Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE 15.3: Notice SUSE-CU-2022:612-1 Critical: bci/python Security Update

suse
Calendar Grey April 14, 2022
Dist Suse Esm H88
SUSE Package Update Notification for bci/openjdk covers critical security enhancements responding to multiple threats.
The container bci/openjdk was updated

Summary

Advisory ID: SUSE-SU-2022:1149-1 Released: Mon Apr 11 16:29:14 2022 Summary: Security update for mozilla-nss Type: security Severity: important Advisory ID: SUSE-SU-2022:1157-1 Released: Tue Apr 12 13:26:19 2022 Summary: Security update for libsolv, libzypp, zypper Type: security Severity: important Advisory ID: SUSE-SU-2022:1158-1 Released: Tue Apr 12 14:44:43 2022 Summary: Security update for xz

Topics%20covered

Topics Covered

security advisory update security fix important container update bci/openjdk package changes

References

References : 1184501 1191502 1193086 1194848 1195247 1195529 1195899 1195999

1196061 1196317 1196368 1196514 1196567 1196925 1197134 1197903

1198062 CVE-2022-1097 CVE-2022-1271

1197903,CVE-2022-1097

This update for mozilla-nss fixes the following issues:

Mozilla NSS 3.68.3 (bsc#1197903):

- CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11

tokens are removed while in use.

1184501,1194848,1195999,1196061,1196317,1196368,1196514,1196925,1197134

This update for libsolv, libzypp, zypper fixes the following issues:

Security relevant fix:

- Harden package signature checks (bsc#1184501).

libsolv update to 0.7.22:

- reworked choice rule generation to cover more usecases

- support SOLVABLE_PREREQ_IGNOREINST in the ordering code (bsc#1196514)

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:611-1
Container Tags : bci/openjdk:11 , bci/openjdk:11-15.3 , bci/openjdk:latest
Container Release : 15.3
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory update security fix important container update bci/openjdk package changes

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here