Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:387-1 Important: BCI/OpenJDK DoS Security Update

suse
Calendar Grey February 17, 2023
Dist Suse Esm H88
SUSE Container Update Notification for bci/python provides critical security enhancements and resolutions for vulnerabilities related to injection attacks.
The container bci/openjdk was updated

Summary

Advisory ID: SUSE-SU-2023:434-1 Released: Thu Feb 16 09:08:05 2023 Summary: Security update for mozilla-nss Type: security Severity: important Advisory ID: SUSE-SU-2023:435-1 Released: Thu Feb 16 11:06:29 2023 Summary: Security update for java-17-openjdk Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory security update DoS important bci/openjdk

References

References : 1205916 1207246 1207248 1208138 CVE-2023-0767 CVE-2023-21835

CVE-2023-21843

1208138,CVE-2023-0767

This update for mozilla-nss fixes the following issues:

Updated to NSS 3.79.4 (bsc#1208138):

- CVE-2023-0767: Fixed handling of unknown PKCS#12 safe bag types.

1205916,1207246,1207248,CVE-2023-21835,CVE-2023-21843

This update for java-17-openjdk fixes the following issues:

Updated to version jdk-17.0.6.0+10:

- CVE-2023-21835: Fixed handshake DoS attack against DTLS connections (bsc#1207246).

- CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248).

Bugfixes:

- Avoid calling C_GetInfo() too early, before cryptoki is initialized (bsc#1205916).

The following package changes have been done:

- libfreebl3-3.79.4-150400.3.26.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:387-1
Container Tags : bci/openjdk:17 , bci/openjdk:17-12.18 , bci/openjdk:latest
Container Release : 12.18
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security update DoS important bci/openjdk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here