November 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2023:4623-1: moderate: Security update for traceroute
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for traceroute Announcement ID: SUSE-SU-2023:4623-1 Rating: moderate References: * bsc#1216591 Cross-References: * CVE-2023-46316 CVSS scores: * CVE-2023-46316 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-46316 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for traceroute fixes the following issues: * CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4623=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4623=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4623=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4623=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4623=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4623=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4623=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4623=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4623=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4623=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4623=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46316.html * https://bugzilla.suse.com/show_bug.cgi?id=1216591

1 0

openSUSE-SU-2023:0387-1: important: Security update for chromium
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0387-1 Rating: important References: #1217614 #1217615 #1217616 Cross-References: CVE-2023-6345 CVE-2023-6346 CVE-2023-6347 CVE-2023-6348 CVE-2023-6350 CVE-2023-6351 Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for Chromium fixes the following issue: Chromium 119.0.6045.199 (boo#1217616) * CVE-2023-6348: Type Confusion in Spellcheck * CVE-2023-6347: Use after free in Mojo * CVE-2023-6346: Use after free in WebAudio * CVE-2023-6350: Out of bounds memory access in libavif (boo#1217614) * CVE-2023-6351: Use after free in libavif (boo#1217615) * CVE-2023-6345: Integer overflow in Skia * Various fixes from internal audits, fuzzing and other initiatives. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-387=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-387=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-119.0.6045.199-bp155.2.61.1 chromedriver-debuginfo-119.0.6045.199-bp155.2.61.1 chromium-119.0.6045.199-bp155.2.61.1 chromium-debuginfo-119.0.6045.199-bp155.2.61.1 - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-119.0.6045.199-bp154.2.147.1 chromium-119.0.6045.199-bp154.2.147.1 References: https://www.suse.com/security/cve/CVE-2023-6345.html https://www.suse.com/security/cve/CVE-2023-6346.html https://www.suse.com/security/cve/CVE-2023-6347.html https://www.suse.com/security/cve/CVE-2023-6348.html https://www.suse.com/security/cve/CVE-2023-6350.html https://www.suse.com/security/cve/CVE-2023-6351.html https://bugzilla.suse.com/1217614 https://bugzilla.suse.com/1217615 https://bugzilla.suse.com/1217616

1 0

SUSE-RU-2023:4617-1: moderate: Recommended update for javapackages-tools
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for javapackages-tools Announcement ID: SUSE-RU-2023:4617-1 Rating: moderate References: * jsc#PED-6376 * jsc#PED-6377 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains two features can now be installed. ## Description: This update for javapackages-tools fixes the following issues: * Add requirement for `python-xml` as it is needed by some scripts * Ensure reproducibility of built binaries * Minor bug fixes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4617=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4617=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4617=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4617=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4617=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4617=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4617=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4617=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4617=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4617=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4617=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4617=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4617=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4617=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * openSUSE Leap 15.5 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * Basesystem Module 15-SP4 (noarch) * python3-javapackages-6.2.0-150200.3.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * Basesystem Module 15-SP5 (noarch) * python3-javapackages-6.2.0-150200.3.12.1 * Development Tools Module 15-SP4 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * Development Tools Module 15-SP5 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Enterprise Storage 7.1 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * openSUSE Leap 15.4 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 ## References: * https://jira.suse.com/browse/PED-6376 * https://jira.suse.com/browse/PED-6377

1 0

SUSE-RU-2023:4618-1: moderate: Recommended update for orarun
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for orarun Announcement ID: SUSE-RU-2023:4618-1 Rating: moderate References: * bsc#1216566 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for orarun fixes the following issues: * Fixed 'grep: oracle: No such file or directory' error during oracle user login with csh/tcsh (/etc/profile.d/oracle.csh) (bsc#1216566) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4618=1 openSUSE-SLE-15.4-2023-4618=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4618=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4618=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4618=1 ## Package List: * openSUSE Leap 15.4 (s390x x86_64 i586) * orarun-2.1-150400.22.3.1 * openSUSE Leap 15.5 (s390x x86_64) * orarun-2.1-150400.22.3.1 * Server Applications Module 15-SP4 (s390x x86_64) * orarun-2.1-150400.22.3.1 * Server Applications Module 15-SP5 (s390x x86_64) * orarun-2.1-150400.22.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216566

