Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2022:2557-1 Important: Bci/Bci-Init Use-After-Free Security Update

suse
Calendar Grey October 18, 2022
Dist Suse Esm H88
SUSE enhances bci/bci-core image addressing CVE-2022-40674 by implementing critical security fixes.
The container bci/bci-init was updated

Summary

Advisory ID: SUSE-SU-2022:3597-1 Released: Mon Oct 17 13:13:16 2022 Summary: Security update for expat Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security issue important use-after-free expat SUSE Container bci/bci-init

References

References : 1203438 CVE-2022-40674

1203438,CVE-2022-40674

This update for expat fixes the following issues:

- CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c (bsc#1203438).

The following package changes have been done:

- libexpat1-2.2.5-150000.3.22.1 updated

- container:sles15-image-15.0.0-17.20.49 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2557-1
Container Tags : bci/bci-init:15.3 , bci/bci-init:15.3.20.9
Container Release : 20.9
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue important use-after-free expat SUSE Container bci/bci-init

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here