Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE SLES12SP5: 2023:1620-1 Important Security Update for curl

suse
Calendar Grey May 25, 2023
Dist Suse Esm H88
SUSE Container Update Advisory provides essential security enhancements for suse/sles12sp5, encompassing significant curl fixes and additional updates.
The container suse/sles12sp5 was updated

Summary

Advisory ID: SUSE-SU-2023:2225-1 Released: Wed May 17 09:54:33 2023 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-RU-2023:2249-1 Released: Thu May 18 17:07:31 2023 Summary: Recommended update for libzypp, zypper Type: recommended Severity: moderate Advisory ID: SUSE-RU-2023:2260-1 Released: Mon May 22 10:29:33 2023 Summary: Recommended update for zlib

Topics%20covered

Topics Covered

security advisory important suse zlib curl libzypp

References

References : 1198608 1203248 1203249 1208329 1210593 1211230 1211231 1211232

1211233 428822 CVE-2022-27774 CVE-2023-28319 CVE-2023-28320 CVE-2023-28321

CVE-2023-28322

1198608,1211230,1211231,1211232,1211233,CVE-2022-27774,CVE-2023-28319,CVE-2023-28320,CVE-2023-28321,CVE-2023-28322

This update for curl adds the following feature:

Update to version 8.0.1 (jsc#PED-2580)

- CVE-2023-28319: use-after-free in SSH sha256 fingerprint check (bsc#1211230).

- CVE-2023-28320: siglongjmp race condition (bsc#1211231).

- CVE-2023-28321: IDN wildcard matching (bsc#1211232).

- CVE-2023-28322: POST-after-PUT confusion (bsc#1211233).

1203248,1203249,1208329,428822

This update for libzypp, zypper fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:1620-1
Container Tags : suse/sles12sp5:6.5.472 , suse/sles12sp5:latest
Container Release : 6.5.472
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important suse zlib curl libzypp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here