Vulnerability Scan Report for registry.suse.com/suse/postgres:14-24.27
PostgreSQL 15 container based on the SLE Base Container Image.
registry.suse.com/suse/postgres:14-24.27
Last scanned on: March 12, 2025 03:21
PostgreSQL 15 container based on the SLE Base Container Image.
Last scanned on: March 12, 2025 03:21
| Package Name | Severity | Status | Description | Reference links | |
|---|---|---|---|---|---|
| libuuid1 | HIGH | fixed |
Security update for util-linux Vulnerability ID: SUSE-SU-2024:1169-1 Installed Version: 2.37.2-150400.8.20.1 Fixed Version: 2.37.2-150400.8.29.1 This update for util-linux fixes the following issues: - CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831) |
||
| libxml2-2 | HIGH | fixed |
Security update for libxml2 Vulnerability ID: SUSE-SU-2024:0613-2 Installed Version: 2.9.14-150400.5.25.1 Fixed Version: 2.9.14-150400.5.28.1 This update for libxml2 fixes the following issues: - CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576). |
||
| libxml2-2 | HIGH | fixed |
Security update for libxml2 Vulnerability ID: SUSE-SU-2025:0341-1 Installed Version: 2.9.14-150400.5.25.1 Fixed Version: 2.9.14-150400.5.35.1 This update for libxml2 fixes the following issues: - CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. (bsc#1236460) |
||
| libxml2-2 | HIGH | fixed |
Security update for libxml2 Vulnerability ID: SUSE-SU-2025:0748-1 Installed Version: 2.9.14-150400.5.25.1 Fixed Version: 2.9.14-150400.5.38.1 This update for libxml2 fixes the following issues: - CVE-2024-56171: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363). - CVE-2025-24928: stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370). - CVE-2025-27113: NULL pointer dereference in xmlPatMatch in pattern.c (bsc#1237418). |
||
| login_defs | MEDIUM | fixed |
Security update for shadow Vulnerability ID: SUSE-SU-2024:2658-1 Installed Version: 4.8.1-150400.10.12.1 Fixed Version: 4.8.1-150400.10.18.1 This update for shadow fixes the following issues: - CVE-2013-4235: Fixed a race condition when copying and removing directory trees (bsc#916845). |
||