July 2023 - openSUSE Security Announce

SUSE-SU-2023:2859-1: important: Security update for the Linux Kernel
by security＠lists.opensuse.org 17 Jul '23

17 Jul '23

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2023:2859-1 Rating: important References: * #1160435 * #1172073 * #1187829 * #1191731 * #1199046 * #1200217 * #1205758 * #1208600 * #1209039 * #1209342 * #1210533 * #1210791 * #1211089 * #1211519 * #1211796 * #1212128 * #1212129 * #1212154 * #1212158 * #1212494 * #1212501 * #1212502 * #1212504 * #1212513 * #1212606 * #1212842 Cross-References: * CVE-2023-1077 * CVE-2023-1249 * CVE-2023-2002 * CVE-2023-3090 * CVE-2023-3141 * CVE-2023-3159 * CVE-2023-3161 * CVE-2023-3268 * CVE-2023-3358 * CVE-2023-35788 * CVE-2023-35823 * CVE-2023-35824 * CVE-2023-35828 CVSS scores: * CVE-2023-1077 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1077 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1249 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2023-1249 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-2002 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-2002 ( NVD ): 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2023-3090 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3090 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3141 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2023-3141 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2023-3159 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3159 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3161 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3268 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-3268 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2023-3358 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-35788 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2023-35788 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-35823 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-35823 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-35824 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-35824 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-35828 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-35828 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Availability Extension 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves 13 vulnerabilities and has 13 fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). * CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). * CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). * CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). * CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). * CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128). * CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). * CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in kernel/relay.c (bsc#1212502). * CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). * CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504). * CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494). * CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501). * CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513). The following non-security bugs were fixed: * Also include kernel-docs build requirements for ALP * Avoid unsuported tar parameter on SLE12 * Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). * Fix usrmerge error (boo#1211796) * Generalize kernel-doc build requirements. * Move obsolete KMP list into a separate file. The list of obsoleted KMPs varies per release, move it out of the spec file. * Move setting %%build_html to config.sh * Move setting %%split_optional to config.sh * Move setting %%supported_modules_check to config.sh * Move the kernel-binary conflicts out of the spec file. Thie list of conflicting packages varies per release. To reduce merge conflicts move the list out of the spec file. * Remove obsolete rpm spec constructs defattr does not need to be specified anymore buildroot does not need to be specified anymore * Remove usrmerge compatibility symlink in buildroot (boo#1211796). * Trim obsolete KMP list. SLE11 is out of support, we do not need to handle upgrading from SLE11 SP1. * cifs: do not include page data when checking signature (bsc#1200217). * cifs: fix open leaks in open_cached_dir() (bsc#1209342). * google/gve:fix repeated words in comments (bsc#1211519). * gve: Adding a new AdminQ command to verify driver (bsc#1211519). * gve: Cache link_speed value from device (bsc#1211519). * gve: Fix GFP flags when allocing pages (bsc#1211519). * gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519). * gve: Fix spelling mistake "droping" -> "dropping" (bsc#1211519). * gve: Handle alternate miss completions (bsc#1211519). * gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519). * gve: Remove the code of clearing PBA bit (bsc#1211519). * gve: Secure enough bytes in the first TX desc for all TCP pkts (bsc#1211519). * gve: enhance no queue page list detection (bsc#1211519). * kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi * kernel-binary: install expoline.o (boo#1210791 bsc#1211089) * kernel-source: Remove unused macro variant_symbols * kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731). rpm only supports full length release, no provides * rpm/check-for-config-changes: add TOOLCHAIN_NEEDS_* to IGNORED_CONFIGS_RE. * rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB * rpm/kernel-binary.spec.in: Add Provides of kernel-preempt (jsc#SLE-18857) For smooth migration with the former kernel-preempt user, kernel-default provides kernel-preempt now when CONFIG_PREEMPT_DYNAMIC is defined. * rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm * rpm/kernel-binary.spec.in: Fix missing kernel-preempt-devel and KMP Provides (bsc#1199046) * rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435) * usrmerge: Compatibility with earlier rpm (boo#1211796) * x86/build: Avoid relocation information in final vmlinux (bsc#1187829). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-2859=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-2859=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-2859=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2859=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2859=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2859=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2023-2859=1 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * SUSE Linux Enterprise High Availability Extension 15 SP3 zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2023-2859=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2859=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2859=1 * SUSE Linux Enterprise Real Time 15 SP3 zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-2859=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2859=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2859=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-2859=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-2859=1 ## Package List: * SUSE Manager Server 4.2 (nosrc ppc64le s390x x86_64) * kernel-default-5.3.18-150300.59.127.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * SUSE Manager Server 4.2 (noarch) * kernel-macros-5.3.18-150300.59.127.1 * kernel-devel-5.3.18-150300.59.127.1 * SUSE Manager Server 4.2 (nosrc s390x) * kernel-zfcpdump-5.3.18-150300.59.127.1 * SUSE Manager Server 4.2 (s390x) * kernel-zfcpdump-debugsource-5.3.18-150300.59.127.1 * kernel-zfcpdump-debuginfo-5.3.18-150300.59.127.1 * SUSE Manager Server 4.2 (nosrc x86_64) * kernel-preempt-5.3.18-150300.59.127.1 * SUSE Manager Server 4.2 (x86_64) * kernel-preempt-debugsource-5.3.18-150300.59.127.1 * kernel-preempt-debuginfo-5.3.18-150300.59.127.1 * SUSE Enterprise Storage 7.1 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.127.1 * SUSE Enterprise Storage 7.1 (aarch64) * kernel-64kb-debuginfo-5.3.18-150300.59.127.1 * kernel-64kb-debugsource-5.3.18-150300.59.127.1 * kernel-64kb-devel-5.3.18-150300.59.127.1 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.127.1 * SUSE Enterprise Storage 7.1 (aarch64 nosrc x86_64) * kernel-preempt-5.3.18-150300.59.127.1 * kernel-default-5.3.18-150300.59.127.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-debuginfo-5.3.18-150300.59.127.1 * kernel-obs-build-5.3.18-150300.59.127.1 * reiserfs-kmp-default-5.3.18-150300.59.127.1 * kernel-preempt-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-5.3.18-150300.59.127.1 * kernel-syms-5.3.18-150300.59.127.1 * kernel-preempt-devel-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * kernel-obs-build-debugsource-5.3.18-150300.59.127.1 * kernel-preempt-debugsource-5.3.18-150300.59.127.1 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.127.1 * SUSE Enterprise Storage 7.1 (noarch) * kernel-macros-5.3.18-150300.59.127.1 * kernel-devel-5.3.18-150300.59.127.1 * kernel-source-5.3.18-150300.59.127.1 * SUSE Enterprise Storage 7.1 (noarch nosrc) * kernel-docs-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 nosrc s390x x86_64) * kernel-default-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 nosrc s390x x86_64) * kernel-default-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 x86_64) * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 nosrc s390x x86_64) * kernel-default-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 