Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE SLE15: 2023:1373-1 Moderate: Shadow And Zstd Security Fixes

suse
Calendar Grey April 30, 2023
Dist Suse Esm H88
Routine security patches for the SUSE container suse/sle15 address vulnerabilities associated with shadow and zstd.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2023:2068-1 Released: Fri Apr 28 13:55:00 2023 Summary: Security update for shadow Type: security Severity: moderate Advisory ID: SUSE-SU-2023:2074-1 Released: Fri Apr 28 17:02:25 2023 Summary: Security update for zstd Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate severity security patch suse container shadow fix zstd update

References

References : 1209533 1210507 CVE-2022-4899 CVE-2023-29383

1210507,CVE-2023-29383

This update for shadow fixes the following issues:

- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).

1209533,CVE-2022-4899

This update for zstd fixes the following issues:

- CVE-2022-4899: Fixed buffer overrun in util.c (bsc#1209533).

The following package changes have been done:

- libzstd1-1.4.4-150000.1.9.1 updated

- shadow-4.6-150100.3.8.1 updated

Container Advisory ID : SUSE-CU-2023:1373-1
Container Tags : suse/sle15:15.1 , suse/sle15:15.1.6.2.761
Container Release : 6.2.761
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate severity security patch suse container shadow fix zstd update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here