SUSE-CU-2020:548-1: Security update of suse/sles12sp3

[sle-security-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sles12sp3
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2020:548-1
Container Tags        : suse/sles12sp3:2.0.2 , suse/sles12sp3:24.215 , suse/sles12sp3:latest
Container Release     : 24.215
Severity              : important
Type                  : security
References            : 1170347 1176410 1176759 1177143 CVE-2020-25219 CVE-2020-26154
-----------------------------------------------------------------

The container suse/sles12sp3 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2020:2897-1
Released:    Tue Oct 13 14:00:25 2020
Summary:     Recommended update for suse-build-key
Type:        recommended
Severity:    moderate
References:  1170347,1176759
This update for suse-build-key fixes the following issues:

- This update extends the suse build key (bsc#1176759)
- The SUSE container key is different from the build key. (PM-1845 bsc#1170347)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2020:2900-1
Released:    Tue Oct 13 14:20:15 2020
Summary:     Security update for libproxy
Type:        security
Severity:    important
References:  1176410,1177143,CVE-2020-25219,CVE-2020-26154
This update for libproxy fixes the following issues:

- CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
- CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).