November 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2023:4542-1: low: Recommended update for perl-Test-Warnings
by maintenance＠opensuse.org 25 Nov '23

25 Nov '23

# Recommended update for perl-Test-Warnings Announcement ID: SUSE-RU-2023:4542-1 Rating: low References: * bsc#1215584 Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for perl-Test-Warnings fixes the following issues: * updated to 0.032 (see https://metacpan.org/dist/Test-Warnings/changes, bsc#1215584) 0.032 2023-09-30 23:36:50Z * new config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for temporarily turning failures into reports 0.031 2021-07-13 22:13:48Z * remove unneeded develop prereqs that caused metacpan to unduly raise the river position of some dependent modules ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4542=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4542=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4542=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4542=1 ## Package List: * openSUSE Leap 15.4 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 * openSUSE Leap 15.5 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 * Development Tools Module 15-SP4 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 * Development Tools Module 15-SP5 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215584

1 0

openSUSE-RU-2023:0375-1: important: Recommended update for rspamd
by maintenance＠opensuse.org 25 Nov '23

25 Nov '23

openSUSE Recommended Update: Recommended update for rspamd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0375-1 Rating: important References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rspamd fixes the following issues: - Update to 3.7.4 - [Enhancement] Add composite rule for suspicious URLs in suspicious messages - [Fix] Another try to fix setproctitle - [Fix] Do not cleanup hyperscan files unless new ones are loaded - [Fix] Fix various issues with canonicalisation of the paths - [Fix] Properly set config field when creating tasks from Lua - [Fix] Set loaded variable explicitly - [Fix] known_senders: fix config handling - [Fix] rbl: fix exclude_local - [Minor] Add missing include for gcc 14 - [Minor] Add rule for messages missing both X-Mailer and User-Agent header - [Minor] Bundle fasttext as linux distributives are just useless - [Minor] Enable fasttext on RPM based linux - [Minor] Forgot it in one more place - [Minor] Improve FREEMAIL_AFF capture rates - [Minor] Limit fasttext to amd64 only - [Minor] Properly search for fasttext include - [Minor] Treat *.zpaq attachments as archives and harmful - [Minor] force_actions: set a group for symbols - [WebUI] Update map editor - Update to 3.7.3 - [Fix] Emergency fix for the hyperscan path error - Update to 3.7.2 - [Minor] Make compiling with backward-cpp optional by @a16bitsysop in #4639 - [Rules] Blank spam detection by @fatalbanana in #4644 - [Minor] Treat *.cue attachments as harmful by @twesterhever in #4642 - Dzjaivnt patch 1 by @dzjaivnt in #4640 - [WebUI] Add control to invert action filter by @moisseev in #4645 - [Fix] DMARC reporting: fix reporting for subdomains by @fatalbanana in #4587 - [Minor] RSPAMD_SHAREDIR is called SHAREDIR in configuration by @fatalbanana in #4649 - [WebUI] Fix history table vanishing by @moisseev in #4661 - Tighten rspamd's attachment policy by @twesterhever in #4656 - [Minor] rbl: support use of different matchers for return codes by @fatalbanana in #4657 - Update to 3.7.1 - [Fix] CMakeLists.txt remove whitespace added by linter as it makes te… by @a16bitsysop in #4560 - fix: redis schema parsing by @Conni2461 in #4562 - [Minor] Update JS libraries by @moisseev in #4567 - [WebUI] Restore contrasting foreground color by @moisseev in #4569 - Add new exporter to push JSON to a raw TCP socket by @lingfish in #4572 - [WebUI] Tweak bootstrap