SUSE Container Update Advisory: suse/sle15
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2019:12-1
Container Tags        : suse/sle15:15.0 , suse/sle15:15.0.4.13.1
Container Release     : 4.13.1
Severity              : important
Type                  : security
References            : 1110304 1114407 1118087 1124223 1125410 1126377 1129576 1130325
                        1130326 1130681 1130682 1131060 1131686 CVE-2018-16868 CVE-2019-3829
                        CVE-2019-3836 CVE-2019-3880 CVE-2019-9936 CVE-2019-9937 
-----------------------------------------------------------------

The container suse/sle15 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2019:1002-1
Released:    Wed Apr 24 10:13:34 2019
Summary:     Recommended update for zlib
Type:        recommended
Severity:    moderate
References:  1110304,1129576
This update for zlib fixes the following issues:

- Fixes a segmentation fault error (bsc#1110304, bsc#1129576)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2019:1040-1
Released:    Thu Apr 25 17:09:21 2019
Summary:     Security update for samba
Type:        security
Severity:    important
References:  1114407,1124223,1125410,1126377,1131060,1131686,CVE-2019-3880
This update for samba fixes the following issues:

Security issue fixed:

- CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060).


ldb was updated to version 1.2.4 (bsc#1125410 bsc#1131686):

- Out of bound read in ldb_wildcard_compare
- Hold at most 10 outstanding paged result cookies
- Put 'results_store' into a doubly linked list
- Refuse to build Samba against a newer minor version of ldb


Non-security issues fixed:

- Fixed update-apparmor-samba-profile script after apparmor switched to using named profiles (bsc#1126377).
- Abide to the load_printers parameter in smb.conf (bsc#1124223).
- Provide the 32bit samba winbind PAM module and its dependend 32bit libraries.
  
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2019:1121-1
Released:    Tue Apr 30 18:02:43 2019
Summary:     Security update for gnutls
Type:        security
Severity:    important
References:  1118087,1130681,1130682,CVE-2018-16868,CVE-2019-3829,CVE-2019-3836
This update for gnutls fixes to version 3.6.7 the following issues:

Security issued fixed:

- CVE-2019-3836: Fixed an invalid pointer access via malformed TLS1.3 async messages (bsc#1130682).
- CVE-2019-3829: Fixed a double free vulnerability in the certificate verification API (bsc#1130681).
- CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification (bsc#1118087)

Non-security issue fixed:

- Update gnutls to support TLS 1.3 (fate#327114) 

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2019:1127-1
Released:    Thu May  2 09:39:24 2019
Summary:     Security update for sqlite3
Type:        security
Severity:    moderate
References:  1130325,1130326,CVE-2019-9936,CVE-2019-9937
This update for sqlite3 to version 3.28.0 fixes the following issues:

Security issues fixed:

- CVE-2019-9936: Fixed a heap-based buffer over-read, when running fts5 prefix
  queries inside transaction (bsc#1130326).
- CVE-2019-9937: Fixed a denial of service related to interleaving reads and writes in
  a single transaction with an fts5 virtual table (bsc#1130325).


The following package changes have been done:

- libgnutls30-3.6.7-6.8.1 updated
- libhogweed4-3.4.1-4.9.1 updated
- libnettle6-3.4.1-4.9.1 updated
- libp11-kit0-0.23.2-4.2.1 updated
- libsqlite3-0-3.28.0-3.6.1 updated
- libtasn1-6-4.13-4.2.1 updated
- libtasn1-4.13-4.2.1 updated
- libz1-1.2.11-3.6.4 updated
- p11-kit-tools-0.23.2-4.2.1 updated
- p11-kit-0.23.2-4.2.1 updated