Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

SUSE: 2022:1706-1 Important Security Update For SUSE/SLE15 Containers

suse
Calendar Grey July 29, 2022
Dist Suse Esm H88
Essential revisions announced for SUSE Container delivering major security upgrades and fixes for libxml2 alongside zypper.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2022:2552-1 Released: Tue Jul 26 14:55:40 2022 Summary: Security update for libxml2 Type: security Severity: important Advisory ID: SUSE-RU-2022:2573-1 Released: Thu Jul 28 04:24:19 2022 Summary: Recommended update for libzypp, zypper Type: recommended Severity: moderate

Topics%20covered

Topics Covered

security advisory security issue important suse libxml2 container update zypper

References

References : 1194550 1196490 1197684 1199042 1199132 CVE-2022-23308 CVE-2022-29824

1196490,1199132,CVE-2022-23308,CVE-2022-29824

This update for libxml2 fixes the following issues:

Update to 2.9.14:

- CVE-2022-29824: Fixed integer overflow that could have led to an out-of-bounds write in buf.c (xmlBuf*) and tree.c (xmlBuffer*) (bsc#1199132).

Update to version 2.9.13:

- CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes. (bsc#1196490)

1194550,1197684,1199042

This update for libzypp, zypper fixes the following issues:

libzypp:

- appdata plugin: Pass path to the repodata/ directory inside the cache (bsc#1197684)

- zypp-rpm: flush rpm script output buffer before sending endOfScriptTag

- PluginRepoverification: initial version hooked into repo::Downloader and repo refresh

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:1706-1
Container Tags : bci/bci-base:15.4 , bci/bci-base:15.4.27.11.7 , suse/sle15:15.4 , suse/sle15:15.4.27.11.7
Container Release : 27.11.7
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue important suse libxml2 container update zypper

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here