August 2023 - openSUSE Security Announce

SUSE-SU-2023:3219-1: important: Security update for gstreamer-plugins-good
by security＠lists.opensuse.org 07 Aug '23

07 Aug '23

# Security update for gstreamer-plugins-good Announcement ID: SUSE-SU-2023:3219-1 Rating: important References: * #1213128 Cross-References: * CVE-2023-37327 CVSS scores: * CVE-2023-37327 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for gstreamer-plugins-good fixes the following issues: * CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow (bsc#1213128). ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3219=1 openSUSE-SLE-15.4-2023-3219=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3219=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gstreamer-plugins-good-jack-1.20.1-150400.3.6.1 * gstreamer-plugins-good-jack-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-good-gtk-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-good-gtk-1.20.1-150400.3.6.1 * gstreamer-plugins-good-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-good-qtqml-1.20.1-150400.3.6.1 * gstreamer-plugins-good-debugsource-1.20.1-150400.3.6.1 * gstreamer-plugins-good-1.20.1-150400.3.6.1 * gstreamer-plugins-good-extra-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-good-qtqml-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-good-extra-1.20.1-150400.3.6.1 * openSUSE Leap 15.4 (x86_64) * gstreamer-plugins-good-jack-32bit-1.20.1-150400.3.6.1 * gstreamer-plugins-good-extra-32bit-1.20.1-150400.3.6.1 * gstreamer-plugins-good-jack-32bit-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-good-32bit-1.20.1-150400.3.6.1 * gstreamer-plugins-good-extra-32bit-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-good-32bit-debuginfo-1.20.1-150400.3.6.1 * openSUSE Leap 15.4 (noarch) * gstreamer-plugins-good-lang-1.20.1-150400.3.6.1 * openSUSE Leap 15.4 (aarch64_ilp32) * gstreamer-plugins-good-extra-64bit-1.20.1-150400.3.6.1 * gstreamer-plugins-good-extra-64bit-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-good-64bit-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-good-jack-64bit-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-good-jack-64bit-1.20.1-150400.3.6.1 * gstreamer-plugins-good-64bit-1.20.1-150400.3.6.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * gstreamer-plugins-good-1.20.1-150400.3.6.1 * gstreamer-plugins-good-debugsource-1.20.1-150400.3.6.1 * gstreamer-plugins-good-debuginfo-1.20.1-150400.3.6.1 * Basesystem Module 15-SP4 (noarch) * gstreamer-plugins-good-lang-1.20.1-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-37327.html * https://bugzilla.suse.com/show_bug.cgi?id=1213128

1 0

SUSE-SU-2023:3220-1: important: Security update for gstreamer-plugins-bad
by security＠lists.opensuse.org 07 Aug '23

