Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2022:2025-1 Important: Remote Threat in suse/sle15

suse
Calendar Grey September 6, 2022
Scroller Suse
Key revisions for SUSE container suse/sle15, focusing on mitigating external vulnerabilities and applying essential security enhancements.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-RU-2022:2978-1 Released: Thu Sep 1 12:31:01 2022 Summary: Recommended update for util-linux Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:2991-1 Released: Thu Sep 1 16:04:30 2022 Summary: Security update for libtirpc Type: security Severity: important Advisory ID: SUSE-RU-2022:2994-1 Released: Fri Sep 2 10:44:54 2022

Topics%20covered

Topics Covered

security advisory remote threat SUSE important fix container update

References

References : 1197178 1198731 1198752 1198925 1200800 1200842 1201680 CVE-2021-46828

1197178,1198731,1200842

This update for util-linux fixes the following issues:

- su: Change owner and mode for pty (bsc#1200842)

- agetty: Resolve tty name even if stdin is specified (bsc#1197178)

- libmount: When moving a mount point, update all sub mount entries in utab (bsc#1198731)

- mesg: use only stat() to get the current terminal status (bsc#1200842)

1198752,1200800,1201680,CVE-2021-46828

This update for libtirpc fixes the following issues:

- CVE-2021-46828: Fixed an uncontrolled file descriptor consumption,

which could be exploited by remote attackers to prevent applications

using the library from accepting new connections (bsc#1201680).

Non-security fixes:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2025-1
Container Tags : suse/sle15:15.0 , suse/sle15:15.0.4.22.607
Container Release : 4.22.607
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory remote threat SUSE important fix container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.