Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

SUSE: 2022:1681-1 Important: Bci/Golang Security Update Details

suse
Calendar Grey July 28, 2022
Scroller Suse
A security refresh for SUSE Container bci/golang brings several critical fixes tackling major concerns and weaknesses.
The container bci/golang was updated

Summary

Advisory ID: SUSE-SU-2022:2550-1 Released: Tue Jul 26 14:00:21 2022 Summary: Security update for git Type: security Severity: important Advisory ID: SUSE-SU-2022:2552-1 Released: Tue Jul 26 14:55:40 2022 Summary: Security update for libxml2 Type: security Severity: important Advisory ID: SUSE-SU-2022:2566-1 Released: Wed Jul 27 15:04:49 2022 Summary: Security update for pcre2 Type: security

Topics%20covered

Topics Covered

security advisory security update important patches libxml2 git bci/golang

References

References : 1196490 1199132 1199235 1201431 CVE-2022-1587 CVE-2022-23308

CVE-2022-29187 CVE-2022-29824

1201431,CVE-2022-29187

This update for git fixes the following issues:

- CVE-2022-29187: Incomplete fix for CVE-2022-24765: potential command injection via git worktree (bsc#1201431).

1196490,1199132,CVE-2022-23308,CVE-2022-29824

This update for libxml2 fixes the following issues:

Update to 2.9.14:

- CVE-2022-29824: Fixed integer overflow that could have led to an out-of-bounds write in buf.c (xmlBuf*) and tree.c (xmlBuffer*) (bsc#1199132).

Update to version 2.9.13:

- CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes. (bsc#1196490)

1199235,CVE-2022-1587

This update for pcre2 fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:1681-1
Container Tags : bci/golang:1.17 , bci/golang:1.17-12.26
Container Release : 12.26
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security update important patches libxml2 git bci/golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.