November 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2023:4623-1: moderate: Security update for traceroute
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for traceroute Announcement ID: SUSE-SU-2023:4623-1 Rating: moderate References: * bsc#1216591 Cross-References: * CVE-2023-46316 CVSS scores: * CVE-2023-46316 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-46316 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for traceroute fixes the following issues: * CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4623=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4623=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4623=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4623=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4623=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4623=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4623=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4623=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4623=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4623=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4623=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * traceroute-debuginfo-2.0.21-150000.3.3.1 * traceroute-debugsource-2.0.21-150000.3.3.1 * traceroute-2.0.21-150000.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46316.html * https://bugzilla.suse.com/show_bug.cgi?id=1216591

1 0

openSUSE-SU-2023:0387-1: important: Security update for chromium
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0387-1 Rating: important References: #1217614 #1217615 #1217616 Cross-References: CVE-2023-6345 CVE-2023-6346 CVE-2023-6347 CVE-2023-6348 CVE-2023-6350 CVE-2023-6351 Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for Chromium fixes the following issue: Chromium 119.0.6045.199 (boo#1217616) * CVE-2023-6348: Type Confusion in Spellcheck * CVE-2023-6347: Use after free in Mojo * CVE-2023-6346: Use after free in WebAudio * CVE-2023-6350: Out of bounds memory access in libavif (boo#1217614) * CVE-2023-6351: Use after free in libavif (boo#1217615) * CVE-2023-6345: Integer overflow in Skia * Various fixes from internal audits, fuzzing and other initiatives. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-387=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-387=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-119.0.6045.199-bp155.2.61.1 chromedriver-debuginfo-119.0.6045.199-bp155.2.61.1 chromium-119.0.6045.199-bp155.2.61.1 chromium-debuginfo-119.0.6045.199-bp155.2.61.1 - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-119.0.6045.199-bp154.2.147.1 chromium-119.0.6045.199-bp154.2.147.1 References: https://www.suse.com/security/cve/CVE-2023-6345.html https://www.suse.com/security/cve/CVE-2023-6346.html https://www.suse.com/security/cve/CVE-2023-6347.html https://www.suse.com/security/cve/CVE-2023-6348.html https://www.suse.com/security/cve/CVE-2023-6350.html https://www.suse.com/security/cve/CVE-2023-6351.html https://bugzilla.suse.com/1217614 https://bugzilla.suse.com/1217615 https://bugzilla.suse.com/1217616

1 0

SUSE-RU-2023:4617-1: moderate: Recommended update for javapackages-tools
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for javapackages-tools Announcement ID: SUSE-RU-2023:4617-1 Rating: moderate References: * jsc#PED-6376 * jsc#PED-6377 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains two features can now be installed. ## Description: This update for javapackages-tools fixes the following issues: * Add requirement for `python-xml` as it is needed by some scripts * Ensure reproducibility of built binaries * Minor bug fixes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4617=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4617=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4617=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4617=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4617=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4617=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4617=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4617=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4617=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4617=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4617=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4617=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4617=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4617=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * openSUSE Leap 15.5 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * Basesystem Module 15-SP4 (noarch) * python3-javapackages-6.2.0-150200.3.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * Basesystem Module 15-SP5 (noarch) * python3-javapackages-6.2.0-150200.3.12.1 * Development Tools Module 15-SP4 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * Development Tools Module 15-SP5 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * SUSE Enterprise Storage 7.1 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * javapackages-tools-6.2.0-150200.3.12.1 * javapackages-filesystem-6.2.0-150200.3.12.1 * openSUSE Leap 15.4 (noarch) * javapackages-ivy-6.2.0-150200.3.12.1 * javapackages-local-6.2.0-150200.3.12.1 * python3-javapackages-6.2.0-150200.3.12.1 * javapackages-gradle-6.2.0-150200.3.12.1 ## References: * https://jira.suse.com/browse/PED-6376 * https://jira.suse.com/browse/PED-6377

1 0

SUSE-RU-2023:4618-1: moderate: Recommended update for orarun
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for orarun Announcement ID: SUSE-RU-2023:4618-1 Rating: moderate References: * bsc#1216566 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for orarun fixes the following issues: * Fixed 'grep: oracle: No such file or directory' error during oracle user login with csh/tcsh (/etc/profile.d/oracle.csh) (bsc#1216566) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4618=1 openSUSE-SLE-15.4-2023-4618=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4618=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4618=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4618=1 ## Package List: * openSUSE Leap 15.4 (s390x x86_64 i586) * orarun-2.1-150400.22.3.1 * openSUSE Leap 15.5 (s390x x86_64) * orarun-2.1-150400.22.3.1 * Server Applications Module 15-SP4 (s390x x86_64) * orarun-2.1-150400.22.3.1 * Server Applications Module 15-SP5 (s390x x86_64) * orarun-2.1-150400.22.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216566

1 0

SUSE-SU-2023:4619-1: important: Security update for sqlite3
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for sqlite3 Announcement ID: SUSE-SU-2023:4619-1 Rating: important References: * bsc#1210660 Cross-References: * CVE-2023-2137 CVSS scores: * CVE-2023-2137 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-2137 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for sqlite3 fixes the following issues: * CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4619=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4619=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4619=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4619=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4619=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4619=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4619=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4619=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE CaaS Platform 4.0 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2137.html * https://bugzilla.suse.com/show_bug.cgi?id=1210660

1 0

SUSE-SU-2023:4619-1: important: Security update for sqlite3
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for sqlite3 Announcement ID: SUSE-SU-2023:4619-1 Rating: important References: * bsc#1210660 Cross-References: * CVE-2023-2137 CVSS scores: * CVE-2023-2137 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-2137 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for sqlite3 fixes the following issues: * CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4619=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4619=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4619=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4619=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4619=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4619=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4619=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4619=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE CaaS Platform 4.0 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2137.html * https://bugzilla.suse.com/show_bug.cgi?id=1210660

1 0

SUSE-SU-2023:4619-1: important: Security update for sqlite3
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Security update for sqlite3 Announcement ID: SUSE-SU-2023:4619-1 Rating: important References: * bsc#1210660 Cross-References: * CVE-2023-2137 CVSS scores: * CVE-2023-2137 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-2137 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for sqlite3 fixes the following issues: * CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4619=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4619=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4619=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4619=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4619=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4619=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4619=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4619=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4619=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4619=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4619=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4619=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.4 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * openSUSE Leap 15.5 (noarch) * sqlite3-doc-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP4 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-tcl-debuginfo-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * Basesystem Module 15-SP5 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Enterprise Storage 7.1 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * SUSE CaaS Platform 4.0 (x86_64) * libsqlite3-0-32bit-3.44.0-150000.3.23.1 * sqlite3-debuginfo-3.44.0-150000.3.23.1 * sqlite3-devel-3.44.0-150000.3.23.1 * libsqlite3-0-32bit-debuginfo-3.44.0-150000.3.23.1 * sqlite3-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * sqlite3-tcl-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.44.0-150000.3.23.1 * libsqlite3-0-3.44.0-150000.3.23.1 * sqlite3-debugsource-3.44.0-150000.3.23.1 * libsqlite3-0-debuginfo-3.44.0-150000.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2137.html * https://bugzilla.suse.com/show_bug.cgi?id=1210660

1 0

SUSE-RU-2023:4621-1: moderate: Recommended update for cloud-regionsrv
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for cloud-regionsrv Announcement ID: SUSE-RU-2023:4621-1 Rating: moderate References: * bsc#1191880 * bsc#1195924 * bsc#1195925 * bsc#1216917 Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has four fixes can now be installed. ## Description: This update for cloud-regionsrv fixes the following issue: * Implement IPv6 support independently from IPv4. (bsc#1216917) * IP address resolution from (client as fallback, or server or fail over) (bsc#1216917) * Fixed an issue replacing the cert on the client side when the connected server cert changes. (bsc#1191880) * With matching the certs with the underlying framework it is going to be prevented getting updates from the wrong cloud infrastructure which can occur by changing the provider. (bsc#1195924, bsc#1195925) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4621=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4621=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4621=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2023-4621=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-4621=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-4621=1 ## Package List: * openSUSE Leap 15.3 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * openSUSE Leap 15.4 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * openSUSE Leap 15.5 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * Public Cloud Module 15-SP3 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * Public Cloud Module 15-SP4 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 * Public Cloud Module 15-SP5 (noarch) * cloud-regionsrv-generic-config-1.0.0-150300.11.12.1 * cloud-regionsrv-8.2.0-150300.11.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1191880 * https://bugzilla.suse.com/show_bug.cgi?id=1195924 * https://bugzilla.suse.com/show_bug.cgi?id=1195925 * https://bugzilla.suse.com/show_bug.cgi?id=1216917

1 0

openSUSE-SU-2023:0386-1: important: Security update for opera
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0386-1 Rating: important References: Cross-References: CVE-2023-5997 CVE-2023-6112 CVSS scores: CVE-2023-5997 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6112 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 105.0.4970.21 * DNA-112425 Choosing Workspace Icons doesn’t work as expected * DNA-112787 glow around tiles in Top Sites section in BABE in dark theme - The update to chromium 119.0.6045.159 fixes following issues: CVE-2023-5997, CVE-2023-6112 - Update to 105.0.4970.16 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111903 [Lin] [Component-based-scrollbar] Old design is displayed on Ubuntu 20.04 * DNA-112914 Visual glitch with HWA enabled in some random places * DNA-113137 [WinLin][Sidebar autohide] Sidebar panel is not connected with sidebar - Update to 105.0.4970.13 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111885 [Address bar] Hover effect on padlock icon is not rounded * DNA-112411 Active Tab in Tab Island in Dark Mode should have different colour * DNA-112431 Dragging tab quickly past last island on the right, causes tab to be dropped at the end of tab strip instead of at location of the cursor * DNA-112878 [Tab strip] Detached tab not restored after restarting browser * DNA-112900 Crash at opera::component_based:: ComponentTabDragController::StopViewDragging * DNA-112996 Translations for O105 * DNA-113213 Promote 105 to stable - Complete Opera 105 changelog at: https://blogs.opera.com/desktop/changelog-for-105/ - Update to 104.0.4944.54 * DNA-111938 Option 'Automatically hide sidebar' and Full screen makes Opera freeze * DNA-112241 Stuttering video on some systems with OOP SW H.264 decoding * DNA-112636 [Tab strip] Detach button on meeting tabs moves on hover and is replaced by close tab * DNA-112862 Crash at extensions::BookmarksPrivateAPI:: OnListenerAdded(extensions::EventListenerInfo const&) * DNA-112990 Crash when closing tab tooltip and opening Search tabs Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2023-386=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-105.0.4970.21-lp155.3.21.1 References: https://www.suse.com/security/cve/CVE-2023-5997.html https://www.suse.com/security/cve/CVE-2023-6112.html

1 0

openSUSE-SU-2023:0384-1: moderate: Security update for python-django-grappelli
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for python-django-grappelli ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0384-1 Rating: moderate References: #1216481 Cross-References: CVE-2021-46898 CVSS scores: CVE-2021-46898 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-django-grappelli fixes the following issues: Update to 2.14.4: - CVE-2021-46898: Fixed views/switch.py vulnerable to protocol-relative URL attacks (boo#1216481) - Fixed: Redirect with switch user. - Improved: Remove extra filtering in AutocompleteLookup. - Improved: Added import statement with URLs for quickstart docs. - Improved: Added additional blocks with inlines to allow override. - Fixed: Compatibility with Django 3.1. - Fixed: Docs about adding Grappelli documentation URLS. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-384=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): python3-django-grappelli-2.14.4-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-46898.html https://bugzilla.suse.com/1216481

1 0

openSUSE-SU-2023:0385-1: important: Security update for opera
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0385-1 Rating: important References: Cross-References: CVE-2023-5997 CVE-2023-6112 CVSS scores: CVE-2023-5997 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6112 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 105.0.4970.21 * DNA-112425 Choosing Workspace Icons doesn’t work as expected * DNA-112787 glow around tiles in Top Sites section in BABE in dark theme - The update to chromium 119.0.6045.159 fixes following issues: CVE-2023-5997, CVE-2023-6112 - Update to 105.0.4970.16 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111903 [Lin] [Component-based-scrollbar] Old design is displayed on Ubuntu 20.04 * DNA-112914 Visual glitch with HWA enabled in some random places * DNA-113137 [WinLin][Sidebar autohide] Sidebar panel is not connected with sidebar - Update to 105.0.4970.13 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111885 [Address bar] Hover effect on padlock icon is not rounded * DNA-112411 Active Tab in Tab Island in Dark Mode should have different colour * DNA-112431 Dragging tab quickly past last island on the right, causes tab to be dropped at the end of tab strip instead of at location of the cursor * DNA-112878 [Tab strip] Detached tab not restored after restarting browser * DNA-112900 Crash at opera::component_based:: ComponentTabDragController::StopViewDragging * DNA-112996 Translations for O105 * DNA-113213 Promote 105 to stable - Complete Opera 105 changelog at: https://blogs.opera.com/desktop/changelog-for-105/ - Update to 104.0.4944.54 * DNA-111938 Option 'Automatically hide sidebar' and Full screen makes Opera freeze * DNA-112241 Stuttering video on some systems with OOP SW H.264 decoding * DNA-112636 [Tab strip] Detach button on meeting tabs moves on hover and is replaced by close tab * DNA-112862 Crash at extensions::BookmarksPrivateAPI:: OnListenerAdded(extensions::EventListenerInfo const&) * DNA-112990 Crash when closing tab tooltip and opening Search tabs Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4:NonFree: zypper in -t patch openSUSE-2023-385=1 Package List: - openSUSE Leap 15.4:NonFree (x86_64): opera-105.0.4970.21-lp154.2.62.1 References: https://www.suse.com/security/cve/CVE-2023-5997.html https://www.suse.com/security/cve/CVE-2023-6112.html

1 0

SUSE-RU-2023:4620-1: moderate: Recommended update for libhugetlbfs
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for libhugetlbfs Announcement ID: SUSE-RU-2023:4620-1 Rating: moderate References: * bsc#1213639 * bsc#1216576 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for libhugetlbfs fixes the following issue: * Add patch for upstream issue (bsc#1216576, bsc#1213639) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4620=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4620=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4620=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4620=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4620=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4620=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4620=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4620=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4620=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4620=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4620=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4620=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4620=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4620=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4620=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4620=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4620=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4620=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4620=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4620=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4620=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4620=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-tests-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-tests-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * libhugetlbfs-devel-2.20-150000.3.8.1 * openSUSE Leap 15.4 (x86_64) * libhugetlbfs-32bit-2.20-150000.3.8.1 * libhugetlbfs-32bit-debuginfo-2.20-150000.3.8.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-tests-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-tests-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * libhugetlbfs-devel-2.20-150000.3.8.1 * openSUSE Leap 15.5 (x86_64) * libhugetlbfs-32bit-2.20-150000.3.8.1 * libhugetlbfs-32bit-debuginfo-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE CaaS Platform 4.0 (x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213639 * https://bugzilla.suse.com/show_bug.cgi?id=1216576

1 0

SUSE-RU-2023:4615-1: moderate: Recommended update for icu
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for icu Announcement ID: SUSE-RU-2023:4615-1 Rating: moderate References: * bsc#1217472 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update of icu fixes the following issue: * missing 32bit libraries in SLES 15 SP3 were added, required by xerces-c 32bit. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4615=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4615=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4615=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4615=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4615=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4615=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4615=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4615=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4615=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4615=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4615=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4615=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4615=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4615=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4615=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4615=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4615=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4615=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4615=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4615=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4615=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4615=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4615=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-doc-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * openSUSE Leap 15.4 (x86_64) * libicu-devel-32bit-65.1-150200.4.10.1 * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * openSUSE Leap 15.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-doc-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * openSUSE Leap 15.5 (x86_64) * libicu-devel-32bit-65.1-150200.4.10.1 * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * openSUSE Leap 15.5 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * Basesystem Module 15-SP4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * Basesystem Module 15-SP5 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Enterprise Storage 7.1 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Enterprise Storage 7.1 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * openSUSE Leap Micro 5.3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * openSUSE Leap Micro 5.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217472

1 0

openSUSE-SU-2023:0383-1: important: Security update for optipng
by opensuse-security＠opensuse.org 29 Nov '23

29 Nov '23

openSUSE Security Update: Security update for optipng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0383-1 Rating: important References: #1215937 Cross-References: CVE-2023-43907 CVSS scores: CVE-2023-43907 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for optipng fixes the following issues: optipng was updated to 0.7.8: * Upgraded libpng to version 1.6.40. * Upgraded zlib to version 1.3-optipng. * Upgraded cexcept to version 2.0.2-optipng. * Fixed a global-buffer-overflow vulnerability in the GIF reader (boo#1215937 CVE-2023-43907). * Fixed a stack-print-after-scope defect in the error handler. * Fixed an assertion failure in the image reduction module. * Fixed the command-line wildargs expansion in the Windows port. * Raised the minimum required libpng version from 1.2.9 to 1.6.35. * Raised the minimum required zlib version from 1.2.1 to 1.2.8. * Refactored the structured exception handling. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-383=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): optipng-0.7.8-bp155.5.5.1 optipng-debuginfo-0.7.8-bp155.5.5.1 optipng-debugsource-0.7.8-bp155.5.5.1 References: https://www.suse.com/security/cve/CVE-2023-43907.html https://bugzilla.suse.com/1215937

1 0

SUSE-RU-2023:4610-1: moderate: Recommended update for google-guest-configs
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for google-guest-configs Announcement ID: SUSE-RU-2023:4610-1 Rating: moderate References: * bsc#1212418 * bsc#1212759 * bsc#1214546 * bsc#1214572 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has four fixes can now be installed. ## Description: This update for google-guest-configs fixes the following issues: * Update to version 20230808.00 (bsc#1214546, bsc#1214572, bsc#1212418, bsc#1212759) * Replace xxd with dd for google_nvme_id * Setup irq binding for a3 8g vm * dracut: Add a new dracut module for gcp udev rules * src/lib/udev: only create symlinks for GCP devices * Set hostname: consider fully qualified static hostname * Support multiple local SSD controllers * Update OWNERS file * DHCP hostname: don't reset hostname if the hostname hasn't changed ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4610=1 openSUSE-SLE-15.4-2023-4610=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4610=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-4610=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-4610=1 ## Package List: * openSUSE Leap 15.4 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 * openSUSE Leap 15.5 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 * Public Cloud Module 15-SP4 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 * Public Cloud Module 15-SP5 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212418 * https://bugzilla.suse.com/show_bug.cgi?id=1212759 * https://bugzilla.suse.com/show_bug.cgi?id=1214546 * https://bugzilla.suse.com/show_bug.cgi?id=1214572

1 0

SUSE-SU-2023:4612-1: moderate: Security update for java-1_8_0-openj9
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Security update for java-1_8_0-openj9 Announcement ID: SUSE-SU-2023:4612-1 Rating: moderate References: * bsc#1216374 * bsc#1216379 * bsc#1217214 Cross-References: * CVE-2023-22067 * CVE-2023-22081 * CVE-2023-5676 CVSS scores: * CVE-2023-22067 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22067 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22081 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-22081 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-5676 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2023-5676 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual machine * CVE-2023-22067: Fixed an IOR deserialization issue in CORBA (bsc#1216379). * CVE-2023-22081: Fixed a certificate path validation issue during client authentication (bsc#1216374). * CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4612=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4612=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4612=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openj9-src-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-accessibility-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debugsource-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-1.8.0.392-150200.3.39.1 * openSUSE Leap 15.4 (noarch) * java-1_8_0-openj9-javadoc-1.8.0.392-150200.3.39.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openj9-src-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-accessibility-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debugsource-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-1.8.0.392-150200.3.39.1 * openSUSE Leap 15.5 (noarch) * java-1_8_0-openj9-javadoc-1.8.0.392-150200.3.39.1 * SUSE Package Hub 15 15-SP5 (ppc64le s390x) * java-1_8_0-openj9-src-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-accessibility-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debugsource-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-1.8.0.392-150200.3.39.1 ## References: * https://www.suse.com/security/cve/CVE-2023-22067.html * https://www.suse.com/security/cve/CVE-2023-22081.html * https://www.suse.com/security/cve/CVE-2023-5676.html * https://bugzilla.suse.com/show_bug.cgi?id=1216374 * https://bugzilla.suse.com/show_bug.cgi?id=1216379 * https://bugzilla.suse.com/show_bug.cgi?id=1217214

1 0

SUSE-RU-2023:4606-1: important: Recommended update for python-apache-libcloud
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for python-apache-libcloud Announcement ID: SUSE-RU-2023:4606-1 Rating: important References: * bsc#1214808 Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for python-apache-libcloud fixes the following issues: * list_nodes() function in the Azure ARM driver does not handle pagination and does not return all the VMs for a subscription (bsc#1214808) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4606=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4606=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4606=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4606=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4606=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4606=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4606=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4606=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4606=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4606=1 ## Package List: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Enterprise Storage 7.1 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * openSUSE Leap 15.3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * openSUSE Leap 15.4 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * openSUSE Leap 15.5 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * Server Applications Module 15-SP4 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * Server Applications Module 15-SP5 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214808

1 0

SUSE-SU-2023:4607-1: moderate: Security update for python3-Twisted
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Security update for python3-Twisted Announcement ID: SUSE-SU-2023:4607-1 Rating: moderate References: * bsc#1216588 Cross-References: * CVE-2023-46137 CVSS scores: * CVE-2023-46137 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-46137 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python3-Twisted fixes the following issues: * CVE-2023-46137: Fixed issue inside serializing pipelined HTTP requests. (bsc#1216588) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4607=1 openSUSE-SLE-15.4-2023-4607=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4607=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4607=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4607=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python3-Twisted-22.2.0-150400.15.1 * python-Twisted-doc-22.2.0-150400.15.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-Twisted-22.2.0-150400.15.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-Twisted-22.2.0-150400.15.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-Twisted-22.2.0-150400.15.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46137.html * https://bugzilla.suse.com/show_bug.cgi?id=1216588

1 0

SUSE-SU-2023:4608-1: moderate: Security update for python-Twisted
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Security update for python-Twisted Announcement ID: SUSE-SU-2023:4608-1 Rating: moderate References: * bsc#1216588 Cross-References: * CVE-2023-46137 CVSS scores: * CVE-2023-46137 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-46137 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP4 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-Twisted fixes the following issues: * CVE-2023-46137: Fixed issue inside serializing pipelined HTTP requests. (bsc#1216588) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4608=1 openSUSE-SLE-15.4-2023-4608=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4608=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-4608=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2023-4608=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 * openSUSE Leap 15.5 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 * Python 3 Module 15-SP4 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 * Python 3 Module 15-SP5 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46137.html * https://bugzilla.suse.com/show_bug.cgi?id=1216588

1 0

SUSE-RU-2023:4601-1: moderate: Recommended update for suseconnect-ng
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for suseconnect-ng Announcement ID: SUSE-RU-2023:4601-1 Rating: moderate References: * bsc#1170267 * bsc#1212799 * bsc#1214781 * jsc#PED-3179 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has three fixes can now be installed. ## Description: This update for suseconnect-ng fixes the following issues: * Update to version 1.4.0~git0.b0f7c25bfdfa * Added EULA display for addons (bsc#1170267) * Fix zypper argument for auto-agreeing licenses (bsc#1214781) * Enable building on SLE12 SP5 (jsc#PED-3179) * Fixed `provides` to work with yast2-registration on SLE15 SP4 (bsc#1212799) * Improve error message if product set more than once ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4601=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4601=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4601=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsuseconnect-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * libsuseconnect-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ruby-bindings-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libsuseconnect-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * libsuseconnect-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ruby-bindings-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1170267 * https://bugzilla.suse.com/show_bug.cgi?id=1212799 * https://bugzilla.suse.com/show_bug.cgi?id=1214781 * https://jira.suse.com/browse/PED-3179

1 0

SUSE-RU-2023:4602-1: moderate: Recommended update for suseconnect-ng
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for suseconnect-ng Announcement ID: SUSE-RU-2023:4602-1 Rating: moderate References: * bsc#1170267 * bsc#1212799 * bsc#1214781 * jsc#PED-3179 Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has three fixes can now be installed. ## Description: This update for suseconnect-ng fixes the following issues: * Update to version 1.4.0~git0.b0f7c25bfdfa * Added EULA display for addons (bsc#1170267) * Fix zypper argument for auto-agreeing licenses (bsc#1214781) * Enable building on SLE12 SP5 (jsc#PED-3179) * Fixed `provides` to work with yast2-registration on SLE15 SP4 (bsc#1212799) * Improve error message if product set more than once ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4602=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4602=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4602=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4602=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4602=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4602=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4602=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4602=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * libsuseconnect-debuginfo-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * libsuseconnect-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 * libsuseconnect-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1170267 * https://bugzilla.suse.com/show_bug.cgi?id=1212799 * https://bugzilla.suse.com/show_bug.cgi?id=1214781 * https://jira.suse.com/browse/PED-3179

1 0

SUSE-RU-2023:4604-1: moderate: Recommended update for selinux-policy
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for selinux-policy Announcement ID: SUSE-RU-2023:4604-1 Rating: moderate References: * bsc#1215405 Affected Products: * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that has one fix can now be installed. ## Description: This update for selinux-policy fixes the following issues: * Extend module list for targeted policy * timedatex * rrdcached * stratisd * ica (bsc#1215405) * fedoratp * stalld * rhcd * wireguard ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4604=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4604=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4604=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * selinux-policy-targeted-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-devel-20230511+git5.54d165ea-150400.4.18.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * selinux-policy-targeted-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-devel-20230511+git5.54d165ea-150400.4.18.1 * openSUSE Leap Micro 5.4 (noarch) * selinux-policy-targeted-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-20230511+git5.54d165ea-150400.4.18.1 * selinux-policy-devel-20230511+git5.54d165ea-150400.4.18.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215405

1 0

SUSE-RU-2023:4605-1: moderate: Recommended update for selinux-policy
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for selinux-policy Announcement ID: SUSE-RU-2023:4605-1 Rating: moderate References: Affected Products: * openSUSE Leap Micro 5.3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro for Rancher 5.3 An update that can now be installed. ## Description: This update for selinux-policy fixes the following issues: * Extend module list for targeted policy * timedatex * rrdcached * stratisd ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4605=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4605=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4605=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * selinux-policy-targeted-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-devel-20210716+git59.bb8b3de0-150400.5.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * selinux-policy-targeted-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-devel-20210716+git59.bb8b3de0-150400.5.9.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * selinux-policy-targeted-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-20210716+git59.bb8b3de0-150400.5.9.1 * selinux-policy-devel-20210716+git59.bb8b3de0-150400.5.9.1

1 0

SUSE-RU-2023:4600-1: low: Recommended update for desktop-file-utils
by maintenance＠opensuse.org 28 Nov '23

28 Nov '23

# Recommended update for desktop-file-utils Announcement ID: SUSE-RU-2023:4600-1 Rating: low References: * bsc#1216357 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for desktop-file-utils fixes the following issues: * Add support for the Desktop entry specification version 1.5 (bsc#1216357) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4600=1 openSUSE-SLE-15.4-2023-4600=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4600=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4600=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4600=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * desktop-file-utils-debugsource-0.26-150400.3.3.1 * desktop-file-utils-debuginfo-0.26-150400.3.3.1 * desktop-file-utils-0.26-150400.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * desktop-file-utils-debugsource-0.26-150400.3.3.1 * desktop-file-utils-debuginfo-0.26-150400.3.3.1 * desktop-file-utils-0.26-150400.3.3.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * desktop-file-utils-debugsource-0.26-150400.3.3.1 * desktop-file-utils-debuginfo-0.26-150400.3.3.1 * desktop-file-utils-0.26-150400.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * desktop-file-utils-debugsource-0.26-150400.3.3.1 * desktop-file-utils-debuginfo-0.26-150400.3.3.1 * desktop-file-utils-0.26-150400.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216357

1 0

SUSE-SU-2023:4594-1: important: Security update for gstreamer-plugins-bad
by maintenance＠opensuse.org 28 Nov '23

28 Nov '23

# Security update for gstreamer-plugins-bad Announcement ID: SUSE-SU-2023:4594-1 Rating: important References: * bsc#1215793 * bsc#1215796 Cross-References: * CVE-2023-40474 * CVE-2023-40476 CVSS scores: * CVE-2023-40474 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-40476 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for gstreamer-plugins-bad fixes the following issues: * CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796). * CVE-2023-40476: Fixed possible overflow using max_sub_layers_minus1 (bsc#1215793). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4594=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4594=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4594=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4594=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4594=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4594=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-doc-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * openSUSE Leap 15.3 (x86_64) * libgstinsertbin-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-32bit-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-32bit-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-32bit-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-32bit-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-32bit-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-32bit-debuginfo-1.16.3-150300.9.12.2 * openSUSE Leap 15.3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 * openSUSE Leap 15.3 (aarch64_ilp32) * libgstbadaudio-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-64bit-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-64bit-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-64bit-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-64bit-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-64bit-debuginfo-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-64bit-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-64bit-1.16.3-150300.9.12.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-1.16.3-150300.9.12.2 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-devel-1.16.3-150300.9.12.2 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstcodecparsers-1_0-0-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-1.16.3-150300.9.12.2 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.12.2 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.12.2 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstmpegts-1_0-0-1.16.3-150300.9.12.2 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgsturidownloader-1_0-0-1.16.3-150300.9.12.2 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.12.2 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.12.2 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.12.2 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.12.2 * SUSE Enterprise Storage 7.1 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.12.2 ## References: * https://www.suse.com/security/cve/CVE-2023-40474.html * https://www.suse.com/security/cve/CVE-2023-40476.html * https://bugzilla.suse.com/show_bug.cgi?id=1215793 * https://bugzilla.suse.com/show_bug.cgi?id=1215796

1 0

SUSE-RU-2023:4592-1: moderate: Recommended update for rust, rust1.74
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Recommended update for rust, rust1.74 Announcement ID: SUSE-RU-2023:4592-1 Rating: moderate References: * jsc#SLE-18626 Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for rust, rust1.74 fixes the following issues: # Version 1.74.0 (2023-11-16) ## Language * Codify that std::mem::Discriminant<T> does not depend on any lifetimes in T * Replace private_in_public lint with private_interfaces and private_bounds per RFC 2145. Read more in [RFC 2145(https://rust- lang.github.io/rfcs/2145-type-privacy.html). * Allow explicit #[repr(Rust)] * closure field capturing: don't depend on alignment of packed fields * Enable MIR-based drop-tracking for async blocks * Stabilize impl_trait_projections ## Compiler * stabilize combining +bundle and +whole-archive link modifiers * Stabilize PATH option for --print KIND=PATH * Enable ASAN/LSAN/TSAN for *-apple-ios-macabi * Promote loongarch64-unknown-none* to Tier 2 * Add i686-pc-windows-gnullvm as a tier 3 target ## Libraries * Implement From<OwnedFd/Handle> for ChildStdin/out/err * Implement From<{&,&mut} [T; N]> for Vec<T> where T: Clone * impl Step for IP addresses * Implement From<[T; N]> for Rc<[T]> and Arc<[T]> * impl TryFrom<char> for u16 * Stabilize io_error_other feature * Stabilize the Saturating type * Stabilize const_transmute_copy ## Stabilized APIs * core::num::Saturating * impl From<io::Stdout> for std::process::Stdio * impl From<io::Stderr> for std::process::Stdio * impl From<OwnedHandle> for std::process::Child{Stdin, Stdout, Stderr} * impl From<OwnedFd> for std::process::Child{Stdin, Stdout, Stderr} * std::ffi::OsString::from_encoded_bytes_unchecked * std::ffi::OsString::into_encoded_bytes * std::ffi::OsStr::from_encoded_bytes_unchecked * std::ffi::OsStr::as_encoded_bytes * std::io::Error::other * impl TryFrom<char> for u16 * impl<T: Clone, const N: usize> From<&[T; N]> for Vec<T> * impl<T: Clone, const N: usize> From<&mut [T; N]> for Vec<T> * impl<T, const N: usize> From<[T; N]> for Arc<[T]> * impl<T, const N: usize> From<[T; N]> for Rc<[T]> Thse APIs are now stable in const contexts: * core::mem::transmute_copy * str::is_ascii * ## Cargo * fix: Set MSRV for internal packages * config: merge lists in precedence order * fix(update): Clarify meaning of --aggressive as --recursive * fix(update): Make -p more convenient by being positional * feat(help): Add styling to help output * feat(pkgid): Allow incomplete versions when unambigious * feat: stabilize credential-process and registry-auth * feat(cli): Add '-n' to dry-run * Add support for target.'cfg(..)'.linker * Stabilize --keep-going * feat: Stabilize lints ## Rustdoc * Add warning block support in rustdoc * Accept additional user-defined syntax classes in fenced code blocks * rustdoc-search: add support for type parameters * rustdoc: show inner enum and struct in type definition for concrete type ## Compatibility Notes * Raise minimum supported Apple OS versions * make Cell::swap panic if the Cells partially overlap * Reject invalid crate names in --extern * Don't resolve generic impls that may be shadowed by dyn built-in impls * The new impl From<{&,&mut} [T; N]> for Vec<T> is known to cause some inference failures with overly-generic code. Changes in rust: * Update to version 1.74.0 - for details see the rust1.74 package ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4592=1 openSUSE-SLE-15.4-2023-4592=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4592=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4592=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4592=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * rust1.74-debuginfo-1.74.0-150400.9.3.1 * cargo1.74-debuginfo-1.74.0-150400.9.3.1 * cargo-1.74.0-150400.24.30.1 * cargo1.74-1.74.0-150400.9.3.1 * rust-1.74.0-150400.24.30.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586 nosrc) * rust1.74-1.74.0-150400.9.3.1 * openSUSE Leap 15.4 (nosrc) * rust1.74-test-1.74.0-150400.9.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rust1.74-debuginfo-1.74.0-150400.9.3.1 * cargo1.74-debuginfo-1.74.0-150400.9.3.1 * cargo-1.74.0-150400.24.30.1 * cargo1.74-1.74.0-150400.9.3.1 * rust-1.74.0-150400.24.30.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.74-1.74.0-150400.9.3.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * rust1.74-debuginfo-1.74.0-150400.9.3.1 * cargo1.74-debuginfo-1.74.0-150400.9.3.1 * cargo-1.74.0-150400.24.30.1 * cargo1.74-1.74.0-150400.9.3.1 * rust-1.74.0-150400.24.30.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.74-1.74.0-150400.9.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rust1.74-debuginfo-1.74.0-150400.9.3.1 * cargo1.74-debuginfo-1.74.0-150400.9.3.1 * cargo-1.74.0-150400.24.30.1 * cargo1.74-1.74.0-150400.9.3.1 * rust-1.74.0-150400.24.30.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.74-1.74.0-150400.9.3.1 ## References: * https://jira.suse.com/browse/SLE-18626

1 0

SUSE-SU-2023:4586-1: important: Security update for xerces-c
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for xerces-c Announcement ID: SUSE-SU-2023:4586-1 Rating: important References: * bsc#1216156 Cross-References: * CVE-2023-37536 CVSS scores: * CVE-2023-37536 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H * CVE-2023-37536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for xerces-c fixes the following issues: * CVE-2023-37536: Fixed an integer overflow that could have led to a out-of- bounds memory accesses (bsc#1216156). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4586=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4586=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4586=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4586=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4586=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4586=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4586=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4586=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4586=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4586=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * xerces-c-doc-3.2.3-150300.3.3.2 * libxerces-c-devel-3.2.3-150300.3.3.2 * xerces-c-debugsource-3.2.3-150300.3.3.2 * xerces-c-3.2.3-150300.3.3.2 * xerces-c-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-3.2.3-150300.3.3.2 * openSUSE Leap 15.3 (x86_64) * libxerces-c-3_2-32bit-3.2.3-150300.3.3.2 * libxerces-c-3_2-32bit-debuginfo-3.2.3-150300.3.3.2 * openSUSE Leap 15.3 (aarch64_ilp32) * libxerces-c-3_2-64bit-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-64bit-3.2.3-150300.3.3.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * xerces-c-doc-3.2.3-150300.3.3.2 * libxerces-c-devel-3.2.3-150300.3.3.2 * xerces-c-debugsource-3.2.3-150300.3.3.2 * xerces-c-3.2.3-150300.3.3.2 * xerces-c-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-3.2.3-150300.3.3.2 * openSUSE Leap 15.4 (x86_64) * libxerces-c-3_2-32bit-3.2.3-150300.3.3.2 * libxerces-c-3_2-32bit-debuginfo-3.2.3-150300.3.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * xerces-c-doc-3.2.3-150300.3.3.2 * libxerces-c-devel-3.2.3-150300.3.3.2 * xerces-c-debugsource-3.2.3-150300.3.3.2 * xerces-c-3.2.3-150300.3.3.2 * xerces-c-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-3.2.3-150300.3.3.2 * openSUSE Leap 15.5 (x86_64) * libxerces-c-3_2-32bit-3.2.3-150300.3.3.2 * libxerces-c-3_2-32bit-debuginfo-3.2.3-150300.3.3.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libxerces-c-devel-3.2.3-150300.3.3.2 * xerces-c-debugsource-3.2.3-150300.3.3.2 * xerces-c-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-3.2.3-150300.3.3.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libxerces-c-devel-3.2.3-150300.3.3.2 * xerces-c-debugsource-3.2.3-150300.3.3.2 * xerces-c-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-3.2.3-150300.3.3.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libxerces-c-devel-3.2.3-150300.3.3.2 * xerces-c-debugsource-3.2.3-150300.3.3.2 * xerces-c-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-3.2.3-150300.3.3.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libxerces-c-devel-3.2.3-150300.3.3.2 * xerces-c-debugsource-3.2.3-150300.3.3.2 * xerces-c-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-3.2.3-150300.3.3.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libxerces-c-devel-3.2.3-150300.3.3.2 * xerces-c-debugsource-3.2.3-150300.3.3.2 * xerces-c-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-3.2.3-150300.3.3.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libxerces-c-devel-3.2.3-150300.3.3.2 * xerces-c-debugsource-3.2.3-150300.3.3.2 * xerces-c-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-3.2.3-150300.3.3.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libxerces-c-devel-3.2.3-150300.3.3.2 * xerces-c-debugsource-3.2.3-150300.3.3.2 * xerces-c-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.3.2 * libxerces-c-3_2-3.2.3-150300.3.3.2 ## References: * https://www.suse.com/security/cve/CVE-2023-37536.html * https://bugzilla.suse.com/show_bug.cgi?id=1216156

1 0

SUSE-SU-2023:4587-1: important: Security update for vim
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for vim Announcement ID: SUSE-SU-2023:4587-1 Rating: important References: * bsc#1215940 * bsc#1216001 * bsc#1216167 * bsc#1216696 Cross-References: * CVE-2023-46246 * CVE-2023-5344 * CVE-2023-5441 * CVE-2023-5535 CVSS scores: * CVE-2023-46246 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-46246 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-5344 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-5344 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5344 ( NVD ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-5441 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5441 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-5441 ( NVD ): 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5535 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-5535 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-5535 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Desktop Applications Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for vim fixes the following issues: * CVE-2023-5344: Heap-based Buffer Overflow in vim prior to 9.0.1969 (bsc#1215940) * CVE-2023-5441: segfault in exmode when redrawing (bsc#1216001) * CVE-2023-5535: use-after-free from buf_contents_changed() (bsc#1216167) * CVE-2023-46246: Integer Overflow in :history command (bsc#1216696) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4587=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4587=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4587=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4587=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4587=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4587=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4587=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4587=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4587=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4587=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4587=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4587=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4587=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4587=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4587=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4587=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4587=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4587=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4587=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4587=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4587=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4587=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4587=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * vim-small-debuginfo-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * openSUSE Leap Micro 5.4 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * vim-small-debuginfo-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * vim-small-debuginfo-9.0.2103-150000.5.57.1 * openSUSE Leap 15.4 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * vim-small-debuginfo-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * vim-small-debuginfo-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * vim-small-debuginfo-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * vim-small-debuginfo-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * vim-small-debuginfo-9.0.2103-150000.5.57.1 * Basesystem Module 15-SP4 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * vim-small-debuginfo-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * vim-small-debuginfo-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * vim-small-debuginfo-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * vim-small-debuginfo-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * vim-small-debuginfo-9.0.2103-150000.5.57.1 * SUSE Enterprise Storage 7.1 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE CaaS Platform 4.0 (x86_64) * gvim-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * gvim-debuginfo-9.0.2103-150000.5.57.1 * vim-9.0.2103-150000.5.57.1 * SUSE CaaS Platform 4.0 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * vim-data-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * vim-small-debuginfo-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * vim-small-debuginfo-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * vim-data-common-9.0.2103-150000.5.57.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * vim-small-debuginfo-9.0.2103-150000.5.57.1 * vim-debuginfo-9.0.2103-150000.5.57.1 * vim-debugsource-9.0.2103-150000.5.57.1 * vim-small-9.0.2103-150000.5.57.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46246.html * https://www.suse.com/security/cve/CVE-2023-5344.html * https://www.suse.com/security/cve/CVE-2023-5441.html * https://www.suse.com/security/cve/CVE-2023-5535.html * https://bugzilla.suse.com/show_bug.cgi?id=1215940 * https://bugzilla.suse.com/show_bug.cgi?id=1216001 * https://bugzilla.suse.com/show_bug.cgi?id=1216167 * https://bugzilla.suse.com/show_bug.cgi?id=1216696

1 0

SUSE-SU-2023:4588-1: important: Security update for MozillaThunderbird
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for MozillaThunderbird Announcement ID: SUSE-SU-2023:4588-1 Rating: important References: * bsc#1217230 Cross-References: * CVE-2023-6204 * CVE-2023-6205 * CVE-2023-6206 * CVE-2023-6207 * CVE-2023-6208 * CVE-2023-6209 * CVE-2023-6212 CVSS scores: Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP4 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for MozillaThunderbird fixes the following issues: * Mozilla Thunderbird 115.5.0 MFSA 2023-52 (bsc#1217230) * CVE-2023-6204: Out-of-bound memory access in WebGL2 blitFramebuffer * CVE-2023-6205: Use-after-free in MessagePort::Entangled * CVE-2023-6206: Clickjacking permission prompts using the fullscreen transition * CVE-2023-6207: Use-after-free in ReadableByteStreamQueueEntry::Buffer * CVE-2023-6208: Using Selection API would copy contents into X11 primary selection. * CVE-2023-6209: Incorrect parsing of relative URLs starting with "///" * CVE-2023-6212: Memory safety bugs ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4588=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4588=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4588=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4588=1 * SUSE Linux Enterprise Workstation Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-4588=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-4588=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-debuginfo-115.5.0-150200.8.139.1 * MozillaThunderbird-debugsource-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-common-115.5.0-150200.8.139.1 * MozillaThunderbird-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-other-115.5.0-150200.8.139.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-debuginfo-115.5.0-150200.8.139.1 * MozillaThunderbird-debugsource-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-common-115.5.0-150200.8.139.1 * MozillaThunderbird-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-other-115.5.0-150200.8.139.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x) * MozillaThunderbird-debuginfo-115.5.0-150200.8.139.1 * MozillaThunderbird-debugsource-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-common-115.5.0-150200.8.139.1 * MozillaThunderbird-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-other-115.5.0-150200.8.139.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * MozillaThunderbird-debuginfo-115.5.0-150200.8.139.1 * MozillaThunderbird-debugsource-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-common-115.5.0-150200.8.139.1 * MozillaThunderbird-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-other-115.5.0-150200.8.139.1 * SUSE Linux Enterprise Workstation Extension 15 SP4 (x86_64) * MozillaThunderbird-debuginfo-115.5.0-150200.8.139.1 * MozillaThunderbird-debugsource-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-common-115.5.0-150200.8.139.1 * MozillaThunderbird-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-other-115.5.0-150200.8.139.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * MozillaThunderbird-debuginfo-115.5.0-150200.8.139.1 * MozillaThunderbird-debugsource-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-common-115.5.0-150200.8.139.1 * MozillaThunderbird-115.5.0-150200.8.139.1 * MozillaThunderbird-translations-other-115.5.0-150200.8.139.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6204.html * https://www.suse.com/security/cve/CVE-2023-6205.html * https://www.suse.com/security/cve/CVE-2023-6206.html * https://www.suse.com/security/cve/CVE-2023-6207.html * https://www.suse.com/security/cve/CVE-2023-6208.html * https://www.suse.com/security/cve/CVE-2023-6209.html * https://www.suse.com/security/cve/CVE-2023-6212.html * https://bugzilla.suse.com/show_bug.cgi?id=1217230

1 0

SUSE-SU-2023:4591-1: important: Security update for squashfs
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for squashfs Announcement ID: SUSE-SU-2023:4591-1 Rating: important References: * bsc#1189936 * bsc#1190531 * bsc#935380 Cross-References: * CVE-2015-4645 * CVE-2015-4646 * CVE-2021-40153 * CVE-2021-41072 CVSS scores: * CVE-2015-4645 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2015-4645 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2015-4646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2021-40153 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2021-40153 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2021-41072 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2021-41072 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for squashfs fixes the following issues: * CVE-2015-4645,CVE-2015-4646: Multiple buffer overflows fixed in squashfs- tools (bsc#935380) * CVE-2021-40153: Fixed an issue where an attacker might have been able to write a file outside of destination (bsc#1189936) * CVE-2021-41072: Fixed an issue where an attacker might have been able to write a file outside the destination directory via a symlink (bsc#1190531). update to 4.6.1: * Race condition which can cause corruption of the "fragment table" fixed. This is a regression introduced in August 2022, and it has been seen when tailend packing is used (-tailends option). * Fix build failure when the tools are being built without extended attribute (XATTRs) support. * Fix XATTR error message when an unrecognised prefix is found * Fix incorrect free of pointer when an unrecognised XATTR prefix is found. * Major improvements in extended attribute handling, pseudo file handling, and miscellaneous new options and improvements * Extended attribute handling improved in Mksquashfs and Sqfstar * New Pseudo file xattr definition to add extended attributes to files. * New xattrs-add Action to add extended attributes to files * Extended attribute handling improved in Unsquashfs * Other major improvements * Unsquashfs can now output Pseudo files to standard out. * Mksquashfs can now input Pseudo files from standard in. * Squashfs filesystems can now be converted (different block size compression etc) without unpacking to an intermediate filesystem or mounting, by piping the output of Unsquashfs to Mksquashfs. * Pseudo files are now supported by Sqfstar. * "Non-anchored" excludes are now supported by Unsquashfs. update to 4.5.1 (bsc#1190531, CVE-2021-41072): * This release adds Manpages for Mksquashfs(1), Unsquashfs(1), Sqfstar(1) and Sqfscat(1). * The -help text output from the utilities has been improved and extended as well (but the Manpages are now more comprehensive). * CVE-2021-41072 which is a writing outside of destination exploit, has been fixed. * The number of hard-links in the filesystem is now also displayed by Mksquashfs in the output summary. * The number of hard-links written by Unsquashfs is now also displayed in the output summary. * Unsquashfs will now write to a pre-existing destination directory, rather than aborting. * Unsquashfs now allows "." to used as the destination, to extract to the current directory. * The Unsquashfs progress bar now tracks empty files and hardlinks, in addition to data blocks. * -no-hardlinks option has been implemented for Sqfstar. * More sanity checking for "corrupted" filesystems, including checks for multiply linked directories and directory loops. * Options that may cause filesystems to be unmountable have been moved into a new "experts" category in the Mksquashfs help text (and Manpage). * Maximum cpiostyle filename limited to PATH_MAX. This prevents attempts to overflow the stack, or cause system calls to fail with a too long pathname. * Don't always use "max open file limit" when calculating length of queues, as a very large file limit can cause Unsquashfs to abort. Instead use the smaller of max open file limit and cache size. * Fix Mksquashfs silently ignoring Pseudo file definitions when appending. * Don't abort if no XATTR support has been built in, and there's XATTRs in the filesystem. This is a regression introduced in 2019 in Version 4.4. * Fix duplicate check when the last file block is sparse. update to 4.5: * Mksquashfs now supports "Actions". * New sqfstar command which will create a Squashfs image from a tar archive. * Tar style handling of source pathnames in Mksquashfs. * Cpio style handling of source pathnames in Mksquashfs. * New option to throttle the amount of CPU and I/O. * Mksquashfs now allows no source directory to be specified. * New Pseudo file "R" definition which allows a Regular file o be created with data stored within the Pseudo file. * Symbolic links are now followed in extract files * Unsquashfs now supports "exclude" files. * Max depth traversal option added. * Unsquashfs can now output a "Pseudo file" representing the input Squashfs filesystem. * New -one-file-system option in Mksquashfs. * New -no-hardlinks option in Mksquashfs. * Exit code in Unsquashfs changed to distinguish between non-fatal errors (exit 2), and fatal errors (exit 1). * Xattr id count added in Unsquashfs "-stat" output. * Unsquashfs "write outside directory" exploit fixed. * Error handling in Unsquashfs writer thread fixed. * Fix failure to truncate destination if appending aborted. * Prevent Mksquashfs reading the destination file. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4591=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4591=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4591=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4591=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4591=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4591=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4591=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4591=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4591=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4591=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4591=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4591=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4591=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4591=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4591=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4591=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4591=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4591=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4591=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4591=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4591=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4591=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4591=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Manager Proxy 4.2 (x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * squashfs-debuginfo-4.6.1-150300.3.3.1 * squashfs-debugsource-4.6.1-150300.3.3.1 * squashfs-4.6.1-150300.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2015-4645.html * https://www.suse.com/security/cve/CVE-2015-4646.html * https://www.suse.com/security/cve/CVE-2021-40153.html * https://www.suse.com/security/cve/CVE-2021-41072.html * https://bugzilla.suse.com/show_bug.cgi?id=1189936 * https://bugzilla.suse.com/show_bug.cgi?id=1190531 * https://bugzilla.suse.com/show_bug.cgi?id=935380

