Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2022:2724-1 Important: Bci/Python Integer Overflow Update

suse
Calendar Grey October 26, 2022
Scroller Suse
SUSE Container Update Notice: bci/python has been updated to address security vulnerabilities identified in versions 3, 3.10, and the most recent release.
The container bci/python was updated

Summary

Advisory ID: SUSE-RU-2022:2796-1 Released: Fri Aug 12 14:34:31 2022 Summary: Recommended update for jitterentropy Type: recommended Severity: moderate Advisory ID: SUSE-RU-2022:3328-1 Released: Wed Sep 21 12:48:56 2022 Summary: Recommended update for jitterentropy Type: recommended Severity: moderate Advisory ID: SUSE-RU-2022:3551-1 Released: Fri Oct 7 17:03:55 2022

Topics%20covered

Topics Covered

security advisory important integer overflow SUSE python container bci

References

References : 1121365 1180995 1182983 1190651 1190653 1190700 1190888 1191020

1193859 1198471 1198472 1199492 1201293 1202117 1202148 1202870

1203046 1203069 1204366 1204367 CVE-2022-40303 CVE-2022-40304

This update for jitterentropy fixes the following issues:

jitterentropy is included in version 3.4.0 (jsc#SLE-24941):

This is a FIPS 140-3 / NIST 800-90b compliant userspace jitter entropy generator library,

used by other FIPS libraries.

1202870

This update for jitterentropy fixes the following issues:

- Hide the non-GNUC constructs that are library internal from the

exported header, to make it usable in builds with strict C99

compliance. (bsc#1202870)

1182983,1190700,1191020,1202117

This update for libgcrypt fixes the following issues:

- FIPS: Fixed gpg/gpg2 gets out of core handler in FIPS mode while

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2724-1
Container Tags : bci/python:3 , bci/python:3.10 , bci/python:3.10-7.5 , bci/python:latest
Container Release : 7.5
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important integer overflow SUSE python container bci

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.