07 Aug '23

# Security update for gstreamer-plugins-bad Announcement ID: SUSE-SU-2023:3220-1 Rating: important References: * #1213126 Cross-References: * CVE-2023-37329 CVSS scores: * CVE-2023-37329 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Desktop Applications Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 An update that solves one vulnerability can now be installed. ## Description: This update for gstreamer-plugins-bad fixes the following issues: * CVE-2023-37329: Fixed GStreamer SRT File Parsing Heap-based Buffer Overflow (bsc#1213126). ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3220=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-3220=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-3220=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3220=1 ## Package List: * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.3.1 * libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstplay-1_0-0-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.3.1 * libgstplay-1_0-0-1.20.1-150400.3.3.1 * libgstphotography-1_0-0-1.20.1-150400.3.3.1 * libgstplayer-1_0-0-1.20.1-150400.3.3.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libgstcodecparsers-1_0-0-1.20.1-150400.3.3.1 * libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-1.20.1-150400.3.3.1 * libgstinsertbin-1_0-0-1.20.1-150400.3.3.1 * libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstadaptivedemux-1_0-0-1.20.1-150400.3.3.1 * libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.3.1 * libgstmpegts-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.3.1 * libgsturidownloader-1_0-0-1.20.1-150400.3.3.1 * typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.3.1 * libgstvulkan-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.3.1 * libgstbadaudio-1_0-0-1.20.1-150400.3.3.1 * libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstwayland-1_0-0-1.20.1-150400.3.3.1 * libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstisoff-1_0-0-1.20.1-150400.3.3.1 * libgstsctp-1_0-0-1.20.1-150400.3.3.1 * libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstwebrtc-1_0-0-1.20.1-150400.3.3.1 * libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstva-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.3.1 * libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstPlay-1_0-1.20.1-150400.3.3.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-devel-1.20.1-150400.3.3.1 * libgstcodecs-1_0-0-1.20.1-150400.3.3.1 * libgstva-1_0-0-1.20.1-150400.3.3.1 * Desktop Applications Module 15-SP4 (noarch) * gstreamer-plugins-bad-lang-1.20.1-150400.3.3.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * libgsttranscoder-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.3.1 * libgsttranscoder-1_0-0-debuginfo-1.20.1-150400.3.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libgstcodecparsers-1_0-0-1.20.1-150400.3.3.1 * libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstVulkanWayland-1_0-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-1.20.1-150400.3.3.1 * gstreamer-transcoder-1.20.1-150400.3.3.1 * libgstplay-1_0-0-1.20.1-150400.3.3.1 * typelib-1_0-GstVulkanXCB-1_0-1.20.1-150400.3.3.1 * libgstinsertbin-1_0-0-1.20.1-150400.3.3.1 * libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstadaptivedemux-1_0-0-1.20.1-150400.3.3.1 * libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstVulkan-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.3.1 * libgstmpegts-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.3.1 * libgstplay-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgsturidownloader-1_0-0-1.20.1-150400.3.3.1 * typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.3.1 * libgstvulkan-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.3.1 * libgstbadaudio-1_0-0-1.20.1-150400.3.3.1 * libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstphotography-1_0-0-1.20.1-150400.3.3.1 * libgstwayland-1_0-0-1.20.1-150400.3.3.1 * libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstisoff-1_0-0-1.20.1-150400.3.3.1 * libgstsctp-1_0-0-1.20.1-150400.3.3.1 * libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.3.1 * gstreamer-transcoder-debuginfo-1.20.1-150400.3.3.1 * libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstwebrtc-1_0-0-1.20.1-150400.3.3.1 * libgstplayer-1_0-0-1.20.1-150400.3.3.1 * libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstva-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstTranscoder-1_0-1.20.1-150400.3.3.1 * libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.3.1 * libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgsttranscoder-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstPlay-1_0-1.20.1-150400.3.3.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgsttranscoder-1_0-0-1.20.1-150400.3.3.1 * libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-devel-1.20.1-150400.3.3.1 * libgstcodecs-1_0-0-1.20.1-150400.3.3.1 * gstreamer-transcoder-devel-1.20.1-150400.3.3.1 * libgstva-1_0-0-1.20.1-150400.3.3.1 * openSUSE Leap 15.4 (x86_64) * libgstcodecparsers-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstplayer-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstbadaudio-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstwayland-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstinsertbin-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstbadaudio-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstisoff-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstphotography-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstcodecparsers-1_0-0-32bit-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstwayland-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstvulkan-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstwebrtc-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstadaptivedemux-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstcodecs-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstbasecamerabinsrc-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstwebrtc-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstvulkan-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstadaptivedemux-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstphotography-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgsturidownloader-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstmpegts-1_0-0-32bit-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-chromaprint-32bit-1.20.1-150400.3.3.1 * libgstplay-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstplay-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstinsertbin-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstisoff-1_0-0-32bit-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-32bit-1.20.1-150400.3.3.1 * libgstplayer-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstcodecs-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstva-1_0-0-32bit-1.20.1-150400.3.3.1 * libgsturidownloader-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstva-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstmpegts-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstsctp-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstsctp-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * gstreamer-plugins-bad-lang-1.20.1-150400.3.3.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgstsctp-1_0-0-64bit-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstadaptivedemux-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstcodecs-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstcodecparsers-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstcodecparsers-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstbadaudio-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstinsertbin-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstphotography-1_0-0-64bit-1.20.1-150400.3.3.1 * libgsturidownloader-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstva-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstvulkan-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstwayland-1_0-0-64bit-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-chromaprint-64bit-1.20.1-150400.3.3.1 * libgstmpegts-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstcodecs-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstphotography-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstisoff-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstwebrtc-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstwayland-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstbasecamerabinsrc-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstisoff-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstbadaudio-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstadaptivedemux-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstplay-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-64bit-1.20.1-150400.3.3.1 * libgstvulkan-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-bad-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstplayer-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstplayer-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstva-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstmpegts-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstinsertbin-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgsturidownloader-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstsctp-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstwebrtc-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstplay-1_0-0-64bit-1.20.1-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-37329.html * https://bugzilla.suse.com/show_bug.cgi?id=1213126

