October 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2023:4264-1: important: Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)
by maintenance＠opensuse.org 30 Oct '23

30 Oct '23

# Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2) Announcement ID: SUSE-SU-2023:4264-1 Rating: important References: * bsc#1210619 Cross-References: * CVE-2023-1829 CVSS scores: * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150200_24_166 fixes one issue. The following security issue was fixed: * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4264=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2023-4264=1 * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2023-4242=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_138-default-debuginfo-2-150300.2.2 * kernel-livepatch-SLE15-SP3_Update_37-debugsource-2-150300.2.2 * kernel-livepatch-5_3_18-150300_59_138-default-2-150300.2.2 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_138-preempt-debuginfo-2-150300.2.2 * kernel-livepatch-5_3_18-150300_59_138-preempt-2-150300.2.2 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_138-default-2-150300.2.2 * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150200_24_166-default-debuginfo-2-150200.2.1 * kernel-livepatch-5_3_18-150200_24_166-default-2-150200.2.1 * kernel-livepatch-SLE15-SP2_Update_41-debugsource-2-150200.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-1829.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619

1 0

SUSE-SU-2023:4260-1: important: Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP3)
by maintenance＠opensuse.org 30 Oct '23

30 Oct '23

# Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP3) Announcement ID: SUSE-SU-2023:4260-1 Rating: important References: * bsc#1214812 * bsc#1215118 * bsc#1215440 Cross-References: * CVE-2023-4004 * CVE-2023-4147 * CVE-2023-4623 CVSS scores: * CVE-2023-4004 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4004 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4147 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4147 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_130 fixes several issues. The following security issues were fixed: * CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440). * CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1215118). * CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1214812). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4260=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2023-4260=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_35-debugsource-3-150300.2.2 * kernel-livepatch-5_3_18-150300_59_130-default-3-150300.2.2 * kernel-livepatch-5_3_18-150300_59_130-default-debuginfo-3-150300.2.2 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_130-preempt-debuginfo-3-150300.2.2 * kernel-livepatch-5_3_18-150300_59_130-preempt-3-150300.2.2 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_130-default-3-150300.2.2 ## References: * https://www.suse.com/security/cve/CVE-2023-4004.html * https://www.suse.com/security/cve/CVE-2023-4147.html * https://www.suse.com/security/cve/CVE-2023-4623.html * https://bugzilla.suse.com/show_bug.cgi?id=1214812 * https://bugzilla.suse.com/show_bug.cgi?id=1215118 * https://bugzilla.suse.com/show_bug.cgi?id=1215440

1 0

SUSE-SU-2023:4261-1: important: Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3)
by maintenance＠opensuse.org 30 Oct '23

30 Oct '23

# Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3) Announcement ID: SUSE-SU-2023:4261-1 Rating: important References: * bsc#1210619 * bsc#1214812 * bsc#1215440 Cross-References: * CVE-2023-1829 * CVE-2023-4004 * CVE-2023-4623 CVSS scores: * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4004 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4004 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_133 fixes several issues. The following security issues were fixed: * CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440). * CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1214812). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4261=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2023-4261=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_133-default-debuginfo-2-150300.2.2 * kernel-livepatch-SLE15-SP3_Update_36-debugsource-2-150300.2.2 * kernel-livepatch-5_3_18-150300_59_133-default-2-150300.2.2 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_133-preempt-debuginfo-2-150300.2.2 * kernel-livepatch-5_3_18-150300_59_133-preempt-2-150300.2.2 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_133-default-2-150300.2.2 ## References: * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2023-4004.html * https://www.suse.com/security/cve/CVE-2023-4623.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1214812 * https://bugzilla.suse.com/show_bug.cgi?id=1215440

1 0

SUSE-RU-2023:4233-1: moderate: Recommended update for log4j
by maintenance＠opensuse.org 30 Oct '23

