Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2023:4891-2 Critical: Toolbox DBus Vulnerability Patch

suse
Calendar Grey October 29, 2022
Dist Suse Esm H88
The SUSE Container Security Advisory underlines critical updates for suse/sle-micro/5.3/toolbox, featuring essential fixes.
The container suse/sle-micro/5.3/toolbox was updated

Summary

Advisory ID: SUSE-SU-2022:3806-1 Released: Thu Oct 27 17:21:11 2022 Summary: Security update for dbus-1 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security issue important suse dbus toolbox container update

References

References : 1087072 1204111 1204112 1204113 CVE-2022-42010 CVE-2022-42011

CVE-2022-42012

1087072,1204111,1204112,1204113,CVE-2022-42010,CVE-2022-42011,CVE-2022-42012

This update for dbus-1 fixes the following issues:

- CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111).

- CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112).

- CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113).

Bugfixes:

- Disable asserts (bsc#1087072).

The following package changes have been done:

- dbus-1-1.12.2-150400.18.5.1 updated

- libdbus-1-3-1.12.2-150400.18.5.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2774-1
Container Tags : suse/sle-micro/5.3/toolbox:11.1 , suse/sle-micro/5.3/toolbox:11.1-5.2.21 , suse/sle-micro/5.3/toolbox:latest
Container Release : 5.2.21
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue important suse dbus toolbox container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here