January 2024 - openSUSE Security Announce

SUSE-SU-2024:0182-1: important: Security update for bluez
by OPENSUSE-SECURITY-UPDATES 23 Jan '24

23 Jan '24

# Security update for bluez Announcement ID: SUSE-SU-2024:0182-1 Rating: important References: * bsc#1218300 * bsc#1218301 Cross-References: * CVE-2023-50229 * CVE-2023-50230 CVSS scores: * CVE-2023-50229 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-50230 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300). * CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access Profile implementation (bsc#1218301). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-182=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-182=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-182=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-182=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-182=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * bluez-cups-5.55-150300.3.28.1 * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-cups-debuginfo-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-test-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-test-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * openSUSE Leap 15.3 (noarch) * bluez-auto-enable-devices-5.55-150300.3.28.1 * openSUSE Leap 15.3 (x86_64) * libbluetooth3-32bit-debuginfo-5.55-150300.3.28.1 * libbluetooth3-32bit-5.55-150300.3.28.1 * bluez-devel-32bit-5.55-150300.3.28.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libbluetooth3-64bit-5.55-150300.3.28.1 * libbluetooth3-64bit-debuginfo-5.55-150300.3.28.1 * bluez-devel-64bit-5.55-150300.3.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50229.html * https://www.suse.com/security/cve/CVE-2023-50230.html * https://bugzilla.suse.com/show_bug.cgi?id=1218300 * https://bugzilla.suse.com/show_bug.cgi?id=1218301

1 0

SUSE-SU-2024:0183-1: important: Security update for bluez
by OPENSUSE-SECURITY-UPDATES 23 Jan '24

23 Jan '24

# Security update for bluez Announcement ID: SUSE-SU-2024:0183-1 Rating: important References: * bsc#1218300 * bsc#1218301 Cross-References: * CVE-2023-50229 * CVE-2023-50230 CVSS scores: * CVE-2023-50229 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-50230 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300). * CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access Profile implementation (bsc#1218301). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-183=1 openSUSE-SLE-15.5-2024-183=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-183=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-183=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-183=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-183=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * bluez-cups-debuginfo-5.65-150500.3.6.1 * bluez-deprecated-5.65-150500.3.6.1 * bluez-devel-5.65-150500.3.6.1 * bluez-obexd-debuginfo-5.65-150500.3.6.1 * bluez-test-5.65-150500.3.6.1 * bluez-test-debuginfo-5.65-150500.3.6.1 * bluez-cups-5.65-150500.3.6.1 * libbluetooth3-debuginfo-5.65-150500.3.6.1 * bluez-obexd-5.65-150500.3.6.1 * bluez-debugsource-5.65-150500.3.6.1 * libbluetooth3-5.65-150500.3.6.1 * bluez-deprecated-debuginfo-5.65-150500.3.6.1 * bluez-5.65-150500.3.6.1 * bluez-debuginfo-5.65-150500.3.6.1 * openSUSE Leap 15.5 (noarch) * bluez-zsh-completion-5.65-150500.3.6.1 * bluez-auto-enable-devices-5.65-150500.3.6.1 * openSUSE Leap 15.5 (x86_64) * bluez-devel-32bit-5.65-150500.3.6.1 * libbluetooth3-32bit-debuginfo-5.65-150500.3.6.1 * libbluetooth3-32bit-5.65-150500.3.6.1 * openSUSE Leap 15.5 (aarch64_ilp32) * bluez-devel-64bit-5.65-150500.3.6.1 * libbluetooth3-64bit-5.65-150500.3.6.1 * libbluetooth3-64bit-debuginfo-5.65-150500.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libbluetooth3-debuginfo-5.65-150500.3.6.1 * bluez-debuginfo-5.65-150500.3.6.1 * libbluetooth3-5.65-150500.3.6.1 * bluez-debugsource-5.65-150500.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libbluetooth3-debuginfo-5.65-150500.3.6.1 * libbluetooth3-5.65-150500.3.6.1 * bluez-debugsource-5.65-150500.3.6.1 * bluez-5.65-150500.3.6.1 * bluez-debuginfo-5.65-150500.3.6.1 * Basesystem Module 15-SP5 (noarch) * bluez-zsh-completion-5.65-150500.3.6.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * bluez-devel-5.65-150500.3.6.1 * bluez-debuginfo-5.65-150500.3.6.1 * bluez-debugsource-5.65-150500.3.6.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * bluez-cups-5.65-150500.3.6.1 * bluez-debuginfo-5.65-150500.3.6.1 * bluez-cups-debuginfo-5.65-150500.3.6.1 * bluez-debugsource-5.65-150500.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50229.html * https://www.suse.com/security/cve/CVE-2023-50230.html * https://bugzilla.suse.com/show_bug.cgi?id=1218300 * https://bugzilla.suse.com/show_bug.cgi?id=1218301

1 0

SUSE-SU-2024:0172-1: moderate: Security update for openssl-3
by OPENSUSE-SECURITY-UPDATES 22 Jan '24

22 Jan '24

# Security update for openssl-3 Announcement ID: SUSE-SU-2024:0172-1 Rating: moderate References: * bsc#1218690 * bsc#1218810 Cross-References: * CVE-2023-6129 * CVE-2023-6237 CVSS scores: * CVE-2023-6129 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2023-6237 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2023-6129: Fixed vector register clobbering on PowerPC. (bsc#1218690) * CVE-2023-6237: Fixed excessive time spent checking invalid RSA public keys. (bsc#1218810) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-172=1 openSUSE-SLE-15.5-2024-172=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-172=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * openssl-3-debuginfo-3.0.8-150500.5.24.1 * libopenssl3-3.0.8-150500.5.24.1 * openssl-3-debugsource-3.0.8-150500.5.24.1 * libopenssl3-debuginfo-3.0.8-150500.5.24.1 * libopenssl-3-devel-3.0.8-150500.5.24.1 * openssl-3-3.0.8-150500.5.24.1 * openSUSE Leap 15.5 (x86_64) * libopenssl3-32bit-3.0.8-150500.5.24.1 * libopenssl3-32bit-debuginfo-3.0.8-150500.5.24.1 * libopenssl-3-devel-32bit-3.0.8-150500.5.24.1 * openSUSE Leap 15.5 (noarch) * openssl-3-doc-3.0.8-150500.5.24.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl-3-devel-64bit-3.0.8-150500.5.24.1 * libopenssl3-64bit-3.0.8-150500.5.24.1 * libopenssl3-64bit-debuginfo-3.0.8-150500.5.24.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openssl-3-debuginfo-3.0.8-150500.5.24.1 * libopenssl3-3.0.8-150500.5.24.1 * openssl-3-debugsource-3.0.8-150500.5.24.1 * libopenssl3-debuginfo-3.0.8-150500.5.24.1 * libopenssl-3-devel-3.0.8-150500.5.24.1 * openssl-3-3.0.8-150500.5.24.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6129.html * https://www.suse.com/security/cve/CVE-2023-6237.html * https://bugzilla.suse.com/show_bug.cgi?id=1218690 * https://bugzilla.suse.com/show_bug.cgi?id=1218810

1 0

openSUSE-SU-2024:0026-1: moderate: Security update for seamonkey
by opensuse-security＠opensuse.org 19 Jan '24

19 Jan '24

openSUSE Security Update: Security update for seamonkey ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0026-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for seamonkey fixes the following issues: Update to 2.53.18.1: * Update the NSS library to the latest esr 115 version for the final 2.53.18.1 release. * SeaMonkey 2.53.18.1 uses the same backend as Firefox and contains the relevant Firefox 60.8 security fixes. * SeaMonkey 2.53.18.1 shares most parts of the mail and news code with Thunderbird. Please read the Thunderbird 60.8.0 release notes for specific security fixes in this release. * Additional important security fixes up to Current Firefox 115.7 and Thunderbird 115.7 ESR plus many enhancements have been backported. We will continue to enhance SeaMonkey security in subsequent 2.53.x beta and release versions as fast as we are able to. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-26=1 Package List: - openSUSE Backports SLE-15-SP5 (i586 x86_64): seamonkey-2.53.18.1-bp155.2.15.1 seamonkey-dom-inspector-2.53.18.1-bp155.2.15.1 seamonkey-irc-2.53.18.1-bp155.2.15.1 References:

1 0

SUSE-SU-2024:0168-1: moderate: Security update for python-aiohttp
by OPENSUSE-SECURITY-UPDATES 19 Jan '24

19 Jan '24

# Security update for python-aiohttp Announcement ID: SUSE-SU-2024:0168-1 Rating: moderate References: * bsc#1217682 Cross-References: * CVE-2023-49082 CVSS scores: * CVE-2023-49082 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49082 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python-aiohttp fixes the following issues: Updated to version 3.8.6: * CVE-2023-49082: Fixed an HTTP header injection via a crafted method (bsc#1217682). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-168=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-168=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-168=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-aiohttp-debuginfo-3.8.6-150400.10.11.1 * python-aiohttp-debugsource-3.8.6-150400.10.11.1 * python311-aiohttp-3.8.6-150400.10.11.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-debuginfo-3.8.6-150400.10.11.1 * python-aiohttp-debugsource-3.8.6-150400.10.11.1 * python311-aiohttp-3.8.6-150400.10.11.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-debuginfo-3.8.6-150400.10.11.1 * python-aiohttp-debugsource-3.8.6-150400.10.11.1 * python311-aiohttp-3.8.6-150400.10.11.1 ## References: * https://www.suse.com/security/cve/CVE-2023-49082.html * https://bugzilla.suse.com/show_bug.cgi?id=1217682

1 0

openSUSE-SU-2024:0025-1: critical: Security update for chromium
by opensuse-security＠opensuse.org 19 Jan '24

