Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2022:840-1 Important: Virt-Controller Malicious Filename Fix

suse
Calendar Grey April 29, 2022
Dist Suse Esm H88
Crucial security patch released for SUSE container environments addressing security flaws in the virt-controller and xz modules.
The container suse/sles/15.4/virt-controller was updated

Summary

Advisory ID: SUSE-SU-2022:1158-1 Released: Tue Apr 12 14:44:43 2022 Summary: Security update for xz Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security update important suse virt-controller xz malicious filename

References

References : 1198062 CVE-2022-1271

1198062,CVE-2022-1271

This update for xz fixes the following issues:

- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)

The following package changes have been done:

- libzstd1-1.5.0-150400.1.58 updated

- libuuid1-2.37.2-150400.6.12 updated

- libsmartcols1-2.37.2-150400.6.12 updated

- libsepol1-3.1-150400.1.54 updated

- libeconf0-0.4.4+git20220104.962774f-150400.1.26 updated

- libcom_err2-1.46.4-150400.1.66 updated

- libbz2-1-1.0.8-150400.1.105 updated

- libblkid1-2.37.2-150400.6.12 updated

- libaudit1-3.0.6-150400.1.35 updated

- libgcrypt20-1.9.4-150400.4.1 updated

- libgcrypt20-hmac-1.9.4-150400.4.1 updated

- libfdisk1-2.37.2-150400.6.12 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:840-1
Container Tags : suse/sles/15.4/virt-controller:0.49.0 , suse/sles/15.4/virt-controller:0.49.0-150400.1.28 , suse/sles/15.4/virt-controller:0.49.0.12.7
Container Release : 12.7
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security update important suse virt-controller xz malicious filename

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here