1 0

SUSE-SU-2023:4619-1: important: Security update for sqlite3
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for sqlite3 Announcement ID: SUSE-SU-2023:4619-1 Rating: important References: * bsc#1210660 Cross-References: * CVE-2023-2137 CVSS scores: * CVE-2023-2137 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-2137 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for sqlite3 fixes the following issues: * CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4619=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4619=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4619=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4619=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4619=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4619=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4619=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4619=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE CaaS Platform 4.0 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2137.html * https://bugzilla.suse.com/show_bug.cgi?id=1210660

1 0

SUSE-SU-2023:4619-1: important: Security update for sqlite3
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for sqlite3 Announcement ID: SUSE-SU-2023:4619-1 Rating: important References: * bsc#1210660 Cross-References: * CVE-2023-2137 CVSS scores: * CVE-2023-2137 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-2137 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for sqlite3 fixes the following issues: * CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4619=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4619=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4619=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4619=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4619=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4619=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4619=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4619=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE CaaS Platform 4.0 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2137.html * https://bugzilla.suse.com/show_bug.cgi?id=1210660

1 0

SUSE-SU-2023:4619-1: important: Security update for sqlite3
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for sqlite3 Announcement ID: SUSE-SU-2023:4619-1 Rating: important References: * bsc#1210660 Cross-References: * CVE-2023-2137 CVSS scores: * CVE-2023-2137 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-2137 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for sqlite3 fixes the following issues: * CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4619=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4619=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4619=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4619=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4619=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4619=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4619=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4619=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE CaaS Platform 4.0 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2137.html * https://bugzilla.suse.com/show_bug.cgi?id=1210660

1 0

SUSE-RU-2023:4621-1: moderate: Recommended update for cloud-regionsrv
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for cloud-regionsrv Announcement ID: SUSE-RU-2023:4621-1 Rating: moderate References: * bsc#1191880 * bsc#1195924 * bsc#1195925 * bsc#1216917 Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has four fixes can now be installed. ## Description: This update for cloud-regionsrv fixes the following issue: * Implement IPv6 support independently from IPv4. (bsc#1216917) * IP address resolution from (client as fallback, or server or fail over) (bsc#1216917) * Fixed an issue replacing the cert on the client side when the connected server cert changes. (bsc#1191880) * With matching the certs with the underlying framework it is going to be prevented getting updates from the wrong cloud infrastructure which can occur by changing the provider. (bsc#1195924, bsc#1195925) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4621=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4621=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4621=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2023-4621=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-4621=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-4621=1 ## Package List: * openSUSE Leap 15.3 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * openSUSE Leap 15.4 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * openSUSE Leap 15.5 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * Public Cloud Module 15-SP3 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * Public Cloud Module 15-SP4 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * Public Cloud Module 15-SP5 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1191880 * https://bugzilla.suse.com/show_bug.cgi?id=1195924 * https://bugzilla.suse.com/show_bug.cgi?id=1195925 * https://bugzilla.suse.com/show_bug.cgi?id=1216917