19 Jan '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0025-1 Rating: critical References: #1218892 Cross-References: CVE-2024-0517 CVE-2024-0518 CVE-2024-0519 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to 120.0.6099.224 (boo#1218892): - CVE-2024-0517: Out of bounds write in V8 - CVE-2024-0518: Type Confusion in V8 - CVE-2024-0519: Out of bounds memory access in V8 - Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-25=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-120.0.6099.224-bp155.2.67.1 chromium-120.0.6099.224-bp155.2.67.1 References: https://www.suse.com/security/cve/CVE-2024-0517.html https://www.suse.com/security/cve/CVE-2024-0518.html https://www.suse.com/security/cve/CVE-2024-0519.html https://bugzilla.suse.com/1218892

1 0

SUSE-SU-2024:0156-1: important: Security update for the Linux Kernel
by OPENSUSE-SECURITY-UPDATES 18 Jan '24

18 Jan '24

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2024:0156-1 Rating: important References: * bsc#1179610 * bsc#1183045 * bsc#1193285 * bsc#1211162 * bsc#1211226 * bsc#1212584 * bsc#1214747 * bsc#1214823 * bsc#1215237 * bsc#1215696 * bsc#1215885 * bsc#1216057 * bsc#1216559 * bsc#1216776 * bsc#1217036 * bsc#1217217 * bsc#1217250 * bsc#1217602 * bsc#1217692 * bsc#1217790 * bsc#1217801 * bsc#1217933 * bsc#1217938 * bsc#1217946 * bsc#1217947 * bsc#1217980 * bsc#1217981 * bsc#1217982 * bsc#1218056 * bsc#1218139 * bsc#1218184 * bsc#1218234 * bsc#1218253 * bsc#1218258 * bsc#1218335 * bsc#1218357 * bsc#1218447 * bsc#1218515 * bsc#1218559 * bsc#1218569 * bsc#1218659 * jsc#PED-3459 * jsc#PED-5021 * jsc#PED-7322 Cross-References: * CVE-2020-26555 * CVE-2023-51779 * CVE-2023-6121 * CVE-2023-6531 * CVE-2023-6546 * CVE-2023-6606 * CVE-2023-6610 * CVE-2023-6622 * CVE-2023-6931 * CVE-2023-6932 CVSS scores: * CVE-2020-26555 ( SUSE ): 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2020-26555 ( NVD ): 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2023-51779 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6121 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2023-6121 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6606 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2023-6606 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2023-6610 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2023-6610 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2023-6622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6931 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6931 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves 10 vulnerabilities, contains three features and has 31 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447). * CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). * CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559). * CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bsc#1179610 bsc#1215237). * CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1218335). * CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218258). * CVE-2023-6932: Fixed a use-after-free issue when receiving an IGMP query packet due to reference count mismanagement (bsc#1218253). * CVE-2023-6622: Fixed a null pointer dereference vulnerability in nft_dynset_init() that could allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service (bsc#1217938). * CVE-2023-6121: Fixed an information leak via dmesg when receiving a crafted packet in the NVMe-oF/TCP subsystem (bsc#1217250). The following non-security bugs were fixed: * Reviewed and added more information to README.SUSE (jsc#PED-5021). * Enabled multibuild for kernel packages (JSC-SLE#5501, boo#1211226, bsc#1218184). * Drop drm/bridge lt9611uxc patches that have been reverted on stable trees * KVM: s390/mm: Properly reset no-dat (bsc#1218056). * KVM: s390: vsie: fix wrong VIR 37 when MSO is used (bsc#1217933). * KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322). * NFS: Fix O_DIRECT locking issues (bsc#1211162). * NFS: Fix a few more clear_bit() instances that need release semantics (bsc#1211162). * NFS: Fix a potential data corruption (bsc#1211162). * NFS: Fix a use after free in nfs_direct_join_group() (bsc#1211162). * NFS: Fix error handling for O_DIRECT write scheduling (bsc#1211162). * NFS: More O_DIRECT accounting fixes for error paths (bsc#1211162). * NFS: More fixes for nfs_direct_write_reschedule_io() (bsc#1211162). * NFS: Use the correct commit info in nfs_join_page_group() (bsc#1211162). * NLM: Defend against file_lock changes after vfs_test_lock() (bsc#1217692). * Updated SPI patches for NVIDIA Grace enablement (bsc#1212584 jsc#PED-3459) * block: fix revalidate performance regression (bsc#1216057). * bpf: Adjust insufficient default bpf_jit_limit (bsc#1218234). * ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1217980). * ceph: fix type promotion bug on 32bit systems (bsc#1217982). * clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW (bsc#1215885 bsc#1217217). * clocksource: Enable TSC watchdog checking of HPET and PMTMR only when requested (bsc#1215885 bsc#1217217). * clocksource: Handle negative skews in "skew is too large" messages (bsc#1215885 bsc#1217217). * clocksource: Improve "skew is too large" messages (bsc#1215885 bsc#1217217). * clocksource: Improve read-back-delay message (bsc#1215885 bsc#1217217). * clocksource: Loosen clocksource watchdog constraints (bsc#1215885 bsc#1217217). * clocksource: Print clocksource name when clocksource is tested unstable (bsc#1215885 bsc#1217217). * clocksource: Verify HPET and PMTMR when TSC unverified (bsc#1215885 bsc#1217217). * dm_blk_ioctl: implement path failover for SG_IO (bsc#1183045, bsc#1216776). * fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() (bsc#1218659). * libceph: use kernel_connect() (bsc#1217981). * mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors (bsc#1218515). * net/smc: Fix pos miscalculation in statistics (bsc#1218139). * net/tg3: fix race condition in tg3_reset_task() (bsc#1217801). * nfs: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162). * remove unnecessary WARN_ON_ONCE() (bsc#1214823 bsc#1218569). * s390/vx: fix save/restore of fpu kernel context (bsc#1218357). * scsi: lpfc: use unsigned type for num_sge (bsc#1214747). * swiotlb: fix a braino in the alignment check fix (bsc#1216559). * swiotlb: fix slot alignment checks (bsc#1216559). * tracing: Disable preemption when using the filter buffer (bsc#1217036). * tracing: Fix a possible race when disabling buffered events (bsc#1217036). * tracing: Fix a warning when allocating buffered events fails (bsc#1217036). * tracing: Fix incomplete locking when disabling buffered events (bsc#1217036). * tracing: Fix warning in trace_buffered_event_disable() (bsc#1217036). * tracing: Use __this_cpu_read() in trace_event_buffer_lock_reserver() (bsc#1217036). * uapi: propagate __struct_group() attributes to the container union (jsc#SLE-18978). * vsprintf/kallsyms: Prevent invalid data when printing symbol (bsc#1217602). * x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285). * x86/platform/uv: Use alternate source for socket to node data (bsc#1215696 bsc#1217790). * x86/tsc: Add option to force frequency recalibration with HW timer (bsc#1215885 bsc#1217217). * x86/tsc: Be consistent about use_tsc_delay() (bsc#1215885 bsc#1217217). * x86/tsc: Extend watchdog check exemption to 4-Sockets platform (bsc#1215885 bsc#1217217). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-156=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-156=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-156=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-156=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-156=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-156=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-156=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-156=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-156=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-156=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-156=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-156=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-156=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-156=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-156=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-156=1 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-156=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-156=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.103.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-64kb-debugsource-5.14.21-150400.24.103.1 * kernel-64kb-debuginfo-5.14.21-150400.24.103.1 * kernel-64kb-devel-5.14.21-150400.24.103.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.103.1 * kernel-obs-build-5.14.21-150400.24.103.1 * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-obs-build-debugsource-5.14.21-150400.24.103.1 * reiserfs-kmp-default-5.14.21-150400.24.103.1 * kernel-default-devel-5.14.21-150400.24.103.1 * kernel-syms-5.14.21-150400.24.103.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.103.1 * kernel-macros-5.14.21-150400.24.103.1 * kernel-devel-5.14.21-150400.24.103.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Real Time 15 SP4 (nosrc x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * kernel-obs-build-5.14.21-150400.24.103.1 * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-obs-build-debugsource-5.14.21-150400.24.103.1 * kernel-default-devel-5.14.21-150400.24.103.1 * kernel-syms-5.14.21-150400.24.103.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Linux Enterprise Real Time 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.103.1 * kernel-macros-5.14.21-150400.24.103.1 * kernel-devel-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Real Time 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (nosrc x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * kernel-default-extra-5.14.21-150400.24.103.1 * kernel-obs-build-5.14.21-150400.24.103.1 * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-obs-build-debugsource-5.14.21-150400.24.103.1 * kernel-default-devel-5.14.21-150400.24.103.1 * kernel-syms-5.14.21-150400.24.103.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * kernel-default-extra-debuginfo-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * kernel-source-5.14.21-150400.24.103.1 * kernel-macros-5.14.21-150400.24.103.1 * kernel-devel-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-64kb-debugsource-5.14.21-150400.24.103.1 * kernel-64kb-debuginfo-5.14.21-150400.24.103.1 * kernel-64kb-devel-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.103.1 * kernel-obs-build-5.14.21-150400.24.103.1 * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-obs-build-debugsource-5.14.21-150400.24.103.1 * reiserfs-kmp-default-5.14.21-150400.24.103.1 * kernel-default-devel-5.14.21-150400.24.103.1 * kernel-syms-5.14.21-150400.24.103.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * kernel-source-5.14.21-150400.24.103.1 * kernel-macros-5.14.21-150400.24.103.1 * kernel-devel-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.103.