Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2024:267-1 Important: Toolbox Security Update for SLE Micro

suse
Calendar Grey January 20, 2024
Dist Suse Esm H88
The latest update for suse/sle-micro/5.5/toolbox includes key security patches and improvements for critical software.
The container suse/sle-micro/5.5/toolbox was updated

Summary

Advisory ID: SUSE-SU-2024:136-1 Released: Thu Jan 18 09:53:47 2024 Summary: Security update for pam Type: security Severity: moderate Advisory ID: SUSE-SU-2024:140-1 Released: Thu Jan 18 11:34:58 2024 Summary: Security update for libssh Type: security Severity: important

Topics%20covered

Topics Covered

security advisory suse important issue container update libssh fix pam patch

References

References : 1211188 1211190 1217000 1218126 1218186 1218209 1218475 CVE-2023-1667

CVE-2023-2283 CVE-2023-48795 CVE-2023-6004 CVE-2023-6918 CVE-2024-22365

1217000,1218475,CVE-2024-22365

This update for pam fixes the following issues:

- CVE-2024-22365: Fixed a local denial of service during PAM login

due to a missing check during path manipulation (bsc#1218475).

- Check localtime_r() return value to fix crashing (bsc#1217000)

1211188,1211190,1218126,1218186,1218209,CVE-2023-1667,CVE-2023-2283,CVE-2023-48795,CVE-2023-6004,CVE-2023-6918

This update for libssh fixes the following issues:

Security fixes:

- CVE-2023-6004: Fixed command injection using proxycommand (bsc#1218209)

- CVE-2023-48795: Fixed potential downgrade attack using strict kex (bsc#1218126)

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2024:267-1
Container Tags : suse/sle-micro/5.5/toolbox:12.1 , suse/sle-micro/5.5/toolbox:12.1-2.2.138 , suse/sle-micro/5.5/toolbox:latest
Container Release : 2.2.138
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory suse important issue container update libssh fix pam patch

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here