SUSE-CU-2025:1148-1: Security update of suse/manager/4.3/proxy-salt-broker

sle-container-updates at lists.suse.com sle-container-updates at lists.suse.com
Wed Feb 19 13:10:06 UTC 2025


SUSE Container Update Advisory: suse/manager/4.3/proxy-salt-broker
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:1148-1
Container Tags        : suse/manager/4.3/proxy-salt-broker:4.3.14 , suse/manager/4.3/proxy-salt-broker:4.3.14.9.50.27 , suse/manager/4.3/proxy-salt-broker:latest
Container Release     : 9.50.27
Severity              : important
Type                  : security
References            : 1236282 1236705 1236878 CVE-2024-12133 CVE-2025-0395 CVE-2025-0938
-----------------------------------------------------------------

The container suse/manager/4.3/proxy-salt-broker was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:548-1
Released:    Fri Feb 14 11:19:24 2025
Summary:     Security update for libtasn1
Type:        security
Severity:    important
References:  1236878,CVE-2024-12133
This update for libtasn1 fixes the following issues:

- CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes
  quadratic time to complete. (bsc#1236878)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:554-1
Released:    Fri Feb 14 16:10:40 2025
Summary:     Security update for python3
Type:        security
Severity:    moderate
References:  1236705,CVE-2025-0938
This update for python3 fixes the following issues:

- CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:562-1
Released:    Mon Feb 17 12:43:41 2025
Summary:     Security update for glibc
Type:        security
Severity:    low
References:  1236282,CVE-2025-0395
This update for glibc fixes the following issues:

- CVE-2025-0395: Fix underallocation of abort_msg_s struct (bsc#1236282)


The following package changes have been done:

- glibc-2.31-150300.92.1 updated
- libtasn1-6-4.13-150000.4.11.1 updated
- libtasn1-4.13-150000.4.11.1 updated
- libpython3_6m1_0-3.6.15-150300.10.81.1 updated
- python3-base-3.6.15-150300.10.81.1 updated
- python3-3.6.15-150300.10.81.1 updated
- container:sles15-ltss-image-15.4.0-2.24 updated


More information about the sle-container-updates mailing list