30 Oct '23

# Recommended update for log4j Announcement ID: SUSE-RU-2023:4233-1 Rating: moderate References: * jsc#PED-6376 * jsc#PED-6377 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that contains two features can now be installed. ## Description: This update for log4j fixes the following issues: * Build taglib, jmx-gui, bom, nosql and web modules, on platforms where we have the dependencies ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4233=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4233=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4233=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4233=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4233=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4233=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4233=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4233=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4233=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4233=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4233=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4233=1 ## Package List: * openSUSE Leap 15.4 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 * openSUSE Leap 15.5 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 * Basesystem Module 15-SP4 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 * Basesystem Module 15-SP5 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 * SUSE Manager Proxy 4.2 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 * SUSE Manager Retail Branch Server 4.2 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 * SUSE Manager Server 4.2 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 * SUSE Enterprise Storage 7.1 (noarch) * log4j-jcl-2.17.2-150200.4.27.45 * log4j-slf4j-2.17.2-150200.4.27.45 * log4j-2.17.2-150200.4.27.45 * log4j-javadoc-2.17.2-150200.4.27.45 ## References: * https://jira.suse.com/browse/PED-6376 * https://jira.suse.com/browse/PED-6377

1 0

SUSE-FU-2023:4234-1: moderate: Feature update for jffi, jnr-a64asm, jnr-constants, jnr-ffi, jnr-posix, jnr-x86asm
by maintenance＠opensuse.org 30 Oct '23

30 Oct '23

# Feature update for jffi, jnr-a64asm, jnr-constants, jnr-ffi, jnr-posix, jnr-x86asm Announcement ID: SUSE-FU-2023:4234-1 Rating: moderate References: * jsc#PED-6377 Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for jffi, jnr-a64asm, jnr-constants, jnr-ffi, jnr-posix, jnr-x86asm fixes the following issues: * The following new package dependencies were implemented as requirements of future versions of jython (jsc#PED-6377): * jffi * jnr-a64asm * jnr-constants * jnr-ffi * jnr-posix * jnr-x86asm ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4234=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4234=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4234=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4234=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4234=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4234=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4234=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4234=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4234=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4234=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4234=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4234=1 ## Package List: * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * Development Tools Module 15-SP5 (noarch) * jnr-constants-0.10.4-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * jnr-constants-0.10.4-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * jnr-constants-0.10.4-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * jnr-constants-0.10.4-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * jnr-constants-0.10.4-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * jnr-constants-0.10.4-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * jnr-constants-0.10.4-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * jnr-constants-0.10.4-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * SUSE Enterprise Storage 7.1 (noarch) * jnr-constants-0.10.4-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * openSUSE Leap 15.4 (noarch) * jnr-posix-javadoc-3.1.16-150200.5.3.12 * jnr-a64asm-javadoc-1.0.0-150200.5.3.12 * jnr-constants-0.10.4-150200.5.3.12 * jnr-x86asm-javadoc-1.0.2-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-ffi-javadoc-2.2.13-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 * jnr-constants-javadoc-0.10.4-150200.5.3.12 * jffi-javadoc-1.3.11-150200.5.3.12 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * openSUSE Leap 15.5 (noarch) * jnr-posix-javadoc-3.1.16-150200.5.3.12 * jnr-a64asm-javadoc-1.0.0-150200.5.3.12 * jnr-constants-0.10.4-150200.5.3.12 * jnr-x86asm-javadoc-1.0.2-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-ffi-javadoc-2.2.13-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 * jnr-constants-javadoc-0.10.4-150200.5.3.12 * jffi-javadoc-1.3.11-150200.5.3.12 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * jffi-1.3.11-150200.5.3.12 * jffi-native-1.3.11-150200.5.3.12 * Development Tools Module 15-SP4 (noarch) * jnr-constants-0.10.4-150200.5.3.12 * jnr-posix-3.1.16-150200.5.3.12 * jnr-x86asm-1.0.2-150200.5.3.12 * jnr-a64asm-1.0.0-150200.5.3.12 * jnr-ffi-2.2.13-150200.5.3.12 ## References: * https://jira.suse.com/browse/PED-6377

1 0

SUSE-RU-2023:4235-1: moderate: Recommended update for gnu-compilers-hpc
by maintenance＠opensuse.org 30 Oct '23

