SUSE Container Update Advisory: rancher/elemental-teal/5.3 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:1230-1 Container Tags : rancher/elemental-teal/5.3:1.1.4 , rancher/elemental-teal/5.3:1.1.4-3.2.6 , rancher/elemental-teal/5.3:latest Container Release : 3.2.6 Severity : important Type : security References : 1184124 1206195 1206439 1207571 1207957 1207975 1208079 1208358 1208432 1209188 1209624 1209873 1209878 CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 CVE-2023-0687 ----------------------------------------------------------------- The container rancher/elemental-teal/5.3 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2021:2179-1 Released: Mon Jun 28 17:36:37 2021 Summary: Recommended update for thin-provisioning-tools Type: recommended Severity: moderate References: 1184124 This update for thin-provisioning-tools fixes the following issues: - Link as position-independent executable (bsc#1184124) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1717-1 Released: Fri Mar 31 15:18:35 2023 Summary: Security update for grub2 Type: security Severity: moderate References: 1209188 This update of grub2 fixes the following issues: - rebuild the package with the new secure boot key (bsc#1209188). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1718-1 Released: Fri Mar 31 15:47:34 2023 Summary: Security update for glibc Type: security Severity: moderate References: 1207571,1207957,1207975,1208358,CVE-2023-0687 This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-0687: Fix allocated buffer overflow in gmon (bsc#1207975) Other issues fixed: - Fix avx2 strncmp offset compare condition check (bsc#1208358) - elf: Allow dlopen of filter object to work (bsc#1207571) - powerpc: Fix unrecognized instruction errors with recent GCC - x86: Cache computation for AMD architecture (bsc#1207957) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1745-1 Released: Tue Apr 4 09:05:23 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1209624,CVE-2023-0464 This update for openssl-1_1 fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:1779-1 Released: Thu Apr 6 08:16:58 2023 Summary: Recommended update for systemd Type: recommended Severity: moderate References: 1208432 This update for systemd fixes the following issues: - Fix return non-zero value when disabling SysVinit service (bsc#1208432) - Drop build requirement on libpci, it's not no longer needed - Move systemd-boot and all components managing (secure) UEFI boot into udev sub-package, so they aren't installed in systemd based containers ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:1805-1 Released: Tue Apr 11 10:12:41 2023 Summary: Recommended update for timezone Type: recommended Severity: important References: This update for timezone fixes the following issues: - Version update from 2022g to 2023c: * Egypt now uses DST again, from April through October. * This year Morocco springs forward April 23, not April 30. * Palestine delays the start of DST this year. * Much of Greenland still uses DST from 2024 on. * America/Yellowknife now links to America/Edmonton. * tzselect can now use current time to help infer timezone. * The code now defaults to C99 or later. ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:1880-1 Released: Tue Apr 18 11:11:27 2023 Summary: Recommended update for systemd-rpm-macros Type: recommended Severity: low References: 1208079 This update for systemd-rpm-macros fixes the following issue: - Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not present as it's expected (bsc#1208079). