Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2023:1623-1 Important: Curl Fixes And Libzypp Updates

suse
Calendar Grey May 25, 2023
Dist Suse Esm H88
SUSE Container Update for suse/sle15 provides important security patches for wget, libsolv, and improvements to system performance.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2023:2227-1 Released: Wed May 17 09:57:41 2023 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-RU-2023:2247-1 Released: Thu May 18 17:04:38 2023 Summary: Recommended update for libzypp, zypper Type: recommended Severity: moderate

Topics%20covered

Topics Covered

security advisory security issue important suse curl recommended update libzypp

References

References : 1127591 1195633 1208329 1209406 1210870 1211231 1211232 1211233

1211339 CVE-2023-28320 CVE-2023-28321 CVE-2023-28322

1211231,1211232,1211233,1211339,CVE-2023-28320,CVE-2023-28321,CVE-2023-28322

This update for curl fixes the following issues:

- CVE-2023-28320: Fixed siglongjmp race condition (bsc#1211231).

- CVE-2023-28321: Fixed IDN wildcard matching (bsc#1211232).

- CVE-2023-28322: Fixed POST-after-PUT confusion (bsc#1211233).

1127591,1195633,1208329,1209406,1210870

This update for libzypp, zypper fixes the following issues:

- Installing local RPM packages fails if /usr/bin/find is not installed (bsc#1195633)

- multicurl: propagate ssl settings stored in repo url (bsc#1127591)

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:1623-1
Container Tags : bci/bci-base:15.3 , bci/bci-base:15.3.17.20.140 , suse/sle15:15.3 , suse/sle15:15.3.17.20.140
Container Release : 17.20.140
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue important suse curl recommended update libzypp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here