SUSE: 2023:1220-1 Moderate: SUSE Registry Security Issue

suse

April 21, 2023

The container suse/registry was updated

Advisory ID: SUSE-SU-2023:1911-1 Released: Wed Apr 19 13:02:33 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate

Topics Covered

References : 1209873 1209878 CVE-2023-0465 CVE-2023-0466

1209873,1209878,CVE-2023-0465,CVE-2023-0466

This update for openssl-1_1 fixes the following issues:

- CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878).

- CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).

The following package changes have been done:

- libopenssl1_1-1.1.1l-150400.7.34.1 updated

- openssl-1_1-1.1.1l-150400.7.34.1 updated

- container:micro-image-15.4.0-18.5 updated

Container Advisory ID : SUSE-CU-2023:1220-1

Container Tags : suse/registry:2.8 , suse/registry:2.8-8.1 , suse/registry:latest

Container Release : 8.1

Severity : moderate

Type : security

Get the latest Linux and open source security news straight to your inbox.