Vulnerability Scan Report for registry.suse.com/bci/openjdk-devel:17-13.10
OpenJDK 17 development container based on the SLE Base Container Image.
registry.suse.com/bci/openjdk-devel:17-13.10
Last scanned on: June 09, 2025 12:55
OpenJDK 17 development container based on the SLE Base Container Image.
Last scanned on: June 09, 2025 12:55
| Package Name | Severity | Status | Description | Reference links | |
|---|---|---|---|---|---|
| container-suseconnect | MEDIUM | fixed |
Security update for container-suseconnect Vulnerability ID: SUSE-SU-2024:3360-1 Installed Version: 2.4.0-150000.4.46.1 Fixed Version: 2.5.0-150000.4.55.1 This update for container-suseconnect rebuilds it against current go1.21.13.1. Security issues fixed: CVE-2024-24789, CVE-2024-24790, CVE-2024-24791 |
||
| cpio | MEDIUM | fixed |
Security update for cpio Vulnerability ID: SUSE-SU-2024:0238-1 Installed Version: 2.13-150400.1.98 Fixed Version: 2.13-150400.3.3.1 This update for cpio fixes the following issues: - CVE-2023-7207: Fixed a path traversal issue that could lead to an arbitrary file write during archive extraction (bsc#1218571). |
||
| cpio | LOW | fixed |
Security update for cpio Vulnerability ID: SUSE-SU-2024:0305-1 Installed Version: 2.13-150400.1.98 Fixed Version: 2.13-150400.3.6.1 This update for cpio fixes the following issues: - Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 (bsc#1218571, bsc#1219238) |
||
| curl | MEDIUM | fixed |
Security update for curl Vulnerability ID: SUSE-SU-2024:1151-1 Installed Version: 8.0.1-150400.5.41.1 Fixed Version: 8.0.1-150400.5.44.1 This update for curl fixes the following issues: - CVE-2024-2004: Fix the uUsage of disabled protocol logic. (bsc#1221665) - CVE-2024-2398: Fix HTTP/2 push headers memory-leak. (bsc#1221667) |
||
| curl | MEDIUM | fixed |
Security update for curl Vulnerability ID: SUSE-SU-2024:3080-1 Installed Version: 8.0.1-150400.5.41.1 Fixed Version: 8.0.1-150400.5.47.1 This update for curl fixes the following issues: - CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535) |
||