November 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2023:4579-1: important: Security update for slurm_22_05
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for slurm_22_05 Announcement ID: SUSE-SU-2023:4579-1 Rating: important References: * bsc#1208810 * bsc#1216207 * bsc#1216869 Cross-References: * CVE-2023-41914 CVSS scores: * CVE-2023-41914 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-41914 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * HPC Module 15-SP4 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 An update that solves one vulnerability and has two security fixes can now be installed. ## Description: This update for slurm_22_05 fixes the following issues: * CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents (bsc#1216207). Bug fixes: * Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869). * Add missing Provides:, Conflicts: and Obsoletes: to slurm-cray, slurm-hdf5 and slurm-testsuite to avoid package conflicts (bsc#1208810). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4579=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4579=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4579=1 * HPC Module 15-SP4 zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2023-4579=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4579=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4579=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-openlava-22.05.10-150300.7.6.1 * slurm_22_05-cray-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * slurm_22_05-sjstat-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-seff-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-testsuite-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-cray-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * openSUSE Leap 15.3 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-openlava-22.05.10-150300.7.6.1 * slurm_22_05-cray-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * slurm_22_05-sjstat-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-seff-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-testsuite-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-cray-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * openSUSE Leap 15.4 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-openlava-22.05.10-150300.7.6.1 * slurm_22_05-cray-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * slurm_22_05-sjstat-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-seff-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-testsuite-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-cray-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * openSUSE Leap 15.5 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 * HPC Module 15-SP4 (aarch64 x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-cray-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-cray-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * HPC Module 15-SP4 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41914.html * https://bugzilla.suse.com/show_bug.cgi?id=1208810 * https://bugzilla.suse.com/show_bug.cgi?id=1216207 * https://bugzilla.suse.com/show_bug.cgi?id=1216869

1 0

SUSE-FU-2023:4583-1: moderate: Feature update for python-psutil
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Feature update for python-psutil Announcement ID: SUSE-FU-2023:4583-1 Rating: moderate References: * bsc#1111622 * bsc#1170175 * bsc#1176785 * bsc#1184753 * bsc#1199282 * jsc#ECO-3105 * jsc#PED-7192 * jsc#PM-2352 * jsc#PM-3243 * jsc#SLE-24629 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains five features and has five fixes can now be installed. ## Description: This update for python-psutil, python-requests fixes the following issues: * update python-psutil to 5.9.1 (bsc#1199282, bsc#1184753, jsc#SLE-24629, jsc#PM-3243, gh#giampaolo/psutil#2043) * Fix tests: setuptools changed the builddir library path and does not find the module from it. Use the installed platlib instead and exclude psutil.tests only later. * remove the dependency on net-tools, since it conflicts with busybox- hostnmame which is default on MicroOS * Update python-requests to 2.25.1 (bsc#1176785, bsc#1170175, jsc#ECO-3105, jsc#PM-2352, jsc#PED-7192) * Fixed bug with unintended Authorization header stripping for redirects using default ports (bsc#1111622). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4583=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4583=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4583=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4583=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4583=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4583=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4583=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4583=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4583=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4583=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4583=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4583=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4583=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4583=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4583=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4583=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4583=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4583=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4583=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4583=1 ## Package List: * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Enterprise Storage 7.1 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * python3-requests-2.25.1-150300.3.6.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python3-psutil-5.9.1-150300.3.6.1 * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python2-psutil-5.9.1-150300.3.6.1 * python2-psutil-debuginfo-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * openSUSE Leap 15.3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * python2-requests-2.25.1-150300.3.6.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * openSUSE Leap Micro 5.3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * openSUSE Leap Micro 5.4 (noarch) * python3-requests-2.25.1-150300.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * openSUSE Leap 15.4 (noarch) * python3-requests-2.25.1-150300.3.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * openSUSE Leap 15.5 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-requests-2.25.1-150300.3.6.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * Basesystem Module 15-SP4 (noarch) * python3-requests-2.25.1-150300.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * Basesystem Module 15-SP5 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * python3-requests-2.25.1-150300.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1111622 * https://bugzilla.suse.com/show_bug.cgi?id=1170175 * https://bugzilla.suse.com/show_bug.cgi?id=1176785 * https://bugzilla.suse.com/show_bug.cgi?id=1184753 * https://bugzilla.suse.com/show_bug.cgi?id=1199282 * https://jira.suse.com/browse/ECO-3105 * https://jira.suse.com/browse/PED-7192 * https://jira.suse.com/browse/PM-2352 * https://jira.suse.com/browse/PM-3243 * https://jira.suse.com/browse/SLE-24629

1 0

SUSE-RU-2023:4568-1: moderate: Recommended update for gnu-compilers-hpc
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Recommended update for gnu-compilers-hpc Announcement ID: SUSE-RU-2023:4568-1 Rating: moderate References: * bsc#1216999 Affected Products: * HPC Module 15-SP4 * HPC Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update for gnu-compilers-hpc fixes the following issues: * Implemented Environment Module Files for the GNU Compiler Toolchain version 13. To use the gcc/g++/gfortran version 13 thru HPC environment modules `gnu13-compilers-hpc` (runtime) and `gnu13-compilers-hpc-devel` (build time, including compilers) are now available. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4568=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4568=1 * HPC Module 15-SP4 zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2023-4568=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2023-4568=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4568=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4568=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4568=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4568=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4568=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4568=1 ## Package List: * openSUSE Leap 15.4 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * openSUSE Leap 15.5 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * HPC Module 15-SP4 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * HPC Module 15-SP5 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Package Hub 15 15-SP4 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Package Hub 15 15-SP5 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216999

