SUSE: 2022:2209-1 suse/sle15 Security Update | LinuxSecurity.com
SUSE Container Update Advisory: suse/sle15
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2022:2209-1
Container Tags        : suse/sle15:15.2 , suse/sle15:15.2.9.5.195
Container Release     : 9.5.195
Severity              : important
Type                  : security
References            : 1197178 1198731 1199140 1199895 1200842 1200993 1201092 1201225
                        1201576 1201638 CVE-2022-34903 
-----------------------------------------------------------------

The container suse/sle15 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2022:3129-1
Released:    Wed Sep  7 04:42:53 2022
Summary:     Recommended update for util-linux
Type:        recommended
Severity:    moderate
References:  1197178,1198731,1200842
This update for util-linux fixes the following issues:

- su: Change owner and mode for pty (bsc#1200842)
- agetty: Resolve tty name even if stdin is specified (bsc#1197178)
- libmount: When moving a mount point, update all sub mount entries in utab (bsc#1198731)
- mesg: use only stat() to get the current terminal status (bsc#1200842)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2022:3144-1
Released:    Wed Sep  7 11:04:23 2022
Summary:     Security update for gpg2
Type:        security
Severity:    important
References:  1201225,CVE-2022-34903
This update for gpg2 fixes the following issues:

- CVE-2022-34903: Fixed a potential signature forgery via injection
  into the status line when certain unusual conditions are met (bsc#1201225).

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2022:3223-1
Released:    Fri Sep  9 04:33:35 2022
Summary:     Recommended update for libzypp, zypper
Type:        recommended
Severity:    moderate
References:  1199895,1200993,1201092,1201576,1201638
This update for libzypp, zypper fixes the following issues:

libzypp:

- Improve handling of package locks, allowing to reset the status of its initial state (bsc#1199895)
- Fix issues when receiving exceptions from curl_easy_cleanup (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and its dependent code. First reason for this is that MediaNetwork was just meant as a way to test
  the new CURL based downloaded. Second the Provide API is going to completely replace the current media backend.

zypper:

- Truncate the 'Name' column when using `zypper lr`, if the table is wider than the terminal (bsc#1201638)
- Reject install/remove modifier without argument (bsc#1201576)
- zypper-download: Handle unresolvable arguments as errors
- Put signing key supplying repository name in quotes

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2022:3262-1
Released:    Tue Sep 13 15:34:29 2022
Summary:     Recommended update for gcc11
Type:        recommended
Severity:    moderate
References:  1199140

This update for gcc11 ships some missing 32bit libraries for s390x. (bsc#1199140)


The following package changes have been done:

- gpg2-2.2.5-150000.4.22.1 updated
- libblkid1-2.33.2-150100.4.24.1 updated
- libfdisk1-2.33.2-150100.4.24.1 updated
- libgcc_s1-11.3.0+git1637-150000.1.11.2 updated
- libmount1-2.33.2-150100.4.24.1 updated
- libsmartcols1-2.33.2-150100.4.24.1 updated
- libstdc++6-11.3.0+git1637-150000.1.11.2 updated
- libuuid1-2.33.2-150100.4.24.1 updated
- libzypp-17.31.0-150200.42.1 updated
- util-linux-2.33.2-150100.4.24.1 updated
- zypper-1.14.55-150200.36.1 updated

SUSE: 2022:2209-1 suse/sle15 Security Update

September 14, 2022
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-RU-2022:3129-1 Released: Wed Sep 7 04:42:53 2022 Summary: Recommended update for util-linux Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:3144-1 Released: Wed Sep 7 11:04:23 2022 Summary: Security update for gpg2 Type: security Severity: important Advisory ID: SUSE-RU-2022:3223-1 Released: Fri Sep 9 04:33:35 2022 Summary: Recommended update for libzypp, zypper Type: recommended Severity: moderate Advisory ID: SUSE-RU-2022:3262-1 Released: Tue Sep 13 15:34:29 2022 Summary: Recommended update for gcc11 Type: recommended Severity: moderate

References

References : 1197178 1198731 1199140 1199895 1200842 1200993 1201092 1201225

1201576 1201638 CVE-2022-34903

1197178,1198731,1200842

This update for util-linux fixes the following issues:

- su: Change owner and mode for pty (bsc#1200842)

- agetty: Resolve tty name even if stdin is specified (bsc#1197178)

- libmount: When moving a mount point, update all sub mount entries in utab (bsc#1198731)

- mesg: use only stat() to get the current terminal status (bsc#1200842)

1201225,CVE-2022-34903

This update for gpg2 fixes the following issues:

- CVE-2022-34903: Fixed a potential signature forgery via injection

into the status line when certain unusual conditions are met (bsc#1201225).

1199895,1200993,1201092,1201576,1201638

This update for libzypp, zypper fixes the following issues:

libzypp:

- Improve handling of package locks, allowing to reset the status of its initial state (bsc#1199895)

- Fix issues when receiving exceptions from curl_easy_cleanup (bsc#1201092)

- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)

- Remove Medianetwork and its dependent code. First reason for this is that MediaNetwork was just meant as a way to test

the new CURL based downloaded. Second the Provide API is going to completely replace the current media backend.

zypper:

- Truncate the 'Name' column when using `zypper lr`, if the table is wider than the terminal (bsc#1201638)

- Reject install/remove modifier without argument (bsc#1201576)

- zypper-download: Handle unresolvable arguments as errors

- Put signing key supplying repository name in quotes

1199140

This update for gcc11 ships some missing 32bit libraries for s390x. (bsc#1199140)

The following package changes have been done:

- gpg2-2.2.5-150000.4.22.1 updated

- libblkid1-2.33.2-150100.4.24.1 updated

- libfdisk1-2.33.2-150100.4.24.1 updated

- libgcc_s1-11.3.0+git1637-150000.1.11.2 updated

- libmount1-2.33.2-150100.4.24.1 updated

- libsmartcols1-2.33.2-150100.4.24.1 updated

- libstdc++6-11.3.0+git1637-150000.1.11.2 updated

- libuuid1-2.33.2-150100.4.24.1 updated

- libzypp-17.31.0-150200.42.1 updated

- util-linux-2.33.2-150100.4.24.1 updated

- zypper-1.14.55-150200.36.1 updated

Severity
Container Advisory ID : SUSE-CU-2022:2209-1
Container Tags : suse/sle15:15.2 , suse/sle15:15.2.9.5.195
Container Release : 9.5.195
Severity : important
Type : security

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.