August 2023 - openSUSE Security Announce

SUSE-SU-2023:3257-1: moderate: Security update for pipewire
by security＠lists.opensuse.org 09 Aug '23

09 Aug '23

# Security update for pipewire Announcement ID: SUSE-SU-2023:3257-1 Rating: moderate References: * #1213682 Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update for pipewire fixes the following security issues: * Fixed issue where an app which only has permission to access one stream can also access other streams (bsc#1213682). Bugfixes: \- Fixed division by 0 and other issues with invalid values (glfo#pipewire/pipewire#2953) \- Fixed an overflow resulting in choppy sound in some cases (glfo#pipewire/pipewire#2680) ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-3257=1 openSUSE-SLE-15.5-2023-3257=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-3257=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-3257=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libpipewire-0_3-0-0.3.64-150500.3.3.1 * pipewire-modules-0_3-debuginfo-0.3.64-150500.3.3.1 * pipewire-modules-0_3-0.3.64-150500.3.3.1 * gstreamer-plugin-pipewire-0.3.64-150500.3.3.1 * pipewire-libjack-0_3-0.3.64-150500.3.3.1 * pipewire-libjack-0_3-debuginfo-0.3.64-150500.3.3.1 * pipewire-tools-debuginfo-0.3.64-150500.3.3.1 * pipewire-spa-plugins-0_2-debuginfo-0.3.64-150500.3.3.1 * pipewire-alsa-debuginfo-0.3.64-150500.3.3.1 * pipewire-tools-0.3.64-150500.3.3.1 * pipewire-debuginfo-0.3.64-150500.3.3.1 * pipewire-doc-0.3.64-150500.3.3.1 * pipewire-spa-tools-0.3.64-150500.3.3.1 * pipewire-alsa-0.3.64-150500.3.3.1 * pipewire-spa-tools-debuginfo-0.3.64-150500.3.3.1 * libpipewire-0_3-0-debuginfo-0.3.64-150500.3.3.1 * pipewire-pulseaudio-debuginfo-0.3.64-150500.3.3.1 * pipewire-module-x11-0_3-0.3.64-150500.3.3.1 * pipewire-debugsource-0.3.64-150500.3.3.1 * pipewire-module-x11-0_3-debuginfo-0.3.64-150500.3.3.1 * pipewire-0.3.64-150500.3.3.1 * gstreamer-plugin-pipewire-debuginfo-0.3.64-150500.3.3.1 * pipewire-libjack-0_3-devel-0.3.64-150500.3.3.1 * pipewire-pulseaudio-0.3.64-150500.3.3.1 * pipewire-spa-plugins-0_2-0.3.64-150500.3.3.1 * pipewire-devel-0.3.64-150500.3.3.1 * openSUSE Leap 15.5 (x86_64) * pipewire-libjack-0_3-32bit-0.3.64-150500.3.3.1 * pipewire-alsa-32bit-debuginfo-0.3.64-150500.3.3.1 * pipewire-libjack-0_3-32bit-debuginfo-0.3.64-150500.3.3.1 * libpipewire-0_3-0-32bit-debuginfo-0.3.64-150500.3.3.1 * pipewire-alsa-32bit-0.3.64-150500.3.3.1 * libpipewire-0_3-0-32bit-0.3.64-150500.3.3.1 * pipewire-modules-0_3-32bit-debuginfo-0.3.64-150500.3.3.1 * pipewire-spa-plugins-0_2-32bit-debuginfo-0.3.64-150500.3.3.1 * pipewire-modules-0_3-32bit-0.3.64-150500.3.3.1 * pipewire-spa-plugins-0_2-32bit-0.3.64-150500.3.3.1 * openSUSE Leap 15.5 (noarch) * pipewire-lang-0.3.64-150500.3.3.1 * openSUSE Leap 15.5 (aarch64_ilp32) * pipewire-spa-plugins-0_2-64bit-debuginfo-0.3.64-150500.3.3.1 * libpipewire-0_3-0-64bit-debuginfo-0.3.64-150500.3.3.1 * libpipewire-0_3-0-64bit-0.3.64-150500.3.3.1 * pipewire-alsa-64bit-0.3.64-150500.3.3.1 * pipewire-modules-0_3-64bit-0.3.64-150500.3.3.1 * pipewire-spa-plugins-0_2-64bit-0.3.64-150500.3.3.1 * pipewire-libjack-0_3-64bit-debuginfo-0.3.64-150500.3.3.1 * pipewire-libjack-0_3-64bit-0.3.64-150500.3.3.1 * pipewire-alsa-64bit-debuginfo-0.3.64-150500.3.3.1 * pipewire-modules-0_3-64bit-debuginfo-0.3.64-150500.3.3.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * pipewire-debugsource-0.3.64-150500.3.3.1 * pipewire-spa-plugins-0_2-debuginfo-0.3.64-150500.3.3.1 * pipewire-0.3.64-150500.3.3.1 * libpipewire-0_3-0-0.3.64-150500.3.3.1 * gstreamer-plugin-pipewire-debuginfo-0.3.64-150500.3.3.1 * pipewire-spa-tools-debuginfo-0.3.64-150500.3.3.1 * pipewire-tools-0.3.64-150500.3.3.1 * pipewire-modules-0_3-debuginfo-0.3.64-150500.3.3.1 * pipewire-tools-debuginfo-0.3.64-150500.3.3.1 * libpipewire-0_3-0-debuginfo-0.3.64-150500.3.3.1 * pipewire-debuginfo-0.3.64-150500.3.3.1 * pipewire-modules-0_3-0.3.64-150500.3.3.1 * gstreamer-plugin-pipewire-0.3.64-150500.3.3.1 * pipewire-spa-plugins-0_2-0.3.64-150500.3.3.1 * pipewire-spa-tools-0.3.64-150500.3.3.1 * Desktop Applications Module 15-SP5 (noarch) * pipewire-lang-0.3.64-150500.3.3.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * pipewire-debugsource-0.3.64-150500.3.3.1 * pipewire-alsa-0.3.64-150500.3.3.1 * pipewire-alsa-debuginfo-0.3.64-150500.3.3.1 * pipewire-libjack-0_3-devel-0.3.64-150500.3.3.1 * pipewire-pulseaudio-0.3.64-150500.3.3.1 * pipewire-debuginfo-0.3.64-150500.3.3.1 * pipewire-doc-0.3.64-150500.3.3.1 * pipewire-libjack-0_3-0.3.64-150500.3.3.1 * pipewire-libjack-0_3-debuginfo-0.3.64-150500.3.3.1 * pipewire-pulseaudio-debuginfo-0.3.64-150500.3.3.1 * SUSE Package Hub 15 15-SP5 (noarch) * pipewire-lang-0.3.64-150500.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213682

