Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE: Ignition Moderate DoS Risk Advisory 2025:03000-1 CVE-2022-28948

suse
Calendar Grey August 27, 2025
Dist Suse Esm H88
SUSE releases security patch for Ignition aimed at mitigating moderate DoS vulnerability linked to CVE-2022-28948. Immediate application advised.
* bsc#1248548 Cross-References: * CVE-2022-28948

Summary

## This update for ignition fixes the following issues: * CVE-2022-28948: Fixed an issue during unmarshaling in Go-Yaml v3 can lead to DoS via invalid input (bsc#1248548) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-3000=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-3000=1 ## Package List: * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * ignition-2.14.0-150300.6.16.1 * ignition-debuginfo-2.14.0-150300.6.16.1 * ignition-dracut-grub2-2.14.0-150300.6.16.1

Topics%20covered

Topics Covered

security advisory moderate update SuSE DoS ignition

References

* bsc#1248548

Cross-

* CVE-2022-28948

CVSS scores:

* CVE-2022-28948 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

* CVE-2022-28948 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* SUSE Linux Enterprise Micro 5.2

* SUSE Linux Enterprise Micro for Rancher 5.2

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2022-28948.html

* https://bugzilla.suse.com/show_bug.cgi?id=1248548

Announcement ID: SUSE-SU-2025:03000-1
Release Date: 2025-08-27T12:05:13Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update SuSE DoS ignition

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here