30 Oct '23

# Recommended update for gnu-compilers-hpc Announcement ID: SUSE-RU-2023:4235-1 Rating: moderate References: * bsc#1214816 * jsc#MSC-706 Affected Products: * HPC Module 15-SP4 * HPC Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that contains one feature and has one fix can now be installed. ## Description: This update for gnu-compilers-hpc fixes the following issues: * Address the failures from the scriplets in the package `gnu12-compilers-hpc- devel` (bsc#1214816) * Add `gnu12-compilers-hpc` to SUSE Linux Enterprise 15 Service Pack 3 LTSS ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4235=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4235=1 * HPC Module 15-SP4 zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2023-4235=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2023-4235=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4235=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4235=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4235=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4235=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4235=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4235=1 ## Package List: * openSUSE Leap 15.4 (noarch) * gnu11-compilers-hpc-devel-1.4-150100.3.28.1 * gnu11-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-devel-1.4-150100.3.28.1 * gnu9-compilers-hpc-1.4-150100.3.28.1 * gnu9-compilers-hpc-devel-1.4-150100.3.28.1 * gnu9-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-1.4-150100.3.28.1 * gnu10-compilers-hpc-1.4-150100.3.28.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-1.4-150100.3.28.1 * gnu11-compilers-hpc-1.4-150100.3.28.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.28.1 * openSUSE Leap 15.5 (noarch) * gnu11-compilers-hpc-devel-1.4-150100.3.28.1 * gnu11-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-devel-1.4-150100.3.28.1 * gnu9-compilers-hpc-1.4-150100.3.28.1 * gnu9-compilers-hpc-devel-1.4-150100.3.28.1 * gnu9-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-1.4-150100.3.28.1 * gnu10-compilers-hpc-1.4-150100.3.28.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-1.4-150100.3.28.1 * gnu11-compilers-hpc-1.4-150100.3.28.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.28.1 * HPC Module 15-SP4 (noarch) * gnu11-compilers-hpc-devel-1.4-150100.3.28.1 * gnu11-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-1.4-150100.3.28.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-1.4-150100.3.28.1 * gnu11-compilers-hpc-1.4-150100.3.28.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.28.1 * HPC Module 15-SP5 (noarch) * gnu-compilers-hpc-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-1.4-150100.3.28.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-1.4-150100.3.28.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.28.1 * SUSE Package Hub 15 15-SP4 (noarch) * gnu10-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-1.4-150100.3.28.1 * gnu10-compilers-hpc-1.4-150100.3.28.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-1.4-150100.3.28.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.28.1 * SUSE Package Hub 15 15-SP5 (noarch) * gnu10-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-1.4-150100.3.28.1 * gnu10-compilers-hpc-1.4-150100.3.28.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-1.4-150100.3.28.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch) * gnu9-compilers-hpc-1.4-150100.3.28.1 * gnu9-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-devel-1.4-150100.3.28.1 * gnu9-compilers-hpc-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-1.4-150100.3.28.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-1.4-150100.3.28.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * gnu11-compilers-hpc-devel-1.4-150100.3.28.1 * gnu11-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-devel-1.4-150100.3.28.1 * gnu9-compilers-hpc-1.4-150100.3.28.1 * gnu9-compilers-hpc-devel-1.4-150100.3.28.1 * gnu9-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-1.4-150100.3.28.1 * gnu10-compilers-hpc-1.4-150100.3.28.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-1.4-150100.3.28.1 * gnu11-compilers-hpc-1.4-150100.3.28.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * gnu11-compilers-hpc-devel-1.4-150100.3.28.1 * gnu11-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-1.4-150100.3.28.1 * gnu10-compilers-hpc-1.4-150100.3.28.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-1.4-150100.3.28.1 * gnu11-compilers-hpc-1.4-150100.3.28.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * gnu11-compilers-hpc-devel-1.4-150100.3.28.1 * gnu11-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-devel-1.4-150100.3.28.1 * gnu10-compilers-hpc-devel-1.4-150100.3.28.1 * gnu-compilers-hpc-1.4-150100.3.28.1 * gnu10-compilers-hpc-1.4-150100.3.28.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.28.1 * gnu12-compilers-hpc-1.4-150100.3.28.1 * gnu11-compilers-hpc-1.4-150100.3.28.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.28.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214816 * https://jira.suse.com/browse/MSC-706

1 0

SUSE-RU-2023:4237-1: moderate: Recommended update for perl-Bootloader
by maintenance＠opensuse.org 30 Oct '23