1 0

SUSE-SU-2023:3221-1: important: Security update for gstreamer-plugins-base
by security＠lists.opensuse.org 07 Aug '23

07 Aug '23

# Security update for gstreamer-plugins-base Announcement ID: SUSE-SU-2023:3221-1 Rating: important References: * #1213128 * #1213131 Cross-References: * CVE-2023-37327 * CVE-2023-37328 CVSS scores: * CVE-2023-37327 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-37328 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for gstreamer-plugins-base fixes the following issues: * CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow (bsc#1213128). * CVE-2023-37328: Fixed Heap-based Buffer Overflow in GStreamer PGS (bsc#1213131). ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3221=1 openSUSE-SLE-15.4-2023-3221=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-3221=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-3221=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3221=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3221=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3221=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3221=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3221=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-3221=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * typelib-1_0-GstSdp-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstApp-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstGL-1_0-1.20.1-150400.3.3.1 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstRtsp-1_0-1.20.1-150400.3.3.1 * libgstsdp-1_0-0-1.20.1-150400.3.3.1 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstGLEGL-1_0-1.20.1-150400.3.3.1 * libgstgl-1_0-0-1.20.1-150400.3.3.1 * typelib-1_0-GstGLX11-1_0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-1.20.1-150400.3.3.1 * libgstfft-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstTag-1_0-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstfft-1_0-0-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-1.20.1-150400.3.3.1 * libgstrtsp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstriff-1_0-0-1.20.1-150400.3.3.1 * typelib-1_0-GstRtp-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstAllocators-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstGLWayland-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstPbutils-1_0-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-1.20.1-150400.3.3.1 * libgstsdp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-1.20.1-150400.3.3.1 * libgstapp-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-devel-1.20.1-150400.3.3.1 * typelib-1_0-GstAudio-1_0-1.20.1-150400.3.3.1 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstrtp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstrtp-1_0-0-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-1.20.1-150400.3.3.1 * libgsttag-1_0-0-1.20.1-150400.3.3.1 * libgstrtsp-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.3.1 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstVideo-1_0-1.20.1-150400.3.3.1 * openSUSE Leap 15.4 (x86_64) * libgstaudio-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstfft-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstgl-1_0-0-32bit-1.20.1-150400.3.3.1 * gstreamer-plugins-base-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstrtp-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstrtsp-1_0-0-32bit-1.20.1-150400.3.3.1 * gstreamer-plugins-base-devel-32bit-1.20.1-150400.3.3.1 * libgstgl-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-32bit-1.20.1-150400.3.3.1 * libgsttag-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgsttag-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstriff-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstfft-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstrtsp-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstapp-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstsdp-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-32bit-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstsdp-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstriff-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstrtp-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstapp-1_0-0-32bit-1.20.1-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * gstreamer-plugins-base-lang-1.20.1-150400.3.3.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgstsdp-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstfft-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstsdp-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstapp-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstriff-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstrtp-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstrtsp-1_0-0-64bit-1.20.1-150400.3.3.1 * libgsttag-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstgl-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstfft-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstgl-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-64bit-1.20.1-150400.3.3.1 * libgstrtp-1_0-0-64bit-1.20.1-150400.3.3.1 * gstreamer-plugins-base-64bit-1.20.1-150400.3.3.1 * libgsttag-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstriff-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstapp-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-devel-64bit-1.20.1-150400.3.3.1 * libgstrtsp-1_0-0-64bit-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-64bit-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-64bit-1.20.1-150400.3.3.