release :
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory denial of service update security important suse container

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here