Alerts This Week
Warning Icon 1 905
Alerts This Week
Warning Icon 1 905

SUSE: 2022:1433-1 Important: bci/openjdk Security Update Overview

suse
Calendar Grey July 7, 2022
Dist Suse Esm H88
This release introduces essential updates for nodejs, wget, and libssh2 to tackle recent vulnerabilities. Keep your systems secure!
The container bci/openjdk was updated

Summary

Advisory ID: SUSE-SU-2022:2294-1 Released: Wed Jul 6 13:34:15 2022 Summary: Security update for expat Type: security Severity: important Advisory ID: SUSE-SU-2022:2305-1 Released: Wed Jul 6 13:38:42 2022 Summary: Security update for curl Type: security Severity: important Advisory ID: SUSE-SU-2022:2308-1 Released: Wed Jul 6 14:15:13 2022 Summary: Security update for openssl-1_1 Type: security

Topics%20covered

Topics Covered

security advisory important openssl updates patches curl bci/openjdk

References

References : 1185637 1196025 1196026 1196168 1196169 1196171 1196784 1199166

1200550 1200734 1200735 1200736 1200737 1201099 CVE-2022-1292

CVE-2022-2068 CVE-2022-2097 CVE-2022-25235 CVE-2022-25236 CVE-2022-25313

CVE-2022-25314 CVE-2022-25315 CVE-2022-32205 CVE-2022-32206 CVE-2022-32207

CVE-2022-32208

1196025,1196026,1196168,1196169,1196171,1196784,CVE-2022-25235,CVE-2022-25236,CVE-2022-25313,CVE-2022-25314,CVE-2022-25315

This update for expat fixes the following issues:

- CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025).

- Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784).

- CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:1433-1
Container Tags : bci/openjdk:11 , bci/openjdk:11-12.9 , bci/openjdk:latest
Container Release : 12.9
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important openssl updates patches curl bci/openjdk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here