SUSE Container Update Advisory: suse/sles/15.5/libguestfs-tools
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2023:491-1
Container Tags        : suse/sles/15.5/libguestfs-tools:0.58.0 , suse/sles/15.5/libguestfs-tools:0.58.0-150500.4.9 , suse/sles/15.5/libguestfs-tools:0.58.0.17.153
Container Release     : 17.153
Severity              : important
Type                  : security
References            : 1207990 1207991 1207992 CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
-----------------------------------------------------------------

The container suse/sles/15.5/libguestfs-tools was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:429-1
Released:    Wed Feb 15 17:41:22 2023
Summary:     Security update for curl
Type:        security
Severity:    important
References:  1207990,1207991,1207992,CVE-2023-23914,CVE-2023-23915,CVE-2023-23916
This update for curl fixes the following issues:

- CVE-2023-23914: Fixed HSTS ignored on multiple requests (bsc#1207990).
- CVE-2023-23915: Fixed HSTS amnesia with --parallel (bsc#1207991).
- CVE-2023-23916: Fixed HTTP multi-header compression denial of service (bsc#1207992).


The following package changes have been done:

- libz1-1.2.13-150500.1.8 updated
- libuuid1-2.37.4-150500.7.3 updated
- libsmartcols1-2.37.4-150500.7.3 updated
- libblkid1-2.37.4-150500.7.3 updated
- libgcrypt20-1.9.4-150500.10.9 updated
- libgcrypt20-hmac-1.9.4-150500.10.9 updated
- libfdisk1-2.37.4-150500.7.3 updated
- libopenssl1_1-1.1.1l-150500.12.2 updated
- libopenssl1_1-hmac-1.1.1l-150500.12.2 updated
- libmount1-2.37.4-150500.7.3 updated
- krb5-1.20.1-150500.1.1 updated
- libcurl4-7.79.1-150400.5.15.1 updated
- sles-release-15.5-150500.29.1 updated
- util-linux-2.37.4-150500.7.3 updated
- curl-7.79.1-150400.5.15.1 updated
- libnettle8-3.8.1-150500.2.15 updated
- mdadm-4.2-150500.1.12 updated
- qemu-accel-tcg-x86-7.1.0-150500.45.1 updated
- qemu-ipxe-1.0.0+-150500.45.1 updated
- qemu-seabios-1.16.0_0_gd239552-150500.45.1 updated
- qemu-sgabios-8-150500.45.1 updated
- qemu-vgabios-1.16.0_0_gd239552-150500.45.1 updated
- libhogweed6-3.8.1-150500.2.15 updated
- xen-libs-4.17.0_04-150500.1.1 updated
- qemu-tools-7.1.0-150500.45.1 updated
- dracut-mkinitrd-deprecated-055+suse.345.g8b8708cb-150500.1.5 updated
- dracut-055+suse.345.g8b8708cb-150500.1.5 updated
- kernel-kvmsmall-5.14.21-150500.41.1 updated
- dracut-fips-055+suse.345.g8b8708cb-150500.1.5 updated
- qemu-x86-7.1.0-150500.45.1 updated
- qemu-7.1.0-150500.45.1 updated
- qemu-ovmf-x86_64-202208-150500.3.1 updated
- container:sles15-image-15.0.0-32.72 updated

SUSE: 2023:491-1 suse/sles/15.5/libguestfs-tools Security Update

February 28, 2023
The container suse/sles/15.5/libguestfs-tools was updated

Summary

Advisory ID: SUSE-SU-2023:429-1 Released: Wed Feb 15 17:41:22 2023 Summary: Security update for curl Type: security Severity: important

References

References : 1207990 1207991 1207992 CVE-2023-23914 CVE-2023-23915 CVE-2023-23916

1207990,1207991,1207992,CVE-2023-23914,CVE-2023-23915,CVE-2023-23916

This update for curl fixes the following issues:

- CVE-2023-23914: Fixed HSTS ignored on multiple requests (bsc#1207990).

