Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2023:3582-1 Important: nghttp2 Security Fix & zlib Buffer Overflow

suse
Calendar Grey October 27, 2023
Dist Suse Esm H88
SUSE Security Update SUSE-CU-2023:3590-1 introduced crucial patches for libcurl and openssl, mitigating vulnerabilities and enhancing system protection.
The container suse/sles12sp5 was updated

Summary

Advisory ID: SUSE-SU-2023:4199-1 Released: Wed Oct 25 12:01:35 2023 Summary: Security update for nghttp2 Type: security Severity: important Advisory ID: SUSE-SU-2023:4216-1 Released: Thu Oct 26 12:19:45 2023 Summary: Security update for zlib Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory important suse zlib attack mitigation nghttp2

References

References : 1216123 1216174 1216378 CVE-2023-44487 CVE-2023-45853

1216123,1216174,CVE-2023-44487

This update for nghttp2 fixes the following issues:

- CVE-2023-44487: Fixed HTTP/2 Rapid Reset attack. (bsc#1216174)

1216378,CVE-2023-45853

This update for zlib fixes the following issues:

- CVE-2023-45853: Fixed an integer overflow that would lead to a

buffer overflow in the minizip subcomponent (bsc#1216378).

The following package changes have been done:

- libnghttp2-14-1.39.2-3.13.1 updated

- libz1-1.2.11-11.37.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3582-1
Container Tags : suse/sles12sp5:6.5.527 , suse/sles12sp5:latest
Container Release : 6.5.527
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important suse zlib attack mitigation nghttp2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here