SUSE Container Update Advisory: caasp/v4/cilium ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2019:120-1 Container Tags : caasp/v4/cilium:1.5.3 , caasp/v4/cilium:1.5.3-rev2 , caasp/v4/cilium:1.5.3-rev2-build2.2.11 , caasp/v4/cilium:beta Container Release : 2.2.11 Severity : important Type : security References : 1124847 1135123 1139083 1141093 CVE-2019-12900 CVE-2019-13050 ----------------------------------------------------------------- The container caasp/v4/cilium was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2019:1994-1 Released: Fri Jul 26 16:12:05 2019 Summary: Recommended update for libxml2 Type: recommended Severity: moderate References: 1135123 This update for libxml2 fixes the following issues: - Added a new configurable variable XPATH_DEFAULT_MAX_NODESET_LENGTH to avoid nodeset limit when processing large XML files. (bsc#1135123) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2019:2004-1 Released: Mon Jul 29 13:01:59 2019 Summary: Security update for bzip2 Type: security Severity: important References: 1139083,CVE-2019-12900 This update for bzip2 fixes the following issues: - Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors (bsc#1139083). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2019:2006-1 Released: Mon Jul 29 13:02:49 2019 Summary: Security update for gpg2 Type: security Severity: important References: 1124847,1141093,CVE-2019-13050 This update for gpg2 fixes the following issues: Security issue fixed: - CVE-2019-13050: Fixed a denial of service attacks via big keys (bsc#1141093). Non-security issue fixed: - Allow coredumps in X11 desktop sessions (bsc#1124847) The following package changes have been done: - cilium-cni-1.5.3-3.9.13 updated - cilium-proxy-20181115-1.3 updated - cilium-1.5.3-3.9.13 updated - gpg2-2.2.5-4.11.1 updated - iproute2-5.1-1.6 updated - libabseil0-20181127-1.4 updated - libboringssl0-20181228-1.6 updated - libbz2-1-1.0.6-5.9.1 updated - libcircllhist0_0_1-20180917-1.3 updated - libdd_opentracing0-0.4.0-1.4 updated - libfmt5-5.3.0-1.6 updated - libjwt_verify_lib0-20181125-1.5 updated - libopentracing-cpp1-1.5.0-1.4 updated - libxml2-2-2.9.7-3.9.1 updated - libxxhash0-0.6.5-1.3 updated - container:sles15-image-15.0.0-6.2.52 updated