Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2022:3088-1 Important: Update for suse/389-ds and krb5

suse
Calendar Grey November 23, 2022
Dist Suse Esm H88
SUSE Container Patch Notification regarding suse/389-ds presents critical security enhancements and updates pertaining to krb5 and libeconf.
The container suse/389-ds was updated

Summary

Advisory ID: SUSE-RU-2022:4135-1 Released: Mon Nov 21 00:13:40 2022 Summary: Recommended update for libeconf Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:4153-1 Released: Mon Nov 21 14:34:09 2022 Summary: Security update for krb5 Type: security Severity: important

References

References : 1198165 1205126 CVE-2022-42898

1198165

This update for libeconf fixes the following issues:

- Update to version 0.4.6+git

- econftool:

Parsing error: Reporting file and line nr. --delimeters=spaces accepting all kind of spaces for delimiter.

- libeconf:

Parse files correctly on space characters (1198165)

- Update to version 0.4.5+git

- econftool:

New call 'syntax' for checking the configuration files only. Returns an error string with line number if error.

New options '--comment' and '--delimeters'

1205126,CVE-2022-42898

This update for krb5 fixes the following issues:

- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).

The following package changes have been done:

- libeconf0-0.4.6+git20220427.3016f4e-150400.3.3.1 updated

- krb5-1.19.2-150400.3.3.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:3088-1
Container Tags : suse/389-ds:2.0 , suse/389-ds:2.0-17.51 , suse/389-ds:latest
Container Release : 17.51
Severity : important
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here