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libgstriff-1_0-0-1.20.1-150400.3.3.1 * libgstapp-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-1.20.1-150400.3.3.1 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-1.20.1-150400.3.3.1 * libgsttag-1_0-0-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.3.1 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstgl-1_0-0-1.20.1-150400.3.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libgstriff-1_0-0-1.20.1-150400.3.3.1 * libgstapp-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-1.20.1-150400.3.3.1 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-1.20.1-150400.3.3.1 * libgsttag-1_0-0-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.3.1 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstgl-1_0-0-1.20.1-150400.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libgstriff-1_0-0-1.20.1-150400.3.3.1 * libgstapp-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-1.20.1-150400.3.3.1 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-1.20.1-150400.3.3.1 * libgsttag-1_0-0-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.3.1 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstgl-1_0-0-1.20.1-150400.3.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libgstriff-1_0-0-1.20.1-150400.3.3.1 * libgstapp-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-1.20.1-150400.3.3.1 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-1.20.1-150400.3.3.1 * libgsttag-1_0-0-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.3.1 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstgl-1_0-0-1.20.1-150400.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libgstriff-1_0-0-1.20.1-150400.3.3.1 * libgstapp-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-1.20.1-150400.3.3.1 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-1.20.1-150400.3.3.1 * libgsttag-1_0-0-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.3.1 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstgl-1_0-0-1.20.1-150400.3.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libgstriff-1_0-0-1.20.1-150400.3.3.1 * libgstapp-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-1.20.1-150400.3.3.1 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-1.20.1-150400.3.3.1 * libgsttag-1_0-0-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.3.1 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstgl-1_0-0-1.20.1-150400.3.3.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * typelib-1_0-GstSdp-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstApp-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstGL-1_0-1.20.1-150400.3.3.1 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstRtsp-1_0-1.20.1-150400.3.3.1 * libgstsdp-1_0-0-1.20.1-150400.3.3.1 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstGLEGL-1_0-1.20.1-150400.3.3.1 * libgstgl-1_0-0-1.20.1-150400.3.3.1 * typelib-1_0-GstGLX11-1_0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-1.20.1-150400.3.3.1 * libgstfft-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstTag-1_0-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstfft-1_0-0-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-1.20.1-150400.3.3.1 * libgstrtsp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstriff-1_0-0-1.20.1-150400.3.3.1 * typelib-1_0-GstRtp-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstAllocators-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstGLWayland-1_0-1.20.1-150400.3.3.1 * typelib-1_0-GstPbutils-1_0-1.20.1-150400.3.3.1 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-1.20.1-150400.3.3.1 * libgstsdp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-1.20.1-150400.3.3.1 * libgstapp-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-devel-1.20.1-150400.3.3.1 * typelib-1_0-GstAudio-1_0-1.20.1-150400.3.3.1 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstrtp-1_0-0-debuginfo-1.20.1-150400.3.3.1 * libgstrtp-1_0-0-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-1.20.1-150400.3.3.1 * libgsttag-1_0-0-1.20.1-150400.3.3.1 * libgstrtsp-1_0-0-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.3.1 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.3.1 * typelib-1_0-GstVideo-1_0-1.20.1-150400.3.3.1 * Basesystem Module 15-SP4 (noarch) * gstreamer-plugins-base-lang-1.20.1-150400.3.3.1 * SUSE Package Hub 15 15-SP4 (x86_64) * libgstvideo-1_0-0-32bit-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgstvideo-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.3.1 * libgstaudio-1_0-0-32bit-1.20.1-150400.3.3.1 * libgsttag-1_0-0-32bit-debuginfo-1.20.1-150400.3.3.1 * libgsttag-1_0-0-32bit-1.20.1-150400.3.3.1 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.3.1 * gstreamer-plugins-base-32bit-debuginfo-1.20.1-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-37327.html * https://www.suse.com/security/cve/CVE-2023-37328.html * https://bugzilla.suse.com/show_bug.cgi?id=1213128 * https://bugzilla.suse.com/show_bug.cgi?id=1213131

