SUSE: 2023:3155-1 Important Stack Overflow Fix for bci/bci-busybox
suse
September 28, 2023
The container bci/bci-busybox was updated
Summary
Advisory ID: SUSE-RU-2023:3814-1 Released: Wed Sep 27 18:08:17 2023 Summary: Recommended update for glibc Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:3820-1 Released: Wed Sep 27 18:37:54 2023 Summary: Security update for busybox Type: security Severity: important
Topics Covered
References
References : 1211829 1212819 1212910 1214538 CVE-2022-48174
1211829,1212819,1212910
This update for glibc fixes the following issues:
- nscd: Fix netlink cache invalidation if epoll is used (bsc#1212910, BZ #29415)
- Restore lookup of IPv4 mapped addresses in files database (bsc#1212819, BZ #25457)
- elf: Remove excessive p_align check on PT_LOAD segments (bsc#1211829, BZ #28688)
- elf: Properly align PT_LOAD segments (bsc#1211829, BZ #28676)
- ld.so: Always use MAP_COPY to map the first segment (BZ #30452)
- add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)
1214538,CVE-2022-48174
This update for busybox fixes the following issues:
- CVE-2022-48174: Fixed stack overflow vulnerability. (bsc#1214538)
The following package changes have been done:
- busybox-adduser-1.35.0-150500.7.2.3 updated
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Container Advisory ID : SUSE-CU-2023:3155-1
Container Tags : bci/bci-busybox:15.5 , bci/bci-busybox:15.5.11.6 , bci/bci-busybox:latest
Container Release : 11.6
Severity : important
Type : security
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!