1 0

SUSE-RU-2023:4569-1: moderate: Recommended update for spack
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Recommended update for spack Announcement ID: SUSE-RU-2023:4569-1 Rating: moderate References: * bsc#1216941 Affected Products: * HPC Module 15-SP4 * HPC Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 An update that has one fix can now be installed. ## Description: This update for spack fixes the following issues: * Updated to version 0.20.3 with the following changes (bsc#1216941): * Bug fixes: * Fix a bug where `spack mirror set-url` would drop configured connection info. * Fix a minor issue with package hash computation for Python 3.12. * Improve escaping in Tcl module files. * Make repo cache work on repositouries with zero mtime. * Ignore errors for newer, incompatible buildcache version. * Print an error when git is required, but missing. * Ensure missing build dependencies get installed when using `spack install --overwrite`. * Fix an issue where Spack freezes when the build process unexpectedly exits. * Fix a bug where installation failures cause an unrelated `NameError` to be thrown. * Fix an issue where Spack package versions would be incorrectly derived from git tags. * Fix a bug triggered when file locking fails internally. * Prevent `spack external find` to error out when a directory cannot be accessed. * Fix multiple performance regressions in environments. * Add more ignored modules to `pyproject.toml` for `mypy`. * Features: * Spack now supports Python 3.12. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4569=1 openSUSE-SLE-15.4-2023-4569=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4569=1 * HPC Module 15-SP4 zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2023-4569=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2023-4569=1 ## Package List: * openSUSE Leap 15.4 (noarch) * spack-recipes-0.20.3-150400.9.1 * spack-0.20.3-150400.9.1 * spack-info-0.20.3-150400.9.1 * spack-man-0.20.3-150400.9.1 * openSUSE Leap 15.5 (noarch) * spack-recipes-0.20.3-150400.9.1 * spack-info-0.20.3-150400.9.1 * spack-0.20.3-150400.9.1 * spack-man-0.20.3-150400.9.1 * HPC Module 15-SP4 (noarch) * spack-recipes-0.20.3-150400.9.1 * spack-info-0.20.3-150400.9.1 * spack-0.20.3-150400.9.1 * spack-man-0.20.3-150400.9.1 * HPC Module 15-SP5 (noarch) * spack-recipes-0.20.3-150400.9.1 * spack-info-0.20.3-150400.9.1 * spack-0.20.3-150400.9.1 * spack-man-0.20.3-150400.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216941

1 0

SUSE-RU-2023:4570-1: moderate: Recommended update for spack
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Recommended update for spack Announcement ID: SUSE-RU-2023:4570-1 Rating: moderate References: * bsc#1216941 Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 An update that has one fix can now be installed. ## Description: This update for spack fixes the following issues: * Updated to version 0.20.3 with the following changes (bsc#1216941): * Bug fixes: * Fix a bug where `spack mirror set-url` would drop configured connection info. * Fix a minor issue with package hash computation for Python 3.12. * Improve escaping in Tcl module files. * Make repo cache work on repositouries with zero mtime. * Ignore errors for newer, incompatible buildcache version. * Print an error when git is required, but missing. * Ensure missing build dependencies get installed when using `spack install --overwrite`. * Fix an issue where Spack freezes when the build process unexpectedly exits. * Fix a bug where installation failures cause an unrelated `NameError` to be thrown. * Fix an issue where Spack package versions would be incorrectly derived from git tags. * Fix a bug triggered when file locking fails internally. * Prevent `spack external find` to error out when a directory cannot be accessed. * Fix multiple performance regressions in environments. * Add more ignored modules to `pyproject.toml` for `mypy`. * Features: * Spack now supports Python 3.12. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4570=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4570=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4570=1 ## Package List: * openSUSE Leap 15.3 (noarch) * spack-recipes-0.20.3-150300.9.1 * spack-0.20.3-150300.9.1 * spack-info-0.20.3-150300.9.1 * spack-man-0.20.3-150300.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * spack-recipes-0.20.3-150300.9.1 * spack-0.20.3-150300.9.1 * spack-info-0.20.3-150300.9.1 * spack-man-0.20.3-150300.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * spack-recipes-0.20.3-150300.9.1 * spack-0.20.3-150300.9.1 * spack-info-0.20.3-150300.9.1 * spack-man-0.20.3-150300.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216941

1 0

openSUSE-RU-2023:0378-1: moderate: Recommended update for tor
by maintenance＠opensuse.org 26 Nov '23

26 Nov '23

openSUSE Recommended Update: Recommended update for tor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0378-1 Rating: moderate References: Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tor fixes the following issues: tor 0.3.5.18 - see /usr/share/doc/packages/tor/ChangeLog for details tor 0.4.8.9: * (onion service, TROVE-2023-006): - Fix a possible hard assert on a NULL pointer * (guard usage): - When Tor excluded a guard due to temporary circuit restrictions, it considered *additional* primary guards for potential usage by that circuit. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-378=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-378=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2023-378=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): tor-0.4.8.9-bp155.2.6.1 tor-debuginfo-0.4.8.9-bp155.2.6.1 tor-debugsource-0.4.8.9-bp155.2.6.1 - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): tor-0.4.8.9-bp154.2.18.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tor-0.3.5.18-28.1 References:

1 0

openSUSE-SU-2023:0379-1: important: Security update for gstreamer-plugins-bad
by opensuse-security＠opensuse.org 26 Nov '23

26 Nov '23

openSUSE Security Update: Security update for gstreamer-plugins-bad ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0379-1 Rating: important References: #1213126 Cross-References: CVE-2023-37329 CVSS scores: CVE-2023-37329 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 openSUSE Leap 15.5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed GStreamer SRT File Parsing Heap-based Buffer Overflow (bsc#1213126). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-379=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-2023-379=1 Package List: - openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64): gstreamer-plugins-bad-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-debugsource-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-devel-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-debuginfo-1.22.0-lp155.3.4.1 gstreamer-transcoder-1.22.0-lp155.3.4.1 gstreamer-transcoder-debuginfo-1.22.0-lp155.3.4.1 gstreamer-transcoder-devel-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstplay-1_0-0-1.22.0-lp155.3.4.1 libgstplay-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgsttranscoder-1_0-0-1.22.0-lp155.3.4.1 libgsttranscoder-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstva-1_0-0-1.22.0-lp155.3.4.1 libgstva-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-debuginfo-1.22.0-lp155.3.4.1 typelib-1_0-CudaGst-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstBadAudio-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstCodecs-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstCuda-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstInsertBin-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstMpegts-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstPlay-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstPlayer-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstTranscoder-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstVa-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstVulkan-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstVulkanWayland-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstVulkanXCB-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstWebRTC-1_0-1.22.0-lp155.3.4.1 - openSUSE Leap 15.5 (aarch64_ilp32): gstreamer-plugins-bad-64bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-64bit-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-64bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-64bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstplay-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstplay-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-64bit-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstva-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstva-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 - openSUSE Leap 15.5 (noarch): gstreamer-plugins-bad-lang-1.22.0-lp155.3.4.1 - openSUSE Leap 15.5 (x86_64): gstreamer-plugins-bad-32bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-32bit-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-32bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-32bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstplay-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstplay-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-32bit-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstva-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstva-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 - openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64): gstreamer-plugins-bad-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-debugsource-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-devel-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-debuginfo-1.20.1-lp154.2.4.1 gstreamer-transcoder-1.20.1-lp154.2.4.1 gstreamer-transcoder-debuginfo-1.20.1-lp154.2.4.1 gstreamer-transcoder-devel-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstplay-1_0-0-1.20.1-lp154.2.4.1 libgstplay-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgsttranscoder-1_0-0-1.20.1-lp154.2.4.1 libgsttranscoder-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstva-1_0-0-1.20.1-lp154.2.4.1 libgstva-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-debuginfo-1.20.1-lp154.2.4.1 typelib-1_0-GstBadAudio-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstCodecs-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstInsertBin-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstMpegts-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstPlay-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstPlayer-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstTranscoder-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstVulkan-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstVulkanWayland-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstVulkanXCB-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstWebRTC-1_0-1.20.1-lp154.2.4.1 - openSUSE Leap 15.4 (aarch64_ilp32): gstreamer-plugins-bad-64bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-64bit-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-64bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-64bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstplay-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstplay-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-64bit-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstva-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstva-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 - openSUSE Leap 15.4 (x86_64): gstreamer-plugins-bad-32bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-32bit-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-32bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-32bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstplay-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstplay-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-32bit-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstva-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstva-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 - openSUSE Leap 15.4 (noarch): gstreamer-plugins-bad-lang-1.20.1-lp154.2.4.1 References: https://www.suse.com/security/cve/CVE-2023-37329.html https://bugzilla.suse.com/1213126

