Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 550
Alerts This Week
Warning Icon 1 550

SUSE: 2022:176-1 Important: glibc Buffer Overflow in SUSE Container

suse
Calendar Grey February 17, 2022
Scroller Suse
The latest security patch for the SUSE container suse/sles12sp4 resolves significant vulnerabilities including memory corruption and additional risks.
The container suse/sles12sp4 was updated

Summary

Advisory ID: SUSE-SU-2022:441-1 Released: Wed Feb 16 14:21:59 2022 Summary: Security update for glibc Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security issue buffer overflow important glibc suse container update

References

References : 1191835 1192620 1193478 1194640 1194768 1194770 CVE-2021-3999

CVE-2022-23218 CVE-2022-23219

1191835,1192620,1193478,1194640,1194768,1194770,CVE-2021-3999,CVE-2022-23218,CVE-2022-23219

glibc was updated to fix the following issues:

Security issues fixed:

- CVE-2021-3999: Fixed incorrect errno in getcwd (bsc#1194640)

- CVE-2022-23219: Fixed buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768)

- CVE-2022-23218: Fixed buffer overflow in sunrpc svcunix_create (bsc#1194770)

Bugs fixed:

- Make endian-conversion macros always return correct types (bsc#1193478, BZ #16458)

- Allow dlopen of filter object to work (bsc#1192620, BZ #16272)

- x86: fix stack alignment in cancelable syscall stub (bsc#1191835)

The following package changes have been done:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:176-1
Container Tags : suse/sles12sp4:26.411 , suse/sles12sp4:latest
Container Release : 26.411
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue buffer overflow important glibc suse container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.