SUSE Container Update Advisory: bci/openjdk
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2023:387-1
Container Tags        : bci/openjdk:17 , bci/openjdk:17-12.18 , bci/openjdk:latest
Container Release     : 12.18
Severity              : important
Type                  : security
References            : 1205916 1207246 1207248 1208138 CVE-2023-0767 CVE-2023-21835
                        CVE-2023-21843 
-----------------------------------------------------------------

The container bci/openjdk was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:434-1
Released:    Thu Feb 16 09:08:05 2023
Summary:     Security update for mozilla-nss
Type:        security
Severity:    important
References:  1208138,CVE-2023-0767
This update for mozilla-nss fixes the following issues:

  Updated to NSS 3.79.4 (bsc#1208138):

  - CVE-2023-0767: Fixed handling of unknown PKCS#12 safe bag types.

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:435-1
Released:    Thu Feb 16 11:06:29 2023
Summary:     Security update for java-17-openjdk
Type:        security
Severity:    moderate
References:  1205916,1207246,1207248,CVE-2023-21835,CVE-2023-21843
This update for java-17-openjdk fixes the following issues:

  Updated to version jdk-17.0.6.0+10:

  - CVE-2023-21835: Fixed handshake DoS attack against DTLS connections (bsc#1207246).
  - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248).

  Bugfixes:

  - Avoid calling C_GetInfo() too early, before cryptoki is initialized (bsc#1205916).



The following package changes have been done:

- libfreebl3-3.79.4-150400.3.26.1 updated
- libfreebl3-hmac-3.79.4-150400.3.26.1 updated
- mozilla-nss-certs-3.79.4-150400.3.26.1 updated
- libsoftokn3-3.79.4-150400.3.26.1 updated
- mozilla-nss-3.79.4-150400.3.26.1 updated
- libsoftokn3-hmac-3.79.4-150400.3.26.1 updated
- java-17-openjdk-headless-17.0.6.0-150400.3.12.1 updated
- java-17-openjdk-17.0.6.0-150400.3.12.1 updated

SUSE: 2023:387-1 bci/openjdk Security Update

February 17, 2023
The container bci/openjdk was updated

Summary

Advisory ID: SUSE-SU-2023:434-1 Released: Thu Feb 16 09:08:05 2023 Summary: Security update for mozilla-nss Type: security Severity: important Advisory ID: SUSE-SU-2023:435-1 Released: Thu Feb 16 11:06:29 2023 Summary: Security update for java-17-openjdk Type: security Severity: moderate

References

References : 1205916 1207246 1207248 1208138 CVE-2023-0767 CVE-2023-21835

CVE-2023-21843

1208138,CVE-2023-0767

This update for mozilla-nss fixes the following issues:

Updated to NSS 3.79.4 (bsc#1208138):

- CVE-2023-0767: Fixed handling of unknown PKCS#12 safe bag types.

1205916,1207246,1207248,CVE-2023-21835,CVE-2023-21843

This update for java-17-openjdk fixes the following issues:

Updated to version jdk-17.0.6.0+10:

- CVE-2023-21835: Fixed handshake DoS attack against DTLS connections (bsc#1207246).

- CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248).

Bugfixes:

- Avoid calling C_GetInfo() too early, before cryptoki is initialized (bsc#1205916).

The following package changes have been done:

- libfreebl3-3.79.4-150400.3.26.1 updated

- libfreebl3-hmac-3.79.4-150400.3.26.1 updated

- mozilla-nss-certs-3.79.4-150400.3.26.1 updated

- libsoftokn3-3.79.4-150400.3.26.1 updated

- mozilla-nss-3.79.4-150400.3.26.1 updated

- libsoftokn3-hmac-3.79.4-150400.3.26.1 updated

- java-17-openjdk-headless-17.0.6.0-150400.3.12.1 updated

- java-17-openjdk-17.0.6.0-150400.3.12.1 updated

Severity
Container Advisory ID : SUSE-CU-2023:387-1
Container Tags : bci/openjdk:17 , bci/openjdk:17-12.18 , bci/openjdk:latest
Container Release : 12.18
Severity : important
Type : security

Related News

19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
11.Locks IsometricPattern Esm H320
2 - 3 min read
Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved