Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:4659-1 moderate security patch for curl vulnerabilities

suse
Calendar Grey December 9, 2023
Dist Suse Esm H88
Critical update for suse/manager/4.3/proxy-httpd resolves curl issues and enhances overall protection.
The container suse/manager/4.3/proxy-httpd was updated

Summary

Advisory ID: SUSE-SU-2023:4659-1 Released: Wed Dec 6 13:04:57 2023 Summary: Security update for curl Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate patch suse curl container update

References

References : 1217573 1217574 CVE-2023-46218 CVE-2023-46219

1217573,1217574,CVE-2023-46218,CVE-2023-46219

This update for curl fixes the following issues:

- CVE-2023-46218: Fixed cookie mixed case PSL bypass (bsc#1217573).

- CVE-2023-46219: HSTS long file name clears contents (bsc#1217574).

The following package changes have been done:

- libcurl4-8.0.1-150400.5.36.1 updated

- system-group-hardware-20170617-150400.24.2.1 updated

- curl-8.0.1-150400.5.36.1 updated

Container Advisory ID : SUSE-CU-2023:4058-1
Container Tags : suse/manager/4.3/proxy-httpd:4.3.9 , suse/manager/4.3/proxy-httpd:4.3.9.9.40.20 , suse/manager/4.3/proxy-httpd:latest , suse/manager/4.3/proxy-httpd:susemanager-4.3.9 , suse/manager/4.3/proxy-httpd:susemanager-4.3.9.9.40.20
Container Release : 9.40.20
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate patch suse curl container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here