Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2022:2772-1 Important: Updates for Container Security Issues

suse
Calendar Grey October 28, 2022
Dist Suse Esm H88
SUSE Container Update Notice: suse/sle15 offers vital security enhancements for a range of elements and fixes.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2022:3781-1 Released: Wed Oct 26 17:50:44 2022 Summary: Security update for container-suseconnect Type: security Severity: moderate Advisory ID: SUSE-SU-2022:3784-1 Released: Wed Oct 26 18:03:28 2022 Summary: Security update for libtasn1 Type: security Severity: critical Advisory ID: SUSE-SU-2022:3785-1 Released: Wed Oct 26 20:20:19 2022 Summary: Security update for curl Type: security

Topics%20covered

Topics Covered

security advisory critical suse patches libtasn1 curl security container

References

References : 1194047 1203911 1204383 1204386 1204397 1204690 CVE-2021-46848

CVE-2022-32221 CVE-2022-42916

1204397

This update of container-suseconnect is a rebuilt of the previous sources against the current security updated go compiler.

1204690,CVE-2021-46848

This update for libtasn1 fixes the following issues:

- CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690)

1204383,1204386,CVE-2022-32221,CVE-2022-42916

This update for curl fixes the following issues:

- CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).

- CVE-2022-42916: Fixed HSTS bypass via IDN (bsc#1204386).

1194047,1203911

This update for permissions fixes the following issues:

- Fix regression introduced by backport of security fix (bsc#1203911)

Severity
critical
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2772-1
Container Tags : bci/bci-base:15.4 , bci/bci-base:15.4.27.14.8 , suse/sle15:15.4 , suse/sle15:15.4.27.14.8
Container Release : 27.14.8
Severity : critical
Type : security

Topics%20covered

Topics Covered

security advisory critical suse patches libtasn1 curl security container

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here