Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE: 2023:2028-2 Critical: Security Patches for suse/sle16 Images

suse
Calendar Grey September 6, 2022
Dist Suse Esm H88
SUSE Container Security Notice provides essential updates that resolve vulnerabilities affecting suse/sle15 images.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-RU-2022:2944-1 Released: Wed Aug 31 05:39:14 2022 Summary: Recommended update for procps Type: recommended Severity: important Advisory ID: SUSE-SU-2022:2947-1 Released: Wed Aug 31 09:16:21 2022 Summary: Security update for zlib Type: security Severity: important Advisory ID: SUSE-SU-2022:2991-1 Released: Thu Sep 1 16:04:30 2022 Summary: Security update for libtirpc Type: security

Topics%20covered

Topics Covered

security advisory security update buffer overflow important suse patches container update

References

References : 1181475 1198752 1198925 1200800 1201680 1202175 1202593 CVE-2021-46828

CVE-2022-35252 CVE-2022-37434

1181475

This update for procps fixes the following issues:

- Fix 'free' command reporting misleading 'used' value (bsc#1181475)

1202175,CVE-2022-37434

This update for zlib fixes the following issues:

- CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).

1198752,1200800,1201680,CVE-2021-46828

This update for libtirpc fixes the following issues:

- CVE-2021-46828: Fixed an uncontrolled file descriptor consumption,

which could be exploited by remote attackers to prevent applications

using the library from accepting new connections (bsc#1201680).

Non-security fixes:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2027-1
Container Tags : suse/sle15:15.2 , suse/sle15:15.2.9.5.188
Container Release : 9.5.188
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security update buffer overflow important suse patches container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here