Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:348-1 Critical: suse/registry Security Patch Details

suse
Calendar Grey February 16, 2023
Dist Suse Esm H88
SUSE Container Maintenance Update for suse/registry has been released with essential patches targeting vulnerabilities and comprehensive update information.
The container suse/registry was updated

Summary

Advisory ID: SUSE-SU-2023:322-1 Released: Wed Feb 8 16:19:37 2023 Summary: Security update for apache2 Type: security Severity: important Advisory ID: SUSE-SU-2023:389-1 Released: Mon Feb 13 09:41:49 2023 Summary: Security update for apr-util Type: security Severity: critical

Topics%20covered

Topics Covered

security advisory critical security patch suse registry

References

References : 1207247 1207250 1207251 1207866 CVE-2006-20001 CVE-2022-25147

CVE-2022-36760 CVE-2022-37436

1207247,1207250,1207251,CVE-2006-20001,CVE-2022-36760,CVE-2022-37436

This update for apache2 fixes the following issues:

- CVE-2022-37436: Fixed an issue in mod_proxy where a malicious

backend could cause the response headers to be truncated early,

resulting in some headers being incorporated into the response body

(bsc#1207251).

- CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow

request smuggling attacks (bsc#1207250).

- CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request

header could cause memory corruption (bsc#1207247).

1207866,CVE-2022-25147

This update for apr-util fixes the following issues:

Severity
critical
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:348-1
Container Tags : suse/registry:2.8 , suse/registry:2.8-5.7 , suse/registry:latest
Container Release : 5.7
Severity : critical
Type : security

Topics%20covered

Topics Covered

security advisory critical security patch suse registry

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here