Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2022:2751-2 Critical: OpenSSH and Libgcrypt Security Fix

suse
Calendar Grey October 28, 2022
Dist Suse Esm H88
SUSE Container Security Notice for suse/sle15 contains essential updates addressing vulnerabilities in wget and libgcrypt.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2022:3773-1 Released: Wed Oct 26 12:19:29 2022 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-RU-2022:3776-1 Released: Wed Oct 26 14:06:43 2022 Summary: Recommended update for permissions Type: recommended Severity: important Advisory ID: SUSE-SU-2022:3781-1 Released: Wed Oct 26 17:50:44 2022 Summary: Security update for container-suseconnect

Topics%20covered

Topics Covered

security advisory security issue critical suse curl libtasn1 container update

References

References : 1203911 1204137 1204383 1204397 1204690 CVE-2021-46848 CVE-2022-32221

1204383,CVE-2022-32221

This update for curl fixes the following issues:

- CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).

1203911,1204137

This update for permissions fixes the following issues:

- Revert changes that replaced ping capabilities with ICMP_PROTO sockets. Older SUSE Linux Enterprise versions don't

properly support ICMP_PROTO sockets feature yet (bsc#1204137)

- Fix regression introduced by backport of security fix (bsc#1203911)

1204397

This update of container-suseconnect is a rebuilt of the previous sources against the current security updated go compiler.

1204690,CVE-2021-46848

This update for libtasn1 fixes the following issues:

Severity
critical
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2740-1
Container Tags : suse/sle15:15.2 , suse/sle15:15.2.9.5.214
Container Release : 9.5.214
Severity : critical
Type : security

Topics%20covered

Topics Covered

security advisory security issue critical suse curl libtasn1 container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here