1 0

SUSE-SU-2023:3222-1: important: Security update for gstreamer-plugins-ugly
by security＠lists.opensuse.org 07 Aug '23

07 Aug '23

# Security update for gstreamer-plugins-ugly Announcement ID: SUSE-SU-2023:3222-1 Rating: important References: * #1213750 * #1213751 Cross-References: * CVE-2023-38103 * CVE-2023-38104 CVSS scores: * CVE-2023-38103 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-38104 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 An update that solves two vulnerabilities can now be installed. ## Description: This update for gstreamer-plugins-ugly fixes the following issues: * CVE-2023-38103: Fixed integer overflow during parsing of MDPR chunks (bsc#1213751). * CVE-2023-38104: Fixed integer overflow during parsing of MDPR chunks (bsc#1213750). ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3222=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * gstreamer-plugins-ugly-doc-1.16.3-150200.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38103.html * https://www.suse.com/security/cve/CVE-2023-38104.html * https://bugzilla.suse.com/show_bug.cgi?id=1213750 * https://bugzilla.suse.com/show_bug.cgi?id=1213751

1 0

SUSE-SU-2023:3208-1: important: Security update for librsvg
by security＠lists.opensuse.org 07 Aug '23

07 Aug '23

# Security update for librsvg Announcement ID: SUSE-SU-2023:3208-1 Rating: important References: * #1213502 Cross-References: * CVE-2023-38633 CVSS scores: * CVE-2023-38633 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-38633 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Enterprise Storage 7 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves one vulnerability can now be installed. ## Description: This update for librsvg fixes the following issues: librsvg was updated to version 2.46.7: * CVE-2023-38633: Fixed directory traversal in URI decoder (bsc#1213502). ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3208=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-3208=1 * SUSE Enterprise Storage 7 zypper in -t patch SUSE-Storage-7-2023-3208=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-3208=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-3208=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3208=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-3208=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-3208=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-3208=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-3208=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-3208=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-3208=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-3208=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3208=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-3208=1 ## Package List: * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Enterprise Storage 7 (aarch64 x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * openSUSE Leap 15.4 (noarch) * librsvg-lang-2.46.7-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Manager Proxy 4.2 (x86_64) * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38633.html * https://bugzilla.suse.com/show_bug.cgi?id=1213502

1 0

openSUSE-SU-2023:0216-1: important: Security update for chromium
by opensuse-security＠opensuse.org 07 Aug '23