1 0

openSUSE-RU-2023:0380-1: moderate: Recommended update for thunar
by maintenance＠opensuse.org 26 Nov '23

26 Nov '23

openSUSE Recommended Update: Recommended update for thunar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0380-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for thunar fixes the following issues: Update to 4.18.7: * Fix property dialog file count (#1173) * Don't store GFile pointer in GTK pointer * Don't reload the directory on copy or cut (#1060) * Add folder to history only for new tab (Issue #1072) * Fix job operation crash on error * Limit number of templates to prevent lag (#472) * Prevent crash on multi-file-activate (#1121) * Remove unneeded menu separator * Switch zoom shortcuts * Prevent glib-critical - followup of (#912) * Keep location selector state on focus lost (#912) * Prevent minor memory leak (#573) * Translation Updates Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-380=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libthunarx-3-0-4.18.7-bp155.2.6.1 thunar-4.18.7-bp155.2.6.1 thunar-devel-4.18.7-bp155.2.6.1 typelib-1_0-Thunarx-3_0-4.18.7-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): thunar-lang-4.18.7-bp155.2.6.1 References:

1 0

openSUSE-RU-2023:0378-1: moderate: Recommended update for tor
by maintenance＠opensuse.org 26 Nov '23

26 Nov '23

openSUSE Recommended Update: Recommended update for tor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0378-1 Rating: moderate References: Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tor fixes the following issues: tor 0.3.5.18 - see /usr/share/doc/packages/tor/ChangeLog for details tor 0.4.8.9: * (onion service, TROVE-2023-006): - Fix a possible hard assert on a NULL pointer * (guard usage): - When Tor excluded a guard due to temporary circuit restrictions, it considered *additional* primary guards for potential usage by that circuit. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2023-378=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tor-0.3.5.18-28.1 References:

1 0

openSUSE-RU-2023:0381-1: moderate: Recommended update for xfce4-notifyd
by maintenance＠opensuse.org 26 Nov '23

26 Nov '23

openSUSE Recommended Update: Recommended update for xfce4-notifyd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0381-1 Rating: moderate References: #1216470 #1217193 Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Leap 15.5 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for xfce4-notifyd fixes the following issues: - fixed branding dependency problem. (boo#1217193 boo#1216470) Update to 0.9.3: * Make the DELETE with LIMIT/OFFSET query work * Make the text in the 'Clear log' dialog less crowded * Set a transient parent on the 'Clear log' dialog if possible * 'Clear log' dialog's initial focus should be on the 'Cancel' button * Drop required xdt-autogen version to 4.18.1 * Simplify markup sanitizing code a little * Re-escape text in GMarkupParser text handler * Sanitize instead of validating body text markup * Translation Updates Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-381=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-381=1 Package List: - openSUSE Leap 15.5 (noarch): libgarcon-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 libxfce4ui-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 thunar-volman-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfce4-notifyd-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfce4-panel-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfce4-power-manager-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfce4-session-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfce4-settings-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfdesktop-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfwm4-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): xfce4-notifyd-0.9.3-bp155.2.13.1 xfce4-notifyd-debuginfo-0.9.3-bp155.2.13.1 xfce4-notifyd-debugsource-0.9.3-bp155.2.13.1 - openSUSE Backports SLE-15-SP5 (noarch): xfce4-notifyd-branding-upstream-0.9.3-bp155.2.13.1 xfce4-notifyd-lang-0.9.3-bp155.2.13.1 References: https://bugzilla.suse.com/1216470 https://bugzilla.suse.com/1217193

1 0

SUSE-RU-2023:4542-1: low: Recommended update for perl-Test-Warnings
by maintenance＠opensuse.org 25 Nov '23

25 Nov '23

# Recommended update for perl-Test-Warnings Announcement ID: SUSE-RU-2023:4542-1 Rating: low References: * bsc#1215584 Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for perl-Test-Warnings fixes the following issues: * updated to 0.032 (see https://metacpan.org/dist/Test-Warnings/changes, bsc#1215584) 0.032 2023-09-30 23:36:50Z * new config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for temporarily turning failures into reports 0.031 2021-07-13 22:13:48Z * remove unneeded develop prereqs that caused metacpan to unduly raise the river position of some dependent modules ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4542=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4542=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4542=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4542=1 ## Package List: * openSUSE Leap 15.4 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 * openSUSE Leap 15.5 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 * Development Tools Module 15-SP4 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 * Development Tools Module 15-SP5 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215584

1 0

openSUSE-RU-2023:0375-1: important: Recommended update for rspamd
by maintenance＠opensuse.org 25 Nov '23