1 0

SUSE-SU-2023:3251-1: important: Security update for rust1.71
by security＠lists.opensuse.org 09 Aug '23

09 Aug '23

# Security update for rust1.71 Announcement ID: SUSE-SU-2023:3251-1 Rating: important References: * #1213817 Cross-References: * CVE-2023-38497 CVSS scores: * CVE-2023-38497 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2023-38497 ( NVD ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for rust1.71 fixes the following issues: Update to version 1.71.1: * CVE-2023-38497: Fixed privilege escalation with Cargo not respecting umask when extracting dependencies (bsc#1213817). ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3251=1 openSUSE-SLE-15.4-2023-3251=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3251=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-3251=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-3251=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * cargo1.71-1.71.1-150400.9.6.1 * cargo1.71-debuginfo-1.71.1-150400.9.6.1 * rust1.71-debuginfo-1.71.1-150400.9.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586 nosrc) * rust1.71-1.71.1-150400.9.6.1 * openSUSE Leap 15.4 (nosrc) * rust1.71-test-1.71.1-150400.9.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cargo1.71-1.71.1-150400.9.6.1 * cargo1.71-debuginfo-1.71.1-150400.9.6.1 * rust1.71-debuginfo-1.71.1-150400.9.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.71-1.71.1-150400.9.6.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * cargo1.71-1.71.1-150400.9.6.1 * cargo1.71-debuginfo-1.71.1-150400.9.6.1 * rust1.71-debuginfo-1.71.1-150400.9.6.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.71-1.71.1-150400.9.6.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cargo1.71-1.71.1-150400.9.6.1 * cargo1.71-debuginfo-1.71.1-150400.9.6.1 * rust1.71-debuginfo-1.71.1-150400.9.6.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.71-1.71.1-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38497.html * https://bugzilla.suse.com/show_bug.cgi?id=1213817

1 0

SUSE-SU-2023:3252-1: moderate: Security update for wireshark
by security＠lists.opensuse.org 09 Aug '23