colors for accessibility by @moisseev in #4577 - Rewrite configuration utils in C++ by @vstakhov in #4573 - [Minor] Slightly adjust DNSBL scores by @twesterhever in #4557 - Added support for Redis 6 ACL (username/password) by @laodc in #4578 - [Feature] Support feed exclusions in phishing module by @dragoangel in #4575 - [Minor] Remove unwanted debug logging by @fatalbanana in #4585 - Fix regression in invokation of rspamd-test by @ln5 in #4588 - [Fix] Correct format pattern for RE tree tempfile name by @ln5 in #4590 - [Minor] Remove unused variables by @ln5 in #4591 - [Fix] Correct format string for unw_word_t by @ln5 in #4592 - [Fix] rbl: really fix dependency registration when symbols_prefixes i… by @fatalbanana in #4594 - [Fix] rspamadm mime: arguments beginning with letter t by @fatalbanana in #4597 - [Minor] API docs: lua_ip: fix function name by @fatalbanana in #4598 - [Feature] rbl: support checking numeric URLs in isolation by @fatalbanana in #4596 - [Feature] Add ICAP Content-Type and Filename from TODO List by @lbahtarliev in #4595 - [Minor] Try fix CI by @fatalbanana in #4603 - [Fix] MISSING_MIMEOLE: avoid matching messages from Android GMail app (#4561) by @fatalbanana in #4600 - [WebUI] Set locale on UI load by @moisseev in #4607 - Update configwizard.lua by @Dani778 in #4605 - [Minor] Revisit numeric_urls by @fatalbanana in #4602 - [Fix] Change Date: header location to conform with RFC by @lbahtarliev in #4608 - Implement known senders plugin by @vstakhov in #4610 - Merge tests into master branch by @fatalbanana in #4615 - Run CI on ARM by @fatalbanana in #4617 - [Minor] Try fix test logs by @fatalbanana in #4620 - Minor improvements for CI by @fatalbanana in #4621 - Fix wrong copypasta & mis-named file by @fatalbanana in #4624 - [Fix] Prevent DNSWL sabotage by @mdierksen in #4627 - Update to 3.6 - [WebUI] Migrate to Bootstrap v5.2 by @moisseev in #4444 - fix: avoid double-dip of nrcpt when calculating ratelimit condition by @simbuerg in #4448 - [WebUI] Fix "Clean history" button enabling/disabling in the Scan tab by @moisseev in #4453 - [Minor] Use a scalar variable as a dir handle by @moisseev in #4457 - Fix arc by @jendis in #4449 - [Minor] Fix pagination control border radius by @moisseev in #4461 - [Fix] remove obsolete rspamd-redirector files by @a16bitsysop in #4422 - Add fasttext language detector to Rspamd by @vstakhov in #4473 - [Minor] Fix rows background coloring by @moisseev in #4490 - [WebUI] Add ability to compute fuzzy hashes by @moisseev in #4499 - [Fix] rbl: fix dependency registration when symbols_prefixes is used by @fatalbanana in #4498 - [Enhancement] Add composite rule for messages only containing a redirector URL by @twesterhever in #4496 - [WebUI] Show validation feedback inside login modal by @moisseev in #4504 - [Minor] Improve HACKED_WP_PHISHING coverage by @twesterhever in #4506 - [Minor] Add additional bad extensions by @twesterhever in #4508 - [Minor] Assorted cleanup and housekeeping of configuration files, take 2 by @twesterhever in #4505 - [Rules] Add thread hijacking composite rule by @twesterhever in #4507 - [Minor] Move HAS_ONION_URI from "experimental" to "url" group by @twesterhever in #4495 - [Enhancement] Make Google Firebase rule productive by @twesterhever in #4494 - Use the correct mime format for 7z by @JasonStephenson in #4517 - [Minor] Increase score for .chm attachments by @twesterhever in #4518 - [Enhancement] Improve detection of Google redirection URLs by @twesterhever in #4497 - if elasticsearch_version >= 7 we should not send the _type to elastic… by @mariojansen in #4520 - [Enhancement] Treat HTML attachments as (slightly) bad by @twesterhever in #4519 - Dockerfile: Switch to bookworm by @mrueg in #4532 - [Feature] external_relay: add ip_map strategy by @moesoha in #4537 - [Feature] Detect Apple Mail and