1 0

openSUSE-SU-2023:0386-1: important: Security update for opera
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0386-1 Rating: important References: Cross-References: CVE-2023-5997 CVE-2023-6112 CVSS scores: CVE-2023-5997 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6112 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 105.0.4970.21 * DNA-112425 Choosing Workspace Icons doesn’t work as expected * DNA-112787 glow around tiles in Top Sites section in BABE in dark theme - The update to chromium 119.0.6045.159 fixes following issues: CVE-2023-5997, CVE-2023-6112 - Update to 105.0.4970.16 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111903 [Lin] [Component-based-scrollbar] Old design is displayed on Ubuntu 20.04 * DNA-112914 Visual glitch with HWA enabled in some random places * DNA-113137 [WinLin][Sidebar autohide] Sidebar panel is not connected with sidebar - Update to 105.0.4970.13 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111885 [Address bar] Hover effect on padlock icon is not rounded * DNA-112411 Active Tab in Tab Island in Dark Mode should have different colour * DNA-112431 Dragging tab quickly past last island on the right, causes tab to be dropped at the end of tab strip instead of at location of the cursor * DNA-112878 [Tab strip] Detached tab not restored after restarting browser * DNA-112900 Crash at opera::component_based:: ComponentTabDragController::StopViewDragging * DNA-112996 Translations for O105 * DNA-113213 Promote 105 to stable - Complete Opera 105 changelog at: https://blogs.opera.com/desktop/changelog-for-105/ - Update to 104.0.4944.54 * DNA-111938 Option 'Automatically hide sidebar' and Full screen makes Opera freeze * DNA-112241 Stuttering video on some systems with OOP SW H.264 decoding * DNA-112636 [Tab strip] Detach button on meeting tabs moves on hover and is replaced by close tab * DNA-112862 Crash at extensions::BookmarksPrivateAPI:: OnListenerAdded(extensions::EventListenerInfo const&) * DNA-112990 Crash when closing tab tooltip and opening Search tabs Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2023-386=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-105.0.4970.21-lp155.3.21.1 References: https://www.suse.com/security/cve/CVE-2023-5997.html https://www.suse.com/security/cve/CVE-2023-6112.html

1 0

openSUSE-SU-2023:0384-1: moderate: Security update for python-django-grappelli
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for python-django-grappelli ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0384-1 Rating: moderate References: #1216481 Cross-References: CVE-2021-46898 CVSS scores: CVE-2021-46898 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-django-grappelli fixes the following issues: Update to 2.14.4: - CVE-2021-46898: Fixed views/switch.py vulnerable to protocol-relative URL attacks (boo#1216481) - Fixed: Redirect with switch user. - Improved: Remove extra filtering in AutocompleteLookup. - Improved: Added import statement with URLs for quickstart docs. - Improved: Added additional blocks with inlines to allow override. - Fixed: Compatibility with Django 3.1. - Fixed: Docs about adding Grappelli documentation URLS. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-384=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): python3-django-grappelli-2.14.4-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-46898.html https://bugzilla.suse.com/1216481

1 0

openSUSE-SU-2023:0385-1: important: Security update for opera
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0385-1 Rating: important References: Cross-References: CVE-2023-5997 CVE-2023-6112 CVSS scores: CVE-2023-5997 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6112 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 105.0.4970.21 * DNA-112425 Choosing Workspace Icons doesn’t work as expected * DNA-112787 glow around tiles in Top Sites section in BABE in dark theme - The update to chromium 119.0.6045.159 fixes following issues: CVE-2023-5997, CVE-2023-6112 - Update to 105.0.4970.16 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111903 [Lin] [Component-based-scrollbar] Old design is displayed on Ubuntu 20.04 * DNA-112914 Visual glitch with HWA enabled in some random places * DNA-113137 [WinLin][Sidebar autohide] Sidebar panel is not connected with sidebar - Update to 105.0.4970.13 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111885 [Address bar] Hover effect on padlock icon is not rounded * DNA-112411 Active Tab in Tab Island in Dark Mode should have different colour * DNA-112431 Dragging tab quickly past last island on the right, causes tab to be dropped at the end of tab strip instead of at location of the cursor * DNA-112878 [Tab strip] Detached tab not restored after restarting browser * DNA-112900 Crash at opera::component_based:: ComponentTabDragController::StopViewDragging * DNA-112996 Translations for O105 * DNA-113213 Promote 105 to stable - Complete Opera 105 changelog at: https://blogs.opera.com/desktop/changelog-for-105/ - Update to 104.0.4944.54 * DNA-111938 Option 'Automatically hide sidebar' and Full screen makes Opera freeze * DNA-112241 Stuttering video on some systems with OOP SW H.264 decoding * DNA-112636 [Tab strip] Detach button on meeting tabs moves on hover and is replaced by close tab * DNA-112862 Crash at extensions::BookmarksPrivateAPI:: OnListenerAdded(extensions::EventListenerInfo const&) * DNA-112990 Crash when closing tab tooltip and opening Search tabs Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4:NonFree: zypper in -t patch openSUSE-2023-385=1 Package List: - openSUSE Leap 15.4:NonFree (x86_64): opera-105.0.4970.21-lp154.2.62.1 References: https://www.suse.com/security/cve/CVE-2023-5997.html https://www.suse.com/security/cve/CVE-2023-6112.html

