Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2024:397-1 Moderate: suse/nginx Path Traversal Fix

suse
Calendar Grey January 29, 2024
Dist Suse Esm H88
SUSE enhances the suse/nginx image by integrating security updates that mitigate CVE-2023-7208 and associated vulnerabilities.
The container suse/nginx was updated

Summary

Advisory ID: SUSE-SU-2024:238-1 Released: Fri Jan 26 10:56:41 2024 Summary: Security update for cpio Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate suse nginx path traversal container security

References

References : 1218571 CVE-2023-7207

1218571,CVE-2023-7207

This update for cpio fixes the following issues:

- CVE-2023-7207: Fixed a path traversal issue that could lead to an

arbitrary file write during archive extraction (bsc#1218571).

The following package changes have been done:

- libuuid1-2.37.4-150500.9.3.1 updated

- libsmartcols1-2.37.4-150500.9.3.1 updated

- libblkid1-2.37.4-150500.9.3.1 updated

- libfdisk1-2.37.4-150500.9.3.1 updated

- cpio-2.13-150400.3.3.1 updated

- libmount1-2.37.4-150500.9.3.1 updated

- util-linux-2.37.4-150500.9.3.1 updated

- container:sles15-image-15.0.0-36.5.77 updated

Container Advisory ID : SUSE-CU-2024:397-1
Container Tags : suse/nginx:1.21 , suse/nginx:1.21-9.10 , suse/nginx:latest
Container Release : 9.10
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate suse nginx path traversal container security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here