SUSE Container Update Advisory: suse/sles12sp5 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2022:599-1 Container Tags : suse/sles12sp5:6.5.315 , suse/sles12sp5:latest Container Release : 6.5.315 Severity : important Type : security References : 1180225 1190984 1191502 1193841 1195529 1195899 1198062 CVE-2022-1271 ----------------------------------------------------------------- The container suse/sles12sp5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:1160-1 Released: Tue Apr 12 14:49:18 2022 Summary: Security update for xz Type: security Severity: important References: 1198062,CVE-2022-1271 This update for xz fixes the following issues: - CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2022:1169-1 Released: Tue Apr 12 18:19:42 2022 Summary: Recommended update for systemd Type: recommended Severity: moderate References: 1180225,1190984,1191502,1193841,1195529,1195899 This update for systemd fixes the following issues: - Core: make sure we always free the list of changes - Install: correctly report symlink creations - Core: make sure we generate a nicer error when a linked unit is attempted to be enabled - Install: unify checking whether operations may be applied to a unit file in a new function - Install: fix errno handling - Allow 'edit' and 'cat' on unloaded units - Don't open /var journals in volatile mode when runtime_journal==NULL - udev: handle duplicate device ID (bsc#1195529) - man: tweak description of auto/noauto (bsc#1191502) - systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23869 jsc#SLE-23871) - systemctl: exit with 1 if no unit files found (bsc#1193841) - umount: show correct error message - core/umount: fix unitialized fields in MountPoint - umount: Add more asserts and remove some unused arguments, fix memory leak - mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984) - busctl: add a timestamp to the output of the busctl monitor command (bsc#1180225 jsc#SLE-21861) The following package changes have been done: - liblzma5-5.0.5-6.7.1 updated - libsystemd0-228-157.38.4 updated - libudev1-228-157.38.4 updated