Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

REDHAT: 2023:9023-2 critical: wget and svn vulnerability patches

suse
Calendar Grey December 7, 2023
Scroller Suse
SUSE has rolled out critical security patches to mitigate exploits found in curl and the suse/git container.
The container suse/git was updated

Summary

Advisory ID: SUSE-SU-2023:4659-1 Released: Wed Dec 6 13:04:57 2023 Summary: Security update for curl Type: security Severity: moderate

References

References : 1217573 1217574 CVE-2023-46218 CVE-2023-46219

1217573,1217574,CVE-2023-46218,CVE-2023-46219

This update for curl fixes the following issues:

- CVE-2023-46218: Fixed cookie mixed case PSL bypass (bsc#1217573).

- CVE-2023-46219: HSTS long file name clears contents (bsc#1217574).

The following package changes have been done:

- libcurl4-8.0.1-150400.5.36.1 updated

Container Advisory ID : SUSE-CU-2023:4010-1
Container Tags : suse/git:2.35 , suse/git:2.35-4.16 , suse/git:latest
Container Release : 4.16
Severity : moderate
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.