SUSE-CU-2019:736-1: Security update of caasp/v4/skuba-tooling
sle-updates at lists.suse.com
sle-updates at lists.suse.com
Thu Jan 16 10:01:58 MST 2020
SUSE Container Update Advisory: caasp/v4/skuba-tooling
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2019:736-1
Container Tags : caasp/v4/skuba-tooling:0.1.0 , caasp/v4/skuba-tooling:0.1.0-rev3 , caasp/v4/skuba-tooling:0.1.0-rev3-build1.1 , caasp/v4/skuba-tooling:beta
Severity : important
Type : security
References : 1117993 1123710 1124847 1127223 1127308 1131330 1135123 1138939
1139083 1141093 CVE-2009-5155 CVE-2019-12900 CVE-2019-12904 CVE-2019-13050
CVE-2019-9169
-----------------------------------------------------------------
The container caasp/v4/skuba-tooling was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2019:1877-1
Released: Thu Jul 18 11:31:46 2019
Summary: Security update for glibc
Type: security
Severity: moderate
References: 1117993,1123710,1127223,1127308,1131330,CVE-2009-5155,CVE-2019-9169
Description:
This update for glibc fixes the following issues:
Security issues fixed:
- CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match (bsc#1127308).
- CVE-2009-5155: Fixed a denial of service in parse_reg_exp() (bsc#1127223).
Non-security issues fixed:
- Does no longer compress debug sections in crt*.o files (bsc#1123710)
- Fixes a concurrency problem in ldconfig (bsc#1117993)
- Fixes a race condition in pthread_mutex_lock while promoting to PTHREAD_MUTEX_ELISION_NP (bsc#1131330)
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2019:1971-1
Released: Thu Jul 25 14:58:52 2019
Summary: Security update for libgcrypt
Type: security
Severity: moderate
References: 1138939,CVE-2019-12904
Description:
This update for libgcrypt fixes the following issues:
Security issue fixed:
- CVE-2019-12904: Fixed a flush-and-reload side-channel attack in the AES implementation (bsc#1138939).
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2019:1994-1
Released: Fri Jul 26 16:12:05 2019
Summary: Recommended update for libxml2
Type: recommended
Severity: moderate
References: 1135123
Description:
This update for libxml2 fixes the following issues:
- Added a new configurable variable XPATH_DEFAULT_MAX_NODESET_LENGTH to avoid nodeset limit when processing large XML files. (bsc#1135123)
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2019:2004-1
Released: Mon Jul 29 13:01:59 2019
Summary: Security update for bzip2
Type: security
Severity: important
References: 1139083,CVE-2019-12900
Description:
This update for bzip2 fixes the following issues:
- Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities
with files that used many selectors (bsc#1139083).
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2019:2006-1
Released: Mon Jul 29 13:02:49 2019
Summary: Security update for gpg2
Type: security
Severity: important
References: 1124847,1141093,CVE-2019-13050
Description:
This update for gpg2 fixes the following issues:
Security issue fixed:
- CVE-2019-13050: Fixed a denial of service attacks via big keys (bsc#1141093).
Non-security issue fixed:
- Allow coredumps in X11 desktop sessions (bsc#1124847)
More information about the sle-updates
mailing list