SUSE: 2022:3505-1 Important Systemd And Sqlite3 Security Issues
suse
December 30, 2022
Summary
Advisory ID: SUSE-SU-2022:4628-1 Released: Wed Dec 28 09:23:13 2022 Summary: Security update for sqlite3 Type: security Severity: moderate Advisory ID: SUSE-SU-2022:4629-1 Released: Wed Dec 28 09:24:07 2022 Summary: Security update for systemd Type: security Severity: important
Topics Covered
References
References : 1200723 1205000 1206337 CVE-2022-4415 CVE-2022-46908
1206337,CVE-2022-46908
This update for sqlite3 fixes the following issues:
- CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism,
when relying on --safe for execution of an untrusted CLI script (bsc#1206337).
1200723,1205000,CVE-2022-4415
This update for systemd fixes the following issues:
- CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000).
Bug fixes:
- Support by-path devlink for multipath nvme block devices (bsc#1200723).
The following package changes have been done:
- libudev1-249.12-150400.8.16.1 updated
- libsqlite3-0-3.39.3-150000.3.20.1 updated
- libsystemd0-249.12-150400.8.16.1 updated
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Container Advisory ID : SUSE-CU-2022:3505-1
Container Tags : bci/ruby:2 , bci/ruby:2.5 , bci/ruby:2.5-32.7 , bci/ruby:latest
Container Release : 32.7
Severity : important
Type : security
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!