Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

SUSE: 2022:238-1 Important: Trento Runner Security Issue

suse
Calendar Grey March 1, 2022
Scroller Suse
Crucial enhancements for trento/trento-runner targeting various vulnerabilities and concerns comprehensively.
The container trento/trento-runner was updated

Summary

Advisory ID: SUSE-RU-2022:471-1 Released: Thu Feb 17 09:58:37 2022 Summary: Recommended update for trento-premium Type: recommended Severity: important Advisory ID: SUSE-SU-2022:498-1 Released: Fri Feb 18 10:46:56 2022 Summary: Security update for expat Type: security Severity: important Advisory ID: SUSE-RU-2022:520-1 Released: Fri Feb 18 12:45:19 2022 Summary: Recommended update for rpm

Topics%20covered

Topics Covered

security advisory security issue type threat important container update exponential overflow trento

References

References : 1194968 1195054 1195217 CVE-2022-23852 CVE-2022-23990

This update for trento-premium fixes the following issues:

- Releasing new sub-package 'trento-premium-installer'. (jsc#MSC-302)

1195054,1195217,CVE-2022-23852,CVE-2022-23990

This update for expat fixes the following issues:

- CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054).

- CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217).

1194968

This update for rpm fixes the following issues:

- Revert unwanted /usr/bin/python to /usr/bin/python2 change we got with the update to 4.14.3 (bsc#1194968)

This update for trento-premium fixes the following issues:

Release 0.9.0

### Added

- Pin specific container image versions in the helm chart values

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:238-1
Container Tags : trento/trento-runner:0.9.0 , trento/trento-runner:0.9.0-rev1.1.0 , trento/trento-runner:0.9.0-rev1.1.0-build3.2.14 , trento/trento-runner:latest
Container Release : 3.2.14
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue type threat important container update exponential overflow trento

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.