30 Oct '23

# Recommended update for perl-Bootloader Announcement ID: SUSE-RU-2023:4237-1 Rating: moderate References: * bsc#1215064 Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that has one fix can now be installed. ## Description: This update for perl-Bootloader fixes the following issues: * `bootloader_entry` script can have an optional 'force-default' argument (bsc#1215064) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4237=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4237=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4237=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4237=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4237=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4237=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4237=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4237=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4237=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4237=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4237=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4237=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * perl-Bootloader-YAML-0.945-150300.3.12.1 * perl-Bootloader-0.945-150300.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * perl-Bootloader-YAML-0.945-150300.3.12.1 * perl-Bootloader-0.945-150300.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * perl-Bootloader-YAML-0.945-150300.3.12.1 * perl-Bootloader-0.945-150300.3.12.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * perl-Bootloader-YAML-0.945-150300.3.12.1 * perl-Bootloader-0.945-150300.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * perl-Bootloader-YAML-0.945-150300.3.12.1 * perl-Bootloader-0.945-150300.3.12.1 * SUSE Manager Proxy 4.2 (x86_64) * perl-Bootloader-0.945-150300.3.12.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * perl-Bootloader-0.945-150300.3.12.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * perl-Bootloader-0.945-150300.3.12.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * perl-Bootloader-YAML-0.945-150300.3.12.1 * perl-Bootloader-0.945-150300.3.12.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * perl-Bootloader-0.945-150300.3.12.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * perl-Bootloader-0.945-150300.3.12.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * perl-Bootloader-0.945-150300.3.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215064

1 0

openSUSE-SU-2023:0337-1: important: Security update for opera
by opensuse-security＠opensuse.org 29 Oct '23

29 Oct '23

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0337-1 Rating: important References: Cross-References: CVE-2023-5218 CVE-2023-5473 CVE-2023-5474 CVE-2023-5475 CVE-2023-5476 CVE-2023-5477 CVE-2023-5478 CVE-2023-5479 CVE-2023-5481 CVE-2023-5483 CVE-2023-5484 CVE-2023-5485 CVE-2023-5486 CVE-2023-5487 CVSS scores: CVE-2023-5218 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5473 (NVD) : 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2023-5474 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5475 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-5476 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5477 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-5478 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2023-5479 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-5481 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-5483 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-5484 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-5485 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-5486 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-5487 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.4:NonFree ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 104.0.4944.23 * DNA-110465 [Scrollable tab strip] Weird animation when closing tab * DNA-112021 Favicons disappear from history after being hovered over * DNA-112310 Put opening animation on start page behind a flag * DNA-112462 Crash at opera::SidebarItemViewImpl:: StateChanged(views::Button::ButtonState) * DNA-112464 Crash at anonymous namespace::SwitchToTabButton:: OnThemeChanged() * DNA-112518 Force Default as last used Profile * DNA-112534 Set profiles_order to Default dir - Changes in 104.0.4944.18 * CHR-9471 Update Chromium on desktop-stable-118-4944 to 118.0.5993.71 * DNA-111704 chrome.webRequest.onHeadersReceived event is not fired for extension if page opened from SpeedDial tile * DNA-111878 Highlighting of tabs and bookmarks in dark mode is almost invisible. * DNA-111883 [Address bar] Hover effect on page is placed too high * DNA-111922 [Linux] Change Opera beta application icon * DNA-111955 Reduce colors used in Opera as much as possible * DNA-112075 Rename palette colors in theme for better reusability * DNA-112108 Fix dangling WebContents ptr bound to TabSnoozeInfobarDelegate::Show callback * DNA-112222 Tab in island not marked as active * DNA-112242 Disable feature flag #platform-h264-decoder-in-gpu by default on stable channel * DNA-112265 Promote 104 to stable * DNA-112312 Turn on #wallet-selector on all streams * DNA-112313 Enable #pinboard-popup-refresh on all streams * DNA-112426 [profile migration] Renaming invalid Default to Default.old is not needed anymore - The update to chromium 118.0.5993.71 fixes following issues: CVE-2023-5218, CVE-2023-5487, CVE-2023-5484, CVE-2023-5475, CVE-2023-5483, CVE-2023-5481, CVE-2023-5476, CVE-2023-5474, CVE-2023-5479, CVE-2023-5485, CVE-2023-5478, CVE-2023-5477, CVE-2023-5486, CVE-2023-5473 - Complete Opera 104 changelog at: https://blogs.opera.com/desktop/changelog-for-104/ - Update to 103.0.4928.34 * DNA-111680 Fix highlight of bookmarks bar folder elements * DNA-111703 O icon moves upon opening menu * DNA-111883 [Address bar] Hover effect on page is placed too high * DNA-111940 OMenu text displaced to the right without any indentation * DNA-112118 Crash at history::URLDatabase:: CreateContinueOnIndexIfNeeded(std::__Cr::vector) - Update to 103.0.4928.26 * DNA-111681 Disappearing icons of bookmarks bar folders elements * DNA-112020 Enable #address-bar-dropdown-cities on all streams Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4:NonFree: zypper in -t patch openSUSE-2023-337=1 Package List: - openSUSE Leap 15.4:NonFree (x86_64): opera-104.0.4944.23-lp154.2.56.1 References: https://www.suse.com/security/cve/CVE-2023-5218.html https://www.suse.com/security/cve/CVE-2023-5473.html https://www.suse.com/security/cve/CVE-2023-5474.html https://www.suse.com/security/cve/CVE-2023-5475.html https://www.suse.com/security/cve/CVE-2023-5476.html https://www.suse.com/security/cve/CVE-2023-5477.html https://www.suse.com/security/cve/CVE-2023-5478.html https://www.suse.com/security/cve/CVE-2023-5479.html https://www.suse.com/security/cve/CVE-2023-5481.html https://www.suse.com/security/cve/CVE-2023-5483.html https://www.suse.com/security/cve/CVE-2023-5484.html https://www.suse.com/security/cve/CVE-2023-5485.html https://www.suse.com/security/cve/CVE-2023-5486.html https://www.suse.com/security/cve/CVE-2023-5487.html

