Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Warning: Undefined variable $read_more_description in /var/www/www.linuxsecurity.com-443/html/lsadvisories/lsadvisories.php on line 1551

SUSE: 2022:2743-1 Important: Bci/Python Security Patch Available Now

suse
Calendar Grey October 28, 2022
Dist Suse Esm H88
SUSE Container Security Advisory presents an essential patch for bci/nodejs, addressing multiple threats and issues.
The container bci/python was updated

Summary

Advisory ID: SUSE-SU-2022:3766-1 Released: Wed Oct 26 11:38:01 2022 Summary: Security update for buildah Type: security Severity: important Advisory ID: SUSE-SU-2022:3773-1 Released: Wed Oct 26 12:19:29 2022 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-RU-2022:3776-1 Released: Wed Oct 26 14:06:43 2022 Summary: Recommended update for permissions Type: recommended

References

References : 1167864 1181961 1202812 1203911 1204137 1204383 1204690 CVE-2020-10696

CVE-2021-20206 CVE-2021-46848 CVE-2022-2990 CVE-2022-32221

1167864,1181961,1202812,CVE-2020-10696,CVE-2021-20206,CVE-2022-2990

This update for buildah fixes the following issues:

- CVE-2021-20206: Fixed an issue in libcni that could allow an attacker to execute arbitrary binaries on the host (bsc#1181961).

- CVE-2020-10696: Fixed an issue that could lead to files being overwritten during the image building process (bsc#1167864).

- CVE-2022-2990: Fixed possible information disclosure and modification / bsc#1202812

Buildah was updated to version 1.27.1:

* run: add container gid to additional groups

- Add fix for CVE-2022-2990 / bsc#1202812

Update to version 1.27.0:

Severity
critical
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2743-1
Container Tags : bci/python:3 , bci/python:3.9 , bci/python:3.9-20.4
Container Release : 20.4
Severity : critical
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here