25 Nov '23

openSUSE Recommended Update: Recommended update for rspamd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0375-1 Rating: important References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rspamd fixes the following issues: - Update to 3.7.4 - [Enhancement] Add composite rule for suspicious URLs in suspicious messages - [Fix] Another try to fix setproctitle - [Fix] Do not cleanup hyperscan files unless new ones are loaded - [Fix] Fix various issues with canonicalisation of the paths - [Fix] Properly set config field when creating tasks from Lua - [Fix] Set loaded variable explicitly - [Fix] known_senders: fix config handling - [Fix] rbl: fix exclude_local - [Minor] Add missing include for gcc 14 - [Minor] Add rule for messages missing both X-Mailer and User-Agent header - [Minor] Bundle fasttext as linux distributives are just useless - [Minor] Enable fasttext on RPM based linux - [Minor] Forgot it in one more place - [Minor] Improve FREEMAIL_AFF capture rates - [Minor] Limit fasttext to amd64 only - [Minor] Properly search for fasttext include - [Minor] Treat *.zpaq attachments as archives and harmful - [Minor] force_actions: set a group for symbols - [WebUI] Update map editor - Update to 3.7.3 - [Fix] Emergency fix for the hyperscan path error - Update to 3.7.2 - [Minor] Make compiling with backward-cpp optional by @a16bitsysop in #4639 - [Rules] Blank spam detection by @fatalbanana in #4644 - [Minor] Treat *.cue attachments as harmful by @twesterhever in #4642 - Dzjaivnt patch 1 by @dzjaivnt in #4640 - [WebUI] Add control to invert action filter by @moisseev in #4645 - [Fix] DMARC reporting: fix reporting for subdomains by @fatalbanana in #4587 - [Minor] RSPAMD_SHAREDIR is called SHAREDIR in configuration by @fatalbanana in #4649 - [WebUI] Fix history table vanishing by @moisseev in #4661 - Tighten rspamd's attachment policy by @twesterhever in #4656 - [Minor] rbl: support use of different matchers for return codes by @fatalbanana in #4657 - Update to 3.7.1 - [Fix] CMakeLists.txt remove whitespace added by linter as it makes te… by @a16bitsysop in #4560 - fix: redis schema parsing by @Conni2461 in #4562 - [Minor] Update JS libraries by @moisseev in #4567 - [WebUI] Restore contrasting foreground color by @moisseev in #4569 - Add new exporter to push JSON to a raw TCP socket by @lingfish in #4572 - [WebUI] Tweak bootstrap colors for accessibility by @moisseev in #4577 - Rewrite configuration utils in C++ by @vstakhov in #4573 - [Minor] Slightly adjust DNSBL scores by @twesterhever in #4557 - Added support for Redis 6 ACL (username/password) by @laodc in #4578 - [Feature] Support feed exclusions in phishing module by @dragoangel in #4575 - [Minor] Remove unwanted debug logging by @fatalbanana in #4585 - Fix regression in invokation of rspamd-test by @ln5 in #4588 - [Fix] Correct format pattern for RE tree tempfile name by @ln5 in #4590 - [Minor] Remove unused variables by @ln5 in #4591 - [Fix] Correct format string for unw_word_t by @ln5 in #4592 - [Fix] rbl: really fix dependency registration when symbols_prefixes i… by @fatalbanana in #4594 - [Fix] rspamadm mime: arguments beginning with letter t by @fatalbanana in #4597 - [Minor] API docs: lua_ip: fix function name by @fatalbanana in #4598 - [Feature] rbl: support checking numeric URLs in isolation by @fatalbanana in #4596 - [Feature] Add ICAP Content-Type and Filename from TODO List by @lbahtarliev in #4595 - [Minor] Try fix CI by @fatalbanana in #4603 - [Fix] MISSING_MIMEOLE: avoid matching messages from Android GMail app (#4561) by @fatalbanana in #4600 - [WebUI] Set locale on UI load by @moisseev in #4607 - Update configwizard.lua by @Dani778 in #4605 - [Minor] Revisit numeric_urls by @fatalbanana in #4602 - [Fix] Change Date: header location to conform with RFC by @lbahtarliev in #4608 - Implement known senders plugin by @vstakhov in #4610 - Merge tests into master branch by @fatalbanana in #4615 - Run CI on ARM by @fatalbanana in #4617 - [Minor] Try fix test logs by @fatalbanana in #4620 - Minor improvements for CI by @fatalbanana in #4621 - Fix wrong copypasta & mis-named file by @fatalbanana in #4624 - [Fix] Prevent DNSWL sabotage by @mdierksen in #4627 - Update to 3.6 - [WebUI] Migrate to Bootstrap v5.2 by @moisseev in #4444 - fix: avoid double-dip of nrcpt when calculating ratelimit condition by @simbuerg in #4448 - [WebUI] Fix "Clean history" button enabling/disabling in the Scan tab by @moisseev in #4453 - [Minor] Use a scalar variable as a dir handle by @moisseev in #4457 - Fix arc by @jendis in #4449 - [Minor] Fix pagination control border radius by @moisseev in #4461 - [Fix] remove obsolete rspamd-redirector files by @a16bitsysop in #4422 - Add fasttext language detector to Rspamd by @vstakhov in #4473 - [Minor] Fix rows background coloring by @moisseev in #4490 - [WebUI] Add ability to compute fuzzy hashes by @moisseev in #4499 - [Fix] rbl: fix dependency registration when symbols_prefixes is used by @fatalbanana in #4498 - [Enhancement] Add composite rule for messages only containing a redirector URL by @twesterhever in #4496 - [WebUI] Show validation feedback inside login modal by @moisseev in #4504 - [Minor] Improve HACKED_WP_PHISHING coverage by @twesterhever in #4506 - [Minor] Add additional bad extensions by @twesterhever in #4508 - [Minor] Assorted cleanup and housekeeping of configuration files, take 2 by @twesterhever in #4505 - [Rules] Add thread hijacking composite rule by @twesterhever in #4507 - [Minor] Move HAS_ONION_URI from "experimental" to "url" group by @twesterhever in #4495 - [Enhancement] Make Google Firebase rule productive by @twesterhever in #4494 - Use the correct mime format for 7z by @JasonStephenson in #4517 - [Minor] Increase score for .chm attachments by @twesterhever in #4518 - [Enhancement] Improve detection of Google redirection URLs by @twesterhever in #4497 - if elasticsearch_version >= 7 we should not send the _type to elastic… by @mariojansen in #4520 - [Enhancement] Treat HTML attachments as (slightly) bad by @twesterhever in #4519 - Dockerfile: Switch to bookworm by @mrueg in #4532 - [Feature] external_relay: add ip_map strategy by @moesoha in #4537 - [Feature] Detect Apple Mail and remove scores for their known common behavior by @dragoangel in #4538 - [Minor] A bit better apple_x_mailer regex by @dragoangel in #4539 - replace ECDSA_sign_setup/ECDSA_sign_ex with ECDSA_sign by @sthen in #4541 - [Fix] dmarc gramar - allow spaces before ";" by @rheoli in #4547 - [Minor] Minor fixes for previous ratelimit changes by @fatalbanana in #4549 - [Minor] Improve catch rates of FREEMAIL_AFF by @twesterhever in #4556 - [Minor] Tweak HAS_GOOGLE_REDIR to detect Google AMP URLs as well by @twesterhever in #4558 - Enable more features - Enable nice stacktraces for crashes. New BR: libunwind-devel - use system xxhash: New BR: xxhash-devel - enable blas/lapack support for the neural network processing New BR: lapack-devel, libopenblas_openmp-devel, openblas-common-devel - Update to 3.5 - [WebUI] Add legacy history version badge by @moisseev in #4326 - [Feature] Enable Mime part filters on antivirus module by @jonmoesli in #4328 - metadata_exporter http pusher: Extend valid return codes by @yo000 in #4334 - [Minor] debian package: disable luajit on arm64 by @fatalbanana in #4335 - Support external maps in Rspamd by @vstakhov in #4324 - [Fix] Return true from has_urls(true) if only emails are present by @cpragadeesh in #4365 - [Fix] received: filtering of artificial header by @kakochang in #4367 - [Fix] Replace broken strict_domains with phishing_exceptions by @dupondje in #4376 - Fix build with gcc 13 by including by @heirecka in #4375 - rspamc: add -R option for human readable report by @amishmm in #4377 - rspamc: optimize indentation condition by @amishmm in #4381 - Set required_score = reject score and minor change to the report by @amishmm in #4383 - conf/modules.d/arc.conf: fix parameter name by @jendis in #4387 - Fixes to support global lua maps in user settings by @dpetrov67 in #4393 - [Enhancement] Make Google URL redirection rules productive by @twesterhever in #4399 - [Enhancement] Add rule to detect Google Firebase URLs by @twesterhever in #4401 - [Minor] Assorted cleanup and housekeeping of configuration files by @twesterhever in #4397 - addition: add Betterbird to user_agent_thunderbird by @georglauterbach in #4404 - [Minor] Replace "Spamhaus XBL any" hack with a more clear solution by @twesterhever in #4398 - [Enhancement] Add IPFS URL heuristic by @twesterhever in #4310 - Checking for redirector url in mail by @korgoth1 in #4351 - fix incorrect asn references in bimi.conf by @mta59066 in #4410 - [Minor] Account for one more undisclosed-recipients address variant by @citrin in #4413 - Fix for x-rspamd-action in Milter headers module by @nishils in #4416 - [WebUI] Update JS libraries by @moisseev in #4414 - [WebUI] Update bootstrap by @moisseev in #4420 - [Minor] remove check for sys/cdefs.h in CMakelists.txt by @a16bitsysop in #4430 - [Minor] Fix some compiler warnings by @a16bitsysop in #4436 - Upgrade to 3.4 again - Fix metadata_exporter with many recipients by @yo000 in #4294 - [Fix] Fix favicon.ico Content-Type header by @moisseev in #4302 - [Minor] Fix copy-paste error by @moisseev in #4305 - Add basic auth to metadata_exporter http pusher by @yo000 in #4300 - [Enhancement] Add composite rule against AFF involving freemailers by @twesterhever in #4304 - Penalize bounce spam by @frederikbosch in #4308 - Update to 3.4 - Fix metadata_exporter with many recipients by @yo000 in #4294 - [Fix] Fix favicon.ico Content-Type header by @moisseev in #4302 - [Minor] Fix copy-paste error by @moisseev in #4305 - Add basic auth to metadata_exporter http pusher by @yo000 in #4300 - [Enhancement] Add composite rule against AFF involving freemailers by @twesterhever in #4304 - Penalize bounce spam by @frederikbosch in #4308 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-375=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): rspamd-3.7.4-bp155.2.3.1 References:

