Alerts This Week
Warning Icon 1 775
Alerts This Week
Warning Icon 1 775

SUSE: 2023:598-1 Critical: bci/bci-init Security Update

suse
Calendar Grey March 9, 2023
Dist Suse Esm H88
Crucial announcement regarding the SUSE bci/bci-init container targeting multiple security vulnerabilities, including comprehensive steps for proper execution.
The container bci/bci-init was updated

Summary

Advisory ID: SUSE-SU-2019:926-1 Released: Wed Apr 10 16:33:12 2019 Summary: Security update for tar Type: security Severity: moderate Advisory ID: SUSE-SU-2021:974-1 Released: Mon Mar 29 19:31:27 2021 Summary: Security update for tar Type: security Severity: low Advisory ID: SUSE-RU-2021:2193-1 Released: Mon Jun 28 18:38:43 2021 Summary: Recommended update for tar Type: recommended Severity: moderate

Topics%20covered

Topics Covered

security advisory important SUSE container bci/bci-init

References

References : 1029961 1120610 1120610 1130496 1130496 1181131 1181131 1184124

1200657 1200657 1202436 1202436 1202436 1203600 1207753 CVE-2018-20482

CVE-2018-20482 CVE-2019-9923 CVE-2019-9923 CVE-2021-20193 CVE-2021-20193

CVE-2022-48303

1120610,1130496,CVE-2018-20482,CVE-2019-9923

This update for tar fixes the following issues:

Security issues fixed:

- CVE-2019-9923: Fixed a denial of service while parsing certain archives with malformed extended headers in pax_decode_header() (bsc#1130496).

- CVE-2018-20482: Fixed a denial of service when the '--sparse' option mishandles file shrinkage during read access (bsc#1120610).

1181131,CVE-2021-20193

This update for tar fixes the following issues:

CVE-2021-20193: Memory leak in read_header() in list.c (bsc#1181131)

1184124

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:597-1
Container Tags : bci/bci-init:15.5 , bci/bci-init:15.5.3.40
Container Release : 3.40
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important SUSE container bci/bci-init

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here