November 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2023:4623-1: moderate: Security update for traceroute
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for traceroute Announcement ID: SUSE-SU-2023:4623-1 Rating: moderate References: * bsc#1216591 Cross-References: * CVE-2023-46316 CVSS scores: * CVE-2023-46316 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-46316 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for traceroute fixes the following issues: * CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4623=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4623=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4623=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4623=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4623=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4623=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4623=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4623=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4623=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4623=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4623=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46316.html * https://bugzilla.suse.com/show_bug.cgi?id=1216591

1 0

openSUSE-SU-2023:0387-1: important: Security update for chromium
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0387-1 Rating: important References: #1217614 #1217615 #1217616 Cross-References: CVE-2023-6345 CVE-2023-6346 CVE-2023-6347 CVE-2023-6348 CVE-2023-6350 CVE-2023-6351 Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for Chromium fixes the following issue: Chromium 119.0.6045.199 (boo#1217616) * CVE-2023-6348: Type Confusion in Spellcheck * CVE-2023-6347: Use after free in Mojo * CVE-2023-6346: Use after free in WebAudio * CVE-2023-6350: Out of bounds memory access in libavif (boo#1217614) * CVE-2023-6351: Use after free in libavif (boo#1217615) * CVE-2023-6345: Integer overflow in Skia * Various fixes from internal audits, fuzzing and other initiatives. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-387=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-387=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-119.0.6045.199-bp155.2.61.1 chromedriver-debuginfo-119.0.6045.199-bp155.2.61.1 chromium-119.0.6045.199-bp155.2.61.1 chromium-debuginfo-119.0.6045.199-bp155.2.61.1 - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-119.0.6045.199-bp154.2.147.1 chromium-119.0.6045.199-bp154.2.147.1 References: https://www.suse.com/security/cve/CVE-2023-6345.html https://www.suse.com/security/cve/CVE-2023-6346.html https://www.suse.com/security/cve/CVE-2023-6347.html https://www.suse.com/security/cve/CVE-2023-6348.html https://www.suse.com/security/cve/CVE-2023-6350.html https://www.suse.com/security/cve/CVE-2023-6351.html https://bugzilla.suse.com/1217614 https://bugzilla.suse.com/1217615 https://bugzilla.suse.com/1217616

1 0

SUSE-RU-2023:4617-1: moderate: Recommended update for javapackages-tools
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for javapackages-tools Announcement ID: SUSE-RU-2023:4617-1 Rating: moderate References: * jsc#PED-6376 * jsc#PED-6377 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains two features can now be installed. ## Description: This update for javapackages-tools fixes the following issues: * Add requirement for `python-xml` as it is needed by some scripts * Ensure reproducibility of built binaries * Minor bug fixes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4617=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4617=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4617=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4617=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4617=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4617=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4617=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4617=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4617=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4617=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4617=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4617=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4617=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4617=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * openSUSE Leap 15.5 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * Basesystem Module 15-SP4 (noarch) * python3-javapackages-6.2.0-150200.3.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * Basesystem Module 15-SP5 (noarch) * python3-javapackages-6.2.0-150200.3.12.1 * Development Tools Module 15-SP4 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * Development Tools Module 15-SP5 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Enterprise Storage 7.1 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * openSUSE Leap 15.4 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 ## References: * https://jira.suse.com/browse/PED-6376 * https://jira.suse.com/browse/PED-6377

1 0

SUSE-RU-2023:4618-1: moderate: Recommended update for orarun
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for orarun Announcement ID: SUSE-RU-2023:4618-1 Rating: moderate References: * bsc#1216566 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for orarun fixes the following issues: * Fixed 'grep: oracle: No such file or directory' error during oracle user login with csh/tcsh (/etc/profile.d/oracle.csh) (bsc#1216566) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4618=1 openSUSE-SLE-15.4-2023-4618=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4618=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4618=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4618=1 ## Package List: * openSUSE Leap 15.4 (s390x x86_64 i586) * orarun-2.1-150400.22.3.1 * openSUSE Leap 15.5 (s390x x86_64) * orarun-2.1-150400.22.3.1 * Server Applications Module 15-SP4 (s390x x86_64) * orarun-2.1-150400.22.3.1 * Server Applications Module 15-SP5 (s390x x86_64) * orarun-2.1-150400.22.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216566

1 0

SUSE-SU-2023:4619-1: important: Security update for sqlite3
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for sqlite3 Announcement ID: SUSE-SU-2023:4619-1 Rating: important References: * bsc#1210660 Cross-References: * CVE-2023-2137 CVSS scores: * CVE-2023-2137 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-2137 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for sqlite3 fixes the following issues: * CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4619=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4619=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4619=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4619=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4619=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4619=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4619=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4619=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE CaaS Platform 4.0 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2137.html * https://bugzilla.suse.com/show_bug.cgi?id=1210660

1 0

SUSE-SU-2023:4619-1: important: Security update for sqlite3
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for sqlite3 Announcement ID: SUSE-SU-2023:4619-1 Rating: important References: * bsc#1210660 Cross-References: * CVE-2023-2137 CVSS scores: * CVE-2023-2137 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-2137 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for sqlite3 fixes the following issues: * CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4619=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4619=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4619=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4619=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4619=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4619=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4619=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4619=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE CaaS Platform 4.0 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2137.html * https://bugzilla.suse.com/show_bug.cgi?id=1210660