1 0

SUSE-SU-2023:4548-1: moderate: Security update for fdo-client
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for fdo-client Announcement ID: SUSE-SU-2023:4548-1 Rating: moderate References: * bsc#1216293 Affected Products: * openSUSE Leap Micro 5.3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro for Rancher 5.3 An update that has one security fix can now be installed. ## Description: This update for fdo-client fixes the following issues: * Removed build key via utils/keys_gen.sh. (bsc#1216293) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4548=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4548=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4548=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debuginfo-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debugsource-1.0.0+git20210816.baa09b5-150400.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debuginfo-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debugsource-1.0.0+git20210816.baa09b5-150400.3.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debuginfo-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debugsource-1.0.0+git20210816.baa09b5-150400.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216293

1 0

SUSE-SU-2023:4549-1: moderate: Security update for fdo-client
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for fdo-client Announcement ID: SUSE-SU-2023:4549-1 Rating: moderate References: * bsc#1216293 Affected Products: * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that has one security fix can now be installed. ## Description: This update for fdo-client fixes the following issues: * Removed build key via utils/keys_gen.sh. (bsc#1216293) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4549=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4549=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4549=1 ## Package List: * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debuginfo-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debugsource-1.0.0+git20210816.baa09b5-150400.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debuginfo-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debugsource-1.0.0+git20210816.baa09b5-150400.3.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debuginfo-1.0.0+git20210816.baa09b5-150400.3.3.1 * fdo-client-debugsource-1.0.0+git20210816.baa09b5-150400.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216293

1 0

SUSE-SU-2023:4544-1: important: Security update for squid
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for squid Announcement ID: SUSE-SU-2023:4544-1 Rating: important References: * bsc#1216926 * bsc#1217274 Cross-References: * CVE-2023-46728 CVSS scores: * CVE-2023-46728 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46728 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2023-46728: Remove gopher support (bsc#1216926). * Fixed overread in HTTP request header parsing (bsc#1217274). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4544=1 openSUSE-SLE-15.4-2023-4544=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4544=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4544=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4544=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * squid-5.7-150400.3.15.1 * squid-debuginfo-5.7-150400.3.15.1 * squid-debugsource-5.7-150400.3.15.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.15.1 * squid-debuginfo-5.7-150400.3.15.1 * squid-debugsource-5.7-150400.3.15.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.15.1 * squid-debuginfo-5.7-150400.3.15.1 * squid-debugsource-5.7-150400.3.15.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.15.1 * squid-debuginfo-5.7-150400.3.15.1 * squid-debugsource-5.7-150400.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46728.html * https://bugzilla.suse.com/show_bug.cgi?id=1216926 * https://bugzilla.suse.com/show_bug.cgi?id=1217274

1 0

openSUSE-RU-2023:0377-1: moderate: Recommended update for tryton, trytond, trytond_currency, trytond_purchase, trytond_stock
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

openSUSE Recommended Update: Recommended update for tryton, trytond, trytond_currency, trytond_purchase, trytond_stock ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0377-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tryton, trytond, trytond_currency, trytond_purchase, trytond_stock fixes the following issues: Changes in tryton: - Version 6.0.31 - Bugfix Release - Version 6.0.30 - Bugfix Release - Version 6.0.29 - Bugfix Release Changes in trytond: - Version 6.0.38 - Bugfix Release - Version 6.0.37 - Bugfix Release - Version 6.0.36 - Bugfix Release Changes in trytond_currency: - Version 6.0.5 - Bugfix Release - Version 6.0.5 - Bugfix Release - Version 6.0.5 - Bugfix Release - Version 6.0.4 - Bugfix Release Changes in trytond_purchase: - Version 6.0.14 - Bugfix Release - Version 6.0.13 - Bugfix Release - Version 6.0.12 - Bugfix Release Changes in trytond_stock: - Version 6.0.23 - Bugfix Release - Version 6.0.22 - Bugfix Release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-377=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): tryton-6.0.31-bp154.2.27.1 trytond-6.0.38-bp154.2.36.1 trytond_currency-6.0.5-bp154.2.6.1 trytond_purchase-6.0.14-bp154.2.18.1 trytond_stock-6.0.23-bp154.2.21.1 References:

1 0

SUSE-SU-2023:4562-1: moderate: Security update for poppler
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for poppler Announcement ID: SUSE-SU-2023:4562-1 Rating: moderate References: * bsc#1128114 * bsc#1214256 * bsc#1214726 Cross-References: * CVE-2019-9545 * CVE-2020-36023 * CVE-2022-37052 CVSS scores: * CVE-2019-9545 ( SUSE ): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2019-9545 ( NVD ): 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2020-36023 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2020-36023 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2022-37052 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves three vulnerabilities can now be installed. ## Description: This update for poppler fixes the following issues: * CVE-2019-9545: Fixed an uncontrolled recursion issue that could cause a crash (bsc#1128114). * CVE-2022-37052: Fixed a crash that could be triggered when opening a crafted file (bsc#1214726). * CVE-2020-36023: Fixed a stack bugger overflow in FoFiType1C:cvtGlyph (bsc#1214256). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4562=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4562=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4562=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4562=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4562=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4562=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libpoppler89-debuginfo-0.79.0-150200.3.26.1 * poppler-debugsource-0.79.0-150200.3.26.1 * libpoppler89-0.79.0-150200.3.26.1 * SUSE Manager Proxy 4.2 (x86_64) * libpoppler-glib-devel-0.79.0-150200.3.26.1 * libpoppler-cpp0-debuginfo-0.79.0-150200.3.26.1 * libpoppler-glib8-debuginfo-0.79.0-150200.3.26.1 * libpoppler89-debuginfo-0.79.0-150200.3.26.1 * libpoppler-devel-0.79.0-150200.3.26.1 * poppler-debugsource-0.79.0-150200.3.26.1 * libpoppler-cpp0-0.79.0-150200.3.26.1 * poppler-tools-0.79.0-150200.3.26.1 * libpoppler-glib8-0.79.0-150200.3.26.1 * poppler-tools-debuginfo-0.79.0-150200.3.26.1 * libpoppler89-0.79.0-150200.3.26.1 * typelib-1_0-Poppler-0_18-0.79.0-150200.3.26.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * libpoppler-glib-devel-0.79.0-150200.3.26.1 * libpoppler-cpp0-debuginfo-0.79.0-150200.3.26.1 * libpoppler-glib8-debuginfo-0.79.0-150200.3.26.1 * libpoppler89-debuginfo-0.79.0-150200.3.26.1 * libpoppler-devel-0.79.0-150200.3.26.1 * poppler-debugsource-0.79.0-150200.3.26.1 * libpoppler-cpp0-0.79.0-150200.3.26.1 * poppler-tools-0.79.0-150200.3.26.1 * libpoppler-glib8-0.79.0-150200.3.26.1 * poppler-tools-debuginfo-0.79.0-150200.3.26.1 * libpoppler89-0.79.0-150200.3.26.1 * typelib-1_0-Poppler-0_18-0.79.0-150200.3.26.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * libpoppler-glib-devel-0.79.0-150200.3.26.1 * libpoppler-cpp0-debuginfo-0.79.0-150200.3.26.1 * libpoppler-glib8-debuginfo-0.79.0-150200.3.26.1 * libpoppler89-debuginfo-0.79.0-150200.3.26.1 * libpoppler-devel-0.79.0-150200.3.26.1 * poppler-debugsource-0.79.0-150200.3.26.1 * libpoppler-cpp0-0.79.0-150200.3.26.1 * poppler-tools-0.79.0-150200.3.26.1 * libpoppler-glib8-0.79.0-150200.3.26.1 * poppler-tools-debuginfo-0.79.0-150200.3.26.1 * libpoppler89-0.79.0-150200.3.26.1 * typelib-1_0-Poppler-0_18-0.79.0-150200.3.26.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libpoppler89-debuginfo-0.79.0-150200.3.26.1 * libpoppler89-0.79.0-150200.3.26.1 * openSUSE Leap 15.4 (x86_64) * libpoppler89-32bit-0.79.0-150200.3.26.1 * libpoppler89-32bit-debuginfo-0.79.0-150200.3.26.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libpoppler89-debuginfo-0.79.0-150200.3.26.1 * poppler-debugsource-0.79.0-150200.3.26.1 * libpoppler89-0.79.0-150200.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2019-9545.html * https://www.suse.com/security/cve/CVE-2020-36023.html * https://www.suse.com/security/cve/CVE-2022-37052.html * https://bugzilla.suse.com/show_bug.cgi?id=1128114 * https://bugzilla.suse.com/show_bug.cgi?id=1214256 * https://bugzilla.suse.com/show_bug.cgi?id=1214726

1 0

openSUSE-RU-2023:0376-1: moderate: Recommended update for tryton, trytond, trytond_currency, trytond_purchase, trytond_stock
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

openSUSE Recommended Update: Recommended update for tryton, trytond, trytond_currency, trytond_purchase, trytond_stock ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0376-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tryton, trytond, trytond_currency, trytond_purchase, trytond_stock fixes the following issues: Changes in trytond_stock: - Version 6.0.23 - Bugfix Release - Version 6.0.22 - Bugfix Release Changes in trytond_currency: - Version 6.0.5 - Bugfix Release Changes in trytond: - Version 6.0.38 - Bugfix Release Changes in tryton: - Version 6.0.31 - Bugfix Release Changes in trytond_purchase: - Version 6.0.14 - Bugfix Release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-376=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): tryton-6.0.31-bp155.2.12.1 trytond-6.0.38-bp155.2.15.1 trytond_currency-6.0.5-bp155.2.6.1 trytond_purchase-6.0.14-bp155.2.9.1 trytond_stock-6.0.23-bp155.2.6.1 References:

1 0

SUSE-RU-2023:4556-1: moderate: Recommended update for libstorage-ng
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Recommended update for libstorage-ng Announcement ID: SUSE-RU-2023:4556-1 Rating: moderate References: * bsc#1215022 Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for libstorage-ng fixes the following issues: * Add support for MD RAID type LINEAR (bsc#1215022) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4556=1 SUSE-2023-4556=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4556=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4556=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libstorage-ng-debuginfo-4.5.101-150500.3.3.1 * libstorage-ng-ruby-debuginfo-4.5.101-150500.3.3.1 * libstorage-ng-utils-4.5.101-150500.3.3.1 * libstorage-ng-python3-debuginfo-4.5.101-150500.3.3.1 * libstorage-ng1-4.5.101-150500.3.3.1 * libstorage-ng-ruby-4.5.101-150500.3.3.1 * libstorage-ng-devel-4.5.101-150500.3.3.1 * libstorage-ng-utils-debuginfo-4.5.101-150500.3.3.1 * libstorage-ng1-debuginfo-4.5.101-150500.3.3.1 * libstorage-ng-python3-4.5.101-150500.3.3.1 * libstorage-ng-debugsource-4.5.101-150500.3.3.1 * openSUSE Leap 15.5 (noarch) * libstorage-ng-lang-4.5.101-150500.3.3.1 * libstorage-ng-integration-tests-4.5.101-150500.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libstorage-ng-debuginfo-4.5.101-150500.3.3.1 * libstorage-ng-ruby-debuginfo-4.5.101-150500.3.3.1 * libstorage-ng1-4.5.101-150500.3.3.1 * libstorage-ng-ruby-4.5.101-150500.3.3.1 * libstorage-ng-devel-4.5.101-150500.3.3.1 * libstorage-ng1-debuginfo-4.5.101-150500.3.3.1 * libstorage-ng-debugsource-4.5.101-150500.3.3.1 * Basesystem Module 15-SP5 (noarch) * libstorage-ng-lang-4.5.101-150500.3.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libstorage-ng-debuginfo-4.5.101-150500.3.3.1 * libstorage-ng-utils-debuginfo-4.5.101-150500.3.3.1 * libstorage-ng-utils-4.5.101-150500.3.3.1 * libstorage-ng-debugsource-4.5.101-150500.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215022

1 0

SUSE-SU-2023:4551-1: important: Security update for MozillaFirefox
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for MozillaFirefox Announcement ID: SUSE-SU-2023:4551-1 Rating: important References: * bsc#1216338 * bsc#1217230 Cross-References: * CVE-2023-5721 * CVE-2023-5724 * CVE-2023-5725 * CVE-2023-5726 * CVE-2023-5727 * CVE-2023-5728 * CVE-2023-5730 * CVE-2023-5732 CVSS scores: * CVE-2023-5721 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-5721 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2023-5724 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2023-5724 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5725 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2023-5725 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2023-5726 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2023-5726 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2023-5727 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2023-5727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2023-5728 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2023-5728 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5730 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-5730 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5732 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2023-5732 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: * Desktop Applications Module 15-SP4 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves eight vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: * Firefox Extended Support Release 115.5.0 ESR Placeholder changelog-entry (bsc#1217230) * Fixed: Various security fixes and other quality improvements. MFSA 2023-46 (bsc#1216338) * CVE-2023-5721: Queued up rendering could have allowed websites to clickjack * CVE-2023-5732: Address bar spoofing via bidirectional characters * CVE-2023-5724: Large WebGL draw could have led to a crash * CVE-2023-5725: WebExtensions could open arbitrary URLs * CVE-2023-5726: Full screen notification obscured by file open dialog on macOS * CVE-2023-5727: Download Protections were bypassed by .msix, .msixbundle, .appx, and .appxbundle files on Windows * CVE-2023-5728: Improper object tracking during GC in the JavaScript engine could have led to a crash. * CVE-2023-5730: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4551=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4551=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4551=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4551=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4551=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4551=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4551=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4551=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4551=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4551=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4551=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4551=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-branding-upstream-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * openSUSE Leap 15.4 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-branding-upstream-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * openSUSE Leap 15.5 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * Desktop Applications Module 15-SP4 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * Desktop Applications Module 15-SP5 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * MozillaFirefox-translations-other-115.5.0-150200.152.117.1 * MozillaFirefox-115.5.0-150200.152.117.1 * MozillaFirefox-translations-common-115.5.0-150200.152.117.1 * MozillaFirefox-debugsource-115.5.0-150200.152.117.1 * MozillaFirefox-debuginfo-115.5.0-150200.152.117.1 * SUSE Enterprise Storage 7.1 (noarch) * MozillaFirefox-devel-115.5.0-150200.152.117.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5721.html * https://www.suse.com/security/cve/CVE-2023-5724.html * https://www.suse.com/security/cve/CVE-2023-5725.html * https://www.suse.com/security/cve/CVE-2023-5726.html * https://www.suse.com/security/cve/CVE-2023-5727.html * https://www.suse.com/security/cve/CVE-2023-5728.html * https://www.suse.com/security/cve/CVE-2023-5730.html * https://www.suse.com/security/cve/CVE-2023-5732.html * https://bugzilla.suse.com/show_bug.cgi?id=1216338 * https://bugzilla.suse.com/show_bug.cgi?id=1217230

1 0

SUSE-SU-2023:4557-1: important: Security update for vim
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for vim Announcement ID: SUSE-SU-2023:4557-1 Rating: important References: * bsc#1214922 * bsc#1214924 * bsc#1214925 * bsc#1215004 * bsc#1215006 * bsc#1215033 * bsc#1215940 * bsc#1216001 * bsc#1216167 * bsc#1216696 Cross-References: * CVE-2023-46246 * CVE-2023-4733 * CVE-2023-4734 * CVE-2023-4735 * CVE-2023-4738 * CVE-2023-4752 * CVE-2023-4781 * CVE-2023-5344 * CVE-2023-5441 * CVE-2023-5535 CVSS scores: * CVE-2023-46246 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-46246 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-4733 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2023-4733 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4733 ( NVD ): 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4734 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-4734 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4734 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4735 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2023-4735 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4735 ( NVD ): 4.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2023-4738 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4738 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4738 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4752 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4781 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4781 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4781 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-5344 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-5344 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5344 ( NVD ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-5441 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5441 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-5441 ( NVD ): 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5535 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-5535 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-5535 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for vim fixes the following issues: Updated to version 9.0 with patch level 2103, fixes the following security problems * CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969 (bsc#1215940) * CVE-2023-5441: vim: segfault in exmode when redrawing (bsc#1216001) * CVE-2023-5535: vim: use-after-free from buf_contents_changed() (bsc#1216167) * CVE-2023-46246: vim: Integer Overflow in :history command (bsc#1216696) * CVE-2023-4738: vim: heap-buffer-overflow in vim_regsub_both (bsc#1214922) * CVE-2023-4735: vim: OOB Write ops.c (bsc#1214924) * CVE-2023-4734: vim: segmentation fault in function f_fullcommand (bsc#1214925) * CVE-2023-4733: vim: use-after-free in function buflist_altfpos (bsc#1215004) * CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp (bsc#1215006) * CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both (bsc#1215033) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4557=1 openSUSE-SLE-15.5-2023-4557=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4557=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4557=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4557=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * vim-9.0.2103-150500.20.6.1 * gvim-debuginfo-9.0.2103-150500.20.6.1 * vim-small-9.0.2103-150500.20.6.1 * gvim-9.0.2103-150500.20.6.1 * vim-debugsource-9.0.2103-150500.20.6.1 * vim-small-debuginfo-9.0.2103-150500.20.6.1 * vim-debuginfo-9.0.2103-150500.20.6.1 * openSUSE Leap 15.5 (noarch) * vim-data-9.0.2103-150500.20.6.1 * vim-data-common-9.0.2103-150500.20.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * vim-data-common-9.0.2103-150500.20.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * vim-debugsource-9.0.2103-150500.20.6.1 * vim-small-debuginfo-9.0.2103-150500.20.6.1 * vim-small-9.0.2103-150500.20.6.1 * vim-debuginfo-9.0.2103-150500.20.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * vim-9.0.2103-150500.20.6.1 * vim-small-9.0.2103-150500.20.6.1 * vim-debugsource-9.0.2103-150500.20.6.1 * vim-small-debuginfo-9.0.2103-150500.20.6.1 * vim-debuginfo-9.0.2103-150500.20.6.1 * Basesystem Module 15-SP5 (noarch) * vim-data-9.0.2103-150500.20.6.1 * vim-data-common-9.0.2103-150500.20.6.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * vim-debugsource-9.0.2103-150500.20.6.1 * gvim-debuginfo-9.0.2103-150500.20.6.1 * vim-debuginfo-9.0.2103-150500.20.6.1 * gvim-9.0.2103-150500.20.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46246.html * https://www.suse.com/security/cve/CVE-2023-4733.html * https://www.suse.com/security/cve/CVE-2023-4734.html * https://www.suse.com/security/cve/CVE-2023-4735.html * https://www.suse.com/security/cve/CVE-2023-4738.html * https://www.suse.com/security/cve/CVE-2023-4752.html * https://www.suse.com/security/cve/CVE-2023-4781.html * https://www.suse.com/security/cve/CVE-2023-5344.html * https://www.suse.com/security/cve/CVE-2023-5441.html * https://www.suse.com/security/cve/CVE-2023-5535.html * https://bugzilla.suse.com/show_bug.cgi?id=1214922 * https://bugzilla.suse.com/show_bug.cgi?id=1214924 * https://bugzilla.suse.com/show_bug.cgi?id=1214925 * https://bugzilla.suse.com/show_bug.cgi?id=1215004 * https://bugzilla.suse.com/show_bug.cgi?id=1215006 * https://bugzilla.suse.com/show_bug.cgi?id=1215033 * https://bugzilla.suse.com/show_bug.cgi?id=1215940 * https://bugzilla.suse.com/show_bug.cgi?id=1216001 * https://bugzilla.suse.com/show_bug.cgi?id=1216167 * https://bugzilla.suse.com/show_bug.cgi?id=1216696

1 0

SUSE-RU-2023:4552-1: moderate: Recommended update for libteam
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Recommended update for libteam Announcement ID: SUSE-RU-2023:4552-1 Rating: moderate References: * bsc#1215527 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for libteam fixes the following issues: * Document ARP Ping link_watch.vlanid option in teamd.conf man page (bsc#1215527) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4552=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4552=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4552=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4552=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4552=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4552=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4552=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4552=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4552=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libteamdctl0-debuginfo-1.27-150000.4.12.1 * python-libteam-debuginfo-1.27-150000.4.12.1 * python-libteam-1.27-150000.4.12.1 * libteamdctl0-1.27-150000.4.12.1 * libteam-devel-1.27-150000.4.12.1 * libteam-debuginfo-1.27-150000.4.12.1 * libteam-tools-1.27-150000.4.12.1 * libteam-tools-debuginfo-1.27-150000.4.12.1 * libteam5-1.27-150000.4.12.1 * libteam-debugsource-1.27-150000.4.12.1 * libteam5-debuginfo-1.27-150000.4.12.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libteamdctl0-debuginfo-1.27-150000.4.12.1 * python-libteam-debuginfo-1.27-150000.4.12.1 * python-libteam-1.27-150000.4.12.1 * libteamdctl0-1.27-150000.4.12.1 * libteam-devel-1.27-150000.4.12.1 * libteam-debuginfo-1.27-150000.4.12.1 * libteam-tools-1.27-150000.4.12.1 * libteam-tools-debuginfo-1.27-150000.4.12.1 * libteam5-1.27-150000.4.12.1 * libteam-debugsource-1.27-150000.4.12.1 * libteam5-debuginfo-1.27-150000.4.12.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libteamdctl0-debuginfo-1.27-150000.4.12.1 * libteamdctl0-1.27-150000.4.12.1 * libteam-devel-1.27-150000.4.12.1 * libteam-debuginfo-1.27-150000.4.12.1 * libteam5-1.27-150000.4.12.1 * libteam-debugsource-1.27-150000.4.12.1 * libteam5-debuginfo-1.27-150000.4.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libteamdctl0-debuginfo-1.27-150000.4.12.1 * libteamdctl0-1.27-150000.4.12.1 * libteam-devel-1.27-150000.4.12.1 * libteam-debuginfo-1.27-150000.4.12.1 * libteam5-1.27-150000.4.12.1 * libteam-debugsource-1.27-150000.4.12.1 * libteam5-debuginfo-1.27-150000.4.12.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libteam-tools-debuginfo-1.27-150000.4.12.1 * libteam-debugsource-1.27-150000.4.12.1 * libteam-debuginfo-1.27-150000.4.12.1 * libteam-tools-1.27-150000.4.12.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libteam-tools-debuginfo-1.27-150000.4.12.1 * libteam-debugsource-1.27-150000.4.12.1 * libteam-debuginfo-1.27-150000.4.12.1 * libteam-tools-1.27-150000.4.12.1 * SUSE Manager Proxy 4.2 (x86_64) * libteamdctl0-debuginfo-1.27-150000.4.12.1 * python-libteam-debuginfo-1.27-150000.4.12.1 * python-libteam-1.27-150000.4.12.1 * libteamdctl0-1.27-150000.4.12.1 * libteam-devel-1.27-150000.4.12.1 * libteam-debuginfo-1.27-150000.4.12.1 * libteam-tools-1.27-150000.4.12.1 * libteam-tools-debuginfo-1.27-150000.4.12.1 * libteam5-1.27-150000.4.12.1 * libteam-debugsource-1.27-150000.4.12.1 * libteam5-debuginfo-1.27-150000.4.12.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * libteamdctl0-debuginfo-1.27-150000.4.12.1 * python-libteam-debuginfo-1.27-150000.4.12.1 * python-libteam-1.27-150000.4.12.1 * libteamdctl0-1.27-150000.4.12.1 * libteam-devel-1.27-150000.4.12.1 * libteam-debuginfo-1.27-150000.4.12.1 * libteam-tools-1.27-150000.4.12.1 * libteam-tools-debuginfo-1.27-150000.4.12.1 * libteam5-1.27-150000.4.12.1 * libteam-debugsource-1.27-150000.4.12.1 * libteam5-debuginfo-1.27-150000.4.12.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * libteamdctl0-debuginfo-1.27-150000.4.12.1 * python-libteam-debuginfo-1.27-150000.4.12.1 * python-libteam-1.27-150000.4.12.1 * libteamdctl0-1.27-150000.4.12.1 * libteam-devel-1.27-150000.4.12.1 * libteam-debuginfo-1.27-150000.4.12.1 * libteam-tools-1.27-150000.4.12.1 * libteam-tools-debuginfo-1.27-150000.4.12.1 * libteam5-1.27-150000.4.12.1 * libteam-debugsource-1.27-150000.4.12.1 * libteam5-debuginfo-1.27-150000.4.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215527

1 0

SUSE-RU-2023:4555-1: moderate: Recommended update for libstorage-ng
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Recommended update for libstorage-ng Announcement ID: SUSE-RU-2023:4555-1 Rating: moderate References: * bsc#1215022 Affected Products: * Basesystem Module 15-SP4 * Development Tools Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for libstorage-ng fixes the following issues: * Add support for MD RAID type LINEAR (bsc#1215022) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4555=1 openSUSE-SLE-15.4-2023-4555=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4555=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4555=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libstorage-ng-python3-4.4.94-150400.3.3.1 * libstorage-ng1-4.4.94-150400.3.3.1 * libstorage-ng-utils-debuginfo-4.4.94-150400.3.3.1 * libstorage-ng1-debuginfo-4.4.94-150400.3.3.1 * libstorage-ng-utils-4.4.94-150400.3.3.1 * libstorage-ng-devel-4.4.94-150400.3.3.1 * libstorage-ng-ruby-debuginfo-4.4.94-150400.3.3.1 * libstorage-ng-debugsource-4.4.94-150400.3.3.1 * libstorage-ng-debuginfo-4.4.94-150400.3.3.1 * libstorage-ng-ruby-4.4.94-150400.3.3.1 * libstorage-ng-python3-debuginfo-4.4.94-150400.3.3.1 * libstorage-ng-integration-tests-4.4.94-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * libstorage-ng-lang-4.4.94-150400.3.3.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libstorage-ng1-4.4.94-150400.3.3.1 * libstorage-ng1-debuginfo-4.4.94-150400.3.3.1 * libstorage-ng-devel-4.4.94-150400.3.3.1 * libstorage-ng-ruby-debuginfo-4.4.94-150400.3.3.1 * libstorage-ng-debugsource-4.4.94-150400.3.3.1 * libstorage-ng-debuginfo-4.4.94-150400.3.3.1 * libstorage-ng-ruby-4.4.94-150400.3.3.1 * Basesystem Module 15-SP4 (noarch) * libstorage-ng-lang-4.4.94-150400.3.3.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libstorage-ng-utils-debuginfo-4.4.94-150400.3.3.1 * libstorage-ng-debugsource-4.4.94-150400.3.3.1 * libstorage-ng-utils-4.4.94-150400.3.3.1 * libstorage-ng-debuginfo-4.4.94-150400.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215022

1 0

SUSE-SU-2023:4561-1: important: Security update for webkit2gtk3
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for webkit2gtk3 Announcement ID: SUSE-SU-2023:4561-1 Rating: important References: * bsc#1217210 Cross-References: * CVE-2022-32919 * CVE-2022-32933 * CVE-2022-46705 * CVE-2022-46725 * CVE-2023-32359 * CVE-2023-41983 * CVE-2023-42852 CVSS scores: * CVE-2022-46705 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2022-46705 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2022-46725 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2022-46725 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2023-32359 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-32359 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-41983 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-41983 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-42852 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-42852 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP4 * Desktop Applications Module 15-SP5 * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves seven vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: Update to version 2.42.2 (bsc#1217210): * CVE-2023-41983: Processing web content may lead to a denial-of-service. * CVE-2023-42852: Processing web content may lead to arbitrary code execution. Already previously fixed: * CVE-2022-32919: Visiting a website that frames malicious content may lead to UI spoofing (fixed already in 2.38.4). * CVE-2022-32933: A website may be able to track the websites a user visited in private browsing mode (fixed already in 2.38.0). * CVE-2022-46705: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4). * CVE-2022-46725: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4). * CVE-2023-32359: A userâ€™s password may be read aloud by a text-to-speech accessibility feature (fixed already in 2.42.0). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4561=1 openSUSE-SLE-15.4-2023-4561=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4561=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4561=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4561=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4561=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4561=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4561=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4561=1 ## Package List: * openSUSE Leap 15.4 (noarch) * WebKitGTK-4.1-lang-2.42.2-150400.4.64.2 * WebKitGTK-4.0-lang-2.42.2-150400.4.64.2 * WebKitGTK-6.0-lang-2.42.2-150400.4.64.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * typelib-1_0-WebKit2-4_0-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-minibrowser-debuginfo-2.42.2-150400.4.64.2 * webkit2gtk4-minibrowser-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-debuginfo-2.42.2-150400.4.64.2 * webkit2gtk4-devel-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2-4_1-2.42.2-150400.4.64.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.42.2-150400.4.64.2 * webkit-jsc-6.0-2.42.2-150400.4.64.2 * webkit2gtk-4_0-injected-bundles-2.42.2-150400.4.64.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.42.2-150400.4.64.2 * libwebkitgtk-6_0-4-2.42.2-150400.4.64.2 * webkit2gtk4-debugsource-2.42.2-150400.4.64.2 * webkit-jsc-6.0-debuginfo-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.42.2-150400.4.64.2 * webkit2gtk-4_1-injected-bundles-2.42.2-150400.4.64.2 * webkit-jsc-4.1-2.42.2-150400.4.64.2 * typelib-1_0-JavaScriptCore-4_1-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-2.42.2-150400.4.64.2 * webkit2gtk3-minibrowser-debuginfo-2.42.2-150400.4.64.2 * webkit-jsc-4-2.42.2-150400.4.64.2 * libwebkitgtk-6_0-4-debuginfo-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2WebExtension-4_1-2.42.2-150400.4.64.2 * webkit2gtk3-minibrowser-2.42.2-150400.4.64.2 * webkitgtk-6_0-injected-bundles-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-devel-2.42.2-150400.4.64.2 * libjavascriptcoregtk-6_0-1-2.42.2-150400.4.64.2 * webkit2gtk4-minibrowser-2.42.2-150400.4.64.2 * typelib-1_0-WebKit-6_0-2.42.2-150400.4.64.2 * typelib-1_0-WebKitWebProcessExtension-6_0-2.42.2-150400.4.64.2 * webkit2gtk3-devel-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-debugsource-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2WebExtension-4_0-2.42.2-150400.4.64.2 * typelib-1_0-JavaScriptCore-4_0-2.42.2-150400.4.64.2 * webkit-jsc-4.1-debuginfo-2.42.2-150400.4.64.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.42.2-150400.4.64.2 * typelib-1_0-JavaScriptCore-6_0-2.42.2-150400.4.64.2 * webkit2gtk3-debugsource-2.42.2-150400.4.64.2 * webkit-jsc-4-debuginfo-2.42.2-150400.4.64.2 * webkitgtk-6_0-injected-bundles-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-minibrowser-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-2.42.2-150400.4.64.2 * openSUSE Leap 15.4 (x86_64) * libjavascriptcoregtk-4_1-0-32bit-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-32bit-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-32bit-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-32bit-2.42.2-150400.4.64.2 * openSUSE Leap 15.4 (aarch64_ilp32) * libwebkit2gtk-4_0-37-64bit-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-64bit-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-64bit-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-64bit-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-64bit-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.42.2-150400.4.64.2 * openSUSE Leap 15.5 (noarch) * WebKitGTK-4.1-lang-2.42.2-150400.4.64.2 * WebKitGTK-4.0-lang-2.42.2-150400.4.64.2 * WebKitGTK-6.0-lang-2.42.2-150400.4.64.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * typelib-1_0-WebKit2-4_0-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-minibrowser-debuginfo-2.42.2-150400.4.64.2 * webkit2gtk4-minibrowser-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-debuginfo-2.42.2-150400.4.64.2 * webkit2gtk4-devel-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2-4_1-2.42.2-150400.4.64.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.42.2-150400.4.64.2 * webkit-jsc-6.0-2.42.2-150400.4.64.2 * webkit2gtk-4_0-injected-bundles-2.42.2-150400.4.64.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.42.2-150400.4.64.2 * libwebkitgtk-6_0-4-2.42.2-150400.4.64.2 * webkit2gtk4-debugsource-2.42.2-150400.4.64.2 * webkit-jsc-6.0-debuginfo-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.42.2-150400.4.64.2 * webkit2gtk-4_1-injected-bundles-2.42.2-150400.4.64.2 * webkit-jsc-4.1-2.42.2-150400.4.64.2 * typelib-1_0-JavaScriptCore-4_1-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-2.42.2-150400.4.64.2 * webkit-jsc-4-2.42.2-150400.4.64.2 * webkit2gtk3-minibrowser-debuginfo-2.42.2-150400.4.64.2 * libwebkitgtk-6_0-4-debuginfo-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2WebExtension-4_1-2.42.2-150400.4.64.2 * webkit2gtk3-minibrowser-2.42.2-150400.4.64.2 * webkitgtk-6_0-injected-bundles-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-devel-2.42.2-150400.4.64.2 * libjavascriptcoregtk-6_0-1-2.42.2-150400.4.64.2 * webkit2gtk4-minibrowser-2.42.2-150400.4.64.2 * typelib-1_0-WebKit-6_0-2.42.2-150400.4.64.2 * typelib-1_0-WebKitWebProcessExtension-6_0-2.42.2-150400.4.64.2 * webkit2gtk3-devel-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-debugsource-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2WebExtension-4_0-2.42.2-150400.4.64.2 * typelib-1_0-JavaScriptCore-4_0-2.42.2-150400.4.64.2 * webkit-jsc-4.1-debuginfo-2.42.2-150400.4.64.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.42.2-150400.4.64.2 * typelib-1_0-JavaScriptCore-6_0-2.42.2-150400.4.64.2 * webkit2gtk3-debugsource-2.42.2-150400.4.64.2 * webkit-jsc-4-debuginfo-2.42.2-150400.4.64.2 * webkitgtk-6_0-injected-bundles-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-minibrowser-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-2.42.2-150400.4.64.2 * openSUSE Leap 15.5 (x86_64) * libjavascriptcoregtk-4_1-0-32bit-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-32bit-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-32bit-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-32bit-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.42.2-150400.4.64.2 * openSUSE Leap 15.5 (aarch64_ilp32) * libwebkit2gtk-4_0-37-64bit-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-64bit-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-64bit-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-64bit-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-64bit-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.42.2-150400.4.64.2 * Basesystem Module 15-SP4 (noarch) * WebKitGTK-4.0-lang-2.42.2-150400.4.64.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * typelib-1_0-WebKit2-4_0-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-devel-2.42.2-150400.4.64.2 * webkit2gtk-4_0-injected-bundles-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-2.42.2-150400.4.64.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2WebExtension-4_0-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-debugsource-2.42.2-150400.4.64.2 * typelib-1_0-JavaScriptCore-4_0-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.42.2-150400.4.64.2 * Basesystem Module 15-SP5 (noarch) * WebKitGTK-4.0-lang-2.42.2-150400.4.64.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * typelib-1_0-WebKit2-4_0-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-devel-2.42.2-150400.4.64.2 * webkit2gtk-4_0-injected-bundles-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_0-37-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-2.42.2-150400.4.64.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2WebExtension-4_0-2.42.2-150400.4.64.2 * webkit2gtk3-soup2-debugsource-2.42.2-150400.4.64.2 * typelib-1_0-JavaScriptCore-4_0-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.42.2-150400.4.64.2 * Desktop Applications Module 15-SP4 (noarch) * WebKitGTK-4.1-lang-2.42.2-150400.4.64.2 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-debugsource-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-debuginfo-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2WebExtension-4_1-2.42.2-150400.4.64.2 * webkit2gtk-4_1-injected-bundles-2.42.2-150400.4.64.2 * typelib-1_0-JavaScriptCore-4_1-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2-4_1-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-2.42.2-150400.4.64.2 * webkit2gtk3-devel-2.42.2-150400.4.64.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-2.42.2-150400.4.64.2 * Desktop Applications Module 15-SP5 (noarch) * WebKitGTK-4.1-lang-2.42.2-150400.4.64.2 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-debugsource-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-debuginfo-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2WebExtension-4_1-2.42.2-150400.4.64.2 * webkit2gtk-4_1-injected-bundles-2.42.2-150400.4.64.2 * typelib-1_0-JavaScriptCore-4_1-2.42.2-150400.4.64.2 * typelib-1_0-WebKit2-4_1-2.42.2-150400.4.64.2 * libwebkit2gtk-4_1-0-2.42.2-150400.4.64.2 * webkit2gtk3-devel-2.42.2-150400.4.64.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.42.2-150400.4.64.2 * libjavascriptcoregtk-4_1-0-2.42.2-150400.4.64.2 * Development Tools Module 15-SP4 (noarch) * WebKitGTK-6.0-lang-2.42.2-150400.4.64.2 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libjavascriptcoregtk-6_0-1-debuginfo-2.42.2-150400.4.64.2 * libwebkitgtk-6_0-4-2.42.2-150400.4.64.2 * webkit2gtk4-debugsource-2.42.2-150400.4.64.2 * webkitgtk-6_0-injected-bundles-2.42.2-150400.4.64.2 * libjavascriptcoregtk-6_0-1-2.42.2-150400.4.64.2 * libwebkitgtk-6_0-4-debuginfo-2.42.2-150400.4.64.2 * Development Tools Module 15-SP5 (noarch) * WebKitGTK-6.0-lang-2.42.2-150400.4.64.2 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libjavascriptcoregtk-6_0-1-debuginfo-2.42.2-150400.4.64.2 * libwebkitgtk-6_0-4-2.42.2-150400.4.64.2 * webkit2gtk4-debugsource-2.42.2-150400.4.64.2 * webkitgtk-6_0-injected-bundles-2.42.2-150400.4.64.2 * libjavascriptcoregtk-6_0-1-2.42.2-150400.4.64.2 * libwebkitgtk-6_0-4-debuginfo-2.42.2-150400.4.64.2 ## References: * https://www.suse.com/security/cve/CVE-2022-32919.html * https://www.suse.com/security/cve/CVE-2022-32933.html * https://www.suse.com/security/cve/CVE-2022-46705.html * https://www.suse.com/security/cve/CVE-2022-46725.html * https://www.suse.com/security/cve/CVE-2023-32359.html * https://www.suse.com/security/cve/CVE-2023-41983.html * https://www.suse.com/security/cve/CVE-2023-42852.html * https://bugzilla.suse.com/show_bug.cgi?id=1217210

1 0

SUSE-SU-2023:4566-1: important: Security update for slurm_23_02
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for slurm_23_02 Announcement ID: SUSE-SU-2023:4566-1 Rating: important References: * bsc#1216207 * bsc#1216869 Cross-References: * CVE-2023-41914 CVSS scores: * CVE-2023-41914 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-41914 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * HPC Module 15-SP4 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for slurm_23_02 fixes the following issues: * CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents (bsc#1216207). Bug fixes: * Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4566=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4566=1 * HPC Module 15-SP4 zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2023-4566=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4566=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4566=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-pam_slurm-23.02.6-150300.7.14.1 * libnss_slurm2_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-node-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-rest-23.02.6-150300.7.14.1 * slurm_23_02-cray-23.02.6-150300.7.14.1 * slurm_23_02-torque-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-plugin-ext-sensors-rrd-23.02.6-150300.7.14.1 * slurm_23_02-debugsource-23.02.6-150300.7.14.1 * slurm_23_02-rest-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-cray-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-hdf5-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-auth-none-23.02.6-150300.7.14.1 * slurm_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-devel-23.02.6-150300.7.14.1 * slurm_23_02-plugins-23.02.6-150300.7.14.1 * libnss_slurm2_23_02-23.02.6-150300.7.14.1 * slurm_23_02-auth-none-debuginfo-23.02.6-150300.7.14.1 * perl-slurm_23_02-23.02.6-150300.7.14.1 * slurm_23_02-lua-23.02.6-150300.7.14.1 * slurm_23_02-torque-23.02.6-150300.7.14.1 * slurm_23_02-testsuite-23.02.6-150300.7.14.1 * slurm_23_02-slurmdbd-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-pam_slurm-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-munge-debuginfo-23.02.6-150300.7.14.1 * libslurm39-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-lua-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-munge-23.02.6-150300.7.14.1 * slurm_23_02-sview-23.02.6-150300.7.14.1 * slurm_23_02-sview-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-23.02.6-150300.7.14.1 * slurm_23_02-sql-23.02.6-150300.7.14.1 * libslurm39-23.02.6-150300.7.14.1 * libpmi0_23_02-23.02.6-150300.7.14.1 * slurm_23_02-hdf5-23.02.6-150300.7.14.1 * slurm_23_02-node-23.02.6-150300.7.14.1 * slurm_23_02-sql-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-slurmdbd-23.02.6-150300.7.14.1 * libpmi0_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-plugins-debuginfo-23.02.6-150300.7.14.1 * perl-slurm_23_02-debuginfo-23.02.6-150300.7.14.1 * openSUSE Leap 15.3 (noarch) * slurm_23_02-config-23.02.6-150300.7.14.1 * slurm_23_02-doc-23.02.6-150300.7.14.1 * slurm_23_02-openlava-23.02.6-150300.7.14.1 * slurm_23_02-sjstat-23.02.6-150300.7.14.1 * slurm_23_02-seff-23.02.6-150300.7.14.1 * slurm_23_02-webdoc-23.02.6-150300.7.14.1 * slurm_23_02-config-man-23.02.6-150300.7.14.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-pam_slurm-23.02.6-150300.7.14.1 * libnss_slurm2_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-node-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-rest-23.02.6-150300.7.14.1 * slurm_23_02-cray-23.02.6-150300.7.14.1 * slurm_23_02-torque-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-plugin-ext-sensors-rrd-23.02.6-150300.7.14.1 * slurm_23_02-debugsource-23.02.6-150300.7.14.1 * slurm_23_02-rest-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-cray-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-auth-none-23.02.6-150300.7.14.1 * slurm_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-devel-23.02.6-150300.7.14.1 * slurm_23_02-plugins-23.02.6-150300.7.14.1 * libnss_slurm2_23_02-23.02.6-150300.7.14.1 * slurm_23_02-auth-none-debuginfo-23.02.6-150300.7.14.1 * perl-slurm_23_02-23.02.6-150300.7.14.1 * slurm_23_02-lua-23.02.6-150300.7.14.1 * slurm_23_02-torque-23.02.6-150300.7.14.1 * slurm_23_02-slurmdbd-debuginfo-23.02.6-150300.7.14.1 * perl-slurm_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-pam_slurm-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-munge-debuginfo-23.02.6-150300.7.14.1 * libslurm39-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-lua-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-munge-23.02.6-150300.7.14.1 * slurm_23_02-sview-23.02.6-150300.7.14.1 * slurm_23_02-sview-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-23.02.6-150300.7.14.1 * slurm_23_02-sql-23.02.6-150300.7.14.1 * libslurm39-23.02.6-150300.7.14.1 * libpmi0_23_02-23.02.6-150300.7.14.1 * slurm_23_02-sql-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-slurmdbd-23.02.6-150300.7.14.1 * libpmi0_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-plugins-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-node-23.02.6-150300.7.14.1 * openSUSE Leap 15.4 (noarch) * slurm_23_02-config-23.02.6-150300.7.14.1 * slurm_23_02-webdoc-23.02.6-150300.7.14.1 * slurm_23_02-doc-23.02.6-150300.7.14.1 * slurm_23_02-config-man-23.02.6-150300.7.14.1 * HPC Module 15-SP4 (aarch64 x86_64) * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-pam_slurm-23.02.6-150300.7.14.1 * libnss_slurm2_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-node-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-rest-23.02.6-150300.7.14.1 * slurm_23_02-cray-23.02.6-150300.7.14.1 * slurm_23_02-torque-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-plugin-ext-sensors-rrd-23.02.6-150300.7.14.1 * slurm_23_02-debugsource-23.02.6-150300.7.14.1 * slurm_23_02-rest-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-cray-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-auth-none-23.02.6-150300.7.14.1 * slurm_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-devel-23.02.6-150300.7.14.1 * slurm_23_02-plugins-23.02.6-150300.7.14.1 * libnss_slurm2_23_02-23.02.6-150300.7.14.1 * slurm_23_02-auth-none-debuginfo-23.02.6-150300.7.14.1 * perl-slurm_23_02-23.02.6-150300.7.14.1 * slurm_23_02-lua-23.02.6-150300.7.14.1 * slurm_23_02-torque-23.02.6-150300.7.14.1 * slurm_23_02-slurmdbd-debuginfo-23.02.6-150300.7.14.1 * perl-slurm_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-pam_slurm-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-munge-debuginfo-23.02.6-150300.7.14.1 * libslurm39-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-lua-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-munge-23.02.6-150300.7.14.1 * slurm_23_02-sview-23.02.6-150300.7.14.1 * slurm_23_02-sview-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-23.02.6-150300.7.14.1 * slurm_23_02-sql-23.02.6-150300.7.14.1 * libslurm39-23.02.6-150300.7.14.1 * libpmi0_23_02-23.02.6-150300.7.14.1 * slurm_23_02-sql-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-slurmdbd-23.02.6-150300.7.14.1 * libpmi0_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-plugins-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-node-23.02.6-150300.7.14.1 * HPC Module 15-SP4 (noarch) * slurm_23_02-config-23.02.6-150300.7.14.1 * slurm_23_02-webdoc-23.02.6-150300.7.14.1 * slurm_23_02-doc-23.02.6-150300.7.14.1 * slurm_23_02-config-man-23.02.6-150300.7.14.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-pam_slurm-23.02.6-150300.7.14.1 * libnss_slurm2_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-node-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-rest-23.02.6-150300.7.14.1 * slurm_23_02-cray-23.02.6-150300.7.14.1 * slurm_23_02-torque-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-plugin-ext-sensors-rrd-23.02.6-150300.7.14.1 * slurm_23_02-debugsource-23.02.6-150300.7.14.1 * slurm_23_02-rest-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-cray-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-auth-none-23.02.6-150300.7.14.1 * slurm_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-devel-23.02.6-150300.7.14.1 * slurm_23_02-plugins-23.02.6-150300.7.14.1 * libnss_slurm2_23_02-23.02.6-150300.7.14.1 * slurm_23_02-auth-none-debuginfo-23.02.6-150300.7.14.1 * perl-slurm_23_02-23.02.6-150300.7.14.1 * slurm_23_02-lua-23.02.6-150300.7.14.1 * slurm_23_02-torque-23.02.6-150300.7.14.1 * slurm_23_02-slurmdbd-debuginfo-23.02.6-150300.7.14.1 * perl-slurm_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-pam_slurm-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-munge-debuginfo-23.02.6-150300.7.14.1 * libslurm39-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-lua-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-munge-23.02.6-150300.7.14.1 * slurm_23_02-sview-23.02.6-150300.7.14.1 * slurm_23_02-sview-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-23.02.6-150300.7.14.1 * slurm_23_02-sql-23.02.6-150300.7.14.1 * libslurm39-23.02.6-150300.7.14.1 * libpmi0_23_02-23.02.6-150300.7.14.1 * slurm_23_02-sql-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-slurmdbd-23.02.6-150300.7.14.1 * libpmi0_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-plugins-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-node-23.02.6-150300.7.14.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * slurm_23_02-config-23.02.6-150300.7.14.1 * slurm_23_02-webdoc-23.02.6-150300.7.14.1 * slurm_23_02-doc-23.02.6-150300.7.14.1 * slurm_23_02-config-man-23.02.6-150300.7.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-pam_slurm-23.02.6-150300.7.14.1 * libnss_slurm2_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-node-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-rest-23.02.6-150300.7.14.1 * slurm_23_02-cray-23.02.6-150300.7.14.1 * slurm_23_02-torque-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-plugin-ext-sensors-rrd-23.02.6-150300.7.14.1 * slurm_23_02-debugsource-23.02.6-150300.7.14.1 * slurm_23_02-rest-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-cray-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-auth-none-23.02.6-150300.7.14.1 * slurm_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-devel-23.02.6-150300.7.14.1 * slurm_23_02-plugins-23.02.6-150300.7.14.1 * libnss_slurm2_23_02-23.02.6-150300.7.14.1 * slurm_23_02-auth-none-debuginfo-23.02.6-150300.7.14.1 * perl-slurm_23_02-23.02.6-150300.7.14.1 * slurm_23_02-lua-23.02.6-150300.7.14.1 * slurm_23_02-torque-23.02.6-150300.7.14.1 * slurm_23_02-slurmdbd-debuginfo-23.02.6-150300.7.14.1 * perl-slurm_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-pam_slurm-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-munge-debuginfo-23.02.6-150300.7.14.1 * libslurm39-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-lua-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-munge-23.02.6-150300.7.14.1 * slurm_23_02-sview-23.02.6-150300.7.14.1 * slurm_23_02-sview-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-23.02.6-150300.7.14.1 * slurm_23_02-sql-23.02.6-150300.7.14.1 * libslurm39-23.02.6-150300.7.14.1 * libpmi0_23_02-23.02.6-150300.7.14.1 * slurm_23_02-sql-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-slurmdbd-23.02.6-150300.7.14.1 * libpmi0_23_02-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-plugins-debuginfo-23.02.6-150300.7.14.1 * slurm_23_02-node-23.02.6-150300.7.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * slurm_23_02-config-23.02.6-150300.7.14.1 * slurm_23_02-webdoc-23.02.6-150300.7.14.1 * slurm_23_02-doc-23.02.6-150300.7.14.1 * slurm_23_02-config-man-23.02.6-150300.7.14.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41914.html * https://bugzilla.suse.com/show_bug.cgi?id=1216207 * https://bugzilla.suse.com/show_bug.cgi?id=1216869

