Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 754
Alerts This Week
Warning Icon 1 754

SUSE: 2023:3409-1 Important: Curl Security in Toolbox Update

suse
Calendar Grey October 14, 2023
Dist Suse Esm H88
SUSE Container Alert SUSE-CU-2023:3410-1 brings critical patches for the toolbox, bolstering system protection.
The container suse/sle-micro/5.5/toolbox was updated

Summary

Advisory ID: SUSE-SU-2023:4044-1 Released: Wed Oct 11 09:01:14 2023 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-RU-2023:4052-1 Released: Wed Oct 11 14:11:55 2023 Summary: Recommended update for babeltrace Type: recommended Severity: moderate

Topics%20covered

Topics Covered

security advisory security issue update important suse curl toolbox

References

References : 1209275 1215888 1215889 CVE-2023-38545 CVE-2023-38546

1215888,1215889,CVE-2023-38545,CVE-2023-38546

This update for curl fixes the following issues:

- CVE-2023-38545: Fixed a heap buffer overflow in SOCKS5. (bsc#1215888)

- CVE-2023-38546: Fixed a cookie injection with none file. (bsc#1215889)

1209275

This update ships missing babeltrace-devel to the Basesystem module

to allow building gdb source rpms. (bsc#1209275)

The following package changes have been done:

- babeltrace-1.5.8-150300.3.2.1 updated

- libcurl4-8.0.1-150400.5.32.1 updated

- login_defs-4.8.1-150400.10.12.1 updated

- shadow-4.8.1-150400.10.12.1 updated

- container:sles15-image-15.0.0-36.5.42 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3409-1
Container Tags : suse/sle-micro/5.5/toolbox:12.1 , suse/sle-micro/5.5/toolbox:12.1-2.2.73 , suse/sle-micro/5.5/toolbox:latest
Container Release : 2.2.73
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue update important suse curl toolbox

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.