1 0

SUSE-SU-2023:4619-1: important: Security update for sqlite3
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for sqlite3 Announcement ID: SUSE-SU-2023:4619-1 Rating: important References: * bsc#1210660 Cross-References: * CVE-2023-2137 CVSS scores: * CVE-2023-2137 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-2137 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for sqlite3 fixes the following issues: * CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4619=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4619=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4619=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4619=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4619=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4619=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4619=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4619=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE CaaS Platform 4.0 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2137.html * https://bugzilla.suse.com/show_bug.cgi?id=1210660

1 0

SUSE-RU-2023:4621-1: moderate: Recommended update for cloud-regionsrv
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for cloud-regionsrv Announcement ID: SUSE-RU-2023:4621-1 Rating: moderate References: * bsc#1191880 * bsc#1195924 * bsc#1195925 * bsc#1216917 Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has four fixes can now be installed. ## Description: This update for cloud-regionsrv fixes the following issue: * Implement IPv6 support independently from IPv4. (bsc#1216917) * IP address resolution from (client as fallback, or server or fail over) (bsc#1216917) * Fixed an issue replacing the cert on the client side when the connected server cert changes. (bsc#1191880) * With matching the certs with the underlying framework it is going to be prevented getting updates from the wrong cloud infrastructure which can occur by changing the provider. (bsc#1195924, bsc#1195925) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4621=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4621=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4621=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2023-4621=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-4621=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-4621=1 ## Package List: * openSUSE Leap 15.3 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * openSUSE Leap 15.4 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * openSUSE Leap 15.5 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * Public Cloud Module 15-SP3 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * Public Cloud Module 15-SP4 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * Public Cloud Module 15-SP5 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1191880 * https://bugzilla.suse.com/show_bug.cgi?id=1195924 * https://bugzilla.suse.com/show_bug.cgi?id=1195925 * https://bugzilla.suse.com/show_bug.cgi?id=1216917

1 0

openSUSE-SU-2023:0386-1: important: Security update for opera
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0386-1 Rating: important References: Cross-References: CVE-2023-5997 CVE-2023-6112 CVSS scores: CVE-2023-5997 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6112 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 105.0.4970.21 * DNA-112425 Choosing Workspace Icons doesn’t work as expected * DNA-112787 glow around tiles in Top Sites section in BABE in dark theme - The update to chromium 119.0.6045.159 fixes following issues: CVE-2023-5997, CVE-2023-6112 - Update to 105.0.4970.16 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111903 [Lin] [Component-based-scrollbar] Old design is displayed on Ubuntu 20.04 * DNA-112914 Visual glitch with HWA enabled in some random places * DNA-113137 [WinLin][Sidebar autohide] Sidebar panel is not connected with sidebar - Update to 105.0.4970.13 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111885 [Address bar] Hover effect on padlock icon is not rounded * DNA-112411 Active Tab in Tab Island in Dark Mode should have different colour * DNA-112431 Dragging tab quickly past last island on the right, causes tab to be dropped at the end of tab strip instead of at location of the cursor * DNA-112878 [Tab strip] Detached tab not restored after restarting browser * DNA-112900 Crash at opera::component_based:: ComponentTabDragController::StopViewDragging * DNA-112996 Translations for O105 * DNA-113213 Promote 105 to stable - Complete Opera 105 changelog at: https://blogs.opera.com/desktop/changelog-for-105/ - Update to 104.0.4944.54 * DNA-111938 Option 'Automatically hide sidebar' and Full screen makes Opera freeze * DNA-112241 Stuttering video on some systems with OOP SW H.264 decoding * DNA-112636 [Tab strip] Detach button on meeting tabs moves on hover and is replaced by close tab * DNA-112862 Crash at extensions::BookmarksPrivateAPI:: OnListenerAdded(extensions::EventListenerInfo const&) * DNA-112990 Crash when closing tab tooltip and opening Search tabs Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2023-386=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-105.0.4970.21-lp155.3.21.1 References: https://www.suse.com/security/cve/CVE-2023-5997.html https://www.suse.com/security/cve/CVE-2023-6112.html

1 0

openSUSE-SU-2023:0384-1: moderate: Security update for python-django-grappelli
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for python-django-grappelli ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0384-1 Rating: moderate References: #1216481 Cross-References: CVE-2021-46898 CVSS scores: CVE-2021-46898 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-django-grappelli fixes the following issues: Update to 2.14.4: - CVE-2021-46898: Fixed views/switch.py vulnerable to protocol-relative URL attacks (boo#1216481) - Fixed: Redirect with switch user. - Improved: Remove extra filtering in AutocompleteLookup. - Improved: Added import statement with URLs for quickstart docs. - Improved: Added additional blocks with inlines to allow override. - Fixed: Compatibility with Django 3.1. - Fixed: Docs about adding Grappelli documentation URLS. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-384=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): python3-django-grappelli-2.14.4-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-46898.html https://bugzilla.suse.com/1216481

1 0