x86_64) * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * openSUSE Leap 15.4 (nosrc) * dtb-aarch64-5.3.18-150300.59.127.1 * openSUSE Leap 15.4 (aarch64) * dtb-al-5.3.18-150300.59.127.1 * dtb-zte-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Live Patching 15-SP3 (nosrc) * kernel-default-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-livepatch-devel-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * kernel-livepatch-5_3_18-150300_59_127-default-1-150300.7.3.1 * kernel-default-livepatch-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-debuginfo-5.3.18-150300.59.127.1 * gfs2-kmp-default-5.3.18-150300.59.127.1 * kernel-default-debuginfo-5.3.18-150300.59.127.1 * dlm-kmp-default-debuginfo-5.3.18-150300.59.127.1 * dlm-kmp-default-5.3.18-150300.59.127.1 * ocfs2-kmp-default-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * cluster-md-kmp-default-5.3.18-150300.59.127.1 * ocfs2-kmp-default-debuginfo-5.3.18-150300.59.127.1 * gfs2-kmp-default-debuginfo-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Availability Extension 15 SP3 (nosrc) * kernel-default-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64) * kernel-64kb-debuginfo-5.3.18-150300.59.127.1 * kernel-64kb-debugsource-5.3.18-150300.59.127.1 * kernel-64kb-devel-5.3.18-150300.59.127.1 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 nosrc x86_64) * kernel-preempt-5.3.18-150300.59.127.1 * kernel-default-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-debuginfo-5.3.18-150300.59.127.1 * kernel-obs-build-5.3.18-150300.59.127.1 * reiserfs-kmp-default-5.3.18-150300.59.127.1 * kernel-preempt-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-5.3.18-150300.59.127.1 * kernel-syms-5.3.18-150300.59.127.1 * kernel-preempt-devel-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * kernel-obs-build-debugsource-5.3.18-150300.59.127.1 * kernel-preempt-debugsource-5.3.18-150300.59.127.1 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * kernel-macros-5.3.18-150300.59.127.1 * kernel-devel-5.3.18-150300.59.127.1 * kernel-source-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64) * kernel-64kb-debuginfo-5.3.18-150300.59.127.1 * kernel-64kb-debugsource-5.3.18-150300.59.127.1 * kernel-64kb-devel-5.3.18-150300.59.127.1 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 nosrc x86_64) * kernel-preempt-5.3.18-150300.59.127.1 * kernel-default-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-debuginfo-5.3.18-150300.59.127.1 * kernel-obs-build-5.3.18-150300.59.127.1 * reiserfs-kmp-default-5.3.18-150300.59.127.1 * kernel-preempt-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-5.3.18-150300.59.127.1 * kernel-syms-5.3.18-150300.59.127.1 * kernel-preempt-devel-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * kernel-obs-build-debugsource-5.3.18-150300.59.127.1 * kernel-preempt-debugsource-5.3.18-150300.59.127.1 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * kernel-macros-5.3.18-150300.59.127.1 * kernel-devel-5.3.18-150300.59.127.1 * kernel-source-5.3.18-150300.59.127.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Real Time 15 SP3 (nosrc x86_64) * kernel-preempt-5.3.18-150300.59.127.1 * kernel-default-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Real Time 15 SP3 (x86_64) * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-debuginfo-5.3.18-150300.59.127.1 * kernel-obs-build-5.3.18-150300.59.127.1 * kernel-preempt-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-5.3.18-150300.59.127.1 * kernel-syms-5.3.18-150300.59.127.1 * kernel-preempt-devel-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * kernel-obs-build-debugsource-5.3.18-150300.59.127.1 * kernel-preempt-debugsource-5.3.18-150300.59.127.1 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Real Time 15 SP3 (noarch) * kernel-macros-5.3.18-150300.59.127.1 * kernel-devel-5.3.18-150300.59.127.1 * kernel-source-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Real Time 15 SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64) * kernel-64kb-debuginfo-5.3.18-150300.59.127.1 * kernel-64kb-debugsource-5.3.18-150300.59.127.1 * kernel-64kb-devel-5.3.18-150300.59.127.1 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-debuginfo-5.3.18-150300.59.127.1 * kernel-obs-build-5.3.18-150300.59.127.1 * reiserfs-kmp-default-5.3.18-150300.59.127.1 * kernel-default-devel-5.3.18-150300.59.127.1 * kernel-syms-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * kernel-obs-build-debugsource-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * kernel-macros-5.3.18-150300.59.127.1 * kernel-devel-5.3.18-150300.59.127.1 * kernel-source-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 