Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2022:2051-1 Important: Buffer Overflow and Security Issues

suse
Calendar Grey September 7, 2022
Dist Suse Esm H88
SUSE Package Management Notification: suse/redis delivers essential security patches and software enhancements to resolve significant vulnerabilities.
The container suse/389-ds was updated

Summary

Advisory ID: SUSE-SU-2022:2947-1 Released: Wed Aug 31 09:16:21 2022 Summary: Security update for zlib Type: security Severity: important Advisory ID: SUSE-RU-2022:2977-1 Released: Thu Sep 1 12:30:19 2022 Summary: Recommended update for util-linux Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:3003-1 Released: Fri Sep 2 15:01:44 2022 Summary: Security update for curl Type: security

Topics%20covered

Topics Covered

security advisory security issue buffer overflow important suse zlib curl

References

References : 1197178 1198731 1202175 1202593 CVE-2022-35252 CVE-2022-37434

1202175,CVE-2022-37434

This update for zlib fixes the following issues:

- CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).

1197178,1198731

This update for util-linux fixes the following issues:

- agetty: Resolve tty name even if stdin is specified (bsc#1197178)

- libmount: When moving a mount point, update all sub mount entries in utab (bsc#1198731)

1202593,CVE-2022-35252

This update for curl fixes the following issues:

- CVE-2022-35252: Fixed a potential injection of control characters into cookies, which could be exploited by sister sites to cause a

denial of service (bsc#1202593).

The following package changes have been done:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2051-1
Container Tags : suse/389-ds:2.0 , suse/389-ds:2.0-16.4 , suse/389-ds:latest
Container Release : 16.4
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue buffer overflow important suse zlib curl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here