SUSE-CU-2023:1230-1: Security update of rancher/elemental-teal/5.3
sle-updates at lists.suse.com
sle-updates at lists.suse.com
Sat Apr 22 07:02:28 UTC 2023
SUSE Container Update Advisory: rancher/elemental-teal/5.3
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2023:1230-1
Container Tags : rancher/elemental-teal/5.3:1.1.4 , rancher/elemental-teal/5.3:1.1.4-3.2.6 , rancher/elemental-teal/5.3:latest
Container Release : 3.2.6
Severity : important
Type : security
References : 1184124 1206195 1206439 1207571 1207957 1207975 1208079 1208358
1208432 1209188 1209624 1209873 1209878 CVE-2023-0464 CVE-2023-0465
CVE-2023-0466 CVE-2023-0687
-----------------------------------------------------------------
The container rancher/elemental-teal/5.3 was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2021:2179-1
Released: Mon Jun 28 17:36:37 2021
Summary: Recommended update for thin-provisioning-tools
Type: recommended
Severity: moderate
References: 1184124
This update for thin-provisioning-tools fixes the following issues:
- Link as position-independent executable (bsc#1184124)
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:1717-1
Released: Fri Mar 31 15:18:35 2023
Summary: Security update for grub2
Type: security
Severity: moderate
References: 1209188
This update of grub2 fixes the following issues:
- rebuild the package with the new secure boot key (bsc#1209188).
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:1718-1
Released: Fri Mar 31 15:47:34 2023
Summary: Security update for glibc
Type: security
Severity: moderate
References: 1207571,1207957,1207975,1208358,CVE-2023-0687
This update for glibc fixes the following issues:
Security issue fixed:
- CVE-2023-0687: Fix allocated buffer overflow in gmon (bsc#1207975)
Other issues fixed:
- Fix avx2 strncmp offset compare condition check (bsc#1208358)
- elf: Allow dlopen of filter object to work (bsc#1207571)
- powerpc: Fix unrecognized instruction errors with recent GCC
- x86: Cache computation for AMD architecture (bsc#1207957)
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:1745-1
Released: Tue Apr 4 09:05:23 2023
Summary: Security update for openssl-1_1
Type: security
Severity: moderate
References: 1209624,CVE-2023-0464
This update for openssl-1_1 fixes the following issues:
- CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:1779-1
Released: Thu Apr 6 08:16:58 2023
Summary: Recommended update for systemd
Type: recommended
Severity: moderate
References: 1208432
This update for systemd fixes the following issues:
- Fix return non-zero value when disabling SysVinit service (bsc#1208432)
- Drop build requirement on libpci, it's not no longer needed
- Move systemd-boot and all components managing (secure) UEFI boot into udev
sub-package, so they aren't installed in systemd based containers
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:1805-1
Released: Tue Apr 11 10:12:41 2023
Summary: Recommended update for timezone
Type: recommended
Severity: important
References:
This update for timezone fixes the following issues:
- Version update from 2022g to 2023c:
* Egypt now uses DST again, from April through October.
* This year Morocco springs forward April 23, not April 30.
* Palestine delays the start of DST this year.
* Much of Greenland still uses DST from 2024 on.
* America/Yellowknife now links to America/Edmonton.
* tzselect can now use current time to help infer timezone.
* The code now defaults to C99 or later.
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:1880-1
Released: Tue Apr 18 11:11:27 2023
Summary: Recommended update for systemd-rpm-macros
Type: recommended
Severity: low
References: 1208079
This update for systemd-rpm-macros fixes the following issue:
- Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not present as it's expected (bsc#1208079).
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:1885-1
Released: Tue Apr 18 11:15:17 2023
Summary: Recommended update for dracut
Type: recommended
Severity: moderate
References: 1206195,1206439
This update for dracut fixes the following issues:
- Update to version 055+suse.335.gccf7fbc6:
* Always include all drivers that LVM can use (bsc#1206195)
* Require libopenssl1_1-hmac for dracut-fips (bsc#1206439)
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:1911-1
Released: Wed Apr 19 13:02:33 2023
Summary: Security update for openssl-1_1
Type: security
Severity: moderate
References: 1209873,1209878,CVE-2023-0465,CVE-2023-0466
This update for openssl-1_1 fixes the following issues:
- CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878).
- CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).
The following package changes have been done:
- glibc-2.31-150300.46.1 updated
- libudev1-249.16-150400.8.25.7 updated
- libaio1-0.3.109-1.25 added
- libsystemd0-249.16-150400.8.25.7 updated
- liblvm2cmd2_03-2.03.05-150400.185.1 added
- libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1 added
- elemental-dracut-config-0.10.6-150400.1.1 updated
- elemental-grub-config-0.10.6-150400.1.1 updated
- elemental-immutable-rootfs-0.10.6-150400.1.1 updated
- elemental-register-1.2.2-150400.1.1 updated
- elemental-support-1.2.2-150400.1.1 updated
- elemental-system-agent-0.3.2-150400.1.1 updated
- elemental-updater-1.1.4-150400.1.1 updated
- timezone-2023c-150000.75.23.1 updated
- thin-provisioning-tools-0.7.5-3.3.1 added
- systemd-rpm-macros-12-150000.7.30.1 updated
- device-mapper-2.03.05_1.02.163-150400.185.1 added
- grub2-2.06-150400.11.25.1 updated
- grub2-i386-pc-2.06-150400.11.25.1 updated
- glibc-locale-base-2.31-150300.46.1 updated
- libopenssl1_1-1.1.1l-150400.7.34.1 updated
- systemd-249.16-150400.8.25.7 updated
- libnm0-1.38.2-150400.3.2.3 updated
- udev-249.16-150400.8.25.7 updated
- systemd-sysvinit-249.16-150400.8.25.7 updated
- dracut-055+suse.335.gccf7fbc6-150400.3.19.1 updated
- lvm2-2.03.05-150400.185.1 added
- kernel-firmware-usb-network-20220509-150400.4.13.1 added
- kernel-firmware-realtek-20220509-150400.4.13.1 added
- kernel-firmware-qlogic-20220509-150400.4.13.1 added
- kernel-firmware-platform-20220509-150400.4.13.1 added
- kernel-firmware-network-20220509-150400.4.13.1 added
- kernel-firmware-mellanox-20220509-150400.4.13.1 added
- kernel-firmware-mediatek-20220509-150400.4.13.1 added
- kernel-firmware-marvell-20220509-150400.4.13.1 added
- kernel-firmware-liquidio-20220509-150400.4.13.1 added
- kernel-firmware-iwlwifi-20220509-150400.4.13.1 added
- kernel-firmware-intel-20220509-150400.4.13.1 added
- kernel-firmware-i915-20220509-150400.4.13.1 added
- kernel-firmware-chelsio-20220509-150400.4.13.1 added
- kernel-firmware-bnx2-20220509-150400.4.13.1 added
- NetworkManager-1.38.2-150400.3.2.3 updated
- kernel-firmware-ath10k-20220509-150400.4.13.1 added
- kernel-firmware-ath11k-20220509-150400.4.13.1 added
- kernel-firmware-atheros-20220509-150400.4.13.1 added
- kernel-firmware-bluetooth-20220509-150400.4.13.1 added
- kernel-firmware-brcm-20220509-150400.4.13.1 added
- kernel-firmware-dpaa2-20220509-150400.4.13.1 added
- kernel-firmware-media-20220509-150400.4.13.1 added
- kernel-firmware-mwifiex-20220509-150400.4.13.1 added
- kernel-firmware-nfp-20220509-150400.4.13.1 added
- kernel-firmware-nvidia-20220509-150400.4.13.1 added
- kernel-firmware-prestera-20220509-150400.4.13.1 added
- kernel-firmware-qcom-20220509-150400.4.13.1 added
- kernel-firmware-radeon-20220509-150400.4.13.1 added
- kernel-firmware-serial-20220509-150400.4.13.1 added
- kernel-firmware-sound-20220509-150400.4.13.1 added
- kernel-firmware-ti-20220509-150400.4.13.1 added
- kernel-firmware-ueagle-20220509-150400.4.13.1 added
- libpwquality1-1.4.4-150400.15.4 added
- systemd-presets-branding-Elemental-20230303-150400.1.1 updated
- kernel-firmware-all-20220509-150400.4.13.1 added
- cryptsetup-2.4.3-150400.1.110 added
- elemental-cli-0.2.5-150400.1.1 updated
- elemental-init-setup-0.10.6-150400.1.1 updated
- elemental-init-services-0.10.6-150400.1.1 updated
- elemental-init-recovery-0.10.6-150400.1.1 updated
- elemental-init-network-0.10.6-150400.1.1 updated
- elemental-init-live-0.10.6-150400.1.1 updated
- elemental-init-boot-assessment-0.10.6-150400.1.1 updated
- elemental-init-config-0.10.6-150400.1.1 updated
- elemental-toolkit-0.10.6-150400.1.1 updated
- elemental-1.1.4-150400.1.1 updated
- k9s-0.27.3-150400.1.1 updated
- container:micro-for-rancher-image-5.3.0-7.2.131 updated
More information about the sle-updates
mailing list