nosrc x86_64) * kernel-preempt-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 x86_64) * kernel-preempt-debugsource-5.3.18-150300.59.127.1 * kernel-preempt-debuginfo-5.3.18-150300.59.127.1 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.127.1 * kernel-preempt-devel-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (nosrc s390x) * kernel-zfcpdump-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (s390x) * kernel-zfcpdump-debugsource-5.3.18-150300.59.127.1 * kernel-zfcpdump-debuginfo-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc ppc64le x86_64) * kernel-default-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-debuginfo-5.3.18-150300.59.127.1 * kernel-obs-build-5.3.18-150300.59.127.1 * reiserfs-kmp-default-5.3.18-150300.59.127.1 * kernel-default-devel-5.3.18-150300.59.127.1 * kernel-syms-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * kernel-obs-build-debugsource-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * kernel-macros-5.3.18-150300.59.127.1 * kernel-devel-5.3.18-150300.59.127.1 * kernel-source-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc x86_64) * kernel-preempt-5.3.18-150300.59.127.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * kernel-preempt-debugsource-5.3.18-150300.59.127.1 * kernel-preempt-debuginfo-5.3.18-150300.59.127.1 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.127.1 * kernel-preempt-devel-5.3.18-150300.59.127.1 * SUSE Manager Proxy 4.2 (nosrc x86_64) * kernel-preempt-5.3.18-150300.59.127.1 * kernel-default-5.3.18-150300.59.127.1 * SUSE Manager Proxy 4.2 (x86_64) * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-debuginfo-5.3.18-150300.59.127.1 * kernel-preempt-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * kernel-preempt-debugsource-5.3.18-150300.59.127.1 * SUSE Manager Proxy 4.2 (noarch) * kernel-macros-5.3.18-150300.59.127.1 * kernel-devel-5.3.18-150300.59.127.1 * SUSE Manager Retail Branch Server 4.2 (nosrc x86_64) * kernel-preempt-5.3.18-150300.59.127.1 * kernel-default-5.3.18-150300.59.127.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * kernel-default-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-debuginfo-5.3.18-150300.59.127.1 * kernel-preempt-debuginfo-5.3.18-150300.59.127.1 * kernel-default-devel-5.3.18-150300.59.127.1 * kernel-default-debugsource-5.3.18-150300.59.127.1 * kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1 * kernel-preempt-debugsource-5.3.18-150300.59.127.1 * SUSE Manager Retail Branch Server 4.2 (noarch) * kernel-macros-5.3.18-150300.59.127.1 * kernel-devel-5.3.18-150300.59.127.1 ## References: * https://www.suse.com/security/cve/CVE-2023-1077.html * https://www.suse.com/security/cve/CVE-2023-1249.html * https://www.suse.com/security/cve/CVE-2023-2002.html * https://www.suse.com/security/cve/CVE-2023-3090.html * https://www.suse.com/security/cve/CVE-2023-3141.html * https://www.suse.com/security/cve/CVE-2023-3159.html * https://www.suse.com/security/cve/CVE-2023-3161.html * https://www.suse.com/security/cve/CVE-2023-3268.html * https://www.suse.com/security/cve/CVE-2023-3358.html * https://www.suse.com/security/cve/CVE-2023-35788.html * https://www.suse.com/security/cve/CVE-2023-35823.html * https://www.suse.com/security/cve/CVE-2023-35824.html * https://www.suse.com/security/cve/CVE-2023-35828.html * https://bugzilla.suse.com/show_bug.cgi?id=1160435 * https://bugzilla.suse.com/show_bug.cgi?id=1172073 * https://bugzilla.suse.com/show_bug.cgi?id=1187829 * https://bugzilla.suse.com/show_bug.cgi?id=1191731 * https://bugzilla.suse.com/show_bug.cgi?id=1199046 * https://bugzilla.suse.com/show_bug.cgi?id=1200217 * https://bugzilla.suse.com/show_bug.cgi?id=1205758 * https://bugzilla.suse.com/show_bug.cgi?id=1208600 * https://bugzilla.suse.com/show_bug.cgi?id=1209039 * https://bugzilla.suse.com/show_bug.cgi?id=1209342 * https://bugzilla.suse.com/show_bug.cgi?id=1210533 * https://bugzilla.suse.com/show_bug.cgi?id=1210791 * https://bugzilla.suse.com/show_bug.cgi?id=1211089 * https://bugzilla.suse.com/show_bug.cgi?id=1211519 * https://bugzilla.suse.com/show_bug.cgi?id=1211796 * https://bugzilla.suse.com/show_bug.cgi?id=1212128 * https://bugzilla.suse.com/show_bug.cgi?id=1212129 * https://bugzilla.suse.com/show_bug.cgi?id=1212154 * https://bugzilla.suse.com/show_bug.cgi?id=1212158 * https://bugzilla.suse.com/show_bug.cgi?id=1212494 * https://bugzilla.suse.com/show_bug.cgi?id=1212501 * https://bugzilla.suse.com/show_bug.cgi?id=1212502 * https://bugzilla.suse.com/show_bug.cgi?id=1212504 * https://bugzilla.suse.com/show_bug.cgi?id=1212513 * https://bugzilla.suse.com/show_bug.cgi?id=1212606 * https://bugzilla.suse.com/show_bug.cgi?id=1212842

