SUSE-CU-2023:3183-1: Security update of bci/openjdk-devel
sle-security-updates at lists.suse.com
sle-security-updates at lists.suse.com
Fri Sep 29 07:09:50 UTC 2023
SUSE Container Update Advisory: bci/openjdk-devel
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2023:3183-1
Container Tags : bci/openjdk-devel:17 , bci/openjdk-devel:17-11.6 , bci/openjdk-devel:latest
Container Release : 11.6
Severity : important
Type : security
References : 1211829 1212819 1212910 1215026 CVE-2023-38039
-----------------------------------------------------------------
The container bci/openjdk-devel was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:3814-1
Released: Wed Sep 27 18:08:17 2023
Summary: Recommended update for glibc
Type: recommended
Severity: moderate
References: 1211829,1212819,1212910
This update for glibc fixes the following issues:
- nscd: Fix netlink cache invalidation if epoll is used (bsc#1212910, BZ #29415)
- Restore lookup of IPv4 mapped addresses in files database (bsc#1212819, BZ #25457)
- elf: Remove excessive p_align check on PT_LOAD segments (bsc#1211829, BZ #28688)
- elf: Properly align PT_LOAD segments (bsc#1211829, BZ #28676)
- ld.so: Always use MAP_COPY to map the first segment (BZ #30452)
- add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:3823-1
Released: Wed Sep 27 18:42:38 2023
Summary: Security update for curl
Type: security
Severity: important
References: 1215026,CVE-2023-38039
This update for curl fixes the following issues:
- CVE-2023-38039: Fixed possible DoS when receiving too large HTTP header. (bsc#1215026)
The following package changes have been done:
- glibc-2.31-150300.58.1 updated
- libcurl4-8.0.1-150400.5.29.1 updated
- container:bci-openjdk-17-15.5.17-11.3 updated
More information about the sle-security-updates
mailing list