Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2022:2636-1 Critical Update for SUSE/SLE15 Container Security

suse
Calendar Grey October 22, 2022
Dist Suse Esm H88
SUSE Container Security Update: Advisory ID SUSE-CU-2022:2837-1 along with patch specifics for suse/sle15.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2022:3683-1 Released: Fri Oct 21 11:48:39 2022 Summary: Security update for libksba Type: security Severity: critical Advisory ID: SUSE-SU-2022:3692-1 Released: Fri Oct 21 16:15:07 2022 Summary: Security update for libxml2 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security update critical suse libxml2 libksba container

References

References : 1204357 1204366 1204367 CVE-2022-3515 CVE-2022-40303 CVE-2022-40304

1204357,CVE-2022-3515

This update for libksba fixes the following issues:

- CVE-2022-3515: Fixed a possible overflow in the TLV parser (bsc#1204357).

1204366,1204367,CVE-2022-40303,CVE-2022-40304

This update for libxml2 fixes the following issues:

- CVE-2022-40303: Fixed integer overflows with XML_PARSE_HUGE (bsc#1204366).

- CVE-2022-40304: Fixed dict corruption caused by entity reference cycles (bsc#1204367).

The following package changes have been done:

- libksba8-1.3.5-150000.4.3.1 updated

- libxml2-2-2.9.14-150400.5.10.1 updated

Severity
critical
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2636-1
Container Tags : bci/bci-base:15.4 , bci/bci-base:15.4.27.14.5 , suse/sle15:15.4 , suse/sle15:15.4.27.14.5
Container Release : 27.14.5
Severity : critical
Type : security

Topics%20covered

Topics Covered

security advisory security update critical suse libxml2 libksba container

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here