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:1885-1 Released: Tue Apr 18 11:15:17 2023 Summary: Recommended update for dracut Type: recommended Severity: moderate References: 1206195,1206439 This update for dracut fixes the following issues: - Update to version 055+suse.335.gccf7fbc6: * Always include all drivers that LVM can use (bsc#1206195) * Require libopenssl1_1-hmac for dracut-fips (bsc#1206439) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1911-1 Released: Wed Apr 19 13:02:33 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1209873,1209878,CVE-2023-0465,CVE-2023-0466 This update for openssl-1_1 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873). The following package changes have been done: - glibc-2.31-150300.46.1 updated - libudev1-249.16-150400.8.25.7 updated - libaio1-0.3.109-1.25 added - libsystemd0-249.16-150400.8.25.7 updated - liblvm2cmd2_03-2.03.05-150400.185.1 added - libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1 added - elemental-dracut-config-0.10.6-150400.1.1 updated - elemental-grub-config-0.10.6-150400.1.1 updated - elemental-immutable-rootfs-0.10.6-150400.1.1 updated - elemental-register-1.2.2-150400.1.1 updated - elemental-support-1.2.2-150400.1.1 updated - elemental-system-agent-0.3.2-150400.1.1 updated - elemental-updater-1.1.4-150400.1.1 updated - timezone-2023c-150000.75.23.1 updated - thin-provisioning-tools-0.7.5-3.3.1 added - systemd-rpm-macros-12-150000.7.30.1 updated - device-mapper-2.03.05_1.02.163-150400.185.1 added - grub2-2.06-150400.11.25.1 updated - grub2-i386-pc-2.06-150400.11.25.1 updated - glibc-locale-base-2.31-150300.46.1 updated - libopenssl1_1-1.1.1l-150400.7.34.1 updated - systemd-249.16-150400.8.25.7 updated - libnm0-1.38.2-150400.3.2.3 updated - udev-249.16-150400.8.25.7 updated - systemd-sysvinit-249.16-150400.8.25.7 updated - dracut-055+suse.335.gccf7fbc6-150400.3.19.1 updated - lvm2-2.03.05-150400.185.1 added - kernel-firmware-usb-network-20220509-150400.4.13.1 added - kernel-firmware-realtek-20220509-150400.4.13.1 added - kernel-firmware-qlogic-20220509-150400.4.13.1 added - kernel-firmware-platform-20220509-150400.4.13.1 added - kernel-firmware-network-20220509-150400.4.13.1 added - kernel-firmware-mellanox-20220509-150400.4.13.1 added - kernel-firmware-mediatek-20220509-150400.4.13.1 added - kernel-firmware-marvell-20220509-150400.4.13.1 added - kernel-firmware-liquidio-20220509-150400.4.13.1 added - kernel-firmware-iwlwifi-20220509-150400.4.13.1 added - kernel-firmware-intel-20220509-150400.4.13.1 added - kernel-firmware-i915-20220509-150400.4.13.1 added - kernel-firmware-chelsio-20220509-150400.4.13.1 added - kernel-firmware-bnx2-20220509-150400.4.13.1 added - NetworkManager-1.38.2-150400.3.2.3 updated - kernel-firmware-ath10k-20220509-150400.4.13.1 added - kernel-firmware-ath11k-20220509-150400.4.13.1 added - kernel-firmware-atheros-20220509-150400.4.13.1 added - kernel-firmware-bluetooth-20220509-150400.4.13.1 added - kernel-firmware-brcm-20220509-150400.4.13.1 added - kernel-firmware-dpaa2-20220509-150400.4.13.1 added - kernel-firmware-media-20220509-150400.4.13.1 added - kernel-firmware-mwifiex-20220509-150400.4.13.1 added - kernel-firmware-nfp-20220509-150400.4.13.1 added - kernel-firmware-nvidia-20220509-150400.4.13.1 added - kernel-firmware-prestera-20220509-150400.4.13.1 added - kernel-firmware-qcom-20220509-150400.4.13.1 added - kernel-firmware-radeon-20220509-150400.4.13.1 added - kernel-firmware-serial-20220509-150400.4.13.1 added - kernel-firmware-sound-20220509-150400.4.13.1 added - kernel-firmware-ti-20220509-150400.4.13.1 added - kernel-firmware-ueagle-20220509-150400.4.13.1 added - libpwquality1-1.4.4-150400.15.4 added - systemd-presets-branding-Elemental-20230303-150400.1.1 updated - kernel-firmware-all-20220509-150400.4.13.1 added - cryptsetup-2.4.3-150400.1.110 added - elemental-cli-0.2.5-150400.1.1 updated - elemental-init-setup-0.10.6-150400.1.1 updated - elemental-init-services-0.10.6-150400.1.1 updated - elemental-init-recovery-0.10.6-150400.1.1 updated - elemental-init-network-0.10.6-150400.1.1 updated - elemental-init-live-0.10.6-150400.1.1 updated - elemental-init-boot-assessment-0.10.6-150400.1.1 updated - elemental-init-config-0.10.6-150400.1.1 updated - elemental-toolkit-0.10.6-150400.1.1 updated - elemental-1.1.4-150400.1.1 updated - k9s-0.27.3-150400.1.1 updated - container:micro-for-rancher-image-5.3.0-7.2.131 updated