SUSE Container Update Advisory: bci/dotnet-aspnet ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2024:3754-1 Container Tags : bci/dotnet-aspnet:6.0 , bci/dotnet-aspnet:6.0-41.2 , bci/dotnet-aspnet:6.0.33 , bci/dotnet-aspnet:6.0.33-41.2 Container Release : 41.2 Severity : moderate Type : security References : 1225907 1226463 1227138 CVE-2024-5535 ----------------------------------------------------------------- The container bci/dotnet-aspnet was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:2933-1 Released: Thu Aug 15 12:12:50 2024 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1225907,1226463,1227138,CVE-2024-5535 This update for openssl-1_1 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138) Other fixes: - Build with no-afalgeng. (bsc#1226463) - Fixed C99 violations to allow the package to build with GCC 14. (bsc#1225907) The following package changes have been done: - libopenssl1_1-1.1.1w-150600.5.6.1 updated