Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 438
Alerts This Week
Warning Icon 1 438

SUSE: 2022:3478-1 Important: sqlite3 and systemd Security Updates

suse
Calendar Grey December 29, 2022
Dist Suse Esm H88
SUSE Software Patch Notification: suse/sle15 incorporates crucial security enhancements for postgresql and networkd. Keep your systems safe!

Summary

Advisory ID: SUSE-SU-2022:4628-1 Released: Wed Dec 28 09:23:13 2022 Summary: Security update for sqlite3 Type: security Severity: moderate Advisory ID: SUSE-SU-2022:4630-1 Released: Wed Dec 28 09:25:18 2022 Summary: Security update for systemd Type: security Severity: important

Topics%20covered

Topics Covered

security advisory software update important security patch suse systemd sqlite3

References

References : 1200723 1203857 1204423 1205000 1206309 1206337 CVE-2022-43552

CVE-2022-4415 CVE-2022-46908

1206337,CVE-2022-46908

This update for sqlite3 fixes the following issues:

- CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism,

when relying on --safe for execution of an untrusted CLI script (bsc#1206337).

1200723,1203857,1204423,1205000,CVE-2022-4415

This update for systemd fixes the following issues:

- CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000).

Bug fixes:

- Support by-path devlink for multipath nvme block devices (bsc#1200723).

- Set SYSTEMD_NSS_DYNAMIC_BYPASS=1 env var for dbus-daemon (bsc#1203857).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:3478-1
Container Tags : bci/bci-base:15.3 , bci/bci-base:15.3.17.20.88 , suse/sle15:15.3 , suse/sle15:15.3.17.20.88
Container Release : 17.20.88
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory software update important security patch suse systemd sqlite3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.