Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2023:338-1 Important Security Update for Proxy-Tftpd

suse
Calendar Grey February 11, 2023
Dist Suse Esm H88
SUSE has released a critical security patch for the proxy-tftpd container, addressing significant vulnerabilities linked to various CVEs.
The container suse/manager/4.3/proxy-tftpd was updated

Summary

Advisory ID: SUSE-SU-2022:4597-1 Released: Wed Dec 21 10:13:11 2022 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-SU-2022:4628-1 Released: Wed Dec 28 09:23:13 2022 Summary: Security update for sqlite3 Type: security Severity: moderate Advisory ID: SUSE-SU-2022:4629-1 Released: Wed Dec 28 09:24:07 2022 Summary: Security update for systemd

References

References : 1177460 1194038 1199467 1200723 1203652 1204364 1204585 1204944

1205000 1205000 1205502 1205646 1206212 1206212 1206308 1206309

1206337 1206622 1206667 1207182 1207264 1207533 1207534 1207536

1207538 CVE-2022-23491 CVE-2022-40897 CVE-2022-42969 CVE-2022-4304

CVE-2022-43551 CVE-2022-43552 CVE-2022-4415 CVE-2022-4415 CVE-2022-4450

CVE-2022-46908 CVE-2023-0215 CVE-2023-0286

1206308,1206309,CVE-2022-43551,CVE-2022-43552

This update for curl fixes the following issues:

- CVE-2022-43552: HTTP Proxy deny use-after-free (bsc#1206309).

- CVE-2022-43551: Fixed HSTS bypass via IDN (bsc#1206308).

1206337,CVE-2022-46908

This update for sqlite3 fixes the following issues:

- CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism,

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:338-1
Container Tags : suse/manager/4.3/proxy-tftpd:4.3.4 , suse/manager/4.3/proxy-tftpd:4.3.4.9.15.1 , suse/manager/4.3/proxy-tftpd:latest
Container Release : 9.15.1
Severity : important
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here