Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2022:3510-2 Critical Patch for OpenSSL And Libcurl Vulnerabilities

suse
Calendar Grey December 30, 2022
Dist Suse Esm H88
SUSE Container Update Notification ID: SUSE-CU-2022:3510-1, tackling critical vulnerabilities in openssl and bash.

Summary

Advisory ID: SUSE-SU-2022:4628-1 Released: Wed Dec 28 09:23:13 2022 Summary: Security update for sqlite3 Type: security Severity: moderate Advisory ID: SUSE-SU-2022:4629-1 Released: Wed Dec 28 09:24:07 2022 Summary: Security update for systemd Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security issue important SUSE systemd sqlite3 container update

References

References : 1200723 1205000 1206337 CVE-2022-4415 CVE-2022-46908

1206337,CVE-2022-46908

This update for sqlite3 fixes the following issues:

- CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism,

when relying on --safe for execution of an untrusted CLI script (bsc#1206337).

1200723,1205000,CVE-2022-4415

This update for systemd fixes the following issues:

- CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000).

Bug fixes:

- Support by-path devlink for multipath nvme block devices (bsc#1200723).

The following package changes have been done:

- libsqlite3-0-3.39.3-150000.3.20.1 updated

- libsystemd0-249.12-150400.8.16.1 updated

- libudev1-249.12-150400.8.16.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:3508-1
Container Tags : bci/bci-base:15.4 , bci/bci-base:15.4.27.14.26 , suse/sle15:15.4 , suse/sle15:15.4.27.14.26
Container Release : 27.14.26
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue important SUSE systemd sqlite3 container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here