SUSE-CU-2025:1027-1: Security update of bci/kiwi
sle-container-updates at lists.suse.com
sle-container-updates at lists.suse.com
Tue Feb 18 08:29:04 UTC 2025
SUSE Container Update Advisory: bci/kiwi
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:1027-1
Container Tags : bci/kiwi:9 , bci/kiwi:9.24 , bci/kiwi:9.24.43 , bci/kiwi:9.24.43-21.10 , bci/kiwi:latest
Container Release : 21.10
Severity : important
Type : security
References : 1236878 CVE-2024-12133
-----------------------------------------------------------------
The container bci/kiwi was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:548-1
Released: Fri Feb 14 11:19:24 2025
Summary: Security update for libtasn1
Type: security
Severity: important
References: 1236878,CVE-2024-12133
This update for libtasn1 fixes the following issues:
- CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes
quadratic time to complete. (bsc#1236878)
The following package changes have been done:
- libudev1-254.23-150600.4.25.1 updated
- libtasn1-6-4.13-150000.4.11.1 updated
- libtasn1-4.13-150000.4.11.1 updated
- container:registry.suse.com-bci-bci-base-15.6-0c6d74fef64f7b31b2d76ef5c680996683b3d3118bcaf008a2fe22e293abe486-0 updated
More information about the sle-container-updates
mailing list