SUSE Container Update Advisory: suse/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2022:616-1 Container Tags : bci/bci-base:15.4 , bci/bci-base:15.4.25.2.52 , suse/sle15:15.4 , suse/sle15:15.4.25.2.52 Container Release : 25.2.52 Severity : important Type : security References : 1197293 1198062 CVE-2022-1271 ----------------------------------------------------------------- The container suse/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2022:1150-1 Released: Mon Apr 11 17:34:19 2022 Summary: Recommended update for suse-build-key Type: recommended Severity: moderate References: 1197293 This update for suse-build-key fixes the following issues: No longer install 1024bit keys by default. (bsc#1197293) - The SLE11 key has been moved to documentation directory, and is obsoleted / removed by the package. - The old PTF (pre March 2022) key moved to documentation directory. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:1158-1 Released: Tue Apr 12 14:44:43 2022 Summary: Security update for xz Type: security Severity: important References: 1198062,CVE-2022-1271 This update for xz fixes the following issues: - CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062) The following package changes have been done: - libgcrypt20-hmac-1.9.4-150400.3.1 updated - libgcrypt20-1.9.4-150400.3.1 updated - liblzma5-5.2.3-150000.4.7.1 updated - libsystemd0-249.11-150400.4.5 updated - libudev1-249.11-150400.4.5 updated - libyaml-cpp0_6-0.6.3-150400.2.1 updated - sles-release-15.4-150400.50.1 updated - suse-build-key-12.0-150000.8.22.1 updated