Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2022:603-1 Important Update For SLE15 Containers Security Fix

suse
Calendar Grey April 14, 2022
Dist Suse Esm H88
SUSE Container Notification Bulletin delivers patches and improvements along with significant security upgrades for suse/sle15.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-RU-2022:1150-1 Released: Mon Apr 11 17:34:19 2022 Summary: Recommended update for suse-build-key Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:1157-1 Released: Tue Apr 12 13:26:19 2022 Summary: Security update for libsolv, libzypp, zypper Type: security Severity: important Advisory ID: SUSE-SU-2022:1158-1 Released: Tue Apr 12 14:44:43 2022 Summary: Security update for xz

Topics%20covered

Topics Covered

security advisory security fix important suse patches container

References

References : 1184501 1194848 1195999 1196061 1196317 1196368 1196514 1196925

1197134 1197293 1198062 CVE-2022-1271

1197293

This update for suse-build-key fixes the following issues:

No longer install 1024bit keys by default. (bsc#1197293)

- The SLE11 key has been moved to documentation directory, and is obsoleted / removed by the package.

- The old PTF (pre March 2022) key moved to documentation directory.

1184501,1194848,1195999,1196061,1196317,1196368,1196514,1196925,1197134

This update for libsolv, libzypp, zypper fixes the following issues:

Security relevant fix:

- Harden package signature checks (bsc#1184501).

libsolv update to 0.7.22:

- reworked choice rule generation to cover more usecases

- support SOLVABLE_PREREQ_IGNOREINST in the ordering code (bsc#1196514)

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:603-1
Container Tags : suse/sle15:15.2 , suse/sle15:15.2.9.5.120
Container Release : 9.5.120
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security fix important suse patches container

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here