Stay Secure with the Latest Linux Advisories

security advisorymemory corruptionsecurity fix

SUSE: 2021:167-1 Important: lz4 Memory Corruption Issue Fix

The container suse/sle15 was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2021:167-1 Container Tags : suse/sle15:15.0 , suse/sle15:15.0.4.22.395 Container Release : 4.22.395 Severity : important Type : security References : 1181443 1184358 1185438 1185562 CVE-2021-3520 ----------------------------------------------------------------- The container suse/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2021:1643-1 Released: Wed May 19 13:51:48 2021 Summary: Recommended update for pam Type: recommended Severity: important References: 1181443,1184358,1185562 This update for pam fixes the following issues: - Fixed a bug, where the 'unlimited'/'-1' value was not interpreted correctly (bsc#1181443) - Fixed a bug, where pam_access interpreted the keyword 'LOCAL' incorrectly, leading to an attempt to resolve it as a hostname (bsc#1184358) - In the 32-bit compatibility package for 64-bit architectures, require 'systemd-32bit' to be also installed as it contains pam_systemd.so for 32 bit applications. (bsc#1185562) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2021:1647-1 Released: Wed May 19 13:59:12 2021 Summary: Security update for lz4 Type: security Severity: important References: 1185438,CVE-2021-3520 This update for lz4 fixes the following issues: - CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument (bsc#1185438). . Critical memory vulnerabilities in the SUSE container suse/sle15 have been addressed in a recent security update, enhancing overall system integrity and operational efficiency.. SUSE Container Advisory, Memory Corruption Fix, Important SecurityUpdate. . Severity: Important. LinuxSecurity.com Team

May 20, 2021 •Important SuSE