SUSE-CU-2024:990-1: Security update of suse/nginx

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/nginx
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2024:990-1
Container Tags        : suse/nginx:1.21 , suse/nginx:1.21-10.29 , suse/nginx:latest
Container Release     : 10.29
Severity              : moderate
Type                  : security
References            : 1215377 1217445 1217589 1218866 
-----------------------------------------------------------------

The container suse/nginx was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2024:870-1
Released:    Wed Mar 13 13:05:14 2024
Summary:     Security update for glibc
Type:        security
Severity:    moderate
References:  1217445,1217589,1218866
This update for glibc fixes the following issues:

Security issues fixed:

- qsort: harden handling of degenerated / non transient compare function (bsc#1218866)

Other issues fixed:

- getaddrinfo: translate ENOMEM to EAI_MEMORY (bsc#1217589, BZ #31163)
- aarch64: correct CFI in rawmemchr (bsc#1217445, BZ #31113)

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2024:907-1
Released:    Fri Mar 15 08:57:38 2024
Summary:     Recommended update for audit
Type:        recommended
Severity:    moderate
References:  1215377
This update for audit fixes the following issue:

- Fix plugin termination when using systemd service units (bsc#1215377)


The following package changes have been done:

- glibc-2.31-150300.68.1 updated
- libaudit1-3.0.6-150400.4.16.1 updated
- container:sles15-image-15.0.0-36.11.13 updated
- aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 removed
- cpio-2.13-150400.3.6.1 removed
- file-magic-5.32-7.14.1 removed
- findutils-4.8.0-1.20 removed
- gzip-1.10-150200.10.1 removed
- libblkid1-2.37.4-150500.9.3.1 removed
- libbrotlicommon1-1.0.7-3.3.1 removed
- libbrotlidec1-1.0.7-3.3.1 removed
- libcap-ng0-0.7.9-4.37 removed
- libcurl4-8.0.1-150400.5.41.1 removed
- libdw1-0.185-150400.5.3.1 removed
- libelf1-0.185-150400.5.3.1 removed
- libfdisk1-2.37.4-150500.9.3.1 removed
- libidn2-0-2.2.0-3.6.1 removed
- libldap-2_4-2-2.4.46-150200.14.17.1 removed
- libldap-data-2.4.46-150200.14.17.1 removed
- liblua5_3-5-5.3.6-3.6.1 removed
- liblz4-1-1.9.3-150400.1.7 removed
- libmagic1-5.32-7.14.1 removed
- libmount1-2.37.4-150500.9.3.1 removed
- libnghttp2-14-1.40.0-150200.12.1 removed
- libpopt0-1.16-3.22 removed
- libpsl5-0.20.1-150000.3.3.1 removed
- libsasl2-3-2.1.28-150500.1.1 removed
- libsmartcols1-2.37.4-150500.9.3.1 removed
- libssh-config-0.9.8-150400.3.3.1 removed
- libssh4-0.9.8-150400.3.3.1 removed
- libsystemd0-249.17-150400.8.40.1 removed
- libunistring2-0.9.10-1.1 removed
- libutempter0-1.1.6-3.42 removed
- libzstd1-1.5.0-150400.3.3.1 removed
- ncurses-utils-6.1-150000.5.20.1 removed
- rpm-config-SUSE-1-150400.14.3.1 removed
- rpm-ndb-4.14.3-150400.59.7.1 removed
- sed-4.4-11.6 removed
- sles-release-15.5-150500.43.4 removed
- system-group-hardware-20170617-150400.24.2.1 removed
- tar-1.34-150000.3.34.1 removed
- timezone-2023c-150000.75.23.1 removed
- util-linux-2.37.4-150500.9.3.1 removed