Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE Container Update: 2023:1521-1 Important: bci/openjdk Security Update

suse
Calendar Grey May 11, 2023
Scroller Suse
SUSE has launched a significant update for its bci/openjdk containers, featuring crucial security updates and performance boosts to enhance user security
The container bci/openjdk was updated

Summary

Advisory ID: SUSE-SU-2023:2110-1 Released: Fri May 5 14:10:21 2023 Summary: Security update for java-17-openjdk Type: security Severity: important Advisory ID: SUSE-SU-2023:2111-1 Released: Fri May 5 14:34:00 2023 Summary: Security update for ncurses Type: security Severity: moderate Advisory ID: SUSE-RU-2023:2133-1 Released: Tue May 9 13:37:10 2023 Summary: Recommended update for zlib Type: recommended

References

References : 1206513 1209333 1210434 1210628 1210631 1210632 1210634 1210635

1210636 1210637 CVE-2023-21930 CVE-2023-21937 CVE-2023-21938

CVE-2023-21939 CVE-2023-21954 CVE-2023-21967 CVE-2023-21968 CVE-2023-29491

1209333,1210628,1210631,1210632,1210634,1210635,1210636,1210637,CVE-2023-21930,CVE-2023-21937,CVE-2023-21938,CVE-2023-21939,CVE-2023-21954,CVE-2023-21967,CVE-2023-21968

This update for java-17-openjdk fixes the following issues:

Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)

Security fixes:

- CVE-2023-21930: Fixed AES support (bsc#1210628).

- CVE-2023-21937: Fixed String platform support (bsc#1210631).

- CVE-2023-21938: Fixed runtime support (bsc#1210632).

- CVE-2023-21939: Fixed Swing platform support (bsc#1210634).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:1521-1
Container Tags : bci/openjdk:17 , bci/openjdk:17-13.50 , bci/openjdk:latest
Container Release : 13.50
Severity : important
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.