Stay Secure with the Latest Linux Advisories

security advisorysecurity updateimportant

SUSE: 2023:2344-1 Important Security Update For Elemental Builder Image

The container rancher/elemental-builder-image/5.3 was updated. The following patches have been included in this update:. SUSE Container Update Advisory: rancher/elemental-builder-image/5.3 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:2344-1 Container Tags : rancher/elemental-builder-image/5.3:0.3.1 , rancher/elemental-builder-image/5.3:0.3.1-5.5.8 , rancher/elemental-builder-image/5.3:latest Container Release : 5.5.8 Severity : important Type : security References : 1201627 1203141 1207410 1207534 1210164 1210593 1211230 1211231 1211232 1211233 1211430 1211795 1212260 1212623 CVE-2022-4304 CVE-2023-2650 CVE-2023-28319 CVE-2023-28320 CVE-2023-28321 CVE-2023-28322 CVE-2023-2953 ----------------------------------------------------------------- The container rancher/elemental-builder-image/5.3 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2224-1 Released: Wed May 17 09:53:54 2023 Summary: Security update for curl Type: security Severity: important References: 1211230,1211231,1211232,1211233,CVE-2023-28319,CVE-2023-28320,CVE-2023-28321,CVE-2023-28322 This update for curl adds the following feature: Update to version 8.0.1 (jsc#PED-2580) - CVE-2023-28319: use-after-free in SSH sha256 fingerprint check (bsc#1211230). - CVE-2023-28320: siglongjmp race condition (bsc#1211231). - CVE-2023-28321: IDN wildcard matching (bsc#1211232). - CVE-2023-28322: POST-after-PUT confusion (bsc#1211233). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:2240-1 Released: Wed May 17 19:56:54 2023 Summary: Recommended update for systemd Type: recommended Severity: moderate References: 1203141,1207410 This update for systemd fixes the following issues: -udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410) - Optimize when hundred workers claim the same symlink with the same priority (bsc#1203141) - Add nss-resolve and systemd-network to Packagehub-Subpackages (MSC-626) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:2317-1 Released: Tue May 30 14:01:22 2023 Summary: Recommended update for util-linux Type: recommended Severity: moderate References: 1210164 This update for util-linux fixes the following issue: - Add upstream patch to prevent possible performance degradation of libuuid (bsc#1210164) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:2333-1 Released: Wed May 31 09:01:28 2023 Summary: Recommended update for zlib Type: recommended Severity: moderate References: 1210593 This update for zlib fixes the following issue: - Fix function calling order to avoid crashes (bsc#1210593) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2342-1 Released: Thu Jun 1 11:34:20 2023 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1211430,CVE-2023-2650 This update for openssl-1_1 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2484-1 Released: Mon Jun 12 08:49:58 2023 Summary: Security update for openldap2 Type: security Severity: moderate References: 1211795,CVE-2023-2953 This update for openldap2 fixes the following issues: - CVE-2023-2953: Fixed null pointer deref in ber_memalloc_x (bsc#1211795). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:2625-1 Released: Fri Jun 23 17:16:11 2023 Summary: Recommended update for gcc12 Type: recommended Severity: moderate References: This update for gcc12 fixes the following issues: - Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204 * includes regression and other bug fixes - Speed up builds with --enable-link-serialization. - Update embedded newlib to version 4.2.0 ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2648-1 Released: Tue Jun 27 09:52:35 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1201627,1207534,CVE-2022-4304 This update for openssl-1_1 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534). - Update further expiring certificates that affect the testsuite (bsc#1201627). