SUSE-CU-2024:2862-1: Security update of suse/manager/4.3/proxy-tftpd

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/manager/4.3/proxy-tftpd
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2024:2862-1
Container Tags        : suse/manager/4.3/proxy-tftpd:4.3.12 , suse/manager/4.3/proxy-tftpd:4.3.12.9.42.11 , suse/manager/4.3/proxy-tftpd:latest
Container Release     : 9.42.11
Severity              : important
Type                  : security
References            : 1188441 1225551 1225912 CVE-2024-4741 
-----------------------------------------------------------------

The container suse/manager/4.3/proxy-tftpd was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2024:2085-1
Released:    Wed Jun 19 11:36:00 2024
Summary:     recommended update for python-requests
Type:        recommended
Severity:    moderate
References:  1225912
This update for python-requests fixes the following issue:

- Allow the usage of 'verify' parameter as a directory. (bsc#1225912)

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2024:2086-1
Released:    Wed Jun 19 11:48:24 2024
Summary:     Recommended update for gcc13
Type:        recommended
Severity:    moderate
References:  1188441
This update for gcc13 fixes the following issues:

Update to GCC 13.3 release

- Removed Fiji support from the GCN offload compiler as that is requiring
  Code Object version 3 which is no longer supported by llvm18.
- Avoid combine spending too much compile-time and memory doing nothing
  on s390x.  [bsc#1188441]
- Make requirement to lld version specific to avoid requiring the
  meta-package.

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2024:2089-1
Released:    Wed Jun 19 12:38:06 2024
Summary:     Security update for openssl-1_1
Type:        security
Severity:    important
References:  1225551,CVE-2024-4741
This update for openssl-1_1 fixes the following issues:

- CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)


The following package changes have been done:

- libgcc_s1-13.3.0+git8781-150000.1.12.1 updated
- libstdc++6-13.3.0+git8781-150000.1.12.1 updated
- libopenssl1_1-1.1.1l-150400.7.69.1 updated
- libopenssl1_1-hmac-1.1.1l-150400.7.69.1 updated
- openssl-1_1-1.1.1l-150400.7.69.1 updated
- python3-requests-2.25.1-150300.3.12.2 updated
- container:sles15-ltss-image-15.0.0-3.43 updated