Vulnerability Scan Report for registry.suse.com/bci/bci-init:15.5.8.6
Systemd environment for containers based on the SLE Base Container Image. This container is only supported with podman.
Last scanned on: June 10, 2025 21:20

Systemd environment for containers based on the SLE Base Container Image. This container is only supported with podman.
Last scanned on: June 10, 2025 21:20
Package Name | Severity | Status | Description | Reference links | |
---|---|---|---|---|---|
openssl-1_1 | MEDIUM | fixed |
Security update for openssl-1_1 Vulnerability ID: SUSE-SU-2023:2965-1 Installed Version: 1.1.1l-150500.17.6.1 Fixed Version: 1.1.1l-150500.17.9.1 This update for openssl-1_1 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487). |
||
openssl-1_1 | MEDIUM | fixed |
Security update for openssl-1_1 Vulnerability ID: SUSE-SU-2023:3242-1 Installed Version: 1.1.1l-150500.17.6.1 Fixed Version: 1.1.1l-150500.17.15.1 This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853) |
||
openssl-1_1 | MEDIUM | fixed |
Security update for openssl-1_1 Vulnerability ID: SUSE-SU-2023:4518-1 Installed Version: 1.1.1l-150500.17.6.1 Fixed Version: 1.1.1l-150500.17.22.1 This update for openssl-1_1 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922). |
||
openssl-1_1 | MEDIUM | fixed |
Security update for openssl-1_1 Vulnerability ID: SUSE-SU-2024:1808-1 Installed Version: 1.1.1l-150500.17.6.1 Fixed Version: 1.1.1l-150500.17.28.2 This update for openssl-1_1 fixes the following issues: - CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548). |
||
openssl-1_1 | MEDIUM | fixed |
Security update for openssl-1_1 Vulnerability ID: SUSE-SU-2024:2891-1 Installed Version: 1.1.1l-150500.17.6.1 Fixed Version: 1.1.1l-150500.17.34.1 This update for openssl-1_1 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138) Other fixes: - Build with no-afalgeng (bsc#1226463) |