1 0

SUSE-RU-2023:4539-1: moderate: Recommended update for unar
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for unar Announcement ID: SUSE-RU-2023:4539-1 Rating: moderate References: * jsc#PED-6193 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for unar fixes the following issue: * use pkgconfig(icu-uc) for current libicu ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4539=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4539=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4539=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4539=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4539=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4539=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4539=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4539=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4539=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4539=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4539=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4539=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4539=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4539=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4539=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Manager Proxy 4.2 (x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Manager Retail Branch Server 4.2 (x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 ## References: * https://jira.suse.com/browse/PED-6193

1 0

SUSE-RU-2023:4540-1: moderate: Recommended update for patterns-sap
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for patterns-sap Announcement ID: SUSE-RU-2023:4540-1 Rating: moderate References: * bsc#1214161 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP5 * SAP Business One Module 15-SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for patterns-sap fixes the following issues: * Adapt required packages to the new SAP BusinessOne. * Fixes an issue when SAP Installation Wizard stops after HANA installation. (bsc#1214161) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4540=1 openSUSE-SLE-15.5-2023-4540=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2023-4540=1 * SAP Business One Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Business-One-15-SP5-2023-4540=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * patterns-sap-bone-15.5.1-150500.5.5.1 * patterns-sap-nw-15.5.1-150500.5.5.1 * patterns-sap-hana-15.5.1-150500.5.5.1 * patterns-sap-15.5.1-150500.5.5.1 * SAP Applications Module 15-SP5 (ppc64le x86_64) * patterns-sap-nw-15.5.1-150500.5.5.1 * patterns-sap-hana-15.5.1-150500.5.5.1 * SAP Business One Module 15-SP5 (x86_64) * patterns-sap-bone-15.5.1-150500.5.5.1 * patterns-sap-hana-15.5.1-150500.5.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214161

1 0

SUSE-RU-2023:4534-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for libzypp, zypper Announcement ID: SUSE-RU-2023:4534-1 Rating: moderate References: * bsc#1041742 * bsc#1203760 * bsc#1212422 * bsc#1215979 * bsc#1216091 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has five fixes can now be installed. ## Description: This update for libzypp, zypper fixes the following issues: * Preliminary disable 'rpm --runposttrans' usage for chrooted systems (bsc#1216091) * Fix comment typo on zypp.conf (bsc#1215979) * Attempt to delay %transfiletrigger(postun|in) execution if rpm supports it (bsc#1041742) * Make sure the old target is deleted before a new one is created (bsc#1203760) * Return 104 also if info suggests near matches * Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422) * commit: Insert a headline to separate output of different rpm scripts (bsc#1041742) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4534=1 openSUSE-SLE-15.4-2023-4534=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4534=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4534=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4534=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4534=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4534=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4534=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4534=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4534=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4534=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4534=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-devel-doc-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * openSUSE Leap 15.4 (noarch) * zypper-aptitude-1.14.66-150400.3.35.1 * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.3 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.4 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-devel-doc-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * openSUSE Leap 15.5 (noarch) * zypper-aptitude-1.14.66-150400.3.35.1 * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Manager Proxy 4.3 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * Basesystem Module 15-SP4 (noarch) * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * Basesystem Module 15-SP5 (noarch) * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1041742 * https://bugzilla.suse.com/show_bug.cgi?id=1203760 * https://bugzilla.suse.com/show_bug.cgi?id=1212422 * https://bugzilla.suse.com/show_bug.cgi?id=1215979 * https://bugzilla.suse.com/show_bug.cgi?id=1216091

