SUSE-CU-2023:385-1: Security update of bci/openjdk-devel

sle-security-updates at sle-security-updates at
Fri Feb 17 08:09:41 UTC 2023

SUSE Container Update Advisory: bci/openjdk-devel
Container Advisory ID : SUSE-CU-2023:385-1
Container Tags        : bci/openjdk-devel:17 , bci/openjdk-devel:17-13.36 , bci/openjdk-devel:latest
Container Release     : 13.36
Severity              : important
Type                  : security
References            : 1205916 1207246 1207248 1208138 CVE-2023-0767 CVE-2023-21835

The container bci/openjdk-devel was updated. The following patches have been included in this update:

Advisory ID: SUSE-SU-2023:434-1
Released:    Thu Feb 16 09:08:05 2023
Summary:     Security update for mozilla-nss
Type:        security
Severity:    important
References:  1208138,CVE-2023-0767
This update for mozilla-nss fixes the following issues:

  Updated to NSS 3.79.4 (bsc#1208138):

  - CVE-2023-0767: Fixed handling of unknown PKCS#12 safe bag types.

Advisory ID: SUSE-SU-2023:435-1
Released:    Thu Feb 16 11:06:29 2023
Summary:     Security update for java-17-openjdk
Type:        security
Severity:    moderate
References:  1205916,1207246,1207248,CVE-2023-21835,CVE-2023-21843
This update for java-17-openjdk fixes the following issues:

  Updated to version jdk-

  - CVE-2023-21835: Fixed handshake DoS attack against DTLS connections (bsc#1207246).
  - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248).


  - Avoid calling C_GetInfo() too early, before cryptoki is initialized (bsc#1205916).

The following package changes have been done:

- libfreebl3-3.79.4-150400.3.26.1 updated
- libfreebl3-hmac-3.79.4-150400.3.26.1 updated
- mozilla-nss-certs-3.79.4-150400.3.26.1 updated
- libsoftokn3-3.79.4-150400.3.26.1 updated
- mozilla-nss-3.79.4-150400.3.26.1 updated
- libsoftokn3-hmac-3.79.4-150400.3.26.1 updated
- java-17-openjdk-headless- updated
- java-17-openjdk- updated
- java-17-openjdk-devel- updated
- container:bci-openjdk-17-15.4.17-12.18 updated

More information about the sle-security-updates mailing list