Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

SUSE: 2023:4183-1 Critical: ruby/rails and openssl Security Fixes

suse
Calendar Grey November 22, 2022
Scroller Suse
SUSE Container Upgrade for bci/python includes critical fixes for security flaws and enhancements on libyaml.
The container bci/dotnet-sdk was updated

Summary

Advisory ID: SUSE-RU-2022:4135-1 Released: Mon Nov 21 00:13:40 2022 Summary: Recommended update for libeconf Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:4153-1 Released: Mon Nov 21 14:34:09 2022 Summary: Security update for krb5 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security update important SUSE krb5 bci/dotnet-sdk

References

References : 1198165 1205126 CVE-2022-42898

1198165

This update for libeconf fixes the following issues:

- Update to version 0.4.6+git

- econftool:

Parsing error: Reporting file and line nr. --delimeters=spaces accepting all kind of spaces for delimiter.

- libeconf:

Parse files correctly on space characters (1198165)

- Update to version 0.4.5+git

- econftool:

New call 'syntax' for checking the configuration files only. Returns an error string with line number if error.

New options '--comment' and '--delimeters'

1205126,CVE-2022-42898

This update for krb5 fixes the following issues:

- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).

The following package changes have been done:

- libeconf0-0.4.6+git20220427.3016f4e-150400.3.3.1 updated

- krb5-1.19.2-150400.3.3.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:3076-1
Container Tags : bci/dotnet-sdk:6.0 , bci/dotnet-sdk:6.0-24.50 , bci/dotnet-sdk:6.0.9 , bci/dotnet-sdk:6.0.9-24.50
Container Release : 24.50
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security update important SUSE krb5 bci/dotnet-sdk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.