Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE: 2023:2404-1 Important: Dbus and Perl Security Update

suse
Calendar Grey July 22, 2023
Dist Suse Esm H88
Crucial security enhancements for the SUSE toolbox container focusing on severe vulnerabilities identified in the dbus and perl modules.
The container suse/sle-micro/5.1/toolbox was updated

Summary

Advisory ID: SUSE-SU-2023:2879-1 Released: Wed Jul 19 09:45:34 2023 Summary: Security update for dbus-1 Type: security Severity: moderate Advisory ID: SUSE-SU-2023:2882-1 Released: Wed Jul 19 11:49:39 2023 Summary: Security update for perl Type: security Severity: important Advisory ID: SUSE-RU-2023:2885-1 Released: Wed Jul 19 16:58:43 2023 Summary: Recommended update for glibc

Topics%20covered

Topics Covered

security advisory security issue important perl suse dbus container update

References

References : 1208721 1209229 1210999 1211828 1212126 CVE-2023-31484 CVE-2023-34969

1212126,CVE-2023-34969

This update for dbus-1 fixes the following issues:

- CVE-2023-34969: Fixed a possible dbus-daemon crash by an unprivileged users (bsc#1212126).

1210999,CVE-2023-31484

This update for perl fixes the following issues:

- CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).

1208721,1209229,1211828

This update for glibc fixes the following issues:

- getlogin_r: fix missing fallback if loginuid is unset (bsc#1209229, BZ #30235)

- Exclude static archives from preparation for live patching (bsc#1208721)

- resolv_conf: release lock on allocation failure (bsc#1211828, BZ #30527)

The following package changes have been done:

- dbus-1-1.12.2-150100.8.17.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:2404-1
Container Tags : suse/sle-micro/5.1/toolbox:12.1 , suse/sle-micro/5.1/toolbox:12.1-2.2.423 , suse/sle-micro/5.1/toolbox:latest
Container Release : 2.2.423
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue important perl suse dbus container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here