Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2022:2776-1 Important: Toolbox Security Issue Resolved

suse
Calendar Grey October 29, 2022
Dist Suse Esm H88
The latest security enhancement for the container suse/sle-micro/5.2/toolbox incorporates critical patches that resolve several vulnerabilities.
The container suse/sle-micro/5.2/toolbox was updated

Summary

Advisory ID: SUSE-SU-2022:3805-1 Released: Thu Oct 27 17:19:46 2022 Summary: Security update for dbus-1 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security issue patch important suse important update toolbox

References

References : 1087072 1204111 1204112 1204113 CVE-2022-42010 CVE-2022-42011

CVE-2022-42012

1087072,1204111,1204112,1204113,CVE-2022-42010,CVE-2022-42011,CVE-2022-42012

This update for dbus-1 fixes the following issues:

- CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111).

- CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112).

- CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113).

Bugfixes:

- Disable asserts (bsc#1087072).

The following package changes have been done:

- dbus-1-1.12.2-150100.8.14.1 updated

- libdbus-1-3-1.12.2-150100.8.14.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2776-1
Container Tags : suse/sle-micro/5.2/toolbox:11.1 , suse/sle-micro/5.2/toolbox:11.1-6.2.124 , suse/sle-micro/5.2/toolbox:latest
Container Release : 6.2.124
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue patch important suse important update toolbox

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here