SUSE-CU-2024:2124-1: Security update of suse/sles12sp5

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sles12sp5
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2024:2124-1
Container Tags        : suse/sles12sp5:6.5.595 , suse/sles12sp5:latest
Container Release     : 6.5.595
Severity              : important
Type                  : security
References            : 1222992 1223423 1223424 1223425 CVE-2024-2961 CVE-2024-33599
                        CVE-2024-33600 CVE-2024-33601 CVE-2024-33602 
-----------------------------------------------------------------

The container suse/sles12sp5 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2024:1675-1
Released:    Fri May 17 09:52:43 2024
Summary:     Security update for glibc
Type:        security
Severity:    important
References:  1222992,1223423,1223424,1223425,CVE-2024-2961,CVE-2024-33599,CVE-2024-33600,CVE-2024-33601,CVE-2024-33602
This update for glibc fixes the following issues:

- nscd: Fixed use-after-free in addgetnetgrentX (BZ #23520)
- CVE-2024-33599: nscd: Fixed Stack-based buffer overflow in netgroup cache
  (bsc#1223423, BZ #31677)
- CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response
  (bsc#1223424, BZ #31678)
- CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX
  (bsc#1223424, BZ #31678)
- CVE-2024-33602: netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  bsc#1223425, BZ #31680)
- CVE-2024-33602; Use time_t for return type of addgetnetgrentX (bsc#1223425)
- CVE-2024-2961: iconv: ISO-2022-CN-EXT: Fixed out-of-bound writes when writing escape sequence (bsc#1222992)


The following package changes have been done:

- glibc-2.22-114.34.1 updated