Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 511
Alerts This Week
Warning Icon 1 511

SUSE: 2023:1857-2 Critical: wget Vulnerabilities And Service Disruptions

suse
Calendar Grey May 18, 2022
Scroller Suse
The latest curl update tackles significant security vulnerabilities with high severity ratings, focusing on enhancements related to TLS protocols and connection stability.
An update that fixes two vulnerabilities is now available

Summary

This update for curl fixes the following issues: - CVE-2022-27781: Fixed CERTINFO never-ending busy-loop (bsc#1199223) - CVE-2022-27782: Fixed TLS and SSH connection too eager reuse (bsc#1199224) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2022-1733=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2022-1733=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2022-1733=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2022-1733=1

Topics%20covered

Topics Covered

security advisory software patch DoS SUSE curl connection issue Linux Enterprise Server

References

#1199223 #1199224

Cross- CVE-2022-27781 CVE-2022-27782

CVSS scores:

CVE-2022-27781 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CVE-2022-27782 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products:

HPE Helion Openstack 8

SUSE Linux Enterprise Server 12-SP2-BCL

SUSE Linux Enterprise Server 12-SP3-BCL

SUSE Linux Enterprise Server 12-SP3-LTSS

SUSE Linux Enterprise Server for SAP 12-SP3

SUSE OpenStack Cloud 8

SUSE OpenStack Cloud Crowbar 8

https://www.suse.com/security/cve/CVE-2022-27781.html

https://www.suse.com/security/cve/CVE-2022-27782.html

https://bugzilla.suse.com/1199223

https://bugzilla.suse.com/1199224

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:1733-1
Rating: important

Topics%20covered

Topics Covered

security advisory software patch DoS SUSE curl connection issue Linux Enterprise Server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.