SUSE Container Update Advisory: ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2024:4265-1 Container Tags : suse/sle-micro-rancher/5.3:latest Container Release : 7.2.447 Severity : important Type : security References : 1217761 1228216 1228866 1229476 1229930 1229931 1229932 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 ----------------------------------------------------------------- The container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:3216-1 Released: Thu Sep 12 13:05:20 2024 Summary: Security update for expat Type: security Severity: moderate References: 1229930,1229931,1229932,CVE-2024-45490,CVE-2024-45491,CVE-2024-45492 This update for expat fixes the following issues: - CVE-2024-45492: integer overflow in function nextScaffoldPart. (bsc#1229932) - CVE-2024-45491: integer overflow in dtdCopy. (bsc#1229931) - CVE-2024-45490: negative length for XML_ParseBuffer not rejected. (bsc#1229930) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2024:3234-1 Released: Fri Sep 13 08:49:43 2024 Summary: Recommended update for grub2 Type: recommended Severity: important References: 1217761,1228866 This update for grub2 fixes the following issues: - Support powerpc net boot installation when secure boot is enabled (bsc#1217761, bsc#1228866) - Improved check for disk device when looking for PReP partition ----------------------------------------------------------------- Advisory ID: SUSE-RU-2024:3238-1 Released: Fri Sep 13 11:56:14 2024 Summary: Recommended update for util-linux Type: recommended Severity: moderate References: 1229476 This update for util-linux fixes the following issue: - Skip aarch64 decode path for rest of the architectures (bsc#1229476). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2024:3242-1 Released: Fri Sep 13 15:57:29 2024 Summary: Recommended update for strace Type: recommended Severity: moderate References: 1228216 This update for strace fixes the following issue: - Change the license to the correct LGPL-2.1-or-later (bsc#1228216). The following package changes have been done: - grub2-i386-pc-2.06-150400.11.49.1 updated - grub2-x86_64-efi-2.06-150400.11.49.1 updated - grub2-2.06-150400.11.49.1 updated - libblkid1-2.37.2-150400.8.35.2 updated - libexpat1-2.4.4-150400.3.22.1 updated - libfdisk1-2.37.2-150400.8.35.2 updated - libmount1-2.37.2-150400.8.35.2 updated - libsmartcols1-2.37.2-150400.8.35.2 updated - libuuid1-2.37.2-150400.8.35.2 updated - strace-5.14-150400.3.3.2 updated - util-linux-systemd-2.37.2-150400.8.35.2 updated - util-linux-2.37.2-150400.8.35.2 updated