SUSE-CU-2023:4181-1: Security update of suse/nginx

[sle-security-updates at lists.suse.com]

SUSE Container Update Advisory: suse/nginx
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2023:4181-1
Container Tags        : suse/nginx:1.21 , suse/nginx:1.21-5.59 , suse/nginx:latest
Container Release     : 5.59
Severity              : important
Type                  : security
References            : 1199483 1210231 1211478 1212398 1214680 CVE-2022-1622 CVE-2022-40090
                        CVE-2023-1916 CVE-2023-26965 CVE-2023-2731 
-----------------------------------------------------------------

The container suse/nginx was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:4869-1
Released:    Thu Dec 14 16:26:23 2023
Summary:     Security update for tiff
Type:        security
Severity:    important
References:  1199483,1210231,1211478,1212398,1214680,CVE-2022-1622,CVE-2022-40090,CVE-2023-1916,CVE-2023-26965,CVE-2023-2731
This update for tiff fixes the following issues:

- CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478).
- CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231).
- CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398).
- CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).


The following package changes have been done:

- libtiff5-4.0.9-150000.45.35.1 updated