Stay Secure with the Latest Linux Advisories

security advisoryimportantsuse

SUSE: 2023:487-1 Important: Curl Security Fix Critical Denial Of Service

The container suse/sles/15.5/virt-exportproxy was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sles/15.5/virt-exportproxy ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:487-1 Container Tags : suse/sles/15.5/virt-exportproxy:0.58.0 , suse/sles/15.5/virt-exportproxy:0.58.0-150500.4.9 , suse/sles/15.5/virt-exportproxy:0.58.0.1.160 Container Release : 1.160 Severity : important Type : security References : 1207990 1207991 1207992 CVE-2023-23914 CVE-2023-23915 CVE-2023-23916 ----------------------------------------------------------------- The container suse/sles/15.5/virt-exportproxy was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:429-1 Released: Wed Feb 15 17:41:22 2023 Summary: Security update for curl Type: security Severity: important References: 1207990,1207991,1207992,CVE-2023-23914,CVE-2023-23915,CVE-2023-23916 This update for curl fixes the following issues: - CVE-2023-23914: Fixed HSTS ignored on multiple requests (bsc#1207990). - CVE-2023-23915: Fixed HSTS amnesia with --parallel (bsc#1207991). - CVE-2023-23916: Fixed HTTP multi-header compression denial of service (bsc#1207992). The following package changes have been done: - libz1-1.2.13-150500.1.8 updated - libuuid1-2.37.4-150500.7.3 updated - libsmartcols1-2.37.4-150500.7.3 updated - libblkid1-2.37.4-150500.7.3 updated - libgcrypt20-1.9.4-150500.10.9 updated - libgcrypt20-hmac-1.9.4-150500.10.9 updated - libfdisk1-2.37.4-150500.7.3 updated - libopenssl1_1-1.1.1l-150500.12.2 updated - libopenssl1_1-hmac-1.1.1l-150500.12.2 updated - libmount1-2.37.4-150500.7.3 updated - krb5-1.20.1-150500.1.1 updated - libcurl4-7.79.1-150400.5.15.1 updated - sles-release-15.5-150500.29.1 updated - util-linux-2.37.4-150500.7.3 updated -kubevirt-virt-exportproxy-0.58.0-150500.4.9 updated - container:sles15-image-15.0.0-32.72 updated . SUSE has issued a container advisory for virt-exportproxy, addressing critical security flaws found in curl and related libraries, essential for system integrity and security.. SUSE Container Update,SUSE Virt-Exportproxy,Curl Security Fix. . Severity: Important. LinuxSecurity.com Team

Feb 28, 2023 •Important SuSE