SUSE Container Update Advisory: ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:176-1 Container Tags : suse/sle-micro-rancher/5.3:latest Container Release : 7.2.79 Severity : important Type : security References : 1204272 1207038 1207082 CVE-2022-23491 CVE-2022-3479 CVE-2023-22809 ----------------------------------------------------------------- The container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:114-1 Released: Fri Jan 20 10:22:57 2023 Summary: Security update for sudo Type: security Severity: important References: 1207082,CVE-2023-22809 This update for sudo fixes the following issues: - CVE-2023-22809: Fixed an arbitrary file write issue that could be exploited by users with sudoedit permissions (bsc#1207082). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:119-1 Released: Fri Jan 20 10:28:07 2023 Summary: Security update for mozilla-nss Type: security Severity: important References: 1204272,1207038,CVE-2022-23491,CVE-2022-3479 This update for mozilla-nss fixes the following issues: - CVE-2022-3479: Fixed a potential crash that could be triggered when a server requested a client authentication certificate, but the client had no certificates stored (bsc#1204272). - Updated to version 3.79.3 (bsc#1207038): - CVE-2022-23491: Removed trust for 3 root certificates from TrustCor. The following package changes have been done: - libfreebl3-3.79.3-150400.3.23.1 updated - libsoftokn3-3.79.3-150400.3.23.1 updated - mozilla-nss-certs-3.79.3-150400.3.23.1 updated - mozilla-nss-3.79.3-150400.3.23.1 updated - sudo-1.9.9-150400.4.12.1 updated