SUSE: 2022:599-1 suse/sles12sp5 Security Update
Summary
Advisory ID: SUSE-SU-2022:1160-1 Released: Tue Apr 12 14:49:18 2022 Summary: Security update for xz Type: security Severity: important Advisory ID: SUSE-RU-2022:1169-1 Released: Tue Apr 12 18:19:42 2022 Summary: Recommended update for systemd Type: recommended Severity: moderate
References
References : 1180225 1190984 1191502 1193841 1195529 1195899 1198062 CVE-2022-1271
1198062,CVE-2022-1271
This update for xz fixes the following issues:
- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)
1180225,1190984,1191502,1193841,1195529,1195899
This update for systemd fixes the following issues:
- Core: make sure we always free the list of changes
- Install: correctly report symlink creations
- Core: make sure we generate a nicer error when a linked unit is attempted to be enabled
- Install: unify checking whether operations may be applied to a unit file in a new function
- Install: fix errno handling
- Allow 'edit' and 'cat' on unloaded units
- Don't open /var journals in volatile mode when runtime_journal==NULL
- udev: handle duplicate device ID (bsc#1195529)
- man: tweak description of auto/noauto (bsc#1191502)
- systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23869 jsc#SLE-23871)
- systemctl: exit with 1 if no unit files found (bsc#1193841)
- umount: show correct error message
- core/umount: fix unitialized fields in MountPoint
- umount: Add more asserts and remove some unused arguments, fix memory leak
- mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
- busctl: add a timestamp to the output of the busctl monitor command (bsc#1180225 jsc#SLE-21861)
The following package changes have been done:
- liblzma5-5.0.5-6.7.1 updated
- libsystemd0-228-157.38.4 updated
- libudev1-228-157.38.4 updated