Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE SLE-Micro 5.4 Toolbox Update: Curl and Man Security Fixes

suse
Calendar Grey December 8, 2023
Dist Suse Esm H88
Security patches for suse/sle-micro/5.5 environments, bringing improvements to wget and documentation corrections.
The container suse/sle-micro/5.4/toolbox was updated

Summary

Advisory ID: SUSE-SU-2023:4659-1 Released: Wed Dec 6 13:04:57 2023 Summary: Security update for curl Type: security Severity: moderate Advisory ID: SUSE-RU-2023:4671-1 Released: Wed Dec 6 14:33:41 2023 Summary: Recommended update for man Type: recommended Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate severity suse curl container update man

References

References : 1217573 1217574 CVE-2023-46218 CVE-2023-46219

1217573,1217574,CVE-2023-46218,CVE-2023-46219

This update for curl fixes the following issues:

- CVE-2023-46218: Fixed cookie mixed case PSL bypass (bsc#1217573).

- CVE-2023-46219: HSTS long file name clears contents (bsc#1217574).

This update of man fixes the following problem:

- The 'man' commands is delivered to SUSE Linux Enterprise Micro

to allow browsing man pages.

The following package changes have been done:

- groff-1.22.4-150400.5.2.1 updated

- libcurl4-8.0.1-150400.5.36.1 updated

- libpipeline1-1.4.1-150000.3.2.1 updated

- man-2.7.6-150100.8.5.1 updated

- system-group-hardware-20170617-150400.24.2.1 updated

- system-group-wheel-20170617-150400.24.2.1 updated

- system-user-man-20170617-150400.24.2.1 updated

Container Advisory ID : SUSE-CU-2023:4043-1
Container Tags : suse/sle-micro/5.4/toolbox:12.1 , suse/sle-micro/5.4/toolbox:12.1-4.2.168 , suse/sle-micro/5.4/toolbox:latest
Container Release : 4.2.168
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate severity suse curl container update man

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here