1 0

SUSE-SU-2023:2862-1: important: Security update for java-1_8_0-ibm
by security＠lists.opensuse.org 17 Jul '23

17 Jul '23

# Security update for java-1_8_0-ibm Announcement ID: SUSE-SU-2023:2862-1 Rating: important References: * #1213000 Affected Products: * Legacy Module 15-SP4 * Legacy Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for java-1_8_0-ibm fixes the following issues: Updated to Java 8.0 Service Refresh 8 Fix Pack 6 (bsc#1213000): * Fixed issue in Java Virtual Machine where outofmemory (OOM) killer terminates the jvm due to failure in control groups detection. ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2862=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-2862=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-2862=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2862=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-2862=1 * SUSE Enterprise Storage 7 zypper in -t patch SUSE-Storage-7-2023-2862=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2862=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2862=1 * Legacy Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2023-2862=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2023-2862=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2862=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2862=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-2862=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-2862=1 ## Package List: * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * SUSE Enterprise Storage 7.1 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * SUSE Enterprise Storage 7.1 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * SUSE Enterprise Storage 7 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * SUSE Enterprise Storage 7 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * SUSE CaaS Platform 4.0 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * SUSE CaaS Platform 4.0 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * openSUSE Leap 15.4 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * openSUSE Leap 15.4 (x86_64) * java-1_8_0-ibm-32bit-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-devel-32bit-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * java-1_8_0-ibm-demo-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-src-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * openSUSE Leap 15.5 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * openSUSE Leap 15.5 (x86_64) * java-1_8_0-ibm-32bit-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-devel-32bit-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * java-1_8_0-ibm-demo-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-src-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * Legacy Module 15-SP4 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * Legacy Module 15-SP4 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * Legacy Module 15-SP4 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * Legacy Module 15-SP5 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * Legacy Module 15-SP5 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * Legacy Module 15-SP5 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213000

1 0

openSUSE-SU-2023:0178-1: moderate: Security update for python-Django
by opensuse-security＠opensuse.org 13 Jul '23

13 Jul '23

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0178-1 Rating: moderate References: #1203793 #1207565 #1208082 #1212742 Cross-References: CVE-2022-41323 CVE-2023-23969 CVE-2023-24580 CVE-2023-36053 CVSS scores: CVE-2022-41323 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-23969 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-23969 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-24580 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-24580 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-36053 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-36053 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for python-Django fixes the following issues: - CVE-2023-36053: Fixed potential regular expression denial of service vulnerability in EmailValidator/URLValidator (boo#1212742) - CVE-2023-24580: Fixed potential denial-of-service vulnerability in file uploads (boo#1208082) - CVE-2023-23969: Fixed potential denial-of-service via Accept-Language headers (boo#1207565) - CVE-2022-41323: Fixed potential denial-of-service vulnerability in internationalized URLs (boo#1203793) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-178=1 Package List: References: https://www.suse.com/security/cve/CVE-2022-41323.html https://www.suse.com/security/cve/CVE-2023-23969.html https://www.suse.com/security/cve/CVE-2023-24580.html https://www.suse.com/security/cve/CVE-2023-36053.html https://bugzilla.suse.com/1203793 https://bugzilla.suse.com/1207565 https://bugzilla.suse.com/1208082 https://bugzilla.suse.com/1212742

1 0

openSUSE-SU-2023:0176-1: important: Security update for python-Django1
by opensuse-security＠opensuse.org 12 Jul '23

12 Jul '23

openSUSE Security Update: Security update for python-Django1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0176-1 Rating: important References: #1212742 Cross-References: CVE-2023-36053 CVSS scores: CVE-2023-36053 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-36053 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of python-Django1 fixes the following issue: - CVE-2023-36053: Fixed potential regular expression denial of service vulnerability in EmailValidator/URLValidator (boo#1212742) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-176=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-Django1-1.11.29-bp155.4.3.1 References: https://www.suse.com/security/cve/CVE-2023-36053.html https://bugzilla.suse.com/1212742

