SUSE-CU-2024:5758-1: Security update of containers/open-webui

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: containers/open-webui
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2024:5758-1
Container Tags        : containers/open-webui:0.3 , containers/open-webui:0.3.32 , containers/open-webui:0.3.32-4.6
Container Release     : 4.6
Severity              : important
Type                  : security
References            : 1226138 1232579 1233046 CVE-2024-37568 CVE-2024-50602 
-----------------------------------------------------------------

The container containers/open-webui was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2024:2064-1
Released:    Tue Jun 18 13:14:31 2024
Summary:     Security update for python-Authlib
Type:        security
Severity:    important
References:  1226138,CVE-2024-37568
This update for python-Authlib fixes the following issues:

- Update to version 1.3.1
- CVE-2024-37568: Fixed algorithm confusion with asymmetric public keys. (bsc#1226138)

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2024:3992-1
Released:    Fri Nov 15 06:06:14 2024
Summary:     Recommended update for libvdpau
Type:        recommended
Severity:    important
References:  1233046
This update for libvdpau fixes the following issues:

- Add libvdpau1-32bit to Desktop Applications 15-SP5 and 15-SP6 (bsc#1233046)
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2024:4035-1
Released:    Mon Nov 18 16:22:57 2024
Summary:     Security update for expat
Type:        security
Severity:    moderate
References:  1232579,CVE-2024-50602
This update for expat fixes the following issues:

- CVE-2024-50602: Fixed a denial of service via XML_ResumeParser (bsc#1232579).


The following package changes have been done:

- libexpat1-2.4.4-150400.3.25.1 updated
- libprotobuf25_5_0-25.5-150600.2.9 updated
- python311-protobuf-4.25.5-150600.2.9 updated
- python311-certifi-2024.7.4-150600.1.8 updated
- python311-cchardet-2.1.19-150600.1.5 updated
- libvdpau1-1.1.1-150000.3.6.1 updated
- python311-numpy1-1.26.4-150600.1.7 updated
- python311-scipy-1.14.1-150600.1.3 updated
- python311-pandas-2.2.3-150600.1.3 updated
- python311-chroma-hnswlib-0.7.6-150600.2.1 updated
- python311-pyarrow-17.0.0-150600.2.5 updated
- python311-scikit-learn-1.5.1-150600.1.3 updated
- python311-Authlib-1.3.1-150600.3.3.1 updated
- python311-open-webui-0.3.32-150600.1.12 updated
- binutils-2.43-150100.7.49.1 removed
- cpp-7-3.9.1 removed
- cpp7-7.5.0+r278197-150000.4.41.1 removed
- gcc-7-3.9.1 removed
- gcc-c++-7-3.9.1 removed
- gcc7-7.5.0+r278197-150000.4.41.1 removed
- gcc7-c++-7.5.0+r278197-150000.4.41.1 removed
- glibc-devel-2.38-150600.14.14.2 removed
- libasan4-7.5.0+r278197-150000.4.41.1 removed
- libatomic1-14.2.0+git10526-150000.1.6.1 removed
- libcilkrts5-7.5.0+r278197-150000.4.41.1 removed
- libctf-nobfd0-2.43-150100.7.49.1 removed
- libctf0-2.43-150100.7.49.1 removed
- libisl15-0.18-1.443 removed
- libitm1-14.2.0+git10526-150000.1.6.1 removed
- liblsan0-14.2.0+git10526-150000.1.6.1 removed
- libmpx2-8.2.1+r264010-150000.1.6.4 removed
- libmpxwrappers2-8.2.1+r264010-150000.1.6.4 removed
- libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.41.1 removed
- libtsan0-11.3.0+git1637-150000.1.11.2 removed
- libubsan0-7.5.0+r278197-150000.4.41.1 removed
- libxcrypt-devel-4.4.15-150300.4.7.1 removed
- linux-glibc-devel-6.4-150600.2.17 removed