remove scores for their known common behavior by @dragoangel in #4538 - [Minor] A bit better apple_x_mailer regex by @dragoangel in #4539 - replace ECDSA_sign_setup/ECDSA_sign_ex with ECDSA_sign by @sthen in #4541 - [Fix] dmarc gramar - allow spaces before ";" by @rheoli in #4547 - [Minor] Minor fixes for previous ratelimit changes by @fatalbanana in #4549 - [Minor] Improve catch rates of FREEMAIL_AFF by @twesterhever in #4556 - [Minor] Tweak HAS_GOOGLE_REDIR to detect Google AMP URLs as well by @twesterhever in #4558 - Enable more features - Enable nice stacktraces for crashes. New BR: libunwind-devel - use system xxhash: New BR: xxhash-devel - enable blas/lapack support for the neural network processing New BR: lapack-devel, libopenblas_openmp-devel, openblas-common-devel - Update to 3.5 - [WebUI] Add legacy history version badge by @moisseev in #4326 - [Feature] Enable Mime part filters on antivirus module by @jonmoesli in #4328 - metadata_exporter http pusher: Extend valid return codes by @yo000 in #4334 - [Minor] debian package: disable luajit on arm64 by @fatalbanana in #4335 - Support external maps in Rspamd by @vstakhov in #4324 - [Fix] Return true from has_urls(true) if only emails are present by @cpragadeesh in #4365 - [Fix] received: filtering of artificial header by @kakochang in #4367 - [Fix] Replace broken strict_domains with phishing_exceptions by @dupondje in #4376 - Fix build with gcc 13 by including by @heirecka in #4375 - rspamc: add -R option for human readable report by @amishmm in #4377 - rspamc: optimize indentation condition by @amishmm in #4381 - Set required_score = reject score and minor change to the report by @amishmm in #4383 - conf/modules.d/arc.conf: fix parameter name by @jendis in #4387 - Fixes to support global lua maps in user settings by @dpetrov67 in #4393 - [Enhancement] Make Google URL redirection rules productive by @twesterhever in #4399 - [Enhancement] Add rule to detect Google Firebase URLs by @twesterhever in #4401 - [Minor] Assorted cleanup and housekeeping of configuration files by @twesterhever in #4397 - addition: add Betterbird to user_agent_thunderbird by @georglauterbach in #4404 - [Minor] Replace "Spamhaus XBL any" hack with a more clear solution by @twesterhever in #4398 - [Enhancement] Add IPFS URL heuristic by @twesterhever in #4310 - Checking for redirector url in mail by @korgoth1 in #4351 - fix incorrect asn references in bimi.conf by @mta59066 in #4410 - [Minor] Account for one more undisclosed-recipients address variant by @citrin in #4413 - Fix for x-rspamd-action in Milter headers module by @nishils in #4416 - [WebUI] Update JS libraries by @moisseev in #4414 - [WebUI] Update bootstrap by @moisseev in #4420 - [Minor] remove check for sys/cdefs.h in CMakelists.txt by @a16bitsysop in #4430 - [Minor] Fix some compiler warnings by @a16bitsysop in #4436 - Upgrade to 3.4 again - Fix metadata_exporter with many recipients by @yo000 in #4294 - [Fix] Fix favicon.ico Content-Type header by @moisseev in #4302 - [Minor] Fix copy-paste error by @moisseev in #4305 - Add basic auth to metadata_exporter http pusher by @yo000 in #4300 - [Enhancement] Add composite rule against AFF involving freemailers by @twesterhever in #4304 - Penalize bounce spam by @frederikbosch in #4308 - Update to 3.4 - Fix metadata_exporter with many recipients by @yo000 in #4294 - [Fix] Fix favicon.ico Content-Type header by @moisseev in #4302 - [Minor] Fix copy-paste error by @moisseev in #4305 - Add basic auth to metadata_exporter http pusher by @yo000 in #4300 - [Enhancement] Add composite rule against AFF involving freemailers by @twesterhever in #4304 - Penalize bounce spam by @frederikbosch in #4308 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-375=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): rspamd-3.7.4-bp155.2.3.1 References:

