Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2023:3178-1 Critical: suse/389-ds Security Patch Overview

suse
Calendar Grey September 29, 2023
Dist Suse Esm H88
Crucial security patches for SUSE container suse/389-ds addressing various vulnerabilities and improving overall robustness.
The container suse/389-ds was updated

Summary

Advisory ID: SUSE-RU-2023:3814-1 Released: Wed Sep 27 18:08:17 2023 Summary: Recommended update for glibc Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:3823-1 Released: Wed Sep 27 18:42:38 2023 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-SU-2023:3828-1 Released: Wed Sep 27 19:07:38 2023 Summary: Security update for python3 Type: security

Topics%20covered

Topics Covered

security advisory security patch suse important issue container update python3 update curl fix

References

References : 1211829 1212819 1212910 1214692 1215026 CVE-2023-38039 CVE-2023-40217

1211829,1212819,1212910

This update for glibc fixes the following issues:

- nscd: Fix netlink cache invalidation if epoll is used (bsc#1212910, BZ #29415)

- Restore lookup of IPv4 mapped addresses in files database (bsc#1212819, BZ #25457)

- elf: Remove excessive p_align check on PT_LOAD segments (bsc#1211829, BZ #28688)

- elf: Properly align PT_LOAD segments (bsc#1211829, BZ #28676)

- ld.so: Always use MAP_COPY to map the first segment (BZ #30452)

- add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)

1215026,CVE-2023-38039

This update for curl fixes the following issues:

- CVE-2023-38039: Fixed possible DoS when receiving too large HTTP header. (bsc#1215026)

1214692,CVE-2023-40217

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3178-1
Container Tags : suse/389-ds:2.2 , suse/389-ds:2.2-15.4 , suse/389-ds:latest
Container Release : 15.4
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security patch suse important issue container update python3 update curl fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here