Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2023:3751-1 Important: bci/php-apache Security Update Critical

suse
Calendar Grey November 17, 2023
Dist Suse Esm H88
The SUSE Container Security Update highlights significant patches for bci/python-nginx that rectify crucial vulnerabilities.
The container bci/php-apache was updated

Summary

Advisory ID: SUSE-SU-2023:4430-1 Released: Mon Nov 13 17:55:09 2023 Summary: Security update for apache2 Type: security Severity: important Advisory ID: SUSE-RU-2023:4450-1 Released: Wed Nov 15 10:55:20 2023 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:4458-1 Released: Thu Nov 16 14:38:48 2023 Summary: Security update for gcc13

Topics%20covered

Topics Covered

security advisory update critical security fix important apache2 bci/php-apache

References

References : 1206480 1206684 1207399 1209998 1210557 1211427 1212101 1213915

1214052 1214357 1214460 1215427 1216424 1216664 CVE-2023-31122

CVE-2023-4039

1207399,1214357,1216424,CVE-2023-31122

This update for apache2 fixes the following issues:

- CVE-2023-31122: Fixed an out of bounds read in mod_macro (bsc#1216424).

Non-security fixes:

- Fixed the content type handling in mod_proxy_http2 (bsc#1214357).

- Fixed a floating point exception crash (bsc#1207399).

1209998

This update for crypto-policies fixes the following issues:

- Enable setting the kernel FIPS mode with the fips-mode-setup and fips-finish-install commands

(jsc#PED-5041)

- Adapt fips-mode-setup to use the pbl command from the perl-Bootloader package instead of grubby

and add a note for transactional systems

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3751-1
Container Tags : bci/php-apache:8 , bci/php-apache:8-8.32
Container Release : 8.32
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory update critical security fix important apache2 bci/php-apache

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here