Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:3497-1 Important: Toolbox Security Advisory Overview

suse
Calendar Grey October 21, 2023
Dist Suse Esm H88
The Oracle Linux Security Advisory highlights critical updates for oracle/ol8/8/toolbox aimed at resolving vulnerabilities.
The container suse/sle-micro/5.3/toolbox was updated

Summary

Advisory ID: SUSE-SU-2023:4110-1 Released: Wed Oct 18 12:35:26 2023 Summary: Security update for glibc Type: security Severity: important Advisory ID: SUSE-SU-2023:4135-1 Released: Thu Oct 19 14:14:23 2023 Summary: Security update for suse-module-tools Type: security Severity: important Advisory ID: SUSE-RU-2023:4138-1 Released: Thu Oct 19 17:15:38 2023

Topics%20covered

Topics Covered

security advisory important glibc suse toolbox systemd module tools

References

References : 1205767 1210335 1215286 1215313 1215891 CVE-2023-1829 CVE-2023-23559

CVE-2023-4813

1215286,1215891,CVE-2023-4813

This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2023-4813: Fixed a potential use-after-free in gaih_inet() (bsc#1215286, BZ #28931)

Also a regression from a previous update was fixed:

- elf: Align argument of __munmap to page size (bsc#1215891, BZ #28676)

1205767,1210335,CVE-2023-1829,CVE-2023-23559

This update for suse-module-tools fixes the following issues:

- Updated to version 15.4.18:

- CVE-2023-1829: Blacklisted the Linux kernel tcindex classifier

module (bsc#1210335).

- CVE-2023-23559: Blacklisted the Linux kernel RNDIS modules

(bsc#1205767, jsc#PED-5731).

This update for systemd-rpm-macros fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3497-1
Container Tags : suse/sle-micro/5.3/toolbox:12.1 , suse/sle-micro/5.3/toolbox:12.1-5.2.238 , suse/sle-micro/5.3/toolbox:latest
Container Release : 5.2.238
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important glibc suse toolbox systemd module tools

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here