This update for kubernetes1.23 fixes the following issues:
* CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value
in foreign content (bsc#1241865).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.6
zypper in -t patch openSUSE-SLE-15.6-2025-1940=1
* openSUSE Leap 15.5
zypper in -t patch SUSE-2025-1940=1
* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)
* kubernetes1.23-apiserver-1.23.17-150500.3.21.1
* kubernetes1.23-client-1.23.17-150500.3.21.1
* kubernetes1.23-client-common-1.23.17-150500.3.21.1
* kubernetes1.23-kubeadm-1.23.17-150500.3.21.1
* kubernetes1.23-kubelet-common-1.23.17-150500.3.21.1
* kubernetes1.23-scheduler-1.23.17-150500.3.21.1
* kubernetes1.23-kubelet-1.23.17-150500.3.21.1
* kubernetes1.23-proxy-1.23.17-150500.3.21.1
* kubernetes1.23-controller-manager-1.23.17-150500.3.21.1
* openSUSE Leap 15.6 (noarch)
* kubernetes1.23-client-bash-completion-1.23.17-150500.3.21.1
* kubernetes1.23-client-fish-completion-1.23.17-150500.3.21.1
* openSUSE Leap 15.6 (ppc64le)
* kubernetes1.23-kubelet-debuginfo-1.23.17-150500.3.21.1
* kubernetes1.23-client-debuginfo-1.23.17-150500.3.21.1
* kubernetes1.23-proxy-debuginfo-1.23.17-150500.3.21.1
* kubernetes1.23-scheduler-debuginfo-1.23.17-150500.3.21.1
* kubernetes1.23-apiserver-debuginfo-1.23.17-150500.3.21.1
*...
Read the Full Advisory* bsc#1241865
## References:
* https://www.suse.com/security/cve/CVE-2025-22872.html
* https://bugzilla.suse.com/show_bug.cgi?id=1241865
Get the latest Linux and open source security news straight to your inbox.