Stay Secure with the Latest Linux Advisories

security advisorysecurity updatecurl update

SUSE: 2023:2396-1 Important Security Update For Bci/Golang

The container bci/golang was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:2396-1 Container Tags : bci/golang:1.19 , bci/golang:1.19-2.7.13 , bci/golang:oldstable , bci/golang:oldstable-2.7.13 Container Release : 7.13 Severity : important Type : security References : 1208721 1209229 1210999 1211828 1213237 CVE-2023-31484 CVE-2023-32001 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2882-1 Released: Wed Jul 19 11:49:39 2023 Summary: Security update for perl Type: security Severity: important References: 1210999,CVE-2023-31484 This update for perl fixes the following issues: - CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:2885-1 Released: Wed Jul 19 16:58:43 2023 Summary: Recommended update for glibc Type: recommended Severity: moderate References: 1208721,1209229,1211828 This update for glibc fixes the following issues: - getlogin_r: fix missing fallback if loginuid is unset (bsc#1209229, BZ #30235) - Exclude static archives from preparation for live patching (bsc#1208721) - resolv_conf: release lock on allocation failure (bsc#1211828, BZ #30527) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2891-1 Released: Wed Jul 19 21:14:33 2023 Summary: Security update for curl Type: security Severity: moderate References: 1213237,CVE-2023-32001 This update for curl fixes the following issues: - CVE-2023-32001: Fixed TOCTOU race condition(bsc#1213237). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:2922-1 Released: Thu Jul 20 18:34:03 2023 Summary: Recommended update for libfido2 Type: recommended Severity: moderate References: This update for libfido2 fixes the following issues: - Use openssl 1.1 still on SUSE Linux Enterprise 15 to avoid pulling unneeded openssl-3 dependency. (jsc#PED-4521) The following package changes have been done: - glibc-2.31-150300.52.2 updated - perl-base-5.26.1-150300.17.14.1 updated - libcurl4-8.0.1-150400.5.26.1 updated - libfido2-1-1.13.0-150400.5.6.1 updated - glibc-devel-2.31-150300.52.2 updated - container:sles15-image-15.0.0-36.5.18 updated - crypto-policies-20210917.c9d86d1-150400.1.7 removed - libopenssl3-3.0.8-150500.5.3.1 removed . SUSE Container Update Notice for bci/python provides critical security enhancements and updates to bolster system integrity.. SUSE Container Update,bci/golang patch,container security,security updates. . Severity: Important. LinuxSecurity.com Team

Jul 22, 2023 •Important SuSE