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.103.1 * kernel-obs-build-5.14.21-150400.24.103.1 * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-obs-build-debugsource-5.14.21-150400.24.103.1 * reiserfs-kmp-default-5.14.21-150400.24.103.1 * kernel-default-devel-5.14.21-150400.24.103.1 * kernel-syms-5.14.21-150400.24.103.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.103.1 * kernel-macros-5.14.21-150400.24.103.1 * kernel-devel-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.103.1 * SUSE Manager Proxy 4.3 (nosrc x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Manager Proxy 4.3 (x86_64) * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-default-devel-5.14.21-150400.24.103.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Manager Proxy 4.3 (noarch) * kernel-macros-5.14.21-150400.24.103.1 * kernel-devel-5.14.21-150400.24.103.1 * SUSE Manager Retail Branch Server 4.3 (nosrc x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-default-devel-5.14.21-150400.24.103.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * kernel-macros-5.14.21-150400.24.103.1 * kernel-devel-5.14.21-150400.24.103.1 * SUSE Manager Server 4.3 (nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Manager Server 4.3 (ppc64le x86_64) * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-default-devel-5.14.21-150400.24.103.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * SUSE Manager Server 4.3 (noarch) * kernel-macros-5.14.21-150400.24.103.1 * kernel-devel-5.14.21-150400.24.103.1 * SUSE Manager Server 4.3 (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.103.1 * SUSE Manager Server 4.3 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.103.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (noarch) * kernel-docs-html-5.14.21-150400.24.103.1 * kernel-macros-5.14.21-150400.24.103.1 * kernel-source-vanilla-5.14.21-150400.24.103.1 * kernel-devel-5.14.21-150400.24.103.1 * kernel-source-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (nosrc ppc64le x86_64) * kernel-debug-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (ppc64le x86_64) * kernel-debug-devel-5.14.21-150400.24.103.1 * kernel-debug-debuginfo-5.14.21-150400.24.103.1 * kernel-debug-debugsource-5.14.21-150400.24.103.1 * kernel-debug-livepatch-devel-5.14.21-150400.24.103.1 * kernel-debug-devel-debuginfo-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debuginfo-5.14.21-150400.24.103.1 * kernel-kvmsmall-devel-5.14.21-150400.24.103.1 * kernel-kvmsmall-livepatch-devel-5.14.21-150400.24.103.1 * kernel-kvmsmall-debugsource-5.14.21-150400.24.103.1 * kernel-default-base-rebuild-5.14.21-150400.24.103.1.150400.24.48.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kernel-default-optional-5.14.21-150400.24.103.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.103.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.103.1 * reiserfs-kmp-default-5.14.21-150400.24.103.1 * ocfs2-kmp-default-5.14.21-150400.24.103.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.103.1 * cluster-md-kmp-default-5.14.21-150400.24.103.1 * dlm-kmp-default-5.14.21-150400.24.103.1 * kernel-obs-build-5.14.21-150400.24.103.1 * kernel-default-livepatch-devel-5.14.21-150400.24.103.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.103.1 * kernel-syms-5.14.21-150400.24.103.1 * gfs2-kmp-default-5.14.21-150400.24.103.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.103.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.103.1 * kernel-obs-qa-5.14.21-150400.24.103.1 * kernel-default-extra-5.14.21-150400.24.103.1 * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-obs-build-debugsource-5.14.21-150400.24.103.1 * kernel-default-livepatch-5.14.21-150400.24.103.1 * kernel-default-devel-5.14.21-150400.24.103.1 * kselftests-kmp-default-5.14.21-150400.24.103.1 * kernel-default-optional-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * kselftests-kmp-default-debuginfo-5.14.21-150400.24.103.1 * kernel-default-extra-debuginfo-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_103-default-1-150400.9.3.1 * kernel-livepatch-5_14_21-150400_24_103-default-debuginfo-1-150400.9.3.1 * kernel-livepatch-SLE15-SP4_Update_22-debugsource-1-150400.9.3.1 * openSUSE Leap 15.4 (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.103.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (nosrc) * dtb-aarch64-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (aarch64) * gfs2-kmp-64kb-debuginfo-5.14.21-150400.24.103.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150400.24.103.1 * kernel-64kb-extra-5.14.21-150400.24.103.1 * dtb-socionext-5.14.21-150400.24.103.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150400.24.103.1 * dtb-amazon-5.14.21-150400.24.103.1 * dtb-freescale-5.14.21-150400.24.103.1 * dlm-kmp-64kb-debuginfo-5.14.21-150400.24.103.1 * dtb-lg-5.14.21-150400.24.103.1 * ocfs2-kmp-64kb-5.14.21-150400.24.103.1 * dtb-mediatek-5.14.21-150400.24.103.1 * dtb-hisilicon-5.14.21-150400.24.103.1 * dtb-altera-5.14.21-150400.24.103.1 * dlm-kmp-64kb-5.14.21-150400.24.103.1 * dtb-sprd-5.14.21-150400.24.103.1 * dtb-amlogic-5.14.21-150400.24.103.1 * kernel-64kb-debugsource-5.14.21-150400.24.103.1 * kernel-64kb-optional-debuginfo-5.14.21-150400.24.103.1 * kernel-64kb-livepatch-devel-5.14.21-150400.24.103.1 * kernel-64kb-devel-5.14.21-150400.24.103.1 * dtb-nvidia-5.14.21-150400.24.103.1 * dtb-qcom-5.14.21-150400.24.103.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.103.1 * gfs2-kmp-64kb-5.14.21-150400.24.103.1 * kernel-64kb-debuginfo-5.14.21-150400.24.103.1 * reiserfs-kmp-64kb-5.14.21-150400.24.103.1 * dtb-xilinx-5.14.21-150400.24.103.1 * dtb-apm-5.14.21-150400.24.103.1 * dtb-apple-5.14.21-150400.24.103.1 * dtb-marvell-5.14.21-150400.24.103.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150400.24.103.1 * kernel-64kb-extra-debuginfo-5.14.21-150400.24.103.1 * dtb-renesas-5.14.21-150400.24.103.1 * dtb-rockchip-5.14.21-150400.24.103.1 * kernel-64kb-optional-5.14.21-150400.24.103.1 * kselftests-kmp-64kb-5.14.21-150400.24.103.1 * dtb-amd-5.14.21-150400.24.103.1 * dtb-arm-5.14.21-150400.24.103.1 * dtb-cavium-5.14.21-150400.24.103.1 * dtb-allwinner-5.14.21-150400.24.103.1 * dtb-exynos-5.14.21-150400.24.103.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150400.24.103.1 * dtb-broadcom-5.14.21-150400.24.103.1 * cluster-md-kmp-64kb-5.14.21-150400.24.103.1 * openSUSE Leap 15.4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.103.1 * openSUSE Leap Micro 5.3 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.103.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * openSUSE Leap Micro 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.103.1 * openSUSE Leap Micro 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Live Patching 15-SP4 (nosrc) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_103-default-1-150400.9.3.1 * kernel-default-livepatch-devel-5.14.21-150400.24.103.1 * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-default-livepatch-5.14.21-150400.24.103.1 * kernel-livepatch-5_14_21-150400_24_103-default-debuginfo-1-150400.9.3.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * kernel-livepatch-SLE15-SP4_Update_22-debugsource-1-150400.9.3.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * dlm-kmp-default-5.14.21-150400.24.103.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.103.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debugsource-5.14.21-150400.24.103.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.103.1 * ocfs2-kmp-default-5.14.21-150400.24.103.1 * gfs2-kmp-default-5.14.21-150400.24.103.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * cluster-md-kmp-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (nosrc) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.103.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-64kb-debugsource-5.14.21-150400.24.103.1 * kernel-64kb-debuginfo-5.14.21-150400.24.103.1 * kernel-64kb-devel-5.14.21-150400.24.103.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.103.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.103.1 * kernel-obs-build-5.14.21-150400.24.103.1 * kernel-default-debugsource-5.14.21-150400.24.103.1 * kernel-obs-build-debugsource-5.14.21-150400.24.103.1 * reiserfs-kmp-default-5.14.21-150400.24.103.1 * kernel-default-devel-5.14.21-150400.24.103.1 * kernel-syms-5.14.21-150400.24.103.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.103.1 * kernel-default-debuginfo-5.14.21-150400.24.103.1 * kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.103.1 * kernel-macros-5.14.21-150400.24.103.1 * kernel-devel-5.14.21-150400.24.103.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.103.1 ## References: * https://www.suse.com/security/cve/CVE-2020-26555.html * https://www.suse.com/security/cve/CVE-2023-51779.html * https://www.suse.com/security/cve/CVE-2023-6121.html * https://www.suse.com/security/cve/CVE-2023-6531.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2023-6606.html * https://www.suse.com/security/cve/CVE-2023-6610.html * https://www.suse.com/security/cve/CVE-2023-6622.html * https://www.suse.com/security/cve/CVE-2023-6931.html * https://www.suse.com/security/cve/CVE-2023-6932.html * https://bugzilla.suse.com/show_bug.cgi?id=1179610 * https://bugzilla.suse.com/show_bug.cgi?id=1183045 * https://bugzilla.suse.com/show_bug.cgi?id=1193285 * https://bugzilla.suse.com/show_bug.cgi?id=1211162 * https://bugzilla.suse.com/show_bug.cgi?id=1211226 * https://bugzilla.suse.com/show_bug.cgi?id=1212584 * https://bugzilla.suse.com/show_bug.cgi?id=1214747 * https://bugzilla.suse.com/show_bug.cgi?id=1214823 * https://bugzilla.suse.com/show_bug.cgi?id=1215237 * https://bugzilla.suse.com/show_bug.cgi?id=1215696 * https://bugzilla.suse.com/show_bug.cgi?id=1215885 * https://bugzilla.suse.com/show_bug.cgi?id=1216057 * https://bugzilla.suse.com/show_bug.cgi?id=1216559 * https://bugzilla.suse.com/show_bug.cgi?id=1216776 * https://bugzilla.suse.com/show_bug.cgi?id=1217036 * https://bugzilla.suse.com/show_bug.cgi?id=1217217 * https://bugzilla.suse.com/show_bug.cgi?id=1217250 * https://bugzilla.suse.com/show_bug.cgi?id=1217602 * https://bugzilla.suse.com/show_bug.cgi?id=1217692 * https://bugzilla.suse.com/show_bug.cgi?id=1217790 * https://bugzilla.suse.com/show_bug.cgi?id=1217801 * https://bugzilla.suse.com/show_bug.cgi?id=1217933 * https://bugzilla.suse.com/show_bug.cgi?id=1217938 * https://bugzilla.suse.com/show_bug.cgi?id=1217946 * https://bugzilla.suse.com/show_bug.cgi?id=1217947 * https://bugzilla.suse.com/show_bug.cgi?id=1217980 * https://bugzilla.suse.com/show_bug.cgi?id=1217981 * https://bugzilla.suse.com/show_bug.cgi?id=1217982 * https://bugzilla.suse.com/show_bug.cgi?id=1218056 * https://bugzilla.suse.com/show_bug.cgi?id=1218139 * https://bugzilla.suse.com/show_bug.cgi?id=1218184 * https://bugzilla.suse.com/show_bug.cgi?id=1218234 * https://bugzilla.suse.com/show_bug.cgi?id=1218253 * https://bugzilla.suse.com/show_bug.cgi?id=1218258 * https://bugzilla.suse.com/show_bug.cgi?id=1218335 * https://bugzilla.suse.com/show_bug.cgi?id=1218357 * https://bugzilla.suse.com/show_bug.cgi?id=1218447 * https://bugzilla.suse.com/show_bug.cgi?id=1218515 * https://bugzilla.suse.com/show_bug.cgi?id=1218559 * https://bugzilla.suse.com/show_bug.cgi?id=1218569 * https://bugzilla.suse.com/show_bug.cgi?id=1218659 * https://jira.suse.com/browse/PED-3459 * https://jira.suse.com/browse/PED-5021 * https://jira.suse.com/browse/PED-7322

