Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2022:2296-1 Important Advisory: SUSE/PCP Security Update

suse
Calendar Grey September 20, 2022
Dist Suse Esm H88
SUSE Container Advisory regarding suse/pcp has been released with critical security fixes, encompassing updates for libtirpc and sqlite3.
The container suse/pcp was updated

Summary

Advisory ID: SUSE-SU-2022:3305-1 Released: Mon Sep 19 11:45:57 2022 Summary: Security update for libtirpc Type: security Severity: important Advisory ID: SUSE-SU-2022:3307-1 Released: Mon Sep 19 13:26:51 2022 Summary: Security update for sqlite3 Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory denial of service important suse libtirpc sqlite3 container update

References

References : 1189802 1195773 1201680 1201783 CVE-2021-36690 CVE-2021-46828

CVE-2022-35737

1201680,CVE-2021-46828

This update for libtirpc fixes the following issues:

- CVE-2021-46828: Fixed denial of service vulnerability with lots of connections (bsc#1201680).

1189802,1195773,1201783,CVE-2021-36690,CVE-2022-35737

This update for sqlite3 fixes the following issues:

- CVE-2022-35737: Fixed an array-bounds overflow if billions of bytes are used in a string argument to a C API (bnc#1201783).

- CVE-2021-36690: Fixed an issue with the SQLite Expert extension when a column has no collating sequence (bsc#1189802).

- Package the Tcl bindings here again so that we only ship one copy of SQLite (bsc#1195773).

The following package changes have been done:

- libtirpc-netconfig-1.2.6-150300.3.14.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2296-1
Container Tags : suse/pcp:5 , suse/pcp:5.2 , suse/pcp:5.2.2 , suse/pcp:5.2.2-10.36 , suse/pcp:latest
Container Release : 10.36
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory denial of service important suse libtirpc sqlite3 container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here