09 Aug '23

# Security update for wireshark Announcement ID: SUSE-SU-2023:3252-1 Rating: moderate References: * #1211703 * #1211705 * #1211706 * #1211707 * #1211710 * #1211793 * #1211844 * #1212084 * #1213319 Cross-References: * CVE-2023-0667 * CVE-2023-0668 * CVE-2023-2855 * CVE-2023-2856 * CVE-2023-2857 * CVE-2023-2858 * CVE-2023-2879 * CVE-2023-2952 * CVE-2023-3648 CVSS scores: * CVE-2023-0667 ( SUSE ): 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2023-0667 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-0668 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-0668 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-2855 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2023-2856 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-2856 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2023-2857 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-2857 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2023-2858 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-2858 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2023-2879 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-2879 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2023-2952 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-2952 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2023-3648 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-3648 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP4 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves nine vulnerabilities can now be installed. ## Description: This update for wireshark fixes the following issues: Update to Wireshark 3.6.15: \- Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.6.15.html Security fixes: \- CVE-2023-0667: Fixed failure to validate MS-MMS packet length (bsc#1212084). \- CVE-2023-0668: Fixed IEEE C37.118 Synchrophasor dissector crash (bsc#1211710). \- CVE-2023-2855: Fixed Candump log file parser crash (bsc#1211703). \- CVE-2023-2856: Fixed VMS TCPIPtrace file parser crash (bsc#1211707). \- CVE-2023-2857: Fixed BLF file parser crash (bsc#1211705). \- CVE-2023-2858: Fixed NetScaler file parser crash (bsc#1211706). \- CVE-2023-2879: Fixed GDSDB dissector infinite loop (bsc#1211793). \- CVE-2023-2952: Fixed XRA dissector infinite loop (bsc#1211844). \- CVE-2023-3648: Fixed Kafka dissector crash (bsc#1213319). ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3252=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3252=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3252=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3252=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-3252=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-3252=1 * SUSE Linux Enterprise Real Time 15 SP3 zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-3252=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3252=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-3252=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3252=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * wireshark-ui-qt-debuginfo-3.6.15-150000.3.97.1 * libwiretap12-debuginfo-3.6.15-150000.3.97.1 * wireshark-ui-qt-3.6.15-150000.3.97.1 * libwiretap12-3.6.15-150000.3.97.1 * libwsutil13-debuginfo-3.6.15-150000.3.97.1 * wireshark-3.6.15-150000.3.97.1 * wireshark-devel-3.6.15-150000.3.97.1 * libwsutil13-3.6.15-150000.3.97.1 * wireshark-debuginfo-3.6.15-150000.3.97.1 * wireshark-debugsource-3.6.15-150000.3.97.1 * libwireshark15-3.6.15-150000.3.97.1 * libwireshark15-debuginfo-3.6.15-150000.3.97.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * wireshark-ui-qt-debuginfo-3.6.15-150000.3.97.1 * libwiretap12-debuginfo-3.6.15-150000.3.97.1 * wireshark-ui-qt-3.6.15-150000.3.97.1 * libwiretap12-3.6.15-150000.3.97.1 * libwsutil13-debuginfo-3.6.15-150000.3.97.1 * wireshark-3.6.15-150000.3.97.1 * wireshark-devel-3.6.15-150000.3.97.1 * libwsutil13-3.6.15-150000.3.97.1 * wireshark-debuginfo-3.6.15-150000.3.97.1 * wireshark-debugsource-3.6.15-150000.3.97.1 * libwireshark15-3.6.15-150000.3.97.1 * libwireshark15-debuginfo-3.6.15-150000.3.97.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libwiretap12-debuginfo-3.6.15-150000.3.97.1 * libwiretap12-3.6.15-150000.3.97.1 * libwsutil13-debuginfo-3.6.15-150000.3.97.1 * wireshark-3.6.15-150000.3.97.1 * libwsutil13-3.6.15-150000.3.97.1 * wireshark-debuginfo-3.6.15-150000.3.97.1 * wireshark-debugsource-3.6.15-150000.3.97.1 * libwireshark15-3.6.15-150000.3.97.1 * libwireshark15-debuginfo-3.6.15-150000.3.97.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libwiretap12-debuginfo-3.6.15-150000.3.97.1 * libwiretap12-3.6.15-150000.3.97.1 * libwsutil13-debuginfo-3.6.15-150000.3.97.1 * wireshark-3.6.15-150000.3.97.1 * libwsutil13-3.6.15-150000.3.97.1 * wireshark-debuginfo-3.6.15-150000.3.97.1 * wireshark-debugsource-3.6.15-150000.3.97.1 * libwireshark15-3.6.15-150000.3.97.1 * libwireshark15-debuginfo-3.6.15-150000.3.97.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * wireshark-ui-qt-debuginfo-3.6.15-150000.3.97.1 * wireshark-ui-qt-3.6.15-150000.3.97.1 * wireshark-devel-3.6.15-150000.3.97.1 * wireshark-debuginfo-3.6.15-150000.3.97.1 * wireshark-debugsource-3.6.15-150000.3.97.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wireshark-ui-qt-debuginfo-3.6.15-150000.3.97.1 * wireshark-ui-qt-3.6.15-150000.3.97.1 * wireshark-devel-3.6.15-150000.3.97.1 * wireshark-debuginfo-3.6.15-150000.3.97.1 * wireshark-debugsource-3.6.15-150000.3.97.1 * SUSE Linux Enterprise Real Time 15 SP3 (x86_64) * wireshark-ui-qt-debuginfo-3.6.15-150000.3.97.1 * libwiretap12-debuginfo-3.6.15-150000.3.97.1 * wireshark-ui-qt-3.6.15-150000.3.97.1 * libwiretap12-3.6.15-150000.3.97.1 * libwsutil13-debuginfo-3.6.15-150000.3.97.1 * wireshark-3.6.15-150000.3.97.1 * wireshark-devel-3.6.15-150000.3.97.1 * libwsutil13-3.6.15-150000.3.97.1 * wireshark-debuginfo-3.6.15-150000.3.97.1 * wireshark-debugsource-3.6.15-150000.3.97.1 * libwireshark15-3.6.15-150000.3.97.1 * libwireshark15-debuginfo-3.6.15-150000.3.97.1 * SUSE Manager Proxy 4.2 (x86_64) * libwiretap12-debuginfo-3.6.15-150000.3.97.1 * libwiretap12-3.6.15-150000.3.97.1 * libwsutil13-debuginfo-3.6.15-150000.3.97.1 * wireshark-3.6.15-150000.3.97.1 * libwsutil13-3.6.15-150000.3.97.1 * wireshark-debuginfo-3.6.15-150000.3.97.1 * wireshark-debugsource-3.6.15-150000.3.97.1 * libwireshark15-3.6.15-150000.3.97.1 * libwireshark15-debuginfo-3.6.15-150000.3.97.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * libwiretap12-debuginfo-3.6.15-150000.3.97.1 * libwiretap12-3.6.15-150000.3.97.1 * libwsutil13-debuginfo-3.6.15-150000.3.97.1 * wireshark-3.6.15-150000.3.97.1 * libwsutil13-3.6.15-150000.3.97.1 * wireshark-debuginfo-3.6.15-150000.3.97.1 * wireshark-debugsource-3.6.15-150000.3.97.1 * libwireshark15-3.6.15-150000.3.97.1 * libwireshark15-debuginfo-3.6.15-150000.3.97.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * libwiretap12-debuginfo-3.6.15-150000.3.97.1 * libwiretap12-3.6.15-150000.3.97.1 * libwsutil13-debuginfo-3.6.15-150000.3.97.1 * wireshark-3.6.15-150000.3.97.1 * libwsutil13-3.6.15-150000.3.97.1 * wireshark-debuginfo-3.6.15-150000.3.97.1 * wireshark-debugsource-3.6.15-150000.3.97.1 * libwireshark15-3.6.15-150000.3.97.1 * libwireshark15-debuginfo-3.6.15-150000.3.97.1 ## References: * https://www.suse.com/security/cve/CVE-2023-0667.html * https://www.suse.com/security/cve/CVE-2023-0668.html * https://www.suse.com/security/cve/CVE-2023-2855.html * https://www.suse.com/security/cve/CVE-2023-2856.html * https://www.suse.com/security/cve/CVE-2023-2857.html * https://www.suse.com/security/cve/CVE-2023-2858.html * https://www.suse.com/security/cve/CVE-2023-2879.html * https://www.suse.com/security/cve/CVE-2023-2952.html * https://www.suse.com/security/cve/CVE-2023-3648.html * https://bugzilla.suse.com/show_bug.cgi?id=1211703 * https://bugzilla.suse.com/show_bug.cgi?id=1211705 * https://bugzilla.suse.com/show_bug.cgi?id=1211706 * https://bugzilla.suse.com/show_bug.cgi?id=1211707 * https://bugzilla.suse.com/show_bug.cgi?id=1211710 * https://bugzilla.suse.com/show_bug.cgi?id=1211793 * https://bugzilla.suse.com/show_bug.cgi?id=1211844 * https://bugzilla.suse.com/show_bug.cgi?id=1212084 * https://bugzilla.suse.com/show_bug.cgi?id=1213319

1 0

SUSE-SU-2023:3234-1: important: Security update for qemu
by security＠lists.opensuse.org 08 Aug '23

