Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

SUSE: 2023:646-3 Critical Security Update for Tar and SH Packages

suse
Calendar Grey April 21, 2022
Dist Suse Esm H88
SUSE Container Notification suse/sles12sp3 delivers enhancements encompassing critical security patches for tar and zlib.
The container suse/sles12sp3 was updated

Summary

Advisory ID: SUSE-SU-2022:1275-1 Released: Wed Apr 20 09:16:21 2022 Summary: Security update for gzip Type: security Severity: important Advisory ID: SUSE-RU-2022:1282-1 Released: Wed Apr 20 12:28:40 2022 Summary: Recommended update for bash Type: recommended Severity: moderate

Topics%20covered

Topics Covered

security advisory security fix important suse gzip bash container update

References

References : 1197674 1198062 CVE-2022-1271

1198062,CVE-2022-1271

This update for gzip fixes the following issues:

- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)

1197674

This update for bash fixes the following issues:

- Fix memory leak in array asignment (bsc#1197674)

The following package changes have been done:

- gzip-1.6-9.6.2 updated

- libreadline6-6.3-83.33.1 updated

- bash-4.3-83.33.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:633-1
Container Tags : suse/sles12sp3:2.0.2 , suse/sles12sp3:24.378 , suse/sles12sp3:latest
Container Release : 24.378
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security fix important suse gzip bash container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here