1 0

openSUSE-SU-2023:0177-1: important: Security update for python-Django1
by opensuse-security＠opensuse.org 12 Jul '23

12 Jul '23

openSUSE Security Update: Security update for python-Django1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0177-1 Rating: important References: #1212742 Cross-References: CVE-2023-36053 CVSS scores: CVE-2023-36053 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-36053 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of python-Django1 fixes the following issue: - CVE-2023-36053: Fixed potential regular expression denial of service vulnerability in EmailValidator/URLValidator (boo#1212742) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-177=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): python3-Django1-1.11.29-bp154.2.6.1 References: https://www.suse.com/security/cve/CVE-2023-36053.html https://bugzilla.suse.com/1212742

1 0

openSUSE-SU-2023:0174-1: important: Security update for python-Django
by opensuse-security＠opensuse.org 11 Jul '23

11 Jul '23

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0174-1 Rating: important References: #1212742 Cross-References: CVE-2023-36053 CVSS scores: CVE-2023-36053 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Django fixes the following issues: - CVE-2023-36053: Fixed potential regular expression denial of service vulnerability in EmailValidator/URLValidator (boo#1212742) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-174=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): python3-Django-2.2.28-bp154.2.12.1 References: https://www.suse.com/security/cve/CVE-2023-36053.html https://bugzilla.suse.com/1212742

1 0

openSUSE-SU-2023:0171-1: important: Security update for nextcloud-desktop
by opensuse-security＠opensuse.org 10 Jul '23

10 Jul '23

openSUSE Security Update: Security update for nextcloud-desktop ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0171-1 Rating: important References: #1205798 #1205799 #1205800 #1205801 #1207976 Cross-References: CVE-2022-39331 CVE-2022-39332 CVE-2022-39333 CVE-2022-39334 CVE-2023-23942 CVSS scores: CVE-2022-39331 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2022-39332 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2022-39333 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2022-39334 (NVD) : 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N CVE-2023-23942 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for nextcloud-desktop fixes the following issues: Update ot 3.8.0 - Resize WebView widget once the loginpage rendered - Feature/secure file drop - Check German translation for wrong wording - L10n: Correct word - Fix displaying of file details button for local syncfileitem activities - Improve config upgrade warning dialog - Only accept folder setup page if overrideLocalDir is set - Update CHANGELOG. - Prevent ShareModel crash from accessing bad pointers - Bugfix/init value for pointers - Log to stdout when built in Debug config - Clean up account creation and deletion code - L10n: Added dot to end of sentence - L10n: Fixed grammar - Fix "Create new folder" menu entries in settings not working correctly on macOS - Ci/clang tidy checks init variables - Fix share dialog infinite loading - Fix edit locally job not finding the user account: wrong user id - Skip e2e encrypted files with empty filename in metadata - Use new connect syntax - Fix avatars not showing up in settings dialog account actions until clicked on - Always discover blacklisted folders to avoid data loss when modifying selectivesync list. - Fix infinite loading in the share dialog when public link shares are disabled on the server - With cfapi when dehydrating files add missing flag - Fix text labels in Sync Status component - Display 'Search globally' as the last sharees list element - Fix display of 2FA notification. - Bugfix/do not restore virtual files - Show server name in tray main window - Add Ubuntu Lunar - Debian build classification 'beta' cannot override 'release'. - Update changelog - Follow shouldNotify flag to hide notifications when needed - Bugfix/stop after creating config file - E2EE cut extra zeroes from derypted byte array. - When local sync folder is overriden, respect this choice - Feature/e2ee fixes - This update also fixes security issues: - (boo#1205798, CVE-2022-39331) - Arbitrary HyperText Markup Language injection in notifications - (boo#1205799, CVE-2022-39332) - Arbitrary HyperText Markup Language injection in user status and information - (boo#1205800, CVE-2022-39333) - Arbitrary HyperText Markup Language injection in desktop client application - (boo#1205801, CVE-2022-39334) - Client incorrectly trusts invalid TLS certificates - (boo#1207976, CVE-2023-23942) - missing sanitisation on qml labels leading to javascript injection Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-171=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): libnextcloudsync-devel-3.8.0-bp155.2.3.1 libnextcloudsync0-3.8.0-bp155.2.3.1 nextcloud-desktop-3.8.0-bp155.2.3.1 nextcloud-desktop-dolphin-3.8.0-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): caja-extension-nextcloud-3.8.0-bp155.2.3.1 cloudproviders-extension-nextcloud-3.8.0-bp155.2.3.1 nautilus-extension-nextcloud-3.8.0-bp155.2.3.1 nemo-extension-nextcloud-3.8.0-bp155.2.3.1 nextcloud-desktop-doc-3.8.0-bp155.2.3.1 nextcloud-desktop-lang-3.8.0-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-39331.html https://www.suse.com/security/cve/CVE-2022-39332.html https://www.suse.com/security/cve/CVE-2022-39333.html https://www.suse.com/security/cve/CVE-2022-39334.html https://www.suse.com/security/cve/CVE-2023-23942.html https://bugzilla.suse.com/1205798 https://bugzilla.suse.com/1205799 https://bugzilla.suse.com/1205800 https://bugzilla.suse.com/1205801 https://bugzilla.suse.com/1207976