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:2797-1 Released: Fri Jul 7 16:32:57 2023 Summary: Recommended update for elemental, elemental-cli, elemental-operator, elemental-post-build-extract-iso, k9s Type: recommended Severity: moderate References: This update fixes the following issues: elemental: - Update version from 1.1.4 to 1.1.5: * Enable cloud-config from removable devices * Ensure names are unique for all stages * Do not compare versions from different repositories on upgrades * Include build-iso in OBS workflow * Add containerized ISO image elemental-cli: - Update version from 0.2.5 to 0.3.1: * Add multi-arch support for pulling images * Fix version command to proper show version and commit elemental-operator: - Update version from 1.2.2 to 1.2.5: * operator: Copy cloud-config file instead of its link * Add channel hook-failed delete policy * Include display name field on ManagedOSVersions * Add ISO type in ManagedOSVersions * Include elemental-teal-channel by default on chart install * Add tests for containerizedbase ISO and utilitie elemental-post-build-extract-iso: - Update ISO path to current containerized ISOs - Adapt generation script to rancher/elemental-cli#404 so it makes use of the proper paths in after-install hooks. - Add last project name element to image name. - Create a timestamped image name. k9s - Update to version 0.27.4: * Allow customization of log indicator toggles closes * Fixed an issue when views use saved context view by switching. * Fix for missing job annotations created from CronJob. * Roles are rendered using same colorer function from skin * Convert command to lowercase in the command palette * Allowing a few hard coded colors to be configurable * Add support for renaming contexts. * Fix accessing nil map. * Add missing help menu to 'one_dark' skin ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:2800-1 Released: Mon Jul 10 07:35:22 2023 Summary: Recommended update for openssl-1_1 Type: recommended Severity: moderate References: 1212623 This update for openssl-1_1 fixes the following issues: - Check the OCSP RESPONSE in openssl s_client command and terminate connection if a revoked certificate is found. [bsc#1212623] ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:2827-1 Released: Fri Jul 14 11:27:47 2023 Summary: Recommended update for libxml2 Type: recommended Severity: moderate References: This update for libxml2 fixes the following issues: - Build also for modern python version (jsc#PED-68) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:2855-1 Released: Mon Jul 17 16:35:21 2023 Summary: Recommended update for openldap2 Type: recommended Severity: moderate References: 1212260 This update for openldap2 fixes the following issues: - libldap2 crashes on ldap_sasl_bind_s (bsc#1212260) The following package changes have been done: -libldap-data-2.4.46-150200.14.17.1 updated - libuuid1-2.37.2-150400.8.17.1 updated - libudev1-249.16-150400.8.28.3 updated - libsmartcols1-2.37.2-150400.8.17.1 updated - libcap2-2.63-150400.3.3.1 updated - libblkid1-2.37.2-150400.8.17.1 updated - libaudit1-3.0.6-150400.4.10.1 updated - libfdisk1-2.37.2-150400.8.17.1 updated - libz1-1.2.11-150000.3.45.1 updated - libgcc_s1-12.3.0+git1204-150000.1.10.1 updated - libstdc++6-12.3.0+git1204-150000.1.10.1 updated - libxml2-2-2.9.14-150400.5.19.1 updated - libsystemd0-249.16-150400.8.28.3 updated - libopenssl1_1-1.1.1l-150400.7.45.1 updated - libopenssl1_1-hmac-1.1.1l-150400.7.45.1 updated - libldap-2_4-2-2.4.46-150200.14.17.1 updated - libmount1-2.37.2-150400.8.17.1 updated - libcurl4-8.0.1-150400.5.23.1 updated - util-linux-2.37.2-150400.8.17.1 updated - systemd-rpm-macros-11-7.27.1 updated - grub2-2.06-150400.11.25.1 updated - grub2-i386-pc-2.06-150400.11.25.1 updated - elemental-cli-0.3.1-150400.3.3.1 updated - container:suse-sle15-15.4-- added - container:sles15-image-15.0.0-27.14.60 removed . Crucial system enhancement for rancher/elemental-builder-image/5.3 entails vital fixes and suggested upgrades.. SUSE Container Update,rancher Elemental Builder Image,security patches. . Severity: Important. LinuxSecurity.com Team

Jul 20, 2023 •Important SuSE