Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE 2023:3048-1 Critical: Nginx, Libwebp, GCC12 Updates

suse
Calendar Grey September 20, 2023
Dist Suse Esm H88
Essential patches and vulnerability mitigations for suse/nginx, libwebp, gcc12, and libxml2 issued in this notice.
The container suse/nginx was updated

Summary

Advisory ID: SUSE-SU-2023:3634-1 Released: Mon Sep 18 12:52:38 2023 Summary: Security update for libwebp Type: security Severity: critical Advisory ID: SUSE-SU-2023:3661-1 Released: Mon Sep 18 21:44:09 2023 Summary: Security update for gcc12 Type: security Severity: important Advisory ID: SUSE-SU-2023:3666-1 Released: Mon Sep 18 21:52:18 2023 Summary: Security update for libxml2 Type: security

Topics%20covered

Topics Covered

security advisory critical patch suse nginx libxml2 gcc libwebp

References

References : 1214052 1214768 1215231 CVE-2023-39615 CVE-2023-4039 CVE-2023-4863

1215231,CVE-2023-4863

This update for libwebp fixes the following issues:

- CVE-2023-4863: Fixed heap buffer overflow (bsc#1215231).

1214052,CVE-2023-4039

This update for gcc12 fixes the following issues:

- CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).

1214768,CVE-2023-39615

This update for libxml2 fixes the following issues:

- CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).

The following package changes have been done:

- libgcc_s1-12.3.0+git1204-150000.1.16.1 updated

- libstdc++6-12.3.0+git1204-150000.1.16.1 updated

- libxml2-2-2.10.3-150500.5.8.1 updated

- libwebp7-1.0.3-150200.3.10.1 updated

Severity
critical
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3048-1
Container Tags : suse/nginx:1.21 , suse/nginx:1.21-3.29 , suse/nginx:latest
Container Release : 3.29
Severity : critical
Type : security

Topics%20covered

Topics Covered

security advisory critical patch suse nginx libxml2 gcc libwebp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here