1 0

SUSE-SU-2023:4537-1: moderate: Security update for libxml2
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Security update for libxml2 Announcement ID: SUSE-SU-2023:4537-1 Rating: moderate References: * bsc#1216129 Cross-References: * CVE-2023-45322 CVSS scores: * CVE-2023-45322 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-45322 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Python 3 Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for libxml2 fixes the following issues: * CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4537=1 openSUSE-SLE-15.4-2023-4537=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4537=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4537=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4537=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4537=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4537=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4537=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4537=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-4537=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-devel-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python311-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python311-libxml2-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * openSUSE Leap 15.4 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.25.1 * libxml2-2-32bit-2.9.14-150400.5.25.1 * libxml2-devel-32bit-2.9.14-150400.5.25.1 * openSUSE Leap 15.4 (noarch) * libxml2-doc-2.9.14-150400.5.25.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libxml2-devel-64bit-2.9.14-150400.5.25.1 * libxml2-2-64bit-debuginfo-2.9.14-150400.5.25.1 * libxml2-2-64bit-2.9.14-150400.5.25.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-devel-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * Basesystem Module 15-SP4 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.25.1 * libxml2-2-32bit-2.9.14-150400.5.25.1 * Python 3 Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-libxml2-debuginfo-2.9.14-150400.5.25.1 * python311-libxml2-2.9.14-150400.5.25.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45322.html * https://bugzilla.suse.com/show_bug.cgi?id=1216129

1 0

SUSE-RU-2023:4538-1: moderate: Recommended update for screen
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for screen Announcement ID: SUSE-RU-2023:4538-1 Rating: moderate References: * jsc#SMO-279 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for screen fixes the following issue: * screen is shipped to SUSE Linux Enterprise Micro 5.3, 5.4 and 5.5. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4538=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4538=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4538=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4538=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4538=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4538=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4538=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4538=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4538=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4538=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4538=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4538=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4538=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4538=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * openSUSE Leap Micro 5.4 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Manager Proxy 4.2 (x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 ## References: * https://jira.suse.com/browse/SMO-279

1 0

SUSE-SU-2023:4527-1: moderate: Security update for maven, maven-resolver, sbt, xmvn
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Security update for maven, maven-resolver, sbt, xmvn Announcement ID: SUSE-SU-2023:4527-1 Rating: moderate References: * bsc#1162112 * bsc#1216529 Cross-References: * CVE-2023-46122 CVSS scores: * CVE-2023-46122 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L * CVE-2023-46122 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for maven, maven-resolver, sbt, xmvn fixes the following issues: * CVE-2023-46122: Fixed an arbitrary file write when extracting a crafted zip file with sbt (bsc#1216529). * Upgraded maven to version 3.9.4 * Upgraded maven-resolver to version 1.9.15. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4527=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4527=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4527=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4527=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4527=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4527=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4527=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4527=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4527=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4527=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4527=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4527=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4527=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * openSUSE Leap 15.4 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * maven-resolver-transport-classpath-1.9.15-150200.3.14.2 * maven-javadoc-3.9.4-150200.4.18.1 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * maven-resolver-javadoc-1.9.15-150200.3.14.2 * maven-resolver-test-util-1.9.15-150200.3.14.2 * sbt-0.13.18-150200.4.16.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * sbt-bootstrap-0.13.18-150200.4.16.1 * xmvn-connector-javadoc-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * xmvn-tools-javadoc-4.2.0-150200.3.14.1 * maven-resolver-impl-1.9.15-150200.3.14.2 * xmvn-parent-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-mojo-javadoc-4.2.0-150200.3.14.1 * xmvn-resolve-4.2.0-150200.3.14.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * openSUSE Leap 15.5 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * maven-resolver-transport-classpath-1.9.15-150200.3.14.2 * maven-javadoc-3.9.4-150200.4.18.1 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * maven-resolver-javadoc-1.9.15-150200.3.14.2 * maven-resolver-test-util-1.9.15-150200.3.14.2 * sbt-0.13.18-150200.4.16.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * sbt-bootstrap-0.13.18-150200.4.16.1 * xmvn-connector-javadoc-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * xmvn-tools-javadoc-4.2.0-150200.3.14.1 * maven-resolver-impl-1.9.15-150200.3.14.2 * xmvn-parent-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-mojo-javadoc-4.2.0-150200.3.14.1 * xmvn-resolve-4.2.0-150200.3.14.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-minimal-4.2.0-150200.3.14.1 * xmvn-4.2.0-150200.3.14.1 * Development Tools Module 15-SP4 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * Development Tools Module 15-SP5 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-util-1.9.15-150200.3.14.2 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Package Hub 15 15-SP5 (noarch) * sbt-bootstrap-0.13.18-150200.4.16.1 * sbt-0.13.18-150200.4.16.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Enterprise Storage 7.1 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 ## References: * https://www.suse.com/security/cve/CVE-2023-46122.html * https://bugzilla.suse.com/show_bug.cgi?id=1162112 * https://bugzilla.suse.com/show_bug.cgi?id=1216529

1 0

SUSE-SU-2023:4528-1: important: Security update for python-Pillow
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Security update for python-Pillow Announcement ID: SUSE-SU-2023:4528-1 Rating: important References: * bsc#1216894 Cross-References: * CVE-2023-44271 CVSS scores: * CVE-2023-44271 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-44271 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP4 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-Pillow fixes the following issues: * CVE-2023-44271: Fixed uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (bsc#1216894). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4528=1 openSUSE-SLE-15.4-2023-4528=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4528=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-4528=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2023-4528=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 * Python 3 Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-44271.html * https://bugzilla.suse.com/show_bug.cgi?id=1216894

