Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2022:237-1 Important: Trento/Trento-DB Security Update

suse
Calendar Grey February 28, 2022
Dist Suse Esm H88
Essential security patches for trento/trento-db and affiliated libraries including glibc and systemd, targeting significant vulnerabilities.
The container trento/trento-db was updated

Summary

Advisory ID: SUSE-SU-2022:330-1 Released: Fri Feb 4 09:29:08 2022 Summary: Security update for glibc Type: security Severity: important Advisory ID: SUSE-RU-2022:343-1 Released: Mon Feb 7 15:16:58 2022 Summary: Recommended update for systemd Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:498-1 Released: Fri Feb 18 10:46:56 2022 Summary: Security update for expat Type: security

Topics%20covered

Topics Covered

security advisory patch important SUSE security issues systemd trento-db

References

References : 1191826 1192637 1193086 1194178 1194640 1194768 1194770 1194785

1195054 1195217 CVE-2021-3997 CVE-2021-3999 CVE-2022-23218 CVE-2022-23219

CVE-2022-23852 CVE-2022-23990

1194640,1194768,1194770,1194785,CVE-2021-3999,CVE-2022-23218,CVE-2022-23219

This update for glibc fixes the following issues:

- CVE-2021-3999: Fixed incorrect errno in getcwd (bsc#1194640)

- CVE-2022-23219: Fixed buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768)

- CVE-2022-23218: Fixed buffer overflow in sunrpc svcunix_create (bsc#1194770)

Features added:

- IBM Power 10 string operation improvements (bsc#1194785, jsc#SLE-18195)

1193086

This update for systemd fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:237-1
Container Tags : trento/trento-db:14.1 , trento/trento-db:14.1-rev1.0.0 , trento/trento-db:14.1-rev1.0.0-build2.2.34 , trento/trento-db:latest
Container Release : 2.2.34
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory patch important SUSE security issues systemd trento-db

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here