1 0

SUSE-SU-2023:4571-1: important: Security update for openvswitch
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for openvswitch Announcement ID: SUSE-SU-2023:4571-1 Rating: important References: * bsc#1216002 Cross-References: * CVE-2023-5366 CVSS scores: * CVE-2023-5366 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2023-5366 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 An update that solves one vulnerability can now be installed. ## Description: This update for openvswitch fixes the following issues: * CVE-2023-5366: Fixed missing masks on a final stage with ports trie (bsc#1216002). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4571=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4571=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4571=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4571=1 ## Package List: * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * openvswitch-ipsec-2.13.2-150200.9.25.1 * libopenvswitch-2_13-0-debuginfo-2.13.2-150200.9.25.1 * openvswitch-debuginfo-2.13.2-150200.9.25.1 * ovn-central-20.03.1-150200.9.25.1 * openvswitch-debugsource-2.13.2-150200.9.25.1 * ovn-vtep-20.03.1-150200.9.25.1 * openvswitch-test-2.13.2-150200.9.25.1 * ovn-host-20.03.1-150200.9.25.1 * ovn-devel-20.03.1-150200.9.25.1 * libopenvswitch-2_13-0-2.13.2-150200.9.25.1 * ovn-20.03.1-150200.9.25.1 * libovn-20_03-0-debuginfo-20.03.1-150200.9.25.1 * ovn-docker-20.03.1-150200.9.25.1 * openvswitch-2.13.2-150200.9.25.1 * openvswitch-vtep-debuginfo-2.13.2-150200.9.25.1 * openvswitch-vtep-2.13.2-150200.9.25.1 * python3-ovs-2.13.2-150200.9.25.1 * libovn-20_03-0-20.03.1-150200.9.25.1 * openvswitch-test-debuginfo-2.13.2-150200.9.25.1 * openvswitch-devel-2.13.2-150200.9.25.1 * openvswitch-pki-2.13.2-150200.9.25.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * openvswitch-ipsec-2.13.2-150200.9.25.1 * libopenvswitch-2_13-0-debuginfo-2.13.2-150200.9.25.1 * openvswitch-debuginfo-2.13.2-150200.9.25.1 * ovn-central-20.03.1-150200.9.25.1 * openvswitch-debugsource-2.13.2-150200.9.25.1 * ovn-vtep-20.03.1-150200.9.25.1 * openvswitch-test-2.13.2-150200.9.25.1 * ovn-host-20.03.1-150200.9.25.1 * ovn-devel-20.03.1-150200.9.25.1 * libopenvswitch-2_13-0-2.13.2-150200.9.25.1 * ovn-20.03.1-150200.9.25.1 * libovn-20_03-0-debuginfo-20.03.1-150200.9.25.1 * ovn-docker-20.03.1-150200.9.25.1 * openvswitch-2.13.2-150200.9.25.1 * openvswitch-vtep-debuginfo-2.13.2-150200.9.25.1 * openvswitch-vtep-2.13.2-150200.9.25.1 * python3-ovs-2.13.2-150200.9.25.1 * libovn-20_03-0-20.03.1-150200.9.25.1 * openvswitch-test-debuginfo-2.13.2-150200.9.25.1 * openvswitch-devel-2.13.2-150200.9.25.1 * openvswitch-pki-2.13.2-150200.9.25.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libopenvswitch-2_13-0-debuginfo-2.13.2-150200.9.25.1 * libovn-20_03-0-debuginfo-20.03.1-150200.9.25.1 * libovn-20_03-0-20.03.1-150200.9.25.1 * libopenvswitch-2_13-0-2.13.2-150200.9.25.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * openvswitch-ipsec-2.13.2-150200.9.25.1 * libopenvswitch-2_13-0-debuginfo-2.13.2-150200.9.25.1 * openvswitch-debuginfo-2.13.2-150200.9.25.1 * ovn-central-20.03.1-150200.9.25.1 * openvswitch-debugsource-2.13.2-150200.9.25.1 * ovn-vtep-20.03.1-150200.9.25.1 * openvswitch-test-2.13.2-150200.9.25.1 * ovn-host-20.03.1-150200.9.25.1 * ovn-devel-20.03.1-150200.9.25.1 * libopenvswitch-2_13-0-2.13.2-150200.9.25.1 * ovn-20.03.1-150200.9.25.1 * libovn-20_03-0-debuginfo-20.03.1-150200.9.25.1 * ovn-docker-20.03.1-150200.9.25.1 * openvswitch-2.13.2-150200.9.25.1 * openvswitch-vtep-debuginfo-2.13.2-150200.9.25.1 * openvswitch-vtep-2.13.2-150200.9.25.1 * python3-ovs-2.13.2-150200.9.25.1 * libovn-20_03-0-20.03.1-150200.9.25.1 * openvswitch-test-debuginfo-2.13.2-150200.9.25.1 * openvswitch-devel-2.13.2-150200.9.25.1 * openvswitch-pki-2.13.2-150200.9.25.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5366.html * https://bugzilla.suse.com/show_bug.cgi?id=1216002

1 0

SUSE-SU-2023:4572-1: important: Security update for java-1_8_0-ibm
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for java-1_8_0-ibm Announcement ID: SUSE-SU-2023:4572-1 Rating: important References: * bsc#1204264 * bsc#1216339 * bsc#1216374 * bsc#1216379 * bsc#1216640 * bsc#1217214 Cross-References: * CVE-2023-22025 * CVE-2023-22067 * CVE-2023-22081 * CVE-2023-5676 CVSS scores: * CVE-2023-22025 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22025 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22067 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22067 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22081 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-22081 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-5676 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2023-5676 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Legacy Module 15-SP4 * Legacy Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities and has two security fixes can now be installed. ## Description: This update for java-1_8_0-ibm fixes the following issues: * Update to Java 8.0 Service Refresh 8 Fix Pack 15: * Oracle October 17 2023 CPU [bsc#1216640] Security fixes: * CVE-2023-22081: Fixed enhanced TLS connections (bsc#1216374) * CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379) * CVE-2023-22025: Fixed memory corruption issue on x86_64 with AVX-512 (bsc#1216339) * CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214) Bug fixes: * IBM Java idlj compiler switch definition because IBM java idlj seems to confuse char and wchar for typedef types (bsc#1204264). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4572=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4572=1 * Legacy Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2023-4572=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2023-4572=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4572=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4572=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4572=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4572=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4572=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4572=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4572=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4572=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4572=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. ## Package List: * openSUSE Leap 15.4 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * openSUSE Leap 15.4 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-32bit-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-devel-32bit-1.8.0_sr8.15-150000.3.83.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-demo-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-src-1.8.0_sr8.15-150000.3.83.1 * openSUSE Leap 15.5 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * openSUSE Leap 15.5 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-32bit-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-devel-32bit-1.8.0_sr8.15-150000.3.83.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-demo-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-src-1.8.0_sr8.15-150000.3.83.1 * Legacy Module 15-SP4 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * Legacy Module 15-SP4 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * Legacy Module 15-SP4 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * Legacy Module 15-SP5 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * Legacy Module 15-SP5 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * Legacy Module 15-SP5 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * SUSE Enterprise Storage 7.1 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * SUSE Enterprise Storage 7.1 (x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 * SUSE CaaS Platform 4.0 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.15-150000.3.83.1 * SUSE CaaS Platform 4.0 (x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.15-150000.3.83.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.15-150000.3.83.1 ## References: * https://www.suse.com/security/cve/CVE-2023-22025.html * https://www.suse.com/security/cve/CVE-2023-22067.html * https://www.suse.com/security/cve/CVE-2023-22081.html * https://www.suse.com/security/cve/CVE-2023-5676.html * https://bugzilla.suse.com/show_bug.cgi?id=1204264 * https://bugzilla.suse.com/show_bug.cgi?id=1216339 * https://bugzilla.suse.com/show_bug.cgi?id=1216374 * https://bugzilla.suse.com/show_bug.cgi?id=1216379 * https://bugzilla.suse.com/show_bug.cgi?id=1216640 * https://bugzilla.suse.com/show_bug.cgi?id=1217214

1 0

SUSE-SU-2023:4573-1: important: Security update for openvswitch
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for openvswitch Announcement ID: SUSE-SU-2023:4573-1 Rating: important References: * bsc#1216002 Cross-References: * CVE-2023-5366 CVSS scores: * CVE-2023-5366 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2023-5366 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * Legacy Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openvswitch fixes the following issues: * CVE-2023-5366: Fixed missing masks on a final stage with ports trie (bsc#1216002). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4573=1 openSUSE-SLE-15.4-2023-4573=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4573=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2023-4573=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4573=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4573=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4573=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * openvswitch-vtep-2.14.2-150400.24.14.2 * python3-ovs-2.14.2-150400.24.14.2 * ovn-20.06.2-150400.24.14.2 * ovn-central-debuginfo-20.06.2-150400.24.14.2 * ovn-vtep-debuginfo-20.06.2-150400.24.14.2 * ovn-host-20.06.2-150400.24.14.2 * openvswitch-debuginfo-2.14.2-150400.24.14.2 * openvswitch-2.14.2-150400.24.14.2 * ovn-debuginfo-20.06.2-150400.24.14.2 * libopenvswitch-2_14-0-2.14.2-150400.24.14.2 * ovn-devel-20.06.2-150400.24.14.2 * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.14.2 * openvswitch-debugsource-2.14.2-150400.24.14.2 * libovn-20_06-0-20.06.2-150400.24.14.2 * openvswitch-test-2.14.2-150400.24.14.2 * ovn-central-20.06.2-150400.24.14.2 * ovn-docker-20.06.2-150400.24.14.2 * openvswitch-devel-2.14.2-150400.24.14.2 * openvswitch-test-debuginfo-2.14.2-150400.24.14.2 * ovn-host-debuginfo-20.06.2-150400.24.14.2 * openvswitch-vtep-debuginfo-2.14.2-150400.24.14.2 * ovn-vtep-20.06.2-150400.24.14.2 * openvswitch-pki-2.14.2-150400.24.14.2 * openvswitch-ipsec-2.14.2-150400.24.14.2 * libovn-20_06-0-debuginfo-20.06.2-150400.24.14.2 * openSUSE Leap 15.4 (noarch) * openvswitch-doc-2.14.2-150400.24.14.2 * ovn-doc-20.06.2-150400.24.14.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * openvswitch-vtep-2.14.2-150400.24.14.2 * python3-ovs-2.14.2-150400.24.14.2 * ovn-20.06.2-150400.24.14.2 * ovn-central-debuginfo-20.06.2-150400.24.14.2 * ovn-vtep-debuginfo-20.06.2-150400.24.14.2 * ovn-host-20.06.2-150400.24.14.2 * openvswitch-debuginfo-2.14.2-150400.24.14.2 * openvswitch-2.14.2-150400.24.14.2 * ovn-debuginfo-20.06.2-150400.24.14.2 * libopenvswitch-2_14-0-2.14.2-150400.24.14.2 * ovn-devel-20.06.2-150400.24.14.2 * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.14.2 * openvswitch-debugsource-2.14.2-150400.24.14.2 * libovn-20_06-0-20.06.2-150400.24.14.2 * openvswitch-test-2.14.2-150400.24.14.2 * ovn-central-20.06.2-150400.24.14.2 * ovn-docker-20.06.2-150400.24.14.2 * openvswitch-devel-2.14.2-150400.24.14.2 * openvswitch-test-debuginfo-2.14.2-150400.24.14.2 * ovn-host-debuginfo-20.06.2-150400.24.14.2 * openvswitch-vtep-debuginfo-2.14.2-150400.24.14.2 * ovn-vtep-20.06.2-150400.24.14.2 * openvswitch-pki-2.14.2-150400.24.14.2 * openvswitch-ipsec-2.14.2-150400.24.14.2 * libovn-20_06-0-debuginfo-20.06.2-150400.24.14.2 * openSUSE Leap 15.5 (noarch) * openvswitch-doc-2.14.2-150400.24.14.2 * ovn-doc-20.06.2-150400.24.14.2 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openvswitch-vtep-2.14.2-150400.24.14.2 * python3-ovs-2.14.2-150400.24.14.2 * ovn-20.06.2-150400.24.14.2 * ovn-central-debuginfo-20.06.2-150400.24.14.2 * ovn-vtep-debuginfo-20.06.2-150400.24.14.2 * ovn-host-20.06.2-150400.24.14.2 * openvswitch-debuginfo-2.14.2-150400.24.14.2 * openvswitch-2.14.2-150400.24.14.2 * ovn-debuginfo-20.06.2-150400.24.14.2 * libopenvswitch-2_14-0-2.14.2-150400.24.14.2 * ovn-devel-20.06.2-150400.24.14.2 * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.14.2 * openvswitch-debugsource-2.14.2-150400.24.14.2 * libovn-20_06-0-20.06.2-150400.24.14.2 * openvswitch-test-2.14.2-150400.24.14.2 * ovn-central-20.06.2-150400.24.14.2 * ovn-docker-20.06.2-150400.24.14.2 * openvswitch-devel-2.14.2-150400.24.14.2 * openvswitch-test-debuginfo-2.14.2-150400.24.14.2 * ovn-host-debuginfo-20.06.2-150400.24.14.2 * openvswitch-vtep-debuginfo-2.14.2-150400.24.14.2 * ovn-vtep-20.06.2-150400.24.14.2 * openvswitch-pki-2.14.2-150400.24.14.2 * openvswitch-ipsec-2.14.2-150400.24.14.2 * libovn-20_06-0-debuginfo-20.06.2-150400.24.14.2 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * openvswitch-debugsource-2.14.2-150400.24.14.2 * python3-ovs-2.14.2-150400.24.14.2 * openvswitch-debuginfo-2.14.2-150400.24.14.2 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * openvswitch-debugsource-2.14.2-150400.24.14.2 * python3-ovs-2.14.2-150400.24.14.2 * openvswitch-debuginfo-2.14.2-150400.24.14.2 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * openvswitch-vtep-2.14.2-150400.24.14.2 * python3-ovs-2.14.2-150400.24.14.2 * ovn-20.06.2-150400.24.14.2 * ovn-central-debuginfo-20.06.2-150400.24.14.2 * ovn-vtep-debuginfo-20.06.2-150400.24.14.2 * ovn-host-20.06.2-150400.24.14.2 * openvswitch-debuginfo-2.14.2-150400.24.14.2 * openvswitch-2.14.2-150400.24.14.2 * ovn-debuginfo-20.06.2-150400.24.14.2 * libopenvswitch-2_14-0-2.14.2-150400.24.14.2 * ovn-devel-20.06.2-150400.24.14.2 * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.14.2 * openvswitch-debugsource-2.14.2-150400.24.14.2 * libovn-20_06-0-20.06.2-150400.24.14.2 * openvswitch-test-2.14.2-150400.24.14.2 * ovn-central-20.06.2-150400.24.14.2 * ovn-docker-20.06.2-150400.24.14.2 * openvswitch-devel-2.14.2-150400.24.14.2 * openvswitch-test-debuginfo-2.14.2-150400.24.14.2 * ovn-host-debuginfo-20.06.2-150400.24.14.2 * openvswitch-vtep-debuginfo-2.14.2-150400.24.14.2 * ovn-vtep-20.06.2-150400.24.14.2 * openvswitch-pki-2.14.2-150400.24.14.2 * openvswitch-ipsec-2.14.2-150400.24.14.2 * libovn-20_06-0-debuginfo-20.06.2-150400.24.14.2 ## References: * https://www.suse.com/security/cve/CVE-2023-5366.html * https://bugzilla.suse.com/show_bug.cgi?id=1216002

1 0

SUSE-SU-2023:4574-1: important: Security update for gstreamer-plugins-bad
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for gstreamer-plugins-bad Announcement ID: SUSE-SU-2023:4574-1 Rating: important References: * bsc#1215793 * bsc#1215796 Cross-References: * CVE-2023-40474 * CVE-2023-40476 CVSS scores: * CVE-2023-40474 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-40476 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for gstreamer-plugins-bad fixes the following issues: * CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796). * CVE-2023-40476: Fixed possible overflow using max_sub_layers_minus1 (bsc#1215793). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4574=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4574=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4574=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4574=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgstphotography-1_0-0-1.22.0-150500.3.9.1 * libgstplay-1_0-0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-debugsource-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-debuginfo-1.22.0-150500.3.9.1 * libgstplay-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstplayer-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstphotography-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstplayer-1_0-0-1.22.0-150500.3.9.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * typelib-1_0-GstBadAudio-1_0-1.22.0-150500.3.9.1 * libgstsctp-1_0-0-debuginfo-1.22.0-150500.3.9.1 * typelib-1_0-GstMpegts-1_0-1.22.0-150500.3.9.1 * libgstinsertbin-1_0-0-1.22.0-150500.3.9.1 * libgstwebrtc-1_0-0-1.22.0-150500.3.9.1 * libgstbadaudio-1_0-0-debuginfo-1.22.0-150500.3.9.1 * typelib-1_0-GstPlayer-1_0-1.22.0-150500.3.9.1 * typelib-1_0-GstPlay-1_0-1.22.0-150500.3.9.1 * libgsttranscoder-1_0-0-1.22.0-150500.3.9.1 * libgstadaptivedemux-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstwayland-1_0-0-1.22.0-150500.3.9.1 * libgstisoff-1_0-0-debuginfo-1.22.0-150500.3.9.1 * typelib-1_0-GstCodecs-1_0-1.22.0-150500.3.9.1 * typelib-1_0-GstInsertBin-1_0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-chromaprint-1.22.0-150500.3.9.1 * libgstmpegts-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstvulkan-1_0-0-debuginfo-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.22.0-150500.3.9.1 * libgsttranscoder-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstwebrtcnice-1_0-0-1.22.0-150500.3.9.1 * libgstwebrtcnice-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgsturidownloader-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstadaptivedemux-1_0-0-1.22.0-150500.3.9.1 * libgstcodecparsers-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstva-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstvulkan-1_0-0-1.22.0-150500.3.9.1 * libgstcodecs-1_0-0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-debuginfo-1.22.0-150500.3.9.1 * libgstwebrtc-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstsctp-1_0-0-1.22.0-150500.3.9.1 * libgstva-1_0-0-1.22.0-150500.3.9.1 * libgstcuda-1_0-0-1.22.0-150500.3.9.1 * typelib-1_0-CudaGst-1_0-1.22.0-150500.3.9.1 * libgsturidownloader-1_0-0-1.22.0-150500.3.9.1 * libgstwayland-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstmpegts-1_0-0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-1.22.0-150500.3.9.1 * libgstcuda-1_0-0-debuginfo-1.22.0-150500.3.9.1 * typelib-1_0-GstVa-1_0-1.22.0-150500.3.9.1 * typelib-1_0-GstCuda-1_0-1.22.0-150500.3.9.1 * typelib-1_0-GstWebRTC-1_0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-debugsource-1.22.0-150500.3.9.1 * libgstbasecamerabinsrc-1_0-0-1.22.0-150500.3.9.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstbadaudio-1_0-0-1.22.0-150500.3.9.1 * libgstinsertbin-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstcodecparsers-1_0-0-1.22.0-150500.3.9.1 * libgstisoff-1_0-0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-devel-1.22.0-150500.3.9.1 * libgstcodecs-1_0-0-debuginfo-1.22.0-150500.3.9.1 * Desktop Applications Module 15-SP5 (noarch) * gstreamer-plugins-bad-lang-1.22.0-150500.3.9.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libgsttranscoder-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgsttranscoder-1_0-0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-debugsource-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-debuginfo-1.22.0-150500.3.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * typelib-1_0-GstBadAudio-1_0-1.22.0-150500.3.9.1 * libgstsctp-1_0-0-debuginfo-1.22.0-150500.3.9.1 * typelib-1_0-GstMpegts-1_0-1.22.0-150500.3.9.1 * libgstinsertbin-1_0-0-1.22.0-150500.3.9.1 * gstreamer-transcoder-devel-1.22.0-150500.3.9.1 * libgstwebrtc-1_0-0-1.22.0-150500.3.9.1 * libgstbadaudio-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstplay-1_0-0-debuginfo-1.22.0-150500.3.9.1 * typelib-1_0-GstPlayer-1_0-1.22.0-150500.3.9.1 * typelib-1_0-GstPlay-1_0-1.22.0-150500.3.9.1 * libgsttranscoder-1_0-0-1.22.0-150500.3.9.1 * libgstadaptivedemux-1_0-0-debuginfo-1.22.0-150500.3.9.1 * typelib-1_0-GstVulkan-1_0-1.22.0-150500.3.9.1 * libgstwayland-1_0-0-1.22.0-150500.3.9.1 * libgstisoff-1_0-0-debuginfo-1.22.0-150500.3.9.1 * typelib-1_0-GstCodecs-1_0-1.22.0-150500.3.9.1 * typelib-1_0-GstInsertBin-1_0-1.22.0-150500.3.9.1 * typelib-1_0-GstVulkanXCB-1_0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-chromaprint-1.22.0-150500.3.9.1 * libgstmpegts-1_0-0-debuginfo-1.22.0-150500.3.9.1 * typelib-1_0-GstVulkanWayland-1_0-1.22.0-150500.3.9.1 * libgstvulkan-1_0-0-debuginfo-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.22.0-150500.3.9.1 * libgstplayer-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstphotography-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgsttranscoder-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstwebrtcnice-1_0-0-1.22.0-150500.3.9.1 * libgstwebrtcnice-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgsturidownloader-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstadaptivedemux-1_0-0-1.22.0-150500.3.9.1 * libgstcodecparsers-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstva-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstvulkan-1_0-0-1.22.0-150500.3.9.1 * libgstcodecs-1_0-0-1.22.0-150500.3.9.1 * libgstphotography-1_0-0-1.22.0-150500.3.9.1 * libgstplay-1_0-0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-debuginfo-1.22.0-150500.3.9.1 * libgstwebrtc-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstsctp-1_0-0-1.22.0-150500.3.9.1 * libgstva-1_0-0-1.22.0-150500.3.9.1 * libgstcuda-1_0-0-1.22.0-150500.3.9.1 * typelib-1_0-CudaGst-1_0-1.22.0-150500.3.9.1 * libgsturidownloader-1_0-0-1.22.0-150500.3.9.1 * libgstwayland-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstmpegts-1_0-0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-1.22.0-150500.3.9.1 * libgstcuda-1_0-0-debuginfo-1.22.0-150500.3.9.1 * typelib-1_0-GstVa-1_0-1.22.0-150500.3.9.1 * libgstplayer-1_0-0-1.22.0-150500.3.9.1 * typelib-1_0-GstCuda-1_0-1.22.0-150500.3.9.1 * typelib-1_0-GstWebRTC-1_0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-debugsource-1.22.0-150500.3.9.1 * gstreamer-transcoder-debuginfo-1.22.0-150500.3.9.1 * libgstbasecamerabinsrc-1_0-0-1.22.0-150500.3.9.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.22.0-150500.3.9.1 * libgstbadaudio-1_0-0-1.22.0-150500.3.9.1 * typelib-1_0-GstTranscoder-1_0-1.22.0-150500.3.9.1 * libgstinsertbin-1_0-0-debuginfo-1.22.0-150500.3.9.1 * gstreamer-transcoder-1.22.0-150500.3.9.1 * libgstcodecparsers-1_0-0-1.22.0-150500.3.9.1 * libgstisoff-1_0-0-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-devel-1.22.0-150500.3.9.1 * libgstcodecs-1_0-0-debuginfo-1.22.0-150500.3.9.1 * openSUSE Leap 15.5 (x86_64) * libgstphotography-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstadaptivedemux-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstadaptivedemux-1_0-0-32bit-1.22.0-150500.3.9.1 * libgsturidownloader-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-chromaprint-32bit-1.22.0-150500.3.9.1 * libgstmpegts-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstva-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstsctp-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstmpegts-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstplay-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstcuda-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstsctp-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstwebrtc-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstplayer-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstva-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstbasecamerabinsrc-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstinsertbin-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstbadaudio-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstphotography-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstplay-1_0-0-32bit-1.22.0-150500.3.9.1 * libgsturidownloader-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstwebrtcnice-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstisoff-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstwayland-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstcodecparsers-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstbadaudio-1_0-0-32bit-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstisoff-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstwayland-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstcodecparsers-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstinsertbin-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstcodecs-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstplayer-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstvulkan-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstwebrtc-1_0-0-32bit-1.22.0-150500.3.9.1 * libgstwebrtcnice-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstcodecs-1_0-0-32bit-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-32bit-debuginfo-1.22.0-150500.3.9.1 * libgstvulkan-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-32bit-1.22.0-150500.3.9.1 * libgstcuda-1_0-0-32bit-debuginfo-1.22.0-150500.3.9.1 * openSUSE Leap 15.5 (noarch) * gstreamer-plugins-bad-lang-1.22.0-150500.3.9.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libgstcodecs-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstbasecamerabinsrc-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstwayland-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstmpegts-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstphotography-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstwebrtcnice-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstphotography-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstadaptivedemux-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-chromaprint-64bit-1.22.0-150500.3.9.1 * libgstvulkan-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstinsertbin-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstmpegts-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstwebrtc-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstadaptivedemux-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstplayer-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstvulkan-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstsctp-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstplayer-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstva-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstbadaudio-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstplay-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstinsertbin-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstisoff-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstwebrtcnice-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstcodecparsers-1_0-0-64bit-1.22.0-150500.3.9.1 * libgsturidownloader-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstcodecparsers-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstcodecs-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstsctp-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstbadaudio-1_0-0-64bit-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstplay-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstcuda-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstwayland-1_0-0-64bit-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstva-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstwebrtc-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgstcuda-1_0-0-64bit-1.22.0-150500.3.9.1 * libgstisoff-1_0-0-64bit-debuginfo-1.22.0-150500.3.9.1 * libgsturidownloader-1_0-0-64bit-1.22.0-150500.3.9.1 * gstreamer-plugins-bad-64bit-1.22.0-150500.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-40474.html * https://www.suse.com/security/cve/CVE-2023-40476.html * https://bugzilla.suse.com/show_bug.cgi?id=1215793 * https://bugzilla.suse.com/show_bug.cgi?id=1215796

1 0

SUSE-SU-2023:4575-1: important: Security update for gstreamer-plugins-bad
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for gstreamer-plugins-bad Announcement ID: SUSE-SU-2023:4575-1 Rating: important References: * bsc#1215793 * bsc#1215796 Cross-References: * CVE-2023-40474 * CVE-2023-40476 CVSS scores: * CVE-2023-40474 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-40476 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L Affected Products: * Basesystem Module 15-SP4 * Desktop Applications Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for gstreamer-plugins-bad fixes the following issues: * CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796). * CVE-2023-40476: Fixed possible overflow using max_sub_layers_minus1 (bsc#1215793). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4575=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4575=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4575=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4575=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.9.1 * libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.9.1 * libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.9.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstplay-1_0-0-1.20.1-150400.3.9.1 * typelib-1_0-GstVulkan-1_0-1.20.1-150400.3.9.1 * libgstbadaudio-1_0-0-1.20.1-150400.3.9.1 * libgsttranscoder-1_0-0-1.20.1-150400.3.9.1 * libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstwebrtc-1_0-0-1.20.1-150400.3.9.1 * libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-devel-1.20.1-150400.3.9.1 * libgstcodecs-1_0-0-1.20.1-150400.3.9.1 * libgstinsertbin-1_0-0-1.20.1-150400.3.9.1 * gstreamer-transcoder-debuginfo-1.20.1-150400.3.9.1 * libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.9.1 * libgstmpegts-1_0-0-1.20.1-150400.3.9.1 * libgstcodecparsers-1_0-0-1.20.1-150400.3.9.1 * libgsttranscoder-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstvulkan-1_0-0-1.20.1-150400.3.9.1 * typelib-1_0-GstVulkanWayland-1_0-1.20.1-150400.3.9.1 * libgstadaptivedemux-1_0-0-1.20.1-150400.3.9.1 * libgstsctp-1_0-0-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.9.1 * libgstphotography-1_0-0-1.20.1-150400.3.9.1 * libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.9.1 * libgstva-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstplayer-1_0-0-1.20.1-150400.3.9.1 * libgstwayland-1_0-0-1.20.1-150400.3.9.1 * gstreamer-transcoder-devel-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstTranscoder-1_0-1.20.1-150400.3.9.1 * gstreamer-transcoder-1.20.1-150400.3.9.1 * typelib-1_0-GstPlay-1_0-1.20.1-150400.3.9.1 * libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgsturidownloader-1_0-0-1.20.1-150400.3.9.1 * libgstva-1_0-0-1.20.1-150400.3.9.1 * libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.9.1 * libgstisoff-1_0-0-1.20.1-150400.3.9.1 * typelib-1_0-GstVulkanXCB-1_0-1.20.1-150400.3.9.1 * libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstplay-1_0-0-debuginfo-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.9.1 * libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.9.1 * libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.9.1 * openSUSE Leap 15.4 (x86_64) * libgstvulkan-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstplay-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstplayer-1_0-0-32bit-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-32bit-1.20.1-150400.3.9.1 * libgstphotography-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstplay-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstsctp-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgsturidownloader-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstphotography-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstmpegts-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstplayer-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstwayland-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstva-1_0-0-32bit-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstwayland-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstvulkan-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstinsertbin-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-chromaprint-32bit-1.20.1-150400.3.9.1 * libgstmpegts-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstisoff-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstisoff-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstcodecs-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstcodecparsers-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstsctp-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstva-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstbadaudio-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstbasecamerabinsrc-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstadaptivedemux-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstcodecs-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstwebrtc-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstinsertbin-1_0-0-32bit-1.20.1-150400.3.9.1 * libgsturidownloader-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstbadaudio-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstwebrtc-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstadaptivedemux-1_0-0-32bit-1.20.1-150400.3.9.1 * libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * libgstcodecparsers-1_0-0-32bit-debuginfo-1.20.1-150400.3.9.1 * openSUSE Leap 15.4 (noarch) * gstreamer-plugins-bad-lang-1.20.1-150400.3.9.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgstsctp-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstmpegts-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgsturidownloader-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstinsertbin-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstadaptivedemux-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstvulkan-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgsturidownloader-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstvulkan-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstcodecparsers-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstva-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstwebrtc-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstisoff-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstcodecs-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstbasecamerabinsrc-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstwayland-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstplayer-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-64bit-1.20.1-150400.3.9.1 * libgstinsertbin-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstphotography-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstphotography-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstadaptivedemux-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstwayland-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstcodecs-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstplayer-1_0-0-64bit-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-chromaprint-64bit-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstplay-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstbadaudio-1_0-0-64bit-debuginfo-1.20.1-150400.3.9.1 * libgstbadaudio-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstcodecparsers-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstsctp-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstplay-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstva-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstisoff-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstwebrtc-1_0-0-64bit-1.20.1-150400.3.9.1 * libgstmpegts-1_0-0-64bit-1.20.1-150400.3.9.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libgstphotography-1_0-0-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.9.1 * libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstplayer-1_0-0-1.20.1-150400.3.9.1 * libgstplay-1_0-0-debuginfo-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.9.1 * libgstplay-1_0-0-1.20.1-150400.3.9.1 * libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.9.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.9.1 * libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.9.1 * libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.9.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstbadaudio-1_0-0-1.20.1-150400.3.9.1 * libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstwebrtc-1_0-0-1.20.1-150400.3.9.1 * libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-devel-1.20.1-150400.3.9.1 * libgstcodecs-1_0-0-1.20.1-150400.3.9.1 * libgstinsertbin-1_0-0-1.20.1-150400.3.9.1 * libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.9.1 * libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstmpegts-1_0-0-1.20.1-150400.3.9.1 * libgstcodecparsers-1_0-0-1.20.1-150400.3.9.1 * libgstvulkan-1_0-0-1.20.1-150400.3.9.1 * libgstadaptivedemux-1_0-0-1.20.1-150400.3.9.1 * libgstsctp-1_0-0-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.9.1 * libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.9.1 * libgstva-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstwayland-1_0-0-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstPlay-1_0-1.20.1-150400.3.9.1 * libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.9.1 * libgsturidownloader-1_0-0-1.20.1-150400.3.9.1 * libgstva-1_0-0-1.20.1-150400.3.9.1 * libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.9.1 * libgstisoff-1_0-0-1.20.1-150400.3.9.1 * libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.9.1 * libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.9.1 * typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.9.1 * Desktop Applications Module 15-SP4 (noarch) * gstreamer-plugins-bad-lang-1.20.1-150400.3.9.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.9.1 * libgsttranscoder-1_0-0-1.20.1-150400.3.9.1 * libgsttranscoder-1_0-0-debuginfo-1.20.1-150400.3.9.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-40474.html * https://www.suse.com/security/cve/CVE-2023-40476.html * https://bugzilla.suse.com/show_bug.cgi?id=1215793 * https://bugzilla.suse.com/show_bug.cgi?id=1215796

1 0

SUSE-SU-2023:4577-1: moderate: Security update for xrdp
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for xrdp Announcement ID: SUSE-SU-2023:4577-1 Rating: moderate References: * bsc#1215803 Cross-References: * CVE-2023-42822 CVSS scores: * CVE-2023-42822 ( SUSE ): 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2023-42822 ( NVD ): 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for xrdp fixes the following issues: * CVE-2023-42822: Fixed unchecked access to font glyph info (bsc#1215803). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4577=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4577=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4577=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4577=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libpainter0-0.9.13.1-150200.4.27.1 * xrdp-debuginfo-0.9.13.1-150200.4.27.1 * xrdp-devel-0.9.13.1-150200.4.27.1 * libpainter0-debuginfo-0.9.13.1-150200.4.27.1 * librfxencode0-debuginfo-0.9.13.1-150200.4.27.1 * xrdp-debugsource-0.9.13.1-150200.4.27.1 * xrdp-0.9.13.1-150200.4.27.1 * librfxencode0-0.9.13.1-150200.4.27.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libpainter0-0.9.13.1-150200.4.27.1 * xrdp-debuginfo-0.9.13.1-150200.4.27.1 * xrdp-devel-0.9.13.1-150200.4.27.1 * libpainter0-debuginfo-0.9.13.1-150200.4.27.1 * librfxencode0-debuginfo-0.9.13.1-150200.4.27.1 * xrdp-debugsource-0.9.13.1-150200.4.27.1 * xrdp-0.9.13.1-150200.4.27.1 * librfxencode0-0.9.13.1-150200.4.27.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libpainter0-0.9.13.1-150200.4.27.1 * xrdp-debuginfo-0.9.13.1-150200.4.27.1 * xrdp-devel-0.9.13.1-150200.4.27.1 * libpainter0-debuginfo-0.9.13.1-150200.4.27.1 * librfxencode0-debuginfo-0.9.13.1-150200.4.27.1 * xrdp-debugsource-0.9.13.1-150200.4.27.1 * xrdp-0.9.13.1-150200.4.27.1 * librfxencode0-0.9.13.1-150200.4.27.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libpainter0-0.9.13.1-150200.4.27.1 * xrdp-debuginfo-0.9.13.1-150200.4.27.1 * xrdp-devel-0.9.13.1-150200.4.27.1 * libpainter0-debuginfo-0.9.13.1-150200.4.27.1 * librfxencode0-debuginfo-0.9.13.1-150200.4.27.1 * xrdp-debugsource-0.9.13.1-150200.4.27.1 * xrdp-0.9.13.1-150200.4.27.1 * librfxencode0-0.9.13.1-150200.4.27.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42822.html * https://bugzilla.suse.com/show_bug.cgi?id=1215803

1 0

SUSE-SU-2023:4578-1: important: Security update for slurm
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for slurm Announcement ID: SUSE-SU-2023:4578-1 Rating: important References: * bsc#1216207 * bsc#1216869 Cross-References: * CVE-2023-41914 CVSS scores: * CVE-2023-41914 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-41914 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for slurm fixes the following issues: * CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents (bsc#1216207). Bug fixes: * Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4578=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4578=1 openSUSE-SLE-15.5-2023-4578=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2023-4578=1 ## Package List: * SUSE Package Hub 15 15-SP5 (ppc64le s390x) * slurm-munge-debuginfo-23.02.6-150500.5.12.1 * slurm-torque-23.02.6-150500.5.12.1 * slurm-debuginfo-23.02.6-150500.5.12.1 * slurm-sview-debuginfo-23.02.6-150500.5.12.1 * slurm-slurmdbd-debuginfo-23.02.6-150500.5.12.1 * libnss_slurm2-23.02.6-150500.5.12.1 * slurm-torque-debuginfo-23.02.6-150500.5.12.1 * libpmi0-23.02.6-150500.5.12.1 * slurm-plugins-debuginfo-23.02.6-150500.5.12.1 * slurm-23.02.6-150500.5.12.1 * slurm-auth-none-debuginfo-23.02.6-150500.5.12.1 * slurm-devel-23.02.6-150500.5.12.1 * slurm-sql-23.02.6-150500.5.12.1 * slurm-rest-23.02.6-150500.5.12.1 * perl-slurm-23.02.6-150500.5.12.1 * slurm-node-23.02.6-150500.5.12.1 * slurm-hdf5-23.02.6-150500.5.12.1 * slurm-pam_slurm-23.02.6-150500.5.12.1 * slurm-cray-23.02.6-150500.5.12.1 * slurm-node-debuginfo-23.02.6-150500.5.12.1 * slurm-sql-debuginfo-23.02.6-150500.5.12.1 * slurm-munge-23.02.6-150500.5.12.1 * slurm-auth-none-23.02.6-150500.5.12.1 * libnss_slurm2-debuginfo-23.02.6-150500.5.12.1 * slurm-cray-debuginfo-23.02.6-150500.5.12.1 * slurm-debugsource-23.02.6-150500.5.12.1 * slurm-plugins-23.02.6-150500.5.12.1 * slurm-slurmdbd-23.02.6-150500.5.12.1 * slurm-lua-debuginfo-23.02.6-150500.5.12.1 * perl-slurm-debuginfo-23.02.6-150500.5.12.1 * slurm-lua-23.02.6-150500.5.12.1 * slurm-rest-debuginfo-23.02.6-150500.5.12.1 * libpmi0-debuginfo-23.02.6-150500.5.12.1 * slurm-sview-23.02.6-150500.5.12.1 * slurm-hdf5-debuginfo-23.02.6-150500.5.12.1 * slurm-pam_slurm-debuginfo-23.02.6-150500.5.12.1 * SUSE Package Hub 15 15-SP5 (noarch) * slurm-doc-23.02.6-150500.5.12.1 * slurm-webdoc-23.02.6-150500.5.12.1 * slurm-config-man-23.02.6-150500.5.12.1 * slurm-seff-23.02.6-150500.5.12.1 * slurm-openlava-23.02.6-150500.5.12.1 * slurm-config-23.02.6-150500.5.12.1 * slurm-sjstat-23.02.6-150500.5.12.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * slurm-munge-debuginfo-23.02.6-150500.5.12.1 * slurm-testsuite-23.02.6-150500.5.12.1 * libslurm39-debuginfo-23.02.6-150500.5.12.1 * slurm-torque-23.02.6-150500.5.12.1 * slurm-debuginfo-23.02.6-150500.5.12.1 * slurm-sview-debuginfo-23.02.6-150500.5.12.1 * slurm-slurmdbd-debuginfo-23.02.6-150500.5.12.1 * libslurm39-23.02.6-150500.5.12.1 * libnss_slurm2-23.02.6-150500.5.12.1 * slurm-torque-debuginfo-23.02.6-150500.5.12.1 * libpmi0-23.02.6-150500.5.12.1 * slurm-plugins-debuginfo-23.02.6-150500.5.12.1 * slurm-23.02.6-150500.5.12.1 * slurm-auth-none-debuginfo-23.02.6-150500.5.12.1 * slurm-devel-23.02.6-150500.5.12.1 * slurm-sql-23.02.6-150500.5.12.1 * slurm-rest-23.02.6-150500.5.12.1 * perl-slurm-23.02.6-150500.5.12.1 * slurm-node-23.02.6-150500.5.12.1 * slurm-hdf5-23.02.6-150500.5.12.1 * slurm-pam_slurm-23.02.6-150500.5.12.1 * slurm-cray-23.02.6-150500.5.12.1 * slurm-node-debuginfo-23.02.6-150500.5.12.1 * slurm-sql-debuginfo-23.02.6-150500.5.12.1 * slurm-munge-23.02.6-150500.5.12.1 * slurm-auth-none-23.02.6-150500.5.12.1 * libnss_slurm2-debuginfo-23.02.6-150500.5.12.1 * slurm-cray-debuginfo-23.02.6-150500.5.12.1 * slurm-debugsource-23.02.6-150500.5.12.1 * slurm-plugins-23.02.6-150500.5.12.1 * slurm-plugin-ext-sensors-rrd-23.02.6-150500.5.12.1 * slurm-slurmdbd-23.02.6-150500.5.12.1 * slurm-lua-debuginfo-23.02.6-150500.5.12.1 * perl-slurm-debuginfo-23.02.6-150500.5.12.1 * slurm-lua-23.02.6-150500.5.12.1 * slurm-rest-debuginfo-23.02.6-150500.5.12.1 * libpmi0-debuginfo-23.02.6-150500.5.12.1 * slurm-sview-23.02.6-150500.5.12.1 * slurm-plugin-ext-sensors-rrd-debuginfo-23.02.6-150500.5.12.1 * slurm-hdf5-debuginfo-23.02.6-150500.5.12.1 * slurm-pam_slurm-debuginfo-23.02.6-150500.5.12.1 * openSUSE Leap 15.5 (noarch) * slurm-doc-23.02.6-150500.5.12.1 * slurm-webdoc-23.02.6-150500.5.12.1 * slurm-config-man-23.02.6-150500.5.12.1 * slurm-seff-23.02.6-150500.5.12.1 * slurm-openlava-23.02.6-150500.5.12.1 * slurm-config-23.02.6-150500.5.12.1 * slurm-sjstat-23.02.6-150500.5.12.1 * HPC Module 15-SP5 (aarch64 x86_64) * slurm-munge-debuginfo-23.02.6-150500.5.12.1 * libslurm39-debuginfo-23.02.6-150500.5.12.1 * slurm-torque-23.02.6-150500.5.12.1 * slurm-debuginfo-23.02.6-150500.5.12.1 * slurm-sview-debuginfo-23.02.6-150500.5.12.1 * slurm-slurmdbd-debuginfo-23.02.6-150500.5.12.1 * libslurm39-23.02.6-150500.5.12.1 * libnss_slurm2-23.02.6-150500.5.12.1 * slurm-torque-debuginfo-23.02.6-150500.5.12.1 * libpmi0-23.02.6-150500.5.12.1 * slurm-plugins-debuginfo-23.02.6-150500.5.12.1 * slurm-23.02.6-150500.5.12.1 * slurm-auth-none-debuginfo-23.02.6-150500.5.12.1 * slurm-devel-23.02.6-150500.5.12.1 * slurm-sql-23.02.6-150500.5.12.1 * slurm-rest-23.02.6-150500.5.12.1 * perl-slurm-23.02.6-150500.5.12.1 * slurm-node-23.02.6-150500.5.12.1 * slurm-pam_slurm-23.02.6-150500.5.12.1 * slurm-cray-23.02.6-150500.5.12.1 * slurm-node-debuginfo-23.02.6-150500.5.12.1 * slurm-sql-debuginfo-23.02.6-150500.5.12.1 * slurm-munge-23.02.6-150500.5.12.1 * slurm-auth-none-23.02.6-150500.5.12.1 * libnss_slurm2-debuginfo-23.02.6-150500.5.12.1 * slurm-cray-debuginfo-23.02.6-150500.5.12.1 * slurm-debugsource-23.02.6-150500.5.12.1 * slurm-plugins-23.02.6-150500.5.12.1 * slurm-plugin-ext-sensors-rrd-23.02.6-150500.5.12.1 * slurm-slurmdbd-23.02.6-150500.5.12.1 * slurm-lua-debuginfo-23.02.6-150500.5.12.1 * perl-slurm-debuginfo-23.02.6-150500.5.12.1 * slurm-lua-23.02.6-150500.5.12.1 * slurm-rest-debuginfo-23.02.6-150500.5.12.1 * libpmi0-debuginfo-23.02.6-150500.5.12.1 * slurm-sview-23.02.6-150500.5.12.1 * slurm-plugin-ext-sensors-rrd-debuginfo-23.02.6-150500.5.12.1 * slurm-pam_slurm-debuginfo-23.02.6-150500.5.12.1 * HPC Module 15-SP5 (noarch) * slurm-doc-23.02.6-150500.5.12.1 * slurm-webdoc-23.02.6-150500.5.12.1 * slurm-config-man-23.02.6-150500.5.12.1 * slurm-config-23.02.6-150500.5.12.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41914.html * https://bugzilla.suse.com/show_bug.cgi?id=1216207 * https://bugzilla.suse.com/show_bug.cgi?id=1216869

