Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

SUSE: 2022:3100-3 Critical: Bci/Nodejs Vulnerability Patch

suse
Calendar Grey November 23, 2022
Dist Suse Esm H88
SUSE Security Announcement regarding bci/python rectifies significant vulnerabilities related to container updates and cites CVE-2022-42899.
The container bci/nodejs was updated

Summary

Advisory ID: SUSE-RU-2022:4135-1 Released: Mon Nov 21 00:13:40 2022 Summary: Recommended update for libeconf Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:4153-1 Released: Mon Nov 21 14:34:09 2022 Summary: Security update for krb5 Type: security Severity: important

References

References : 1198165 1205126 CVE-2022-42898

1198165

This update for libeconf fixes the following issues:

- Update to version 0.4.6+git

- econftool:

Parsing error: Reporting file and line nr. --delimeters=spaces accepting all kind of spaces for delimiter.

- libeconf:

Parse files correctly on space characters (1198165)

- Update to version 0.4.5+git

- econftool:

New call 'syntax' for checking the configuration files only. Returns an error string with line number if error.

New options '--comment' and '--delimeters'

1205126,CVE-2022-42898

This update for krb5 fixes the following issues:

- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).

The following package changes have been done:

- libeconf0-0.4.6+git20220427.3016f4e-150400.3.3.1 updated

- krb5-1.19.2-150400.3.3.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:3098-1
Container Tags : bci/node:16 , bci/node:16-11.36 , bci/node:latest , bci/nodejs:16 , bci/nodejs:16-11.36 , bci/nodejs:latest
Container Release : 11.36
Severity : important
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here