Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:2393-1 Important: Security Update For Perl And Curl

suse
Calendar Grey July 22, 2023
Dist Suse Esm H88
SUSE Container Security Bulletin for suse/389-ds, outlining critical security updates and necessary patches implemented.
The container suse/389-ds was updated

Summary

Advisory ID: SUSE-RU-2023:2874-1 Released: Wed Jul 19 06:20:27 2023 Summary: Recommended update for 389-ds Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:2882-1 Released: Wed Jul 19 11:49:39 2023 Summary: Security update for perl Type: security Severity: important Advisory ID: SUSE-RU-2023:2885-1 Released: Wed Jul 19 16:58:43 2023 Summary: Recommended update for glibc Type: recommended

Topics%20covered

Topics Covered

security advisory important security patch perl suse curl container update

References

References : 1208721 1209229 1210999 1211812 1211828 1213237 CVE-2023-31484

CVE-2023-32001

1211812

This update for 389-ds fixes the following issues:

- Update to version 2.2.8~git17.48834f1 (bsc#1211812)

1210999,CVE-2023-31484

This update for perl fixes the following issues:

- CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).

1208721,1209229,1211828

This update for glibc fixes the following issues:

- getlogin_r: fix missing fallback if loginuid is unset (bsc#1209229, BZ #30235)

- Exclude static archives from preparation for live patching (bsc#1208721)

- resolv_conf: release lock on allocation failure (bsc#1211828, BZ #30527)

1213237,CVE-2023-32001

This update for curl fixes the following issues:

- CVE-2023-32001: Fixed TOCTOU race condition (bsc#1213237).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:2393-1
Container Tags : suse/389-ds:2.2 , suse/389-ds:2.2-14.21 , suse/389-ds:latest
Container Release : 14.21
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important security patch perl suse curl container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here