1 0

SUSE-SU-2023:4579-1: important: Security update for slurm_22_05
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Security update for slurm_22_05 Announcement ID: SUSE-SU-2023:4579-1 Rating: important References: * bsc#1208810 * bsc#1216207 * bsc#1216869 Cross-References: * CVE-2023-41914 CVSS scores: * CVE-2023-41914 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-41914 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * HPC Module 15-SP4 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 An update that solves one vulnerability and has two security fixes can now be installed. ## Description: This update for slurm_22_05 fixes the following issues: * CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents (bsc#1216207). Bug fixes: * Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869). * Add missing Provides:, Conflicts: and Obsoletes: to slurm-cray, slurm-hdf5 and slurm-testsuite to avoid package conflicts (bsc#1208810). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4579=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4579=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4579=1 * HPC Module 15-SP4 zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2023-4579=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4579=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4579=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-openlava-22.05.10-150300.7.6.1 * slurm_22_05-cray-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * slurm_22_05-sjstat-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-seff-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-testsuite-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-cray-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * openSUSE Leap 15.3 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-openlava-22.05.10-150300.7.6.1 * slurm_22_05-cray-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * slurm_22_05-sjstat-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-seff-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-testsuite-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-cray-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * openSUSE Leap 15.4 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-openlava-22.05.10-150300.7.6.1 * slurm_22_05-cray-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * slurm_22_05-sjstat-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-seff-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-testsuite-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-22.05.10-150300.7.6.1 * slurm_22_05-hdf5-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-cray-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * openSUSE Leap 15.5 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 * HPC Module 15-SP4 (aarch64 x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-cray-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-cray-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * HPC Module 15-SP4 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libslurm38-22.05.10-150300.7.6.1 * slurm_22_05-sql-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-node-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-22.05.10-150300.7.6.1 * libslurm38-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-rest-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-lua-22.05.10-150300.7.6.1 * perl-slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-22.05.10-150300.7.6.1 * perl-slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-plugins-22.05.10-150300.7.6.1 * slurm_22_05-slurmdbd-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-22.05.10-150300.7.6.1 * slurm_22_05-rest-22.05.10-150300.7.6.1 * slurm_22_05-munge-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-pam_slurm-22.05.10-150300.7.6.1 * libpmi0_22_05-debuginfo-22.05.10-150300.7.6.1 * libpmi0_22_05-22.05.10-150300.7.6.1 * slurm_22_05-22.05.10-150300.7.6.1 * slurm_22_05-plugins-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sql-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-auth-none-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-devel-22.05.10-150300.7.6.1 * slurm_22_05-debugsource-22.05.10-150300.7.6.1 * slurm_22_05-lua-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-sview-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-torque-debuginfo-22.05.10-150300.7.6.1 * libnss_slurm2_22_05-debuginfo-22.05.10-150300.7.6.1 * slurm_22_05-munge-22.05.10-150300.7.6.1 * slurm_22_05-node-22.05.10-150300.7.6.1 * slurm_22_05-torque-22.05.10-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * slurm_22_05-doc-22.05.10-150300.7.6.1 * slurm_22_05-webdoc-22.05.10-150300.7.6.1 * slurm_22_05-config-22.05.10-150300.7.6.1 * slurm_22_05-config-man-22.05.10-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41914.html * https://bugzilla.suse.com/show_bug.cgi?id=1208810 * https://bugzilla.suse.com/show_bug.cgi?id=1216207 * https://bugzilla.suse.com/show_bug.cgi?id=1216869

1 0

SUSE-FU-2023:4583-1: moderate: Feature update for python-psutil
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Feature update for python-psutil Announcement ID: SUSE-FU-2023:4583-1 Rating: moderate References: * bsc#1111622 * bsc#1170175 * bsc#1176785 * bsc#1184753 * bsc#1199282 * jsc#ECO-3105 * jsc#PED-7192 * jsc#PM-2352 * jsc#PM-3243 * jsc#SLE-24629 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains five features and has five fixes can now be installed. ## Description: This update for python-psutil, python-requests fixes the following issues: * update python-psutil to 5.9.1 (bsc#1199282, bsc#1184753, jsc#SLE-24629, jsc#PM-3243, gh#giampaolo/psutil#2043) * Fix tests: setuptools changed the builddir library path and does not find the module from it. Use the installed platlib instead and exclude psutil.tests only later. * remove the dependency on net-tools, since it conflicts with busybox- hostnmame which is default on MicroOS * Update python-requests to 2.25.1 (bsc#1176785, bsc#1170175, jsc#ECO-3105, jsc#PM-2352, jsc#PED-7192) * Fixed bug with unintended Authorization header stripping for redirects using default ports (bsc#1111622). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4583=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4583=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4583=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4583=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4583=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4583=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4583=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4583=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4583=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4583=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4583=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4583=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4583=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4583=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4583=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4583=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4583=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4583=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4583=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4583=1 ## Package List: * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Enterprise Storage 7.1 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * python3-requests-2.25.1-150300.3.6.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python3-psutil-5.9.1-150300.3.6.1 * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python2-psutil-5.9.1-150300.3.6.1 * python2-psutil-debuginfo-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * openSUSE Leap 15.3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * python2-requests-2.25.1-150300.3.6.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * openSUSE Leap Micro 5.3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * openSUSE Leap Micro 5.4 (noarch) * python3-requests-2.25.1-150300.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * openSUSE Leap 15.4 (noarch) * python3-requests-2.25.1-150300.3.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * openSUSE Leap 15.5 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-requests-2.25.1-150300.3.6.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * Basesystem Module 15-SP4 (noarch) * python3-requests-2.25.1-150300.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * Basesystem Module 15-SP5 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * python3-requests-2.25.1-150300.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * python-psutil-debuginfo-5.9.1-150300.3.6.1 * python-psutil-debugsource-5.9.1-150300.3.6.1 * python3-psutil-5.9.1-150300.3.6.1 * python3-psutil-debuginfo-5.9.1-150300.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * python3-requests-2.25.1-150300.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1111622 * https://bugzilla.suse.com/show_bug.cgi?id=1170175 * https://bugzilla.suse.com/show_bug.cgi?id=1176785 * https://bugzilla.suse.com/show_bug.cgi?id=1184753 * https://bugzilla.suse.com/show_bug.cgi?id=1199282 * https://jira.suse.com/browse/ECO-3105 * https://jira.suse.com/browse/PED-7192 * https://jira.suse.com/browse/PM-2352 * https://jira.suse.com/browse/PM-3243 * https://jira.suse.com/browse/SLE-24629

1 0

SUSE-RU-2023:4568-1: moderate: Recommended update for gnu-compilers-hpc
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Recommended update for gnu-compilers-hpc Announcement ID: SUSE-RU-2023:4568-1 Rating: moderate References: * bsc#1216999 Affected Products: * HPC Module 15-SP4 * HPC Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update for gnu-compilers-hpc fixes the following issues: * Implemented Environment Module Files for the GNU Compiler Toolchain version 13. To use the gcc/g++/gfortran version 13 thru HPC environment modules `gnu13-compilers-hpc` (runtime) and `gnu13-compilers-hpc-devel` (build time, including compilers) are now available. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4568=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4568=1 * HPC Module 15-SP4 zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2023-4568=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2023-4568=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4568=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4568=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4568=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4568=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4568=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4568=1 ## Package List: * openSUSE Leap 15.4 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * openSUSE Leap 15.5 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * HPC Module 15-SP4 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * HPC Module 15-SP5 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Package Hub 15 15-SP4 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Package Hub 15 15-SP5 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * gnu13-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-1.4-150100.3.31.1 * gnu-compilers-hpc-macros-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-devel-1.4-150100.3.31.1 * gnu13-compilers-hpc-devel-1.4-150100.3.31.1 * gnu-compilers-hpc-1.4-150100.3.31.1 * gnu12-compilers-hpc-devel-1.4-150100.3.31.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216999

1 0

SUSE-RU-2023:4569-1: moderate: Recommended update for spack
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Recommended update for spack Announcement ID: SUSE-RU-2023:4569-1 Rating: moderate References: * bsc#1216941 Affected Products: * HPC Module 15-SP4 * HPC Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 An update that has one fix can now be installed. ## Description: This update for spack fixes the following issues: * Updated to version 0.20.3 with the following changes (bsc#1216941): * Bug fixes: * Fix a bug where `spack mirror set-url` would drop configured connection info. * Fix a minor issue with package hash computation for Python 3.12. * Improve escaping in Tcl module files. * Make repo cache work on repositouries with zero mtime. * Ignore errors for newer, incompatible buildcache version. * Print an error when git is required, but missing. * Ensure missing build dependencies get installed when using `spack install --overwrite`. * Fix an issue where Spack freezes when the build process unexpectedly exits. * Fix a bug where installation failures cause an unrelated `NameError` to be thrown. * Fix an issue where Spack package versions would be incorrectly derived from git tags. * Fix a bug triggered when file locking fails internally. * Prevent `spack external find` to error out when a directory cannot be accessed. * Fix multiple performance regressions in environments. * Add more ignored modules to `pyproject.toml` for `mypy`. * Features: * Spack now supports Python 3.12. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4569=1 openSUSE-SLE-15.4-2023-4569=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4569=1 * HPC Module 15-SP4 zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2023-4569=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2023-4569=1 ## Package List: * openSUSE Leap 15.4 (noarch) * spack-recipes-0.20.3-150400.9.1 * spack-0.20.3-150400.9.1 * spack-info-0.20.3-150400.9.1 * spack-man-0.20.3-150400.9.1 * openSUSE Leap 15.5 (noarch) * spack-recipes-0.20.3-150400.9.1 * spack-info-0.20.3-150400.9.1 * spack-0.20.3-150400.9.1 * spack-man-0.20.3-150400.9.1 * HPC Module 15-SP4 (noarch) * spack-recipes-0.20.3-150400.9.1 * spack-info-0.20.3-150400.9.1 * spack-0.20.3-150400.9.1 * spack-man-0.20.3-150400.9.1 * HPC Module 15-SP5 (noarch) * spack-recipes-0.20.3-150400.9.1 * spack-info-0.20.3-150400.9.1 * spack-0.20.3-150400.9.1 * spack-man-0.20.3-150400.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216941

1 0

SUSE-RU-2023:4570-1: moderate: Recommended update for spack
by maintenance＠opensuse.org 27 Nov '23

27 Nov '23

# Recommended update for spack Announcement ID: SUSE-RU-2023:4570-1 Rating: moderate References: * bsc#1216941 Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 An update that has one fix can now be installed. ## Description: This update for spack fixes the following issues: * Updated to version 0.20.3 with the following changes (bsc#1216941): * Bug fixes: * Fix a bug where `spack mirror set-url` would drop configured connection info. * Fix a minor issue with package hash computation for Python 3.12. * Improve escaping in Tcl module files. * Make repo cache work on repositouries with zero mtime. * Ignore errors for newer, incompatible buildcache version. * Print an error when git is required, but missing. * Ensure missing build dependencies get installed when using `spack install --overwrite`. * Fix an issue where Spack freezes when the build process unexpectedly exits. * Fix a bug where installation failures cause an unrelated `NameError` to be thrown. * Fix an issue where Spack package versions would be incorrectly derived from git tags. * Fix a bug triggered when file locking fails internally. * Prevent `spack external find` to error out when a directory cannot be accessed. * Fix multiple performance regressions in environments. * Add more ignored modules to `pyproject.toml` for `mypy`. * Features: * Spack now supports Python 3.12. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4570=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4570=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4570=1 ## Package List: * openSUSE Leap 15.3 (noarch) * spack-recipes-0.20.3-150300.9.1 * spack-0.20.3-150300.9.1 * spack-info-0.20.3-150300.9.1 * spack-man-0.20.3-150300.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * spack-recipes-0.20.3-150300.9.1 * spack-0.20.3-150300.9.1 * spack-info-0.20.3-150300.9.1 * spack-man-0.20.3-150300.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * spack-recipes-0.20.3-150300.9.1 * spack-0.20.3-150300.9.1 * spack-info-0.20.3-150300.9.1 * spack-man-0.20.3-150300.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216941

1 0

openSUSE-RU-2023:0378-1: moderate: Recommended update for tor
by maintenance＠opensuse.org 26 Nov '23

26 Nov '23

openSUSE Recommended Update: Recommended update for tor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0378-1 Rating: moderate References: Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tor fixes the following issues: tor 0.3.5.18 - see /usr/share/doc/packages/tor/ChangeLog for details tor 0.4.8.9: * (onion service, TROVE-2023-006): - Fix a possible hard assert on a NULL pointer * (guard usage): - When Tor excluded a guard due to temporary circuit restrictions, it considered *additional* primary guards for potential usage by that circuit. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-378=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-378=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2023-378=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): tor-0.4.8.9-bp155.2.6.1 tor-debuginfo-0.4.8.9-bp155.2.6.1 tor-debugsource-0.4.8.9-bp155.2.6.1 - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): tor-0.4.8.9-bp154.2.18.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tor-0.3.5.18-28.1 References:

1 0

openSUSE-SU-2023:0379-1: important: Security update for gstreamer-plugins-bad
by opensuse-security＠opensuse.org 26 Nov '23

26 Nov '23

openSUSE Security Update: Security update for gstreamer-plugins-bad ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0379-1 Rating: important References: #1213126 Cross-References: CVE-2023-37329 CVSS scores: CVE-2023-37329 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 openSUSE Leap 15.5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed GStreamer SRT File Parsing Heap-based Buffer Overflow (bsc#1213126). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-379=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-2023-379=1 Package List: - openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64): gstreamer-plugins-bad-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-debugsource-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-devel-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-debuginfo-1.22.0-lp155.3.4.1 gstreamer-transcoder-1.22.0-lp155.3.4.1 gstreamer-transcoder-debuginfo-1.22.0-lp155.3.4.1 gstreamer-transcoder-devel-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstplay-1_0-0-1.22.0-lp155.3.4.1 libgstplay-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgsttranscoder-1_0-0-1.22.0-lp155.3.4.1 libgsttranscoder-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstva-1_0-0-1.22.0-lp155.3.4.1 libgstva-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-debuginfo-1.22.0-lp155.3.4.1 typelib-1_0-CudaGst-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstBadAudio-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstCodecs-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstCuda-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstInsertBin-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstMpegts-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstPlay-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstPlayer-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstTranscoder-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstVa-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstVulkan-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstVulkanWayland-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstVulkanXCB-1_0-1.22.0-lp155.3.4.1 typelib-1_0-GstWebRTC-1_0-1.22.0-lp155.3.4.1 - openSUSE Leap 15.5 (aarch64_ilp32): gstreamer-plugins-bad-64bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-64bit-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-64bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-64bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstplay-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstplay-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-64bit-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstva-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstva-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-64bit-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-64bit-debuginfo-1.22.0-lp155.3.4.1 - openSUSE Leap 15.5 (noarch): gstreamer-plugins-bad-lang-1.22.0-lp155.3.4.1 - openSUSE Leap 15.5 (x86_64): gstreamer-plugins-bad-32bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-32bit-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-32bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-32bit-1.22.0-lp155.3.4.1 gstreamer-plugins-bad-fluidsynth-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstadaptivedemux-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstbadaudio-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstcodecparsers-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstcodecs-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstcuda-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstinsertbin-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstisoff-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstmpegts-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstphotography-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstplay-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstplay-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstplayer-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstsctp-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-32bit-1.22.0-lp155.3.4.1 libgsturidownloader-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstva-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstva-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstvulkan-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstwayland-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstwebrtc-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-32bit-1.22.0-lp155.3.4.1 libgstwebrtcnice-1_0-0-32bit-debuginfo-1.22.0-lp155.3.4.1 - openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64): gstreamer-plugins-bad-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-debugsource-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-devel-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-debuginfo-1.20.1-lp154.2.4.1 gstreamer-transcoder-1.20.1-lp154.2.4.1 gstreamer-transcoder-debuginfo-1.20.1-lp154.2.4.1 gstreamer-transcoder-devel-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstplay-1_0-0-1.20.1-lp154.2.4.1 libgstplay-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgsttranscoder-1_0-0-1.20.1-lp154.2.4.1 libgsttranscoder-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstva-1_0-0-1.20.1-lp154.2.4.1 libgstva-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-debuginfo-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-debuginfo-1.20.1-lp154.2.4.1 typelib-1_0-GstBadAudio-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstCodecs-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstInsertBin-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstMpegts-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstPlay-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstPlayer-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstTranscoder-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstVulkan-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstVulkanWayland-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstVulkanXCB-1_0-1.20.1-lp154.2.4.1 typelib-1_0-GstWebRTC-1_0-1.20.1-lp154.2.4.1 - openSUSE Leap 15.4 (aarch64_ilp32): gstreamer-plugins-bad-64bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-64bit-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-64bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-64bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstplay-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstplay-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-64bit-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstva-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstva-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-64bit-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-64bit-debuginfo-1.20.1-lp154.2.4.1 - openSUSE Leap 15.4 (x86_64): gstreamer-plugins-bad-32bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-32bit-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-32bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-32bit-1.20.1-lp154.2.4.1 gstreamer-plugins-bad-fluidsynth-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstadaptivedemux-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstbadaudio-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstcodecparsers-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstcodecs-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstinsertbin-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstisoff-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstmpegts-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstphotography-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstplay-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstplay-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstplayer-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstsctp-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-32bit-1.20.1-lp154.2.4.1 libgsturidownloader-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstva-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstva-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstvulkan-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstwayland-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-32bit-1.20.1-lp154.2.4.1 libgstwebrtc-1_0-0-32bit-debuginfo-1.20.1-lp154.2.4.1 - openSUSE Leap 15.4 (noarch): gstreamer-plugins-bad-lang-1.20.1-lp154.2.4.1 References: https://www.suse.com/security/cve/CVE-2023-37329.html https://bugzilla.suse.com/1213126

1 0

openSUSE-RU-2023:0380-1: moderate: Recommended update for thunar
by maintenance＠opensuse.org 26 Nov '23

26 Nov '23

openSUSE Recommended Update: Recommended update for thunar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0380-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for thunar fixes the following issues: Update to 4.18.7: * Fix property dialog file count (#1173) * Don't store GFile pointer in GTK pointer * Don't reload the directory on copy or cut (#1060) * Add folder to history only for new tab (Issue #1072) * Fix job operation crash on error * Limit number of templates to prevent lag (#472) * Prevent crash on multi-file-activate (#1121) * Remove unneeded menu separator * Switch zoom shortcuts * Prevent glib-critical - followup of (#912) * Keep location selector state on focus lost (#912) * Prevent minor memory leak (#573) * Translation Updates Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-380=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libthunarx-3-0-4.18.7-bp155.2.6.1 thunar-4.18.7-bp155.2.6.1 thunar-devel-4.18.7-bp155.2.6.1 typelib-1_0-Thunarx-3_0-4.18.7-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): thunar-lang-4.18.7-bp155.2.6.1 References:

1 0

openSUSE-RU-2023:0378-1: moderate: Recommended update for tor
by maintenance＠opensuse.org 26 Nov '23

26 Nov '23

openSUSE Recommended Update: Recommended update for tor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0378-1 Rating: moderate References: Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tor fixes the following issues: tor 0.3.5.18 - see /usr/share/doc/packages/tor/ChangeLog for details tor 0.4.8.9: * (onion service, TROVE-2023-006): - Fix a possible hard assert on a NULL pointer * (guard usage): - When Tor excluded a guard due to temporary circuit restrictions, it considered *additional* primary guards for potential usage by that circuit. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2023-378=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tor-0.3.5.18-28.1 References:

1 0

openSUSE-RU-2023:0381-1: moderate: Recommended update for xfce4-notifyd
by maintenance＠opensuse.org 26 Nov '23

26 Nov '23

openSUSE Recommended Update: Recommended update for xfce4-notifyd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0381-1 Rating: moderate References: #1216470 #1217193 Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Leap 15.5 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for xfce4-notifyd fixes the following issues: - fixed branding dependency problem. (boo#1217193 boo#1216470) Update to 0.9.3: * Make the DELETE with LIMIT/OFFSET query work * Make the text in the 'Clear log' dialog less crowded * Set a transient parent on the 'Clear log' dialog if possible * 'Clear log' dialog's initial focus should be on the 'Cancel' button * Drop required xdt-autogen version to 4.18.1 * Simplify markup sanitizing code a little * Re-escape text in GMarkupParser text handler * Sanitize instead of validating body text markup * Translation Updates Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-381=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-381=1 Package List: - openSUSE Leap 15.5 (noarch): libgarcon-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 libxfce4ui-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 thunar-volman-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfce4-notifyd-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfce4-panel-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfce4-power-manager-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfce4-session-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfce4-settings-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfdesktop-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 xfwm4-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.2 - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): xfce4-notifyd-0.9.3-bp155.2.13.1 xfce4-notifyd-debuginfo-0.9.3-bp155.2.13.1 xfce4-notifyd-debugsource-0.9.3-bp155.2.13.1 - openSUSE Backports SLE-15-SP5 (noarch): xfce4-notifyd-branding-upstream-0.9.3-bp155.2.13.1 xfce4-notifyd-lang-0.9.3-bp155.2.13.1 References: https://bugzilla.suse.com/1216470 https://bugzilla.suse.com/1217193

1 0

SUSE-RU-2023:4542-1: low: Recommended update for perl-Test-Warnings
by maintenance＠opensuse.org 25 Nov '23

25 Nov '23

# Recommended update for perl-Test-Warnings Announcement ID: SUSE-RU-2023:4542-1 Rating: low References: * bsc#1215584 Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for perl-Test-Warnings fixes the following issues: * updated to 0.032 (see https://metacpan.org/dist/Test-Warnings/changes, bsc#1215584) 0.032 2023-09-30 23:36:50Z * new config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for temporarily turning failures into reports 0.031 2021-07-13 22:13:48Z * remove unneeded develop prereqs that caused metacpan to unduly raise the river position of some dependent modules ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4542=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4542=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4542=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4542=1 ## Package List: * openSUSE Leap 15.4 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 * openSUSE Leap 15.5 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 * Development Tools Module 15-SP4 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 * Development Tools Module 15-SP5 (noarch) * perl-Test-Warnings-0.32.0-150000.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215584

1 0

openSUSE-RU-2023:0375-1: important: Recommended update for rspamd
by maintenance＠opensuse.org 25 Nov '23

25 Nov '23

openSUSE Recommended Update: Recommended update for rspamd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0375-1 Rating: important References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rspamd fixes the following issues: - Update to 3.7.4 - [Enhancement] Add composite rule for suspicious URLs in suspicious messages - [Fix] Another try to fix setproctitle - [Fix] Do not cleanup hyperscan files unless new ones are loaded - [Fix] Fix various issues with canonicalisation of the paths - [Fix] Properly set config field when creating tasks from Lua - [Fix] Set loaded variable explicitly - [Fix] known_senders: fix config handling - [Fix] rbl: fix exclude_local - [Minor] Add missing include for gcc 14 - [Minor] Add rule for messages missing both X-Mailer and User-Agent header - [Minor] Bundle fasttext as linux distributives are just useless - [Minor] Enable fasttext on RPM based linux - [Minor] Forgot it in one more place - [Minor] Improve FREEMAIL_AFF capture rates - [Minor] Limit fasttext to amd64 only - [Minor] Properly search for fasttext include - [Minor] Treat *.zpaq attachments as archives and harmful - [Minor] force_actions: set a group for symbols - [WebUI] Update map editor - Update to 3.7.3 - [Fix] Emergency fix for the hyperscan path error - Update to 3.7.2 - [Minor] Make compiling with backward-cpp optional by @a16bitsysop in #4639 - [Rules] Blank spam detection by @fatalbanana in #4644 - [Minor] Treat *.cue attachments as harmful by @twesterhever in #4642 - Dzjaivnt patch 1 by @dzjaivnt in #4640 - [WebUI] Add control to invert action filter by @moisseev in #4645 - [Fix] DMARC reporting: fix reporting for subdomains by @fatalbanana in #4587 - [Minor] RSPAMD_SHAREDIR is called SHAREDIR in configuration by @fatalbanana in #4649 - [WebUI] Fix history table vanishing by @moisseev in #4661 - Tighten rspamd's attachment policy by @twesterhever in #4656 - [Minor] rbl: support use of different matchers for return codes by @fatalbanana in #4657 - Update to 3.7.1 - [Fix] CMakeLists.txt remove whitespace added by linter as it makes te… by @a16bitsysop in #4560 - fix: redis schema parsing by @Conni2461 in #4562 - [Minor] Update JS libraries by @moisseev in #4567 - [WebUI] Restore contrasting foreground color by @moisseev in #4569 - Add new exporter to push JSON to a raw TCP socket by @lingfish in #4572 - [WebUI] Tweak bootstrap colors for accessibility by @moisseev in #4577 - Rewrite configuration utils in C++ by @vstakhov in #4573 - [Minor] Slightly adjust DNSBL scores by @twesterhever in #4557 - Added support for Redis 6 ACL (username/password) by @laodc in #4578 - [Feature] Support feed exclusions in phishing module by @dragoangel in #4575 - [Minor] Remove unwanted debug logging by @fatalbanana in #4585 - Fix regression in invokation of rspamd-test by @ln5 in #4588 - [Fix] Correct format pattern for RE tree tempfile name by @ln5 in #4590 - [Minor] Remove unused variables by @ln5 in #4591 - [Fix] Correct format string for unw_word_t by @ln5 in #4592 - [Fix] rbl: really fix dependency registration when symbols_prefixes i… by @fatalbanana in #4594 - [Fix] rspamadm mime: arguments beginning with letter t by @fatalbanana in #4597 - [Minor] API docs: lua_ip: fix function name by @fatalbanana in #4598 - [Feature] rbl: support checking numeric URLs in isolation by @fatalbanana in #4596 - [Feature] Add ICAP Content-Type and Filename from TODO List by @lbahtarliev in #4595 - [Minor] Try fix CI by @fatalbanana in #4603 - [Fix] MISSING_MIMEOLE: avoid matching messages from Android GMail app (#4561) by @fatalbanana in #4600 - [WebUI] Set locale on UI load by @moisseev in #4607 - Update configwizard.lua by @Dani778 in #4605 - [Minor] Revisit numeric_urls by @fatalbanana in #4602 - [Fix] Change Date: header location to conform with RFC by @lbahtarliev in #4608 - Implement known senders plugin by @vstakhov in #4610 - Merge tests into master branch by @fatalbanana in #4615 - Run CI on ARM by @fatalbanana in #4617 - [Minor] Try fix test logs by @fatalbanana in #4620 - Minor improvements for CI by @fatalbanana in #4621 - Fix wrong copypasta & mis-named file by @fatalbanana in #4624 - [Fix] Prevent DNSWL sabotage by @mdierksen in #4627 - Update to 3.6 - [WebUI] Migrate to Bootstrap v5.2 by @moisseev in #4444 - fix: avoid double-dip of nrcpt when calculating ratelimit condition by @simbuerg in #4448 - [WebUI] Fix "Clean history" button enabling/disabling in the Scan tab by @moisseev in #4453 - [Minor] Use a scalar variable as a dir handle by @moisseev in #4457 - Fix arc by @jendis in #4449 - [Minor] Fix pagination control border radius by @moisseev in #4461 - [Fix] remove obsolete rspamd-redirector files by @a16bitsysop in #4422 - Add fasttext language detector to Rspamd by @vstakhov in #4473 - [Minor] Fix rows background coloring by @moisseev in #4490 - [WebUI] Add ability to compute fuzzy hashes by @moisseev in #4499 - [Fix] rbl: fix dependency registration when symbols_prefixes is used by @fatalbanana in #4498 - [Enhancement] Add composite rule for messages only containing a redirector URL by @twesterhever in #4496 - [WebUI] Show validation feedback inside login modal by @moisseev in #4504 - [Minor] Improve HACKED_WP_PHISHING coverage by @twesterhever in #4506 - [Minor] Add additional bad extensions by @twesterhever in #4508 - [Minor] Assorted cleanup and housekeeping of configuration files, take 2 by @twesterhever in #4505 - [Rules] Add thread hijacking composite rule by @twesterhever in #4507 - [Minor] Move HAS_ONION_URI from "experimental" to "url" group by @twesterhever in #4495 - [Enhancement] Make Google Firebase rule productive by @twesterhever in #4494 - Use the correct mime format for 7z by @JasonStephenson in #4517 - [Minor] Increase score for .chm attachments by @twesterhever in #4518 - [Enhancement] Improve detection of Google redirection URLs by @twesterhever in #4497 - if elasticsearch_version >= 7 we should not send the _type to elastic… by @mariojansen in #4520 - [Enhancement] Treat HTML attachments as (slightly) bad by @twesterhever in #4519 - Dockerfile: Switch to bookworm by @mrueg in #4532 - [Feature] external_relay: add ip_map strategy by @moesoha in #4537 - [Feature] Detect Apple Mail and remove scores for their known common behavior by @dragoangel in #4538 - [Minor] A bit better apple_x_mailer regex by @dragoangel in #4539 - replace ECDSA_sign_setup/ECDSA_sign_ex with ECDSA_sign by @sthen in #4541 - [Fix] dmarc gramar - allow spaces before ";" by @rheoli in #4547 - [Minor] Minor fixes for previous ratelimit changes by @fatalbanana in #4549 - [Minor] Improve catch rates of FREEMAIL_AFF by @twesterhever in #4556 - [Minor] Tweak HAS_GOOGLE_REDIR to detect Google AMP URLs as well by @twesterhever in #4558 - Enable more features - Enable nice stacktraces for crashes. New BR: libunwind-devel - use system xxhash: New BR: xxhash-devel - enable blas/lapack support for the neural network processing New BR: lapack-devel, libopenblas_openmp-devel, openblas-common-devel - Update to 3.5 - [WebUI] Add legacy history version badge by @moisseev in #4326 - [Feature] Enable Mime part filters on antivirus module by @jonmoesli in #4328 - metadata_exporter http pusher: Extend valid return codes by @yo000 in #4334 - [Minor] debian package: disable luajit on arm64 by @fatalbanana in #4335 - Support external maps in Rspamd by @vstakhov in #4324 - [Fix] Return true from has_urls(true) if only emails are present by @cpragadeesh in #4365 - [Fix] received: filtering of artificial header by @kakochang in #4367 - [Fix] Replace broken strict_domains with phishing_exceptions by @dupondje in #4376 - Fix build with gcc 13 by including by @heirecka in #4375 - rspamc: add -R option for human readable report by @amishmm in #4377 - rspamc: optimize indentation condition by @amishmm in #4381 - Set required_score = reject score and minor change to the report by @amishmm in #4383 - conf/modules.d/arc.conf: fix parameter name by @jendis in #4387 - Fixes to support global lua maps in user settings by @dpetrov67 in #4393 - [Enhancement] Make Google URL redirection rules productive by @twesterhever in #4399 - [Enhancement] Add rule to detect Google Firebase URLs by @twesterhever in #4401 - [Minor] Assorted cleanup and housekeeping of configuration files by @twesterhever in #4397 - addition: add Betterbird to user_agent_thunderbird by @georglauterbach in #4404 - [Minor] Replace "Spamhaus XBL any" hack with a more clear solution by @twesterhever in #4398 - [Enhancement] Add IPFS URL heuristic by @twesterhever in #4310 - Checking for redirector url in mail by @korgoth1 in #4351 - fix incorrect asn references in bimi.conf by @mta59066 in #4410 - [Minor] Account for one more undisclosed-recipients address variant by @citrin in #4413 - Fix for x-rspamd-action in Milter headers module by @nishils in #4416 - [WebUI] Update JS libraries by @moisseev in #4414 - [WebUI] Update bootstrap by @moisseev in #4420 - [Minor] remove check for sys/cdefs.h in CMakelists.txt by @a16bitsysop in #4430 - [Minor] Fix some compiler warnings by @a16bitsysop in #4436 - Upgrade to 3.4 again - Fix metadata_exporter with many recipients by @yo000 in #4294 - [Fix] Fix favicon.ico Content-Type header by @moisseev in #4302 - [Minor] Fix copy-paste error by @moisseev in #4305 - Add basic auth to metadata_exporter http pusher by @yo000 in #4300 - [Enhancement] Add composite rule against AFF involving freemailers by @twesterhever in #4304 - Penalize bounce spam by @frederikbosch in #4308 - Update to 3.4 - Fix metadata_exporter with many recipients by @yo000 in #4294 - [Fix] Fix favicon.ico Content-Type header by @moisseev in #4302 - [Minor] Fix copy-paste error by @moisseev in #4305 - Add basic auth to metadata_exporter http pusher by @yo000 in #4300 - [Enhancement] Add composite rule against AFF involving freemailers by @twesterhever in #4304 - Penalize bounce spam by @frederikbosch in #4308 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-375=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): rspamd-3.7.4-bp155.2.3.1 References:

1 0

SUSE-RU-2023:4539-1: moderate: Recommended update for unar
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for unar Announcement ID: SUSE-RU-2023:4539-1 Rating: moderate References: * jsc#PED-6193 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for unar fixes the following issue: * use pkgconfig(icu-uc) for current libicu ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4539=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4539=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4539=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4539=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4539=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4539=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4539=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4539=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4539=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4539=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4539=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4539=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4539=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4539=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4539=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Manager Proxy 4.2 (x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Manager Retail Branch Server 4.2 (x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * unar-debugsource-1.10.7-150200.3.3.2 * unar-debuginfo-1.10.7-150200.3.3.2 * unar-1.10.7-150200.3.3.2 ## References: * https://jira.suse.com/browse/PED-6193

1 0

SUSE-RU-2023:4540-1: moderate: Recommended update for patterns-sap
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for patterns-sap Announcement ID: SUSE-RU-2023:4540-1 Rating: moderate References: * bsc#1214161 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP5 * SAP Business One Module 15-SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for patterns-sap fixes the following issues: * Adapt required packages to the new SAP BusinessOne. * Fixes an issue when SAP Installation Wizard stops after HANA installation. (bsc#1214161) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4540=1 openSUSE-SLE-15.5-2023-4540=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2023-4540=1 * SAP Business One Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Business-One-15-SP5-2023-4540=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * patterns-sap-bone-15.5.1-150500.5.5.1 * patterns-sap-nw-15.5.1-150500.5.5.1 * patterns-sap-hana-15.5.1-150500.5.5.1 * patterns-sap-15.5.1-150500.5.5.1 * SAP Applications Module 15-SP5 (ppc64le x86_64) * patterns-sap-nw-15.5.1-150500.5.5.1 * patterns-sap-hana-15.5.1-150500.5.5.1 * SAP Business One Module 15-SP5 (x86_64) * patterns-sap-bone-15.5.1-150500.5.5.1 * patterns-sap-hana-15.5.1-150500.5.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214161

1 0

SUSE-RU-2023:4534-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for libzypp, zypper Announcement ID: SUSE-RU-2023:4534-1 Rating: moderate References: * bsc#1041742 * bsc#1203760 * bsc#1212422 * bsc#1215979 * bsc#1216091 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has five fixes can now be installed. ## Description: This update for libzypp, zypper fixes the following issues: * Preliminary disable 'rpm --runposttrans' usage for chrooted systems (bsc#1216091) * Fix comment typo on zypp.conf (bsc#1215979) * Attempt to delay %transfiletrigger(postun|in) execution if rpm supports it (bsc#1041742) * Make sure the old target is deleted before a new one is created (bsc#1203760) * Return 104 also if info suggests near matches * Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422) * commit: Insert a headline to separate output of different rpm scripts (bsc#1041742) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4534=1 openSUSE-SLE-15.4-2023-4534=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4534=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4534=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4534=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4534=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4534=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4534=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4534=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4534=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4534=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4534=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4534=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4534=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-devel-doc-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * openSUSE Leap 15.4 (noarch) * zypper-aptitude-1.14.66-150400.3.35.1 * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.3 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * openSUSE Leap Micro 5.4 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-devel-doc-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * openSUSE Leap 15.5 (noarch) * zypper-aptitude-1.14.66-150400.3.35.1 * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Manager Proxy 4.3 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libzypp-17.31.22-150400.3.43.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * zypper-needs-restarting-1.14.66-150400.3.35.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * Basesystem Module 15-SP4 (noarch) * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * zypper-1.14.66-150400.3.35.1 * libzypp-17.31.22-150400.3.43.1 * libzypp-debugsource-17.31.22-150400.3.43.1 * libzypp-debuginfo-17.31.22-150400.3.43.1 * zypper-debuginfo-1.14.66-150400.3.35.1 * zypper-debugsource-1.14.66-150400.3.35.1 * libzypp-devel-17.31.22-150400.3.43.1 * Basesystem Module 15-SP5 (noarch) * zypper-log-1.14.66-150400.3.35.1 * zypper-needs-restarting-1.14.66-150400.3.35.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1041742 * https://bugzilla.suse.com/show_bug.cgi?id=1203760 * https://bugzilla.suse.com/show_bug.cgi?id=1212422 * https://bugzilla.suse.com/show_bug.cgi?id=1215979 * https://bugzilla.suse.com/show_bug.cgi?id=1216091

1 0

SUSE-SU-2023:4537-1: moderate: Security update for libxml2
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Security update for libxml2 Announcement ID: SUSE-SU-2023:4537-1 Rating: moderate References: * bsc#1216129 Cross-References: * CVE-2023-45322 CVSS scores: * CVE-2023-45322 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-45322 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Python 3 Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for libxml2 fixes the following issues: * CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4537=1 openSUSE-SLE-15.4-2023-4537=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4537=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4537=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4537=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4537=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4537=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4537=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4537=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-4537=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-devel-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python311-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python311-libxml2-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * openSUSE Leap 15.4 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.25.1 * libxml2-2-32bit-2.9.14-150400.5.25.1 * libxml2-devel-32bit-2.9.14-150400.5.25.1 * openSUSE Leap 15.4 (noarch) * libxml2-doc-2.9.14-150400.5.25.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libxml2-devel-64bit-2.9.14-150400.5.25.1 * libxml2-2-64bit-debuginfo-2.9.14-150400.5.25.1 * libxml2-2-64bit-2.9.14-150400.5.25.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-python-debugsource-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libxml2-tools-2.9.14-150400.5.25.1 * libxml2-2-2.9.14-150400.5.25.1 * libxml2-devel-2.9.14-150400.5.25.1 * libxml2-2-debuginfo-2.9.14-150400.5.25.1 * libxml2-debugsource-2.9.14-150400.5.25.1 * libxml2-tools-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-debuginfo-2.9.14-150400.5.25.1 * python3-libxml2-2.9.14-150400.5.25.1 * Basesystem Module 15-SP4 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.25.1 * libxml2-2-32bit-2.9.14-150400.5.25.1 * Python 3 Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-libxml2-debuginfo-2.9.14-150400.5.25.1 * python311-libxml2-2.9.14-150400.5.25.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45322.html * https://bugzilla.suse.com/show_bug.cgi?id=1216129

1 0

SUSE-RU-2023:4538-1: moderate: Recommended update for screen
by maintenance＠opensuse.org 23 Nov '23

23 Nov '23

# Recommended update for screen Announcement ID: SUSE-RU-2023:4538-1 Rating: moderate References: * jsc#SMO-279 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for screen fixes the following issue: * screen is shipped to SUSE Linux Enterprise Micro 5.3, 5.4 and 5.5. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4538=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4538=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4538=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4538=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4538=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4538=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4538=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4538=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4538=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4538=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4538=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4538=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4538=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4538=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * openSUSE Leap Micro 5.4 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Manager Proxy 4.2 (x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * screen-debugsource-4.6.2-150000.5.5.1 * screen-4.6.2-150000.5.5.1 * screen-debuginfo-4.6.2-150000.5.5.1 ## References: * https://jira.suse.com/browse/SMO-279

1 0

SUSE-SU-2023:4527-1: moderate: Security update for maven, maven-resolver, sbt, xmvn
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Security update for maven, maven-resolver, sbt, xmvn Announcement ID: SUSE-SU-2023:4527-1 Rating: moderate References: * bsc#1162112 * bsc#1216529 Cross-References: * CVE-2023-46122 CVSS scores: * CVE-2023-46122 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L * CVE-2023-46122 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for maven, maven-resolver, sbt, xmvn fixes the following issues: * CVE-2023-46122: Fixed an arbitrary file write when extracting a crafted zip file with sbt (bsc#1216529). * Upgraded maven to version 3.9.4 * Upgraded maven-resolver to version 1.9.15. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4527=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4527=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4527=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4527=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4527=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4527=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4527=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4527=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4527=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4527=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4527=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4527=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4527=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * openSUSE Leap 15.4 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * maven-resolver-transport-classpath-1.9.15-150200.3.14.2 * maven-javadoc-3.9.4-150200.4.18.1 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * maven-resolver-javadoc-1.9.15-150200.3.14.2 * maven-resolver-test-util-1.9.15-150200.3.14.2 * sbt-0.13.18-150200.4.16.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * sbt-bootstrap-0.13.18-150200.4.16.1 * xmvn-connector-javadoc-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * xmvn-tools-javadoc-4.2.0-150200.3.14.1 * maven-resolver-impl-1.9.15-150200.3.14.2 * xmvn-parent-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-mojo-javadoc-4.2.0-150200.3.14.1 * xmvn-resolve-4.2.0-150200.3.14.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * openSUSE Leap 15.5 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * maven-resolver-transport-classpath-1.9.15-150200.3.14.2 * maven-javadoc-3.9.4-150200.4.18.1 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * maven-resolver-javadoc-1.9.15-150200.3.14.2 * maven-resolver-test-util-1.9.15-150200.3.14.2 * sbt-0.13.18-150200.4.16.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * sbt-bootstrap-0.13.18-150200.4.16.1 * xmvn-connector-javadoc-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * xmvn-tools-javadoc-4.2.0-150200.3.14.1 * maven-resolver-impl-1.9.15-150200.3.14.2 * xmvn-parent-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-mojo-javadoc-4.2.0-150200.3.14.1 * xmvn-resolve-4.2.0-150200.3.14.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-minimal-4.2.0-150200.3.14.1 * xmvn-4.2.0-150200.3.14.1 * Development Tools Module 15-SP4 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * Development Tools Module 15-SP5 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-util-1.9.15-150200.3.14.2 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Package Hub 15 15-SP5 (noarch) * sbt-bootstrap-0.13.18-150200.4.16.1 * sbt-0.13.18-150200.4.16.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * xmvn-minimal-4.2.0-150200.3.14.1 * maven-3.9.4-150200.4.18.1 * maven-lib-3.9.4-150200.4.18.1 * xmvn-4.2.0-150200.3.14.1 * SUSE Enterprise Storage 7.1 (noarch) * xmvn-core-4.2.0-150200.3.14.1 * xmvn-connector-4.2.0-150200.3.14.1 * xmvn-install-4.2.0-150200.3.14.1 * maven-resolver-api-1.9.15-150200.3.14.2 * xmvn-subst-4.2.0-150200.3.14.1 * xmvn-mojo-4.2.0-150200.3.14.1 * maven-resolver-named-locks-1.9.15-150200.3.14.2 * maven-resolver-spi-1.9.15-150200.3.14.2 * xmvn-resolve-4.2.0-150200.3.14.1 * maven-resolver-connector-basic-1.9.15-150200.3.14.2 * maven-resolver-transport-file-1.9.15-150200.3.14.2 * maven-resolver-impl-1.9.15-150200.3.14.2 * maven-resolver-util-1.9.15-150200.3.14.2 * xmvn-api-4.2.0-150200.3.14.1 * maven-resolver-transport-wagon-1.9.15-150200.3.14.2 * maven-resolver-transport-http-1.9.15-150200.3.14.2 ## References: * https://www.suse.com/security/cve/CVE-2023-46122.html * https://bugzilla.suse.com/show_bug.cgi?id=1162112 * https://bugzilla.suse.com/show_bug.cgi?id=1216529

1 0

SUSE-SU-2023:4528-1: important: Security update for python-Pillow
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Security update for python-Pillow Announcement ID: SUSE-SU-2023:4528-1 Rating: important References: * bsc#1216894 Cross-References: * CVE-2023-44271 CVSS scores: * CVE-2023-44271 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-44271 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP4 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-Pillow fixes the following issues: * CVE-2023-44271: Fixed uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (bsc#1216894). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4528=1 openSUSE-SLE-15.4-2023-4528=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4528=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-4528=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2023-4528=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 * Python 3 Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-Pillow-tk-9.5.0-150400.5.6.1 * python-Pillow-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-tk-debuginfo-9.5.0-150400.5.6.1 * python311-Pillow-9.5.0-150400.5.6.1 * python311-Pillow-debuginfo-9.5.0-150400.5.6.1 * python-Pillow-debugsource-9.5.0-150400.5.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-44271.html * https://bugzilla.suse.com/show_bug.cgi?id=1216894

1 0

SUSE-SU-2023:4529-1: important: Security update for strongswan
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Security update for strongswan Announcement ID: SUSE-SU-2023:4529-1 Rating: important References: * bsc#1216901 Cross-References: * CVE-2023-41913 CVSS scores: * CVE-2023-41913 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for strongswan fixes the following issues: * CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4529=1 openSUSE-SLE-15.5-2023-4529=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4529=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4529=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-4529=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * strongswan-ipsec-5.9.11-150500.5.6.1 * strongswan-mysql-5.9.11-150500.5.6.1 * strongswan-nm-debuginfo-5.9.11-150500.5.6.1 * strongswan-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 * strongswan-nm-5.9.11-150500.5.6.1 * strongswan-sqlite-5.9.11-150500.5.6.1 * strongswan-hmac-5.9.11-150500.5.6.1 * strongswan-ipsec-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-5.9.11-150500.5.6.1 * strongswan-debugsource-5.9.11-150500.5.6.1 * strongswan-mysql-debuginfo-5.9.11-150500.5.6.1 * strongswan-sqlite-debuginfo-5.9.11-150500.5.6.1 * openSUSE Leap 15.5 (noarch) * strongswan-doc-5.9.11-150500.5.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * strongswan-ipsec-5.9.11-150500.5.6.1 * strongswan-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 * strongswan-hmac-5.9.11-150500.5.6.1 * strongswan-ipsec-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-debuginfo-5.9.11-150500.5.6.1 * strongswan-libs0-5.9.11-150500.5.6.1 * strongswan-debugsource-5.9.11-150500.5.6.1 * Basesystem Module 15-SP5 (noarch) * strongswan-doc-5.9.11-150500.5.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * strongswan-debugsource-5.9.11-150500.5.6.1 * strongswan-nm-debuginfo-5.9.11-150500.5.6.1 * strongswan-nm-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * strongswan-debugsource-5.9.11-150500.5.6.1 * strongswan-nm-debuginfo-5.9.11-150500.5.6.1 * strongswan-nm-5.9.11-150500.5.6.1 * strongswan-debuginfo-5.9.11-150500.5.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41913.html * https://bugzilla.suse.com/show_bug.cgi?id=1216901

