Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE Container Update 2022:2641-1 Critical: libksba Overflow Fix

suse
Calendar Grey October 23, 2022
Scroller Suse
SUSE Container Notification for suse/sle15 encompasses vital patch for mitigating overflow in libksba. Upgrade immediately!
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2022:3683-1 Released: Fri Oct 21 11:48:39 2022 Summary: Security update for libksba Type: security Severity: critical Advisory ID: SUSE-feature-2022:3689-1 Released: Fri Oct 21 14:19:56 2022 Summary: Feature update for rpm Type: feature Severity: moderate

Topics%20covered

Topics Covered

security advisory critical update overflow suse libksba

References

References : 1204357 CVE-2022-3515

1204357,CVE-2022-3515

This update for libksba fixes the following issues:

- CVE-2022-3515: Fixed a possible overflow in the TLV parser (bsc#1204357).

This feature update for rpm provides:

- Support Ed25519 RPM signatures (jsc#SLE-24714, jsc#SLE-24715)

The following package changes have been done:

- libksba8-1.3.5-150000.4.3.1 updated

- rpm-4.14.1-150200.22.10.1 updated

Severity
critical
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2641-1
Container Tags : suse/sle15:15.2 , suse/sle15:15.2.9.5.210
Container Release : 9.5.210
Severity : critical
Type : security

Topics%20covered

Topics Covered

security advisory critical update overflow suse libksba

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.