Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE: 2022:353-1 Important: bci/golang Security Patch Release

suse
Calendar Grey March 26, 2022
Dist Suse Esm H88
The SUSE Container Advisory plays a crucial role in maintaining bci/golang, emphasizing important security enhancements and fixes for identified vulnerabilities.
The container bci/golang was updated

Summary

Advisory ID: SUSE-SU-2022:743-1 Released: Mon Mar 7 22:08:12 2022 Summary: Security update for cyrus-sasl Type: security Severity: important Advisory ID: SUSE-RU-2022:787-1 Released: Thu Mar 10 11:20:13 2022 Summary: Recommended update for openldap2 Type: recommended Severity: moderate Advisory ID: SUSE-RU-2022:788-1 Released: Thu Mar 10 11:21:04 2022 Summary: Recommended update for libzypp, zypper

Topics%20covered

Topics Covered

security advisory important security patch SQL injection SUSE bci/golang CVE-2022-24407

References

References : 1099272 1115529 1128846 1162964 1172113 1172427 1173277 1174075

1174911 1180689 1181826 1182959 1187906 1190926 1194229 1194265

1194642 1195149 1195326 1195468 1195654 1195792 1195856 1196036

1197004 CVE-2020-14367 CVE-2022-24407

1194265,1196036,CVE-2022-24407

This update for cyrus-sasl fixes the following issues:

- CVE-2022-24407: Fixed SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036).

The following non-security bugs were fixed:

- postfix: sasl authentication with password fails (bsc#1194265).

This update for openldap2 fixes the following issue:

- restore CLDAP functionality in CLI tools (jsc#PM-3288)

1195326

This update for libzypp, zypper fixes the following issues:

- Fix handling of redirected command in-/output (bsc#1195326)

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:353-1
Container Tags : bci/golang:1.17 , bci/golang:1.17-11.20 , bci/golang:latest
Container Release : 11.20
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important security patch SQL injection SUSE bci/golang CVE-2022-24407

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here