Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2023:4232-2 Critical Apache HTTP Server Remote Code Execution Risk

suse
Calendar Grey December 20, 2023
Dist Suse Esm H88
SUSE Container Security Alert: suse/manager/4.3/proxy-tftpd requires immediate action due to important patches addressing severe security flaws.
The container suse/manager/4.3/proxy-tftpd was updated

Summary

Advisory ID: SUSE-SU-2023:4843-1 Released: Thu Dec 14 12:22:44 2023 Summary: Security update for python3-cryptography Type: security Severity: moderate Advisory ID: SUSE-SU-2023:4891-1 Released: Mon Dec 18 16:31:49 2023 Summary: Security update for ncurses Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate security update suse container proxy tftpd

References

References : 1201384 1217592 1218014 CVE-2023-49083 CVE-2023-50495

1217592,CVE-2023-49083

This update for python3-cryptography fixes the following issues:

- CVE-2023-49083: Fixed a NULL pointer dereference when loading certificates from a PKCS#7 bundle (bsc#1217592).

1201384,1218014,CVE-2023-50495

This update for ncurses fixes the following issues:

- CVE-2023-50495: Fixed a segmentation fault via _nc_wrap_entry() (bsc#1218014)

- Modify reset command to avoid altering clocal if the terminal uses a modem (bsc#1201384)

The following package changes have been done:

- libncurses6-6.1-150000.5.20.1 updated

- terminfo-base-6.1-150000.5.20.1 updated

- ncurses-utils-6.1-150000.5.20.1 updated

- python3-cryptography-3.3.2-150400.23.1 updated

Container Advisory ID : SUSE-CU-2023:4231-1
Container Tags : suse/manager/4.3/proxy-tftpd:4.3.10 , suse/manager/4.3/proxy-tftpd:4.3.10.9.33.5 , suse/manager/4.3/proxy-tftpd:latest , suse/manager/4.3/proxy-tftpd:susemanager-4.3.10 , suse/manager/4.3/proxy-tftpd:susemanager-4.3.10.9.33.5
Container Release : 9.33.5
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate security update suse container proxy tftpd

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here