07 Aug '23

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0216-1 Rating: important References: #1213920 Cross-References: CVE-2023-4068 CVE-2023-4069 CVE-2023-4070 CVE-2023-4071 CVE-2023-4072 CVE-2023-4073 CVE-2023-4074 CVE-2023-4075 CVE-2023-4076 CVE-2023-4077 CVE-2023-4078 CVSS scores: CVE-2023-4068 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2023-4069 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4070 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2023-4071 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4072 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4073 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4074 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4075 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4076 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4077 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4078 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 115.0.5790.170 (boo#1213920) * CVE-2023-4068: Type Confusion in V8 * CVE-2023-4069: Type Confusion in V8 * CVE-2023-4070: Type Confusion in V8 * CVE-2023-4071: Heap buffer overflow in Visuals * CVE-2023-4072: Out of bounds read and write in WebGL * CVE-2023-4073: Out of bounds memory access in ANGLE * CVE-2023-4074: Use after free in Blink Task Scheduling * CVE-2023-4075: Use after free in Cast * CVE-2023-4076: Use after free in WebRTC * CVE-2023-4077: Insufficient data validation in Extensions * CVE-2023-4078: Inappropriate implementation in Extensions - Specify re2 build dependency in a way that makes Leap packages build in devel project and in Maintenance Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-216=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-216=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-115.0.5790.170-bp155.2.16.1 chromedriver-debuginfo-115.0.5790.170-bp155.2.16.1 chromium-115.0.5790.170-bp155.2.16.1 chromium-debuginfo-115.0.5790.170-bp155.2.16.1 - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-115.0.5790.170-bp154.2.102.1 chromium-115.0.5790.170-bp154.2.102.1 References: https://www.suse.com/security/cve/CVE-2023-4068.html https://www.suse.com/security/cve/CVE-2023-4069.html https://www.suse.com/security/cve/CVE-2023-4070.html https://www.suse.com/security/cve/CVE-2023-4071.html https://www.suse.com/security/cve/CVE-2023-4072.html https://www.suse.com/security/cve/CVE-2023-4073.html https://www.suse.com/security/cve/CVE-2023-4074.html https://www.suse.com/security/cve/CVE-2023-4075.html https://www.suse.com/security/cve/CVE-2023-4076.html https://www.suse.com/security/cve/CVE-2023-4077.html https://www.suse.com/security/cve/CVE-2023-4078.html https://bugzilla.suse.com/1213920

1 0

openSUSE-SU-2023:0217-1: moderate: Security update for perl-Net-Netmask
by opensuse-security＠opensuse.org 07 Aug '23

07 Aug '23

openSUSE Security Update: Security update for perl-Net-Netmask ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0217-1 Rating: moderate References: #1184425 Cross-References: CVE-2021-29424 CVSS scores: CVE-2021-29424 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-29424 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-Net-Netmask fixes the following issues: * CVE-2021-29424: Leading zeros are no longer allowed for IPv4 octets. This (in some situations) allows attackers to bypass access control that is based on IP addresses. (boo#1184425) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-217=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): perl-Net-Netmask-1.9022-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-29424.html https://bugzilla.suse.com/1184425

1 0

openSUSE-SU-2023:0215-1: moderate: Security update for perl-Net-Netmask
by opensuse-security＠opensuse.org 07 Aug '23

07 Aug '23

openSUSE Security Update: Security update for perl-Net-Netmask ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0215-1 Rating: moderate References: #1184425 Cross-References: CVE-2021-29424 CVSS scores: CVE-2021-29424 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-29424 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-Net-Netmask fixes the following issues: * CVE-2021-29424: Leading zeros are no longer allowed for IPv4 octets. This (in some situations) allows attackers to bypass access control that is based on IP addresses.(boo#1184425) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-215=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): perl-Net-Netmask-1.9022-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-29424.html https://bugzilla.suse.com/1184425

1 0

openSUSE-SU-2023:0213-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 06 Aug '23