1 0

SUSE-RU-2023:4531-1: moderate: Recommended update for perl-DateTime-TimeZone
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Recommended update for perl-DateTime-TimeZone Announcement ID: SUSE-RU-2023:4531-1 Rating: moderate References: * bsc#1104700 * bsc#1113554 * bsc#1204923 * jsc#PED-6726 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that contains one feature and has three fixes can now be installed. ## Description: This update for perl-DateTime-TimeZone fixes the following issues: * updated to 2.60 (jsc#PED-6726, bsc#1204923, bsc#1113554, bsc#1104700) full changelog at https://metacpan.org/release/DROLSKY/DateTime- TimeZone-2.60/changes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4531=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4531=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4531=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4531=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4531=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4531=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4531=1 ## Package List: * SUSE Manager Retail Branch Server 4.2 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * SUSE Manager Server 4.2 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * openSUSE Leap 15.4 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * openSUSE Leap 15.5 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * Basesystem Module 15-SP4 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * Basesystem Module 15-SP5 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * SUSE Manager Proxy 4.2 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1104700 * https://bugzilla.suse.com/show_bug.cgi?id=1113554 * https://bugzilla.suse.com/show_bug.cgi?id=1204923 * https://jira.suse.com/browse/PED-6726

1 0

SUSE-RU-2023:4525-1: moderate: Recommended update for samba
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Recommended update for samba Announcement ID: SUSE-RU-2023:4525-1 Rating: moderate References: * bsc#1213607 * bsc#1213826 * bsc#1215212 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has three fixes can now be installed. ## Description: This update for samba fixes the following issues: * Update to samba 4.17.12 * Some filenames can cause assert to fail in openat_pathref_fsp_nosymlink * reply_sesssetup_and_X() can dereference uninitialized tmp pointer * Missing return in reply_exit_done() * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer * Improve GetNChanges to address synchronization tool looping during the initial user sync phase * Samba replication logs show (null) DN * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination * Spotlight results return wrong date in result list * Delays at reconnect with smb2_validate_sequence_number: bad message_id 2 * samba-tool ntacl get segfault if aio_pthread appended * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed * File doesn't show when user doesn't have permission if aio_pthread is loaded * net ads lookup with unspecified realm fails * Regression DFS not working with widelinks = true (bsc#1213607); * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1 * mdssvc: Do an early talloc_free() in _mdssvc_open() * Windows client join fails if a second container CN=System exists somewhere * Fix crossing automounter mount points (bsc#1215212) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4525=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4525=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2023-4525=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4525=1 openSUSE-SLE-15.5-2023-4525=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libsamba-policy-python3-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-gpupdate-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-tool-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-4.17.12+git.427.2619dc0bed-150500.3.14.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * samba-ceph-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ceph-4.17.12+git.427.2619dc0bed-150500.3.14.1 * Basesystem Module 15-SP5 (x86_64) * samba-client-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * ctdb-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libsamba-policy-python3-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-pcp-pmda-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-gpupdate-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-tool-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-pcp-pmda-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-test-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-test-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (x86_64) * samba-client-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (noarch) * samba-doc-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (aarch64 x86_64) * samba-ceph-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ceph-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (aarch64_ilp32) * samba-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213607 * https://bugzilla.suse.com/show_bug.cgi?id=1213826 * https://bugzilla.suse.com/show_bug.cgi?id=1215212

1 0

SUSE-SU-2023:4513-1: important: Security update for apache2-mod_jk
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for apache2-mod_jk Announcement ID: SUSE-SU-2023:4513-1 Rating: important References: * bsc#1114612 Cross-References: * CVE-2018-11759 CVSS scores: * CVE-2018-11759 ( SUSE ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2018-11759 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for apache2-mod_jk fixes the following issues: Update to version 1.2.49: Apache * Retrieve default request id from mod_unique_id. It can also be taken from an arbitrary environment variable by configuring "JkRequestIdIndicator". * Don't delegate the generatation of the response body to httpd when the status code represents an error if the request used the HEAD method. * Only export the main module symbol. Visibility of module internal symbols led to crashes when conflicting with library symbols. Based on a patch provided by Josef Čejka. * Remove support for implicit mapping of requests to workers. All mappings must now be explicit. IIS * Set default request id as a GUID. It can also be taken from an arbitrary request header by configuring "request_id_header". * Fix non-empty check for the Translate header. Common * Fix compiler warning when initializing and copying fixed length strings. * Add a request id to mod_jk log lines. * Enable configure to find the correct sizes for pid_t and pthread_t when building on MacOS. * Fix Clang 15/16 compatability. Pull request #6 provided by Sam James. * Improve XSS hardening in status worker. * Add additional bounds and error checking when reading AJP messages. Docs * Remove support for the Netscape / Sun ONE / Oracle iPlanet Web Server as the product has been retired. * Remove links to the old JK2 documentation. The JK2 documentation is still available, it is just no longer linked from the current JK documentation. * Restructure subsections in changelog starting with version 1.2.45. Changes for 1.2.47 and 1.2.48 updates: * Add: Apache: Extend trace level logging of method entry/exit to aid debugging of request mapping issues. * Fix: Apache: Fix a bug in the normalization checks that prevented file based requests, such as SSI file includes, from being processed. * Fix: Apache: When using JkAutoAlias, ensure that files that include spaces in their name are accessible. * Update: Common: Update the documentation to reflect that the source code for the Apache Tomcat Connectors has moved from Subversion to Git. * Fix: Common: When using set_session_cookie, ensure that an updated session cookie is issued if the load-balancer has to failover to a different worker. * Update: Common: Update config.guess and config.sub from https://git.savannah.gnu.org/git/config.git. * Update: Common: Update release script for migration to git. Update to version 1.2.46 Fixes: * Apache: Fix regression in 1.2.44 which resulted in socket_connect_timeout to be interpreted in units of seconds instead of milliseconds on platforms that provide poll(). (rjung) * Security: CVE-2018-11759 Connector path traversal [bsc#1114612] Update to version 1.2.45 Fixes: * Correct regression in 1.2.44 that broke request handling for OPTIONS * requests. (rjung) * Improve path parameter parsing so that the session ID specified by the session_path worker property for load-balanced workers can be extracted from a path parameter in any segment of the URI, rather than only from the final segment. (markt) * Apache: Improve path parameter handling so that JkStripSession can remove session IDs that are specified on path parameters in any segment of the URI rather than only the final segment. (markt) * IIS: Improve path parameter handling so that strip_session can remove session IDs that are specified on path parameters in any segment of the URI rather than only the final segment. (markt) Updates: * Apache: Update the documentation to note additional limitations of the JkAutoAlias directive. (markt) Code: * Common: Optimize path parameter handling. (rjung) Update to version 1.2.44 Updates: * Remove the Novell Netware make files and Netware specific source code since there has not been a supported version of Netware available for over five years. (markt) * Apache: Update the documentation to use httpd 2.4.x style access control directives. (markt) * Update PCRE bundled with the ISAPI redirector to 8.42. (rjung) * Update config.guess and config.sub from https://git.savannah.gnu.org/git/config.git. (rjung) Fixes: * Common: Use Local, rather than Global, mutexs on Windows to better support multi-user environments. (markt) * Apache: Use poll rather than select to avoid the limitations of select triggering an httpd crash. Patch provided by Koen Wilde. (markt) * ISAPI: Remove the check that rejects requests that contain path segments that match WEB-INF or META-INF as it duplicates a check that Tomcat performs and, because ISAPI does not have visibility of the current context path, it is impossible to implement this check without valid requests being rejected. (markt) * Refactor normalisation of request URIs to a common location and align the normalisation implementation for mod_jk with that implemented by Tomcat. (markt) Add: * Clarify the behvaiour of lb workers when all ajp13 workers fail with particular reference to the role of the retries attribute. (markt) * Add the new load-balancer worker property lb_retries to improve the control over the number of retries. Based on a patch provided by Frederik Nosi. (markt) * Add a note to the documentation that the CollapseSlashes options are now effectively hard-coded to CollpaseSlashesAll due to the changes made to align normalization with that implemented in Tomcat. (markt) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4513=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4513=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4513=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4513=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 ## References: * https://www.suse.com/security/cve/CVE-2018-11759.html * https://bugzilla.suse.com/show_bug.cgi?id=1114612

1 0

SUSE-SU-2023:4514-1: important: Security update for strongswan
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for strongswan Announcement ID: SUSE-SU-2023:4514-1 Rating: important References: * bsc#1216901 Cross-References: * CVE-2023-41913 CVSS scores: * CVE-2023-41913 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Workstation Extension 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 An update that solves one vulnerability can now be installed. ## Description: This update for strongswan fixes the following issues: * CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4514=1 openSUSE-SLE-15.4-2023-4514=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4514=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4514=1 * SUSE Linux Enterprise Workstation Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-4514=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * strongswan-mysql-debuginfo-5.9.11-150400.19.17.2 * strongswan-nm-5.9.11-150400.19.17.2 * strongswan-mysql-5.9.11-150400.19.17.2 * strongswan-sqlite-5.9.11-150400.19.17.2 * strongswan-libs0-debuginfo-5.9.11-150400.19.17.2 * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-ipsec-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-hmac-5.9.11-150400.19.17.2 * strongswan-sqlite-debuginfo-5.9.11-150400.19.17.2 * strongswan-ipsec-debuginfo-5.9.11-150400.19.17.2 * strongswan-libs0-5.9.11-150400.19.17.2 * strongswan-nm-debuginfo-5.9.11-150400.19.17.2 * strongswan-5.9.11-150400.19.17.2 * openSUSE Leap 15.4 (noarch) * strongswan-doc-5.9.11-150400.19.17.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * strongswan-libs0-debuginfo-5.9.11-150400.19.17.2 * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-ipsec-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-hmac-5.9.11-150400.19.17.2 * strongswan-ipsec-debuginfo-5.9.11-150400.19.17.2 * strongswan-libs0-5.9.11-150400.19.17.2 * strongswan-5.9.11-150400.19.17.2 * Basesystem Module 15-SP4 (noarch) * strongswan-doc-5.9.11-150400.19.17.2 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-nm-debuginfo-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-nm-5.9.11-150400.19.17.2 * SUSE Linux Enterprise Workstation Extension 15 SP4 (x86_64) * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-nm-debuginfo-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-nm-5.9.11-150400.19.17.2 ## References: * https://www.suse.com/security/cve/CVE-2023-41913.html * https://bugzilla.suse.com/show_bug.cgi?id=1216901

1 0

SUSE-SU-2023:4517-1: moderate: Security update for python3-setuptools
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for python3-setuptools Announcement ID: SUSE-SU-2023:4517-1 Rating: moderate References: * bsc#1206667 Cross-References: * CVE-2022-40897 CVSS scores: * CVE-2022-40897 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2022-40897 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python3-setuptools fixes the following issues: * CVE-2022-40897: Fixed Regular Expression Denial of Service (ReDoS) in package_index.py (bsc#1206667). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4517=1 openSUSE-SLE-15.4-2023-4517=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4517=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4517=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4517=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4517=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4517=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4517=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4517=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4517=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4517=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4517=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 * openSUSE Leap Micro 5.3 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * openSUSE Leap Micro 5.4 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * openSUSE Leap 15.5 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * Basesystem Module 15-SP4 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 * Basesystem Module 15-SP5 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-40897.html * https://bugzilla.suse.com/show_bug.cgi?id=1206667

1 0

SUSE-SU-2023:4518-1: important: Security update for openssl-1_1
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2023:4518-1 Rating: important References: * bsc#1216922 Cross-References: * CVE-2023-5678 CVSS scores: * CVE-2023-5678 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5678 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4518=1 openSUSE-SLE-15.5-2023-4518=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4518=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4518=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * openssl-1_1-debugsource-1.1.1l-150500.17.22.1 * libopenssl1_1-1.1.1l-150500.17.22.1 * openssl-1_1-1.1.1l-150500.17.22.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl-1_1-devel-1.1.1l-150500.17.22.1 * libopenssl1_1-hmac-1.1.1l-150500.17.22.1 * openSUSE Leap 15.5 (x86_64) * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.22.1 * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.22.1 * libopenssl1_1-32bit-1.1.1l-150500.17.22.1 * libopenssl-1_1-devel-32bit-1.1.1l-150500.17.22.1 * openSUSE Leap 15.5 (noarch) * openssl-1_1-doc-1.1.1l-150500.17.22.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl-1_1-devel-64bit-1.1.1l-150500.17.22.1 * libopenssl1_1-hmac-64bit-1.1.1l-150500.17.22.1 * libopenssl1_1-64bit-debuginfo-1.1.1l-150500.17.22.1 * libopenssl1_1-64bit-1.1.1l-150500.17.22.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * openssl-1_1-debugsource-1.1.1l-150500.17.22.1 * libopenssl1_1-1.1.1l-150500.17.22.1 * openssl-1_1-1.1.1l-150500.17.22.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl-1_1-devel-1.1.1l-150500.17.22.1 * libopenssl1_1-hmac-1.1.1l-150500.17.22.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openssl-1_1-debugsource-1.1.1l-150500.17.22.1 * libopenssl1_1-1.1.1l-150500.17.22.1 * openssl-1_1-1.1.1l-150500.17.22.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl-1_1-devel-1.1.1l-150500.17.22.1 * libopenssl1_1-hmac-1.1.1l-150500.17.22.1 * Basesystem Module 15-SP5 (x86_64) * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.22.1 * libopenssl1_1-32bit-1.1.1l-150500.17.22.1 * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.22.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5678.html * https://bugzilla.suse.com/show_bug.cgi?id=1216922

1 0

SUSE-SU-2023:4522-1: important: Security update for openssl-1_0_0
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for openssl-1_0_0 Announcement ID: SUSE-SU-2023:4522-1 Rating: important References: * bsc#1216922 Cross-References: * CVE-2023-5678 CVSS scores: * CVE-2023-5678 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5678 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Legacy Module 15-SP4 * Legacy Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_0_0 fixes the following issues: * CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4522=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4522=1 * Legacy Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2023-4522=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2023-4522=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4522=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4522=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4522=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4522=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4522=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4522=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4522=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4522=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4522=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-cavs-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * openssl-1_0_0-cavs-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * openSUSE Leap 15.4 (x86_64) * libopenssl-1_0_0-devel-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-32bit-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-32bit-1.0.2p-150000.3.88.1 * openSUSE Leap 15.4 (noarch) * openssl-1_0_0-doc-1.0.2p-150000.3.88.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-cavs-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * openssl-1_0_0-cavs-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * openSUSE Leap 15.5 (x86_64) * libopenssl-1_0_0-devel-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-32bit-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-32bit-1.0.2p-150000.3.88.1 * openSUSE Leap 15.5 (noarch) * openssl-1_0_0-doc-1.0.2p-150000.3.88.1 * Legacy Module 15-SP4 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE CaaS Platform 4.0 (x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5678.html * https://bugzilla.suse.com/show_bug.cgi?id=1216922

1 0

SUSE-SU-2023:4524-1: important: Security update for openssl-1_1
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2023:4524-1 Rating: important References: * bsc#1216922 Cross-References: * CVE-2023-5678 CVSS scores: * CVE-2023-5678 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5678 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4524=1 SUSE-2023-4524=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4524=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4524=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4524=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4524=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4524=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4524=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4524=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * openSUSE Leap 15.4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.60.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.60.2 * libopenssl1_1-32bit-1.1.1l-150400.7.60.2 * openSUSE Leap 15.4 (noarch) * openssl-1_1-doc-1.1.1l-150400.7.60.2 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl1_1-64bit-debuginfo-1.1.1l-150400.7.60.2 * libopenssl1_1-64bit-1.1.1l-150400.7.60.2 * libopenssl1_1-hmac-64bit-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-64bit-1.1.1l-150400.7.60.2 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * Basesystem Module 15-SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.60.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.60.2 * libopenssl1_1-32bit-1.1.1l-150400.7.60.2 ## References: * https://www.suse.com/security/cve/CVE-2023-5678.html * https://bugzilla.suse.com/show_bug.cgi?id=1216922

1 0

SUSE-SU-2023:4503-1: moderate: Security update for avahi
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for avahi Announcement ID: SUSE-SU-2023:4503-1 Rating: moderate References: * bsc#1215947 * bsc#1216419 Cross-References: * CVE-2023-38470 * CVE-2023-38473 CVSS scores: * CVE-2023-38470 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38470 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38473 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38473 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP4 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for avahi fixes the following issues: * CVE-2023-38470: Ensure each label is at least one byte long (bsc#1215947). * CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4503=1 openSUSE-SLE-15.4-2023-4503=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4503=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4503=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4503=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4503=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4503=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4503=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4503=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4503=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4503=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4503=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4503=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4503=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4503=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4503=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libavahi-gobject-devel-0.8-150400.7.10.1 * libdns_sd-0.8-150400.7.10.1 * libavahi-glib-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * avahi-autoipd-debuginfo-0.8-150400.7.10.1 * libavahi-libevent1-0.8-150400.7.10.1 * libhowl0-debuginfo-0.8-150400.7.10.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.10.1 * libavahi-devel-0.8-150400.7.10.1 * avahi-utils-gtk-0.8-150400.7.10.1 * libavahi-glib1-0.8-150400.7.10.1 * avahi-utils-0.8-150400.7.10.1 * avahi-autoipd-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * libavahi-core7-debuginfo-0.8-150400.7.10.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.10.1 * python3-avahi-0.8-150400.7.10.1 * libavahi-glib1-debuginfo-0.8-150400.7.10.1 * libhowl0-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * python3-avahi-gtk-0.8-150400.7.10.1 * libavahi-qt5-1-0.8-150400.7.10.1 * libavahi-libevent1-debuginfo-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * avahi-qt5-debugsource-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.10.1 * avahi-utils-debuginfo-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * libavahi-qt5-devel-0.8-150400.7.10.1 * libavahi-gobject0-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * avahi-utils-gtk-debuginfo-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-0.8-150400.7.10.1 * avahi-compat-howl-devel-0.8-150400.7.10.1 * libavahi-qt5-1-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-debuginfo-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * libdns_sd-debuginfo-0.8-150400.7.10.1 * openSUSE Leap 15.4 (x86_64) * libdns_sd-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-common3-32bit-0.8-150400.7.10.1 * libavahi-client3-32bit-0.8-150400.7.10.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.10.1 * libdns_sd-32bit-0.8-150400.7.10.1 * avahi-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-glib1-32bit-0.8-150400.7.10.1 * libavahi-glib1-32bit-debuginfo-0.8-150400.7.10.1 * openSUSE Leap 15.4 (noarch) * avahi-lang-0.8-150400.7.10.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libavahi-client3-64bit-0.8-150400.7.10.1 * avahi-64bit-debuginfo-0.8-150400.7.10.1 * libavahi-common3-64bit-0.8-150400.7.10.1 * libavahi-common3-64bit-debuginfo-0.8-150400.7.10.1 * libdns_sd-64bit-debuginfo-0.8-150400.7.10.1 * libavahi-glib1-64bit-0.8-150400.7.10.1 * libdns_sd-64bit-0.8-150400.7.10.1 * libavahi-glib1-64bit-debuginfo-0.8-150400.7.10.1 * libavahi-client3-64bit-debuginfo-0.8-150400.7.10.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libavahi-gobject-devel-0.8-150400.7.10.1 * libdns_sd-0.8-150400.7.10.1 * libavahi-glib-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * avahi-autoipd-debuginfo-0.8-150400.7.10.1 * libavahi-libevent1-0.8-150400.7.10.1 * libhowl0-debuginfo-0.8-150400.7.10.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.10.1 * libavahi-devel-0.8-150400.7.10.1 * avahi-utils-gtk-0.8-150400.7.10.1 * libavahi-glib1-0.8-150400.7.10.1 * avahi-utils-0.8-150400.7.10.1 * avahi-autoipd-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * libavahi-core7-debuginfo-0.8-150400.7.10.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.10.1 * python3-avahi-0.8-150400.7.10.1 * libavahi-glib1-debuginfo-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * libhowl0-0.8-150400.7.10.1 * python3-avahi-gtk-0.8-150400.7.10.1 * libavahi-qt5-1-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-libevent1-debuginfo-0.8-150400.7.10.1 * avahi-qt5-debugsource-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.10.1 * avahi-utils-debuginfo-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * libavahi-qt5-devel-0.8-150400.7.10.1 * libavahi-gobject0-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * avahi-utils-gtk-debuginfo-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-0.8-150400.7.10.1 * avahi-compat-howl-devel-0.8-150400.7.10.1 * libavahi-qt5-1-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-debuginfo-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * libdns_sd-debuginfo-0.8-150400.7.10.1 * openSUSE Leap 15.5 (x86_64) * libdns_sd-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-common3-32bit-0.8-150400.7.10.1 * libavahi-client3-32bit-0.8-150400.7.10.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.10.1 * libdns_sd-32bit-0.8-150400.7.10.1 * avahi-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-glib1-32bit-0.8-150400.7.10.1 * libavahi-glib1-32bit-debuginfo-0.8-150400.7.10.1 * openSUSE Leap 15.5 (noarch) * avahi-lang-0.8-150400.7.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libdns_sd-0.8-150400.7.10.1 * libavahi-glib-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-libevent1-0.8-150400.7.10.1 * libhowl0-debuginfo-0.8-150400.7.10.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.10.1 * libavahi-devel-0.8-150400.7.10.1 * libavahi-glib1-0.8-150400.7.10.1 * avahi-utils-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * libavahi-core7-debuginfo-0.8-150400.7.10.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.10.1 * libavahi-glib1-debuginfo-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * libhowl0-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-libevent1-debuginfo-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.10.1 * avahi-utils-debuginfo-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-0.8-150400.7.10.1 * avahi-compat-howl-devel-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-debuginfo-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * libdns_sd-debuginfo-0.8-150400.7.10.1 * Basesystem Module 15-SP4 (noarch) * avahi-lang-0.8-150400.7.10.1 * Basesystem Module 15-SP4 (x86_64) * libavahi-common3-32bit-0.8-150400.7.10.1 * libavahi-client3-32bit-0.8-150400.7.10.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.10.1 * avahi-32bit-debuginfo-0.8-150400.7.10.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libdns_sd-0.8-150400.7.10.1 * libavahi-glib-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-libevent1-0.8-150400.7.10.1 * libhowl0-debuginfo-0.8-150400.7.10.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.10.1 * libavahi-devel-0.8-150400.7.10.1 * libavahi-glib1-0.8-150400.7.10.1 * avahi-utils-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * libavahi-core7-debuginfo-0.8-150400.7.10.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.10.1 * libavahi-glib1-debuginfo-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * libhowl0-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-libevent1-debuginfo-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.10.1 * avahi-utils-debuginfo-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-0.8-150400.7.10.1 * avahi-compat-howl-devel-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-debuginfo-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * libdns_sd-debuginfo-0.8-150400.7.10.1 * Basesystem Module 15-SP5 (noarch) * avahi-lang-0.8-150400.7.10.1 * Basesystem Module 15-SP5 (x86_64) * libavahi-common3-32bit-0.8-150400.7.10.1 * libavahi-client3-32bit-0.8-150400.7.10.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.10.1 * avahi-32bit-debuginfo-0.8-150400.7.10.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * avahi-utils-gtk-debuginfo-0.8-150400.7.10.1 * libavahi-gobject-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * avahi-autoipd-debuginfo-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * avahi-utils-gtk-0.8-150400.7.10.1 * avahi-autoipd-0.8-150400.7.10.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * avahi-utils-gtk-debuginfo-0.8-150400.7.10.1 * libavahi-gobject-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * avahi-autoipd-debuginfo-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * avahi-utils-gtk-0.8-150400.7.10.1 * avahi-autoipd-0.8-150400.7.10.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * avahi-debugsource-0.8-150400.7.10.1 * python3-avahi-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * avahi-debugsource-0.8-150400.7.10.1 * python3-avahi-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38470.html * https://www.suse.com/security/cve/CVE-2023-38473.html * https://bugzilla.suse.com/show_bug.cgi?id=1215947 * https://bugzilla.suse.com/show_bug.cgi?id=1216419

1 0

SUSE-SU-2023:4504-1: moderate: Security update for libxml2
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for libxml2 Announcement ID: SUSE-SU-2023:4504-1 Rating: moderate References: * bsc#1216129 Cross-References: * CVE-2023-45322 CVSS scores: * CVE-2023-45322 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-45322 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libxml2 fixes the following issues: * CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4504=1 openSUSE-SLE-15.5-2023-4504=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4504=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4504=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2023-4504=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libxml2-tools-debuginfo-2.10.3-150500.5.11.1 * libxml2-devel-2.10.3-150500.5.11.1 * libxml2-tools-2.10.3-150500.5.11.1 * libxml2-python-debugsource-2.10.3-150500.5.11.1 * python311-libxml2-2.10.3-150500.5.11.1 * python311-libxml2-debuginfo-2.10.3-150500.5.11.1 * libxml2-debugsource-2.10.3-150500.5.11.1 * python3-libxml2-2.10.3-150500.5.11.1 * python3-libxml2-debuginfo-2.10.3-150500.5.11.1 * libxml2-2-2.10.3-150500.5.11.1 * libxml2-2-debuginfo-2.10.3-150500.5.11.1 * openSUSE Leap 15.5 (x86_64) * libxml2-2-32bit-2.10.3-150500.5.11.1 * libxml2-2-32bit-debuginfo-2.10.3-150500.5.11.1 * libxml2-devel-32bit-2.10.3-150500.5.11.1 * openSUSE Leap 15.5 (noarch) * libxml2-doc-2.10.3-150500.5.11.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libxml2-2-64bit-2.10.3-150500.5.11.1 * libxml2-2-64bit-debuginfo-2.10.3-150500.5.11.1 * libxml2-devel-64bit-2.10.3-150500.5.11.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libxml2-tools-debuginfo-2.10.3-150500.5.11.1 * libxml2-tools-2.10.3-150500.5.11.1 * libxml2-python-debugsource-2.10.3-150500.5.11.1 * libxml2-debugsource-2.10.3-150500.5.11.1 * python3-libxml2-2.10.3-150500.5.11.1 * python3-libxml2-debuginfo-2.10.3-150500.5.11.1 * libxml2-2-2.10.3-150500.5.11.1 * libxml2-2-debuginfo-2.10.3-150500.5.11.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libxml2-tools-debuginfo-2.10.3-150500.5.11.1 * libxml2-devel-2.10.3-150500.5.11.1 * libxml2-python-debugsource-2.10.3-150500.5.11.1 * libxml2-tools-2.10.3-150500.5.11.1 * libxml2-debugsource-2.10.3-150500.5.11.1 * python3-libxml2-2.10.3-150500.5.11.1 * python3-libxml2-debuginfo-2.10.3-150500.5.11.1 * libxml2-2-2.10.3-150500.5.11.1 * libxml2-2-debuginfo-2.10.3-150500.5.11.1 * Basesystem Module 15-SP5 (x86_64) * libxml2-2-32bit-2.10.3-150500.5.11.1 * libxml2-2-32bit-debuginfo-2.10.3-150500.5.11.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-libxml2-debuginfo-2.10.3-150500.5.11.1 * python311-libxml2-2.10.3-150500.5.11.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45322.html * https://bugzilla.suse.com/show_bug.cgi?id=1216129

1 0

SUSE-SU-2023:4506-1: moderate: Security update for java-1_8_0-openjdk
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for java-1_8_0-openjdk Announcement ID: SUSE-SU-2023:4506-1 Rating: moderate References: * bsc#1211968 * bsc#1216374 * bsc#1216379 Cross-References: * CVE-2015-4000 * CVE-2023-22067 * CVE-2023-22081 CVSS scores: * CVE-2015-4000 ( NVD ): 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22067 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22067 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22081 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-22081 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Legacy Module 15-SP4 * Legacy Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves three vulnerabilities can now be installed. ## Description: This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u392 (icedtea-3.29.0) October 2023 CPU: * CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379). * CVE-2023-22081: Fixed certificate path validation issue during client authentication (bsc#1216374). * CVE-2015-4000: Fixed Logjam issue in SLES12SP5 (bsc#1211968). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4506=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4506=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4506=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4506=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4506=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4506=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4506=1 * Legacy Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2023-4506=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2023-4506=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4506=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4506=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4506=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4506=1 ## Package List: * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * SUSE CaaS Platform 4.0 (x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-src-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-accessibility-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * openSUSE Leap 15.4 (noarch) * java-1_8_0-openjdk-javadoc-1.8.0.392-150000.3.85.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-src-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-accessibility-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * openSUSE Leap 15.5 (noarch) * java-1_8_0-openjdk-javadoc-1.8.0.392-150000.3.85.1 * Legacy Module 15-SP4 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-devel-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debugsource-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-demo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-debuginfo-1.8.0.392-150000.3.85.1 * java-1_8_0-openjdk-headless-1.8.0.392-150000.3.85.1 ## References: * https://www.suse.com/security/cve/CVE-2015-4000.html * https://www.suse.com/security/cve/CVE-2023-22067.html * https://www.suse.com/security/cve/CVE-2023-22081.html * https://bugzilla.suse.com/show_bug.cgi?id=1211968 * https://bugzilla.suse.com/show_bug.cgi?id=1216374 * https://bugzilla.suse.com/show_bug.cgi?id=1216379

1 0

SUSE-SU-2023:4508-1: important: Security update for openvswitch
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for openvswitch Announcement ID: SUSE-SU-2023:4508-1 Rating: important References: * bsc#1216002 Cross-References: * CVE-2023-5366 CVSS scores: * CVE-2023-5366 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2023-5366 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for openvswitch fixes the following issues: * CVE-2023-5366: Fixed missing masks on a final stage with ports trie (bsc#1216002). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4508=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4508=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4508=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4508=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4508=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4508=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libopenvswitch-2_14-0-2.14.2-150300.19.11.1 * openvswitch-debugsource-2.14.2-150300.19.11.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150300.19.11.1 * openvswitch-test-debuginfo-2.14.2-150300.19.11.1 * openvswitch-debuginfo-2.14.2-150300.19.11.1 * ovn-20.06.2-150300.19.11.1 * openvswitch-vtep-debuginfo-2.14.2-150300.19.11.1 * ovn-host-20.06.2-150300.19.11.1 * python3-ovs-2.14.2-150300.19.11.1 * openvswitch-vtep-2.14.2-150300.19.11.1 * libovn-20_06-0-debuginfo-20.06.2-150300.19.11.1 * ovn-central-debuginfo-20.06.2-150300.19.11.1 * openvswitch-2.14.2-150300.19.11.1 * openvswitch-test-2.14.2-150300.19.11.1 * openvswitch-devel-2.14.2-150300.19.11.1 * ovn-host-debuginfo-20.06.2-150300.19.11.1 * ovn-central-20.06.2-150300.19.11.1 * libovn-20_06-0-20.06.2-150300.19.11.1 * openvswitch-pki-2.14.2-150300.19.11.1 * ovn-vtep-20.06.2-150300.19.11.1 * ovn-docker-20.06.2-150300.19.11.1 * openvswitch-ipsec-2.14.2-150300.19.11.1 * ovn-devel-20.06.2-150300.19.11.1 * ovn-debuginfo-20.06.2-150300.19.11.1 * ovn-vtep-debuginfo-20.06.2-150300.19.11.1 * openSUSE Leap 15.3 (noarch) * openvswitch-doc-2.14.2-150300.19.11.1 * ovn-doc-20.06.2-150300.19.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libopenvswitch-2_14-0-2.14.2-150300.19.11.1 * openvswitch-debugsource-2.14.2-150300.19.11.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150300.19.11.1 * openvswitch-test-debuginfo-2.14.2-150300.19.11.1 * openvswitch-debuginfo-2.14.2-150300.19.11.1 * ovn-20.06.2-150300.19.11.1 * openvswitch-vtep-debuginfo-2.14.2-150300.19.11.1 * ovn-host-20.06.2-150300.19.11.1 * python3-ovs-2.14.2-150300.19.11.1 * openvswitch-vtep-2.14.2-150300.19.11.1 * libovn-20_06-0-debuginfo-20.06.2-150300.19.11.1 * ovn-central-debuginfo-20.06.2-150300.19.11.1 * openvswitch-2.14.2-150300.19.11.1 * openvswitch-test-2.14.2-150300.19.11.1 * openvswitch-devel-2.14.2-150300.19.11.1 * ovn-host-debuginfo-20.06.2-150300.19.11.1 * ovn-central-20.06.2-150300.19.11.1 * libovn-20_06-0-20.06.2-150300.19.11.1 * openvswitch-pki-2.14.2-150300.19.11.1 * ovn-vtep-20.06.2-150300.19.11.1 * ovn-docker-20.06.2-150300.19.11.1 * openvswitch-ipsec-2.14.2-150300.19.11.1 * ovn-devel-20.06.2-150300.19.11.1 * ovn-debuginfo-20.06.2-150300.19.11.1 * ovn-vtep-debuginfo-20.06.2-150300.19.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libopenvswitch-2_14-0-2.14.2-150300.19.11.1 * openvswitch-debugsource-2.14.2-150300.19.11.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150300.19.11.1 * openvswitch-test-debuginfo-2.14.2-150300.19.11.1 * openvswitch-debuginfo-2.14.2-150300.19.11.1 * ovn-20.06.2-150300.19.11.1 * openvswitch-vtep-debuginfo-2.14.2-150300.19.11.1 * ovn-host-20.06.2-150300.19.11.1 * python3-ovs-2.14.2-150300.19.11.1 * openvswitch-vtep-2.14.2-150300.19.11.1 * libovn-20_06-0-debuginfo-20.06.2-150300.19.11.1 * ovn-central-debuginfo-20.06.2-150300.19.11.1 * openvswitch-2.14.2-150300.19.11.1 * openvswitch-test-2.14.2-150300.19.11.1 * openvswitch-devel-2.14.2-150300.19.11.1 * ovn-host-debuginfo-20.06.2-150300.19.11.1 * ovn-central-20.06.2-150300.19.11.1 * libovn-20_06-0-20.06.2-150300.19.11.1 * openvswitch-pki-2.14.2-150300.19.11.1 * ovn-vtep-20.06.2-150300.19.11.1 * ovn-docker-20.06.2-150300.19.11.1 * openvswitch-ipsec-2.14.2-150300.19.11.1 * ovn-devel-20.06.2-150300.19.11.1 * ovn-debuginfo-20.06.2-150300.19.11.1 * ovn-vtep-debuginfo-20.06.2-150300.19.11.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libopenvswitch-2_14-0-2.14.2-150300.19.11.1 * openvswitch-debugsource-2.14.2-150300.19.11.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150300.19.11.1 * openvswitch-test-debuginfo-2.14.2-150300.19.11.1 * openvswitch-debuginfo-2.14.2-150300.19.11.1 * ovn-20.06.2-150300.19.11.1 * openvswitch-vtep-debuginfo-2.14.2-150300.19.11.1 * ovn-host-20.06.2-150300.19.11.1 * python3-ovs-2.14.2-150300.19.11.1 * openvswitch-vtep-2.14.2-150300.19.11.1 * libovn-20_06-0-debuginfo-20.06.2-150300.19.11.1 * ovn-central-debuginfo-20.06.2-150300.19.11.1 * openvswitch-2.14.2-150300.19.11.1 * openvswitch-test-2.14.2-150300.19.11.1 * openvswitch-devel-2.14.2-150300.19.11.1 * ovn-host-debuginfo-20.06.2-150300.19.11.1 * ovn-central-20.06.2-150300.19.11.1 * libovn-20_06-0-20.06.2-150300.19.11.1 * openvswitch-pki-2.14.2-150300.19.11.1 * ovn-vtep-20.06.2-150300.19.11.1 * ovn-docker-20.06.2-150300.19.11.1 * openvswitch-ipsec-2.14.2-150300.19.11.1 * ovn-devel-20.06.2-150300.19.11.1 * ovn-debuginfo-20.06.2-150300.19.11.1 * ovn-vtep-debuginfo-20.06.2-150300.19.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libopenvswitch-2_14-0-2.14.2-150300.19.11.1 * openvswitch-debugsource-2.14.2-150300.19.11.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150300.19.11.1 * openvswitch-test-debuginfo-2.14.2-150300.19.11.1 * openvswitch-debuginfo-2.14.2-150300.19.11.1 * ovn-20.06.2-150300.19.11.1 * openvswitch-vtep-debuginfo-2.14.2-150300.19.11.1 * ovn-host-20.06.2-150300.19.11.1 * python3-ovs-2.14.2-150300.19.11.1 * openvswitch-vtep-2.14.2-150300.19.11.1 * libovn-20_06-0-debuginfo-20.06.2-150300.19.11.1 * ovn-central-debuginfo-20.06.2-150300.19.11.1 * openvswitch-2.14.2-150300.19.11.1 * openvswitch-test-2.14.2-150300.19.11.1 * openvswitch-devel-2.14.2-150300.19.11.1 * ovn-host-debuginfo-20.06.2-150300.19.11.1 * ovn-central-20.06.2-150300.19.11.1 * libovn-20_06-0-20.06.2-150300.19.11.1 * openvswitch-pki-2.14.2-150300.19.11.1 * ovn-vtep-20.06.2-150300.19.11.1 * ovn-docker-20.06.2-150300.19.11.1 * openvswitch-ipsec-2.14.2-150300.19.11.1 * ovn-devel-20.06.2-150300.19.11.1 * ovn-debuginfo-20.06.2-150300.19.11.1 * ovn-vtep-debuginfo-20.06.2-150300.19.11.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libopenvswitch-2_14-0-2.14.2-150300.19.11.1 * openvswitch-debugsource-2.14.2-150300.19.11.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150300.19.11.1 * openvswitch-test-debuginfo-2.14.2-150300.19.11.1 * openvswitch-debuginfo-2.14.2-150300.19.11.1 * ovn-20.06.2-150300.19.11.1 * openvswitch-vtep-debuginfo-2.14.2-150300.19.11.1 * ovn-host-20.06.2-150300.19.11.1 * python3-ovs-2.14.2-150300.19.11.1 * openvswitch-vtep-2.14.2-150300.19.11.1 * libovn-20_06-0-debuginfo-20.06.2-150300.19.11.1 * ovn-central-debuginfo-20.06.2-150300.19.11.1 * openvswitch-2.14.2-150300.19.11.1 * openvswitch-test-2.14.2-150300.19.11.1 * openvswitch-devel-2.14.2-150300.19.11.1 * ovn-host-debuginfo-20.06.2-150300.19.11.1 * ovn-central-20.06.2-150300.19.11.1 * libovn-20_06-0-20.06.2-150300.19.11.1 * openvswitch-pki-2.14.2-150300.19.11.1 * ovn-vtep-20.06.2-150300.19.11.1 * ovn-docker-20.06.2-150300.19.11.1 * openvswitch-ipsec-2.14.2-150300.19.11.1 * ovn-devel-20.06.2-150300.19.11.1 * ovn-debuginfo-20.06.2-150300.19.11.1 * ovn-vtep-debuginfo-20.06.2-150300.19.11.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5366.html * https://bugzilla.suse.com/show_bug.cgi?id=1216002

1 0

SUSE-RU-2023:4509-1: important: Recommended update for helm
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Recommended update for helm Announcement ID: SUSE-RU-2023:4509-1 Rating: important References: * bsc#1217013 Affected Products: * Containers Module 15-SP4 * Containers Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update for helm fixes the following issues: * Update to version 3.13.2 (bsc#1217013) * Fixes a regression when helm can't be pulled anonymously from registries. (bsc#1217013) * Allow using label selectors for system labels for sql backend. * Allow using label selectors for system labels for secrets and configmap backends. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4509=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4509=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-4509=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2023-4509=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4509=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4509=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4509=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4509=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4509=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4509=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4509=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.13.2-150000.1.29.1 * helm-3.13.2-150000.1.29.1 * openSUSE Leap 15.4 (noarch) * helm-zsh-completion-3.13.2-150000.1.29.1 * helm-bash-completion-3.13.2-150000.1.29.1 * helm-fish-completion-3.13.2-150000.1.29.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.13.2-150000.1.29.1 * helm-3.13.2-150000.1.29.1 * openSUSE Leap 15.5 (noarch) * helm-zsh-completion-3.13.2-150000.1.29.1 * helm-bash-completion-3.13.2-150000.1.29.1 * helm-fish-completion-3.13.2-150000.1.29.1 * Containers Module 15-SP4 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.13.2-150000.1.29.1 * helm-3.13.2-150000.1.29.1 * Containers Module 15-SP4 (noarch) * helm-zsh-completion-3.13.2-150000.1.29.1 * helm-bash-completion-3.13.2-150000.1.29.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.13.2-150000.1.29.1 * helm-3.13.2-150000.1.29.1 * Containers Module 15-SP5 (noarch) * helm-zsh-completion-3.13.2-150000.1.29.1 * helm-bash-completion-3.13.2-150000.1.29.1 * SUSE Package Hub 15 15-SP4 (noarch) * helm-fish-completion-3.13.2-150000.1.29.1 * SUSE Package Hub 15 15-SP5 (noarch) * helm-fish-completion-3.13.2-150000.1.29.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * helm-debuginfo-3.13.2-150000.1.29.1 * helm-3.13.2-150000.1.29.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * helm-zsh-completion-3.13.2-150000.1.29.1 * helm-bash-completion-3.13.2-150000.1.29.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * helm-debuginfo-3.13.2-150000.1.29.1 * helm-3.13.2-150000.1.29.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * helm-zsh-completion-3.13.2-150000.1.29.1 * helm-bash-completion-3.13.2-150000.1.29.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.13.2-150000.1.29.1 * helm-3.13.2-150000.1.29.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * helm-zsh-completion-3.13.2-150000.1.29.1 * helm-bash-completion-3.13.2-150000.1.29.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * helm-debuginfo-3.13.2-150000.1.29.1 * helm-3.13.2-150000.1.29.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * helm-zsh-completion-3.13.2-150000.1.29.1 * helm-bash-completion-3.13.2-150000.1.29.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * helm-debuginfo-3.13.2-150000.1.29.1 * helm-3.13.2-150000.1.29.1 * SUSE Enterprise Storage 7.1 (noarch) * helm-zsh-completion-3.13.2-150000.1.29.1 * helm-bash-completion-3.13.2-150000.1.29.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217013

1 0

SUSE-RU-2023:3476-2: moderate: Recommended update for jing-trang
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Recommended update for jing-trang Announcement ID: SUSE-RU-2023:3476-2 Rating: moderate References: * jsc#SLE-23217 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that contains one feature can now be installed. ## Description: This update for jing-trang fixes the following issues: * Version update from 20181222 to 20220510 (jsc#SLE-23217): * Fix NullPointerException when namespace URI is null * Travis: Dropo old Travis-no-longer supports JDKs * Fix missing format string for column argument * Add a SAX API to the Validation Driver * Fix compilation issues with Java 11 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3476=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-3476=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-3476=1 ## Package List: * openSUSE Leap 15.5 (noarch) * dtdinst-20220510-150200.10.7.3 * jing-20220510-150200.10.7.3 * jing-javadoc-20220510-150200.10.7.3 * trang-20220510-150200.10.7.3 * Development Tools Module 15-SP5 (noarch) * jing-20220510-150200.10.7.3 * SUSE Package Hub 15 15-SP5 (noarch) * trang-20220510-150200.10.7.3 ## References: * https://jira.suse.com/browse/SLE-23217