- CVE-2023-23915: Fixed HSTS amnesia with --parallel (bsc#1207991).

- CVE-2023-23916: Fixed HTTP multi-header compression denial of service (bsc#1207992).

The following package changes have been done:

- libz1-1.2.13-150500.1.8 updated

- libuuid1-2.37.4-150500.7.3 updated

- libsmartcols1-2.37.4-150500.7.3 updated

- libblkid1-2.37.4-150500.7.3 updated

- libgcrypt20-1.9.4-150500.10.9 updated

- libgcrypt20-hmac-1.9.4-150500.10.9 updated

- libfdisk1-2.37.4-150500.7.3 updated

- libopenssl1_1-1.1.1l-150500.12.2 updated

- libopenssl1_1-hmac-1.1.1l-150500.12.2 updated

- libmount1-2.37.4-150500.7.3 updated

- krb5-1.20.1-150500.1.1 updated

- libcurl4-7.79.1-150400.5.15.1 updated

- sles-release-15.5-150500.29.1 updated

- util-linux-2.37.4-150500.7.3 updated

- curl-7.79.1-150400.5.15.1 updated

- libnettle8-3.8.1-150500.2.15 updated

- mdadm-4.2-150500.1.12 updated

- qemu-accel-tcg-x86-7.1.0-150500.45.1 updated

- qemu-ipxe-1.0.0+-150500.45.1 updated

- qemu-seabios-1.16.0_0_gd239552-150500.45.1 updated

- qemu-sgabios-8-150500.45.1 updated

- qemu-vgabios-1.16.0_0_gd239552-150500.45.1 updated

- libhogweed6-3.8.1-150500.2.15 updated

- xen-libs-4.17.0_04-150500.1.1 updated

- qemu-tools-7.1.0-150500.45.1 updated

- dracut-mkinitrd-deprecated-055+suse.345.g8b8708cb-150500.1.5 updated

- dracut-055+suse.345.g8b8708cb-150500.1.5 updated

- kernel-kvmsmall-5.14.21-150500.41.1 updated

- dracut-fips-055+suse.345.g8b8708cb-150500.1.5 updated

- qemu-x86-7.1.0-150500.45.1 updated

- qemu-7.1.0-150500.45.1 updated

- qemu-ovmf-x86_64-202208-150500.3.1 updated

- container:sles15-image-15.0.0-32.72 updated

Severity
Container Advisory ID : SUSE-CU-2023:491-1
Container Tags : suse/sles/15.5/libguestfs-tools:0.58.0 , suse/sles/15.5/libguestfs-tools:0.58.0-150500.4.9 , suse/sles/15.5/libguestfs-tools:0.58.0.17.153
Container Release : 17.153
Severity : important
Type : security

Related News

5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
11.Locks IsometricPattern Esm H320
2 - 3 min read
Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently
28.Lock Globe Esm H320
1 - 2 min read
A resurgence of cyberattacks targeting Linux systems in Asian campaigns through the utilization of the Pupy Remote Access Trojan (RAT) has been
27.Tablet Connections Blocks Lock Esm H320
2 - 4 min read
Canonical has recently announced the Beta release of Ubuntu Linux 24.04 LTS , codenamed "Noble Numbat." This release aims to continue Ubuntu's
21.Globe RadiatingCode Esm H320
2 - 3 min read
The open-source movement has come a long way, from its origins in the 1960s and 1970s to becoming an integral part of organizations worldwide.
13.Lock StylizedMotherboard Esm H320
2 - 3 min read
The Rust-based Edera project demonstrates a unique approach to container security that addresses cloud-native computing challenges. Let's examine
8.Locks HexConnections CodeGlobe Esm H320
2 - 3 min read
Canonical has launched Ubuntu Pro for Devices , a comprehensive offering emphasizing security and compliance for IoT device deployments. This
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved