Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2023:3198-1 Critical: bci/bci-init DoS Security Update

suse
Calendar Grey September 29, 2023
Dist Suse Esm H88
SUSE Package Update Notification highlights crucial security enhancements for multiple software components such as wget and libc.
The container bci/bci-init was updated

Summary

Advisory ID: SUSE-RU-2023:3814-1 Released: Wed Sep 27 18:08:17 2023 Summary: Recommended update for glibc Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:3823-1 Released: Wed Sep 27 18:42:38 2023 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-RU-2023:3856-1 Released: Thu Sep 28 09:42:16 2023 Summary: Recommended update for apparmor Type: recommended

Topics%20covered

Topics Covered

security advisory DoS SUSE curl bci/bci-init

References

References : 1211829 1212819 1212910 1214458 1215026 CVE-2023-38039

1211829,1212819,1212910

This update for glibc fixes the following issues:

- nscd: Fix netlink cache invalidation if epoll is used (bsc#1212910, BZ #29415)

- Restore lookup of IPv4 mapped addresses in files database (bsc#1212819, BZ #25457)

- elf: Remove excessive p_align check on PT_LOAD segments (bsc#1211829, BZ #28688)

- elf: Properly align PT_LOAD segments (bsc#1211829, BZ #28676)

- ld.so: Always use MAP_COPY to map the first segment (BZ #30452)

- add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)

1215026,CVE-2023-38039

This update for curl fixes the following issues:

- CVE-2023-38039: Fixed possible DoS when receiving too large HTTP header. (bsc#1215026)

1214458

This update for apparmor fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3198-1
Container Tags : bci/bci-init:15.4 , bci/bci-init:15.4.29.61
Container Release : 29.61
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory DoS SUSE curl bci/bci-init

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here