Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

SUSE: 2022:222-1 important: bci/ruby Container Security Update

suse
Calendar Grey February 24, 2022
Dist Suse Esm H88
Essential updates for the bci/ruby container feature security enhancements for libjpeg and OpenSSL, significantly boosting system integrity.
The container bci/ruby was updated

Summary

Advisory ID: SUSE-RU-2022:383-1 Released: Tue Feb 15 17:47:36 2022 Summary: Recommended update for cyrus-sasl Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:498-1 Released: Fri Feb 18 10:46:56 2022 Summary: Security update for expat Type: security Severity: important Advisory ID: SUSE-RU-2022:520-1 Released: Fri Feb 18 12:45:19 2022 Summary: Recommended update for rpm Type: recommended

References

References : 1191826 1192637 1194178 1194265 1194968 1195054 1195217 CVE-2021-3997

CVE-2022-23852 CVE-2022-23990

1194265

This update for cyrus-sasl fixes the following issues:

- Fixed an issue when in postfix 'sasl' authentication with password fails. (bsc#1194265)

- Add config parameter '--with-dblib=gdbm'

- Avoid converting of '/etc/sasldb2 by every update. Convert '/etc/sasldb2' only if it is a Berkeley DB.

1195054,1195217,CVE-2022-23852,CVE-2022-23990

This update for expat fixes the following issues:

- CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054).

- CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217).

1194968

This update for rpm fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:222-1
Container Tags : bci/ruby:2.5 , bci/ruby:2.5-12.9 , bci/ruby:latest
Container Release : 12.9
Severity : important
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here