Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

SUSE: 2023:740-2 Critical: Proxy Salt Broker Security Update

suse
Calendar Grey March 20, 2023
Scroller Suse
Crucial security enhancement for suse/manager/4.3/proxy-salt-broker introducing significant updates for heightened protection.
The container suse/manager/4.3/proxy-salt-broker was updated

Summary

Advisory ID: SUSE-SU-2023:429-1 Released: Wed Feb 15 17:41:22 2023 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-RU-2023:464-1 Released: Mon Feb 20 18:11:37 2023 Summary: Recommended update for systemd Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:549-1 Released: Mon Feb 27 17:35:07 2023 Summary: Security update for python3

References

References : 1178233 1203248 1203249 1203715 1204548 1204956 1205244 1205570

1205636 1206949 1207789 1207990 1207991 1207992 1207994 1208443

1208924 1208925 1208926 1208998 CVE-2022-45061 CVE-2023-23914

CVE-2023-23915 CVE-2023-23916

1207990,1207991,1207992,CVE-2023-23914,CVE-2023-23915,CVE-2023-23916

This update for curl fixes the following issues:

- CVE-2023-23914: Fixed HSTS ignored on multiple requests (bsc#1207990).

- CVE-2023-23915: Fixed HSTS amnesia with --parallel (bsc#1207991).

- CVE-2023-23916: Fixed HTTP multi-header compression denial of service (bsc#1207992).

This update for systemd fixes the following issues:

- Merge of v249.15

- Drop workaround related to systemd-timesyncd that addressed a Factory issue.

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:739-1
Container Tags : suse/manager/4.3/proxy-salt-broker:4.3.5 , suse/manager/4.3/proxy-salt-broker:4.3.5.9.18.2 , suse/manager/4.3/proxy-salt-broker:latest
Container Release : 9.18.2
Severity : important
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.