Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE: 2023:2714-1 Important: suse/389-ds DoS Security Update

suse
Calendar Grey August 18, 2023
Dist Suse Esm H88
Critical SUSE Container Update Notification for suse/389-ds addressing significant security vulnerabilities. Further information regarding the updates included.
The container suse/389-ds was updated

Summary

Advisory ID: SUSE-SU-2023:3325-1 Released: Wed Aug 16 08:26:08 2023 Summary: Security update for krb5 Type: security Severity: important Advisory ID: SUSE-SU-2023:3327-1 Released: Wed Aug 16 08:45:25 2023 Summary: Security update for pcre2 Type: security Severity: moderate Advisory ID: SUSE-RU-2023:3330-1 Released: Wed Aug 16 08:59:33 2023 Summary: Recommended update for python-pyasn1 Type: recommended

Topics%20covered

Topics Covered

security advisory suse important update DoS fix suse/389-ds

References

References : 1207805 1213514 1214054 CVE-2022-41409 CVE-2023-36054

1214054,CVE-2023-36054

This update for krb5 fixes the following issues:

- CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054)

1213514,CVE-2022-41409

This update for pcre2 fixes the following issues:

- CVE-2022-41409: Fixed integer overflow vulnerability in pcre2test that allows attackers to cause a denial of service via negative input (bsc#1213514).

1207805

This update for python-pyasn1 fixes the following issues:

- To avoid users of this package having to recompile bytecode

files, change the mtime of any __init__.py. (bsc#1207805)

The following package changes have been done:

- krb5-1.20.1-150500.3.3.1 updated

- krb5-client-1.20.1-150500.3.3.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:2714-1
Container Tags : suse/389-ds:2.2 , suse/389-ds:2.2-14.41 , suse/389-ds:latest
Container Release : 14.41
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory suse important update DoS fix suse/389-ds

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here