Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE: 2023:426-1 Moderate: Toolbox Security Update for SLE Micro

suse
Calendar Grey February 22, 2023
Dist Suse Esm H88
The image ubuntu/20.04/server has been upgraded with vital security updates that resolve significant vulnerabilities.
The container suse/sle-micro/5.3/toolbox was updated

Summary

Advisory ID: SUSE-SU-2023:463-1 Released: Mon Feb 20 16:33:39 2023 Summary: Security update for tar Type: security Severity: moderate Advisory ID: SUSE-RU-2023:464-1 Released: Mon Feb 20 18:11:37 2023 Summary: Recommended update for systemd Type: recommended Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate update suse tar toolbox container

References

References : 1202436 1207753 CVE-2022-48303

1202436,1207753,CVE-2022-48303

This update for tar fixes the following issues:

- CVE-2022-48303: Fixed a one-byte out-of-bounds read that resulted in use of uninitialized memory for a conditional jump (bsc#1207753).

Bug fixes:

- Fix hang when unpacking test tarball (bsc#1202436).

This update for systemd fixes the following issues:

- Merge of v249.15

- Drop workaround related to systemd-timesyncd that addressed a Factory issue.

- Conditionalize the use of /lib/modprobe.d only on systems with split usr

support enabled (i.e. SLE).

- Make use of the %systemd_* rpm macros consistently. Using the upstream

variants will ease the backports of Factory changes to SLE since Factory

systemd uses the upstream variants exclusively.

Container Advisory ID : SUSE-CU-2023:426-1
Container Tags : suse/sle-micro/5.3/toolbox:12.1 , suse/sle-micro/5.3/toolbox:12.1-5.2.82 , suse/sle-micro/5.3/toolbox:latest
Container Release : 5.2.82
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate update suse tar toolbox container

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here