Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

SUSE: 2022:3015-1 Important Security Update for 389-DS with Critical Fixes

suse
Calendar Grey November 17, 2022
Dist Suse Esm H88
Crucial SUSE container upgrade addresses severe memory corruption and buffer overrun vulnerabilities, featuring essential security enhancements included.
The container suse/389-ds was updated

Summary

Advisory ID: SUSE-RU-2022:3961-1 Released: Mon Nov 14 07:33:50 2022 Summary: Recommended update for zlib Type: recommended Severity: important Advisory ID: SUSE-RU-2022:3974-1 Released: Mon Nov 14 15:39:20 2022 Summary: Recommended update for util-linux Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:3996-1 Released: Tue Nov 15 17:06:52 2022 Summary: Security update for 389-ds Type: security

Topics%20covered

Topics Covered

security advisory buffer overrun memory corruption suse container update

References

References : 1194119 1201959 1203652 1204179 1204211 1204493 1204748 1204968

1205146 CVE-2021-45710 CVE-2022-3821

1203652

This update for zlib fixes the following issues:

- Fix updating strm.adler with inflate() if DFLTCC is used (bsc#1203652)

1201959,1204211

This update for util-linux fixes the following issues:

- Fix file conflict during upgrade (bsc#1204211)

- libuuid improvements (bsc#1201959, PED-1150):

libuuid: Fix range when parsing UUIDs.

Improve cache handling for short running applications-increment the cache size over runtime.

Implement continuous clock handling for time based UUIDs.

Check clock value from clock file to provide seamless libuuid.

1194119,1204493,1204748,1205146,CVE-2021-45710

This update for 389-ds fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:3015-1
Container Tags : suse/389-ds:2.0 , suse/389-ds:2.0-17.42 , suse/389-ds:latest
Container Release : 17.42
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory buffer overrun memory corruption suse container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here