Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2023:3201-1 Critical Update for curl Denial of Service Vulnerability

suse
Calendar Grey September 29, 2023
Dist Suse Esm H88
SUSE Package Revision Notice: suse/pcp incorporates critical updates for wget and libstdc++ mitigating significant vulnerabilities.
The container suse/pcp was updated

Summary

Advisory ID: SUSE-RU-2023:3814-1 Released: Wed Sep 27 18:08:17 2023 Summary: Recommended update for glibc Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:3823-1 Released: Wed Sep 27 18:42:38 2023 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-RU-2023:3856-1 Released: Thu Sep 28 09:42:16 2023 Summary: Recommended update for apparmor Type: recommended

Topics%20covered

Topics Covered

security advisory DoS important glibc suse curl container update

References

References : 1211829 1212819 1212910 1214458 1215026 CVE-2023-38039

1211829,1212819,1212910

This update for glibc fixes the following issues:

- nscd: Fix netlink cache invalidation if epoll is used (bsc#1212910, BZ #29415)

- Restore lookup of IPv4 mapped addresses in files database (bsc#1212819, BZ #25457)

- elf: Remove excessive p_align check on PT_LOAD segments (bsc#1211829, BZ #28688)

- elf: Properly align PT_LOAD segments (bsc#1211829, BZ #28676)

- ld.so: Always use MAP_COPY to map the first segment (BZ #30452)

- add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)

1215026,CVE-2023-38039

This update for curl fixes the following issues:

- CVE-2023-38039: Fixed possible DoS when receiving too large HTTP header. (bsc#1215026)

1214458

This update for apparmor fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3201-1
Container Tags : suse/pcp:5 , suse/pcp:5-17.128 , suse/pcp:5.2 , suse/pcp:5.2-17.128 , suse/pcp:5.2.5 , suse/pcp:5.2.5-17.128
Container Release : 17.128
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory DoS important glibc suse curl container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here