1 0

SUSE-SU-2023:4496-1: moderate: Security update for libreoffice
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for libreoffice Announcement ID: SUSE-SU-2023:4496-1 Rating: moderate References: * bsc#1209243 * bsc#1212444 * bsc#1215595 * jsc#PED-5199 * jsc#PED-6799 * jsc#PED-6800 Cross-References: * CVE-2023-1183 CVSS scores: * CVE-2023-1183 ( SUSE ): 5.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N * CVE-2023-1183 ( NVD ): 5.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP4 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability, contains three features and has two security fixes can now be installed. ## Description: This update for fixes the following issues: libreoffice was updated rom 7.5.4.1 to 7.6.2.1 (jsc#PED-6799, jsc#PED-6800): * For the highlights of changes of version 7.6 please consult the official release notes: * https://wiki.documentfoundation.org/ReleaseNotes/7.6 * You can check for each minor release notes here: * https://wiki.documentfoundation.org/Releases/7.6.2/RC1 * https://wiki.documentfoundation.org/Releases/7.6.1/RC2 * https://wiki.documentfoundation.org/Releases/7.6.1/RC1 * https://wiki.documentfoundation.org/Releases/7.6.0/RC3 * https://wiki.documentfoundation.org/Releases/7.6.0/RC2 * https://wiki.documentfoundation.org/Releases/7.6.0/RC1 * Security issues fixed: * CVE-2023-1183: Fixed arbitrary file write in LibreOffice Base (bsc#1212444, bsc#1209243) * Updated bundled dependencies: * boost version update from 1_80_0 to 1_82_0 * curl version update from 8.0.1 to 8.2.1 * icu4c-data version update from 72_1 to 73_2 * icu4c version update from 72_1 to 73_2 * pdfium version update from 5408 to 5778 * poppler version update from 22.12.0 to 23.06.0 * poppler-data version update from 0.4.11 to 0.4.12 * skia version from m103-b301ff025004c9cd82816c86c547588e6c24b466 to skia-m111-a31e897fb3dcbc96b2b40999751611d029bf5404 * New bundled dependencies: * graphite2-minimal-1.3.14.tgz * harfbuzz-8.0.0.tar.xz * New build dependencies: * frozen-devel * liborcus-0_18-0 * libixion * mdds-2_1 * New runtime dependencies: * `libreoffice-draw` requires `libreoffice-impress` (bsc#1215595) frozen was implemented: * New Libreoffice package dependency libixion was updated to version 0.18.1: * Updated to 0.18.1: * Fixed a 32-bit Linux build issue as discovered on Debian, due to a clash on two 32-bit unsigned integer types being used with std::variant. * Updated to 0.18.0: * Removed the formula_model_access interface from model_context, and switched to using model_context directly everywhere. * Revised formula_tokens_t type to remove use of std::unique_ptr for each formula_token instance. This should improve memory locality when iterating through an array of formula token values. A similar change has also been made to lexer_tokens_t and lexer_token types. * Added 41 built-in functions * Added support for multi-sheet references in Excel A1 and Excel R1C1 grammers. liborcus was updated to version 0.18.1: * Updated to 0.18.1: * sax parser: * added support for optionally skipping multiple BOM's in the beginning of XML stream. This affects all XML-based file format filters such as xls-xml (aka Excel 2003 XML). * xml-map: * fixed a bug where an XML document consisting of simple single-column records were not properly converted to sheet data * xls-xml: * fixed a bug where the filter would always pass border color even when it was not set * buildsystem: * added new configure switches --without-benchmark and --without-doc-example to optinally skip building of these two directories mdds-2_1 was implemented: * New Libreoffice package dependency ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4496=1 openSUSE-SLE-15.4-2023-4496=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4496=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4496=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4496=1 * SUSE Linux Enterprise Workstation Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-4496=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-4496=1 ## Package List: * openSUSE Leap 15.4 (noarch) * libreoffice-l10n-sa_IN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bg-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sid-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hsb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ja-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dgo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ga-7.6.2.1-150400.17.17.3 * libreoffice-l10n-et-7.6.2.1-150400.17.17.3 * libreoffice-l10n-am-7.6.2.1-150400.17.17.3 * libreoffice-l10n-my-7.6.2.1-150400.17.17.3 * libreoffice-l10n-rw-7.6.2.1-150400.17.17.3 * libreoffice-l10n-be-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ug-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ta-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ka-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ca-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_PT-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hr-7.6.2.1-150400.17.17.3 * libreoffice-gdb-pretty-printers-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-he-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sq-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sw_TZ-7.6.2.1-150400.17.17.3 * libreoffice-l10n-el-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sd-7.6.2.1-150400.17.17.3 * frozen-devel-1.1.1-150400.9.3.2 * libreoffice-l10n-zh_TW-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mni-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kok-7.6.2.1-150400.17.17.3 * libreoffice-l10n-es-7.6.2.1-150400.17.17.3 * libreoffice-l10n-vi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bn_IN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gug-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ast-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ca_valencia-7.6.2.1-150400.17.17.3 * libreoffice-glade-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tg-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bs-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-st-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-de-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gd-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kmr_Latn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ks-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ro-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mai-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sat-7.6.2.1-150400.17.17.3 * libreoffice-l10n-af-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-km-7.6.2.1-150400.17.17.3 * libreoffice-l10n-br-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tt-7.6.2.1-150400.17.17.3 * libreoffice-l10n-or-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-th-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kab-7.6.2.1-150400.17.17.3 * libreoffice-l10n-da-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-is-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cy-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ss-7.6.2.1-150400.17.17.3 * libreoffice-l10n-oc-7.6.2.1-150400.17.17.3 * libreoffice-l10n-te-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kn-7.6.2.1-150400.17.17.3 * libreoffice-branding-upstream-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ar-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cs-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ko-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ne-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lt-7.6.2.1-150400.17.17.3 * libreoffice-icon-themes-7.6.2.1-150400.17.17.3 * libreoffice-l10n-as-7.6.2.1-150400.17.17.3 * libreoffice-l10n-xh-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nso-7.6.2.1-150400.17.17.3 * libreoffice-l10n-szl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fur-7.6.2.1-150400.17.17.3 * libreoffice-l10n-si-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ru-7.6.2.1-150400.17.17.3 * libreoffice-l10n-id-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en_ZA-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ve-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ckb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dz-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dsb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-vec-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zh_CN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-om-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-uz-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ts-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ml-7.6.2.1-150400.17.17.3 * libreoffice-l10n-uk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-it-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en_GB-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_BR-7.6.2.1-150400.17.17.3 * mdds-2_1-devel-2.1.1-150400.9.3.2 * libreoffice-l10n-hu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fy-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-brx-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sl-7.6.2.1-150400.17.17.3 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libixion-devel-0.18.1-150400.14.3.2 * liborcus-tools-debuginfo-0.18.1-150400.13.3.2 * liborcus-debugsource-0.18.1-150400.13.3.2 * libreoffice-officebean-7.6.2.1-150400.17.17.3 * liborcus-0_18-0-debuginfo-0.18.1-150400.13.3.2 * libreoffice-sdk-doc-7.6.2.1-150400.17.17.3 * libreoffice-pyuno-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-debugsource-7.6.2.1-150400.17.17.3 * python3-liborcus-debuginfo-0.18.1-150400.13.3.2 * libreoffice-sdk-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-7.6.2.1-150400.17.17.3 * libreoffice-gnome-debuginfo-7.6.2.1-150400.17.17.3 * liborcus-debuginfo-0.18.1-150400.13.3.2 * libreoffice-math-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-extensions-7.6.2.1-150400.17.17.3 * libreoffice-debuginfo-7.6.2.1-150400.17.17.3 * python3-libixion-debuginfo-0.18.1-150400.14.3.2 * libixion-tools-0.18.1-150400.14.3.2 * libreoffice-mailmerge-7.6.2.1-150400.17.17.3 * libreoffice-draw-debuginfo-7.6.2.1-150400.17.17.3 * liborcus-0_18-0-0.18.1-150400.13.3.2 * libreoffice-pyuno-7.6.2.1-150400.17.17.3 * libreofficekit-devel-7.6.2.1-150400.17.17.3 * libreoffice-officebean-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-extensions-7.6.2.1-150400.17.17.3 * libreoffice-base-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-filters-optional-7.6.2.1-150400.17.17.3 * libreoffice-calc-7.6.2.1-150400.17.17.3 * libreoffice-librelogo-7.6.2.1-150400.17.17.3 * libreoffice-draw-7.6.2.1-150400.17.17.3 * libreoffice-qt5-7.6.2.1-150400.17.17.3 * libreoffice-qt5-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-base-7.6.2.1-150400.17.17.3 * libixion-debuginfo-0.18.1-150400.14.3.2 * libreoffice-writer-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-math-7.6.2.1-150400.17.17.3 * libreoffice-7.6.2.1-150400.17.17.3 * libreoffice-impress-debuginfo-7.6.2.1-150400.17.17.3 * libixion-tools-debuginfo-0.18.1-150400.14.3.2 * libreoffice-impress-7.6.2.1-150400.17.17.3 * libixion-debugsource-0.18.1-150400.14.3.2 * liborcus-tools-0.18.1-150400.13.3.2 * libreofficekit-7.6.2.1-150400.17.17.3 * python3-liborcus-0.18.1-150400.13.3.2 * libreoffice-sdk-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-debuginfo-7.6.2.1-150400.17.17.3 * libixion-0_18-0-debuginfo-0.18.1-150400.14.3.2 * libixion-0_18-0-0.18.1-150400.14.3.2 * python3-libixion-0.18.1-150400.14.3.2 * libreoffice-gnome-7.6.2.1-150400.17.17.3 * liborcus-devel-0.18.1-150400.13.3.2 * openSUSE Leap 15.5 (noarch) * libreoffice-l10n-sa_IN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bg-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sid-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hsb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ja-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dgo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ga-7.6.2.1-150400.17.17.3 * libreoffice-l10n-et-7.6.2.1-150400.17.17.3 * libreoffice-l10n-am-7.6.2.1-150400.17.17.3 * libreoffice-l10n-my-7.6.2.1-150400.17.17.3 * libreoffice-l10n-rw-7.6.2.1-150400.17.17.3 * libreoffice-l10n-be-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ug-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ta-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ka-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ca-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_PT-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hr-7.6.2.1-150400.17.17.3 * libreoffice-gdb-pretty-printers-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-he-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sq-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sw_TZ-7.6.2.1-150400.17.17.3 * libreoffice-l10n-el-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sd-7.6.2.1-150400.17.17.3 * frozen-devel-1.1.1-150400.9.3.2 * libreoffice-l10n-zh_TW-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mni-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kok-7.6.2.1-150400.17.17.3 * libreoffice-l10n-es-7.6.2.1-150400.17.17.3 * libreoffice-l10n-vi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bn_IN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gug-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ast-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ca_valencia-7.6.2.1-150400.17.17.3 * libreoffice-glade-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tg-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bs-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-st-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-de-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gd-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kmr_Latn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ks-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ro-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mai-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sat-7.6.2.1-150400.17.17.3 * libreoffice-l10n-af-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-km-7.6.2.1-150400.17.17.3 * libreoffice-l10n-br-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tt-7.6.2.1-150400.17.17.3 * libreoffice-l10n-or-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-th-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kab-7.6.2.1-150400.17.17.3 * libreoffice-l10n-da-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-is-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cy-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ss-7.6.2.1-150400.17.17.3 * libreoffice-l10n-oc-7.6.2.1-150400.17.17.3 * libreoffice-l10n-te-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kn-7.6.2.1-150400.17.17.3 * libreoffice-branding-upstream-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ar-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cs-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ko-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ne-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lt-7.6.2.1-150400.17.17.3 * libreoffice-icon-themes-7.6.2.1-150400.17.17.3 * libreoffice-l10n-as-7.6.2.1-150400.17.17.3 * libreoffice-l10n-xh-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nso-7.6.2.1-150400.17.17.3 * libreoffice-l10n-szl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fur-7.6.2.1-150400.17.17.3 * libreoffice-l10n-si-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ru-7.6.2.1-150400.17.17.3 * libreoffice-l10n-id-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en_ZA-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ve-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ckb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dz-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dsb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-vec-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zh_CN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-om-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-uz-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ts-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ml-7.6.2.1-150400.17.17.3 * libreoffice-l10n-uk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-it-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en_GB-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_BR-7.6.2.1-150400.17.17.3 * mdds-2_1-devel-2.1.1-150400.9.3.2 * libreoffice-l10n-hu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fy-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-brx-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sl-7.6.2.1-150400.17.17.3 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libixion-devel-0.18.1-150400.14.3.2 * liborcus-debuginfo-0.18.1-150400.13.3.2 * liborcus-debugsource-0.18.1-150400.13.3.2 * liborcus-tools-debuginfo-0.18.1-150400.13.3.2 * liborcus-0_18-0-debuginfo-0.18.1-150400.13.3.2 * liborcus-tools-0.18.1-150400.13.3.2 * python3-libixion-debuginfo-0.18.1-150400.14.3.2 * libixion-debuginfo-0.18.1-150400.14.3.2 * libixion-tools-0.18.1-150400.14.3.2 * python3-liborcus-0.18.1-150400.13.3.2 * python3-liborcus-debuginfo-0.18.1-150400.13.3.2 * liborcus-0_18-0-0.18.1-150400.13.3.2 * libixion-0_18-0-debuginfo-0.18.1-150400.14.3.2 * libixion-0_18-0-0.18.1-150400.14.3.2 * python3-libixion-0.18.1-150400.14.3.2 * liborcus-devel-0.18.1-150400.13.3.2 * libixion-tools-debuginfo-0.18.1-150400.14.3.2 * libixion-debugsource-0.18.1-150400.14.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * libreoffice-sdk-doc-7.6.2.1-150400.17.17.3 * libreoffice-pyuno-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-debugsource-7.6.2.1-150400.17.17.3 * libreoffice-sdk-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-7.6.2.1-150400.17.17.3 * libreoffice-gnome-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-math-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-extensions-7.6.2.1-150400.17.17.3 * libreoffice-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-mailmerge-7.6.2.1-150400.17.17.3 * libreoffice-draw-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-pyuno-7.6.2.1-150400.17.17.3 * libreofficekit-devel-7.6.2.1-150400.17.17.3 * libreoffice-officebean-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-extensions-7.6.2.1-150400.17.17.3 * libreoffice-filters-optional-7.6.2.1-150400.17.17.3 * libreoffice-calc-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-base-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-7.6.2.1-150400.17.17.3 * libreoffice-librelogo-7.6.2.1-150400.17.17.3 * libreoffice-draw-7.6.2.1-150400.17.17.3 * libreoffice-qt5-7.6.2.1-150400.17.17.3 * libreoffice-base-7.6.2.1-150400.17.17.3 * libreoffice-writer-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-math-7.6.2.1-150400.17.17.3 * libreoffice-impress-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-7.6.2.1-150400.17.17.3 * libreoffice-impress-7.6.2.1-150400.17.17.3 * libreofficekit-7.6.2.1-150400.17.17.3 * libreoffice-sdk-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-gnome-7.6.2.1-150400.17.17.3 * libreoffice-officebean-7.6.2.1-150400.17.17.3 * libreoffice-qt5-debuginfo-7.6.2.1-150400.17.17.3 * SUSE Package Hub 15 15-SP4 (noarch) * libreoffice-l10n-sa_IN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bg-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sid-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hsb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ja-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dgo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ga-7.6.2.1-150400.17.17.3 * libreoffice-l10n-et-7.6.2.1-150400.17.17.3 * libreoffice-l10n-am-7.6.2.1-150400.17.17.3 * libreoffice-l10n-my-7.6.2.1-150400.17.17.3 * libreoffice-l10n-rw-7.6.2.1-150400.17.17.3 * libreoffice-l10n-be-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ug-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ta-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ka-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ca-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_PT-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hr-7.6.2.1-150400.17.17.3 * libreoffice-gdb-pretty-printers-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-he-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sq-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sw_TZ-7.6.2.1-150400.17.17.3 * libreoffice-l10n-el-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sd-7.6.2.1-150400.17.17.3 * frozen-devel-1.1.1-150400.9.3.2 * libreoffice-l10n-zh_TW-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mni-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kok-7.6.2.1-150400.17.17.3 * libreoffice-l10n-es-7.6.2.1-150400.17.17.3 * libreoffice-l10n-vi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bn_IN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gug-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ast-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ca_valencia-7.6.2.1-150400.17.17.3 * libreoffice-glade-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tg-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bs-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-st-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-de-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gd-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kmr_Latn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ks-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ro-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mai-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sat-7.6.2.1-150400.17.17.3 * libreoffice-l10n-af-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-km-7.6.2.1-150400.17.17.3 * libreoffice-l10n-br-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tt-7.6.2.1-150400.17.17.3 * libreoffice-l10n-or-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-th-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kab-7.6.2.1-150400.17.17.3 * libreoffice-l10n-da-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-is-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cy-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ss-7.6.2.1-150400.17.17.3 * libreoffice-l10n-oc-7.6.2.1-150400.17.17.3 * libreoffice-l10n-te-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kn-7.6.2.1-150400.17.17.3 * libreoffice-branding-upstream-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ar-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cs-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ko-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ne-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lt-7.6.2.1-150400.17.17.3 * libreoffice-icon-themes-7.6.2.1-150400.17.17.3 * libreoffice-l10n-as-7.6.2.1-150400.17.17.3 * libreoffice-l10n-xh-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nso-7.6.2.1-150400.17.17.3 * libreoffice-l10n-szl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fur-7.6.2.1-150400.17.17.3 * libreoffice-l10n-si-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ru-7.6.2.1-150400.17.17.3 * libreoffice-l10n-id-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en_ZA-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ve-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ckb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dz-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dsb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-vec-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zh_CN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-om-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-uz-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ts-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ml-7.6.2.1-150400.17.17.3 * libreoffice-l10n-uk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-it-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en_GB-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_BR-7.6.2.1-150400.17.17.3 * mdds-2_1-devel-2.1.1-150400.9.3.2 * libreoffice-l10n-hu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fy-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-brx-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sl-7.6.2.1-150400.17.17.3 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le) * libreoffice-officebean-7.6.2.1-150400.17.17.3 * liborcus-0_18-0-debuginfo-0.18.1-150400.13.3.2 * libreoffice-sdk-doc-7.6.2.1-150400.17.17.3 * libreoffice-pyuno-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-debugsource-7.6.2.1-150400.17.17.3 * libreoffice-sdk-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-7.6.2.1-150400.17.17.3 * libreoffice-gnome-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-math-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-extensions-7.6.2.1-150400.17.17.3 * libreoffice-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-mailmerge-7.6.2.1-150400.17.17.3 * libreoffice-draw-debuginfo-7.6.2.1-150400.17.17.3 * liborcus-0_18-0-0.18.1-150400.13.3.2 * libreoffice-pyuno-7.6.2.1-150400.17.17.3 * libreofficekit-devel-7.6.2.1-150400.17.17.3 * libreoffice-officebean-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-extensions-7.6.2.1-150400.17.17.3 * libreoffice-filters-optional-7.6.2.1-150400.17.17.3 * libreoffice-calc-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-base-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-7.6.2.1-150400.17.17.3 * libreoffice-librelogo-7.6.2.1-150400.17.17.3 * libreoffice-draw-7.6.2.1-150400.17.17.3 * libreoffice-qt5-7.6.2.1-150400.17.17.3 * libreoffice-qt5-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-base-7.6.2.1-150400.17.17.3 * libreoffice-writer-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-math-7.6.2.1-150400.17.17.3 * libreoffice-7.6.2.1-150400.17.17.3 * libreoffice-impress-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-impress-7.6.2.1-150400.17.17.3 * libreofficekit-7.6.2.1-150400.17.17.3 * libreoffice-sdk-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-debuginfo-7.6.2.1-150400.17.17.3 * libixion-0_18-0-debuginfo-0.18.1-150400.14.3.2 * libixion-0_18-0-0.18.1-150400.14.3.2 * libreoffice-gnome-7.6.2.1-150400.17.17.3 * liborcus-devel-0.18.1-150400.13.3.2 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x) * liborcus-debuginfo-0.18.1-150400.13.3.2 * liborcus-debugsource-0.18.1-150400.13.3.2 * libixion-debuginfo-0.18.1-150400.14.3.2 * libixion-debugsource-0.18.1-150400.14.3.2 * SUSE Package Hub 15 15-SP5 (noarch) * libreoffice-l10n-sa_IN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bg-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sid-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hsb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ja-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dgo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ga-7.6.2.1-150400.17.17.3 * libreoffice-l10n-et-7.6.2.1-150400.17.17.3 * libreoffice-l10n-am-7.6.2.1-150400.17.17.3 * libreoffice-l10n-my-7.6.2.1-150400.17.17.3 * libreoffice-l10n-rw-7.6.2.1-150400.17.17.3 * libreoffice-l10n-be-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ug-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ta-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ka-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ca-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_PT-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hr-7.6.2.1-150400.17.17.3 * libreoffice-gdb-pretty-printers-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-he-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sq-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sw_TZ-7.6.2.1-150400.17.17.3 * libreoffice-l10n-el-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sd-7.6.2.1-150400.17.17.3 * frozen-devel-1.1.1-150400.9.3.2 * libreoffice-l10n-zh_TW-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mni-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kok-7.6.2.1-150400.17.17.3 * libreoffice-l10n-es-7.6.2.1-150400.17.17.3 * libreoffice-l10n-vi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bn_IN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gug-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ast-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ca_valencia-7.6.2.1-150400.17.17.3 * libreoffice-glade-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tg-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bs-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-st-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-de-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gd-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kmr_Latn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ks-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ro-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mai-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sat-7.6.2.1-150400.17.17.3 * libreoffice-l10n-af-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-km-7.6.2.1-150400.17.17.3 * libreoffice-l10n-br-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tt-7.6.2.1-150400.17.17.3 * libreoffice-l10n-or-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-th-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kab-7.6.2.1-150400.17.17.3 * libreoffice-l10n-da-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-is-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cy-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ss-7.6.2.1-150400.17.17.3 * libreoffice-l10n-oc-7.6.2.1-150400.17.17.3 * libreoffice-l10n-te-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kn-7.6.2.1-150400.17.17.3 * libreoffice-branding-upstream-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ar-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cs-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ko-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ne-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lt-7.6.2.1-150400.17.17.3 * libreoffice-icon-themes-7.6.2.1-150400.17.17.3 * libreoffice-l10n-as-7.6.2.1-150400.17.17.3 * libreoffice-l10n-xh-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nso-7.6.2.1-150400.17.17.3 * libreoffice-l10n-szl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fur-7.6.2.1-150400.17.17.3 * libreoffice-l10n-si-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ru-7.6.2.1-150400.17.17.3 * libreoffice-l10n-id-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en_ZA-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ve-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ckb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dz-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dsb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-vec-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zh_CN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-om-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-uz-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ts-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ml-7.6.2.1-150400.17.17.3 * libreoffice-l10n-uk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-it-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en_GB-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_BR-7.6.2.1-150400.17.17.3 * mdds-2_1-devel-2.1.1-150400.9.3.2 * libreoffice-l10n-hu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fy-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-brx-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sl-7.6.2.1-150400.17.17.3 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le) * libreoffice-officebean-7.6.2.1-150400.17.17.3 * liborcus-0_18-0-debuginfo-0.18.1-150400.13.3.2 * libreoffice-sdk-doc-7.6.2.1-150400.17.17.3 * libreoffice-pyuno-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-debugsource-7.6.2.1-150400.17.17.3 * libreoffice-sdk-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-7.6.2.1-150400.17.17.3 * libreoffice-gnome-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-math-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-extensions-7.6.2.1-150400.17.17.3 * libreoffice-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-mailmerge-7.6.2.1-150400.17.17.3 * libreoffice-draw-debuginfo-7.6.2.1-150400.17.17.3 * liborcus-0_18-0-0.18.1-150400.13.3.2 * libreoffice-pyuno-7.6.2.1-150400.17.17.3 * libreofficekit-devel-7.6.2.1-150400.17.17.3 * libreoffice-officebean-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-extensions-7.6.2.1-150400.17.17.3 * libreoffice-filters-optional-7.6.2.1-150400.17.17.3 * libreoffice-calc-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-base-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-7.6.2.1-150400.17.17.3 * libreoffice-librelogo-7.6.2.1-150400.17.17.3 * libreoffice-draw-7.6.2.1-150400.17.17.3 * libreoffice-qt5-7.6.2.1-150400.17.17.3 * libreoffice-qt5-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-base-7.6.2.1-150400.17.17.3 * libreoffice-writer-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-math-7.6.2.1-150400.17.17.3 * libreoffice-7.6.2.1-150400.17.17.3 * libreoffice-impress-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-impress-7.6.2.1-150400.17.17.3 * libreofficekit-7.6.2.1-150400.17.17.3 * libreoffice-sdk-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-debuginfo-7.6.2.1-150400.17.17.3 * libixion-0_18-0-debuginfo-0.18.1-150400.14.3.2 * libixion-0_18-0-0.18.1-150400.14.3.2 * libreoffice-gnome-7.6.2.1-150400.17.17.3 * liborcus-devel-0.18.1-150400.13.3.2 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * libixion-devel-0.18.1-150400.14.3.2 * liborcus-debuginfo-0.18.1-150400.13.3.2 * liborcus-debugsource-0.18.1-150400.13.3.2 * liborcus-tools-debuginfo-0.18.1-150400.13.3.2 * liborcus-tools-0.18.1-150400.13.3.2 * python3-libixion-debuginfo-0.18.1-150400.14.3.2 * libixion-debuginfo-0.18.1-150400.14.3.2 * libixion-tools-0.18.1-150400.14.3.2 * python3-liborcus-0.18.1-150400.13.3.2 * python3-liborcus-debuginfo-0.18.1-150400.13.3.2 * python3-libixion-0.18.1-150400.14.3.2 * libixion-tools-debuginfo-0.18.1-150400.14.3.2 * libixion-debugsource-0.18.1-150400.14.3.2 * SUSE Linux Enterprise Workstation Extension 15 SP4 (x86_64) * liborcus-debugsource-0.18.1-150400.13.3.2 * libreoffice-officebean-7.6.2.1-150400.17.17.3 * liborcus-0_18-0-debuginfo-0.18.1-150400.13.3.2 * libreoffice-pyuno-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-debugsource-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-7.6.2.1-150400.17.17.3 * libreoffice-gnome-debuginfo-7.6.2.1-150400.17.17.3 * liborcus-debuginfo-0.18.1-150400.13.3.2 * libreoffice-math-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-extensions-7.6.2.1-150400.17.17.3 * libreoffice-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-mailmerge-7.6.2.1-150400.17.17.3 * libreoffice-draw-debuginfo-7.6.2.1-150400.17.17.3 * liborcus-0_18-0-0.18.1-150400.13.3.2 * libreoffice-pyuno-7.6.2.1-150400.17.17.3 * libreoffice-officebean-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-extensions-7.6.2.1-150400.17.17.3 * libreoffice-base-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-filters-optional-7.6.2.1-150400.17.17.3 * libreoffice-calc-7.6.2.1-150400.17.17.3 * libreoffice-draw-7.6.2.1-150400.17.17.3 * libreoffice-base-7.6.2.1-150400.17.17.3 * libixion-debuginfo-0.18.1-150400.14.3.2 * libreoffice-writer-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-math-7.6.2.1-150400.17.17.3 * libreoffice-7.6.2.1-150400.17.17.3 * libreoffice-impress-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-impress-7.6.2.1-150400.17.17.3 * libixion-debugsource-0.18.1-150400.14.3.2 * libreofficekit-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-debuginfo-7.6.2.1-150400.17.17.3 * libixion-0_18-0-debuginfo-0.18.1-150400.14.3.2 * libixion-0_18-0-0.18.1-150400.14.3.2 * libreoffice-gnome-7.6.2.1-150400.17.17.3 * liborcus-devel-0.18.1-150400.13.3.2 * SUSE Linux Enterprise Workstation Extension 15 SP4 (noarch) * libreoffice-l10n-sr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-af-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bg-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fur-7.6.2.1-150400.17.17.3 * libreoffice-l10n-br-7.6.2.1-150400.17.17.3 * libreoffice-l10n-si-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ru-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ja-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zh_TW-7.6.2.1-150400.17.17.3 * libreoffice-l10n-or-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-es-7.6.2.1-150400.17.17.3 * libreoffice-l10n-th-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ve-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ckb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-da-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dz-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ga-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zh_CN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cy-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ss-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-et-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ts-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ml-7.6.2.1-150400.17.17.3 * libreoffice-l10n-st-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-te-7.6.2.1-150400.17.17.3 * libreoffice-l10n-uk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ar-7.6.2.1-150400.17.17.3 * libreoffice-branding-upstream-7.6.2.1-150400.17.17.3 * libreoffice-l10n-de-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-it-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cs-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ko-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_BR-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ro-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ta-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lt-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ca-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_PT-7.6.2.1-150400.17.17.3 * libreoffice-icon-themes-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-as-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-he-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-xh-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nso-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mai-7.6.2.1-150400.17.17.3 * libreoffice-l10n-el-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en-7.6.2.1-150400.17.17.3 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * liborcus-debugsource-0.18.1-150400.13.3.2 * libreoffice-officebean-7.6.2.1-150400.17.17.3 * liborcus-0_18-0-debuginfo-0.18.1-150400.13.3.2 * libreoffice-pyuno-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-debugsource-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-7.6.2.1-150400.17.17.3 * libreoffice-gnome-debuginfo-7.6.2.1-150400.17.17.3 * liborcus-debuginfo-0.18.1-150400.13.3.2 * libreoffice-math-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-extensions-7.6.2.1-150400.17.17.3 * libreoffice-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-mailmerge-7.6.2.1-150400.17.17.3 * libreoffice-draw-debuginfo-7.6.2.1-150400.17.17.3 * liborcus-0_18-0-0.18.1-150400.13.3.2 * libreoffice-pyuno-7.6.2.1-150400.17.17.3 * libreoffice-officebean-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-writer-extensions-7.6.2.1-150400.17.17.3 * libreoffice-base-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-calc-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-filters-optional-7.6.2.1-150400.17.17.3 * libreoffice-calc-7.6.2.1-150400.17.17.3 * libreoffice-draw-7.6.2.1-150400.17.17.3 * libreoffice-base-7.6.2.1-150400.17.17.3 * libixion-debuginfo-0.18.1-150400.14.3.2 * libreoffice-writer-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-7.6.2.1-150400.17.17.3 * libreoffice-gtk3-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-math-7.6.2.1-150400.17.17.3 * libreoffice-7.6.2.1-150400.17.17.3 * libreoffice-impress-debuginfo-7.6.2.1-150400.17.17.3 * libreoffice-impress-7.6.2.1-150400.17.17.3 * libixion-debugsource-0.18.1-150400.14.3.2 * libreofficekit-7.6.2.1-150400.17.17.3 * libreoffice-base-drivers-postgresql-debuginfo-7.6.2.1-150400.17.17.3 * libixion-0_18-0-debuginfo-0.18.1-150400.14.3.2 * libixion-0_18-0-0.18.1-150400.14.3.2 * libreoffice-gnome-7.6.2.1-150400.17.17.3 * liborcus-devel-0.18.1-150400.13.3.2 * SUSE Linux Enterprise Workstation Extension 15 SP5 (noarch) * libreoffice-l10n-sr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-af-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bg-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fur-7.6.2.1-150400.17.17.3 * libreoffice-l10n-br-7.6.2.1-150400.17.17.3 * libreoffice-l10n-si-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ru-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ja-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zh_TW-7.6.2.1-150400.17.17.3 * libreoffice-l10n-or-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-es-7.6.2.1-150400.17.17.3 * libreoffice-l10n-th-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ve-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ckb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-da-7.6.2.1-150400.17.17.3 * libreoffice-l10n-eo-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-dz-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ga-7.6.2.1-150400.17.17.3 * libreoffice-l10n-zh_CN-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cy-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ss-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hi-7.6.2.1-150400.17.17.3 * libreoffice-l10n-et-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ts-7.6.2.1-150400.17.17.3 * libreoffice-l10n-bn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ml-7.6.2.1-150400.17.17.3 * libreoffice-l10n-st-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-te-7.6.2.1-150400.17.17.3 * libreoffice-l10n-uk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nb-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ar-7.6.2.1-150400.17.17.3 * libreoffice-branding-upstream-7.6.2.1-150400.17.17.3 * libreoffice-l10n-de-7.6.2.1-150400.17.17.3 * libreoffice-l10n-gl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-it-7.6.2.1-150400.17.17.3 * libreoffice-l10n-kk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-cs-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ko-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_BR-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hu-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ro-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ta-7.6.2.1-150400.17.17.3 * libreoffice-l10n-lt-7.6.2.1-150400.17.17.3 * libreoffice-l10n-ca-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pa-7.6.2.1-150400.17.17.3 * libreoffice-l10n-pt_PT-7.6.2.1-150400.17.17.3 * libreoffice-icon-themes-7.6.2.1-150400.17.17.3 * libreoffice-l10n-hr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-tn-7.6.2.1-150400.17.17.3 * libreoffice-l10n-as-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sk-7.6.2.1-150400.17.17.3 * libreoffice-l10n-he-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sv-7.6.2.1-150400.17.17.3 * libreoffice-l10n-xh-7.6.2.1-150400.17.17.3 * libreoffice-l10n-nso-7.6.2.1-150400.17.17.3 * libreoffice-l10n-mai-7.6.2.1-150400.17.17.3 * libreoffice-l10n-el-7.6.2.1-150400.17.17.3 * libreoffice-l10n-sl-7.6.2.1-150400.17.17.3 * libreoffice-l10n-fr-7.6.2.1-150400.17.17.3 * libreoffice-l10n-en-7.6.2.1-150400.17.17.3 ## References: * https://www.suse.com/security/cve/CVE-2023-1183.html * https://bugzilla.suse.com/show_bug.cgi?id=1209243 * https://bugzilla.suse.com/show_bug.cgi?id=1212444 * https://bugzilla.suse.com/show_bug.cgi?id=1215595 * https://jira.suse.com/browse/PED-5199 * https://jira.suse.com/browse/PED-6799 * https://jira.suse.com/browse/PED-6800

1 0

SUSE-RU-2023:4497-1: moderate: Recommended update for kubernetes1.24
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Recommended update for kubernetes1.24 Announcement ID: SUSE-RU-2023:4497-1 Rating: moderate References: * bsc#1214406 Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for kubernetes1.24 fixes the following issues: * Fixes for bsc#1214406 * Update 'Wants' directive in [Unit] section of 'kubelet.service' by replacing 'docker.service' with 'containerd.service' * Add parameter to determine whether packets crossing a bridge are sent to iptables for processing. * Update 'kubeadm.conf' to add 'overlay' kernel module * Update to version 1.24.17: * Release commit for Kubernetes v1.24.17 * Use environment variables for parameters in Powershell and for passing path * Fix capture loop vars in parallel or ginkgo tests * Update protoc check for verify-generated-kms * Bump images, versions and deps to use Go 1.20.7 * Attempt to use AES-GCM before AES-CBC on reads * Update to version 1.24.16: * Bump images, versions and deps to use Go 1.20.6 * Only declare job as finished after removing all finalizers * Bump to cAdvisor v0.44.2 * Fix the git-repo test error caused by the correct use of loop variables * kubeadm: remove function pointer comparison in phase test * Fix to not process unsupported loadbalancers with mixed protocols * make 'MixedProtocolNotSupported' public ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4497=1 openSUSE-SLE-15.5-2023-4497=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2023-4497=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kubernetes1.24-controller-manager-1.24.17-150500.3.10.2 * kubernetes1.24-proxy-1.24.17-150500.3.10.2 * kubernetes1.24-apiserver-1.24.17-150500.3.10.2 * kubernetes1.24-kubelet-1.24.17-150500.3.10.2 * kubernetes1.24-kubeadm-1.24.17-150500.3.10.2 * kubernetes1.24-client-1.24.17-150500.3.10.2 * kubernetes1.24-client-common-1.24.17-150500.3.10.2 * kubernetes1.24-kubelet-common-1.24.17-150500.3.10.2 * kubernetes1.24-scheduler-1.24.17-150500.3.10.2 * openSUSE Leap 15.5 (noarch) * kubernetes1.24-client-fish-completion-1.24.17-150500.3.10.2 * kubernetes1.24-client-bash-completion-1.24.17-150500.3.10.2 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kubernetes1.24-client-1.24.17-150500.3.10.2 * kubernetes1.24-client-common-1.24.17-150500.3.10.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214406

1 0

SUSE-RU-2023:4498-1: moderate: Recommended update for kubernetes1.24
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Recommended update for kubernetes1.24 Announcement ID: SUSE-RU-2023:4498-1 Rating: moderate References: * bsc#1214406 Affected Products: * Containers Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for kubernetes1.24 fixes the following issues: * Fixes for bsc#1214406 * Update 'Wants' directive in [Unit] section of 'kubelet.service' by replacing 'docker.service' with 'containerd.service' * Add parameter to determine whether packets crossing a bridge are sent to iptables for processing. * Update 'kubeadm.conf' to add 'overlay' kernel module * Update to version 1.24.17: * Release commit for Kubernetes v1.24.17 * Use environment variables for parameters in Powershell and for passing path * Fix capture loop vars in parallel or ginkgo tests * Update protoc check for verify-generated-kms * Bump images, versions and deps to use Go 1.20.7 * Attempt to use AES-GCM before AES-CBC on reads ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4498=1 openSUSE-SLE-15.4-2023-4498=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-4498=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kubernetes1.24-controller-manager-1.24.17-150400.9.11.2 * kubernetes1.24-apiserver-1.24.17-150400.9.11.2 * kubernetes1.24-kubelet-1.24.17-150400.9.11.2 * kubernetes1.24-scheduler-1.24.17-150400.9.11.2 * kubernetes1.24-proxy-1.24.17-150400.9.11.2 * kubernetes1.24-kubeadm-1.24.17-150400.9.11.2 * kubernetes1.24-client-1.24.17-150400.9.11.2 * kubernetes1.24-kubelet-common-1.24.17-150400.9.11.2 * kubernetes1.24-client-common-1.24.17-150400.9.11.2 * openSUSE Leap 15.4 (noarch) * kubernetes1.24-client-fish-completion-1.24.17-150400.9.11.2 * kubernetes1.24-client-bash-completion-1.24.17-150400.9.11.2 * Containers Module 15-SP4 (aarch64 ppc64le s390x x86_64) * kubernetes1.24-client-1.24.17-150400.9.11.2 * kubernetes1.24-client-common-1.24.17-150400.9.11.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214406

1 0

SUSE-SU-2023:4500-1: important: Security update for ucode-intel
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for ucode-intel Announcement ID: SUSE-SU-2023:4500-1 Rating: important References: * bsc#1215278 Cross-References: * CVE-2023-23583 CVSS scores: * CVE-2023-23583 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for ucode-intel fixes the following issues: * Updated to Intel CPU Microcode 20231114 release. (bsc#1215278) * CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. (bsc#1215278) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4500=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4500=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4500=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4500=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4500=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4500=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4500=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4500=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4500=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4500=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4500=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4500=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4500=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4500=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4500=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4500=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4500=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4500=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4500=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4500=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4500=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4500=1 ## Package List: * openSUSE Leap Micro 5.3 (x86_64) * ucode-intel-20231114-150200.35.1 * openSUSE Leap Micro 5.4 (x86_64) * ucode-intel-20231114-150200.35.1 * openSUSE Leap 15.4 (x86_64) * ucode-intel-20231114-150200.35.1 * openSUSE Leap 15.5 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * ucode-intel-20231114-150200.35.1 * Basesystem Module 15-SP4 (x86_64) * ucode-intel-20231114-150200.35.1 * Basesystem Module 15-SP5 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Enterprise Storage 7.1 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * ucode-intel-20231114-150200.35.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * ucode-intel-20231114-150200.35.1 ## References: * https://www.suse.com/security/cve/CVE-2023-23583.html * https://bugzilla.suse.com/show_bug.cgi?id=1215278

1 0

SUSE-RU-2023:4501-1: moderate: Recommended update for patterns-sap
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Recommended update for patterns-sap Announcement ID: SUSE-RU-2023:4501-1 Rating: moderate References: * bsc#1066951 * bsc#1194741 * bsc#1209151 * bsc#1210215 * bsc#1211099 * bsc#1212097 * bsc#1212813 * bsc#1215107 * bsc#1216539 * bsc#1216568 Affected Products: * openSUSE Leap 15.4 * SAP Applications Module 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that has 10 fixes can now be installed. ## Description: This update for patterns-sap fixes the following issues: \- Add missing packages for SAP BusinessOne. (bsc#1194741) \- Rename pattern "b1" to "bone" to avoid missleading information to B1. \- Implementation: automatic Setup for SAP BusinessOne. (jsc#PED-3112, jsc#PED-3758) \- Do not require HA and SLES4SAP packages This update for sap-installation-start fixes the following issues: \- Fixed an issue when 'sap-installation-wizard' is not started after the installation with despite the option is set to. (bsc#1066951) This update for sap-installation-wizard fixes the following issues: \- Implementation: automatic Setup for SAP BusinessOne. (jsc#PED-3112, jsc#PED-3758) \- Fixes an issue when the installation wizard does not start despite the option to start after boot has set. (bsc#1066951) \- Fixes an issue when the installation wizard crashes due to wrong number of arguments in logger. (bsc#1211099) \- Fixes an issue when the summary screen is blank in SAP Hana install. (bsc#1210215) \- Fixes an issue when SAP Hana Installation fails. (bsc#1209151) \- Fixes an issue when the SAP Business One installation kit is not found by the wizard. (bsc#1212097) \- Fixes an issue when the SAP Installation Wizard is trying to install configuration file for sapconf but with different content. (bsc#1212813) \- Fixes SAP Business One password policies to match with HANA password policies. (bsc#1215107) \- Fix for sapconf setting for the missing role SAP Business One. (bsc#1216568) \- Default for xs_routing_mode was changed in HANA-2 SP7 (bsc#1216539) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4501=1 openSUSE-SLE-15.4-2023-4501=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2023-4501=1 ## Package List: * openSUSE Leap 15.4 (ppc64le x86_64) * patterns-sap-15.4-150400.4.5.5 * patterns-sap-bone-15.4-150400.4.5.5 * sap-installation-wizard-4.4.12-150400.3.14.1 * patterns-sap-hana-15.4-150400.4.5.5 * patterns-sap-nw-15.4-150400.4.5.5 * SAP Applications Module 15-SP4 (ppc64le x86_64) * sap-installation-wizard-4.4.12-150400.3.14.1 * patterns-sap-nw-15.4-150400.4.5.5 * patterns-sap-hana-15.4-150400.4.5.5 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1066951 * https://bugzilla.suse.com/show_bug.cgi?id=1194741 * https://bugzilla.suse.com/show_bug.cgi?id=1209151 * https://bugzilla.suse.com/show_bug.cgi?id=1210215 * https://bugzilla.suse.com/show_bug.cgi?id=1211099 * https://bugzilla.suse.com/show_bug.cgi?id=1212097 * https://bugzilla.suse.com/show_bug.cgi?id=1212813 * https://bugzilla.suse.com/show_bug.cgi?id=1215107 * https://bugzilla.suse.com/show_bug.cgi?id=1216539 * https://bugzilla.suse.com/show_bug.cgi?id=1216568

