SUSE-CU-2022:599-1: Security update of suse/sles12sp5

[sle-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sles12sp5
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2022:599-1
Container Tags        : suse/sles12sp5:6.5.315 , suse/sles12sp5:latest
Container Release     : 6.5.315
Severity              : important
Type                  : security
References            : 1180225 1190984 1191502 1193841 1195529 1195899 1198062 CVE-2022-1271
-----------------------------------------------------------------

The container suse/sles12sp5 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2022:1160-1
Released:    Tue Apr 12 14:49:18 2022
Summary:     Security update for xz
Type:        security
Severity:    important
References:  1198062,CVE-2022-1271
This update for xz fixes the following issues:

- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2022:1169-1
Released:    Tue Apr 12 18:19:42 2022
Summary:     Recommended update for systemd
Type:        recommended
Severity:    moderate
References:  1180225,1190984,1191502,1193841,1195529,1195899
This update for systemd fixes the following issues:

- Core: make sure we always free the list of changes
- Install: correctly report symlink creations
- Core: make sure we generate a nicer error when a linked unit is attempted to be enabled
- Install: unify checking whether operations may be applied to a unit file in a new function
- Install: fix errno handling
- Allow 'edit' and 'cat' on unloaded units
- Don't open /var journals in volatile mode when runtime_journal==NULL
- udev: handle duplicate device ID (bsc#1195529)
- man: tweak description of auto/noauto (bsc#1191502)
- systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23869 jsc#SLE-23871)
- systemctl: exit with 1 if no unit files found (bsc#1193841)
- umount: show correct error message
- core/umount: fix unitialized fields in MountPoint
- umount: Add more asserts and remove some unused arguments, fix memory leak
- mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
- busctl: add a timestamp to the output of the busctl monitor command (bsc#1180225 jsc#SLE-21861)


The following package changes have been done:

- liblzma5-5.0.5-6.7.1 updated
- libsystemd0-228-157.38.4 updated
- libudev1-228-157.38.4 updated