Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:5182-2 critical: apache server vulnerabilities detected

suse
Calendar Grey December 15, 2023
Dist Suse Esm H88
SUSE Container Update SUSE-CU-2023:4181-2 addresses major vulnerabilities. Check out the details!
The container suse/nginx was updated

Summary

Advisory ID: SUSE-SU-2023:4869-1 Released: Thu Dec 14 16:26:23 2023 Summary: Security update for tiff Type: security Severity: important

Topics%20covered

Topics Covered

security advisory patch important suse nginx container

References

References : 1199483 1210231 1211478 1212398 1214680 CVE-2022-1622 CVE-2022-40090

CVE-2023-1916 CVE-2023-26965 CVE-2023-2731

1199483,1210231,1211478,1212398,1214680,CVE-2022-1622,CVE-2022-40090,CVE-2023-1916,CVE-2023-26965,CVE-2023-2731

This update for tiff fixes the following issues:

- CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478).

- CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231).

- CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398).

- CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).

The following package changes have been done:

- libtiff5-4.0.9-150000.45.35.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:4181-1
Container Tags : suse/nginx:1.21 , suse/nginx:1.21-5.59 , suse/nginx:latest
Container Release : 5.59
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory patch important suse nginx container

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here