1 0

SUSE-RU-2023:4620-1: moderate: Recommended update for libhugetlbfs
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for libhugetlbfs Announcement ID: SUSE-RU-2023:4620-1 Rating: moderate References: * bsc#1213639 * bsc#1216576 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for libhugetlbfs fixes the following issue: * Add patch for upstream issue (bsc#1216576, bsc#1213639) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4620=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4620=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4620=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4620=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4620=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4620=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4620=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4620=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4620=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4620=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4620=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4620=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4620=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4620=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4620=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4620=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4620=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4620=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4620=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4620=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4620=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4620=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-tests-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-tests-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * libhugetlbfs-devel-2.20-150000.3.8.1 * openSUSE Leap 15.4 (x86_64) * libhugetlbfs-32bit-2.20-150000.3.8.1 * libhugetlbfs-32bit-debuginfo-2.20-150000.3.8.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-tests-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-tests-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * libhugetlbfs-devel-2.20-150000.3.8.1 * openSUSE Leap 15.5 (x86_64) * libhugetlbfs-32bit-2.20-150000.3.8.1 * libhugetlbfs-32bit-debuginfo-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE CaaS Platform 4.0 (x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213639 * https://bugzilla.suse.com/show_bug.cgi?id=1216576

1 0

SUSE-RU-2023:4615-1: moderate: Recommended update for icu
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for icu Announcement ID: SUSE-RU-2023:4615-1 Rating: moderate References: * bsc#1217472 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update of icu fixes the following issue: * missing 32bit libraries in SLES 15 SP3 were added, required by xerces-c 32bit. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4615=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4615=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4615=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4615=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4615=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4615=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4615=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4615=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4615=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4615=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4615=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4615=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4615=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4615=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4615=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4615=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4615=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4615=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4615=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4615=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4615=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4615=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4615=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-doc-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * openSUSE Leap 15.4 (x86_64) * libicu-devel-32bit-65.1-150200.4.10.1 * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * openSUSE Leap 15.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-doc-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * openSUSE Leap 15.5 (x86_64) * libicu-devel-32bit-65.1-150200.4.10.1 * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * openSUSE Leap 15.5 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * Basesystem Module 15-SP4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * Basesystem Module 15-SP5 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Enterprise Storage 7.1 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Enterprise Storage 7.1 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * openSUSE Leap Micro 5.3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * openSUSE Leap Micro 5.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217472

1 0

openSUSE-SU-2023:0383-1: important: Security update for optipng
by opensuse-security＠opensuse.org 29 Nov '23

29 Nov '23

openSUSE Security Update: Security update for optipng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0383-1 Rating: important References: #1215937 Cross-References: CVE-2023-43907 CVSS scores: CVE-2023-43907 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for optipng fixes the following issues: optipng was updated to 0.7.8: * Upgraded libpng to version 1.6.40. * Upgraded zlib to version 1.3-optipng. * Upgraded cexcept to version 2.0.2-optipng. * Fixed a global-buffer-overflow vulnerability in the GIF reader (boo#1215937 CVE-2023-43907). * Fixed a stack-print-after-scope defect in the error handler. * Fixed an assertion failure in the image reduction module. * Fixed the command-line wildargs expansion in the Windows port. * Raised the minimum required libpng version from 1.2.9 to 1.6.35. * Raised the minimum required zlib version from 1.2.1 to 1.2.8. * Refactored the structured exception handling. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-383=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): optipng-0.7.8-bp155.5.5.1 optipng-debuginfo-0.7.8-bp155.5.5.1 optipng-debugsource-0.7.8-bp155.5.5.1 References: https://www.suse.com/security/cve/CVE-2023-43907.html https://bugzilla.suse.com/1215937

