Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE SLE15: 2023:3420-1 Moderate: Multiple Security Updates

suse
Calendar Grey October 17, 2023
Dist Suse Esm H88
SUSE Container Security Update Advisory for suse/sle15 addressing vulnerabilities in various packages such as vim and wget.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2023:4025-1 Released: Tue Oct 10 13:41:02 2023 Summary: Security update for shadow Type: security Severity: low Advisory ID: SUSE-SU-2023:4045-1 Released: Wed Oct 11 09:10:43 2023 Summary: Security update for curl Type: security Severity: moderate Advisory ID: SUSE-SU-2023:4047-1 Released: Wed Oct 11 10:40:26 2023 Summary: Security update for glibc Type: security Severity: moderate

References

References : 1214806 1215286 1215505 1215889 CVE-2023-38546 CVE-2023-4641

CVE-2023-4813

1214806,CVE-2023-4641

This update for shadow fixes the following issues:

- CVE-2023-4641: Fixed potential password leak (bsc#1214806).

1215889,CVE-2023-38546

This update for curl fixes the following issues:

- CVE-2023-38546: Fixed a cookie injection with none file (bsc#1215889).

1215286,1215505,CVE-2023-4813

This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2023-4813: Fixed a potential use-after-free in gaih_inet() (bsc#1215286, BZ #28931)

Other changes:

- Added GB18030-2022 charmap (jsc#PED-4908, BZ #30243)

- Run vismain only if linker supports protected data symbol (bsc#1215505)

The following package changes have been done:

- glibc-2.26-150000.13.70.1 updated

Container Advisory ID : SUSE-CU-2023:3420-1
Container Tags : suse/sle15:15.2 , suse/sle15:15.2.9.5.355
Container Release : 9.5.355
Severity : moderate
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here