08 Aug '23

# Security update for qemu Announcement ID: SUSE-SU-2023:3234-1 Rating: important References: * #1212968 * #1213001 * #1213414 Cross-References: * CVE-2023-2861 * CVE-2023-3255 * CVE-2023-3301 CVSS scores: * CVE-2023-2861 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2023-3255 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Server Applications Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves three vulnerabilities can now be installed. ## Description: This update for qemu fixes the following issues: * CVE-2023-2861: Fixed improper access control on special files in 9pfs (bsc#1212968). * CVE-2023-3301: Fixed NULL pointer dereference in vhost_vdpa_get_vhost_net() (bsc#1213414). * CVE-2023-3255: Fixed infinite loop in inflate_buffer() leads to denial of service (bsc#1213001). ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3234=1 openSUSE-SLE-15.4-2023-3234=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-3234=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-3234=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3234=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3234=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3234=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3234=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3234=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-3234=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * qemu-accel-tcg-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-usb-host-6.2.0-150400.37.20.1 * qemu-extra-debuginfo-6.2.0-150400.37.20.1 * qemu-s390x-6.2.0-150400.37.20.1 * qemu-accel-qtest-debuginfo-6.2.0-150400.37.20.1 * qemu-chardev-baum-6.2.0-150400.37.20.1 * qemu-audio-alsa-6.2.0-150400.37.20.1 * qemu-linux-user-debugsource-6.2.0-150400.37.20.1 * qemu-block-dmg-debuginfo-6.2.0-150400.37.20.1 * qemu-guest-agent-debuginfo-6.2.0-150400.37.20.1 * qemu-block-ssh-6.2.0-150400.37.20.1 * qemu-arm-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-6.2.0-150400.37.20.1 * qemu-ppc-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-curses-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1 * qemu-s390x-debuginfo-6.2.0-150400.37.20.1 * qemu-block-gluster-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-jack-debuginfo-6.2.0-150400.37.20.1 * qemu-debugsource-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-s390x-virtio-gpu-ccw-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-gtk-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-6.2.0-150400.37.20.1 * qemu-ui-curses-6.2.0-150400.37.20.1 * qemu-block-gluster-6.2.0-150400.37.20.1 * qemu-hw-usb-host-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-spice-core-debuginfo-6.2.0-150400.37.20.1 * qemu-chardev-baum-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-pa-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-alsa-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-jack-6.2.0-150400.37.20.1 * qemu-ivshmem-tools-debuginfo-6.2.0-150400.37.20.1 * qemu-debuginfo-6.2.0-150400.37.20.1 * qemu-x86-6.2.0-150400.37.20.1 * qemu-arm-6.2.0-150400.37.20.1 * qemu-audio-spice-6.2.0-150400.37.20.1 * qemu-block-curl-6.2.0-150400.37.20.1 * qemu-block-nfs-6.2.0-150400.37.20.1 * qemu-hw-usb-smartcard-6.2.0-150400.37.20.1 * qemu-ivshmem-tools-6.2.0-150400.37.20.1 * qemu-tools-6.2.0-150400.37.20.1 * qemu-ui-spice-core-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-pci-6.2.0-150400.37.20.1 * qemu-linux-user-6.2.0-150400.37.20.1 * qemu-lang-6.2.0-150400.37.20.1 * qemu-audio-pa-debuginfo-6.2.0-150400.37.20.1 * qemu-block-ssh-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-oss-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-pci-debuginfo-6.2.0-150400.37.20.1 * qemu-block-iscsi-debuginfo-6.2.0-150400.37.20.1 * qemu-ppc-6.2.0-150400.37.20.1 * qemu-ui-opengl-6.2.0-150400.37.20.1 * qemu-hw-s390x-virtio-gpu-ccw-6.2.0-150400.37.20.1 * qemu-ui-spice-app-6.2.0-150400.37.20.1 * qemu-block-dmg-6.2.0-150400.37.20.1 * qemu-chardev-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-tools-debuginfo-6.2.0-150400.37.20.1 * qemu-vhost-user-gpu-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-chardev-spice-6.2.0-150400.37.20.1 * qemu-block-nfs-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-spice-app-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-qtest-6.2.0-150400.37.20.1 * qemu-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-block-curl-debuginfo-6.2.0-150400.37.20.1 * qemu-ksm-6.2.0-150400.37.20.1 * qemu-ui-gtk-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-usb-smartcard-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-oss-debuginfo-6.2.0-150400.37.20.1 * qemu-vhost-user-gpu-6.2.0-150400.37.20.1 * qemu-extra-6.2.0-150400.37.20.1 * qemu-linux-user-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-debuginfo-6.2.0-150400.37.20.1 * qemu-block-iscsi-6.2.0-150400.37.20.1 * qemu-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-6.2.0-150400.37.20.1 * qemu-guest-agent-6.2.0-150400.37.20.1 * openSUSE Leap 15.4 (s390x x86_64 i586) * qemu-kvm-6.2.0-150400.37.20.1 * openSUSE Leap 15.4 (noarch) * qemu-SLOF-6.2.0-150400.37.20.1 * qemu-ipxe-1.0.0+-150400.37.20.1 * qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * qemu-microvm-6.2.0-150400.37.20.1 * qemu-sgabios-8-150400.37.20.1 * qemu-skiboot-6.2.0-150400.37.20.1 * qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * qemu-block-rbd-debuginfo-6.2.0-150400.37.20.1 * qemu-block-rbd-6.2.0-150400.37.20.