Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2023:3504-1 Important: glibc Use-After-Free Security Issue

suse
Calendar Grey October 23, 2023
Dist Suse Esm H88
SUSE Container Security Notice: suse/sle15 provides essential patches and enhancements addressing multiple critical elements integrated within.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-RU-2023:4073-1 Released: Fri Oct 13 11:40:26 2023 Summary: Recommended update for rpm Type: recommended Severity: low Advisory ID: SUSE-SU-2023:4110-1 Released: Wed Oct 18 12:35:26 2023 Summary: Security update for glibc Type: security Severity: important Advisory ID: SUSE-RU-2023:4122-1 Released: Thu Oct 19 08:24:34 2023 Summary: Recommended update for openssl-1_1 Type: recommended

Topics%20covered

Topics Covered

security advisory security issue important glibc suse use-after-free

References

References : 1107342 1212475 1215215 1215286 1215313 1215434 1215891 CVE-2023-4813

This update for rpm fixes the following issue:

- Enables build for all python modules (jsc#PED-68, jsc#PED-1988)

1215286,1215891,CVE-2023-4813

This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2023-4813: Fixed a potential use-after-free in gaih_inet() (bsc#1215286, BZ #28931)

Also a regression from a previous update was fixed:

- elf: Align argument of __munmap to page size (bsc#1215891, BZ #28676)

1215215

This update for openssl-1_1 fixes the following issues:

- Displays 'fips' in the version string (bsc#1215215)

1212475

This update of container-suseconnect fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).

1215313

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3504-1
Container Tags : bci/bci-base:15.4 , bci/bci-base:15.4.27.14.111 , suse/sle15:15.4 , suse/sle15:15.4.27.14.111
Container Release : 27.14.111
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue important glibc suse use-after-free

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here