1 0

openSUSE-SU-2023:0338-1: important: Security update for opera
by opensuse-security＠opensuse.org 29 Oct '23

29 Oct '23

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0338-1 Rating: important References: Cross-References: CVE-2023-5218 CVE-2023-5473 CVE-2023-5474 CVE-2023-5475 CVE-2023-5476 CVE-2023-5477 CVE-2023-5478 CVE-2023-5479 CVE-2023-5481 CVE-2023-5483 CVE-2023-5484 CVE-2023-5485 CVE-2023-5486 CVE-2023-5487 CVSS scores: CVE-2023-5218 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5473 (NVD) : 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2023-5474 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5475 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-5476 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5477 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-5478 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2023-5479 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-5481 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-5483 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-5484 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-5485 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-5486 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-5487 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 104.0.4944.23 * DNA-110465 [Scrollable tab strip] Weird animation when closing tab * DNA-112021 Favicons disappear from history after being hovered over * DNA-112310 Put opening animation on start page behind a flag * DNA-112462 Crash at opera::SidebarItemViewImpl:: StateChanged(views::Button::ButtonState) * DNA-112464 Crash at anonymous namespace::SwitchToTabButton:: OnThemeChanged() * DNA-112518 Force Default as last used Profile * DNA-112534 Set profiles_order to Default dir - Changes in 104.0.4944.18 * CHR-9471 Update Chromium on desktop-stable-118-4944 to 118.0.5993.71 * DNA-111704 chrome.webRequest.onHeadersReceived event is not fired for extension if page opened from SpeedDial tile * DNA-111878 Highlighting of tabs and bookmarks in dark mode is almost invisible. * DNA-111883 [Address bar] Hover effect on page is placed too high * DNA-111922 [Linux] Change Opera beta application icon * DNA-111955 Reduce colors used in Opera as much as possible * DNA-112075 Rename palette colors in theme for better reusability * DNA-112108 Fix dangling WebContents ptr bound to TabSnoozeInfobarDelegate::Show callback * DNA-112222 Tab in island not marked as active * DNA-112242 Disable feature flag #platform-h264-decoder-in-gpu by default on stable channel * DNA-112265 Promote 104 to stable * DNA-112312 Turn on #wallet-selector on all streams * DNA-112313 Enable #pinboard-popup-refresh on all streams * DNA-112426 [profile migration] Renaming invalid Default to Default.old is not needed anymore - The update to chromium 118.0.5993.71 fixes following issues: CVE-2023-5218, CVE-2023-5487, CVE-2023-5484, CVE-2023-5475, CVE-2023-5483, CVE-2023-5481, CVE-2023-5476, CVE-2023-5474, CVE-2023-5479, CVE-2023-5485, CVE-2023-5478, CVE-2023-5477, CVE-2023-5486, CVE-2023-5473 - Complete Opera 104 changelog at: https://blogs.opera.com/desktop/changelog-for-104/ - Update to 103.0.4928.34 * DNA-111680 Fix highlight of bookmarks bar folder elements * DNA-111703 O icon moves upon opening menu * DNA-111883 [Address bar] Hover effect on page is placed too high * DNA-111940 OMenu text displaced to the right without any indentation * DNA-112118 Crash at history::URLDatabase:: CreateContinueOnIndexIfNeeded(std::__Cr::vector) - Update to 103.0.4928.26 * DNA-111681 Disappearing icons of bookmarks bar folders elements * DNA-112020 Enable #address-bar-dropdown-cities on all streams Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2023-338=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-104.0.4944.23-lp155.3.15.1 References: https://www.suse.com/security/cve/CVE-2023-5218.html https://www.suse.com/security/cve/CVE-2023-5473.html https://www.suse.com/security/cve/CVE-2023-5474.html https://www.suse.com/security/cve/CVE-2023-5475.html https://www.suse.com/security/cve/CVE-2023-5476.html https://www.suse.com/security/cve/CVE-2023-5477.html https://www.suse.com/security/cve/CVE-2023-5478.html https://www.suse.com/security/cve/CVE-2023-5479.html https://www.suse.com/security/cve/CVE-2023-5481.html https://www.suse.com/security/cve/CVE-2023-5483.html https://www.suse.com/security/cve/CVE-2023-5484.html https://www.suse.com/security/cve/CVE-2023-5485.html https://www.suse.com/security/cve/CVE-2023-5486.html https://www.suse.com/security/cve/CVE-2023-5487.html

