SUSE-CU-2024:2860-1: Security update of suse/manager/4.3/proxy-salt-broker

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/manager/4.3/proxy-salt-broker
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2024:2860-1
Container Tags        : suse/manager/4.3/proxy-salt-broker:4.3.12 , suse/manager/4.3/proxy-salt-broker:4.3.12.9.42.21 , suse/manager/4.3/proxy-salt-broker:latest
Container Release     : 9.42.21
Severity              : important
Type                  : security
References            : 1188441 1222086 1223430 1223766 1224242 1225551 CVE-2024-4741
-----------------------------------------------------------------

The container suse/manager/4.3/proxy-salt-broker was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 33664
Released:    Thu Jun 13 21:03:11 2024
Summary:     Recommended update for libsolv, libzypp, zypper, PackageKit-branding-SLE, PackageKit, libyui, yast2-pkg-bindings
Type:        recommended
Severity:    important
References:  1222086,1223430,1223766,1224242
This update for libsolv, libzypp, zypper, PackageKit-branding-SLE, PackageKit, libyui, yast2-pkg-bindings fixes the following issues:

- Fix the dependency for Packagekit-backend-zypp in SUMa 4.3 (bsc#1224242)
- Improve updating of installed multiversion packages
- Fix decision introspection going into an endless loop in some cases
- Split libsolv-tools into libsolv-tools-base [jsc#PED-8153]
- Improve checks against corrupt rpm
- Fixed check for outdated repo metadata as non-root user (bsc#1222086)
- Add ZYPP_API for exported functions and switch to visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- Fix download from gpgkey URL (bsc#1223430)
- Delay zypp lock until command options are parsed (bsc#1223766)
- Unify message format

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2024:2086-1
Released:    Wed Jun 19 11:48:24 2024
Summary:     Recommended update for gcc13
Type:        recommended
Severity:    moderate
References:  1188441
This update for gcc13 fixes the following issues:

Update to GCC 13.3 release

- Removed Fiji support from the GCN offload compiler as that is requiring
  Code Object version 3 which is no longer supported by llvm18.
- Avoid combine spending too much compile-time and memory doing nothing
  on s390x.  [bsc#1188441]
- Make requirement to lld version specific to avoid requiring the
  meta-package.

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2024:2089-1
Released:    Wed Jun 19 12:38:06 2024
Summary:     Security update for openssl-1_1
Type:        security
Severity:    important
References:  1225551,CVE-2024-4741
This update for openssl-1_1 fixes the following issues:

- CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)


The following package changes have been done:

- libgcc_s1-13.3.0+git8781-150000.1.12.1 updated
- libstdc++6-13.3.0+git8781-150000.1.12.1 updated
- libopenssl1_1-1.1.1l-150400.7.69.1 updated
- libopenssl1_1-hmac-1.1.1l-150400.7.69.1 updated
- libsolv-tools-base-0.7.29-150400.3.22.4 added
- libsolv-tools-0.7.29-150400.3.22.4 updated
- libzypp-17.34.1-150400.3.71.7 updated
- zypper-1.14.73-150400.3.50.10 updated
- openssl-1_1-1.1.1l-150400.7.69.1 updated
- container:sles15-ltss-image-15.0.0-3.43 updated
- liblz4-1-1.9.3-150400.1.7 removed
- libprocps8-3.3.17-150000.7.37.1 removed
- libsystemd0-249.17-150400.8.40.1 removed
- procps-3.3.17-150000.7.37.1 removed