1 0

SUSE-SU-2024:0157-1: moderate: Security update for libcryptopp
by OPENSUSE-SECURITY-UPDATES 18 Jan '24

18 Jan '24

# Security update for libcryptopp Announcement ID: SUSE-SU-2024:0157-1 Rating: moderate References: * bsc#1218222 Cross-References: * CVE-2023-50981 CVSS scores: * CVE-2023-50981 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-50981 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libcryptopp fixes the following issues: * CVE-2023-50981: Fixed a potential denial of service issue via crafted DER public key data (bsc#1218222). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-157=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-157=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-157=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-157=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libcryptopp8_6_0-debuginfo-8.6.0-150400.3.6.1 * libcryptopp8_6_0-8.6.0-150400.3.6.1 * libcryptopp-debugsource-8.6.0-150400.3.6.1 * libcryptopp-devel-8.6.0-150400.3.6.1 * openSUSE Leap 15.4 (x86_64) * libcryptopp8_6_0-32bit-8.6.0-150400.3.6.1 * libcryptopp8_6_0-32bit-debuginfo-8.6.0-150400.3.6.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libcryptopp8_6_0-64bit-8.6.0-150400.3.6.1 * libcryptopp8_6_0-64bit-debuginfo-8.6.0-150400.3.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libcryptopp8_6_0-debuginfo-8.6.0-150400.3.6.1 * libcryptopp8_6_0-8.6.0-150400.3.6.1 * libcryptopp-debugsource-8.6.0-150400.3.6.1 * libcryptopp-devel-8.6.0-150400.3.6.1 * openSUSE Leap 15.5 (x86_64) * libcryptopp8_6_0-32bit-8.6.0-150400.3.6.1 * libcryptopp8_6_0-32bit-debuginfo-8.6.0-150400.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libcryptopp8_6_0-debuginfo-8.6.0-150400.3.6.1 * libcryptopp8_6_0-8.6.0-150400.3.6.1 * libcryptopp-debugsource-8.6.0-150400.3.6.1 * libcryptopp-devel-8.6.0-150400.3.6.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * libcryptopp8_6_0-debuginfo-8.6.0-150400.3.6.1 * libcryptopp8_6_0-8.6.0-150400.3.6.1 * libcryptopp-debugsource-8.6.0-150400.3.6.1 * libcryptopp-devel-8.6.0-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50981.html * https://bugzilla.suse.com/show_bug.cgi?id=1218222

1 0

openSUSE-SU-2024:0023-1: moderate: Security update for libuev
by opensuse-security＠opensuse.org 18 Jan '24

18 Jan '24

openSUSE Security Update: Security update for libuev ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0023-1 Rating: moderate References: #1218749 Cross-References: CVE-2022-48620 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libuev fixes the following issues: - Update to 2.4.1: * Update README with list of moden Linux APIs used * Fix #27: possible buffer overrun in uev_run() boo#1218749 CVE-2022-48620 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-23=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libuev-devel-2.4.1-bp155.3.3.1 libuev3-2.4.1-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-48620.html https://bugzilla.suse.com/1218749

1 0

SUSE-SU-2024:0136-1: moderate: Security update for pam
by OPENSUSE-SECURITY-UPDATES 18 Jan '24

18 Jan '24

# Security update for pam Announcement ID: SUSE-SU-2024:0136-1 Rating: moderate References: * bsc#1217000 * bsc#1218475 Cross-References: * CVE-2024-22365 CVSS scores: * CVE-2024-22365 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475). * Check localtime_r() return value to fix crashing (bsc#1217000) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-136=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-136=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-136=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-136=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-136=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-136=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-136=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2024-136=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-136=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2024-136=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-136=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-136=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-136=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-136=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-136=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2024-136=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-136=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-136=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-136=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2024-136=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-136=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-136=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-136=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-136=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-136=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-136=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-136=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-136=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-136=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-136=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-136=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-136=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-136=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * Basesystem Module 15-SP5 (noarch) * pam-doc-1.3.0-150000.6.66.1 * Basesystem Module 15-SP5 (x86_64) * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * Development Tools Module 15-SP5 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Real Time 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Manager Proxy 4.3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Manager Proxy 4.3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Manager Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Manager Server 4.3 (x86_64) * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Enterprise Storage 7.1 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Enterprise Storage 7.1 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE CaaS Platform 4.0 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE CaaS Platform 4.0 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * openSUSE Leap 15.5 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * openSUSE Leap 15.5 (noarch) * pam-doc-1.3.0-150000.6.66.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22365.html * https://bugzilla.suse.com/show_bug.cgi?id=1217000 * https://bugzilla.suse.com/show_bug.cgi?id=1218475

1 0

SUSE-SU-2024:0129-1: important: Security update for the Linux Kernel
by OPENSUSE-SECURITY-UPDATES 16 Jan '24

