SUSE Container Update Advisory: 
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2023:3234-1
Container Tags        : suse/sle-micro-rancher/5.4:latest
Container Release     : 3.2.111
Severity              : important
Type                  : security
References            : 1211078 1214244 1214245 1214922 1214924 1214925 1215004 1215006
                        1215033 CVE-2023-22652 CVE-2023-28736 CVE-2023-28938 CVE-2023-30078
                        CVE-2023-30079 CVE-2023-32181 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
                        CVE-2023-4738 CVE-2023-4752 CVE-2023-4781 
-----------------------------------------------------------------

The container  was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:3953-1
Released:    Tue Oct  3 20:08:24 2023
Summary:     Security update for mdadm
Type:        security
Severity:    moderate
References:  1214244,1214245,CVE-2023-28736,CVE-2023-28938
This update for mdadm fixes the following issues:

- CVE-2023-28736: Fixed a buffer overflow (bsc#1214244).
- CVE-2023-28938: Fixed uncontrolled resource consumption (bsc#1214245).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:3954-1
Released:    Tue Oct  3 20:09:47 2023
Summary:     Security update for libeconf
Type:        security
Severity:    important
References:  1211078,CVE-2023-22652,CVE-2023-30078,CVE-2023-30079,CVE-2023-32181
This update for libeconf fixes the following issues:

Update to version 0.5.2.

- CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).
- CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:3955-1
Released:    Tue Oct  3 21:27:58 2023
Summary:     Security update for vim
Type:        security
Severity:    important
References:  1214922,1214924,1214925,1215004,1215006,1215033,CVE-2023-4733,CVE-2023-4734,CVE-2023-4735,CVE-2023-4738,CVE-2023-4752,CVE-2023-4781
This update for vim fixes the following issues:

Security fixes:

- CVE-2023-4733: Fixed use-after-free in function buflist_altfpos (bsc#1215004). 
- CVE-2023-4734: Fixed segmentation fault in function f_fullcommand (bsc#1214925). 
- CVE-2023-4735: Fixed out of bounds write in ops.c (bsc#1214924). 
- CVE-2023-4738: Fixed heap buffer overflow in vim_regsub_both (bsc#1214922). 
- CVE-2023-4752: Fixed heap use-after-free in function ins_compl_get_exp (bsc#1215006). 
- CVE-2023-4781: Fixed heap buffer overflow in function vim_regsub_both (bsc#1215033).

Other fixes:

- Update to version 9.0 with patch level 1894,
  for the complete list of changes see https://github.com/vim/vim/compare/v9.0.1443...v9.0.1894
- Use app icons generated from vimlogo.eps in the source tarball;
  add higher resolution icons of sizes 128x128, 256x256, and 512x512 as png sources


The following package changes have been done:

- libeconf0-0.5.2-150400.3.6.1 updated
- mdadm-4.1-150300.24.33.1 updated
- vim-data-common-9.0.1894-150000.5.54.1 updated
- vim-small-9.0.1894-150000.5.54.1 updated