1 0

SUSE-RU-2023:4610-1: moderate: Recommended update for google-guest-configs
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for google-guest-configs Announcement ID: SUSE-RU-2023:4610-1 Rating: moderate References: * bsc#1212418 * bsc#1212759 * bsc#1214546 * bsc#1214572 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has four fixes can now be installed. ## Description: This update for google-guest-configs fixes the following issues: * Update to version 20230808.00 (bsc#1214546, bsc#1214572, bsc#1212418, bsc#1212759) * Replace xxd with dd for google_nvme_id * Setup irq binding for a3 8g vm * dracut: Add a new dracut module for gcp udev rules * src/lib/udev: only create symlinks for GCP devices * Set hostname: consider fully qualified static hostname * Support multiple local SSD controllers * Update OWNERS file * DHCP hostname: don't reset hostname if the hostname hasn't changed ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4610=1 openSUSE-SLE-15.4-2023-4610=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4610=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-4610=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-4610=1 ## Package List: * openSUSE Leap 15.4 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 * openSUSE Leap 15.5 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 * Public Cloud Module 15-SP4 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 * Public Cloud Module 15-SP5 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212418 * https://bugzilla.suse.com/show_bug.cgi?id=1212759 * https://bugzilla.suse.com/show_bug.cgi?id=1214546 * https://bugzilla.suse.com/show_bug.cgi?id=1214572

1 0

SUSE-SU-2023:4612-1: moderate: Security update for java-1_8_0-openj9
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Security update for java-1_8_0-openj9 Announcement ID: SUSE-SU-2023:4612-1 Rating: moderate References: * bsc#1216374 * bsc#1216379 * bsc#1217214 Cross-References: * CVE-2023-22067 * CVE-2023-22081 * CVE-2023-5676 CVSS scores: * CVE-2023-22067 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22067 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22081 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-22081 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-5676 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2023-5676 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual machine * CVE-2023-22067: Fixed an IOR deserialization issue in CORBA (bsc#1216379). * CVE-2023-22081: Fixed a certificate path validation issue during client authentication (bsc#1216374). * CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4612=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4612=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4612=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openj9-src-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-accessibility-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debugsource-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-1.8.0.392-150200.3.39.1 * openSUSE Leap 15.4 (noarch) * java-1_8_0-openj9-javadoc-1.8.0.392-150200.3.39.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openj9-src-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-accessibility-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debugsource-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-1.8.0.392-150200.3.39.1 * openSUSE Leap 15.5 (noarch) * java-1_8_0-openj9-javadoc-1.8.0.392-150200.3.39.1 * SUSE Package Hub 15 15-SP5 (ppc64le s390x) * java-1_8_0-openj9-src-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-accessibility-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debugsource-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-1.8.0.392-150200.3.39.1 ## References: * https://www.suse.com/security/cve/CVE-2023-22067.html * https://www.suse.com/security/cve/CVE-2023-22081.html * https://www.suse.com/security/cve/CVE-2023-5676.html * https://bugzilla.suse.com/show_bug.cgi?id=1216374 * https://bugzilla.suse.com/show_bug.cgi?id=1216379 * https://bugzilla.suse.com/show_bug.cgi?id=1217214

1 0

SUSE-RU-2023:4606-1: important: Recommended update for python-apache-libcloud
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for python-apache-libcloud Announcement ID: SUSE-RU-2023:4606-1 Rating: important References: * bsc#1214808 Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for python-apache-libcloud fixes the following issues: * list_nodes() function in the Azure ARM driver does not handle pagination and does not return all the VMs for a subscription (bsc#1214808) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4606=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4606=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4606=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4606=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4606=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4606=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4606=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4606=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4606=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4606=1 ## Package List: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Enterprise Storage 7.1 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * openSUSE Leap 15.3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * openSUSE Leap 15.4 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * openSUSE Leap 15.5 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * Server Applications Module 15-SP4 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * Server Applications Module 15-SP5 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214808

