SUSE: 2022:3079-1 Important: bci/dotnet-runtime Integer Overflow fix
suse
November 22, 2022
The container bci/dotnet-runtime was updated
Summary
Advisory ID: SUSE-RU-2022:4135-1 Released: Mon Nov 21 00:13:40 2022 Summary: Recommended update for libeconf Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:4153-1 Released: Mon Nov 21 14:34:09 2022 Summary: Security update for krb5 Type: security Severity: important
References
References : 1198165 1205126 CVE-2022-42898
1198165
This update for libeconf fixes the following issues:
- Update to version 0.4.6+git
- econftool:
Parsing error: Reporting file and line nr. --delimeters=spaces accepting all kind of spaces for delimiter.
- libeconf:
Parse files correctly on space characters (1198165)
- Update to version 0.4.5+git
- econftool:
New call 'syntax' for checking the configuration files only. Returns an error string with line number if error.
New options '--comment' and '--delimeters'
1205126,CVE-2022-42898
This update for krb5 fixes the following issues:
- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).
The following package changes have been done:
- libeconf0-0.4.6+git20220427.3016f4e-150400.3.3.1 updated
- krb5-1.19.2-150400.3.3.1 updated
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Container Advisory ID : SUSE-CU-2022:3079-1
Container Tags : bci/dotnet-runtime:6.0 , bci/dotnet-runtime:6.0-21.50 , bci/dotnet-runtime:6.0.9 , bci/dotnet-runtime:6.0.9-21.50
Container Release : 21.50
Severity : important
Type : security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!