1 0

openSUSE-RU-2023:0333-1: moderate: Recommended update for kubo
by maintenance＠opensuse.org 27 Oct '23

27 Oct '23

openSUSE Recommended Update: Recommended update for kubo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0333-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kubo fixes the following issues: kubo was updated to 0.23.0 - for details see * https://github.com/ipfs/kubo/releases/tag/v0.23.0 * Mplex deprecation * Gateway: meaningful CAR responses on Not Found errors * Gateway: added Gateway.DisableHTMLErrors configuration option * Binary characters in file names: no longer works with old clients and new Kubo servers * Self-hosting /routing/v1 endpoint for delegated routing needs * Trustless Gateway Over Libp2p Experiment * Removal of /quic (Draft 29) support * Better Caching of multiaddresses for providers in DHT servers * Fixed FUSE multiblock structures Update to 0.22.0 - for details see * https://github.com/ipfs/kubo/releases/tag/v0.22.0 * Gateway: support for order= and dups= parameters (IPIP-412) * ipfs name publish now supports V2 only IPNS records * IPNS name resolution has been fixed * go-libp2p v0.29.0 update with smart dialing Rename from go-ipfs to kubo to follow upsteam git repo rename Update to 0.21.0 - for details see * https://github.com/ipfs/kubo/releases/tag/v0.21.0 * Saving previously seen nodes for later bootstrapping * Gateway: DeserializedResponses config flag * Gateway: DAG-CBOR/-JSON previews and improved error pages * Gateway: subdomain redirects are now text/html * Gateway: support for partial CAR export parameters * ipfs dag stat deduping statistics * Accelerated DHT Client is no longer experimental * client/rpc migration of go-ipfs-http-client Update to 0.18.1 - for details see: * https://github.com/ipfs/kubo/releases/tag/v0.18.1 * https://github.com/ipfs/kubo/releases/tag/v0.18.0 * Support InterPlanetary Network Indexers * Support DAG-JSON and DAG-CBOR in gateways * Enable WebTransport by default * Improve libp2p resource management integration Update to 0.17.0 - for details see: * https://github.com/ipfs/kubo/releases/tag/v0.17.0 * https://github.com/ipfs/kubo/releases/tag/v0.16.0 * https://github.com/ipfs/kubo/releases/tag/v0.15.0 * https://github.com/ipfs/kubo/releases/tag/v0.14.0 * libp2p resource management enabled by default * Implicit connection manager limits * TAR Response Format on Gateways * Dialling /wss peer behind a reverse proxy * More configurable delegated routing system * WebTransport new experimental Transport * Hardened IPNS record verification * Web Gateways now support _redirects files * Add files to MFS with ipfs add --to-files * Blake 3 support * Fx Options plugin * $IPFS_PATH/gateway file * Removed mdns_legacy implementation * Delegated Routing * ipfs repo migrate * Emoji support in Multibase Update to 0.13.0 * Can now limit how much resource usage libp2p consumes * Improve connecting with nodes behind NATs and Firewalls * Improve HTTP gateway to allow making faster CDNs * Add Gateway.FastDirIndexThreshold configuration, for fast listings of big directories, without the linear slowdown caused by reading size metadata from child nodes. * Improve Etag and If-None-Match * Add X-Ipfs-Roots for smarter HTTP caches * Added metrics per