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * qemu-6.2.0-150400.37.20.1 * qemu-guest-agent-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-6.2.0-150400.37.20.1 * qemu-ui-spice-core-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-debuginfo-6.2.0-150400.37.20.1 * qemu-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-6.2.0-150400.37.20.1 * qemu-tools-6.2.0-150400.37.20.1 * qemu-ui-spice-core-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-6.2.0-150400.37.20.1 * qemu-chardev-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-tools-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-chardev-spice-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-debuginfo-6.2.0-150400.37.20.1 * qemu-debugsource-6.2.0-150400.37.20.1 * qemu-guest-agent-6.2.0-150400.37.20.1 * openSUSE Leap Micro 5.3 (x86_64) * qemu-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-6.2.0-150400.37.20.1 * qemu-x86-6.2.0-150400.37.20.1 * openSUSE Leap Micro 5.3 (noarch) * qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * qemu-sgabios-8-150400.37.20.1 * qemu-ipxe-1.0.0+-150400.37.20.1 * qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * openSUSE Leap Micro 5.3 (aarch64) * qemu-arm-6.2.0-150400.37.20.1 * qemu-arm-debuginfo-6.2.0-150400.37.20.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * qemu-6.2.0-150400.37.20.1 * qemu-guest-agent-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-6.2.0-150400.37.20.1 * qemu-ui-spice-core-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-debuginfo-6.2.0-150400.37.20.1 * qemu-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-6.2.0-150400.37.20.1 * qemu-tools-6.2.0-150400.37.20.1 * qemu-ui-spice-core-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-6.2.0-150400.37.20.1 * qemu-chardev-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-tools-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-chardev-spice-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-debuginfo-6.2.0-150400.37.20.1 * qemu-debugsource-6.2.0-150400.37.20.1 * qemu-guest-agent-6.2.0-150400.37.20.1 * openSUSE Leap Micro 5.4 (x86_64) * qemu-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-6.2.0-150400.37.20.1 * qemu-x86-6.2.0-150400.37.20.1 * openSUSE Leap Micro 5.4 (noarch) * qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * qemu-sgabios-8-150400.37.20.1 * qemu-ipxe-1.0.0+-150400.37.20.1 * qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * openSUSE Leap Micro 5.4 (s390x) * qemu-s390x-6.2.0-150400.37.20.1 * qemu-s390x-debuginfo-6.2.0-150400.37.20.1 * openSUSE Leap Micro 5.4 (aarch64) * qemu-arm-6.2.0-150400.37.20.1 * qemu-arm-debuginfo-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * qemu-6.2.0-150400.37.20.1 * qemu-guest-agent-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-6.2.0-150400.37.20.1 * qemu-ui-spice-core-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-debuginfo-6.2.0-150400.37.20.1 * qemu-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-6.2.0-150400.37.20.1 * qemu-tools-6.2.0-150400.37.20.1 * qemu-ui-spice-core-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-6.2.0-150400.37.20.1 * qemu-chardev-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-tools-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-chardev-spice-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-debuginfo-6.2.0-150400.37.20.1 * qemu-debugsource-6.2.0-150400.37.20.1 * qemu-guest-agent-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64) * qemu-arm-6.2.0-150400.37.20.1 * qemu-arm-debuginfo-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * qemu-sgabios-8-150400.37.20.1 * qemu-ipxe-1.0.0+-150400.37.20.1 * qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (s390x) * qemu-s390x-6.2.0-150400.37.20.1 * qemu-s390x-debuginfo-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * qemu-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-6.2.0-150400.37.20.1 * qemu-x86-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * qemu-6.2.0-150400.37.20.1 * qemu-guest-agent-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-6.2.0-150400.37.20.1 * qemu-ui-spice-core-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-debuginfo-6.2.0-150400.37.20.1 * qemu-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-6.2.0-150400.37.20.1 * qemu-tools-6.2.0-150400.37.20.1 * qemu-ui-spice-core-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-6.2.0-150400.37.20.1 * qemu-chardev-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-tools-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-chardev-spice-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-debuginfo-6.2.0-150400.37.20.1 * qemu-debugsource-6.2.0-150400.37.20.1 * qemu-guest-agent-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro 5.3 (aarch64) * qemu-arm-6.2.0-150400.37.20.1 * qemu-arm-debuginfo-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * qemu-sgabios-8-150400.37.20.1 * qemu-ipxe-1.0.0+-150400.37.20.1 * qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * SUSE Linux Enterprise Micro 5.3 (s390x) * qemu-s390x-6.2.0-150400.37.20.1 * qemu-s390x-debuginfo-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * qemu-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-6.2.0-150400.37.20.1 * qemu-x86-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * qemu-6.2.0-150400.37.20.1 * qemu-guest-agent-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-6.2.0-150400.37.20.1 * qemu-ui-spice-core-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-debuginfo-6.2.0-150400.37.20.1 * qemu-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-6.2.0-150400.37.20.1 * qemu-tools-6.2.0-150400.37.20.1 * qemu-ui-spice-core-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-6.2.0-150400.37.20.1 * qemu-chardev-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-tools-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-chardev-spice-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-debuginfo-6.2.0-150400.37.20.1 * qemu-debugsource-6.2.0-150400.37.20.1 * qemu-guest-agent-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64) * qemu-arm-6.2.0-150400.37.20.1 * qemu-arm-debuginfo-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * qemu-sgabios-8-150400.37.20.1 * qemu-ipxe-1.0.0+-150400.37.20.1 * qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (s390x) * qemu-s390x-6.2.0-150400.37.20.1 * qemu-s390x-debuginfo-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * qemu-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-6.2.0-150400.37.20.1 * qemu-x86-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * qemu-6.2.0-150400.37.20.1 * qemu-guest-agent-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-6.2.0-150400.37.20.1 * qemu-ui-spice-core-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-debuginfo-6.2.0-150400.37.20.1 * qemu-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-6.2.0-150400.37.20.1 * qemu-tools-6.2.0-150400.37.20.1 * qemu-ui-spice-core-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-6.2.0-150400.37.20.1 * qemu-chardev-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-tools-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-chardev-spice-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-opengl-debuginfo-6.2.0-150400.37.20.1 * qemu-debugsource-6.2.0-150400.37.20.1 * qemu-guest-agent-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro 5.4 (aarch64) * qemu-arm-6.2.0-150400.37.20.1 * qemu-arm-debuginfo-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * qemu-sgabios-8-150400.37.20.1 * qemu-ipxe-1.0.0+-150400.37.20.1 * qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * SUSE Linux Enterprise Micro 5.4 (s390x) * qemu-s390x-6.2.0-150400.37.20.1 * qemu-s390x-debuginfo-6.2.0-150400.37.20.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * qemu-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-6.2.0-150400.37.20.1 * qemu-x86-6.2.0-150400.37.20.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * qemu-tools-6.2.0-150400.37.20.1 * qemu-debugsource-6.2.0-150400.37.20.1 * qemu-tools-debuginfo-6.2.0-150400.37.20.1 * qemu-debuginfo-6.2.0-150400.37.20.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * qemu-hw-usb-host-6.2.0-150400.37.20.1 * qemu-chardev-baum-6.2.0-150400.37.20.1 * qemu-6.2.0-150400.37.20.1 * qemu-guest-agent-debuginfo-6.2.0-150400.37.20.1 * qemu-block-ssh-6.2.0-150400.37.20.1 * qemu-ui-curses-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-curses-6.2.0-150400.37.20.1 * qemu-hw-usb-host-debuginfo-6.2.0-150400.37.20.1 * qemu-chardev-baum-debuginfo-6.2.0-150400.37.20.1 * qemu-block-rbd-6.2.0-150400.37.20.1 * qemu-debuginfo-6.2.0-150400.37.20.1 * qemu-block-curl-6.2.0-150400.37.20.1 * qemu-lang-6.2.0-150400.37.20.1 * qemu-block-ssh-debuginfo-6.2.0-150400.37.20.1 * qemu-block-iscsi-debuginfo-6.2.0-150400.37.20.1 * qemu-block-rbd-debuginfo-6.2.0-150400.37.20.1 * qemu-block-curl-debuginfo-6.2.0-150400.37.20.1 * qemu-ksm-6.2.0-150400.37.20.1 * qemu-block-iscsi-6.2.0-150400.37.20.1 * qemu-debugsource-6.2.0-150400.37.20.1 * qemu-guest-agent-6.2.0-150400.37.20.1 * Server Applications Module 15-SP4 (aarch64) * qemu-arm-6.2.0-150400.37.20.1 * qemu-arm-debuginfo-6.2.0-150400.37.20.1 * Server Applications Module 15-SP4 (aarch64 ppc64le x86_64) * qemu-hw-usb-redirect-6.2.0-150400.37.20.1 * qemu-chardev-spice-6.2.0-150400.37.20.1 * qemu-ui-spice-app-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-spice-core-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1 * qemu-ui-opengl-6.2.0-150400.37.20.1 * qemu-ui-gtk-6.2.0-150400.37.20.1 * qemu-hw-usb-redirect-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-gtk-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-spice-app-6.2.0-150400.37.20.1 * qemu-chardev-spice-debuginfo-6.2.0-150400.37.20.1 * qemu-ui-spice-core-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-vga-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-6.2.0-150400.37.20.1 * qemu-ui-opengl-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-qxl-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-spice-debuginfo-6.2.0-150400.37.20.1 * Server Applications Module 15-SP4 (noarch) * qemu-SLOF-6.2.0-150400.37.20.1 * qemu-ipxe-1.0.0+-150400.37.20.1 * qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * qemu-sgabios-8-150400.37.20.1 * qemu-skiboot-6.2.0-150400.37.20.1 * qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.20.1 * Server Applications Module 15-SP4 (ppc64le) * qemu-ppc-6.2.0-150400.37.20.1 * qemu-ppc-debuginfo-6.2.0-150400.37.20.1 * Server Applications Module 15-SP4 (s390x x86_64) * qemu-hw-display-virtio-gpu-pci-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-debuginfo-6.2.0-150400.37.20.1 * qemu-kvm-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-pci-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1 * Server Applications Module 15-SP4 (s390x) * qemu-hw-s390x-virtio-gpu-ccw-6.2.0-150400.37.20.1 * qemu-s390x-6.2.0-150400.37.20.1 * qemu-s390x-debuginfo-6.2.0-150400.37.20.1 * qemu-hw-s390x-virtio-gpu-ccw-debuginfo-6.2.0-150400.37.20.1 * Server Applications Module 15-SP4 (x86_64) * qemu-accel-tcg-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-pa-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-pa-6.2.0-150400.37.20.1 * qemu-x86-debuginfo-6.2.0-150400.37.20.1 * qemu-audio-alsa-6.2.0-150400.37.20.1 * qemu-audio-alsa-debuginfo-6.2.0-150400.37.20.1 * qemu-x86-6.2.0-150400.37.20.1 * qemu-accel-tcg-x86-6.2.0-150400.37.20.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2861.html * https://www.suse.com/security/cve/CVE-2023-3255.html * https://www.suse.com/security/cve/CVE-2023-3301.html * https://bugzilla.suse.com/show_bug.cgi?id=1212968 * https://bugzilla.suse.com/show_bug.cgi?id=1213001 * https://bugzilla.suse.com/show_bug.cgi?id=1213414

