Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2022:2007-1 Important: zlib Buffer Overflow in suse/pcp

suse
Calendar Grey September 1, 2022
Dist Suse Esm H88
Critical announcement regarding the SUSE container suse/pcp aimed at mitigating security vulnerabilities, notably resolving buffer overflow concerns.
The container suse/pcp was updated

Summary

Advisory ID: SUSE-RU-2022:2929-1 Released: Mon Aug 29 11:21:47 2022 Summary: Recommended update for timezone Type: recommended Severity: important Advisory ID: SUSE-RU-2022:2939-1 Released: Mon Aug 29 14:49:17 2022 Summary: Recommended update for mozilla-nss Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:2947-1 Released: Wed Aug 31 09:16:21 2022 Summary: Security update for zlib Type: security

Topics%20covered

Topics Covered

security advisory buffer overflow important suse zlib container update

References

References : 1201298 1202175 1202310 1202645 CVE-2022-37434

1202310

This update for timezone fixes the following issue:

- Reflect new Chile DST change (bsc#1202310)

1201298,1202645

This update for mozilla-nss fixes the following issues:

Update to NSS 3.79.1 (bsc#1202645)

* compare signature and signatureAlgorithm fields in legacy certificate verifier.

* Uninitialized value in cert_ComputeCertType.

* protect SFTKSlot needLogin with slotLock.

* avoid data race on primary password change.

* check for null template in sec_asn1{d,e}_push_state.

- FIPS: unapprove the rest of the DSA ciphers, keeping signature verification only (bsc#1201298).

1202175,CVE-2022-37434

This update for zlib fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2007-1
Container Tags : suse/pcp:5 , suse/pcp:5.2 , suse/pcp:5.2.2 , suse/pcp:5.2.2-9.30 , suse/pcp:latest
Container Release : 9.30
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory buffer overflow important suse zlib container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here