Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2022:2938-1 Moderate: Security Patch for SUSE Container SLES12SP4

suse
Calendar Grey November 11, 2022
Dist Suse Esm H88
SUSE Container Security Bulletin: suse/sles12sp4 includes critical security enhancements and performance improvements.
The container suse/sles12sp4 was updated

Summary

Advisory ID: SUSE-SU-2022:3939-1 Released: Thu Nov 10 14:32:05 2022 Summary: Security update for rpm Type: security Severity: moderate Advisory ID: SUSE-SU-2022:3942-1 Released: Thu Nov 10 15:58:47 2022 Summary: Security update for glibc Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate severity SUSE security issues glibc update container update RPM fix

References

References : 1183543 1183545 1183632 1183659 1185299 1193625 1196852 996280

CVE-2015-8985 CVE-2021-20266 CVE-2021-20271 CVE-2021-3421

1183543,1183545,1183632,1183659,1185299,996280,CVE-2021-20266,CVE-2021-20271,CVE-2021-3421

This update for rpm fixes the following issues:

- Fixed PGP parsing bugs (bsc#1185299).

- Fixed various format handling bugs (bsc#996280).

- CVE-2021-3421: Fixed vulnerability where unsigned headers could be injected into the rpm database (bsc#1183543).

- CVE-2021-20271: Fixed vulnerability where a corrupted rpm could corrupt the rpm database (bsc#1183545).

- CVE-2021-20266: Fixed missing bounds check in hdrblobInit (bsc#1183632).

Bugfixes:

- Fixed deadlock when multiple rpm processes tried to acquire the database lock (bsc#1183659).

Container Advisory ID : SUSE-CU-2022:2938-1
Container Tags : suse/sles12sp4:26.529 , suse/sles12sp4:latest
Container Release : 26.529
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate severity SUSE security issues glibc update container update RPM fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here