1 0

SUSE-SU-2023:4529-1: important: Security update for strongswan
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Security update for strongswan Announcement ID: SUSE-SU-2023:4529-1 Rating: important References: * bsc#1216901 Cross-References: * CVE-2023-41913 CVSS scores: * CVE-2023-41913 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for strongswan fixes the following issues: * CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4529=1 openSUSE-SLE-15.5-2023-4529=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4529=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4529=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-4529=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * strongswan-ipsec-5.9.11-150500.5.6.1 * strongswan-mysql-5.9.11-150500.5.6.1 * strongswan-nm-debuginfo-5.9.11-150500.5.6.1 * strongswan-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 * strongswan-nm-5.9.11-150500.5.6.1 * strongswan-sqlite-5.9.11-150500.5.6.1 * strongswan-hmac-5.9.11-150500.5.6.1 * strongswan-ipsec-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-5.9.11-150500.5.6.1 * strongswan-debugsource-5.9.11-150500.5.6.1 * strongswan-mysql-debuginfo-5.9.11-150500.5.6.1 * strongswan-sqlite-debuginfo-5.9.11-150500.5.6.1 * openSUSE Leap 15.5 (noarch) * strongswan-doc-5.9.11-150500.5.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * strongswan-ipsec-5.9.11-150500.5.6.1 * strongswan-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 * strongswan-hmac-5.9.11-150500.5.6.1 * strongswan-ipsec-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-5.9.11-150500.5.6.1 * strongswan-debugsource-5.9.11-150500.5.6.1 * Basesystem Module 15-SP5 (noarch) * strongswan-doc-5.9.11-150500.5.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * strongswan-debugsource-5.9.11-150500.5.6.1 * strongswan-nm-debuginfo-5.9.11-150500.5.6.1 * strongswan-nm-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * strongswan-debugsource-5.9.11-150500.5.6.1 * strongswan-nm-debuginfo-5.9.11-150500.5.6.1 * strongswan-nm-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41913.html * https://bugzilla.suse.com/show_bug.cgi?id=1216901

1 0

SUSE-RU-2023:4531-1: moderate: Recommended update for perl-DateTime-TimeZone
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Recommended update for perl-DateTime-TimeZone Announcement ID: SUSE-RU-2023:4531-1 Rating: moderate References: * bsc#1104700 * bsc#1113554 * bsc#1204923 * jsc#PED-6726 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that contains one feature and has three fixes can now be installed. ## Description: This update for perl-DateTime-TimeZone fixes the following issues: * updated to 2.60 (jsc#PED-6726, bsc#1204923, bsc#1113554, bsc#1104700) full changelog at https://metacpan.org/release/DROLSKY/DateTime- TimeZone-2.60/changes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4531=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4531=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4531=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4531=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4531=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4531=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4531=1 ## Package List: * SUSE Manager Retail Branch Server 4.2 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * SUSE Manager Server 4.2 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * openSUSE Leap 15.4 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * openSUSE Leap 15.5 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * Basesystem Module 15-SP4 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * Basesystem Module 15-SP5 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * SUSE Manager Proxy 4.2 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1104700 * https://bugzilla.suse.com/show_bug.cgi?id=1113554 * https://bugzilla.suse.com/show_bug.cgi?id=1204923 * https://jira.suse.com/browse/PED-6726

1 0

SUSE-RU-2023:4525-1: moderate: Recommended update for samba
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Recommended update for samba Announcement ID: SUSE-RU-2023:4525-1 Rating: moderate References: * bsc#1213607 * bsc#1213826 * bsc#1215212 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has three fixes can now be installed. ## Description: This update for samba fixes the following issues: * Update to samba 4.17.12 * Some filenames can cause assert to fail in openat_pathref_fsp_nosymlink * reply_sesssetup_and_X() can dereference uninitialized tmp pointer * Missing return in reply_exit_done() * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer * Improve GetNChanges to address synchronization tool looping during the initial user sync phase * Samba replication logs show (null) DN * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination * Spotlight results return wrong date in result list * Delays at reconnect with smb2_validate_sequence_number: bad message_id 2 * samba-tool ntacl get segfault if aio_pthread appended * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed * File doesn't show when user doesn't have permission if aio_pthread is loaded * net ads lookup with unspecified realm fails * Regression DFS not working with widelinks = true (bsc#1213607); * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1 * mdssvc: Do an early talloc_free() in _mdssvc_open() * Windows client join fails if a second container CN=System exists somewhere * Fix crossing automounter mount points (bsc#1215212) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4525=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4525=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2023-4525=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4525=1 openSUSE-SLE-15.5-2023-4525=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libsamba-policy-python3-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-gpupdate-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-tool-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-4.17.12+git.427.2619dc0bed-150500.3.14.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * samba-ceph-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ceph-4.17.12+git.427.2619dc0bed-150500.3.14.1 * Basesystem Module 15-SP5 (x86_64) * samba-client-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * ctdb-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libsamba-policy-python3-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-pcp-pmda-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-gpupdate-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-tool-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-pcp-pmda-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-test-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-test-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (x86_64) * samba-client-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (noarch) * samba-doc-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (aarch64 x86_64) * samba-ceph-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ceph-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (aarch64_ilp32) * samba-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213607 * https://bugzilla.suse.com/show_bug.cgi?id=1213826 * https://bugzilla.suse.com/show_bug.cgi?id=1215212

