Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 531
Alerts This Week
Warning Icon 1 531

SUSE: 2023:3240-1 Important: Libeconf Stack Overflow Issues

suse
Calendar Grey October 5, 2023
Scroller Suse Esm H88
The recent security patch for the SUSE Container suse/sle15 tackles severe stack-overflow vulnerabilities along with several essential updates.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2023:3954-1 Released: Tue Oct 3 20:09:47 2023 Summary: Security update for libeconf Type: security Severity: important

Topics%20covered

Topics Covered

security advisory suse stack overflow important update libeconf

References

References : 1211078 CVE-2023-22652 CVE-2023-30078 CVE-2023-30079 CVE-2023-32181

1211078,CVE-2023-22652,CVE-2023-30078,CVE-2023-30079,CVE-2023-32181

This update for libeconf fixes the following issues:

Update to version 0.5.2.

- CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).

- CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)

The following package changes have been done:

- libeconf0-0.5.2-150400.3.6.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3240-1
Container Tags : bci/bci-base:15.4 , bci/bci-base:15.4.27.14.102 , suse/sle15:15.4 , suse/sle15:15.4.27.14.102
Container Release : 27.14.102
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory suse stack overflow important update libeconf

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.