1 0

SUSE-RU-2023:4539-1: moderate: Recommended update for unar
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for unar Announcement ID: SUSE-RU-2023:4539-1 Rating: moderate References: * jsc#PED-6193 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for unar fixes the following issue: * use pkgconfig(icu-uc) for current libicu ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4539=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4539=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4539=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4539=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4539=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4539=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4539=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4539=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4539=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4539=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4539=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4539=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4539=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4539=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4539=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Manager Proxy 4.2 (x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Manager Retail Branch Server 4.2 (x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 ## References: * https://jira.suse.com/browse/PED-6193

1 0

SUSE-RU-2023:4540-1: moderate: Recommended update for patterns-sap
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for patterns-sap Announcement ID: SUSE-RU-2023:4540-1 Rating: moderate References: * bsc#1214161 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP5 * SAP Business One Module 15-SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for patterns-sap fixes the following issues: * Adapt required packages to the new SAP BusinessOne. * Fixes an issue when SAP Installation Wizard stops after HANA installation. (bsc#1214161) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4540=1 openSUSE-SLE-15.5-2023-4540=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2023-4540=1 * SAP Business One Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Business-One-15-SP5-2023-4540=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * patterns-sap-bone-15.5.1-150500.5.5.1 * patterns-sap-nw-15.5.1-150500.5.5.1 * patterns-sap-hana-15.5.1-150500.5.5.1 * patterns-sap-15.5.1-150500.5.5.1 * SAP Applications Module 15-SP5 (ppc64le x86_64) * patterns-sap-nw-15.5.1-150500.5.5.1 * patterns-sap-hana-15.5.1-150500.5.5.1 * SAP Business One Module 15-SP5 (x86_64) * patterns-sap-bone-15.5.1-150500.5.5.1 * patterns-sap-hana-15.5.1-150500.5.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214161

1 0

SUSE-RU-2023:4534-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for libzypp, zypper Announcement ID: SUSE-RU-2023:4534-1 Rating: moderate References: * bsc#1041742 * bsc#1203760 * bsc#1212422 * bsc#1215979 * bsc#1216091 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has five fixes can now be installed. ## Description: This update for libzypp, zypper fixes the following issues: * Preliminary disable 'rpm --runposttrans' usage for chrooted systems (bsc#1216091) * Fix comment typo on zypp.conf (bsc#1215979) * Attempt to delay %transfiletrigger(postun|in) execution if rpm supports it (bsc#1041742) * Make sure the old target is deleted before a new one is created (bsc#1203760) * Return 104 also if info suggests near matches * Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422) * commit: Insert a headline to separate output of different rpm scripts (bsc#1041742) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4534=1 openSUSE-SLE-15.4-2023-4534=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4534=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4534=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4534=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4534=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4534=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4534=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4534=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4534=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4534=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4534=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-devel-doc-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * openSUSE Leap 15.4 (noarch) * zypper-aptitude-1.14.66-150400.3.35.1 * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.3 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.4 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-devel-doc-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * openSUSE Leap 15.5 (noarch) * zypper-aptitude-1.14.66-150400.3.35.1 * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Manager Proxy 4.3 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * Basesystem Module 15-SP4 (noarch) * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * Basesystem Module 15-SP5 (noarch) * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1041742 * https://bugzilla.suse.com/show_bug.cgi?id=1203760 * https://bugzilla.suse.com/show_bug.cgi?id=1212422 * https://bugzilla.suse.com/show_bug.cgi?id=1215979 * https://bugzilla.suse.com/show_bug.cgi?id=1216091

