Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE 15.3: 2024:223-1 important: curl and gpg2 security fixes

suse
Calendar Grey January 18, 2024
Dist Suse Esm H88
SUSE security advisory highlights important updates for curl and gpg2, enhancing security for containers and SLE users.
The container suse/ltss/sle15.3/sle15 was updated

Summary

Advisory ID: SUSE-RU-2023:4699-1 Released: Mon Dec 11 07:02:10 2023 Summary: Recommended update for gpg2 Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:4713-1 Released: Mon Dec 11 13:23:12 2023 Summary: Security update for curl Type: security Severity: moderate Advisory ID: SUSE-RU-2023:4723-1 Released: Tue Dec 12 09:57:51 2023 Summary: Recommended update for libtirpc

Topics%20covered

Topics Covered

security advisory moderate important curl container update gpg2

References

References : 1029961 1158830 1201384 1206798 1209122 1212475 1215496 1216862

1216987 1217212 1217573 1218014 CVE-2023-46218 CVE-2023-50495

1217212

This update for gpg2 fixes the following issues:

- `dirmngr-client --validate` is broken for DER-encoded files (bsc#1217212)

1217573,CVE-2023-46218

This update for curl fixes the following issues:

- CVE-2023-46218: Fixed cookie mixed case PSL bypass (bsc#1217573).

1216862

This update for libtirpc fixes the following issue:

- fix sed parsing in specfile (bsc#1216862)

1212475

This update of container-suseconnect fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).

1201384,1218014,CVE-2023-50495

This update for ncurses fixes the following issues:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2024:223-1
Container Tags : suse/ltss/sle15.3/bci-base:15.3 , suse/ltss/sle15.3/bci-base:15.3.3.40 , suse/ltss/sle15.3/sle15:15.3 , suse/ltss/sle15.3/sle15:15.3.3.40
Container Release : 3.40
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory moderate important curl container update gpg2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here