1 0

openSUSE-SU-2023:0166-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 04 Jul '23

04 Jul '23

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0166-1 Rating: important References: #1207468 #1208941 #1209529 #1209727 #1210616 #1211941 Cross-References: CVE-2023-21987 CVE-2023-21988 CVE-2023-21989 CVE-2023-21990 CVE-2023-21991 CVE-2023-21998 CVE-2023-21999 CVE-2023-22000 CVE-2023-22001 CVE-2023-22002 CVSS scores: CVE-2023-21987 (NVD) : 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2023-21988 (NVD) : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N CVE-2023-21989 (NVD) : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2023-21990 (NVD) : 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2023-21991 (NVD) : 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N CVE-2023-21998 (NVD) : 4.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N CVE-2023-21999 (NVD) : 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2023-22000 (NVD) : 4.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N CVE-2023-22001 (NVD) : 4.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N CVE-2023-22002 (NVD) : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for virtualbox fixes the following issues: - Fix Vagrant/virtualbox startup problems boo#1209727 - VirtualBox 7.0.8 (released April 18 2023) This is a maintenance release. The following items were fixed and/or added: - VMM: Introduced general improvements in nested visualization area - GUI: Brought back Restore current snapshot checkbox of Close VM dialog (bugs #21189, #21491) - GUI: Fixes and validation for VM settings USB filters editor, filter port value is now properly saved/restored - GUI: Fixes for VM name and OS type embedded editors of Details pane - GUI: Cloud related wizards should now propose enabled profiles before disabled - Oracle VM VirtualBox Extension Pack: Fixed shipping the cryptographic support module for full VM encryption - E1000: Fixed possible guru meditation when changing network attachments (bug #21488) - virtio-net: Follow up fixes for FreeBSD 12.3 and pfSense 2.6.0 (bug #21201) - 3D: Fixed various graphics issues with Windows 7 guests (bugs #21129, #21196, #21208, #21521) - Main/UefiVariableStore: Added API to add signatures to the MOK list (Machine Owner Key) - VBoxManage: Introduced modifynvram enrollmok sub-command to enroll Machine Owner Key into NVRAM, so Linux guest kernel can pick it up in order to verify signature of modules signed with this key - Guest Control/Main: Fixed deleting files via built-in toolbox - Linux host: Added possibility to bypass kernel modules signature verification once VBOX_BYPASS_MODULES_SIGNATURE_CHECK="1" is specified in /etc/vbox/vbox.cfg, useful in case if Linux distribution does not provide necessary tools to verify kernel module signature - Linux Guest Additions and host Installer: Improved detection if system is running systemd as the init process - Linux Guest Additions and host drivers: Introduce initial support for kernel 6.3 - Linux Guest Additions: Added possibility to bypass kernel modules signature verification once VBOX_BYPASS_MODULES_SIGNATURE_CHECK="1" is specified in /etc/virtualbox-guest-additions.conf, useful in case if Linux