Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 504
Alerts This Week
Warning Icon 1 504

SUSE: 2022:2505-1 Critical: Toolbox Container Security Update

suse
Calendar Grey October 11, 2022
Dist Suse Esm H88
The container advisory for suse/sle-micro/5.3/toolbox encompasses essential security enhancements and fixes related to identified vulnerabilities.
The container suse/sle-micro/5.3/toolbox was updated

Summary

Advisory ID: SUSE-RU-2022:3452-1 Released: Wed Sep 28 12:13:43 2022 Summary: Recommended update for glibc Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:3489-1 Released: Sat Oct 1 13:35:24 2022 Summary: Security update for expat Type: security Severity: important Advisory ID: SUSE-RU-2022:3521-1 Released: Tue Oct 4 14:18:56 2022 Summary: Recommended update for lvm2

Topics%20covered

Topics Covered

security advisory critical security patch suse patches toolbox container update

References

References : 1198523 1201942 1202624 1203438 CVE-2021-28861 CVE-2022-40674

1201942

This update for glibc fixes the following issues:

- Reversing calculation of __x86_shared_non_temporal_threshold (bsc#1201942)

- powerpc: Optimized memcmp for power10 (jsc#PED-987)

1203438,CVE-2022-40674

This update for expat fixes the following issues:

- CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c (bsc#1203438).

1198523

This update for lvm2 fixes the following issues:

- Add additional check in the package to prevent removal of device-mapper library files during install (bsc#1198523)

1202624,CVE-2021-28861

This update for python3 fixes the following issues:

- CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).

Severity
critical
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2505-1
Container Tags : suse/sle-micro/5.3/toolbox:11.1 , suse/sle-micro/5.3/toolbox:11.1-5.2.9 , suse/sle-micro/5.3/toolbox:latest
Container Release : 5.2.9
Severity : critical
Type : security

Topics%20covered

Topics Covered

security advisory critical security patch suse patches toolbox container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.