The container bci/php-fpm was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/php-fpm ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:3388-1 Container Tags : bci/php-fpm:8 , bci/php-fpm:8-8.10 Container Release : 8.10 Severity : important Type : security References : 1214806 1215859 1215888 1215889 CVE-2023-38545 CVE-2023-38546 CVE-2023-43655 CVE-2023-4641 ----------------------------------------------------------------- The container bci/php-fpm was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4024-1 Released: Tue Oct 10 13:24:40 2023 Summary: Security update for shadow Type: security Severity: low References: 1214806,CVE-2023-4641 This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak (bsc#1214806). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4041-1 Released: Tue Oct 10 18:28:16 2023 Summary: Security update for php-composer2 Type: security Severity: moderate References: 1215859,CVE-2023-43655 This update for php-composer2 fixes the following issues: - CVE-2023-43655: Fixed a remote code execution issue that could be triggered if users published a web-accessible composer.phar file (bsc#1215859). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4044-1 Released: Wed Oct 11 09:01:14 2023 Summary: Security update for curl Type: security Severity: important References: 1215888,1215889,CVE-2023-38545,CVE-2023-38546 This update for curl fixes the following issues: - CVE-2023-38545: Fixed a heap buffer overflow in SOCKS5. (bsc#1215888) - CVE-2023-38546: Fixed a cookie injection with none file. (bsc#1215889) The followingpackage changes have been done: - login_defs-4.8.1-150400.10.12.1 updated - libcurl4-8.0.1-150400.5.32.1 updated - shadow-4.8.1-150400.10.12.1 updated - php-composer2-2.2.3-150400.3.6.1 updated - container:sles15-image-15.0.0-36.5.41 updated . Explore the latest security enhancements for SUSE's bci/php-fpm that tackle critical vulnerabilities, particularly those related to the risk of remote command execution.. SUSE Container,bci/php-fpm,remote Execution Threats,security Update. . Severity: Important. LinuxSecurity.com Team
The container suse/pcp was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/pcp ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:3386-1 Container Tags : suse/pcp:5 , suse/pcp:5-15.20 , suse/pcp:5.2 , suse/pcp:5.2-15.20 , suse/pcp:5.2.5 , suse/pcp:5.2.5-15.20 , suse/pcp:latest Container Release : 15.20 Severity : important Type : security References : 1214806 1215888 1215889 CVE-2023-38545 CVE-2023-38546 CVE-2023-4641 ----------------------------------------------------------------- The container suse/pcp was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4024-1 Released: Tue Oct 10 13:24:40 2023 Summary: Security update for shadow Type: security Severity: low References: 1214806,CVE-2023-4641 This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak (bsc#1214806). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4044-1 Released: Wed Oct 11 09:01:14 2023 Summary: Security update for curl Type: security Severity: important References: 1215888,1215889,CVE-2023-38545,CVE-2023-38546 This update for curl fixes the following issues: - CVE-2023-38545: Fixed a heap buffer overflow in SOCKS5. (bsc#1215888) - CVE-2023-38546: Fixed a cookie injection with none file. (bsc#1215889) The following package changes have been done: - login_defs-4.8.1-150400.10.12.1 updated - libcurl4-8.0.1-150400.5.32.1 updated - shadow-4.8.1-150400.10.12.1 updated - container:bci-bci-init-15.5-15.5-10.10 updated . Critical maintenance release for SUSE Container suse/pcp featuring essential fixes for wget and useradd components.. SUSE Container Update,SUSE PC,Security Patch,Update Advisory. . Severity: Important. LinuxSecurity.com Team
The container bci/openjdk-devel was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:1378-1 Container Tags : bci/openjdk-devel:17 , bci/openjdk-devel:17-14.80 , bci/openjdk-devel:latest Container Release : 14.80 Severity : moderate Type : security References : 1210507 CVE-2023-29383 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2066-1 Released: Fri Apr 28 13:54:17 2023 Summary: Security update for shadow Type: security Severity: moderate References: 1210507,CVE-2023-29383 This update for shadow fixes the following issues: - CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507). The following package changes have been done: - login_defs-4.8.1-150400.10.6.1 updated - shadow-4.8.1-150400.10.6.1 updated - container:bci-openjdk-17-15.4.17-13.43 updated . SUSE Container Update Notice for bci/openjdk-dev highlights updates that tackle significant security vulnerabilities.. SUSE Container, bci/OpenJDK, Security Updates, Shadow Patch. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.