SUSE-CU-2024:480-1: Security update of bci/dotnet-runtime

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/dotnet-runtime
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2024:480-1
Container Tags        : bci/dotnet-runtime:7.0 , bci/dotnet-runtime:7.0-22.19 , bci/dotnet-runtime:7.0.15 , bci/dotnet-runtime:7.0.15-22.19
Container Release     : 22.19
Severity              : moderate
Type                  : security
References            : 1107342 1215434 1218571 1219238 CVE-2023-7207 
-----------------------------------------------------------------

The container bci/dotnet-runtime was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2024:305-1
Released:    Thu Feb  1 17:33:38 2024
Summary:     Security update for cpio
Type:        security
Severity:    moderate
References:  1218571,1219238,CVE-2023-7207
This update for cpio fixes the following issues:

- Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 (bsc#1218571, bsc#1219238)

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2024:322-1
Released:    Fri Feb  2 15:13:26 2024
Summary:     Recommended update for aaa_base
Type:        recommended
Severity:    moderate
References:  1107342,1215434
This update for aaa_base fixes the following issues:

- Set JAVA_HOME correctly (bsc#1107342, bsc#1215434)


The following package changes have been done:

- cpio-2.13-150400.3.6.1 updated
- aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 updated
- container:sles15-image-15.0.0-36.11.2 updated