16 Jan '24

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2024:0129-1 Rating: important References: * bsc#1179610 * bsc#1183045 * bsc#1193285 * bsc#1211162 * bsc#1211226 * bsc#1212584 * bsc#1214747 * bsc#1214823 * bsc#1215237 * bsc#1215696 * bsc#1215885 * bsc#1216057 * bsc#1216559 * bsc#1216776 * bsc#1217036 * bsc#1217217 * bsc#1217250 * bsc#1217602 * bsc#1217692 * bsc#1217790 * bsc#1217801 * bsc#1217933 * bsc#1217938 * bsc#1217946 * bsc#1217947 * bsc#1217980 * bsc#1217981 * bsc#1217982 * bsc#1218056 * bsc#1218139 * bsc#1218184 * bsc#1218234 * bsc#1218253 * bsc#1218258 * bsc#1218335 * bsc#1218357 * bsc#1218447 * bsc#1218515 * bsc#1218559 * bsc#1218569 * bsc#1218659 * jsc#PED-3459 * jsc#PED-5021 * jsc#PED-7322 Cross-References: * CVE-2020-26555 * CVE-2023-51779 * CVE-2023-6121 * CVE-2023-6531 * CVE-2023-6546 * CVE-2023-6606 * CVE-2023-6610 * CVE-2023-6622 * CVE-2023-6931 * CVE-2023-6932 CVSS scores: * CVE-2020-26555 ( SUSE ): 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2020-26555 ( NVD ): 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2023-51779 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6121 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2023-6121 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6606 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2023-6606 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2023-6610 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2023-6610 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2023-6622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6931 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6931 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Real Time Module 15-SP4 An update that solves 10 vulnerabilities, contains three features and has 31 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on (bsc#1218447). * CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). * CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559). * CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bsc#1179610 bsc#1215237). * CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1218335). * CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258). * CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253). * CVE-2023-6622: Fixed a null pointer dereference vulnerability in nft_dynset_init() that could allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service (bsc#1217938). * CVE-2023-6121: Fixed an information leak via dmesg when receiving a crafted packet in the NVMe-oF/TCP subsystem (bsc#1217250). The following non-security bugs were fixed: * Reviewed and added more information to README.SUSE (jsc#PED-5021). * Build in the correct KOTD repository with multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184) With multibuild setting repository flags is no longer supported for individual spec files - see https://github.com/openSUSE/open-build-service/issues/3574 Add ExclusiveArch conditional that depends on a macro set up by bs-upload-kernel instead. With that each package should build only in one repository - either standard or QA. Note: bs-upload-kernel does not interpret rpm conditionals, and only uses the first ExclusiveArch line to determine the architectures to enable. * KVM: s390/mm: Properly reset no-dat (bsc#1218056). * KVM: s390: vsie: fix wrong VIR 37 when MSO is used (bsc#1217933). * KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322). * NFS: Fix O_DIRECT locking issues (bsc#1211162). * NFS: Fix a few more clear_bit() instances that need release semantics (bsc#1211162). * NFS: Fix a potential data corruption (bsc#1211162). * NFS: Fix a use after free in nfs_direct_join_group() (bsc#1211162). * NFS: Fix error handling for O_DIRECT write scheduling (bsc#1211162). * NFS: More O_DIRECT accounting fixes for error paths (bsc#1211162). * NFS: More fixes for nfs_direct_write_reschedule_io() (bsc#1211162). * NFS: Use the correct commit info in nfs_join_page_group() (bsc#1211162). * NLM: Defend against file_lock changes after vfs_test_lock() (bsc#1217692). * Updated SPI patches for NVIDIA Grace enablement (bsc#1212584, jsc#PED-3459). * block: fix revalidate performance regression (bsc#1216057). * bpf: Adjust insufficient default bpf_jit_limit (bsc#1218234). * ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1217980). * ceph: fix type promotion bug on 32bit systems (bsc#1217982). * clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW (bsc#1215885 bsc#1217217). * clocksource: Enable TSC watchdog checking of HPET and PMTMR only when requested (bsc#1215885 bsc#1217217). * clocksource: Handle negative skews in "skew is too large" messages (bsc#1215885 bsc#1217217). * clocksource: Improve "skew is too large" messages (bsc#1215885 bsc#1217217). * clocksource: Improve read-back-delay message (bsc#1215885 bsc#1217217). * clocksource: Loosen clocksource watchdog constraints (bsc#1215885 bsc#1217217). * clocksource: Print clocksource name when clocksource is tested unstable (bsc#1215885 bsc#1217217). * clocksource: Verify HPET and PMTMR when TSC unverified (bsc#1215885 bsc#1217217). * dm_blk_ioctl: implement path failover for SG_IO (bsc#1183045, bsc#1216776). * fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() (bsc#1218659). * kabi/severities: ignore kABI for asus-wmi drivers Tolerate the kABI changes, as used only locally for asus-wmi stuff * libceph: use kernel_connect() (bsc#1217981). * mkspec: Add multibuild support (JSC-SLE#5501, boo#1211226, bsc#1218184) When MULTIBUILD option in config.sh is enabled generate a _multibuild file listing all spec files. * mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors (bsc#1218515). * net/smc: Fix pos miscalculation in statistics (bsc#1218139). * net/tg3: fix race condition in tg3_reset_task() (bsc#1217801). * nfs: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162). * remove unnecessary WARN_ON_ONCE() (bsc#1214823 bsc#1218569). * s390/vx: fix save/restore of fpu kernel context (bsc#1218357). * scsi: lpfc: use unsigned type for num_sge (bsc#1214747). * swiotlb: fix a braino in the alignment check fix (bsc#1216559). * swiotlb: fix slot alignment checks (bsc#1216559). * tracing: Disable preemption when using the filter buffer (bsc#1217036). * tracing: Fix a possible race when disabling buffered events (bsc#1217036). * tracing: Fix a warning when allocating buffered events fails (bsc#1217036). * tracing: Fix incomplete locking when disabling buffered events (bsc#1217036). * tracing: Fix warning in trace_buffered_event_disable() (bsc#1217036). * tracing: Use __this_cpu_read() in trace_event_buffer_lock_reserver() (bsc#1217036). * uapi: propagate __struct_group() attributes to the container union (jsc#SLE-18978). * vsprintf/kallsyms: Prevent invalid data when printing symbol (bsc#1217602). * x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285). * x86/platform/uv: Use alternate source for socket to node data (bsc#1215696 bsc#1217790). * x86/tsc: Add option to force frequency recalibration with HW timer (bsc#1215885 bsc#1217217). * x86/tsc: Be consistent about use_tsc_delay() (bsc#1215885 bsc#1217217). * x86/tsc: Extend watchdog check exemption to 4-Sockets platform (bsc#1215885 bsc#1217217). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Real Time Module 15-SP4 zypper in -t patch SUSE-SLE-Module-RT-15-SP4-2024-129=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-129=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-129=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-129=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-129=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-129=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-129=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-129=1 ## Package List: * SUSE Real Time Module 15-SP4 (x86_64) * kernel-rt-devel-debuginfo-5.14.21-150400.15.65.1 * kernel-rt-debuginfo-5.14.21-150400.15.65.1 * kernel-rt_debug-debuginfo-5.14.21-150400.15.65.1 * gfs2-kmp-rt-debuginfo-5.14.21-150400.15.65.1 * kernel-rt_debug-devel-5.14.21-150400.15.65.1 * cluster-md-kmp-rt-5.14.21-150400.15.65.1 * dlm-kmp-rt-debuginfo-5.14.21-150400.15.65.1 * kernel-rt-devel-5.14.21-150400.15.65.1 * ocfs2-kmp-rt-debuginfo-5.14.21-150400.15.65.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150400.15.65.1 * kernel-syms-rt-5.14.21-150400.15.65.1 * ocfs2-kmp-rt-5.14.21-150400.15.65.1 * dlm-kmp-rt-5.14.21-150400.15.65.1 * kernel-rt_debug-debugsource-5.14.21-150400.15.65.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150400.15.65.1 * kernel-rt-debugsource-5.14.21-150400.15.65.1 * gfs2-kmp-rt-5.14.21-150400.15.65.1 * SUSE Real Time Module 15-SP4 (noarch) * kernel-devel-rt-5.14.21-150400.15.65.1 * kernel-source-rt-5.14.21-150400.15.65.1 * SUSE Real Time Module 15-SP4 (nosrc x86_64) * kernel-rt_debug-5.14.21-150400.15.65.1 * kernel-rt-5.14.21-150400.15.65.1 * openSUSE Leap Micro 5.3 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.65.1 * openSUSE Leap Micro 5.3 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.65.1 * kernel-rt-debugsource-5.14.21-150400.15.65.1 * openSUSE Leap Micro 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.65.1 * openSUSE Leap Micro 5.4 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.65.1 * kernel-rt-debugsource-5.14.21-150400.15.65.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.65.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.65.1 * kernel-rt-debugsource-5.14.21-150400.15.65.1 * SUSE Linux Enterprise Micro 5.3 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.65.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.65.1 * kernel-rt-debugsource-5.14.21-150400.15.65.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.65.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.65.1 * kernel-rt-debugsource-5.14.21-150400.15.65.1 * SUSE Linux Enterprise Micro 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.65.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.65.1 * kernel-rt-debugsource-5.14.21-150400.15.65.1 * SUSE Linux Enterprise Live Patching 15-SP4 (x86_64) * kernel-livepatch-SLE15-SP4-RT_Update_17-debugsource-1-150400.1.3.1 * kernel-livepatch-5_14_21-150400_15_65-rt-debuginfo-1-150400.1.3.1 * kernel-livepatch-5_14_21-150400_15_65-rt-1-150400.1.3.1 ## References: * https://www.suse.com/security/cve/CVE-2020-26555.html * https://www.suse.com/security/cve/CVE-2023-51779.html * https://www.suse.com/security/cve/CVE-2023-6121.html * https://www.suse.com/security/cve/CVE-2023-6531.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2023-6606.html * https://www.suse.com/security/cve/CVE-2023-6610.html * https://www.suse.com/security/cve/CVE-2023-6622.html * https://www.suse.com/security/cve/CVE-2023-6931.html * https://www.suse.com/security/cve/CVE-2023-6932.html * https://bugzilla.suse.com/show_bug.cgi?id=1179610 * https://bugzilla.suse.com/show_bug.cgi?id=1183045 * https://bugzilla.suse.com/show_bug.cgi?id=1193285 * https://bugzilla.suse.com/show_bug.cgi?id=1211162 * https://bugzilla.suse.com/show_bug.cgi?id=1211226 * https://bugzilla.suse.com/show_bug.cgi?id=1212584 * https://bugzilla.suse.com/show_bug.cgi?id=1214747 * https://bugzilla.suse.com/show_bug.cgi?id=1214823 * https://bugzilla.suse.com/show_bug.cgi?id=1215237 * https://bugzilla.suse.com/show_bug.cgi?id=1215696 * https://bugzilla.suse.com/show_bug.cgi?id=1215885 * https://bugzilla.suse.com/show_bug.cgi?id=1216057 * https://bugzilla.suse.com/show_bug.cgi?id=1216559 * https://bugzilla.suse.com/show_bug.cgi?id=1216776 * https://bugzilla.suse.com/show_bug.cgi?id=1217036 * https://bugzilla.suse.com/show_bug.cgi?id=1217217 * https://bugzilla.suse.com/show_bug.cgi?id=1217250 * https://bugzilla.suse.com/show_bug.cgi?id=1217602 * https://bugzilla.suse.com/show_bug.cgi?id=1217692 * https://bugzilla.suse.com/show_bug.cgi?id=1217790 * https://bugzilla.suse.com/show_bug.cgi?id=1217801 * https://bugzilla.suse.com/show_bug.cgi?id=1217933 * https://bugzilla.suse.com/show_bug.cgi?id=1217938 * https://bugzilla.suse.com/show_bug.cgi?id=1217946 * https://bugzilla.suse.com/show_bug.cgi?id=1217947 * https://bugzilla.suse.com/show_bug.cgi?id=1217980 * https://bugzilla.suse.com/show_bug.cgi?id=1217981 * https://bugzilla.suse.com/show_bug.cgi?id=1217982 * https://bugzilla.suse.com/show_bug.cgi?id=1218056 * https://bugzilla.suse.com/show_bug.cgi?id=1218139 * https://bugzilla.suse.com/show_bug.cgi?id=1218184 * https://bugzilla.suse.com/show_bug.cgi?id=1218234 * https://bugzilla.suse.com/show_bug.cgi?id=1218253 * https://bugzilla.suse.com/show_bug.cgi?id=1218258 * https://bugzilla.suse.com/show_bug.cgi?id=1218335 * https://bugzilla.suse.com/show_bug.cgi?id=1218357 * https://bugzilla.suse.com/show_bug.cgi?id=1218447 * https://bugzilla.suse.com/show_bug.cgi?id=1218515 * https://bugzilla.suse.com/show_bug.cgi?id=1218559 * https://bugzilla.suse.com/show_bug.cgi?id=1218569 * https://bugzilla.suse.com/show_bug.cgi?id=1218659 * https://jira.suse.com/browse/PED-3459 * https://jira.suse.com/browse/PED-5021 * https://jira.suse.com/browse/PED-7322