response type * OpenTelemetry tracing * Expand diag profile command * Support for PEM/PKCS8 for key import/export * Use standard IPLD codec names across the CLI/HTTP API * Prioritize Yamux over Mplex stream multiplexer * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details Update to 0.12.0 * change how data blocks are stored -> needs migration Update to 0.11.0 * UnixFS sharding is now automatic and enabled by default * can no longer act as a Circuit Relay v1 * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed * Circuit Relay v2 * New configuration flags: + Addresses.AppendAnnounce + Pubsub.Enabled * changed ipfs dag get * changed ipfs dag put * UnixFS refactor * Add ipfs multibase command * Bitswap now supports greater configurability * Programmatic shell completions command * Profile collection command * Add Peering command Update to 0.9.0 * Exporting of DAGs via Gateways * Custom DNS Resolvers * Support for non-ICANN DNSLink names * Updated to the latest WebUI * IPNS keys can now be exported via the CLI without stopping the daemon * Experimental DHT Client and Provider System * Deprecations + The ipfs object commands are now deprecated + X-Ipfs-Gateway-Prefix is now deprecated + Proquints support removed + SECIO support removed Update to 0.8.0 * Add Remote pinning services: ipfs pin remote * Faster local pinning and unpinning * update quic-go to support QUIC draft-32 Update to 0.7.0 * Default to Ed25519 keys * Secio is now disabled by default * IPNS paths now encode the key name as a base36 CIDv1 by default * Multiaddresses now accept PeerIDs encoded as CIDv1 * dag stat command shows size and number of blocks Update to 0.5.0 * Improved DHT * Improved Content Transfer * Refactored Bitswap * Stable Badger Datastore * Improved Backoff Logic * AutoNAT - determining if the node is reachable from the public internet * PeerIDs under /p2p/QmSomePeerID instead of /ipfs/QmSomePeerID * enforce RSA keys with 2048+ bits * TLS By Default * Subdomain Gateway now uses http://CID.ipfs.localhost:8080/ * PubSub is now using more efficient "gossipsub" implementation * Files can now be ignored on add by passing the --ignore and/or --ignore-rules-path flags. * It's now possible to add data directly from a named pipe * Systemd Support * socket activation and startup/shutdown notifications * IPFS API Over Unix Domain Sockets * After install run ipfs daemon --migrate Update to 0.4.23 * Fixed Panics and Crashes * Fixed Spontaneous TLS Disconnects * Better Bitswap * Reduced Relay Related DHT Spam * Retuned Connection Manager * Fixed Resursive Resolving of dnsaddr Multiaddrs Update to 0.4.22 * Key bug fixes: * Too many open file descriptors/too many peers (#6237). * Adding multiple files at the same time doesn't work (#6254). * CPU utilization spikes and then holds at 100% (#5613). * Key features: * Experimental TLS1.3 support (to eventually replace secio). * OpenSSL support for SECIO handshakes (performance improvement). Update to 0.4.20 * fixed a frequent panic in the DHT * workaround stuck transfers * See https://github.com/ipfs/go-ipfs/releases/tag/v0.4.20 for full changes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-333=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): kubo-0.23.0-bp155.2.3 References:

1 0