1 0

SUSE-SU-2023:4607-1: moderate: Security update for python3-Twisted
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Security update for python3-Twisted Announcement ID: SUSE-SU-2023:4607-1 Rating: moderate References: * bsc#1216588 Cross-References: * CVE-2023-46137 CVSS scores: * CVE-2023-46137 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-46137 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python3-Twisted fixes the following issues: * CVE-2023-46137: Fixed issue inside serializing pipelined HTTP requests. (bsc#1216588) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4607=1 openSUSE-SLE-15.4-2023-4607=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4607=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4607=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4607=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python3-Twisted-22.2.0-150400.15.1 * python-Twisted-doc-22.2.0-150400.15.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-Twisted-22.2.0-150400.15.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-Twisted-22.2.0-150400.15.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-Twisted-22.2.0-150400.15.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46137.html * https://bugzilla.suse.com/show_bug.cgi?id=1216588

1 0

SUSE-SU-2023:4608-1: moderate: Security update for python-Twisted
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Security update for python-Twisted Announcement ID: SUSE-SU-2023:4608-1 Rating: moderate References: * bsc#1216588 Cross-References: * CVE-2023-46137 CVSS scores: * CVE-2023-46137 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-46137 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP4 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-Twisted fixes the following issues: * CVE-2023-46137: Fixed issue inside serializing pipelined HTTP requests. (bsc#1216588) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4608=1 openSUSE-SLE-15.4-2023-4608=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4608=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-4608=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2023-4608=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 * openSUSE Leap 15.5 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 * Python 3 Module 15-SP4 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 * Python 3 Module 15-SP5 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46137.html * https://bugzilla.suse.com/show_bug.cgi?id=1216588

1 0

SUSE-RU-2023:4601-1: moderate: Recommended update for suseconnect-ng
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for suseconnect-ng Announcement ID: SUSE-RU-2023:4601-1 Rating: moderate References: * bsc#1170267 * bsc#1212799 * bsc#1214781 * jsc#PED-3179 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has three fixes can now be installed. ## Description: This update for suseconnect-ng fixes the following issues: * Update to version 1.4.0~git0.b0f7c25bfdfa * Added EULA display for addons (bsc#1170267) * Fix zypper argument for auto-agreeing licenses (bsc#1214781) * Enable building on SLE12 SP5 (jsc#PED-3179) * Fixed `provides` to work with yast2-registration on SLE15 SP4 (bsc#1212799) * Improve error message if product set more than once ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4601=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4601=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4601=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsuseconnect-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * libsuseconnect-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ruby-bindings-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libsuseconnect-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * libsuseconnect-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ruby-bindings-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1170267 * https://bugzilla.suse.com/show_bug.cgi?id=1212799 * https://bugzilla.suse.com/show_bug.cgi?id=1214781 * https://jira.suse.com/browse/PED-3179

1 0

SUSE-RU-2023:4602-1: moderate: Recommended update for suseconnect-ng
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for suseconnect-ng Announcement ID: SUSE-RU-2023:4602-1 Rating: moderate References: * bsc#1170267 * bsc#1212799 * bsc#1214781 * jsc#PED-3179 Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has three fixes can now be installed. ## Description: This update for suseconnect-ng fixes the following issues: * Update to version 1.4.0~git0.b0f7c25bfdfa * Added EULA display for addons (bsc#1170267) * Fix zypper argument for auto-agreeing licenses (bsc#1214781) * Enable building on SLE12 SP5 (jsc#PED-3179) * Fixed `provides` to work with yast2-registration on SLE15 SP4 (bsc#1212799) * Improve error message if product set more than once ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4602=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4602=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4602=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4602=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4602=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4602=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4602=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4602=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * libsuseconnect-debuginfo-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * libsuseconnect-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * libsuseconnect-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1170267 * https://bugzilla.suse.com/show_bug.cgi?id=1212799 * https://bugzilla.suse.com/show_bug.cgi?id=1214781 * https://jira.suse.com/browse/PED-3179