1 0

SUSE-FU-2023:4502-1: low: Feature update for python3
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Feature update for python3 Announcement ID: SUSE-FU-2023:4502-1 Rating: low References: * jsc#PED-68 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP4 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This feature update for python3 packages adds the following: * Second batch of new python-3.11 packages (jsc#PED-68) Updates to previosly released python 3.11 packages: \- python-urllib3 to 2.0.7 \- python-Sphinx to 7.2.6 \- python-pytest to 7.4.2 \- python-hypothesis to 6.82.7 \- python-sphinxcontrib-serializinghtml to 1.1.9 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4502=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-4502=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2023-4502=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4502=1 openSUSE-SLE-15.4-2023-4502=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4502=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4502=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * zopfli-debuginfo-1.0.3-150400.9.3.2 * xclip-0.13-150400.9.3.1 * libzopfli-devel-1.0.3-150400.9.3.2 * zopfli-debugsource-1.0.3-150400.9.3.2 * xclip-debugsource-0.13-150400.9.3.1 * zopfli-1.0.3-150400.9.3.2 * xclip-debuginfo-0.13-150400.9.3.1 * xsel-debugsource-1.2.0-150400.9.3.1 * libzopfli1-1.0.3-150400.9.3.2 * libzopfli1-debuginfo-1.0.3-150400.9.3.2 * xsel-debuginfo-1.2.0-150400.9.3.1 * xsel-1.2.0-150400.9.3.1 * libzopflipng1-debuginfo-1.0.3-150400.9.3.2 * libzopflipng1-1.0.3-150400.9.3.2 * Basesystem Module 15-SP5 (x86_64) * libzopflipng1-32bit-debuginfo-1.0.3-150400.9.3.2 * libzopfli1-32bit-1.0.3-150400.9.3.2 * libzopflipng1-32bit-1.0.3-150400.9.3.2 * libzopfli1-32bit-debuginfo-1.0.3-150400.9.3.2 * Python 3 Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-kiwisolver-debuginfo-1.4.4-150400.7.3.1 * python-gssapi-debugsource-1.8.2-150400.5.3.1 * python311-gobject-cairo-3.44.1-150400.3.7.1 * python311-gssapi-1.8.2-150400.5.3.1 * python311-pycairo-debuginfo-1.23.0-150400.3.3.1 * python311-zopfli-0.2.3-150400.9.5.1 * python311-pysendfile-2.0.1-150400.9.3.1 * python311-gobject-3.44.1-150400.3.7.1 * python311-zstd-1.5.5.1-150400.9.3.1 * python311-gobject-debuginfo-3.44.1-150400.3.7.1 * python311-netifaces-debuginfo-0.11.0-150400.11.3.1 * python311-gobject-Gdk-3.44.1-150400.3.7.1 * python311-dmidecode-3.12.3-150400.14.6.1 * python311-gssapi-debuginfo-1.8.2-150400.5.3.1 * python311-pylibmc-1.6.3-150400.7.3.1 * python311-zstd-debuginfo-1.5.5.1-150400.9.3.1 * python311-contourpy-1.0.7-150400.9.3.1 * python311-urwid-debuginfo-2.1.2-150400.11.3.1 * python311-netifaces-0.11.0-150400.11.3.1 * python311-contourpy-debuginfo-1.0.7-150400.9.3.1 * python311-psycopg2-2.9.7-150400.12.3.1 * python311-pycairo-1.23.0-150400.3.3.1 * python311-zopfli-debuginfo-0.2.3-150400.9.5.1 * python311-urwid-2.1.2-150400.11.3.1 * python-maxminddb-debugsource-2.4.0-150400.9.5.1 * python-dmidecode-debugsource-3.12.3-150400.14.6.1 * python311-cmarkgfm-2022.10.27-150400.9.3.1 * python311-pysendfile-debuginfo-2.0.1-150400.9.3.1 * python311-gobject-devel-3.44.1-150400.3.7.1 * python311-scandir-1.10.0-150400.10.3.1 * python311-maxminddb-2.4.0-150400.9.5.1 * python311-lazy-object-proxy-debuginfo-1.9.0-150400.11.3.1 * python-gobject-debugsource-3.44.1-150400.3.7.1 * python311-dmidecode-debuginfo-3.12.3-150400.14.6.1 * python-contourpy-debugsource-1.0.7-150400.9.3.1 * python-psycopg2-debugsource-2.9.7-150400.12.3.1 * python311-cmarkgfm-debuginfo-2022.10.27-150400.9.3.1 * python-urwid-debugsource-2.1.2-150400.11.3.1 * python311-gobject-cairo-debuginfo-3.44.1-150400.3.7.1 * python311-pycairo-devel-1.23.0-150400.3.3.1 * python311-psycopg2-debuginfo-2.9.7-150400.12.3.1 * python-gobject-debuginfo-3.44.1-150400.3.7.1 * python-pysendfile-debugsource-2.0.1-150400.9.3.1 * python-zopfli-debugsource-0.2.3-150400.9.5.1 * python311-astunparse-1.6.3-150400.9.3.1 * python311-lazy-object-proxy-1.9.0-150400.11.3.1 * python311-maxminddb-debuginfo-2.4.0-150400.9.5.1 * python-lazy-object-proxy-debugsource-1.9.0-150400.11.3.1 * python-pycairo-debugsource-1.23.0-150400.3.3.1 * python-pylibmc-debugsource-1.6.3-150400.7.3.1 * python311-kiwisolver-1.4.4-150400.7.3.1 * python311-pylibmc-debuginfo-1.6.3-150400.7.3.1 * python-kiwisolver-debugsource-1.4.4-150400.7.3.1 * python-zstd-debugsource-1.5.5.1-150400.9.3.1 * python-netifaces-debugsource-0.11.0-150400.11.3.1 * python-cmarkgfm-debugsource-2022.10.27-150400.9.3.1 * Python 3 Module 15-SP4 (noarch) * python311-twine-4.0.2-150400.9.3.1 * python311-traitlets-5.10.0-150400.9.3.1 * python311-coloredlogs-15.0.1-150400.9.3.1 * python311-verboselogs-1.7-150400.9.3.1 * python311-Sphinx-latex-7.2.6-150400.3.6.1 * python311-requests-futures-1.0.1-150400.9.3.1 * python311-prometheus-client-0.17.0-150400.11.3.1 * python311-pickleshare-0.7.5-150400.9.3.1 * python311-purl-1.6-150400.7.3.1 * python311-argcomplete-3.1.2-150400.12.5.1 * python311-blessings-1.7-150400.9.3.1 * python311-Cycler-0.11.0-150400.11.3.1 * python311-k5test-0.10.3-150400.9.3.1 * python311-userpath-1.9.0-150400.9.3.1 * python311-executing-1.2.0-150400.9.3.1 * python311-Paver-1.3.4-150400.3.3.4 * python311-cogapp-3.3.0-150400.3.3.1 * python311-pytest-localserver-0.8.0-150400.7.3.1 * python311-pyu2f-0.1.5a-150400.9.3.1 * python311-sphinxcontrib-apidoc-0.4.0-150400.10.5.1 * python311-stack-data-0.6.2-150400.9.3.1 * python311-requests-oauthlib-1.3.1-150400.12.3.1 * python311-configobj-5.0.8-150400.12.3.1 * python311-fs-2.4.16-150400.9.3.1 * python311-rtslib-fb-2.1.75-150400.6.3.1 * python311-readme_renderer-41.0-150400.9.3.1 * python311-hanzidentifier-1.1.0-150400.9.3.1 * python311-google-auth-2.17.3-150400.6.3.1 * python311-loguru-0.7.0-150400.9.3.1 * python311-oauthlib-3.2.2-150400.12.3.1 * python311-pyperclip-1.8.2-150400.12.3.1 * python311-websocket-client-1.5.1-150400.13.3.1 * python311-cached-property-1.5.2-150400.10.3.1 * python311-pipx-1.2.0-150400.9.3.1 * python311-tqdm-4.66.1-150400.9.3.1 * python311-tabulate-0.9.0-150400.11.3.1 * python311-smartypants-2.0.1-150400.3.3.1 * python311-PyJWT-2.8.0-150400.8.3.1 * python311-cachetools-5.3.1-150400.8.3.1 * python311-fastimport-0.9.14-150400.3.3.1 * python311-shellingham-1.5.0-150400.9.3.1 * python311-hypothesis-6.82.7-150400.3.6.1 * python311-portend-3.1.0-150400.7.3.1 * python311-invocations-3.0.2-150400.9.3.1 * python311-jsonpatch-1.32-150400.10.3.1 * python311-orderedmultidict-1.0.1-150400.9.3.1 * python311-lexicon-2.0.1-150400.10.3.1 * python311-pyxdg-0.28-150400.7.3.1 * python311-hatch-1.7.0-150400.9.3.1 * python311-munch-3.0.0-150400.11.3.1 * python311-jedi-0.19.0-150400.11.3.1 * python311-colorama-0.4.6-150400.5.3.1 * python311-pure-eval-0.2.2-150400.9.3.1 * python311-tomlkit-0.12.1-150400.10.3.1 * python311-astroid-2.15.6-150400.11.3.1 * python311-paramiko-3.3.1-150400.13.3.1 * python311-ecdsa-0.18.0-150400.12.3.1 * python311-littleutils-0.2.2-150400.9.3.1 * python311-cppy-1.2.1-150400.9.3.1 * python-tqdm-bash-completion-4.66.1-150400.9.3.1 * python311-sphinxcontrib-1.0.1-150400.13.3.1 * python311-fluidity-sm-0.2.0-150400.10.3.1 * python311-testscenarios-0.5.0-150400.11.3.1 * python311-releases-2.1.1-150400.9.3.1 * python311-typeguard-4.0.0-150400.9.3.1 * python311-asttokens-2.4.0-150400.9.3.1 * python311-capturer-3.0-150400.9.3.1 * python311-pkginfo-1.9.6-150400.7.3.1 * python311-pytest-randomly-3.13.0-150400.9.3.1 * python311-opentelemetry-api-1.17.0-150400.10.3.1 * python311-tornado-6.3.2-150400.12.3.1 * python-paramiko-doc-3.3.1-150400.13.3.1 * python311-keyring-24.2.0-150400.5.3.1 * python311-linecache2-1.0.0-150400.11.3.1 * python311-prompt_toolkit-3.0.38-150400.9.3.1 * python311-gast-0.5.3-150400.9.3.1 * python311-FormEncode-2.0.1-150400.9.3.1 * python311-bleach-6.0.0-150400.9.3.1 * python311-pytest-7.4.2-150400.3.6.1 * python311-CommonMark-0.9.1-150400.9.3.1 * python311-pytest-relaxed-2.0.1-150400.12.3.1 * python311-requests-mock-1.10.0-150400.7.3.1 * python311-munkres-1.1.4-150400.9.3.1 * python311-furl-2.1.3-150400.9.3.1 * python311-pytoml-0.1.21-150400.9.3.1 * python311-portalocker-2.7.0-150400.10.3.1 * python311-humanfriendly-10.0-150400.13.3.1 * python311-sphinxcontrib-serializinghtml-1.1.9-150400.3.6.1 * python311-zhon-1.1.5-150400.9.3.1 * python311-wcwidth-0.2.6-150400.10.3.1 * python311-SecretStorage-3.3.3-150400.5.3.1 * python311-testtools-2.6.0-150400.12.3.1 * python311-dragonmapper-0.2.6-150400.9.3.1 * python311-prettytable-3.8.0-150400.9.3.1 * python311-rsa-4.9-150400.12.3.1 * python311-tempora-5.5.0-150400.7.3.1 * python311-pyftpdlib-1.5.7-150400.9.3.1 * python311-pbr-5.11.1-150400.14.3.1 * python311-pyinotify-0.9.6-150400.13.3.1 * python311-traceback2-1.4.0-150400.11.3.1 * python311-rfc3986-2.0.0-150400.12.3.1 * python311-jeepney-0.8.0-150400.5.3.1 * python311-configshell-fb-1.1.30-150400.8.3.1 * python311-invoke-2.1.2-150400.10.3.1 * python311-pymemcache-4.0.0-150400.14.3.1 * python311-beniget-0.4.1-150400.9.3.1 * python311-future-0.18.3-150400.6.3.1 * python311-ply-3.11-150400.12.3.1 * python311-Sphinx-7.2.6-150400.3.6.1 * python311-pyudev-0.24.1-150400.3.3.1 * python311-pytest-lazy-fixture-0.6.3-150400.9.3.1 * python311-tox-3.26.0-150400.15.3.1 * python311-backcall-0.2.0-150400.9.3.1 * python311-pyproject-metadata-0.7.1-150400.9.3.1 * python311-python-magic-0.4.27-150400.9.3.1 * python311-fixtures-4.1.0-150400.12.3.1 * python311-python-mimeparse-1.6.0-150400.12.3.1 * python311-urllib3-2.0.7-150400.7.10.1 * python311-testresources-2.0.1-150400.11.3.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-kiwisolver-debuginfo-1.4.4-150400.7.3.1 * python-gssapi-debugsource-1.8.2-150400.5.3.1 * python311-gobject-cairo-3.44.1-150400.3.7.1 * python311-gssapi-1.8.2-150400.5.3.1 * python311-pycairo-debuginfo-1.23.0-150400.3.3.1 * python311-zopfli-0.2.3-150400.9.5.1 * python311-pysendfile-2.0.1-150400.9.3.1 * python311-gobject-3.44.1-150400.3.7.1 * python311-zstd-1.5.5.1-150400.9.3.1 * python311-gobject-debuginfo-3.44.1-150400.3.7.1 * python311-netifaces-debuginfo-0.11.0-150400.11.3.1 * python311-gobject-Gdk-3.44.1-150400.3.7.1 * python311-dmidecode-3.12.3-150400.14.6.1 * python311-gssapi-debuginfo-1.8.2-150400.5.3.1 * python311-pylibmc-1.6.3-150400.7.3.1 * python311-zstd-debuginfo-1.5.5.1-150400.9.3.1 * python311-contourpy-1.0.7-150400.9.3.1 * python311-urwid-debuginfo-2.1.2-150400.11.3.1 * python311-netifaces-0.11.0-150400.11.3.1 * python311-contourpy-debuginfo-1.0.7-150400.9.3.1 * python311-psycopg2-2.9.7-150400.12.3.1 * python311-pycairo-1.23.0-150400.3.3.1 * python311-zopfli-debuginfo-0.2.3-150400.9.5.1 * python311-urwid-2.1.2-150400.11.3.1 * python-maxminddb-debugsource-2.4.0-150400.9.5.1 * python-dmidecode-debugsource-3.12.3-150400.14.6.1 * python311-cmarkgfm-2022.10.27-150400.9.3.1 * python311-pysendfile-debuginfo-2.0.1-150400.9.3.1 * python311-gobject-devel-3.44.1-150400.3.7.1 * python311-scandir-1.10.0-150400.10.3.1 * python311-maxminddb-2.4.0-150400.9.5.1 * python311-lazy-object-proxy-debuginfo-1.9.0-150400.11.3.1 * python-gobject-debugsource-3.44.1-150400.3.7.1 * python311-dmidecode-debuginfo-3.12.3-150400.14.6.1 * python-contourpy-debugsource-1.0.7-150400.9.3.1 * python-psycopg2-debugsource-2.9.7-150400.12.3.1 * python311-cmarkgfm-debuginfo-2022.10.27-150400.9.3.1 * python-urwid-debugsource-2.1.2-150400.11.3.1 * python311-gobject-cairo-debuginfo-3.44.1-150400.3.7.1 * python311-pycairo-devel-1.23.0-150400.3.3.1 * python311-psycopg2-debuginfo-2.9.7-150400.12.3.1 * python-gobject-debuginfo-3.44.1-150400.3.7.1 * python-pysendfile-debugsource-2.0.1-150400.9.3.1 * python-zopfli-debugsource-0.2.3-150400.9.5.1 * python311-astunparse-1.6.3-150400.9.3.1 * python311-lazy-object-proxy-1.9.0-150400.11.3.1 * python311-maxminddb-debuginfo-2.4.0-150400.9.5.1 * python-lazy-object-proxy-debugsource-1.9.0-150400.11.3.1 * python-pycairo-debugsource-1.23.0-150400.3.3.1 * python-pylibmc-debugsource-1.6.3-150400.7.3.1 * python311-kiwisolver-1.4.4-150400.7.3.1 * python311-pylibmc-debuginfo-1.6.3-150400.7.3.1 * python-kiwisolver-debugsource-1.4.4-150400.7.3.1 * python-zstd-debugsource-1.5.5.1-150400.9.3.1 * python-netifaces-debugsource-0.11.0-150400.11.3.1 * python-cmarkgfm-debugsource-2022.10.27-150400.9.3.1 * Python 3 Module 15-SP5 (noarch) * python311-twine-4.0.2-150400.9.3.1 * python311-traitlets-5.10.0-150400.9.3.1 * python311-coloredlogs-15.0.1-150400.9.3.1 * python311-verboselogs-1.7-150400.9.3.1 * python311-Sphinx-latex-7.2.6-150400.3.6.1 * python311-requests-futures-1.0.1-150400.9.3.1 * python311-prometheus-client-0.17.0-150400.11.3.1 * python311-pickleshare-0.7.5-150400.9.3.1 * python311-purl-1.6-150400.7.3.1 * python311-argcomplete-3.1.2-150400.12.5.1 * python311-blessings-1.7-150400.9.3.1 * python311-Cycler-0.11.0-150400.11.3.1 * python311-k5test-0.10.3-150400.9.3.1 * python311-userpath-1.9.0-150400.9.3.1 * python311-executing-1.2.0-150400.9.3.1 * python311-Paver-1.3.4-150400.3.3.4 * python311-cogapp-3.3.0-150400.3.3.1 * python311-pytest-localserver-0.8.0-150400.7.3.1 * python311-pyu2f-0.1.5a-150400.9.3.1 * python311-sphinxcontrib-apidoc-0.4.0-150400.10.5.1 * python311-stack-data-0.6.2-150400.9.3.1 * python311-requests-oauthlib-1.3.1-150400.12.3.1 * python311-configobj-5.0.8-150400.12.3.1 * python311-fs-2.4.16-150400.9.3.1 * python311-rtslib-fb-2.1.75-150400.6.3.1 * python311-readme_renderer-41.0-150400.9.3.1 * python311-hanzidentifier-1.1.0-150400.9.3.1 * python311-google-auth-2.17.3-150400.6.3.1 * python311-loguru-0.7.0-150400.9.3.1 * python311-oauthlib-3.2.2-150400.12.3.1 * python311-pyperclip-1.8.2-150400.12.3.1 * python311-websocket-client-1.5.1-150400.13.3.1 * python311-cached-property-1.5.2-150400.10.3.1 * python311-pipx-1.2.0-150400.9.3.1 * python311-tqdm-4.66.1-150400.9.3.1 * python311-tabulate-0.9.0-150400.11.3.1 * python311-smartypants-2.0.1-150400.3.3.1 * python311-PyJWT-2.8.0-150400.8.3.1 * python311-cachetools-5.3.1-150400.8.3.1 * python311-fastimport-0.9.14-150400.3.3.1 * python311-shellingham-1.5.0-150400.9.3.1 * python311-hypothesis-6.82.7-150400.3.6.1 * python311-portend-3.1.0-150400.7.3.1 * python311-invocations-3.0.2-150400.9.3.1 * python311-jsonpatch-1.32-150400.10.3.1 * python311-orderedmultidict-1.0.1-150400.9.3.1 * python311-lexicon-2.0.1-150400.10.3.1 * python311-pyxdg-0.28-150400.7.3.1 * python311-hatch-1.7.0-150400.9.3.1 * python311-munch-3.0.0-150400.11.3.1 * python311-jedi-0.19.0-150400.11.3.1 * python311-colorama-0.4.6-150400.5.3.1 * python311-pure-eval-0.2.2-150400.9.3.1 * python311-tomlkit-0.12.1-150400.10.3.1 * python311-astroid-2.15.6-150400.11.3.1 * python311-paramiko-3.3.1-150400.13.3.1 * python311-ecdsa-0.18.0-150400.12.3.1 * python311-littleutils-0.2.2-150400.9.3.1 * python311-cppy-1.2.1-150400.9.3.1 * python-tqdm-bash-completion-4.66.1-150400.9.3.1 * python311-sphinxcontrib-1.0.1-150400.13.3.1 * python311-fluidity-sm-0.2.0-150400.10.3.1 * python311-testscenarios-0.5.0-150400.11.3.1 * python311-releases-2.1.1-150400.9.3.1 * python311-typeguard-4.0.0-150400.9.3.1 * python311-asttokens-2.4.0-150400.9.3.1 * python311-capturer-3.0-150400.9.3.1 * python311-pkginfo-1.9.6-150400.7.3.1 * python311-pytest-randomly-3.13.0-150400.9.3.1 * python311-opentelemetry-api-1.17.0-150400.10.3.1 * python311-tornado-6.3.2-150400.12.3.1 * python-paramiko-doc-3.3.1-150400.13.3.1 * python311-keyring-24.2.0-150400.5.3.1 * python311-linecache2-1.0.0-150400.11.3.1 * python311-prompt_toolkit-3.0.38-150400.9.3.1 * python311-gast-0.5.3-150400.9.3.1 * python311-FormEncode-2.0.1-150400.9.3.1 * python311-bleach-6.0.0-150400.9.3.1 * python311-pytest-7.4.2-150400.3.6.1 * python311-CommonMark-0.9.1-150400.9.3.1 * python311-pytest-relaxed-2.0.1-150400.12.3.1 * python311-requests-mock-1.10.0-150400.7.3.1 * python311-munkres-1.1.4-150400.9.3.1 * python311-furl-2.1.3-150400.9.3.1 * python311-pytoml-0.1.21-150400.9.3.1 * python311-portalocker-2.7.0-150400.10.3.1 * python311-humanfriendly-10.0-150400.13.3.1 * python311-sphinxcontrib-serializinghtml-1.1.9-150400.3.6.1 * python311-zhon-1.1.5-150400.9.3.1 * python311-wcwidth-0.2.6-150400.10.3.1 * python311-SecretStorage-3.3.3-150400.5.3.1 * python311-testtools-2.6.0-150400.12.3.1 * python311-dragonmapper-0.2.6-150400.9.3.1 * python311-prettytable-3.8.0-150400.9.3.1 * python311-rsa-4.9-150400.12.3.1 * python311-tempora-5.5.0-150400.7.3.1 * python311-pyftpdlib-1.5.7-150400.9.3.1 * python311-pbr-5.11.1-150400.14.3.1 * python311-pyinotify-0.9.6-150400.13.3.1 * python311-traceback2-1.4.0-150400.11.3.1 * python311-rfc3986-2.0.0-150400.12.3.1 * python311-jeepney-0.8.0-150400.5.3.1 * python311-configshell-fb-1.1.30-150400.8.3.1 * python311-invoke-2.1.2-150400.10.3.1 * python311-pymemcache-4.0.0-150400.14.3.1 * python311-beniget-0.4.1-150400.9.3.1 * python311-future-0.18.3-150400.6.3.1 * python311-ply-3.11-150400.12.3.1 * python311-Sphinx-7.2.6-150400.3.6.1 * python311-pyudev-0.24.1-150400.3.3.1 * python311-pytest-lazy-fixture-0.6.3-150400.9.3.1 * python311-tox-3.26.0-150400.15.3.1 * python311-backcall-0.2.0-150400.9.3.1 * python311-pyproject-metadata-0.7.1-150400.9.3.1 * python311-python-magic-0.4.27-150400.9.3.1 * python311-fixtures-4.1.0-150400.12.3.1 * python311-python-mimeparse-1.6.0-150400.12.3.1 * python311-urllib3-2.0.7-150400.7.10.1 * python311-testresources-2.0.1-150400.11.3.1 * openSUSE Leap 15.4 (noarch) * python311-twine-4.0.2-150400.9.3.1 * python311-traitlets-5.10.0-150400.9.3.1 * python311-coloredlogs-15.0.1-150400.9.3.1 * python311-verboselogs-1.7-150400.9.3.1 * python311-Sphinx-latex-7.2.6-150400.3.6.1 * python311-requests-futures-1.0.1-150400.9.3.1 * python311-prometheus-client-0.17.0-150400.11.3.1 * python311-pickleshare-0.7.5-150400.9.3.1 * python311-purl-1.6-150400.7.3.1 * python311-argcomplete-3.1.2-150400.12.5.1 * python311-blessings-1.7-150400.9.3.1 * python311-Cycler-0.11.0-150400.11.3.1 * python311-k5test-0.10.3-150400.9.3.1 * python311-userpath-1.9.0-150400.9.3.1 * python311-executing-1.2.0-150400.9.3.1 * python311-Paver-1.3.4-150400.3.3.4 * python311-cogapp-3.3.0-150400.3.3.1 * python311-pytest-localserver-0.8.0-150400.7.3.1 * python311-pyu2f-0.1.5a-150400.9.3.1 * python311-sphinxcontrib-apidoc-0.4.0-150400.10.5.1 * python311-stack-data-0.6.2-150400.9.3.1 * python311-requests-oauthlib-1.3.1-150400.12.3.1 * python311-configobj-5.0.8-150400.12.3.1 * python311-fs-2.4.16-150400.9.3.1 * python311-rtslib-fb-2.1.75-150400.6.3.1 * python311-readme_renderer-41.0-150400.9.3.1 * python311-hanzidentifier-1.1.0-150400.9.3.1 * python311-google-auth-2.17.3-150400.6.3.1 * python311-loguru-0.7.0-150400.9.3.1 * python311-oauthlib-3.2.2-150400.12.3.1 * python311-pyperclip-1.8.2-150400.12.3.1 * python311-websocket-client-1.5.1-150400.13.3.1 * python311-cached-property-1.5.2-150400.10.3.1 * python311-pipx-1.2.0-150400.9.3.1 * python311-tqdm-4.66.1-150400.9.3.1 * python311-tabulate-0.9.0-150400.11.3.1 * python311-smartypants-2.0.1-150400.3.3.1 * python311-PyJWT-2.8.0-150400.8.3.1 * python311-cachetools-5.3.1-150400.8.3.1 * python311-fastimport-0.9.14-150400.3.3.1 * python311-shellingham-1.5.0-150400.9.3.1 * python311-hypothesis-6.82.7-150400.3.6.1 * python311-portend-3.1.0-150400.7.3.1 * python311-invocations-3.0.2-150400.9.3.1 * python311-jsonpatch-1.32-150400.10.3.1 * python311-orderedmultidict-1.0.1-150400.9.3.1 * python311-lexicon-2.0.1-150400.10.3.1 * python311-pyxdg-0.28-150400.7.3.1 * python311-hatch-1.7.0-150400.9.3.1 * python311-munch-3.0.0-150400.11.3.1 * python311-jedi-0.19.0-150400.11.3.1 * python311-colorama-0.4.6-150400.5.3.1 * python311-pure-eval-0.2.2-150400.9.3.1 * python311-tomlkit-0.12.1-150400.10.3.1 * python311-astroid-2.15.6-150400.11.3.1 * python311-paramiko-3.3.1-150400.13.3.1 * python311-ecdsa-0.18.0-150400.12.3.1 * python311-littleutils-0.2.2-150400.9.3.1 * python311-cppy-1.2.1-150400.9.3.1 * python-tqdm-bash-completion-4.66.1-150400.9.3.1 * python311-sphinxcontrib-1.0.1-150400.13.3.1 * python311-fluidity-sm-0.2.0-150400.10.3.1 * python311-testscenarios-0.5.0-150400.11.3.1 * python311-releases-2.1.1-150400.9.3.1 * python311-typeguard-4.0.0-150400.9.3.1 * python311-asttokens-2.4.0-150400.9.3.1 * python311-capturer-3.0-150400.9.3.1 * python311-pkginfo-1.9.6-150400.7.3.1 * python311-pytest-randomly-3.13.0-150400.9.3.1 * python311-opentelemetry-api-1.17.0-150400.10.3.1 * python311-tornado-6.3.2-150400.12.3.1 * python-paramiko-doc-3.3.1-150400.13.3.1 * python311-keyring-24.2.0-150400.5.3.1 * python311-linecache2-1.0.0-150400.11.3.1 * python311-prompt_toolkit-3.0.38-150400.9.3.1 * python311-gast-0.5.3-150400.9.3.1 * python311-FormEncode-2.0.1-150400.9.3.1 * python311-bleach-6.0.0-150400.9.3.1 * python311-pytest-7.4.2-150400.3.6.1 * python311-CommonMark-0.9.1-150400.9.3.1 * python311-pytest-relaxed-2.0.1-150400.12.3.1 * python311-requests-mock-1.10.0-150400.7.3.1 * python311-munkres-1.1.4-150400.9.3.1 * python311-furl-2.1.3-150400.9.3.1 * python311-portalocker-2.7.0-150400.10.3.1 * python311-pytoml-0.1.21-150400.9.3.1 * python311-humanfriendly-10.0-150400.13.3.1 * python311-sphinxcontrib-serializinghtml-1.1.9-150400.3.6.1 * python311-zhon-1.1.5-150400.9.3.1 * python311-wcwidth-0.2.6-150400.10.3.1 * python311-SecretStorage-3.3.3-150400.5.3.1 * python311-testtools-2.6.0-150400.12.3.1 * python311-dragonmapper-0.2.6-150400.9.3.1 * python311-prettytable-3.8.0-150400.9.3.1 * python311-rsa-4.9-150400.12.3.1 * python311-tempora-5.5.0-150400.7.3.1 * python311-pyftpdlib-1.5.7-150400.9.3.1 * python311-pbr-5.11.1-150400.14.3.1 * python311-pyinotify-0.9.6-150400.13.3.1 * python311-traceback2-1.4.0-150400.11.3.1 * python311-rfc3986-2.0.0-150400.12.3.1 * python311-jeepney-0.8.0-150400.5.3.1 * python311-configshell-fb-1.1.30-150400.8.3.1 * python311-invoke-2.1.2-150400.10.3.1 * python311-pymemcache-4.0.0-150400.14.3.1 * python311-beniget-0.4.1-150400.9.3.1 * python311-future-0.18.3-150400.6.3.1 * python311-ply-3.11-150400.12.3.1 * python311-Sphinx-7.2.6-150400.3.6.1 * python311-pyudev-0.24.1-150400.3.3.1 * python311-pytest-lazy-fixture-0.6.3-150400.9.3.1 * python311-tox-3.26.0-150400.15.3.1 * python311-backcall-0.2.0-150400.9.3.1 * python311-pyproject-metadata-0.7.1-150400.9.3.1 * python311-python-magic-0.4.27-150400.9.3.1 * python311-fixtures-4.1.0-150400.12.3.1 * python311-python-mimeparse-1.6.0-150400.12.3.1 * python311-urllib3-2.0.7-150400.7.10.1 * python311-testresources-2.0.1-150400.11.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * zopfli-debuginfo-1.0.3-150400.9.3.2 * python311-kiwisolver-debuginfo-1.4.4-150400.7.3.1 * python-gssapi-debugsource-1.8.2-150400.5.3.1 * python311-gobject-cairo-3.44.1-150400.3.7.1 * python311-gssapi-1.8.2-150400.5.3.1 * python311-pycairo-debuginfo-1.23.0-150400.3.3.1 * python311-zopfli-0.2.3-150400.9.5.1 * python311-pysendfile-2.0.1-150400.9.3.1 * python311-gobject-3.44.1-150400.3.7.1 * python311-zstd-1.5.5.1-150400.9.3.1 * python311-gobject-debuginfo-3.44.1-150400.3.7.1 * python311-netifaces-debuginfo-0.11.0-150400.11.3.1 * python311-gobject-Gdk-3.44.1-150400.3.7.1 * python311-dmidecode-3.12.3-150400.14.6.1 * python311-gssapi-debuginfo-1.8.2-150400.5.3.1 * python311-pylibmc-1.6.3-150400.7.3.1 * python311-zstd-debuginfo-1.5.5.1-150400.9.3.1 * xclip-0.13-150400.9.3.1 * python311-contourpy-1.0.7-150400.9.3.1 * python311-urwid-debuginfo-2.1.2-150400.11.3.1 * xclip-debugsource-0.13-150400.9.3.1 * xclip-debuginfo-0.13-150400.9.3.1 * zopfli-1.0.3-150400.9.3.2 * python311-netifaces-0.11.0-150400.11.3.1 * python311-contourpy-debuginfo-1.0.7-150400.9.3.1 * python311-psycopg2-2.9.7-150400.12.3.1 * python311-pycairo-1.23.0-150400.3.3.1 * libzopflipng1-1.0.3-150400.9.3.2 * python311-zopfli-debuginfo-0.2.3-150400.9.5.1 * python311-urwid-2.1.2-150400.11.3.1 * python-maxminddb-debugsource-2.4.0-150400.9.5.1 * python-dmidecode-debugsource-3.12.3-150400.14.6.1 * python311-cmarkgfm-2022.10.27-150400.9.3.1 * python311-pysendfile-debuginfo-2.0.1-150400.9.3.1 * zopfli-debugsource-1.0.3-150400.9.3.2 * python311-gobject-devel-3.44.1-150400.3.7.1 * python311-scandir-1.10.0-150400.10.3.1 * python311-maxminddb-2.4.0-150400.9.5.1 * python311-lazy-object-proxy-debuginfo-1.9.0-150400.11.3.1 * python-gobject-debugsource-3.44.1-150400.3.7.1 * python311-dmidecode-debuginfo-3.12.3-150400.14.6.1 * python-contourpy-debugsource-1.0.7-150400.9.3.1 * python311-gobject-cairo-debuginfo-3.44.1-150400.3.7.1 * python311-cmarkgfm-debuginfo-2022.10.27-150400.9.3.1 * python-psycopg2-debugsource-2.9.7-150400.12.3.1 * python311-pycairo-devel-1.23.0-150400.3.3.1 * python-urwid-debugsource-2.1.2-150400.11.3.1 * python311-psycopg2-debuginfo-2.9.7-150400.12.3.1 * xsel-1.2.0-150400.9.3.1 * python-gobject-debuginfo-3.44.1-150400.3.7.1 * python-pysendfile-debugsource-2.0.1-150400.9.3.1 * libzopfli1-1.0.3-150400.9.3.2 * python311-astunparse-1.6.3-150400.9.3.1 * python311-maxminddb-debuginfo-2.4.0-150400.9.5.1 * python311-lazy-object-proxy-1.9.0-150400.11.3.1 * python-zopfli-debugsource-0.2.3-150400.9.5.1 * libzopflipng1-debuginfo-1.0.3-150400.9.3.2 * python-lazy-object-proxy-debugsource-1.9.0-150400.11.3.1 * python-pycairo-debugsource-1.23.0-150400.3.3.1 * libzopfli-devel-1.0.3-150400.9.3.2 * python-pylibmc-debugsource-1.6.3-150400.7.3.1 * xsel-debugsource-1.2.0-150400.9.3.1 * python311-kiwisolver-1.4.4-150400.7.3.1 * python311-pylibmc-debuginfo-1.6.3-150400.7.3.1 * python-kiwisolver-debugsource-1.4.4-150400.7.3.1 * python-zstd-debugsource-1.5.5.1-150400.9.3.1 * xsel-debuginfo-1.2.0-150400.9.3.1 * python-netifaces-debugsource-0.11.0-150400.11.3.1 * libzopfli1-debuginfo-1.0.3-150400.9.3.2 * python-cmarkgfm-debugsource-2022.10.27-150400.9.3.1 * openSUSE Leap 15.4 (x86_64) * libzopflipng1-32bit-debuginfo-1.0.3-150400.9.3.2 * libzopfli1-32bit-1.0.3-150400.9.3.2 * libzopflipng1-32bit-1.0.3-150400.9.3.2 * libzopfli1-32bit-debuginfo-1.0.3-150400.9.3.2 * openSUSE Leap 15.4 (aarch64_ilp32) * libzopfli1-64bit-1.0.3-150400.9.3.2 * libzopflipng1-64bit-debuginfo-1.0.3-150400.9.3.2 * libzopfli1-64bit-debuginfo-1.0.3-150400.9.3.2 * libzopflipng1-64bit-1.0.3-150400.9.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * zopfli-debuginfo-1.0.3-150400.9.3.2 * python311-kiwisolver-debuginfo-1.4.4-150400.7.3.1 * python-gssapi-debugsource-1.8.2-150400.5.3.1 * python311-gobject-cairo-3.44.1-150400.3.7.1 * python311-gssapi-1.8.2-150400.5.3.1 * python311-pycairo-debuginfo-1.23.0-150400.3.3.1 * python311-zopfli-0.2.3-150400.9.5.1 * python311-pysendfile-2.0.1-150400.9.3.1 * python311-gobject-3.44.1-150400.3.7.1 * python311-zstd-1.5.5.1-150400.9.3.1 * python311-gobject-debuginfo-3.44.1-150400.3.7.1 * python311-netifaces-debuginfo-0.11.0-150400.11.3.1 * python311-gobject-Gdk-3.44.1-150400.3.7.1 * python311-dmidecode-3.12.3-150400.14.6.1 * python311-gssapi-debuginfo-1.8.2-150400.5.3.1 * python311-pylibmc-1.6.3-150400.7.3.1 * python311-zstd-debuginfo-1.5.5.1-150400.9.3.1 * xclip-0.13-150400.9.3.1 * python311-contourpy-1.0.7-150400.9.3.1 * python311-urwid-debuginfo-2.1.2-150400.11.3.1 * xclip-debugsource-0.13-150400.9.3.1 * xclip-debuginfo-0.13-150400.9.3.1 * zopfli-1.0.3-150400.9.3.2 * python311-netifaces-0.11.0-150400.11.3.1 * python311-pycairo-devel-1.23.0-150400.3.3.1 * python311-contourpy-debuginfo-1.0.7-150400.9.3.1 * python311-psycopg2-2.9.7-150400.12.3.1 * python311-pycairo-1.23.0-150400.3.3.1 * libzopflipng1-1.0.3-150400.9.3.2 * python311-zopfli-debuginfo-0.2.3-150400.9.5.1 * python311-urwid-2.1.2-150400.11.3.1 * python-maxminddb-debugsource-2.4.0-150400.9.5.1 * python-dmidecode-debugsource-3.12.3-150400.14.6.1 * python311-cmarkgfm-2022.10.27-150400.9.3.1 * python311-pysendfile-debuginfo-2.0.1-150400.9.3.1 * zopfli-debugsource-1.0.3-150400.9.3.2 * python311-gobject-devel-3.44.1-150400.3.7.1 * python311-scandir-1.10.0-150400.10.3.1 * python311-maxminddb-2.4.0-150400.9.5.1 * python311-lazy-object-proxy-debuginfo-1.9.0-150400.11.3.1 * python-gobject-debugsource-3.44.1-150400.3.7.1 * python311-dmidecode-debuginfo-3.12.3-150400.14.6.1 * python-contourpy-debugsource-1.0.7-150400.9.3.1 * libzopfli1-1.0.3-150400.9.3.2 * python-psycopg2-debugsource-2.9.7-150400.12.3.1 * libzopfli1-debuginfo-1.0.3-150400.9.3.2 * python-urwid-debugsource-2.1.2-150400.11.3.1 * python311-cmarkgfm-debuginfo-2022.10.27-150400.9.3.1 * python311-gobject-cairo-debuginfo-3.44.1-150400.3.7.1 * libzopflipng1-debuginfo-1.0.3-150400.9.3.2 * python-gobject-debuginfo-3.44.1-150400.3.7.1 * python-pysendfile-debugsource-2.0.1-150400.9.3.1 * python311-psycopg2-debuginfo-2.9.7-150400.12.3.1 * python-zopfli-debugsource-0.2.3-150400.9.5.1 * python311-astunparse-1.6.3-150400.9.3.1 * python311-lazy-object-proxy-1.9.0-150400.11.3.1 * python311-maxminddb-debuginfo-2.4.0-150400.9.5.1 * xsel-1.2.0-150400.9.3.1 * python-lazy-object-proxy-debugsource-1.9.0-150400.11.3.1 * libzopfli-devel-1.0.3-150400.9.3.2 * python-pycairo-debugsource-1.23.0-150400.3.3.1 * python-pylibmc-debugsource-1.6.3-150400.7.3.1 * xsel-debugsource-1.2.0-150400.9.3.1 * python311-kiwisolver-1.4.4-150400.7.3.1 * python311-pylibmc-debuginfo-1.6.3-150400.7.3.1 * python-kiwisolver-debugsource-1.4.4-150400.7.3.1 * python-zstd-debugsource-1.5.5.1-150400.9.3.1 * xsel-debuginfo-1.2.0-150400.9.3.1 * python-netifaces-debugsource-0.11.0-150400.11.3.1 * python-cmarkgfm-debugsource-2022.10.27-150400.9.3.1 * openSUSE Leap 15.5 (x86_64) * libzopflipng1-32bit-debuginfo-1.0.3-150400.9.3.2 * libzopfli1-32bit-1.0.3-150400.9.3.2 * libzopflipng1-32bit-1.0.3-150400.9.3.2 * libzopfli1-32bit-debuginfo-1.0.3-150400.9.3.2 * openSUSE Leap 15.5 (noarch) * python311-twine-4.0.2-150400.9.3.1 * python311-traitlets-5.10.0-150400.9.3.1 * python311-coloredlogs-15.0.1-150400.9.3.1 * python311-verboselogs-1.7-150400.9.3.1 * python311-Sphinx-latex-7.2.6-150400.3.6.1 * python311-requests-futures-1.0.1-150400.9.3.1 * python311-prometheus-client-0.17.0-150400.11.3.1 * python311-pickleshare-0.7.5-150400.9.3.1 * python311-purl-1.6-150400.7.3.1 * python311-argcomplete-3.1.2-150400.12.5.1 * python311-blessings-1.7-150400.9.3.1 * python311-Cycler-0.11.0-150400.11.3.1 * python311-k5test-0.10.3-150400.9.3.1 * python311-userpath-1.9.0-150400.9.3.1 * python311-executing-1.2.0-150400.9.3.1 * python311-Paver-1.3.4-150400.3.3.4 * python311-cogapp-3.3.0-150400.3.3.1 * python311-pytest-localserver-0.8.0-150400.7.3.1 * python311-pyu2f-0.1.5a-150400.9.3.1 * python311-sphinxcontrib-apidoc-0.4.0-150400.10.5.1 * python311-stack-data-0.6.2-150400.9.3.1 * python311-requests-oauthlib-1.3.1-150400.12.3.1 * python311-configobj-5.0.8-150400.12.3.1 * python311-fs-2.4.16-150400.9.3.1 * python311-rtslib-fb-2.1.75-150400.6.3.1 * python311-readme_renderer-41.0-150400.9.3.1 * python311-hanzidentifier-1.1.0-150400.9.3.1 * python311-google-auth-2.17.3-150400.6.3.1 * python311-loguru-0.7.0-150400.9.3.1 * python311-oauthlib-3.2.2-150400.12.3.1 * python311-pyperclip-1.8.2-150400.12.3.1 * python311-websocket-client-1.5.1-150400.13.3.1 * python311-cached-property-1.5.2-150400.10.3.1 * python311-pipx-1.2.0-150400.9.3.1 * python311-tqdm-4.66.1-150400.9.3.1 * python311-tabulate-0.9.0-150400.11.3.1 * python311-smartypants-2.0.1-150400.3.3.1 * python311-PyJWT-2.8.0-150400.8.3.1 * python311-cachetools-5.3.1-150400.8.3.1 * python311-fastimport-0.9.14-150400.3.3.1 * python311-shellingham-1.5.0-150400.9.3.1 * python311-hypothesis-6.82.7-150400.3.6.1 * python311-portend-3.1.0-150400.7.3.1 * python311-invocations-3.0.2-150400.9.3.1 * python311-jsonpatch-1.32-150400.10.3.1 * python311-orderedmultidict-1.0.1-150400.9.3.1 * python311-lexicon-2.0.1-150400.10.3.1 * python311-pyxdg-0.28-150400.7.3.1 * python311-hatch-1.7.0-150400.9.3.1 * python311-munch-3.0.0-150400.11.3.1 * python311-jedi-0.19.0-150400.11.3.1 * python311-colorama-0.4.6-150400.5.3.1 * python311-pure-eval-0.2.2-150400.9.3.1 * python311-tomlkit-0.12.1-150400.10.3.1 * python311-astroid-2.15.6-150400.11.3.1 * python311-paramiko-3.3.1-150400.13.3.1 * python311-ecdsa-0.18.0-150400.12.3.1 * python311-littleutils-0.2.2-150400.9.3.1 * python311-cppy-1.2.1-150400.9.3.1 * python-tqdm-bash-completion-4.66.1-150400.9.3.1 * python311-sphinxcontrib-1.0.1-150400.13.3.1 * python311-fluidity-sm-0.2.0-150400.10.3.1 * python311-testscenarios-0.5.0-150400.11.3.1 * python311-releases-2.1.1-150400.9.3.1 * python311-typeguard-4.0.0-150400.9.3.1 * python311-asttokens-2.4.0-150400.9.3.1 * python311-capturer-3.0-150400.9.3.1 * python311-pkginfo-1.9.6-150400.7.3.1 * python311-pytest-randomly-3.13.0-150400.9.3.1 * python311-opentelemetry-api-1.17.0-150400.10.3.1 * python311-tornado-6.3.2-150400.12.3.1 * python-paramiko-doc-3.3.1-150400.13.3.1 * python311-keyring-24.2.0-150400.5.3.1 * python311-linecache2-1.0.0-150400.11.3.1 * python311-prompt_toolkit-3.0.38-150400.9.3.1 * python311-gast-0.5.3-150400.9.3.1 * python311-FormEncode-2.0.1-150400.9.3.1 * python311-bleach-6.0.0-150400.9.3.1 * python311-pytest-7.4.2-150400.3.6.1 * python311-CommonMark-0.9.1-150400.9.3.1 * python311-pytest-relaxed-2.0.1-150400.12.3.1 * python311-requests-mock-1.10.0-150400.7.3.1 * python311-munkres-1.1.4-150400.9.3.1 * python311-furl-2.1.3-150400.9.3.1 * python311-pytoml-0.1.21-150400.9.3.1 * python311-portalocker-2.7.0-150400.10.3.1 * python311-humanfriendly-10.0-150400.13.3.1 * python311-sphinxcontrib-serializinghtml-1.1.9-150400.3.6.1 * python311-zhon-1.1.5-150400.9.3.1 * python311-wcwidth-0.2.6-150400.10.3.1 * python311-SecretStorage-3.3.3-150400.5.3.1 * python311-testtools-2.6.0-150400.12.3.1 * python311-dragonmapper-0.2.6-150400.9.3.1 * python311-prettytable-3.8.0-150400.9.3.1 * python311-rsa-4.9-150400.12.3.1 * python311-tempora-5.5.0-150400.7.3.1 * python311-pyftpdlib-1.5.7-150400.9.3.1 * python311-pbr-5.11.1-150400.14.3.1 * python311-pyinotify-0.9.6-150400.13.3.1 * python311-traceback2-1.4.0-150400.11.3.1 * python311-rfc3986-2.0.0-150400.12.3.1 * python311-jeepney-0.8.0-150400.5.3.1 * python311-configshell-fb-1.1.30-150400.8.3.1 * python311-invoke-2.1.2-150400.10.3.1 * python311-pymemcache-4.0.0-150400.14.3.1 * python311-beniget-0.4.1-150400.9.3.1 * python311-future-0.18.3-150400.6.3.1 * python311-ply-3.11-150400.12.3.1 * python311-Sphinx-7.2.6-150400.3.6.1 * python311-pyudev-0.24.1-150400.3.3.1 * python311-pytest-lazy-fixture-0.6.3-150400.9.3.1 * python311-tox-3.26.0-150400.15.3.1 * python311-backcall-0.2.0-150400.9.3.1 * python311-pyproject-metadata-0.7.1-150400.9.3.1 * python311-python-magic-0.4.27-150400.9.3.1 * python311-fixtures-4.1.0-150400.12.3.1 * python311-python-mimeparse-1.6.0-150400.12.3.1 * python311-urllib3-2.0.7-150400.7.10.1 * python311-testresources-2.0.1-150400.11.3.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libzopfli1-64bit-1.0.3-150400.9.3.2 * libzopflipng1-64bit-debuginfo-1.0.3-150400.9.3.2 * libzopfli1-64bit-debuginfo-1.0.3-150400.9.3.2 * libzopflipng1-64bit-1.0.3-150400.9.3.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * zopfli-debuginfo-1.0.3-150400.9.3.2 * xclip-0.13-150400.9.3.1 * libzopfli-devel-1.0.3-150400.9.3.2 * zopfli-debugsource-1.0.3-150400.9.3.2 * xclip-debugsource-0.13-150400.9.3.1 * zopfli-1.0.3-150400.9.3.2 * xclip-debuginfo-0.13-150400.9.3.1 * xsel-debugsource-1.2.0-150400.9.3.1 * libzopfli1-1.0.3-150400.9.3.2 * libzopfli1-debuginfo-1.0.3-150400.9.3.2 * xsel-debuginfo-1.2.0-150400.9.3.1 * xsel-1.2.0-150400.9.3.1 * libzopflipng1-debuginfo-1.0.3-150400.9.3.2 * libzopflipng1-1.0.3-150400.9.3.2 * Basesystem Module 15-SP4 (x86_64) * libzopflipng1-32bit-debuginfo-1.0.3-150400.9.3.2 * libzopfli1-32bit-1.0.3-150400.9.3.2 * libzopflipng1-32bit-1.0.3-150400.9.3.2 * libzopfli1-32bit-debuginfo-1.0.3-150400.9.3.2 ## References: * https://jira.suse.com/browse/PED-68

1 0

SUSE-RU-2023:2437-2: moderate: Recommended update for hplip
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Recommended update for hplip Announcement ID: SUSE-RU-2023:2437-2 Rating: moderate References: * bsc#1209866 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for hplip fixes the following issues: * Fix printer attribute handling which could provoke a buffer overflow if CUPS returned a printer with too large `name/location/uri/etc` (bsc#1209866) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2437=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-2437=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-2437=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * hplip-debuginfo-3.21.10-150400.3.8.1 * hplip-scan-utils-3.21.10-150400.3.8.1 * hplip-hpijs-3.21.10-150400.3.8.1 * hplip-3.21.10-150400.3.8.1 * hplip-sane-3.21.10-150400.3.8.1 * hplip-hpijs-debuginfo-3.21.10-150400.3.8.1 * hplip-debugsource-3.21.10-150400.3.8.1 * hplip-devel-3.21.10-150400.3.8.1 * hplip-sane-debuginfo-3.21.10-150400.3.8.1 * hplip-scan-utils-debuginfo-3.21.10-150400.3.8.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * hplip-debuginfo-3.21.10-150400.3.8.1 * hplip-hpijs-3.21.10-150400.3.8.1 * hplip-sane-3.21.10-150400.3.8.1 * hplip-hpijs-debuginfo-3.21.10-150400.3.8.1 * hplip-debugsource-3.21.10-150400.3.8.1 * hplip-devel-3.21.10-150400.3.8.1 * hplip-sane-debuginfo-3.21.10-150400.3.8.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * hplip-debuginfo-3.21.10-150400.3.8.1 * hplip-debugsource-3.21.10-150400.3.8.1 * hplip-3.21.10-150400.3.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1209866

1 0

SUSE-RU-2023:4494-1: moderate: Recommended update for cmake
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Recommended update for cmake Announcement ID: SUSE-RU-2023:4494-1 Rating: moderate References: * bsc#1217009 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for cmake fixes the following issues: * Packages fail to build when there's a folder called "CMakeLists.txt" (bsc#1217009) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4494=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4494=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4494=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4494=1 openSUSE-SLE-15.4-2023-4494=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cmake-man-3.20.4-150400.4.3.1 * cmake-full-debuginfo-3.20.4-150400.4.3.1 * cmake-full-debugsource-3.20.4-150400.4.3.1 * cmake-gui-debuginfo-3.20.4-150400.4.3.1 * cmake-full-3.20.4-150400.4.3.1 * cmake-gui-3.20.4-150400.4.3.1 * cmake-ui-debugsource-3.20.4-150400.4.3.1 * cmake-3.20.4-150400.4.3.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * cmake-full-debuginfo-3.20.4-150400.4.3.1 * cmake-3.20.4-150400.4.3.1 * cmake-full-3.20.4-150400.4.3.1 * cmake-full-debugsource-3.20.4-150400.4.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cmake-full-debuginfo-3.20.4-150400.4.3.1 * cmake-3.20.4-150400.4.3.1 * cmake-full-3.20.4-150400.4.3.1 * cmake-full-debugsource-3.20.4-150400.4.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * cmake-man-3.20.4-150400.4.3.1 * cmake-full-debuginfo-3.20.4-150400.4.3.1 * cmake-full-debugsource-3.20.4-150400.4.3.1 * cmake-gui-debuginfo-3.20.4-150400.4.3.1 * cmake-full-3.20.4-150400.4.3.1 * cmake-mini-debugsource-3.20.4-150400.4.3.1 * cmake-gui-3.20.4-150400.4.3.1 * cmake-ui-debugsource-3.20.4-150400.4.3.1 * cmake-3.20.4-150400.4.3.1 * cmake-mini-3.20.4-150400.4.3.1 * cmake-mini-debuginfo-3.20.4-150400.4.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217009

