Stay Secure with the Latest Linux Advisories

security advisorysusezlib update

SUSE: 2022:2974-1 Important Security Update for SLES12SP5 Containers

The container suse/sles12sp5 was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sles12sp5 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2022:2974-1 Container Tags : suse/sles12sp5:6.5.400 , suse/sles12sp5:latest Container Release : 6.5.400 Severity : important Type : security References : 1183543 1183545 1183632 1183659 1185299 1193625 1196852 1203652 996280 CVE-2015-8985 CVE-2021-20266 CVE-2021-20271 CVE-2021-3421 ----------------------------------------------------------------- The container suse/sles12sp5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3939-1 Released: Thu Nov 10 14:32:05 2022 Summary: Security update for rpm Type: security Severity: moderate References: 1183543,1183545,1183632,1183659,1185299,996280,CVE-2021-20266,CVE-2021-20271,CVE-2021-3421 This update for rpm fixes the following issues: - Fixed PGP parsing bugs (bsc#1185299). - Fixed various format handling bugs (bsc#996280). - CVE-2021-3421: Fixed vulnerability where unsigned headers could be injected into the rpm database (bsc#1183543). - CVE-2021-20271: Fixed vulnerability where a corrupted rpm could corrupt the rpm database (bsc#1183545). - CVE-2021-20266: Fixed missing bounds check in hdrblobInit (bsc#1183632). Bugfixes: - Fixed deadlock when multiple rpm processes tried to acquire the database lock (bsc#1183659). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3942-1 Released: Thu Nov 10 15:58:47 2022 Summary: Security update for glibc Type: security Severity: moderate References: 1193625,1196852,CVE-2015-8985 This update for glibc fixes the following issues: - CVE-2015-8985: Fixed assertion failure in pop_fail_stack when executing a malformedregexp (bsc#1193625) - x86: fix stack alignment in pthread_cond_[timed]wait (bsc#1196852) - Recognize ppc64p7 arch to build for power7 ----------------------------------------------------------------- Advisory ID: SUSE-RU-2022:3962-1 Released: Mon Nov 14 07:34:23 2022 Summary: Recommended update for zlib Type: recommended Severity: important References: 1203652 This update for zlib fixes the following issues: - Fix updating strm.adler with inflate() if DFLTCC is used (bsc#1203652) The following package changes have been done: - glibc-2.22-114.22.1 updated - libz1-1.2.11-11.25.1 updated - rpm-4.11.2-16.26.1 updated . Critical security enhancement for SUSE Container suse/sles12sp4, rectifying various vulnerabilities with essential patches.. SUSE Container, Security Update, RPM Issues, GLIBC Fix, Zlib Update. . Severity: Important. LinuxSecurity.com Team

Nov 15, 2022 •Important SuSE