Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2022:2974-1 Important Security Update for SLES12SP5 Containers

suse
Calendar Grey November 15, 2022
Dist Suse Esm H88
Critical security enhancement for SUSE Container suse/sles12sp4, rectifying various vulnerabilities with essential patches.
The container suse/sles12sp5 was updated

Summary

Advisory ID: SUSE-SU-2022:3939-1 Released: Thu Nov 10 14:32:05 2022 Summary: Security update for rpm Type: security Severity: moderate Advisory ID: SUSE-SU-2022:3942-1 Released: Thu Nov 10 15:58:47 2022 Summary: Security update for glibc Type: security Severity: moderate Advisory ID: SUSE-RU-2022:3962-1 Released: Mon Nov 14 07:34:23 2022 Summary: Recommended update for zlib Type: recommended

Topics%20covered

Topics Covered

security advisory suse zlib update glibc fix rpm issues

References

References : 1183543 1183545 1183632 1183659 1185299 1193625 1196852 1203652

996280 CVE-2015-8985 CVE-2021-20266 CVE-2021-20271 CVE-2021-3421

1183543,1183545,1183632,1183659,1185299,996280,CVE-2021-20266,CVE-2021-20271,CVE-2021-3421

This update for rpm fixes the following issues:

- Fixed PGP parsing bugs (bsc#1185299).

- Fixed various format handling bugs (bsc#996280).

- CVE-2021-3421: Fixed vulnerability where unsigned headers could be injected into the rpm database (bsc#1183543).

- CVE-2021-20271: Fixed vulnerability where a corrupted rpm could corrupt the rpm database (bsc#1183545).

- CVE-2021-20266: Fixed missing bounds check in hdrblobInit (bsc#1183632).

Bugfixes:

- Fixed deadlock when multiple rpm processes tried to acquire the database lock (bsc#1183659).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2974-1
Container Tags : suse/sles12sp5:6.5.400 , suse/sles12sp5:latest
Container Release : 6.5.400
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory suse zlib update glibc fix rpm issues

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here