Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

SUSE: 2023:3106-2 Critical Toolbox Memory Leak Resolutions

suse
Calendar Grey September 24, 2023
Scroller Suse
SUSE Security Bulletin for container enhancement measures in toolbox dealing with significant concerns and weaknesses.
The container suse/sle-micro/5.2/toolbox was updated

Summary

Advisory ID: SUSE-SU-2023:3639-1 Released: Mon Sep 18 13:33:16 2023 Summary: Security update for libeconf Type: security Severity: moderate Advisory ID: SUSE-SU-2023:3661-1 Released: Mon Sep 18 21:44:09 2023 Summary: Security update for gcc12 Type: security Severity: important Advisory ID: SUSE-SU-2023:3698-1 Released: Wed Sep 20 11:01:15 2023 Summary: Security update for libxml2

Topics%20covered

Topics Covered

security advisory SUSE stack overflow importance toolbox suse/sle-micro/5.2

References

References : 1198165 1211078 1214052 1214768 CVE-2023-22652 CVE-2023-30078

CVE-2023-30079 CVE-2023-32181 CVE-2023-39615 CVE-2023-4039

1198165,1211078,CVE-2023-22652,CVE-2023-30078,CVE-2023-30079,CVE-2023-32181

This update for libeconf fixes the following issues:

Update to version 0.5.2.

- CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).

- CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)

The following non-security bug was fixed:

- Fixed parsing files correctly which have space characters AND none space characters as delimiters (bsc#1198165).

1214052,CVE-2023-4039

This update for gcc12 fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3106-1
Container Tags : suse/sle-micro/5.2/toolbox:12.1 , suse/sle-micro/5.2/toolbox:12.1-6.2.282 , suse/sle-micro/5.2/toolbox:latest
Container Release : 6.2.282
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory SUSE stack overflow importance toolbox suse/sle-micro/5.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.