1 0

SUSE-SU-2023:4537-1: moderate: Security update for libxml2
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Security update for libxml2 Announcement ID: SUSE-SU-2023:4537-1 Rating: moderate References: * bsc#1216129 Cross-References: * CVE-2023-45322 CVSS scores: * CVE-2023-45322 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-45322 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Python 3 Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for libxml2 fixes the following issues: * CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4537=1 openSUSE-SLE-15.4-2023-4537=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4537=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4537=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4537=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4537=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4537=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4537=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4537=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-4537=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-devel-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python311-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python311-libxml2-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * openSUSE Leap 15.4 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.25.1 * libxml2-2-32bit-2.9.14-150400.5.25.1 * libxml2-devel-32bit-2.9.14-150400.5.25.1 * openSUSE Leap 15.4 (noarch) * libxml2-doc-2.9.14-150400.5.25.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libxml2-devel-64bit-2.9.14-150400.5.25.1 * libxml2-2-64bit-debuginfo-2.9.14-150400.5.25.1 * libxml2-2-64bit-2.9.14-150400.5.25.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-devel-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * Basesystem Module 15-SP4 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.25.1 * libxml2-2-32bit-2.9.14-150400.5.25.1 * Python 3 Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-libxml2-debuginfo-2.9.14-150400.5.25.1 * python311-libxml2-2.9.14-150400.5.25.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45322.html * https://bugzilla.suse.com/show_bug.cgi?id=1216129

1 0

SUSE-RU-2023:4538-1: moderate: Recommended update for screen
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for screen Announcement ID: SUSE-RU-2023:4538-1 Rating: moderate References: * jsc#SMO-279 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for screen fixes the following issue: * screen is shipped to SUSE Linux Enterprise Micro 5.3, 5.4 and 5.5. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4538=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4538=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4538=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4538=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4538=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4538=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4538=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4538=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4538=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4538=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4538=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4538=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4538=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4538=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * openSUSE Leap Micro 5.4 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Manager Proxy 4.2 (x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 ## References: * https://jira.suse.com/browse/SMO-279

1 0

SUSE-SU-2023:4527-1: moderate: Security update for maven, maven-resolver, sbt, xmvn
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Security update for maven, maven-resolver, sbt, xmvn Announcement ID: SUSE-SU-2023:4527-1 Rating: moderate References: * bsc#1162112 * bsc#1216529 Cross-References: * CVE-2023-46122 CVSS scores: * CVE-2023-46122 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L * CVE-2023-46122 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for maven, maven-resolver, sbt, xmvn fixes the following issues: * CVE-2023-46122: Fixed an arbitrary file write when extracting a crafted zip file with sbt (bsc#1216529). * Upgraded maven to version 3.9.4 * Upgraded maven-resolver to version 1.9.15. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4527=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4527=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4527=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4527=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4527=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4527=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4527=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4527=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4527=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4527=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4527=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4527=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4527=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * openSUSE Leap 15.4 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * maven-resolver-transport-classpath-1.9.15-150200.3.14.2 * maven-javadoc-3.9.4-150200.4.18.1 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * maven-resolver-javadoc-1.9.15-150200.3.14.2 * maven-resolver-test-util-1.9.15-150200.3.14.2 * sbt-0.13.18-150200.4.16.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * sbt-bootstrap-0.13.18-150200.4.16.1 * xmvn-connector-javadoc-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * xmvn-tools-javadoc-4.2.0-150200.3.14.1 * maven-resolver-impl-1.9.15-150200.3.14.2 * xmvn-parent-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-mojo-javadoc-4.2.0-150200.3.14.1 * xmvn-resolve-4.2.0-150200.3.14.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * openSUSE Leap 15.5 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * maven-resolver-transport-classpath-1.9.15-150200.3.14.2 * maven-javadoc-3.9.4-150200.4.18.1 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * maven-resolver-javadoc-1.9.15-150200.3.14.2 * maven-resolver-test-util-1.9.15-150200.3.14.2 * sbt-0.13.18-150200.4.16.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * sbt-bootstrap-0.13.18-150200.4.16.1 * xmvn-connector-javadoc-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * xmvn-tools-javadoc-4.2.0-150200.3.14.1 * maven-resolver-impl-1.9.15-150200.3.14.2 * xmvn-parent-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-mojo-javadoc-4.2.0-150200.3.14.1 * xmvn-resolve-4.2.0-150200.3.14.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-minimal-4.2.0-150200.3.14.1 * xmvn-4.2.0-150200.3.14.1 * Development Tools Module 15-SP4 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * Development Tools Module 15-SP5 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-util-1.9.15-150200.3.14.2 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Package Hub 15 15-SP5 (noarch) * sbt-bootstrap-0.13.18-150200.4.16.1 * sbt-0.13.18-150200.4.16.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Enterprise Storage 7.1 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 ## References: * https://www.suse.com/security/cve/CVE-2023-46122.html * https://bugzilla.suse.com/show_bug.cgi?id=1162112 * https://bugzilla.suse.com/show_bug.cgi?id=1216529

