Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2023:2965-1 Critical: Container-Security Patch Details

suse
Calendar Grey September 14, 2023
Dist Suse Esm H88
SUSE Software Security Announcement: updates for rancher/elemental-manager address several critical vulnerabilities.
The container rancher/elemental-operator was updated

Summary

Advisory ID: SUSE-SU-2023:2765-1 Released: Mon Jul 3 20:28:14 2023 Summary: Security update for libcap Type: security Severity: moderate Advisory ID: SUSE-RU-2023:2847-1 Released: Mon Jul 17 08:40:42 2023 Summary: Recommended update for audit Type: recommended Severity: moderate Advisory ID: SUSE-RU-2023:3410-1 Released: Thu Aug 24 06:56:32 2023 Summary: Recommended update for audit

Topics%20covered

Topics Covered

security advisory audit patch update SUSE monitoring libcap container security

References

References : 1201519 1204844 1210004 1211418 1211419 CVE-2023-2602 CVE-2023-2603

1211418,1211419,CVE-2023-2602,CVE-2023-2603

This update for libcap fixes the following issues:

- CVE-2023-2602: Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create() (bsc#1211418).

- CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).

1210004

This update for audit fixes the following issues:

- Check for AF_UNIX unnamed sockets (bsc#1210004)

- Enable livepatching on main library on x86_64

1201519,1204844

This update for audit fixes the following issues:

- Create symbolic link from /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519)

- Fix rules not loaded when restarting auditd.service (bsc#1204844)

Container Advisory ID : SUSE-CU-2023:2964-1
Container Tags : rancher/elemental-operator:1.3.4 , rancher/elemental-operator:1.3.4-2.5 , rancher/elemental-operator:latest
Container Release : 2.5
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory audit patch update SUSE monitoring libcap container security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here