1 0

openSUSE-SU-2024:0021-1: moderate: Security update for perl-Spreadsheet-ParseXLSX
by opensuse-security＠opensuse.org 16 Jan '24

16 Jan '24

openSUSE Security Update: Security update for perl-Spreadsheet-ParseXLSX ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0021-1 Rating: moderate References: #1218651 Cross-References: CVE-2024-22368 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-Spreadsheet-ParseXLSX fixes the following issues: Updated to 0.29: see /usr/share/doc/packages/perl-Spreadsheet-ParseXLSX/Changes 0.29: - Fix for 'Argument "" isn't numeric in addition (+) at /usr/local/shar… - Incorrect cell values due to phonetic data doy#72 - Fix die message in parse() - Cannot open password protected SHA1 encrypted files. doy#68 - use date format detection based on Spreadsheet::XLSX - Add rudimentary support for hyperlinks in cells 0.28: - CVE-2024-22368: out-of-memory condition during parsing of a crafted XLSX document (boo#1218651) - Fix possible memory bomb as reported in https://github.com/haile01/perl_spreadsheet_excel_rce_poc/blob/main/parse_x lsx_bomb.md - Updated Dist::Zilla configuration fixing deprecation warnings Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-21=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): perl-Spreadsheet-ParseXLSX-0.290.0-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-22368.html https://bugzilla.suse.com/1218651

1 0

openSUSE-SU-2024:0020-1: important: Security update for chromium
by opensuse-security＠opensuse.org 16 Jan '24

16 Jan '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0020-1 Rating: important References: #1217839 #1218048 #1218302 #1218303 #1218533 #1218719 Cross-References: CVE-2023-6508 CVE-2023-6509 CVE-2023-6510 CVE-2023-6511 CVE-2023-6512 CVE-2023-6702 CVE-2023-6703 CVE-2023-6704 CVE-2023-6705 CVE-2023-6706 CVE-2023-6707 CVE-2023-7024 CVE-2024-0222 CVE-2024-0223 CVE-2024-0224 CVE-2024-0225 CVE-2024-0333 CVSS scores: CVE-2023-6508 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6509 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6510 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6511 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-6512 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-6702 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6703 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6704 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6704 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6705 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6706 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6707 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-7024 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-0222 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-0223 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-0224 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-0225 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium 120.0.6099.216 (boo#1217839, boo#1218048, boo#1218302, boo#1218533, boo#1218719) * CVE-2024-0333: Insufficient data validation in Extensions * CVE-2024-0222: Use after free in ANGLE * CVE-2024-0223: Heap buffer overflow in ANGLE * CVE-2024-0224: Use after free in WebAudio * CVE-2024-0225: Use after free in WebGPU * CVE-2023-7024: Heap buffer overflow in WebRTC * CVE-2023-6702: Type Confusion in V8 * CVE-2023-6703: Use after free in Blink * CVE-2023-6704: Use after free in libavif (boo#1218303) * CVE-2023-6705: Use after free in WebRTC * CVE-2023-6706: Use after free in FedCM * CVE-2023-6707: Use after free in CSS * CVE-2023-6508: Use after free in Media Stream * CVE-2023-6509: Use after free in Side Panel Search * CVE-2023-6510: Use after free in Media Capture * CVE-2023-6511: Inappropriate implementation in Autofill * CVE-2023-6512: Inappropriate implementation in Web Browser UI Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-20=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-120.0.6099.216-bp155.2.64.1 chromium-120.0.6099.216-bp155.2.64.1 References: https://www.suse.com/security/cve/CVE-2023-6508.html https://www.suse.com/security/cve/CVE-2023-6509.html https://www.suse.com/security/cve/CVE-2023-6510.html https://www.suse.com/security/cve/CVE-2023-6511.html https://www.suse.com/security/cve/CVE-2023-6512.html https://www.suse.com/security/cve/CVE-2023-6702.html https://www.suse.com/security/cve/CVE-2023-6703.html https://www.suse.com/security/cve/CVE-2023-6704.html https://www.suse.com/security/cve/CVE-2023-6705.html https://www.suse.com/security/cve/CVE-2023-6706.html https://www.suse.com/security/cve/CVE-2023-6707.html https://www.suse.com/security/cve/CVE-2023-7024.html https://www.suse.com/security/cve/CVE-2024-0222.html https://www.suse.com/security/cve/CVE-2024-0223.html https://www.suse.com/security/cve/CVE-2024-0224.html https://www.suse.com/security/cve/CVE-2024-0225.html https://www.suse.com/security/cve/CVE-2024-0333.html https://bugzilla.suse.com/1217839 https://bugzilla.suse.com/1218048 https://bugzilla.suse.com/1218302 https://bugzilla.suse.com/1218303 https://bugzilla.suse.com/1218533 https://bugzilla.suse.com/1218719

1 0

openSUSE-SU-2024:0017-1: moderate: Security update for python-django-grappelli
by opensuse-security＠opensuse.org 11 Jan '24

11 Jan '24

openSUSE Security Update: Security update for python-django-grappelli ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0017-1 Rating: moderate References: #1216481 Cross-References: CVE-2021-46898 CVSS scores: CVE-2021-46898 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-django-grappelli fixes the following issues: Update to 2.14.4: - CVE-2021-46898: Fixed views/switch.py vulnerable to protocol-relative URL attacks (boo#1216481) - Fixed: Redirect with switch user. - Improved: Remove extra filtering in AutocompleteLookup. - Improved: Added import statement with URLs for quickstart docs. - Improved: Added additional blocks with inlines to allow override. - Fixed: Compatibility with Django 3.1. - Fixed: Docs about adding Grappelli documentation URLS. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-17=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-django-grappelli-2.14.4-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-46898.html https://bugzilla.suse.com/1216481

1 0

SUSE-SU-2024:0090-1: moderate: Security update for gstreamer-plugins-rs
by OPENSUSE-SECURITY-UPDATES 11 Jan '24

11 Jan '24

# Security update for gstreamer-plugins-rs Announcement ID: SUSE-SU-2024:0090-1 Rating: moderate References: * bsc#1208556 Cross-References: * CVE-2022-31394 CVSS scores: * CVE-2022-31394 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2022-31394 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for gstreamer-plugins-rs fixes the following issues: * CVE-2022-31394: Fixed a potential denial of service in the HTTP/2 implementation (bsc#1208556). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-90=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-90=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-90=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gstreamer-plugins-rs-debuginfo-0.8.2-150400.3.3.1 * gstreamer-plugins-rs-devel-0.8.2-150400.3.3.1 * gstreamer-plugins-rs-debugsource-0.8.2-150400.3.3.1 * gstreamer-plugins-rs-0.8.2-150400.3.3.1 * Desktop Applications Module 15-SP5 (ppc64le) * gstreamer-plugins-rs-debuginfo-0.8.2-150400.3.3.1 * gstreamer-plugins-rs-devel-0.8.2-150400.3.3.1 * gstreamer-plugins-rs-debugsource-0.8.2-150400.3.3.1 * gstreamer-plugins-rs-0.8.2-150400.3.3.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * gstreamer-plugins-rs-debuginfo-0.8.2-150400.3.3.1 * gstreamer-plugins-rs-devel-0.8.2-150400.3.3.1 * gstreamer-plugins-rs-debugsource-0.8.2-150400.3.3.1 * gstreamer-plugins-rs-0.8.2-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2022-31394.html * https://bugzilla.suse.com/show_bug.cgi?id=1208556

1 0

openSUSE-SU-2024:0016-1: important: Security update for opera
by opensuse-security＠opensuse.org 10 Jan '24

10 Jan '24

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0016-1 Rating: important References: Cross-References: CVE-2024-0222 CVE-2024-0223 CVE-2024-0224 CVE-2024-0225 CVSS scores: CVE-2024-0222 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-0223 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-0224 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-0225 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for opera fixes the following issues: opera was updated to 106.0.4998.28 * CHR-9566 Update Chromium on desktop-stable-120-4998 to 120.0.6099.200 * DNA-113161 [Weather] 'Weather Location' description is almost invisible in dark mode * DNA-113351 'Previous tile' should be the same size as 'next tile' * DNA-113443 Crash at opera::ComponentTabCyclerView:: HighlightContents(content::WebContents*, bool) * DNA-114170 [Google Meet][Tab] Links from Google Meet open as blank tabs till change workspace - The update to chromium 120.0.6099.200 fixes following issues: CVE-2024-0222, CVE-2024-0223, CVE-2024-0224, CVE-2024-0225 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2024-16=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-106.0.4998.28-lp155.3.30.1 References: https://www.suse.com/security/cve/CVE-2024-0222.html https://www.suse.com/security/cve/CVE-2024-0223.html https://www.suse.com/security/cve/CVE-2024-0224.html https://www.suse.com/security/cve/CVE-2024-0225.html

1 0

SUSE-SU-2024:0076-1: moderate: Security update for hawk2
by OPENSUSE-SECURITY-UPDATES 10 Jan '24

