SUSE Container Update Advisory: rancher/elemental-teal/5.3
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2023:1230-1
Container Tags        : rancher/elemental-teal/5.3:1.1.4 , rancher/elemental-teal/5.3:1.1.4-3.2.6 , rancher/elemental-teal/5.3:latest
Container Release     : 3.2.6
Severity              : important
Type                  : security
References            : 1184124 1206195 1206439 1207571 1207957 1207975 1208079 1208358
                        1208432 1209188 1209624 1209873 1209878 CVE-2023-0464 CVE-2023-0465
                        CVE-2023-0466 CVE-2023-0687 
-----------------------------------------------------------------

The container rancher/elemental-teal/5.3 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2021:2179-1
Released:    Mon Jun 28 17:36:37 2021
Summary:     Recommended update for thin-provisioning-tools
Type:        recommended
Severity:    moderate
References:  1184124
This update for thin-provisioning-tools fixes the following issues:

- Link as position-independent executable (bsc#1184124)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:1717-1
Released:    Fri Mar 31 15:18:35 2023
Summary:     Security update for grub2
Type:        security
Severity:    moderate
References:  1209188

This update of grub2 fixes the following issues:

- rebuild the package with the new secure boot key (bsc#1209188).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:1718-1
Released:    Fri Mar 31 15:47:34 2023
Summary:     Security update for glibc
Type:        security
Severity:    moderate
References:  1207571,1207957,1207975,1208358,CVE-2023-0687
This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2023-0687: Fix allocated buffer overflow in gmon (bsc#1207975)

Other issues fixed:

- Fix avx2 strncmp offset compare condition check (bsc#1208358)
- elf: Allow dlopen of filter object to work (bsc#1207571)
- powerpc: Fix unrecognized instruction errors with recent GCC
- x86: Cache computation for AMD architecture (bsc#1207957)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:1745-1
Released:    Tue Apr  4 09:05:23 2023
Summary:     Security update for openssl-1_1
Type:        security
Severity:    moderate
References:  1209624,CVE-2023-0464
This update for openssl-1_1 fixes the following issues:

- CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:1779-1
Released:    Thu Apr  6 08:16:58 2023
Summary:     Recommended update for systemd
Type:        recommended
Severity:    moderate
References:  1208432
This update for systemd fixes the following issues:

- Fix return non-zero value when disabling SysVinit service (bsc#1208432)
- Drop build requirement on libpci, it's not no longer needed
- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package, so they aren't installed in systemd based containers
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:1805-1
Released:    Tue Apr 11 10:12:41 2023
Summary:     Recommended update for timezone
Type:        recommended
Severity:    important
References:  
This update for timezone fixes the following issues:

- Version update from 2022g to 2023c:
  * Egypt now uses DST again, from April through October.
  * This year Morocco springs forward April 23, not April 30.
  * Palestine delays the start of DST this year.
  * Much of Greenland still uses DST from 2024 on.
  * America/Yellowknife now links to America/Edmonton.
  * tzselect can now use current time to help infer timezone.
  * The code now defaults to C99 or later.

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:1880-1
Released:    Tue Apr 18 11:11:27 2023
Summary:     Recommended update for systemd-rpm-macros
Type:        recommended
Severity:    low
References:  1208079
This update for systemd-rpm-macros fixes the following issue:

- Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not present as it's expected (bsc#1208079).

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:1885-1
Released:    Tue Apr 18 11:15:17 2023
Summary:     Recommended update for dracut
Type:        recommended
Severity:    moderate
References:  1206195,1206439
This update for dracut fixes the following issues:

- Update to version 055+suse.335.gccf7fbc6:
  * Always include all drivers that LVM can use (bsc#1206195)
  * Require libopenssl1_1-hmac for dracut-fips (bsc#1206439)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:1911-1
Released:    Wed Apr 19 13:02:33 2023
Summary:     Security update for openssl-1_1
Type:        security
Severity:    moderate
References:  1209873,1209878,CVE-2023-0465,CVE-2023-0466
This update for openssl-1_1 fixes the following issues:

- CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878).
- CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).