06 Aug '23

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0213-1 Rating: important References: #1209727 #1211941 #1212209 #1212761 Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for virtualbox fixes the following issues: VirtualBox 7.0.10 (released July 18 2023) This is a maintenance release. The following items were fixed and/or added: - OCI: Introduced general improvements - VMM: Fixed a bug while walking page tables while executing nested VMs causing flooding of the release log as a consequence (Intel hosts only, bug #21551) - GUI: Added general improvements - TPM: Fixed a crash when a VM has a TPM version 1.2 configured (bug #21622) - 3D: Initial support for OpenGL 4.1 - 3D: Fixed various graphics issues with Windows 11 guests (bugs #21136, #21515) - Guest Control/VBoxManage: Fixed parameter "--ignore-orphaned-processes" - Guest Control/VBoxManage: Fixed behavior of how handling argument 0 for a started guest process works: One can now explicitly specify it with the newly added option "--arg0". This will effectively restore the behavior of former VirtualBox versions - Audio: Also use the PulseAudio backend when pipewire-pulse is running instead of falling back to ALSA (bug #21575) - NAT: Adjusted UDP proxy timeout from 18-21 to 21-24 range to respect intended 20 second timeout (bug #21560) - Linux Host: Added initial support for Indirect Branch Tracking (bug #21435) - Linux Host: Added initial support for kernel 6.5 (NOTE: Guest Additions do not support kernel 6.5 yet) - Linux Host and Guest: Improved condition check when kernel modules need to be signed - Linux Host and Guest: Added initial support for RHEL 8.8 (bug #21692), 8.9 (bug #21690) and 9.3 (bugs #21598 and #21671) kernels - Linux Guest Additions: Fixed issue when kernel modules were rebuilt on each boot when guest system has no X11 installed - Linux Guest Additions: Added initial support for kernel 6.4 - Linux Guest Additions: Fixed issue when vboxvideo module reloading caused kernel panic in some guests (bug #21740) - Linux Guest Additions: Introduced general improvements in the installer area - Windows Guest Additions: Introduced general improvements in graphics drivers area - Fix issue with kernel on newer CPU (boo#1212209) - Turn build of VBoxSDL back on. This update addresses boo#1211941. - Detect vboxpython module with python 3.11 - Fix Vagrant/virtualbox startup problems boo#1209727 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-213=1 Package List: - openSUSE Leap 15.5 (noarch): virtualbox-guest-desktop-icons-7.0.10-lp155.2.5.1 virtualbox-guest-source-7.0.10-lp155.2.5.1 virtualbox-host-source-7.0.10-lp155.2.5.1 - openSUSE Leap 15.5 (x86_64): python3-virtualbox-7.0.10-lp155.2.5.1 python3-virtualbox-debuginfo-7.0.10-lp155.2.5.1 virtualbox-7.0.10-lp155.2.5.1 virtualbox-debuginfo-7.0.10-lp155.2.5.1 virtualbox-debugsource-7.0.10-lp155.2.5.1 virtualbox-devel-7.0.10-lp155.2.5.1 virtualbox-guest-tools-7.0.10-lp155.2.5.1 virtualbox-guest-tools-debuginfo-7.0.10-lp155.2.5.1 virtualbox-kmp-debugsource-7.0.10-lp155.2.5.1 virtualbox-kmp-default-7.0.10_k5.14.21_150500.55.7-lp155.2.5.1 virtualbox-kmp-default-debuginfo-7.0.10_k5.14.21_150500.55.7-lp155.2.5.1 virtualbox-qt-7.0.10-lp155.2.5.1 virtualbox-qt-debuginfo-7.0.10-lp155.2.5.1 virtualbox-vnc-7.0.10-lp155.2.5.1 virtualbox-websrv-7.0.10-lp155.2.5.1 virtualbox-websrv-debuginfo-7.0.10-lp155.2.5.1 References: https://bugzilla.suse.com/1209727 https://bugzilla.suse.com/1211941 https://bugzilla.suse.com/1212209 https://bugzilla.suse.com/1212761

1 0

openSUSE-SU-2023:0208-1: moderate: Security update for trytond
by opensuse-security＠opensuse.org 06 Aug '23

06 Aug '23

openSUSE Security Update: Security update for trytond ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0208-1 Rating: moderate References: #1213869 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for trytond fixes the following issues: - Version 6.0.34 - Security Bugfix Release see https://discuss.tryton.org/t/security-release-for-issue-12428/6397 - Version 6.0.33 - Bugfix Release Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-208=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): trytond-6.0.34-bp154.2.30.1 References: https://bugzilla.suse.com/1213869

1 0