1 0

SUSE-SU-2023:3238-1: moderate: Security update for bluez
by security＠lists.opensuse.org 08 Aug '23

08 Aug '23

# Security update for bluez Announcement ID: SUSE-SU-2023:3238-1 Rating: moderate References: * #1192760 Cross-References: * CVE-2021-41229 CVSS scores: * CVE-2021-41229 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2021-41229 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Desktop Applications Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Workstation Extension 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2021-41229: Fix leaking buffers stored in cstates cache. (bsc#1192760) ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3238=1 SUSE-2023-3238=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3238=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3238=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3238=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3238=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3238=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-3238=1 * SUSE Linux Enterprise Workstation Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-3238=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-3238=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-3238=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * bluez-test-5.62-150400.4.16.1 * bluez-debuginfo-5.62-150400.4.16.1 * libbluetooth3-5.62-150400.4.16.1 * bluez-deprecated-debuginfo-5.62-150400.4.16.1 * bluez-test-debuginfo-5.62-150400.4.16.1 * bluez-debugsource-5.62-150400.4.16.1 * bluez-devel-5.62-150400.4.16.1 * bluez-cups-5.62-150400.4.16.1 * bluez-5.62-150400.4.16.1 * libbluetooth3-debuginfo-5.62-150400.4.16.1 * bluez-deprecated-5.62-150400.4.16.1 * bluez-cups-debuginfo-5.62-150400.4.16.1 * openSUSE Leap 15.4 (noarch) * bluez-auto-enable-devices-5.62-150400.4.16.1 * openSUSE Leap 15.4 (x86_64) * bluez-devel-32bit-5.62-150400.4.16.1 * libbluetooth3-32bit-5.62-150400.4.16.1 * libbluetooth3-32bit-debuginfo-5.62-150400.4.16.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libbluetooth3-64bit-5.62-150400.4.16.1 * bluez-devel-64bit-5.62-150400.4.16.1 * libbluetooth3-64bit-debuginfo-5.62-150400.4.16.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libbluetooth3-debuginfo-5.62-150400.4.16.1 * libbluetooth3-5.62-150400.4.16.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libbluetooth3-debuginfo-5.62-150400.4.16.1 * libbluetooth3-5.62-150400.4.16.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libbluetooth3-debuginfo-5.62-150400.4.16.1 * libbluetooth3-5.62-150400.4.16.1 * bluez-debugsource-5.62-150400.4.16.1 * bluez-debuginfo-5.62-150400.4.16.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libbluetooth3-debuginfo-5.62-150400.4.16.1 * libbluetooth3-5.62-150400.4.16.1 * bluez-debugsource-5.62-150400.4.16.1 * bluez-debuginfo-5.62-150400.4.16.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * bluez-debuginfo-5.62-150400.4.16.1 * libbluetooth3-5.62-150400.4.16.1 * bluez-deprecated-debuginfo-5.62-150400.4.16.1 * bluez-debugsource-5.62-150400.4.16.1 * bluez-5.62-150400.4.16.1 * libbluetooth3-debuginfo-5.62-150400.4.16.1 * bluez-deprecated-5.62-150400.4.16.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * bluez-debugsource-5.62-150400.4.16.1 * bluez-debuginfo-5.62-150400.4.16.1 * bluez-devel-5.62-150400.4.16.1 * SUSE Linux Enterprise Workstation Extension 15 SP4 (x86_64) * bluez-cups-5.62-150400.4.16.1 * bluez-debugsource-5.62-150400.4.16.1 * bluez-debuginfo-5.62-150400.4.16.1 * bluez-cups-debuginfo-5.62-150400.4.16.1 * openSUSE Leap Micro 5.3 (aarch64 s390x x86_64) * libbluetooth3-debuginfo-5.62-150400.4.16.1 * libbluetooth3-5.62-150400.4.16.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libbluetooth3-debuginfo-5.62-150400.4.16.1 * libbluetooth3-5.62-150400.4.16.1 * bluez-debugsource-5.62-150400.4.16.1 * bluez-debuginfo-5.62-150400.4.16.1 ## References: * https://www.suse.com/security/cve/CVE-2021-41229.html * https://bugzilla.suse.com/show_bug.cgi?id=1192760

1 0

SUSE-SU-2023:3241-1: moderate: Security update for poppler
by security＠lists.opensuse.org 08 Aug '23

08 Aug '23

# Security update for poppler Announcement ID: SUSE-SU-2023:3241-1 Rating: moderate References: * #1124150 * #1150039 Cross-References: * CVE-2019-16115 * CVE-2019-7310 CVSS scores: * CVE-2019-16115 ( SUSE ): 4.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2019-16115 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2019-7310 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2019-7310 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2019-7310 ( NVD ): 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 An update that solves two vulnerabilities can now be installed. ## Description: This update for poppler fixes the following issues: * CVE-2019-16115: Fixed an uninitialized memory error in GfxUnivariateShading::setupCache. (bsc#1150039) ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3241=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libpoppler73-debuginfo-0.62.0-150000.4.18.1 * libpoppler73-0.62.0-150000.4.18.1 * openSUSE Leap 15.4 (x86_64) * libpoppler73-32bit-debuginfo-0.62.0-150000.4.18.1 * libpoppler73-32bit-0.62.0-150000.4.18.1 ## References: * https://www.suse.com/security/cve/CVE-2019-16115.html * https://www.suse.com/security/cve/CVE-2019-7310.html * https://bugzilla.suse.com/show_bug.cgi?id=1124150 * https://bugzilla.suse.com/show_bug.cgi?id=1150039

1 0

SUSE-SU-2023:3242-1: moderate: Security update for openssl-1_1
by security＠lists.opensuse.org 08 Aug '23

08 Aug '23

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2023:3242-1 Rating: moderate References: * #1213853 Cross-References: * CVE-2023-3817 CVSS scores: * CVE-2023-3817 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-3817 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853) ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-3242=1 openSUSE-SLE-15.5-2023-3242=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3242=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * openssl-1_1-1.1.1l-150500.17.15.1 * libopenssl-1_1-devel-1.1.1l-150500.17.15.1 * libopenssl1_1-hmac-1.1.1l-150500.17.15.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.15.1 * libopenssl1_1-1.1.1l-150500.17.15.1 * openssl-1_1-debugsource-1.1.1l-150500.17.15.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.15.1 * openSUSE Leap 15.5 (x86_64) * libopenssl-1_1-devel-32bit-1.1.1l-150500.17.15.1 * libopenssl1_1-32bit-1.1.1l-150500.17.15.1 * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.15.1 * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.15.1 * openSUSE Leap 15.5 (noarch) * openssl-1_1-doc-1.1.1l-150500.17.15.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl1_1-64bit-debuginfo-1.1.1l-150500.17.15.1 * libopenssl-1_1-devel-64bit-1.1.1l-150500.17.15.1 * libopenssl1_1-64bit-1.1.1l-150500.17.15.1 * libopenssl1_1-hmac-64bit-1.1.1l-150500.17.15.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openssl-1_1-1.1.1l-150500.17.15.1 * libopenssl-1_1-devel-1.1.1l-150500.17.15.1 * libopenssl1_1-hmac-1.1.1l-150500.17.15.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.15.1 * libopenssl1_1-1.1.1l-150500.17.15.1 * openssl-1_1-debugsource-1.1.1l-150500.17.15.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.15.1 * Basesystem Module 15-SP5 (x86_64) * libopenssl1_1-32bit-1.1.1l-150500.17.15.1 * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.15.1 * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.15.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3817.html * https://bugzilla.suse.com/show_bug.cgi?id=1213853

1 0

SUSE-SU-2023:3243-1: moderate: Security update for openssl-3
by security＠lists.opensuse.org 08 Aug '23

