SUSE-CU-2022:2025-1: Security update of suse/sle15

[sle-security-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sle15
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2022:2025-1
Container Tags        : suse/sle15:15.0 , suse/sle15:15.0.4.22.607
Container Release     : 4.22.607
Severity              : important
Type                  : security
References            : 1197178 1198731 1198752 1198925 1200800 1200842 1201680 CVE-2021-46828
-----------------------------------------------------------------

The container suse/sle15 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2022:2978-1
Released:    Thu Sep  1 12:31:01 2022
Summary:     Recommended update for util-linux
Type:        recommended
Severity:    moderate
References:  1197178,1198731,1200842
This update for util-linux fixes the following issues:

- su: Change owner and mode for pty (bsc#1200842)
- agetty: Resolve tty name even if stdin is specified (bsc#1197178)
- libmount: When moving a mount point, update all sub mount entries in utab (bsc#1198731)
- mesg: use only stat() to get the current terminal status (bsc#1200842)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2022:2991-1
Released:    Thu Sep  1 16:04:30 2022
Summary:     Security update for libtirpc
Type:        security
Severity:    important
References:  1198752,1200800,1201680,CVE-2021-46828
This update for libtirpc fixes the following issues:

- CVE-2021-46828: Fixed an uncontrolled file descriptor consumption,
  which could be exploited by remote attackers to prevent applications
  using the library from accepting new connections (bsc#1201680).

Non-security fixes:

- Exclude ipv6 addresses in client protocol version 2 code (bsc#1200800)
- Fix memory leak in params.r_addr assignement (bsc#1198752)

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2022:2994-1
Released:    Fri Sep  2 10:44:54 2022
Summary:     Recommended update for lame, libass, libcdio-paranoia, libdc1394, libgsm, libva, libvdpau, libvorbis, libvpx, libwebp, openjpeg, opus, speex, twolame
Type:        recommended
Severity:    moderate
References:  1198925

This update for lame, libass, libcdio-paranoia, libdc1394, libgsm, libva, libvdpau, libvorbis, libvpx, libwebp, openjpeg, opus, speex, twolame adds some missing 32bit libraries to some products. (bsc#1198925)

No codechanges were done in this update.


The following package changes have been done:

- libblkid1-2.31.1-150000.9.21.1 updated
- libfdisk1-2.31.1-150000.9.21.1 updated
- libmount1-2.31.1-150000.9.21.1 updated
- libsmartcols1-2.31.1-150000.9.21.1 updated
- libtirpc-netconfig-1.0.2-150000.3.18.1 updated
- libtirpc3-1.0.2-150000.3.18.1 updated
- libusb-1_0-0-1.0.21-150000.3.5.1 updated
- libuuid1-2.31.1-150000.9.21.1 updated
- util-linux-2.31.1-150000.9.21.1 updated