1 0

SUSE-RU-2023:4604-1: moderate: Recommended update for selinux-policy
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for selinux-policy Announcement ID: SUSE-RU-2023:4604-1 Rating: moderate References: * bsc#1215405 Affected Products: * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that has one fix can now be installed. ## Description: This update for selinux-policy fixes the following issues: * Extend module list for targeted policy * timedatex * rrdcached * stratisd * ica (bsc#1215405) * fedoratp * stalld * rhcd * wireguard ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4604=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4604=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4604=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * selinux-policy-targeted-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-devel-20230511+git5.54d165ea-150400.4.18.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * selinux-policy-targeted-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-devel-20230511+git5.54d165ea-150400.4.18.1 * openSUSE Leap Micro 5.4 (noarch) * selinux-policy-targeted-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-devel-20230511+git5.54d165ea-150400.4.18.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215405

1 0

SUSE-RU-2023:4605-1: moderate: Recommended update for selinux-policy
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for selinux-policy Announcement ID: SUSE-RU-2023:4605-1 Rating: moderate References: Affected Products: * openSUSE Leap Micro 5.3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro for Rancher 5.3 An update that can now be installed. ## Description: This update for selinux-policy fixes the following issues: * Extend module list for targeted policy * timedatex * rrdcached * stratisd ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4605=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4605=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4605=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * selinux-policy-targeted-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-devel-20210716+git59.bb8b3de0-150400.5.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * selinux-policy-targeted-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-devel-20210716+git59.bb8b3de0-150400.5.9.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * selinux-policy-targeted-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-devel-20210716+git59.bb8b3de0-150400.5.9.1

1 0

SUSE-RU-2023:4600-1: low: Recommended update for desktop-file-utils
by maintenance＠opensuse.org 28 Nov '23

28 Nov '23

# Recommended update for desktop-file-utils Announcement ID: SUSE-RU-2023:4600-1 Rating: low References: * bsc#1216357 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for desktop-file-utils fixes the following issues: * Add support for the Desktop entry specification version 1.5 (bsc#1216357) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4600=1 openSUSE-SLE-15.4-2023-4600=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4600=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4600=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4600=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * desktop-file-utils-debugsource-0.26-150400.3.3.1 * desktop-file-utils-debuginfo-0.26-150400.3.3.1 * desktop-file-utils-0.26-150400.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * desktop-file-utils-debugsource-0.26-150400.3.3.1 * desktop-file-utils-debuginfo-0.26-150400.3.3.1 * desktop-file-utils-0.26-150400.3.3.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * desktop-file-utils-debugsource-0.26-150400.3.3.1 * desktop-file-utils-debuginfo-0.26-150400.3.3.1 * desktop-file-utils-0.26-150400.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * desktop-file-utils-debugsource-0.26-150400.3.3.1 * desktop-file-utils-debuginfo-0.26-150400.3.3.1 * desktop-file-utils-0.26-150400.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216357

1 0

SUSE-SU-2023:4594-1: important: Security update for gstreamer-plugins-bad
by maintenance＠opensuse.org 28 Nov '23

28 Nov '23

# Security update for gstreamer-plugins-bad Announcement ID: SUSE-SU-2023:4594-1 Rating: important References: * bsc#1215793 * bsc#1215796 Cross-References: * CVE-2023-40474 * CVE-2023-40476 CVSS scores: * CVE-2023-40474 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-40476 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for gstreamer-plugins-bad fixes the following issues: * CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796). * CVE-2023-40476: Fixed possible overflow using max_sub_layers_minus1 (bsc#1215793). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4594=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4594=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4594=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4594=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4594=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4594=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-doc-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * openSUSE Leap 15.3 (x86_64) * libgstinsertbin-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-32bit-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-32bit-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-32bit-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-32bit-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * openSUSE Leap 15.3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 * openSUSE Leap 15.3 (aarch64_ilp32) * libgstbadaudio-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-64bit-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-64bit-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-64bit-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-64bit-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-64bit-1.16.3-150300.9.12.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * SUSE Enterprise Storage 7.1 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 ## References: * https://www.suse.com/security/cve/CVE-2023-40474.html * https://www.suse.com/security/cve/CVE-2023-40476.html * https://bugzilla.suse.com/show_bug.cgi?id=1215793 * https://bugzilla.suse.com/show_bug.cgi?id=1215796

1 0