Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2023:2799-1 Moderate: bci/bci-init Security Update

suse
Calendar Grey September 1, 2023
Dist Suse Esm H88
SUSE refreshes the bci/bci-init image by applying medium-level security fixes to bolster general protection.
The container bci/bci-init was updated

Summary

Advisory ID: SUSE-SU-2023:3397-1 Released: Wed Aug 23 18:35:56 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate Advisory ID: SUSE-RU-2023:3410-1 Released: Thu Aug 24 06:56:32 2023 Summary: Recommended update for audit Type: recommended Severity: moderate Advisory ID: SUSE-RU-2023:3451-1 Released: Mon Aug 28 12:15:22 2023 Summary: Recommended update for systemd

Topics%20covered

Topics Covered

security advisory security update moderate severity recommended update container advisory bci/bci-init openss1-1

References

References : 1186606 1194609 1201519 1204844 1208194 1209741 1210702 1211576

1212434 1213185 1213517 1213575 1213853 1213873 1214071 CVE-2023-3817

1213517,1213853,CVE-2023-3817

This update for openssl-1_1 fixes the following issues:

- CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)

- Don't pass zero length input to EVP_Cipher because s390x assembler optimized AES cannot handle zero size. (bsc#1213517)

1201519,1204844

This update for audit fixes the following issues:

- Create symbolic link from /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519)

- Fix rules not loaded when restarting auditd.service (bsc#1204844)

1186606,1194609,1208194,1209741,1210702,1211576,1212434,1213185,1213575,1213873

Container Advisory ID : SUSE-CU-2023:2799-1
Container Tags : bci/bci-init:15.4 , bci/bci-init:15.4.29.45
Container Release : 29.45
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory security update moderate severity recommended update container advisory bci/bci-init openss1-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here