08 Aug '23

# Security update for openssl-3 Announcement ID: SUSE-SU-2023:3243-1 Rating: moderate References: * #1213853 Cross-References: * CVE-2023-3817 CVSS scores: * CVE-2023-3817 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-3817 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853) ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-3243=1 openSUSE-SLE-15.5-2023-3243=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3243=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * openssl-3-3.0.8-150500.5.11.1 * libopenssl-3-devel-3.0.8-150500.5.11.1 * libopenssl3-debuginfo-3.0.8-150500.5.11.1 * openssl-3-debuginfo-3.0.8-150500.5.11.1 * openssl-3-debugsource-3.0.8-150500.5.11.1 * libopenssl3-3.0.8-150500.5.11.1 * openSUSE Leap 15.5 (x86_64) * libopenssl3-32bit-debuginfo-3.0.8-150500.5.11.1 * libopenssl-3-devel-32bit-3.0.8-150500.5.11.1 * libopenssl3-32bit-3.0.8-150500.5.11.1 * openSUSE Leap 15.5 (noarch) * openssl-3-doc-3.0.8-150500.5.11.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl3-64bit-debuginfo-3.0.8-150500.5.11.1 * libopenssl-3-devel-64bit-3.0.8-150500.5.11.1 * libopenssl3-64bit-3.0.8-150500.5.11.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openssl-3-3.0.8-150500.5.11.1 * libopenssl-3-devel-3.0.8-150500.5.11.1 * libopenssl3-debuginfo-3.0.8-150500.5.11.1 * openssl-3-debuginfo-3.0.8-150500.5.11.1 * openssl-3-debugsource-3.0.8-150500.5.11.1 * libopenssl3-3.0.8-150500.5.11.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3817.html * https://bugzilla.suse.com/show_bug.cgi?id=1213853

1 0

SUSE-SU-2023:3244-1: moderate: Security update for openssl-3
by security＠lists.opensuse.org 08 Aug '23

08 Aug '23

# Security update for openssl-3 Announcement ID: SUSE-SU-2023:3244-1 Rating: moderate References: * #1213853 Cross-References: * CVE-2023-3817 CVSS scores: * CVE-2023-3817 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-3817 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853) ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3244=1 openSUSE-SLE-15.4-2023-3244=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3244=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * openssl-3-3.0.8-150400.4.34.1 * openssl-3-debuginfo-3.0.8-150400.4.34.1 * libopenssl3-3.0.8-150400.4.34.1 * libopenssl3-debuginfo-3.0.8-150400.4.34.1 * libopenssl-3-devel-3.0.8-150400.4.34.1 * openssl-3-debugsource-3.0.8-150400.4.34.1 * openSUSE Leap 15.4 (x86_64) * libopenssl-3-devel-32bit-3.0.8-150400.4.34.1 * libopenssl3-32bit-3.0.8-150400.4.34.1 * libopenssl3-32bit-debuginfo-3.0.8-150400.4.34.1 * openSUSE Leap 15.4 (noarch) * openssl-3-doc-3.0.8-150400.4.34.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl3-64bit-3.0.8-150400.4.34.1 * libopenssl3-64bit-debuginfo-3.0.8-150400.4.34.1 * libopenssl-3-devel-64bit-3.0.8-150400.4.34.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * openssl-3-3.0.8-150400.4.34.1 * openssl-3-debuginfo-3.0.8-150400.4.34.1 * libopenssl3-3.0.8-150400.4.34.1 * libopenssl3-debuginfo-3.0.8-150400.4.34.1 * libopenssl-3-devel-3.0.8-150400.4.34.1 * openssl-3-debugsource-3.0.8-150400.4.34.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3817.html * https://bugzilla.suse.com/show_bug.cgi?id=1213853

1 0

SUSE-SU-2023:3245-1: important: Security update for keylime
by security＠lists.opensuse.org 08 Aug '23

08 Aug '23

# Security update for keylime Announcement ID: SUSE-SU-2023:3245-1 Rating: important References: * #1213310 Cross-References: * CVE-2023-38200 CVSS scores: * CVE-2023-38200 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38200 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for keylime fixes the following issues: * CVE-2023-38200: Fixed a DoS attack against it's SSL connections. (bsc#1213310) ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3245=1 openSUSE-SLE-15.4-2023-3245=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3245=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3245=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3245=1 ## Package List: * openSUSE Leap 15.4 (noarch) * keylime-agent-6.3.2-150400.4.17.1 * keylime-firewalld-6.3.2-150400.4.17.1 * keylime-logrotate-6.3.2-150400.4.17.1 * keylime-registrar-6.3.2-150400.4.17.1 * keylime-tpm_cert_store-6.3.2-150400.4.17.1 * python3-keylime-6.3.2-150400.4.17.1 * keylime-config-6.3.2-150400.4.17.1 * keylime-verifier-6.3.2-150400.4.17.1 * openSUSE Leap 15.5 (noarch) * keylime-agent-6.3.2-150400.4.17.1 * keylime-firewalld-6.3.2-150400.4.17.1 * keylime-logrotate-6.3.2-150400.4.17.1 * keylime-registrar-6.3.2-150400.4.17.1 * keylime-tpm_cert_store-6.3.2-150400.4.17.1 * python3-keylime-6.3.2-150400.4.17.1 * keylime-config-6.3.2-150400.4.17.1 * keylime-verifier-6.3.2-150400.4.17.1 * Basesystem Module 15-SP4 (noarch) * keylime-agent-6.3.2-150400.4.17.1 * keylime-firewalld-6.3.2-150400.4.17.1 * keylime-logrotate-6.3.2-150400.4.17.1 * keylime-registrar-6.3.2-150400.4.17.1 * keylime-tpm_cert_store-6.3.2-150400.4.17.1 * python3-keylime-6.3.2-150400.4.17.1 * keylime-config-6.3.2-150400.4.17.1 * keylime-verifier-6.3.2-150400.4.17.1 * Basesystem Module 15-SP5 (noarch) * keylime-agent-6.3.2-150400.4.17.1 * keylime-firewalld-6.3.2-150400.4.17.1 * keylime-logrotate-6.3.2-150400.4.17.1 * keylime-registrar-6.3.2-150400.4.17.1 * keylime-tpm_cert_store-6.3.2-150400.4.17.1 * python3-keylime-6.3.2-150400.4.17.1 * keylime-config-6.3.2-150400.4.17.1 * keylime-verifier-6.3.2-150400.4.17.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38200.html * https://bugzilla.suse.com/show_bug.cgi?id=1213310

1 0