1 0

SUSE-SU-2023:4513-1: important: Security update for apache2-mod_jk
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for apache2-mod_jk Announcement ID: SUSE-SU-2023:4513-1 Rating: important References: * bsc#1114612 Cross-References: * CVE-2018-11759 CVSS scores: * CVE-2018-11759 ( SUSE ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2018-11759 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for apache2-mod_jk fixes the following issues: Update to version 1.2.49: Apache * Retrieve default request id from mod_unique_id. It can also be taken from an arbitrary environment variable by configuring "JkRequestIdIndicator". * Don't delegate the generatation of the response body to httpd when the status code represents an error if the request used the HEAD method. * Only export the main module symbol. Visibility of module internal symbols led to crashes when conflicting with library symbols. Based on a patch provided by Josef Čejka. * Remove support for implicit mapping of requests to workers. All mappings must now be explicit. IIS * Set default request id as a GUID. It can also be taken from an arbitrary request header by configuring "request_id_header". * Fix non-empty check for the Translate header. Common * Fix compiler warning when initializing and copying fixed length strings. * Add a request id to mod_jk log lines. * Enable configure to find the correct sizes for pid_t and pthread_t when building on MacOS. * Fix Clang 15/16 compatability. Pull request #6 provided by Sam James. * Improve XSS hardening in status worker. * Add additional bounds and error checking when reading AJP messages. Docs * Remove support for the Netscape / Sun ONE / Oracle iPlanet Web Server as the product has been retired. * Remove links to the old JK2 documentation. The JK2 documentation is still available, it is just no longer linked from the current JK documentation. * Restructure subsections in changelog starting with version 1.2.45. Changes for 1.2.47 and 1.2.48 updates: * Add: Apache: Extend trace level logging of method entry/exit to aid debugging of request mapping issues. * Fix: Apache: Fix a bug in the normalization checks that prevented file based requests, such as SSI file includes, from being processed. * Fix: Apache: When using JkAutoAlias, ensure that files that include spaces in their name are accessible. * Update: Common: Update the documentation to reflect that the source code for the Apache Tomcat Connectors has moved from Subversion to Git. * Fix: Common: When using set_session_cookie, ensure that an updated session cookie is issued if the load-balancer has to failover to a different worker. * Update: Common: Update config.guess and config.sub from https://git.savannah.gnu.org/git/config.git. * Update: Common: Update release script for migration to git. Update to version 1.2.46 Fixes: * Apache: Fix regression in 1.2.44 which resulted in socket_connect_timeout to be interpreted in units of seconds instead of milliseconds on platforms that provide poll(). (rjung) * Security: CVE-2018-11759 Connector path traversal [bsc#1114612] Update to version 1.2.45 Fixes: * Correct regression in 1.2.44 that broke request handling for OPTIONS * requests. (rjung) * Improve path parameter parsing so that the session ID specified by the session_path worker property for load-balanced workers can be extracted from a path parameter in any segment of the URI, rather than only from the final segment. (markt) * Apache: Improve path parameter handling so that JkStripSession can remove session IDs that are specified on path parameters in any segment of the URI rather than only the final segment. (markt) * IIS: Improve path parameter handling so that strip_session can remove session IDs that are specified on path parameters in any segment of the URI rather than only the final segment. (markt) Updates: * Apache: Update the documentation to note additional limitations of the JkAutoAlias directive. (markt) Code: * Common: Optimize path parameter handling. (rjung) Update to version 1.2.44 Updates: * Remove the Novell Netware make files and Netware specific source code since there has not been a supported version of Netware available for over five years. (markt) * Apache: Update the documentation to use httpd 2.4.x style access control directives. (markt) * Update PCRE bundled with the ISAPI redirector to 8.42. (rjung) * Update config.guess and config.sub from https://git.savannah.gnu.org/git/config.git. (rjung) Fixes: * Common: Use Local, rather than Global, mutexs on Windows to better support multi-user environments. (markt) * Apache: Use poll rather than select to avoid the limitations of select triggering an httpd crash. Patch provided by Koen Wilde. (markt) * ISAPI: Remove the check that rejects requests that contain path segments that match WEB-INF or META-INF as it duplicates a check that Tomcat performs and, because ISAPI does not have visibility of the current context path, it is impossible to implement this check without valid requests being rejected. (markt) * Refactor normalisation of request URIs to a common location and align the normalisation implementation for mod_jk with that implemented by Tomcat. (markt) Add: * Clarify the behvaiour of lb workers when all ajp13 workers fail with particular reference to the role of the retries attribute. (markt) * Add the new load-balancer worker property lb_retries to improve the control over the number of retries. Based on a patch provided by Frederik Nosi. (markt) * Add a note to the documentation that the CollapseSlashes options are now effectively hard-coded to CollpaseSlashesAll due to the changes made to align normalization with that implemented in Tomcat. (markt) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4513=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4513=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4513=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4513=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 ## References: * https://www.suse.com/security/cve/CVE-2018-11759.html * https://bugzilla.suse.com/show_bug.cgi?id=1114612

1 0

SUSE-SU-2023:4514-1: important: Security update for strongswan
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for strongswan Announcement ID: SUSE-SU-2023:4514-1 Rating: important References: * bsc#1216901 Cross-References: * CVE-2023-41913 CVSS scores: * CVE-2023-41913 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Workstation Extension 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 An update that solves one vulnerability can now be installed. ## Description: This update for strongswan fixes the following issues: * CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4514=1 openSUSE-SLE-15.4-2023-4514=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4514=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4514=1 * SUSE Linux Enterprise Workstation Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-4514=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * strongswan-mysql-debuginfo-5.9.11-150400.19.17.2 * strongswan-nm-5.9.11-150400.19.17.2 * strongswan-mysql-5.9.11-150400.19.17.2 * strongswan-sqlite-5.9.11-150400.19.17.2 * strongswan-libs0-debuginfo-5.9.11-150400.19.17.2 * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-ipsec-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-hmac-5.9.11-150400.19.17.2 * strongswan-sqlite-debuginfo-5.9.11-150400.19.17.2 * strongswan-ipsec-debuginfo-5.9.11-150400.19.17.2 * strongswan-libs0-5.9.11-150400.19.17.2 * strongswan-nm-debuginfo-5.9.11-150400.19.17.2 * strongswan-5.9.11-150400.19.17.2 * openSUSE Leap 15.4 (noarch) * strongswan-doc-5.9.11-150400.19.17.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * strongswan-libs0-debuginfo-5.9.11-150400.19.17.2 * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-ipsec-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-hmac-5.9.11-150400.19.17.2 * strongswan-ipsec-debuginfo-5.9.11-150400.19.17.2 * strongswan-libs0-5.9.11-150400.19.17.2 * strongswan-5.9.11-150400.19.17.2 * Basesystem Module 15-SP4 (noarch) * strongswan-doc-5.9.11-150400.19.17.2 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-nm-debuginfo-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-nm-5.9.11-150400.19.17.2 * SUSE Linux Enterprise Workstation Extension 15 SP4 (x86_64) * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-nm-debuginfo-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-nm-5.9.11-150400.19.17.2 ## References: * https://www.suse.com/security/cve/CVE-2023-41913.html * https://bugzilla.suse.com/show_bug.cgi?id=1216901

1 0

SUSE-SU-2023:4517-1: moderate: Security update for python3-setuptools
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for python3-setuptools Announcement ID: SUSE-SU-2023:4517-1 Rating: moderate References: * bsc#1206667 Cross-References: * CVE-2022-40897 CVSS scores: * CVE-2022-40897 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2022-40897 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python3-setuptools fixes the following issues: * CVE-2022-40897: Fixed Regular Expression Denial of Service (ReDoS) in package_index.py (bsc#1206667). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4517=1 openSUSE-SLE-15.4-2023-4517=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4517=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4517=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4517=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4517=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4517=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4517=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4517=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4517=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4517=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4517=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 * openSUSE Leap Micro 5.3 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * openSUSE Leap Micro 5.4 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * openSUSE Leap 15.5 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * Basesystem Module 15-SP4 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 * Basesystem Module 15-SP5 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-40897.html * https://bugzilla.suse.com/show_bug.cgi?id=1206667

1 0