10 Jan '24

# Security update for hawk2 Announcement ID: SUSE-SU-2024:0076-1 Rating: moderate References: * bsc#1206217 * bsc#1207930 * bsc#1208533 * bsc#1213454 * bsc#1215438 * bsc#1215976 * bsc#1216508 * bsc#1216571 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP1 * SUSE Linux Enterprise High Availability Extension 15 SP2 * SUSE Linux Enterprise High Availability Extension 15 SP3 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 Business Critical Linux 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 Business Critical Linux 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.0 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.0 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.0 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has eight security fixes can now be installed. ## Description: This update for hawk2 fixes the following issues: * Fixed HttpOnly secure flag by default (bsc#1216508). * Fixed CSRF in errors_controller.rb protection (bsc#1216571). Update to version 2.6.4+git.1702030539.5fb7d91b: * Fix mime type issue in MS windows (bsc#1215438) * Parametrize CORS Access-Control-Allow-Origin header (bsc#1213454) * Tests: upgrate tests for ruby3.2 (tumbleweed) (bsc#1215976) * Upgrade for ruby3.2 (tumbleweed) (bsc#1215976) * Forbid special symbols in the category (bsc#1206217) * Fix the sass-rails version on ~5.0 (bsc#1208533) * Don't delete the private key if the public key is missing (bsc#1207930) * make-sle155-compatible.patch . No bsc, it's for backwards compatibility. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2024-76=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-76=1 * SUSE Linux Enterprise High Availability Extension 15 SP1 zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2024-76=1 * SUSE Linux Enterprise High Availability Extension 15 SP2 zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2024-76=1 * SUSE Linux Enterprise High Availability Extension 15 SP3 zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2024-76=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-76=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-76=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debugsource-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debuginfo-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debugsource-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debuginfo-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * SUSE Linux Enterprise High Availability Extension 15 SP1 (aarch64 ppc64le s390x x86_64) * hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debugsource-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debuginfo-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * SUSE Linux Enterprise High Availability Extension 15 SP2 (aarch64 ppc64le s390x x86_64) * hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debugsource-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debuginfo-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le s390x x86_64) * hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debugsource-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debuginfo-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debugsource-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debuginfo-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debugsource-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 * hawk2-debuginfo-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1206217 * https://bugzilla.suse.com/show_bug.cgi?id=1207930 * https://bugzilla.suse.com/show_bug.cgi?id=1208533 * https://bugzilla.suse.com/show_bug.cgi?id=1213454 * https://bugzilla.suse.com/show_bug.cgi?id=1215438 * https://bugzilla.suse.com/show_bug.cgi?id=1215976 * https://bugzilla.suse.com/show_bug.cgi?id=1216508 * https://bugzilla.suse.com/show_bug.cgi?id=1216571

1 0

SUSE-SU-2024:0057-1: important: Security update for eclipse-jgit, jsch
by OPENSUSE-SECURITY-UPDATES 09 Jan '24

09 Jan '24

# Security update for eclipse-jgit, jsch Announcement ID: SUSE-SU-2024:0057-1 Rating: important References: * bsc#1209646 * bsc#1211955 * bsc#1215298 * jsc#PED-6376 * jsc#PED-6377 Cross-References: * CVE-2023-4759 CVSS scores: * CVE-2023-4759 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4759 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 An update that solves one vulnerability, contains two features and has two security fixes can now be installed. ## Description: This update for eclipse-jgit, jsch fixes the following issues: Security fix: \- CVE-2023-4759: Fixed an arbitrary file overwrite which might have occurred with a specially crafted git repository and a case-insensitive filesystem. (bsc#1215298) Other fixes: jsch was updated to version 0.2.9: \- Added support for various algorithms \- Migrated from `com.jcraft:jsch` to `com.github.mwiede:jsch` fork (bsc#1211955): * Alias to the old artifact since the new one is drop-in replacement * Keep the old OSGi bundle symbolic name to avoid extensive patching of eclipse stack \- Updated to version 0.2.9: * For the full list of changes please consult the upstream changelogs below for each version updated: \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.2.9 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.2.8 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.2.7 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.2.6 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.2.5 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.2.4 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.2.3 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.2.2 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.2.1 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.2.0 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.71 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.70 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.69 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.68 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.67 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.66 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.65 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.64 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.63 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.62 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.61 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.60 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.59 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.58 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.57 \+ https://github.com/mwiede/jsch/releases/tag/jsch-0.1.56 eclipse-jgit: * Craft the jgit script from the real Main class of the jar file instead of using a jar launcher (bsc#1209646) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2024-57=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-57=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2024-57=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-57=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-57=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-57=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2024-57=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-57=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-57=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-57=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-57=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-57=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-57=1 ## Package List: * openSUSE Leap 15.4 (noarch) * jsch-demo-0.2.9-150200.11.10.1 * jsch-javadoc-0.2.9-150200.11.10.1 * jgit-javadoc-5.11.0-150200.3.15.2 * eclipse-jgit-5.11.0-150200.3.15.2 * jgit-5.11.0-150200.3.15.2 * jsch-0.2.9-150200.11.10.1 * openSUSE Leap 15.5 (noarch) * eclipse-jgit-5.11.0-150200.3.15.2 * jsch-demo-0.2.9-150200.11.10.1 * jsch-javadoc-0.2.9-150200.11.10.1 * jsch-0.2.9-150200.11.10.1 * Development Tools Module 15-SP4 (noarch) * jsch-0.2.9-150200.11.10.1 * Development Tools Module 15-SP5 (noarch) * jsch-0.2.9-150200.11.10.1 * SUSE Manager Server 4.3 Module 4.3 (noarch) * jsch-0.2.9-150200.11.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * jsch-0.2.9-150200.11.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * jsch-0.2.9-150200.11.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * jsch-0.2.9-150200.11.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * jsch-0.2.9-150200.11.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * jsch-0.2.9-150200.11.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * jsch-0.2.9-150200.11.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * jsch-0.2.9-150200.11.10.1 * SUSE Enterprise Storage 7.1 (noarch) * jsch-0.2.9-150200.11.10.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4759.html * https://bugzilla.suse.com/show_bug.cgi?id=1209646 * https://bugzilla.suse.com/show_bug.cgi?id=1211955 * https://bugzilla.suse.com/show_bug.cgi?id=1215298 * https://jira.suse.com/browse/PED-6376 * https://jira.suse.com/browse/PED-6377

1 0

SUSE-SU-2024:0058-1: important: Security update for wireshark
by OPENSUSE-SECURITY-UPDATES 09 Jan '24

09 Jan '24

# Security update for wireshark Announcement ID: SUSE-SU-2024:0058-1 Rating: important References: * bsc#1218504 * bsc#1218505 Cross-References: * CVE-2024-0208 * CVE-2024-0209 CVSS scores: * CVE-2024-0208 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-0209 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for wireshark fixes the following issues: * Updated to Wireshark 3.6.20: * CVE-2024-0208: Fixed a crash in the GVCP dissector (bsc#1218504). * CVE-2024-0209: Fixed a crash in the IEEE 1609.2 dissector (bsc#1218505). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-58=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-58=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-58=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2024-58=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-58=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2024-58=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-58=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-58=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-58=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-58=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-58=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2024-58=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-58=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-58=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-58=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2024-58=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-58=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-58=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-58=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-58=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-58=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-58=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-58=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Manager Proxy 4.3 (x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * SUSE CaaS Platform 4.0 (x86_64) * libwireshark15-3.6.20-150000.3.109.1 * libwiretap12-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0208.html * https://www.suse.com/security/cve/CVE-2024-0209.html * https://bugzilla.suse.com/show_bug.cgi?id=1218504 * https://bugzilla.suse.com/show_bug.cgi?id=1218505

1 0

SUSE-SU-2024:0044-1: important: Security update for MozillaThunderbird
by OPENSUSE-SECURITY-UPDATES 09 Jan '24

09 Jan '24

# Security update for MozillaThunderbird Announcement ID: SUSE-SU-2024:0044-1 Rating: important References: * bsc#1217974 Cross-References: * CVE-2023-50761 * CVE-2023-50762 * CVE-2023-6856 * CVE-2023-6857 * CVE-2023-6858 * CVE-2023-6859 * CVE-2023-6860 * CVE-2023-6861 * CVE-2023-6862 * CVE-2023-6863 * CVE-2023-6864 CVSS scores: * CVE-2023-50761 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2023-50762 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2023-6856 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-6857 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2023-6858 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-6859 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-6860 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2023-6861 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-6862 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-6863 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-6864 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for MozillaThunderbird fixes the following issues: Firefox Extended Support Release 115.6.0 ESR (bsc#1217974): * CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver (bmo#1843782). * CVE-2023-6857: Symlinks may resolve to smaller than expected buffers (bmo#1796023). * CVE-2023-6858: Heap buffer overflow in nsTextFragment (bmo#1826791). * CVE-2023-6859: Use-after-free in PR_GetIdentitiesLayer (bmo#1840144). * CVE-2023-6860: Potential sandbox escape due to VideoBridge lack of texture validation (bmo#1854669). * CVE-2023-6861: Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode (bmo#1864118). * CVE-2023-6862: Use-after-free in nsDNSService (bsc#1868042). * CVE-2023-6863: Undefined behavior in ShutdownObserver() (bmo#1868901). * CVE-2023-6864: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. * CVE-2023-50762: Truncated signed text was shown with a valid OpenPGP signature (bmo#1862625). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-44=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-44=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-44=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-44=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-debuginfo-115.6.0-150200.8.142.2 * MozillaThunderbird-debugsource-115.6.0-150200.8.142.2 * MozillaThunderbird-translations-other-115.6.0-150200.8.142.2 * MozillaThunderbird-115.6.0-150200.8.142.2 * MozillaThunderbird-translations-common-115.6.0-150200.8.142.2 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * MozillaThunderbird-debuginfo-115.6.0-150200.8.142.2 * MozillaThunderbird-debugsource-115.6.0-150200.8.142.2 * MozillaThunderbird-translations-other-115.6.0-150200.8.142.2 * MozillaThunderbird-115.6.0-150200.8.142.2 * MozillaThunderbird-translations-common-115.6.0-150200.8.142.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * MozillaThunderbird-debuginfo-115.6.0-150200.8.142.2 * MozillaThunderbird-debugsource-115.6.0-150200.8.142.2 * MozillaThunderbird-translations-other-115.6.0-150200.8.142.2 * MozillaThunderbird-115.6.0-150200.8.142.2 * MozillaThunderbird-translations-common-115.6.0-150200.8.142.2 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * MozillaThunderbird-debuginfo-115.6.0-150200.8.142.2 * MozillaThunderbird-debugsource-115.6.0-150200.8.142.2 * MozillaThunderbird-translations-other-115.6.0-150200.8.142.2 * MozillaThunderbird-115.6.0-150200.8.142.2 * MozillaThunderbird-translations-common-115.6.0-150200.8.142.2 ## References: * https://www.suse.com/security/cve/CVE-2023-50761.html * https://www.suse.com/security/cve/CVE-2023-50762.html * https://www.suse.com/security/cve/CVE-2023-6856.html * https://www.suse.com/security/cve/CVE-2023-6857.html * https://www.suse.com/security/cve/CVE-2023-6858.html * https://www.suse.com/security/cve/CVE-2023-6859.html * https://www.suse.com/security/cve/CVE-2023-6860.html * https://www.suse.com/security/cve/CVE-2023-6861.html * https://www.suse.com/security/cve/CVE-2023-6862.html * https://www.suse.com/security/cve/CVE-2023-6863.html * https://www.suse.com/security/cve/CVE-2023-6864.html * https://bugzilla.suse.com/show_bug.cgi?id=1217974