distribution does not provide necessary tools to verify kernel module signature - Linux Guest Additions: Added experimental support for kernel modules and user services reloading in the end of installation process, thus guest system reboot after Guest Additions (7.0.8 and newer) upgrade is no longer required in general case - Linux Guest Additions: Fixed vboxvideo build issue with RHEL 8.7, 9.1 and 9.2 kernels (bugs #21446 and #21450) - Security Fixes for VirtualBox (boo#1210616): - CVE-2023-21990 Oracle VM VirtualBox Core None No 8.2 Prior to 6.1.44, Prior to 7.0.8 - CVE-2023-21987 Oracle VM VirtualBox Core None No 7.8 Prior to 6.1.44, Prior to 7.0.8 - CVE-2023-22002 Oracle VM VirtualBox Core None No 6.0 Prior to 6.1.44, Prior to 7.0.8 - CVE-2023-21989 Oracle VM VirtualBox Core None No 6.0 Prior to 6.1.44, Prior to 7.0.8 - CVE-2023-21998 Oracle VM VirtualBox Core None No 4.6 Prior to 6.1.44, Prior to 7.0.8 - CVE-2023-22000 Oracle VM VirtualBox Core None No 4.6 Prior to 6.1.44, Prior to 7.0.8 - CVE-2023-22001 Oracle VM VirtualBox Core None No 4.6 Prior to 6.1.44, Prior to 7.0.8 - CVE-2023-21988 Oracle VM VirtualBox Core None No 3.8 Prior to 6.1.44, Prior to 7.0.8 - CVE-2023-21999 Oracle VM VirtualBox Core None No 3.6 Prior to 6.1.44, Prior to 7.0.8 - CVE-2023-21991 Oracle VM VirtualBox Core None No 3.2 Prior to 6.1.44, Prior to 7.0.8 - Fix bug in /usr/bin/VirtualBox, aka "virtualbox-wrapper.sh". The wrapper failed whenever the user declined USB passthru. boo#1208941. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2023-166=1 Package List: - openSUSE Leap 15.4 (x86_64): python3-virtualbox-7.0.8-lp154.2.32.2 python3-virtualbox-debuginfo-7.0.8-lp154.2.32.2 virtualbox-7.0.8-lp154.2.32.2 virtualbox-debuginfo-7.0.8-lp154.2.32.2 virtualbox-debugsource-7.0.8-lp154.2.32.2 virtualbox-devel-7.0.8-lp154.2.32.2 virtualbox-guest-tools-7.0.8-lp154.2.32.2 virtualbox-guest-tools-debuginfo-7.0.8-lp154.2.32.2 virtualbox-kmp-debugsource-7.0.8-lp154.2.32.1 virtualbox-kmp-default-7.0.8_k5.14.21_150400.24.63-lp154.2.32.1 virtualbox-kmp-default-debuginfo-7.0.8_k5.14.21_150400.24.63-lp154.2.32.1 virtualbox-qt-7.0.8-lp154.2.32.2 virtualbox-qt-debuginfo-7.0.8-lp154.2.32.2 virtualbox-vnc-7.0.8-lp154.2.32.2 virtualbox-websrv-7.0.8-lp154.2.32.2 virtualbox-websrv-debuginfo-7.0.8-lp154.2.32.2 - openSUSE Leap 15.4 (noarch): virtualbox-guest-desktop-icons-7.0.8-lp154.2.32.2 virtualbox-guest-source-7.0.8-lp154.2.32.2 virtualbox-host-source-7.0.8-lp154.2.32.2 References: https://www.suse.com/security/cve/CVE-2023-21987.html https://www.suse.com/security/cve/CVE-2023-21988.html https://www.suse.com/security/cve/CVE-2023-21989.html https://www.suse.com/security/cve/CVE-2023-21990.html https://www.suse.com/security/cve/CVE-2023-21991.html https://www.suse.com/security/cve/CVE-2023-21998.html https://www.suse.com/security/cve/CVE-2023-21999.html https://www.suse.com/security/cve/CVE-2023-22000.html https://www.suse.com/security/cve/CVE-2023-22001.html https://www.suse.com/security/cve/CVE-2023-22002.html https://bugzilla.suse.com/1207468 https://bugzilla.suse.com/1208941 https://bugzilla.suse.com/1209529 https://bugzilla.suse.com/1209727 https://bugzilla.suse.com/1210616 https://bugzilla.suse.com/1211941

1 0