SUSE: 2022:2974-1 suse/sles12sp5 Security Update | LinuxSecurity.com
SUSE Container Update Advisory: suse/sles12sp5
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2022:2974-1
Container Tags        : suse/sles12sp5:6.5.400 , suse/sles12sp5:latest
Container Release     : 6.5.400
Severity              : important
Type                  : security
References            : 1183543 1183545 1183632 1183659 1185299 1193625 1196852 1203652
                        996280 CVE-2015-8985 CVE-2021-20266 CVE-2021-20271 CVE-2021-3421
-----------------------------------------------------------------

The container suse/sles12sp5 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2022:3939-1
Released:    Thu Nov 10 14:32:05 2022
Summary:     Security update for rpm
Type:        security
Severity:    moderate
References:  1183543,1183545,1183632,1183659,1185299,996280,CVE-2021-20266,CVE-2021-20271,CVE-2021-3421
This update for rpm fixes the following issues:

- Fixed PGP parsing bugs (bsc#1185299).
- Fixed various format handling bugs (bsc#996280).
- CVE-2021-3421: Fixed vulnerability where unsigned headers could be injected into the rpm database (bsc#1183543). 
- CVE-2021-20271: Fixed vulnerability where a corrupted rpm could corrupt the rpm database (bsc#1183545).
- CVE-2021-20266: Fixed missing bounds check in hdrblobInit (bsc#1183632).

Bugfixes:

- Fixed deadlock when multiple rpm processes tried to acquire the database lock (bsc#1183659).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2022:3942-1
Released:    Thu Nov 10 15:58:47 2022
Summary:     Security update for glibc
Type:        security
Severity:    moderate
References:  1193625,1196852,CVE-2015-8985
This update for glibc fixes the following issues:

- CVE-2015-8985: Fixed assertion failure in pop_fail_stack when executing
  a malformed regexp (bsc#1193625)

- x86: fix stack alignment in pthread_cond_[timed]wait (bsc#1196852)
- Recognize ppc64p7 arch to build for power7

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2022:3962-1
Released:    Mon Nov 14 07:34:23 2022
Summary:     Recommended update for zlib
Type:        recommended
Severity:    important
References:  1203652
This update for zlib fixes the following issues:

- Fix updating strm.adler with inflate() if DFLTCC is used (bsc#1203652)


The following package changes have been done:

- glibc-2.22-114.22.1 updated
- libz1-1.2.11-11.25.1 updated
- rpm-4.11.2-16.26.1 updated

SUSE: 2022:2974-1 suse/sles12sp5 Security Update

November 15, 2022
The container suse/sles12sp5 was updated

Summary

Advisory ID: SUSE-SU-2022:3939-1 Released: Thu Nov 10 14:32:05 2022 Summary: Security update for rpm Type: security Severity: moderate Advisory ID: SUSE-SU-2022:3942-1 Released: Thu Nov 10 15:58:47 2022 Summary: Security update for glibc Type: security Severity: moderate Advisory ID: SUSE-RU-2022:3962-1 Released: Mon Nov 14 07:34:23 2022 Summary: Recommended update for zlib Type: recommended Severity: important

References

References : 1183543 1183545 1183632 1183659 1185299 1193625 1196852 1203652

996280 CVE-2015-8985 CVE-2021-20266 CVE-2021-20271 CVE-2021-3421

1183543,1183545,1183632,1183659,1185299,996280,CVE-2021-20266,CVE-2021-20271,CVE-2021-3421

This update for rpm fixes the following issues:

- Fixed PGP parsing bugs (bsc#1185299).

- Fixed various format handling bugs (bsc#996280).

- CVE-2021-3421: Fixed vulnerability where unsigned headers could be injected into the rpm database (bsc#1183543).

- CVE-2021-20271: Fixed vulnerability where a corrupted rpm could corrupt the rpm database (bsc#1183545).

- CVE-2021-20266: Fixed missing bounds check in hdrblobInit (bsc#1183632).

Bugfixes:

- Fixed deadlock when multiple rpm processes tried to acquire the database lock (bsc#1183659).

1193625,1196852,CVE-2015-8985

This update for glibc fixes the following issues:

- CVE-2015-8985: Fixed assertion failure in pop_fail_stack when executing

a malformed regexp (bsc#1193625)

- x86: fix stack alignment in pthread_cond_[timed]wait (bsc#1196852)

- Recognize ppc64p7 arch to build for power7

1203652

This update for zlib fixes the following issues:

- Fix updating strm.adler with inflate() if DFLTCC is used (bsc#1203652)

The following package changes have been done:

- glibc-2.22-114.22.1 updated

- libz1-1.2.11-11.25.1 updated

- rpm-4.11.2-16.26.1 updated

Severity
Container Advisory ID : SUSE-CU-2022:2974-1
Container Tags : suse/sles12sp5:6.5.400 , suse/sles12sp5:latest
Container Release : 6.5.400
Severity : important
Type : security

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.