Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2023:766-1 Moderate: Curl Security Update Details

suse
Calendar Grey March 22, 2023
Dist Suse Esm H88
The SUSE Container Enhancement Notice for suse/sles12sp5 encompasses critical security fixes and updates for libcurl.
The container suse/sles12sp5 was updated

Summary

Advisory ID: SUSE-SU-2023:865-1 Released: Tue Mar 21 18:34:07 2023 Summary: Security update for curl Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate security issue suse curl

References

References : 1209209 1209210 1209211 1209212 1209214 CVE-2023-27533 CVE-2023-27534

CVE-2023-27535 CVE-2023-27536 CVE-2023-27538

1209209,1209210,1209211,1209212,1209214,CVE-2023-27533,CVE-2023-27534,CVE-2023-27535,CVE-2023-27536,CVE-2023-27538

This update for curl fixes the following issues:

- CVE-2023-27533: Fixed TELNET option IAC injection (bsc#1209209).

- CVE-2023-27534: Fixed SFTP path ~ resolving discrepancy (bsc#1209210).

- CVE-2023-27535: Fixed FTP too eager connection reuse (bsc#1209211).

- CVE-2023-27536: Fixed GSS delegation too eager connection reuse (bsc#1209212).

- CVE-2023-27538: Fixed SSH connection too eager reuse still (bsc#1209214).

The following package changes have been done:

- libcurl4-7.60.0-11.60.1 updated

Container Advisory ID : SUSE-CU-2023:766-1
Container Tags : suse/sles12sp5:6.5.448 , suse/sles12sp5:latest
Container Release : 6.5.448
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate security issue suse curl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here