Stay Secure with the Latest Linux Advisories

security advisorysecurity issueupdate

SUSE: 2023:3166-1 Important: bci/bci-init DoS Risk Addressed

The container bci/bci-init was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/bci-init ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:3166-1 Container Tags : bci/bci-init:15.5 , bci/bci-init:15.5.9.3 , bci/bci-init:latest Container Release : 9.3 Severity : important Type : security References : 1211829 1212819 1212910 1215026 CVE-2023-38039 ----------------------------------------------------------------- The container bci/bci-init was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:3814-1 Released: Wed Sep 27 18:08:17 2023 Summary: Recommended update for glibc Type: recommended Severity: moderate References: 1211829,1212819,1212910 This update for glibc fixes the following issues: - nscd: Fix netlink cache invalidation if epoll is used (bsc#1212910, BZ #29415) - Restore lookup of IPv4 mapped addresses in files database (bsc#1212819, BZ #25457) - elf: Remove excessive p_align check on PT_LOAD segments (bsc#1211829, BZ #28688) - elf: Properly align PT_LOAD segments (bsc#1211829, BZ #28676) - ld.so: Always use MAP_COPY to map the first segment (BZ #30452) - add GB18030-2022 charmap (jsc#PED-4908, BZ #30243) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3823-1 Released: Wed Sep 27 18:42:38 2023 Summary: Security update for curl Type: security Severity: important References: 1215026,CVE-2023-38039 This update for curl fixes the following issues: - CVE-2023-38039: Fixed possible DoS when receiving too large HTTP header. (bsc#1215026) The following package changes have been done: - glibc-2.31-150300.58.1 updated - libcurl4-8.0.1-150400.5.29.1 updated - container:sles15-image-15.0.0-36.5.37 updated . Stay informed on recent updates for bci/bci-init andrelated packages, vital for maintaining system integrity against vulnerabilities and data breaches. Container Update,SUSE Advisory,bci/bci-init,Security Patches,Important Update. . Severity: Important. LinuxSecurity.com Team

Sep 28, 2023 •Important SuSE