Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2022:3071-1 Important: bci/dotnet-aspnet Security Update Advisory

suse
Calendar Grey November 22, 2022
Dist Suse Esm H88
SUSE Container Security Announcement related to bci/dotnet-aspnet, outlining essential updates aimed at safeguarding container integrity.
The container bci/dotnet-aspnet was updated

Summary

Advisory ID: SUSE-RU-2022:4135-1 Released: Mon Nov 21 00:13:40 2022 Summary: Recommended update for libeconf Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:4153-1 Released: Mon Nov 21 14:34:09 2022 Summary: Security update for krb5 Type: security Severity: important

References

References : 1198165 1205126 CVE-2022-42898

1198165

This update for libeconf fixes the following issues:

- Update to version 0.4.6+git

- econftool:

Parsing error: Reporting file and line nr. --delimeters=spaces accepting all kind of spaces for delimiter.

- libeconf:

Parse files correctly on space characters (1198165)

- Update to version 0.4.5+git

- econftool:

New call 'syntax' for checking the configuration files only. Returns an error string with line number if error.

New options '--comment' and '--delimeters'

1205126,CVE-2022-42898

This update for krb5 fixes the following issues:

- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).

The following package changes have been done:

- libeconf0-0.4.6+git20220427.3016f4e-150400.3.3.1 updated

- krb5-1.19.2-150400.3.3.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:3071-1
Container Tags : bci/dotnet-aspnet:3.1 , bci/dotnet-aspnet:3.1-42.36 , bci/dotnet-aspnet:3.1.30 , bci/dotnet-aspnet:3.1.30-42.36
Container Release : 42.36
Severity : important
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here