Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:1622-1 Important Update for Curl Security Issues in SLE15

suse
Calendar Grey May 25, 2023
Dist Suse Esm H88
SUSE patches for suse/sle15 address vital vulnerabilities in wget and provide improvements to overall system efficiency.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2023:2227-1 Released: Wed May 17 09:57:41 2023 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-RU-2023:2247-1 Released: Thu May 18 17:04:38 2023 Summary: Recommended update for libzypp, zypper Type: recommended Severity: moderate

Topics%20covered

Topics Covered

security advisory security update important system performance SUSE curl container update

References

References : 1127591 1195633 1208329 1209406 1210870 1211231 1211232 1211233

1211339 CVE-2023-28320 CVE-2023-28321 CVE-2023-28322

1211231,1211232,1211233,1211339,CVE-2023-28320,CVE-2023-28321,CVE-2023-28322

This update for curl fixes the following issues:

- CVE-2023-28320: Fixed siglongjmp race condition (bsc#1211231).

- CVE-2023-28321: Fixed IDN wildcard matching (bsc#1211232).

- CVE-2023-28322: Fixed POST-after-PUT confusion (bsc#1211233).

1127591,1195633,1208329,1209406,1210870

This update for libzypp, zypper fixes the following issues:

- Installing local RPM packages fails if /usr/bin/find is not installed (bsc#1195633)

- multicurl: propagate ssl settings stored in repo url (bsc#1127591)

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:1622-1
Container Tags : suse/sle15:15.2 , suse/sle15:15.2.9.5.299
Container Release : 9.5.299
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security update important system performance SUSE curl container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here