1 0

openSUSE-SU-2024:0013-1: moderate: Security update for opusfile
by opensuse-security＠opensuse.org 08 Jan '24

08 Jan '24

openSUSE Security Update: Security update for opusfile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0013-1 Rating: moderate References: #1207381 Cross-References: CVE-2022-47021 CVSS scores: CVE-2022-47021 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for opusfile fixes the following issues: - CVE-2022-47021: Fixed a NULL pointer dereference (boo#1207381) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-13=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libopusfile0-0.12-bp155.3.3.1 libopusfile0-debuginfo-0.12-bp155.3.3.1 opusfile-debugsource-0.12-bp155.3.3.1 opusfile-devel-0.12-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-47021.html https://bugzilla.suse.com/1207381

1 0

SUSE-SU-2024:0033-1: moderate: Security update for python-aiohttp
by OPENSUSE-SECURITY-UPDATES 05 Jan '24

05 Jan '24

# Security update for python-aiohttp Announcement ID: SUSE-SU-2024:0033-1 Rating: moderate References: * bsc#1217684 Cross-References: * CVE-2023-49081 CVSS scores: * CVE-2023-49081 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-49081 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python-aiohttp fixes the following issues: * CVE-2023-49081: fixed an HTTP header injection via a crafted version (bsc#1217684). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-33=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-33=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-33=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-3.8.5-150400.10.8.1 * python311-aiohttp-debuginfo-3.8.5-150400.10.8.1 * python-aiohttp-debugsource-3.8.5-150400.10.8.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-3.8.5-150400.10.8.1 * python311-aiohttp-debuginfo-3.8.5-150400.10.8.1 * python-aiohttp-debugsource-3.8.5-150400.10.8.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-aiohttp-3.8.5-150400.10.8.1 * python311-aiohttp-debuginfo-3.8.5-150400.10.8.1 * python-aiohttp-debugsource-3.8.5-150400.10.8.1 ## References: * https://www.suse.com/security/cve/CVE-2023-49081.html * https://bugzilla.suse.com/show_bug.cgi?id=1217684

1 0

SUSE-SU-2024:0035-1: important: Security update for python-paramiko
by OPENSUSE-SECURITY-UPDATES 05 Jan '24

05 Jan '24

# Security update for python-paramiko Announcement ID: SUSE-SU-2024:0035-1 Rating: important References: * bsc#1218168 Cross-References: * CVE-2023-48795 CVSS scores: * CVE-2023-48795 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-48795 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python-paramiko fixes the following issues: * CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#bsc#1218168). * Update to 3.4.0. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-35=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-35=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-35=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-35=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-35=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-35=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-35=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-35=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-paramiko-3.4.0-150400.13.6.1 * python-paramiko-doc-3.4.0-150400.13.6.1 * openSUSE Leap 15.5 (noarch) * python311-paramiko-3.4.0-150400.13.6.1 * python-paramiko-doc-3.4.0-150400.13.6.1 * Python 3 Module 15-SP5 (noarch) * python311-paramiko-3.4.0-150400.13.6.1 * python-paramiko-doc-3.4.0-150400.13.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-paramiko-3.4.0-150400.13.6.1 * python-paramiko-doc-3.4.0-150400.13.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-paramiko-3.4.0-150400.13.6.1 * python-paramiko-doc-3.4.0-150400.13.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * python311-paramiko-3.4.0-150400.13.6.1 * python-paramiko-doc-3.4.0-150400.13.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * python311-paramiko-3.4.0-150400.13.6.1 * python-paramiko-doc-3.4.0-150400.13.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-paramiko-3.4.0-150400.13.6.1 * python-paramiko-doc-3.4.0-150400.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-48795.html * https://bugzilla.suse.com/show_bug.cgi?id=1218168

1 0

SUSE-SU-2024:0034-1: moderate: Security update for python-aiohttp
by OPENSUSE-SECURITY-UPDATES 05 Jan '24

05 Jan '24

# Security update for python-aiohttp Announcement ID: SUSE-SU-2024:0034-1 Rating: moderate References: * bsc#1217684 Cross-References: * CVE-2023-49081 CVSS scores: * CVE-2023-49081 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-49081 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.5 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP1 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.0 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.0 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.0 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-aiohttp fixes the following issues: * CVE-2023-49081: fixed an HTTP header injection via a crafted version (bsc#1217684). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-34=1 * Public Cloud Module 15-SP1 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2024-34=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-34=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-34=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-34=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-34=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-aiohttp-doc-3.6.0-150100.3.15.1 * python-aiohttp-debugsource-3.6.0-150100.3.15.1 * python3-aiohttp-debuginfo-3.6.0-150100.3.15.1 * python3-aiohttp-3.6.0-150100.3.15.1 * Public Cloud Module 15-SP1 (aarch64 ppc64le s390x x86_64) * python-aiohttp-doc-3.6.0-150100.3.15.1 * python-aiohttp-debugsource-3.6.0-150100.3.15.1 * python3-aiohttp-debuginfo-3.6.0-150100.3.15.1 * python3-aiohttp-3.6.0-150100.3.15.1 * Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64) * python-aiohttp-doc-3.6.0-150100.3.15.1 * python-aiohttp-debugsource-3.6.0-150100.3.15.1 * python3-aiohttp-debuginfo-3.6.0-150100.3.15.1 * python3-aiohttp-3.6.0-150100.3.15.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * python-aiohttp-debugsource-3.6.0-150100.3.15.1 * python3-aiohttp-debuginfo-3.6.0-150100.3.15.1 * python3-aiohttp-3.6.0-150100.3.15.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python-aiohttp-debugsource-3.6.0-150100.3.15.1 * python3-aiohttp-debuginfo-3.6.0-150100.3.15.1 * python3-aiohttp-3.6.0-150100.3.15.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python-aiohttp-debugsource-3.6.0-150100.3.15.1 * python3-aiohttp-debuginfo-3.6.0-150100.3.15.1 * python3-aiohttp-3.6.0-150100.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2023-49081.html * https://bugzilla.suse.com/show_bug.cgi?id=1217684

1 0

SUSE-SU-2024:0030-1: moderate: Security update for libcryptopp
by OPENSUSE-SECURITY-UPDATES 04 Jan '24

04 Jan '24

# Security update for libcryptopp Announcement ID: SUSE-SU-2024:0030-1 Rating: moderate References: * bsc#1218219 Cross-References: * CVE-2023-50980 CVSS scores: * CVE-2023-50980 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-50980 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libcryptopp fixes the following issues: * CVE-2023-50980: Fixed DoS via malformed DER public key file (bsc#1218219). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-30=1 openSUSE-SLE-15.4-2024-30=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-30=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-30=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-30=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libcryptopp-devel-8.6.0-150400.3.3.1 * libcryptopp8_6_0-8.6.0-150400.3.3.1 * libcryptopp8_6_0-debuginfo-8.6.0-150400.3.3.1 * libcryptopp-debugsource-8.6.0-150400.3.3.1 * openSUSE Leap 15.4 (x86_64) * libcryptopp8_6_0-32bit-debuginfo-8.6.0-150400.3.3.1 * libcryptopp8_6_0-32bit-8.6.0-150400.3.3.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libcryptopp8_6_0-64bit-8.6.0-150400.3.3.1 * libcryptopp8_6_0-64bit-debuginfo-8.6.0-150400.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libcryptopp-devel-8.6.0-150400.3.3.1 * libcryptopp8_6_0-8.6.0-150400.3.3.1 * libcryptopp8_6_0-debuginfo-8.6.0-150400.3.3.1 * libcryptopp-debugsource-8.6.0-150400.3.3.1 * openSUSE Leap 15.5 (x86_64) * libcryptopp8_6_0-32bit-debuginfo-8.6.0-150400.3.3.1 * libcryptopp8_6_0-32bit-8.6.0-150400.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libcryptopp-devel-8.6.0-150400.3.3.1 * libcryptopp8_6_0-8.6.0-150400.3.3.1 * libcryptopp8_6_0-debuginfo-8.6.0-150400.3.3.1 * libcryptopp-debugsource-8.6.0-150400.3.3.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * libcryptopp-devel-8.6.0-150400.3.3.1 * libcryptopp8_6_0-8.6.0-150400.3.3.1 * libcryptopp8_6_0-debuginfo-8.6.0-150400.3.3.1 * libcryptopp-debugsource-8.6.0-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50980.html * https://bugzilla.suse.com/show_bug.cgi?id=1218219

1 0