Stay Secure with the Latest Linux Advisories

security advisorySUSElibX11

SUSE: 2022:3027-2 Mild: Bci/Openjdk-Dev Container Enhancement

The container bci/openjdk-devel was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2022:3027-1 Container Tags : bci/openjdk-devel:11 , bci/openjdk-devel:11-36.63 , bci/openjdk-devel:latest Container Release : 36.63 Severity : moderate Type : security References : 1203459 1204179 1204422 1204425 1204968 CVE-2022-3554 CVE-2022-3555 CVE-2022-36033 CVE-2022-3821 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3986-1 Released: Tue Nov 15 12:57:41 2022 Summary: Security update for libX11 Type: security Severity: moderate References: 1204422,1204425,CVE-2022-3554,CVE-2022-3555 This update for libX11 fixes the following issues: - CVE-2022-3554: Fixed memory leak in XRegisterIMInstantiateCallback() (bsc#1204422). - CVE-2022-3555: Fixed memory leak in _XFreeX11XCBStructure() (bsc#1204425). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3999-1 Released: Tue Nov 15 17:08:04 2022 Summary: Security update for systemd Type: security Severity: moderate References: 1204179,1204968,CVE-2022-3821 This update for systemd fixes the following issues: - CVE-2022-3821: Fixed buffer overrun in format_timespan() function (bsc#1204968). - Import commit 0cd50eedcc0692c1f907b24424215f8db7d3b428 * 0469b9f2bc pstore: do not try to load all known pstore modules * ad05f54439 pstore: Run after modules are loaded * ccad817445 core: Add trigger limit for path units * 281d818fe3 core/mount: also add default before dependency for automount mount units * ffe5b4afa8 logind: fix crash in logind onuser-specified message string - Document udev naming scheme (bsc#1204179) - Make 'sle15-sp3' net naming scheme still available for backward compatibility reason ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:4011-1 Released: Wed Nov 16 11:29:09 2022 Summary: Security update for jsoup Type: security Severity: moderate References: 1203459,CVE-2022-36033 This update for jsoup fixes the following issues: Updated to version 1.15.3: - CVE-2022-36033: Fixed incorrect sanitization of user input in SafeList.preserveRelativeLinks (bsc#1203459). The following package changes have been done: - libudev1-249.12-150400.8.13.1 updated - libsystemd0-249.12-150400.8.13.1 updated - libX11-data-1.6.5-150000.3.24.1 updated - libX11-6-1.6.5-150000.3.24.1 updated - jsoup-1.15.3-150200.3.6.1 updated - container:bci-openjdk-11-15.4-32.29 updated . Recent updates for bci/openjdk-devel address several vulnerabilities affecting the SUSE Container. Ensure your environment remains safe with these crucial patches.. bci/openjdk-devel, Container Security, SUSE Patches, libX11 Fixes. . LinuxSecurity.com Team

Nov 18, 2022 SuSE