1 0

SUSE-SU-2023:4528-1: important: Security update for python-Pillow
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Security update for python-Pillow Announcement ID: SUSE-SU-2023:4528-1 Rating: important References: * bsc#1216894 Cross-References: * CVE-2023-44271 CVSS scores: * CVE-2023-44271 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-44271 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP4 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-Pillow fixes the following issues: * CVE-2023-44271: Fixed uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (bsc#1216894). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4528=1 openSUSE-SLE-15.4-2023-4528=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4528=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-4528=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2023-4528=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 * Python 3 Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-44271.html * https://bugzilla.suse.com/show_bug.cgi?id=1216894

1 0

SUSE-SU-2023:4529-1: important: Security update for strongswan
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Security update for strongswan Announcement ID: SUSE-SU-2023:4529-1 Rating: important References: * bsc#1216901 Cross-References: * CVE-2023-41913 CVSS scores: * CVE-2023-41913 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for strongswan fixes the following issues: * CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4529=1 openSUSE-SLE-15.5-2023-4529=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4529=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4529=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-4529=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * strongswan-ipsec-5.9.11-150500.5.6.1 * strongswan-mysql-5.9.11-150500.5.6.1 * strongswan-nm-debuginfo-5.9.11-150500.5.6.1 * strongswan-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 * strongswan-nm-5.9.11-150500.5.6.1 * strongswan-sqlite-5.9.11-150500.5.6.1 * strongswan-hmac-5.9.11-150500.5.6.1 * strongswan-ipsec-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-5.9.11-150500.5.6.1 * strongswan-debugsource-5.9.11-150500.5.6.1 * strongswan-mysql-debuginfo-5.9.11-150500.5.6.1 * strongswan-sqlite-debuginfo-5.9.11-150500.5.6.1 * openSUSE Leap 15.5 (noarch) * strongswan-doc-5.9.11-150500.5.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * strongswan-ipsec-5.9.11-150500.5.6.1 * strongswan-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 * strongswan-hmac-5.9.11-150500.5.6.1 * strongswan-ipsec-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-5.9.11-150500.5.6.1 * strongswan-debugsource-5.9.11-150500.5.6.1 * Basesystem Module 15-SP5 (noarch) * strongswan-doc-5.9.11-150500.5.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * strongswan-debugsource-5.9.11-150500.5.6.1 * strongswan-nm-debuginfo-5.9.11-150500.5.6.1 * strongswan-nm-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * strongswan-debugsource-5.9.11-150500.5.6.1 * strongswan-nm-debuginfo-5.9.11-150500.5.6.1 * strongswan-nm-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41913.html * https://bugzilla.suse.com/show_bug.cgi?id=1216901

1 0