The following package changes have been done:

- glibc-2.31-150300.46.1 updated
- libudev1-249.16-150400.8.25.7 updated
- libaio1-0.3.109-1.25 added
- libsystemd0-249.16-150400.8.25.7 updated
- liblvm2cmd2_03-2.03.05-150400.185.1 added
- libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1 added
- elemental-dracut-config-0.10.6-150400.1.1 updated
- elemental-grub-config-0.10.6-150400.1.1 updated
- elemental-immutable-rootfs-0.10.6-150400.1.1 updated
- elemental-register-1.2.2-150400.1.1 updated
- elemental-support-1.2.2-150400.1.1 updated
- elemental-system-agent-0.3.2-150400.1.1 updated
- elemental-updater-1.1.4-150400.1.1 updated
- timezone-2023c-150000.75.23.1 updated
- thin-provisioning-tools-0.7.5-3.3.1 added
- systemd-rpm-macros-12-150000.7.30.1 updated
- device-mapper-2.03.05_1.02.163-150400.185.1 added
- grub2-2.06-150400.11.25.1 updated
- grub2-i386-pc-2.06-150400.11.25.1 updated
- glibc-locale-base-2.31-150300.46.1 updated
- libopenssl1_1-1.1.1l-150400.7.34.1 updated
- systemd-249.16-150400.8.25.7 updated
- libnm0-1.38.2-150400.3.2.3 updated
- udev-249.16-150400.8.25.7 updated
- systemd-sysvinit-249.16-150400.8.25.7 updated
- dracut-055+suse.335.gccf7fbc6-150400.3.19.1 updated
- lvm2-2.03.05-150400.185.1 added
- kernel-firmware-usb-network-20220509-150400.4.13.1 added
- kernel-firmware-realtek-20220509-150400.4.13.1 added
- kernel-firmware-qlogic-20220509-150400.4.13.1 added
- kernel-firmware-platform-20220509-150400.4.13.1 added
- kernel-firmware-network-20220509-150400.4.13.1 added
- kernel-firmware-mellanox-20220509-150400.4.13.1 added
- kernel-firmware-mediatek-20220509-150400.4.13.1 added
- kernel-firmware-marvell-20220509-150400.4.13.1 added
- kernel-firmware-liquidio-20220509-150400.4.13.1 added
- kernel-firmware-iwlwifi-20220509-150400.4.13.1 added
- kernel-firmware-intel-20220509-150400.4.13.1 added
- kernel-firmware-i915-20220509-150400.4.13.1 added
- kernel-firmware-chelsio-20220509-150400.4.13.1 added
- kernel-firmware-bnx2-20220509-150400.4.13.1 added
- NetworkManager-1.38.2-150400.3.2.3 updated
- kernel-firmware-ath10k-20220509-150400.4.13.1 added
- kernel-firmware-ath11k-20220509-150400.4.13.1 added
- kernel-firmware-atheros-20220509-150400.4.13.1 added
- kernel-firmware-bluetooth-20220509-150400.4.13.1 added
- kernel-firmware-brcm-20220509-150400.4.13.1 added
- kernel-firmware-dpaa2-20220509-150400.4.13.1 added
- kernel-firmware-media-20220509-150400.4.13.1 added
- kernel-firmware-mwifiex-20220509-150400.4.13.1 added
- kernel-firmware-nfp-20220509-150400.4.13.1 added
- kernel-firmware-nvidia-20220509-150400.4.13.1 added
- kernel-firmware-prestera-20220509-150400.4.13.1 added
- kernel-firmware-qcom-20220509-150400.4.13.1 added
- kernel-firmware-radeon-20220509-150400.4.13.1 added
- kernel-firmware-serial-20220509-150400.4.13.1 added
- kernel-firmware-sound-20220509-150400.4.13.1 added
- kernel-firmware-ti-20220509-150400.4.13.1 added
- kernel-firmware-ueagle-20220509-150400.4.13.1 added
- libpwquality1-1.4.4-150400.15.4 added
- systemd-presets-branding-Elemental-20230303-150400.1.1 updated
- kernel-firmware-all-20220509-150400.4.13.1 added
- cryptsetup-2.4.3-150400.1.110 added
- elemental-cli-0.2.5-150400.1.1 updated
- elemental-init-setup-0.10.6-150400.1.1 updated
- elemental-init-services-0.10.6-150400.1.1 updated
- elemental-init-recovery-0.10.6-150400.1.1 updated
- elemental-init-network-0.10.6-150400.1.1 updated
- elemental-init-live-0.10.6-150400.1.1 updated
- elemental-init-boot-assessment-0.10.6-150400.1.1 updated
- elemental-init-config-0.10.6-150400.1.1 updated
- elemental-toolkit-0.10.6-150400.1.1 updated
- elemental-1.1.4-150400.1.1 updated
- k9s-0.27.3-150400.1.1 updated
- container:micro-for-rancher-image-5.3.0-7.2.131 updated