1 0

SUSE-SU-2023:4495-1: important: Security update for postgresql, postgresql15, postgresql16
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for postgresql, postgresql15, postgresql16 Announcement ID: SUSE-SU-2023:4495-1 Rating: important References: * bsc#1122892 * bsc#1179231 * bsc#1206796 * bsc#1209208 * bsc#1216022 * bsc#1216734 * bsc#1216960 * bsc#1216961 * bsc#1216962 * jsc#PED-5586 Cross-References: * CVE-2023-5868 * CVE-2023-5869 * CVE-2023-5870 CVSS scores: * CVE-2023-5868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-5869 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5870 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Legacy Module 15-SP4 * Legacy Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves three vulnerabilities, contains one feature and has six security fixes can now be installed. ## Description: This update for postgresql, postgresql15, postgresql16 fixes the following issues: This update ships postgresql 16. Security issues fixed: * CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT "any" aggregate functions. This error led to a text-type value being interpreted as an unknown-type value (that is, a zero-terminated string) at runtime. This could result in disclosure of server memory following the text value. (bsc#1216962) * CVE-2023-5869: Detect integer overflow while computing new array dimensions. When assigning new elements to array subscripts that are outside the current array bounds, an undetected integer overflow could occur in edge cases. Memory stomps that are potentially exploitable for arbitrary code execution are possible, and so is disclosure of server memory. (bsc#1216961) * CVE-2023-5870: Prevent the pg_signal_backend role from signalling background workers and autovacuum processes. The documentation says that pg_signal_backend cannot issue signals to superuser-owned processes. It was able to signal these background processes, though, because they advertise a role OID of zero. Treat that as indicating superuser ownership. The security implications of cancelling one of these process types are fairly small so far as the core code goes (we'll just start another one), but extensions might add background workers that are more vulnerable. Also ensure that the is_superuser parameter is set correctly in such processes. No specific security consequences are known for that oversight, but it might be significant for some extensions. (bsc#1216960) Changes in postgresql16: * Upgrade to 16.1: * https://www.postgresql.org/about/news/2715 * https://www.postgresql.org/docs/16/release-16.html * https://www.postgresql.org/docs/16/release-16-1.html * Overhaul postgresql-README.SUSE and move it from the binary package to the noarch wrapper package. * Change the unix domain socket location from /var/run to /run. Changes in postgresql15: * Update to 15.5 https://www.postgresql.org/docs/15/release-15-5.html * The libs and mini package are now provided by postgresql16. * Overhaul postgresql-README.SUSE and move it from the binary package to the noarch wrapper package. * Change the unix domain socket location from /var/run to /run. Changes in postgresql: * Interlock version and release of all noarch packages except for the postgresql-docs. * bsc#1122892: Add a sysconfig variable for initdb. * Overhaul postgresql-README.SUSE and move it from the binary package to the noarch wrapper package. * bsc#1179231: Add an explanation for the /tmp -> /run/postgresql move and permission change. * Add postgresql-README as a separate source file. * bsc#1209208: Drop hard dependency on systemd * bsc#1206796: Refine the distinction of where to use sysusers and use bcond to have the expression only in one place. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4495=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4495=1 openSUSE-SLE-15.4-2023-4495=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4495=1 openSUSE-SLE-15.5-2023-4495=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4495=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4495=1 * Legacy Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2023-4495=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2023-4495=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4495=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4495=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4495=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4495=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4495=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4495=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4495=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4495=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4495=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4495=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4495=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4495=1 ## Package List: * openSUSE Leap 15.3 (noarch) * postgresql-test-16-150300.10.18.3 * postgresql-16-150300.10.18.3 * postgresql-llvmjit-devel-16-150300.10.18.3 * postgresql-plperl-16-150300.10.18.3 * postgresql-contrib-16-150300.10.18.3 * postgresql-server-16-150300.10.18.3 * postgresql-server-devel-16-150300.10.18.3 * postgresql-llvmjit-16-150300.10.18.3 * postgresql-plpython-16-150300.10.18.3 * postgresql-docs-16-150300.10.18.3 * postgresql-pltcl-16-150300.10.18.3 * postgresql-devel-16-150300.10.18.3 * openSUSE Leap 15.4 (noarch) * postgresql-plperl-16-150400.4.9.2 * postgresql-server-16-150400.4.9.2 * postgresql-docs-16-150400.4.9.2 * postgresql15-docs-15.5-150200.5.19.1 * postgresql-llvmjit-16-150400.4.9.2 * postgresql-llvmjit-devel-16-150300.10.18.3 * postgresql-devel-16-150400.4.9.2 * postgresql-llvmjit-devel-16-150400.4.9.2 * postgresql-server-devel-16-150400.4.9.2 * postgresql-contrib-16-150400.4.9.2 * postgresql-pltcl-16-150400.4.9.2 * postgresql-plpython-16-150400.4.9.2 * postgresql-16-150400.4.9.2 * postgresql-test-16-150400.4.9.2 * postgresql16-docs-16.1-150200.5.7.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * postgresql16-debuginfo-16.1-150200.5.7.1 * postgresql15-debugsource-15.5-150200.5.19.1 * postgresql16-devel-debuginfo-16.1-150200.5.7.1 * postgresql16-devel-16.1-150200.5.7.1 * postgresql15-test-15.5-150200.5.19.1 * postgresql16-pltcl-debuginfo-16.1-150200.5.7.1 * postgresql16-test-16.1-150200.5.7.1 * postgresql15-15.5-150200.5.19.1 * postgresql16-16.1-150200.5.7.1 * postgresql15-contrib-debuginfo-15.5-150200.5.19.1 * postgresql16-devel-mini-debuginfo-16.1-150200.5.7.1 * postgresql16-plperl-16.1-150200.5.7.1 * postgresql16-server-debuginfo-16.1-150200.5.7.1 * postgresql15-llvmjit-devel-15.5-150200.5.19.1 * libpq5-debuginfo-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * postgresql15-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-debuginfo-15.5-150200.5.19.1 * postgresql15-pltcl-debuginfo-15.5-150200.5.19.1 * postgresql15-server-devel-debuginfo-15.5-150200.5.19.1 * postgresql16-server-devel-16.1-150200.5.7.1 * postgresql16-contrib-16.1-150200.5.7.1 * postgresql16-pltcl-16.1-150200.5.7.1 * postgresql15-server-debuginfo-15.5-150200.5.19.1 * postgresql15-contrib-15.5-150200.5.19.1 * postgresql15-server-15.5-150200.5.19.1 * postgresql15-llvmjit-15.5-150200.5.19.1 * postgresql16-debugsource-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * postgresql15-plpython-15.5-150200.5.19.1 * postgresql16-plpython-debuginfo-16.1-150200.5.7.1 * postgresql16-llvmjit-16.1-150200.5.7.1 * postgresql15-debuginfo-15.5-150200.5.19.1 * libpq5-16.1-150200.5.7.1 * postgresql16-server-16.1-150200.5.7.1 * postgresql15-server-devel-15.5-150200.5.19.1 * postgresql15-llvmjit-debuginfo-15.5-150200.5.19.1 * postgresql15-devel-15.5-150200.5.19.1 * postgresql15-plpython-debuginfo-15.5-150200.5.19.1 * postgresql16-llvmjit-debuginfo-16.1-150200.5.7.1 * postgresql16-plperl-debuginfo-16.1-150200.5.7.1 * postgresql16-contrib-debuginfo-16.1-150200.5.7.1 * postgresql16-server-devel-debuginfo-16.1-150200.5.7.1 * postgresql15-plperl-15.5-150200.5.19.1 * postgresql16-plpython-16.1-150200.5.7.1 * postgresql16-mini-debugsource-16.1-150200.5.7.1 * postgresql16-devel-mini-16.1-150200.5.7.1 * postgresql16-llvmjit-devel-16.1-150200.5.7.1 * postgresql15-pltcl-15.5-150200.5.19.1 * openSUSE Leap 15.4 (x86_64) * libecpg6-32bit-debuginfo-16.1-150200.5.7.1 * libpq5-32bit-16.1-150200.5.7.1 * libecpg6-32bit-16.1-150200.5.7.1 * libpq5-32bit-debuginfo-16.1-150200.5.7.1 * openSUSE Leap 15.5 (noarch) * postgresql-server-devel-16-150500.10.3.2 * postgresql15-docs-15.5-150200.5.19.1 * postgresql-llvmjit-16-150500.10.3.2 * postgresql-test-16-150500.10.3.2 * postgresql16-docs-16.1-150200.5.7.1 * postgresql-plperl-16-150500.10.3.2 * postgresql-docs-16-150500.10.3.2 * postgresql-server-16-150500.10.3.2 * postgresql-plpython-16-150500.10.3.2 * postgresql-pltcl-16-150500.10.3.2 * postgresql-devel-16-150500.10.3.2 * postgresql-llvmjit-devel-16-150500.10.3.2 * postgresql-16-150500.10.3.2 * postgresql-contrib-16-150500.10.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * postgresql16-debuginfo-16.1-150200.5.7.1 * postgresql15-debugsource-15.5-150200.5.19.1 * postgresql16-devel-debuginfo-16.1-150200.5.7.1 * postgresql16-devel-16.1-150200.5.7.1 * postgresql15-test-15.5-150200.5.19.1 * postgresql16-pltcl-debuginfo-16.1-150200.5.7.1 * postgresql16-test-16.1-150200.5.7.1 * postgresql15-15.5-150200.5.19.1 * postgresql16-16.1-150200.5.7.1 * postgresql15-contrib-debuginfo-15.5-150200.5.19.1 * postgresql16-devel-mini-debuginfo-16.1-150200.5.7.1 * postgresql16-plperl-16.1-150200.5.7.1 * postgresql16-server-debuginfo-16.1-150200.5.7.1 * postgresql15-llvmjit-devel-15.5-150200.5.19.1 * libpq5-debuginfo-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * postgresql15-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-debuginfo-15.5-150200.5.19.1 * postgresql15-pltcl-debuginfo-15.5-150200.5.19.1 * postgresql15-server-devel-debuginfo-15.5-150200.5.19.1 * postgresql16-server-devel-16.1-150200.5.7.1 * postgresql16-contrib-16.1-150200.5.7.1 * postgresql16-pltcl-16.1-150200.5.7.1 * postgresql15-server-debuginfo-15.5-150200.5.19.1 * postgresql15-contrib-15.5-150200.5.19.1 * postgresql15-server-15.5-150200.5.19.1 * postgresql15-llvmjit-15.5-150200.5.19.1 * postgresql16-debugsource-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * postgresql15-plpython-15.5-150200.5.19.1 * postgresql16-plpython-debuginfo-16.1-150200.5.7.1 * postgresql16-llvmjit-16.1-150200.5.7.1 * postgresql15-debuginfo-15.5-150200.5.19.1 * libpq5-16.1-150200.5.7.1 * postgresql16-server-16.1-150200.5.7.1 * postgresql15-server-devel-15.5-150200.5.19.1 * postgresql15-llvmjit-debuginfo-15.5-150200.5.19.1 * postgresql15-devel-15.5-150200.5.19.1 * postgresql15-plpython-debuginfo-15.5-150200.5.19.1 * postgresql16-llvmjit-debuginfo-16.1-150200.5.7.1 * postgresql16-plperl-debuginfo-16.1-150200.5.7.1 * postgresql16-contrib-debuginfo-16.1-150200.5.7.1 * postgresql16-server-devel-debuginfo-16.1-150200.5.7.1 * postgresql15-plperl-15.5-150200.5.19.1 * postgresql16-plpython-16.1-150200.5.7.1 * postgresql16-mini-debugsource-16.1-150200.5.7.1 * postgresql16-devel-mini-16.1-150200.5.7.1 * postgresql16-llvmjit-devel-16.1-150200.5.7.1 * postgresql15-pltcl-15.5-150200.5.19.1 * openSUSE Leap 15.5 (x86_64) * libecpg6-32bit-debuginfo-16.1-150200.5.7.1 * libpq5-32bit-16.1-150200.5.7.1 * libecpg6-32bit-16.1-150200.5.7.1 * libpq5-32bit-debuginfo-16.1-150200.5.7.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libpq5-16.1-150200.5.7.1 * postgresql16-debugsource-16.1-150200.5.7.1 * postgresql16-debuginfo-16.1-150200.5.7.1 * libpq5-debuginfo-16.1-150200.5.7.1 * postgresql15-debugsource-15.5-150200.5.19.1 * postgresql15-15.5-150200.5.19.1 * postgresql16-16.1-150200.5.7.1 * postgresql15-debuginfo-15.5-150200.5.19.1 * Basesystem Module 15-SP4 (noarch) * postgresql-16-150400.4.9.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libpq5-16.1-150200.5.7.1 * postgresql16-debugsource-16.1-150200.5.7.1 * postgresql16-debuginfo-16.1-150200.5.7.1 * libpq5-debuginfo-16.1-150200.5.7.1 * postgresql15-debugsource-15.5-150200.5.19.1 * postgresql15-15.5-150200.5.19.1 * postgresql16-16.1-150200.5.7.1 * postgresql15-debuginfo-15.5-150200.5.19.1 * Basesystem Module 15-SP5 (noarch) * postgresql-16-150500.10.3.2 * Legacy Module 15-SP4 (noarch) * postgresql-llvmjit-devel-16-150400.4.9.2 * postgresql-llvmjit-16-150400.4.9.2 * Legacy Module 15-SP5 (noarch) * postgresql-llvmjit-16-150500.10.3.2 * postgresql-llvmjit-devel-16-150500.10.3.2 * SUSE Package Hub 15 15-SP4 (noarch) * postgresql-plperl-16-150400.4.9.2 * postgresql-server-16-150400.4.9.2 * postgresql-docs-16-150400.4.9.2 * postgresql-llvmjit-16-150400.4.9.2 * postgresql-devel-16-150400.4.9.2 * postgresql-llvmjit-devel-16-150400.4.9.2 * postgresql-server-devel-16-150400.4.9.2 * postgresql-contrib-16-150400.4.9.2 * postgresql-pltcl-16-150400.4.9.2 * postgresql-plpython-16-150400.4.9.2 * postgresql-16-150400.4.9.2 * postgresql-test-16-150400.4.9.2 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * postgresql15-llvmjit-15.5-150200.5.19.1 * postgresql15-llvmjit-devel-15.5-150200.5.19.1 * postgresql15-test-15.5-150200.5.19.1 * postgresql15-llvmjit-debuginfo-15.5-150200.5.19.1 * postgresql16-llvmjit-debuginfo-16.1-150200.5.7.1 * postgresql16-test-16.1-150200.5.7.1 * postgresql16-llvmjit-16.1-150200.5.7.1 * postgresql16-llvmjit-devel-16.1-150200.5.7.1 * SUSE Package Hub 15 15-SP5 (noarch) * postgresql-server-devel-16-150500.10.3.2 * postgresql-llvmjit-16-150500.10.3.2 * postgresql-test-16-150500.10.3.2 * postgresql-plperl-16-150500.10.3.2 * postgresql-docs-16-150500.10.3.2 * postgresql-server-16-150500.10.3.2 * postgresql-plpython-16-150500.10.3.2 * postgresql-pltcl-16-150500.10.3.2 * postgresql-devel-16-150500.10.3.2 * postgresql-llvmjit-devel-16-150500.10.3.2 * postgresql-16-150500.10.3.2 * postgresql-contrib-16-150500.10.3.2 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * postgresql16-test-16.1-150200.5.7.1 * postgresql16-llvmjit-16.1-150200.5.7.1 * postgresql16-llvmjit-devel-16.1-150200.5.7.1 * postgresql16-llvmjit-debuginfo-16.1-150200.5.7.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * postgresql16-debuginfo-16.1-150200.5.7.1 * postgresql15-debugsource-15.5-150200.5.19.1 * postgresql16-devel-debuginfo-16.1-150200.5.7.1 * postgresql16-devel-16.1-150200.5.7.1 * postgresql16-pltcl-debuginfo-16.1-150200.5.7.1 * postgresql15-contrib-debuginfo-15.5-150200.5.19.1 * postgresql16-plperl-16.1-150200.5.7.1 * postgresql16-server-debuginfo-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * postgresql15-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-debuginfo-15.5-150200.5.19.1 * postgresql15-pltcl-debuginfo-15.5-150200.5.19.1 * postgresql15-server-devel-debuginfo-15.5-150200.5.19.1 * postgresql16-server-devel-16.1-150200.5.7.1 * postgresql16-contrib-16.1-150200.5.7.1 * postgresql16-pltcl-16.1-150200.5.7.1 * postgresql15-server-debuginfo-15.5-150200.5.19.1 * postgresql15-contrib-15.5-150200.5.19.1 * postgresql15-server-15.5-150200.5.19.1 * postgresql16-debugsource-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * postgresql15-plpython-15.5-150200.5.19.1 * postgresql16-plpython-debuginfo-16.1-150200.5.7.1 * postgresql15-debuginfo-15.5-150200.5.19.1 * postgresql16-server-16.1-150200.5.7.1 * postgresql15-server-devel-15.5-150200.5.19.1 * postgresql15-devel-15.5-150200.5.19.1 * postgresql15-plpython-debuginfo-15.5-150200.5.19.1 * postgresql16-plperl-debuginfo-16.1-150200.5.7.1 * postgresql16-server-devel-debuginfo-16.1-150200.5.7.1 * postgresql16-contrib-debuginfo-16.1-150200.5.7.1 * postgresql15-plperl-15.5-150200.5.19.1 * postgresql16-plpython-16.1-150200.5.7.1 * postgresql15-pltcl-15.5-150200.5.19.1 * Server Applications Module 15-SP4 (noarch) * postgresql-plperl-16-150400.4.9.2 * postgresql-server-16-150400.4.9.2 * postgresql-docs-16-150400.4.9.2 * postgresql15-docs-15.5-150200.5.19.1 * postgresql-devel-16-150400.4.9.2 * postgresql-server-devel-16-150400.4.9.2 * postgresql-contrib-16-150400.4.9.2 * postgresql-plpython-16-150400.4.9.2 * postgresql-pltcl-16-150400.4.9.2 * postgresql16-docs-16.1-150200.5.7.1 * Server Applications Module 15-SP4 (ppc64le) * postgresql15-15.5-150200.5.19.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * postgresql16-debuginfo-16.1-150200.5.7.1 * postgresql15-debugsource-15.5-150200.5.19.1 * postgresql16-devel-debuginfo-16.1-150200.5.7.1 * postgresql16-devel-16.1-150200.5.7.1 * postgresql16-pltcl-debuginfo-16.1-150200.5.7.1 * postgresql15-contrib-debuginfo-15.5-150200.5.19.1 * postgresql16-plperl-16.1-150200.5.7.1 * postgresql16-server-debuginfo-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * postgresql15-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-debuginfo-15.5-150200.5.19.1 * postgresql15-pltcl-debuginfo-15.5-150200.5.19.1 * postgresql15-server-devel-debuginfo-15.5-150200.5.19.1 * postgresql16-server-devel-16.1-150200.5.7.1 * postgresql16-contrib-16.1-150200.5.7.1 * postgresql16-pltcl-16.1-150200.5.7.1 * postgresql15-server-debuginfo-15.5-150200.5.19.1 * postgresql15-contrib-15.5-150200.5.19.1 * postgresql15-server-15.5-150200.5.19.1 * postgresql16-debugsource-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * postgresql15-plpython-15.5-150200.5.19.1 * postgresql16-plpython-debuginfo-16.1-150200.5.7.1 * postgresql15-debuginfo-15.5-150200.5.19.1 * postgresql16-server-16.1-150200.5.7.1 * postgresql15-server-devel-15.5-150200.5.19.1 * postgresql15-devel-15.5-150200.5.19.1 * postgresql15-plpython-debuginfo-15.5-150200.5.19.1 * postgresql16-plperl-debuginfo-16.1-150200.5.7.1 * postgresql16-server-devel-debuginfo-16.1-150200.5.7.1 * postgresql16-contrib-debuginfo-16.1-150200.5.7.1 * postgresql15-plperl-15.5-150200.5.19.1 * postgresql16-plpython-16.1-150200.5.7.1 * postgresql15-pltcl-15.5-150200.5.19.1 * Server Applications Module 15-SP5 (noarch) * postgresql-server-devel-16-150500.10.3.2 * postgresql15-docs-15.5-150200.5.19.1 * postgresql16-docs-16.1-150200.5.7.1 * postgresql-docs-16-150500.10.3.2 * postgresql-server-16-150500.10.3.2 * postgresql-plpython-16-150500.10.3.2 * postgresql-pltcl-16-150500.10.3.2 * postgresql-devel-16-150500.10.3.2 * postgresql-plperl-16-150500.10.3.2 * postgresql-contrib-16-150500.10.3.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libpq5-debuginfo-16.1-150200.5.7.1 * libpq5-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * postgresql-server-devel-16-150200.4.24.1 * postgresql-docs-16-150200.4.24.1 * postgresql-pltcl-16-150200.4.24.1 * postgresql-devel-16-150200.4.24.1 * postgresql-plpython-16-150200.4.24.1 * postgresql-contrib-16-150200.4.24.1 * postgresql-plperl-16-150200.4.24.1 * postgresql-server-16-150200.4.24.1 * postgresql-16-150200.4.24.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libpq5-32bit-16.1-150200.5.7.1 * libpq5-32bit-debuginfo-16.1-150200.5.7.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * postgresql16-debuginfo-16.1-150200.5.7.1 * postgresql15-debugsource-15.5-150200.5.19.1 * postgresql15-15.5-150200.5.19.1 * postgresql15-contrib-debuginfo-15.5-150200.5.19.1 * libpq5-debuginfo-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * postgresql15-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-debuginfo-15.5-150200.5.19.1 * postgresql15-pltcl-debuginfo-15.5-150200.5.19.1 * postgresql15-server-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-server-debuginfo-15.5-150200.5.19.1 * postgresql15-contrib-15.5-150200.5.19.1 * postgresql15-server-15.5-150200.5.19.1 * postgresql16-debugsource-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * postgresql15-plpython-15.5-150200.5.19.1 * postgresql15-debuginfo-15.5-150200.5.19.1 * libpq5-16.1-150200.5.7.1 * postgresql15-server-devel-15.5-150200.5.19.1 * postgresql15-devel-15.5-150200.5.19.1 * postgresql15-plpython-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-15.5-150200.5.19.1 * postgresql15-pltcl-15.5-150200.5.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * postgresql15-docs-15.5-150200.5.19.1 * postgresql-16-150300.10.18.3 * postgresql-plperl-16-150300.10.18.3 * postgresql-contrib-16-150300.10.18.3 * postgresql-server-16-150300.10.18.3 * postgresql-server-devel-16-150300.10.18.3 * postgresql-plpython-16-150300.10.18.3 * postgresql-docs-16-150300.10.18.3 * postgresql-pltcl-16-150300.10.18.3 * postgresql-devel-16-150300.10.18.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * postgresql16-debuginfo-16.1-150200.5.7.1 * postgresql15-debugsource-15.5-150200.5.19.1 * postgresql15-15.5-150200.5.19.1 * postgresql15-contrib-debuginfo-15.5-150200.5.19.1 * libpq5-debuginfo-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * postgresql15-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-debuginfo-15.5-150200.5.19.1 * postgresql15-pltcl-debuginfo-15.5-150200.5.19.1 * postgresql15-server-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-server-debuginfo-15.5-150200.5.19.1 * postgresql15-contrib-15.5-150200.5.19.1 * postgresql15-server-15.5-150200.5.19.1 * postgresql16-debugsource-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * postgresql15-plpython-15.5-150200.5.19.1 * postgresql15-debuginfo-15.5-150200.5.19.1 * libpq5-16.1-150200.5.7.1 * postgresql15-server-devel-15.5-150200.5.19.1 * postgresql15-devel-15.5-150200.5.19.1 * postgresql15-plpython-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-15.5-150200.5.19.1 * postgresql15-pltcl-15.5-150200.5.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * postgresql15-docs-15.5-150200.5.19.1 * postgresql-16-150300.10.18.3 * postgresql-plperl-16-150300.10.18.3 * postgresql-contrib-16-150300.10.18.3 * postgresql-server-16-150300.10.18.3 * postgresql-server-devel-16-150300.10.18.3 * postgresql-plpython-16-150300.10.18.3 * postgresql-docs-16-150300.10.18.3 * postgresql-pltcl-16-150300.10.18.3 * postgresql-devel-16-150300.10.18.3 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libpq5-debuginfo-16.1-150200.5.7.1 * libpq5-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * postgresql-server-devel-16-150200.4.24.1 * postgresql-docs-16-150200.4.24.1 * postgresql-pltcl-16-150200.4.24.1 * postgresql-devel-16-150200.4.24.1 * postgresql-plpython-16-150200.4.24.1 * postgresql-contrib-16-150200.4.24.1 * postgresql-plperl-16-150200.4.24.1 * postgresql-server-16-150200.4.24.1 * postgresql-16-150200.4.24.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libpq5-32bit-16.1-150200.5.7.1 * libpq5-32bit-debuginfo-16.1-150200.5.7.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * postgresql16-debuginfo-16.1-150200.5.7.1 * postgresql15-debugsource-15.5-150200.5.19.1 * postgresql15-15.5-150200.5.19.1 * postgresql15-contrib-debuginfo-15.5-150200.5.19.1 * libpq5-debuginfo-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * postgresql15-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-debuginfo-15.5-150200.5.19.1 * postgresql15-pltcl-debuginfo-15.5-150200.5.19.1 * postgresql15-server-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-server-debuginfo-15.5-150200.5.19.1 * postgresql15-contrib-15.5-150200.5.19.1 * postgresql15-server-15.5-150200.5.19.1 * postgresql16-debugsource-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * postgresql15-plpython-15.5-150200.5.19.1 * postgresql15-debuginfo-15.5-150200.5.19.1 * libpq5-16.1-150200.5.7.1 * postgresql15-server-devel-15.5-150200.5.19.1 * postgresql15-devel-15.5-150200.5.19.1 * postgresql15-plpython-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-15.5-150200.5.19.1 * postgresql15-pltcl-15.5-150200.5.19.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * postgresql15-docs-15.5-150200.5.19.1 * postgresql-16-150300.10.18.3 * postgresql-plperl-16-150300.10.18.3 * postgresql-contrib-16-150300.10.18.3 * postgresql-server-16-150300.10.18.3 * postgresql-server-devel-16-150300.10.18.3 * postgresql-plpython-16-150300.10.18.3 * postgresql-docs-16-150300.10.18.3 * postgresql-pltcl-16-150300.10.18.3 * postgresql-devel-16-150300.10.18.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libpq5-debuginfo-16.1-150200.5.7.1 * libpq5-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * postgresql-server-devel-16-150200.4.24.1 * postgresql-docs-16-150200.4.24.1 * postgresql-pltcl-16-150200.4.24.1 * postgresql-devel-16-150200.4.24.1 * postgresql-plpython-16-150200.4.24.1 * postgresql-contrib-16-150200.4.24.1 * postgresql-plperl-16-150200.4.24.1 * postgresql-server-16-150200.4.24.1 * postgresql-16-150200.4.24.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libpq5-32bit-16.1-150200.5.7.1 * libpq5-32bit-debuginfo-16.1-150200.5.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * postgresql16-debuginfo-16.1-150200.5.7.1 * postgresql15-debugsource-15.5-150200.5.19.1 * postgresql15-15.5-150200.5.19.1 * postgresql15-contrib-debuginfo-15.5-150200.5.19.1 * libpq5-debuginfo-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * postgresql15-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-debuginfo-15.5-150200.5.19.1 * postgresql15-pltcl-debuginfo-15.5-150200.5.19.1 * postgresql15-server-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-server-debuginfo-15.5-150200.5.19.1 * postgresql15-contrib-15.5-150200.5.19.1 * postgresql15-server-15.5-150200.5.19.1 * postgresql16-debugsource-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * postgresql15-plpython-15.5-150200.5.19.1 * postgresql15-debuginfo-15.5-150200.5.19.1 * libpq5-16.1-150200.5.7.1 * postgresql15-server-devel-15.5-150200.5.19.1 * postgresql15-devel-15.5-150200.5.19.1 * postgresql15-plpython-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-15.5-150200.5.19.1 * postgresql15-pltcl-15.5-150200.5.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * postgresql15-docs-15.5-150200.5.19.1 * postgresql-16-150300.10.18.3 * postgresql-plperl-16-150300.10.18.3 * postgresql-contrib-16-150300.10.18.3 * postgresql-server-16-150300.10.18.3 * postgresql-server-devel-16-150300.10.18.3 * postgresql-plpython-16-150300.10.18.3 * postgresql-docs-16-150300.10.18.3 * postgresql-pltcl-16-150300.10.18.3 * postgresql-devel-16-150300.10.18.3 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * postgresql16-debuginfo-16.1-150200.5.7.1 * postgresql15-debugsource-15.5-150200.5.19.1 * postgresql15-15.5-150200.5.19.1 * postgresql15-contrib-debuginfo-15.5-150200.5.19.1 * libpq5-debuginfo-16.1-150200.5.7.1 * libecpg6-16.1-150200.5.7.1 * postgresql15-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-debuginfo-15.5-150200.5.19.1 * postgresql15-pltcl-debuginfo-15.5-150200.5.19.1 * postgresql15-server-devel-debuginfo-15.5-150200.5.19.1 * postgresql15-server-debuginfo-15.5-150200.5.19.1 * postgresql15-contrib-15.5-150200.5.19.1 * postgresql15-server-15.5-150200.5.19.1 * postgresql16-debugsource-16.1-150200.5.7.1 * libecpg6-debuginfo-16.1-150200.5.7.1 * postgresql15-plpython-15.5-150200.5.19.1 * postgresql15-debuginfo-15.5-150200.5.19.1 * libpq5-16.1-150200.5.7.1 * postgresql15-server-devel-15.5-150200.5.19.1 * postgresql15-devel-15.5-150200.5.19.1 * postgresql15-plpython-debuginfo-15.5-150200.5.19.1 * postgresql15-plperl-15.5-150200.5.19.1 * postgresql15-pltcl-15.5-150200.5.19.1 * SUSE Enterprise Storage 7.1 (noarch) * postgresql15-docs-15.5-150200.5.19.1 * postgresql-16-150300.10.18.3 * postgresql-plperl-16-150300.10.18.3 * postgresql-contrib-16-150300.10.18.3 * postgresql-server-16-150300.10.18.3 * postgresql-server-devel-16-150300.10.18.3 * postgresql-plpython-16-150300.10.18.3 * postgresql-docs-16-150300.10.18.3 * postgresql-pltcl-16-150300.10.18.3 * postgresql-devel-16-150300.10.18.3 ## References: * https://www.suse.com/security/cve/CVE-2023-5868.html * https://www.suse.com/security/cve/CVE-2023-5869.html * https://www.suse.com/security/cve/CVE-2023-5870.html * https://bugzilla.suse.com/show_bug.cgi?id=1122892 * https://bugzilla.suse.com/show_bug.cgi?id=1179231 * https://bugzilla.suse.com/show_bug.cgi?id=1206796 * https://bugzilla.suse.com/show_bug.cgi?id=1209208 * https://bugzilla.suse.com/show_bug.cgi?id=1216022 * https://bugzilla.suse.com/show_bug.cgi?id=1216734 * https://bugzilla.suse.com/show_bug.cgi?id=1216960 * https://bugzilla.suse.com/show_bug.cgi?id=1216961 * https://bugzilla.suse.com/show_bug.cgi?id=1216962 * https://jira.suse.com/browse/PED-5586

1 0

SUSE-SU-2023:4483-1: moderate: Security update for frr
by maintenance＠opensuse.org 20 Nov '23

20 Nov '23

# Security update for frr Announcement ID: SUSE-SU-2023:4483-1 Rating: moderate References: * bsc#1216626 * bsc#1216627 Cross-References: * CVE-2023-46752 * CVE-2023-46753 CVSS scores: * CVE-2023-46752 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46752 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46753 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46753 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * Server Applications Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for frr fixes the following issues: * CVE-2023-46752: Fixed denial of service caused by mishandling malformed MP_REACH_NLRI data (bsc#1216627). * CVE-2023-46753: Fixed denial of service caused by crafted BGP UPDATE messages (bsc#1216626). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4483=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4483=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4483=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libfrr0-debuginfo-7.4-150300.4.20.1 * libfrr0-7.4-150300.4.20.1 * libmlag_pb0-7.4-150300.4.20.1 * libfrrgrpc_pb0-7.4-150300.4.20.1 * libfrrzmq0-debuginfo-7.4-150300.4.20.1 * libfrrsnmp0-debuginfo-7.4-150300.4.20.1 * frr-devel-7.4-150300.4.20.1 * libfrr_pb0-7.4-150300.4.20.1 * libfrrzmq0-7.4-150300.4.20.1 * frr-7.4-150300.4.20.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.20.1 * libfrrfpm_pb0-7.4-150300.4.20.1 * libfrrsnmp0-7.4-150300.4.20.1 * libfrrcares0-debuginfo-7.4-150300.4.20.1 * libfrrcares0-7.4-150300.4.20.1 * libmlag_pb0-debuginfo-7.4-150300.4.20.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.20.1 * libfrrospfapiclient0-7.4-150300.4.20.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.20.1 * frr-debuginfo-7.4-150300.4.20.1 * libfrr_pb0-debuginfo-7.4-150300.4.20.1 * frr-debugsource-7.4-150300.4.20.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libfrr0-debuginfo-7.4-150300.4.20.1 * libfrr0-7.4-150300.4.20.1 * libmlag_pb0-7.4-150300.4.20.1 * libfrrgrpc_pb0-7.4-150300.4.20.1 * libfrrzmq0-debuginfo-7.4-150300.4.20.1 * libfrrsnmp0-debuginfo-7.4-150300.4.20.1 * frr-devel-7.4-150300.4.20.1 * libfrr_pb0-7.4-150300.4.20.1 * libfrrzmq0-7.4-150300.4.20.1 * frr-7.4-150300.4.20.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.20.1 * libfrrfpm_pb0-7.4-150300.4.20.1 * libfrrsnmp0-7.4-150300.4.20.1 * libfrrcares0-debuginfo-7.4-150300.4.20.1 * libfrrcares0-7.4-150300.4.20.1 * libmlag_pb0-debuginfo-7.4-150300.4.20.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.20.1 * libfrrospfapiclient0-7.4-150300.4.20.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.20.1 * frr-debuginfo-7.4-150300.4.20.1 * libfrr_pb0-debuginfo-7.4-150300.4.20.1 * frr-debugsource-7.4-150300.4.20.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libfrr0-debuginfo-7.4-150300.4.20.1 * libfrr0-7.4-150300.4.20.1 * libmlag_pb0-7.4-150300.4.20.1 * libfrrgrpc_pb0-7.4-150300.4.20.1 * libfrrzmq0-debuginfo-7.4-150300.4.20.1 * libfrrsnmp0-debuginfo-7.4-150300.4.20.1 * frr-devel-7.4-150300.4.20.1 * libfrr_pb0-7.4-150300.4.20.1 * libfrrzmq0-7.4-150300.4.20.1 * frr-7.4-150300.4.20.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.20.1 * libfrrfpm_pb0-7.4-150300.4.20.1 * libfrrsnmp0-7.4-150300.4.20.1 * libfrrcares0-debuginfo-7.4-150300.4.20.1 * libfrrcares0-7.4-150300.4.20.1 * libmlag_pb0-debuginfo-7.4-150300.4.20.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.20.1 * libfrrospfapiclient0-7.4-150300.4.20.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.20.1 * frr-debuginfo-7.4-150300.4.20.1 * libfrr_pb0-debuginfo-7.4-150300.4.20.1 * frr-debugsource-7.4-150300.4.20.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46752.html * https://www.suse.com/security/cve/CVE-2023-46753.html * https://bugzilla.suse.com/show_bug.cgi?id=1216626 * https://bugzilla.suse.com/show_bug.cgi?id=1216627

1 0

SUSE-SU-2023:4490-1: moderate: Security update for python-Twisted
by maintenance＠opensuse.org 20 Nov '23

20 Nov '23

# Security update for python-Twisted Announcement ID: SUSE-SU-2023:4490-1 Rating: moderate References: * bsc#1216588 Cross-References: * CVE-2023-46137 CVSS scores: * CVE-2023-46137 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-46137 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 An update that solves one vulnerability can now be installed. ## Description: This update for python-Twisted fixes the following issues: * CVE-2023-46137: Fixed issue inside serializing pipelined HTTP requests. (bsc#1216588) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4490=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python-Twisted-debugsource-19.10.0-150200.3.21.1 * python-Twisted-debuginfo-19.10.0-150200.3.21.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46137.html * https://bugzilla.suse.com/show_bug.cgi?id=1216588

1 0

SUSE-SU-2023:4479-1: important: Security update for postgresql14
by maintenance＠opensuse.org 20 Nov '23

20 Nov '23

# Security update for postgresql14 Announcement ID: SUSE-SU-2023:4479-1 Rating: important References: * bsc#1216022 * bsc#1216734 * bsc#1216960 * bsc#1216961 * bsc#1216962 Cross-References: * CVE-2023-5868 * CVE-2023-5869 * CVE-2023-5870 CVSS scores: * CVE-2023-5868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-5869 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5870 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Legacy Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves three vulnerabilities and has two security fixes can now be installed. ## Description: This update for postgresql14 fixes the following issues: Security issues fixed: * CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT "any" aggregate functions. This error led to a text-type value being interpreted as an unknown-type value (that is, a zero-terminated string) at runtime. This could result in disclosure of server memory following the text value. (bsc#1216962) * CVE-2023-5869: Detect integer overflow while computing new array dimensions. When assigning new elements to array subscripts that are outside the current array bounds, an undetected integer overflow could occur in edge cases. Memory stomps that are potentially exploitable for arbitrary code execution are possible, and so is disclosure of server memory. (bsc#1216961) * CVE-2023-5870: Prevent the pg_signal_backend role from signalling background workers and autovacuum processes. The documentation says that pg_signal_backend cannot issue signals to superuser-owned processes. It was able to signal these background processes, though, because they advertise a role OID of zero. Treat that as indicating superuser ownership. The security implications of cancelling one of these process types are fairly small so far as the core code goes (we'll just start another one), but extensions might add background workers that are more vulnerable. Also ensure that the is_superuser parameter is set correctly in such processes. No specific security consequences are known for that oversight, but it might be significant for some extensions. (bsc#1216960) * update to 14.10: https://www.postgresql.org/docs/14/release-14-10.html * Overhaul postgresql-README.SUSE and move it from the binary package to the noarch wrapper package. * Change the unix domain socket location from /var/run to /run. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4479=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4479=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4479=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4479=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4479=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2023-4479=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4479=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4479=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4479=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4479=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4479=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4479=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4479=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4479=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4479=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * postgresql14-docs-14.10-150200.5.36.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * SUSE Enterprise Storage 7.1 (noarch) * postgresql14-docs-14.10-150200.5.36.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-llvmjit-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-test-14.10-150200.5.36.1 * postgresql14-llvmjit-devel-14.10-150200.5.36.1 * postgresql14-llvmjit-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * openSUSE Leap 15.4 (noarch) * postgresql14-docs-14.10-150200.5.36.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-llvmjit-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-test-14.10-150200.5.36.1 * postgresql14-llvmjit-devel-14.10-150200.5.36.1 * postgresql14-llvmjit-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * openSUSE Leap 15.5 (noarch) * postgresql14-docs-14.10-150200.5.36.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * postgresql14-llvmjit-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-llvmjit-devel-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-llvmjit-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * Legacy Module 15-SP5 (noarch) * postgresql14-docs-14.10-150200.5.36.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * postgresql14-llvmjit-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-llvmjit-devel-14.10-150200.5.36.1 * postgresql14-llvmjit-debuginfo-14.10-150200.5.36.1 * postgresql14-test-14.10-150200.5.36.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * postgresql14-llvmjit-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-llvmjit-debuginfo-14.10-150200.5.36.1 * postgresql14-test-14.10-150200.5.36.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * Server Applications Module 15-SP4 (noarch) * postgresql14-docs-14.10-150200.5.36.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * postgresql14-docs-14.10-150200.5.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * postgresql14-docs-14.10-150200.5.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * postgresql14-docs-14.10-150200.5.36.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * postgresql14-docs-14.10-150200.5.36.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * postgresql14-docs-14.10-150200.5.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * postgresql14-server-debuginfo-14.10-150200.5.36.1 * postgresql14-plpython-14.10-150200.5.36.1 * postgresql14-pltcl-debuginfo-14.10-150200.5.36.1 * postgresql14-debuginfo-14.10-150200.5.36.1 * postgresql14-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-plperl-14.10-150200.5.36.1 * postgresql14-debugsource-14.10-150200.5.36.1 * postgresql14-devel-14.10-150200.5.36.1 * postgresql14-pltcl-14.10-150200.5.36.1 * postgresql14-plpython-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-debuginfo-14.10-150200.5.36.1 * postgresql14-14.10-150200.5.36.1 * postgresql14-server-devel-14.10-150200.5.36.1 * postgresql14-plperl-debuginfo-14.10-150200.5.36.1 * postgresql14-server-devel-debuginfo-14.10-150200.5.36.1 * postgresql14-contrib-14.10-150200.5.36.1 * postgresql14-server-14.10-150200.5.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * postgresql14-docs-14.10-150200.5.36.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5868.html * https://www.suse.com/security/cve/CVE-2023-5869.html * https://www.suse.com/security/cve/CVE-2023-5870.html * https://bugzilla.suse.com/show_bug.cgi?id=1216022 * https://bugzilla.suse.com/show_bug.cgi?id=1216734 * https://bugzilla.suse.com/show_bug.cgi?id=1216960 * https://bugzilla.suse.com/show_bug.cgi?id=1216961 * https://bugzilla.suse.com/show_bug.cgi?id=1216962

1 0

SUSE-RU-2023:4481-1: moderate: Recommended update for qmlpluginexports
by maintenance＠opensuse.org 20 Nov '23

20 Nov '23

# Recommended update for qmlpluginexports Announcement ID: SUSE-RU-2023:4481-1 Rating: moderate References: * bsc#1215798 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for qmlpluginexports ships the qmlpluginexports-qt5 plugin to the Development Tools Module. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4481=1 openSUSE-SLE-15.5-2023-4481=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4481=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * qmlpluginexports-qt5-debuginfo-1.0-150500.8.2.1 * qmlpluginexports-qt5-1.0-150500.8.2.1 * qmlpluginexports-qt6-1.0-150500.8.2.1 * qmlpluginexports-qt6-debuginfo-1.0-150500.8.2.1 * qmlpluginexports-qt6-debugsource-1.0-150500.8.2.1 * qmlpluginexports-qt5-debugsource-1.0-150500.8.2.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * qmlpluginexports-qt5-1.0-150500.8.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215798

1 0

openSUSE-SU-2023:0374-1: moderate: Security update for yt-dlp
by opensuse-security＠opensuse.org 18 Nov '23

18 Nov '23

openSUSE Security Update: Security update for yt-dlp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0374-1 Rating: moderate References: #1213124 #1216467 Cross-References: CVE-2023-35934 CVE-2023-46121 CVSS scores: CVE-2023-35934 (NVD) : 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for yt-dlp fixes the following issues: - Update to release 2023.11.14 * Security: [CVE-2023-46121] Patch Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection * Disallow smuggling of arbitrary http_headers; extractors now only use specific headers - Make yt-dlp require the one pythonXX-yt-dlp that /usr/bin/yt-dlp was built with. - Rework Python build procedure [boo#1216467] - Enable Python library [boo#1216467] - Update to release 2023.10.13 * youtube: fix some bug with --extractor-retries inf - Update to release 2023.10.07 * yt: Fix heatmap extraction * yt: Raise a warning for Incomplete Data instead of an error - Update to release 2023.09.24 * Extract subtitles from SMIL manifests * fb: Add dash manifest URL * crunchyroll: Remove initial state extraction * youtube: Add player_params extractor arg - remove suggests on brotlicffi - this is only for != cpython - Update to release 2023.07.06 * Prevent Cookie leaks on HTTP redirect [boo#1213124] [CVE-2023-35934] * yt: Avoid false DRM detection * yt: Process post_live over 2 hours * yt: Support shorts-only playlists - Update to release 2023.06.22 * youtube: add IOS to default clients used - Update to release 2023.06.21 * Add option --compat-option playlist-match-filter * Add options --no-quiet, option --color, --netrc-cmd, --xff * Auto-select default format in -f- * Improve HTTP redirect handling * Support decoding multiple content encodings - Use python3.11 on Leap 15.5 * python3.11 is the only python3 > 3.6 version would be shipped in Leap 15.5 - Update to release 2023.03.04 * A bunch of extractor fixes - Update to release 2023.03.03 * youtube: Construct dash formats with range query * yt: Detect and break on looping comments * yt: Extract channel view_count when /about tab is passed - Update to release 2023.02.17 * Merge youtube-dl: Upto commit/2dd6c6e (Feb 17 2023) * Fix --concat-playlist * Imply --no-progress when --print * Improve default subtitle language selection * Make title completely non-fatal * Sanitize formats before sorting * [hls] Allow extractors to provide AES key * [extractor/generic] Avoid catastrophic backtracking in KVS regex * [jsinterp] Support if statements * [plugins] Fix zip search paths * [utils] Don't use Content-length with encoding * [utils] Fix time_seconds to use the provided TZ * [utils] Fix race condition in make_dir * [extractor/anchorfm] Add episode * [extractor/boxcast] Add extractor * [extractor/ebay] Add extractor * [extractor/hypergryph] Add extractor * [extractor/NZOnScreen] Add extractor * [extractor/rozhlas] Add extractor * [extractor/tempo] Add IVXPlayer extractor * [extractor/txxx] Add extractors * [extractor/vocaroo] Add extractor * [extractor/wrestleuniverse] Add extractors * [extractor/yappy] Add extractor * [extractor/youtube] Fix uploader_id extraction * [extractor/youtube] Add hyperpipe instances * [extractor/youtube] Handle consent.youtube * [extractor/youtube] Support /live/ URL * [extractor/youtube] Update invidious and piped instances * [extractor/91porn] Fix title and comment extraction * [extractor/AbemaTV] Cache user token whenever appropriate * [extractor/bfmtv] Support rmc prefix * [extractor/biliintl] Add intro and ending chapters * [extractor/clyp] Support wav * [extractor/crunchyroll] Add intro chapter * [extractor/crunchyroll] Better message for premium videos * [extractor/crunchyroll] Fix incorrect premium-only error * [extractor/DouyuTV] Use new API * [extractor/embedly] Embedded links may be for other extractors * [extractor/freesound] Workaround invalid URL in webpage * [extractor/GoPlay] Use new API * [extractor/Hidive] Fix subtitles and age-restriction * [extractor/huya] Support HD streams * [extractor/moviepilot] Fix extractor * [extractor/nbc] Fix NBC and NBCStations extractors * [extractor/nbc] Fix XML parsing * [extractor/nebula] Remove broken cookie support * [extractor/nfl] Add NFLPlus extractor * [extractor/niconico] Add support for like history * [extractor/nitter] Update instance list by OIRNOIR * [extractor/npo] Fix extractor and add HD support * [extractor/odkmedia] Add OnDemandChinaEpisodeIE * [extractor/pornez] Handle relative URLs in iframe * [extractor/radiko] Fix format sorting for Time Free * [extractor/rcs] Fix extractors * [extractor/reddit] Support user posts * [extractor/rumble] Fix format sorting * [extractor/servus] Rewrite extractor * [extractor/slideslive] Fix slides and chapters/duration * [extractor/SportDeutschland] Fix extractor * [extractor/Stripchat] Fix extractor * [extractor/tnaflix] Fix extractor * [extractor/tvp] Support stream.tvp.pl * [extractor/twitter] Fix --no-playlist and add media view_count when using GraphQL * [extractor/twitter] Fix graphql extraction on some tweets * [extractor/vimeo] Fix playerConfig extraction * [extractor/viu] Add ViuOTTIndonesiaIE extractor * [extractor/vk] Fix playlists for new API * [extractor/vlive] Replace with VLiveWebArchiveIE * [extractor/ximalaya] Update album _VALID_URL * [extractor/zdf] Use android API endpoint for UHD downloads * [youtube] Improve description extraction * [youtube] Prevent excess HTTP 301 * [bellmedia] Add support for cp24.com clip URLs Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-374=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python311-yt-dlp-2023.11.14-bp155.3.3.1 yt-dlp-2023.11.14-bp155.3.3.1 yt-dlp-bash-completion-2023.11.14-bp155.3.3.1 yt-dlp-fish-completion-2023.11.14-bp155.3.3.1 yt-dlp-zsh-completion-2023.11.14-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2023-35934.html https://www.suse.com/security/cve/CVE-2023-46121.html https://bugzilla.suse.com/1213124 https://bugzilla.suse.com/1216467

1 0

SUSE-RU-2023:4477-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 17 Nov '23

17 Nov '23

# Recommended update for grub2 Announcement ID: SUSE-RU-2023:4477-1 Rating: moderate References: * bsc#1216010 * bsc#1216075 * bsc#1216253 Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Server Applications Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Proxy 4.3 Module 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has three fixes can now be installed. ## Description: This update for grub2 fixes the following issues: * Fix failure to identify recent ext4 filesystem (bsc#1216010) * Fix reading files from btrfs with "implicit" holes * Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253) * Fix detection of encrypted disk's uuid in powerpc (bsc#1216075) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4477=1 SUSE-2023-4477=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4477=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4477=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4477=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4477=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4477=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4477=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4477=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4477=1 * SUSE Manager Proxy 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2023-4477=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * grub2-debuginfo-2.06-150400.11.41.1 * grub2-branding-upstream-2.06-150400.11.41.1 * grub2-2.06-150400.11.41.1 * openSUSE Leap 15.4 (aarch64 s390x x86_64 i586) * grub2-debugsource-2.06-150400.11.41.1 * openSUSE Leap 15.4 (noarch) * grub2-arm64-efi-extras-2.06-150400.11.41.1 * grub2-arm64-efi-2.06-150400.11.41.1 * grub2-powerpc-ieee1275-2.06-150400.11.41.1 * grub2-i386-xen-2.06-150400.11.41.1 * grub2-snapper-plugin-2.06-150400.11.41.1 * grub2-powerpc-ieee1275-extras-2.06-150400.11.41.1 * grub2-systemd-sleep-plugin-2.06-150400.11.41.1 * grub2-powerpc-ieee1275-debug-2.06-150400.11.41.1 * grub2-i386-efi-debug-2.06-150400.11.41.1 * grub2-x86_64-efi-debug-2.06-150400.11.41.1 * grub2-x86_64-xen-extras-2.06-150400.11.41.1 * grub2-x86_64-efi-2.06-150400.11.41.1 * grub2-i386-efi-2.06-150400.11.41.1 * grub2-x86_64-xen-2.06-150400.11.41.1 * grub2-arm64-efi-debug-2.06-150400.11.41.1 * grub2-i386-pc-extras-2.06-150400.11.41.1 * grub2-i386-efi-extras-2.06-150400.11.41.1 * grub2-i386-pc-2.06-150400.11.41.1 * grub2-i386-xen-extras-2.06-150400.11.41.1 * grub2-i386-pc-debug-2.06-150400.11.41.1 * grub2-s390x-emu-extras-2.06-150400.11.41.1 * grub2-x86_64-efi-extras-2.06-150400.11.41.1 * openSUSE Leap 15.4 (s390x) * grub2-s390x-emu-debug-2.06-150400.11.41.1 * grub2-s390x-emu-2.06-150400.11.41.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * grub2-debuginfo-2.06-150400.11.41.1 * grub2-debugsource-2.06-150400.11.41.1 * grub2-2.06-150400.11.41.1 * openSUSE Leap Micro 5.3 (noarch) * grub2-x86_64-efi-2.06-150400.11.41.1 * grub2-x86_64-xen-2.06-150400.11.41.1 * grub2-snapper-plugin-2.06-150400.11.41.1 * grub2-arm64-efi-2.06-150400.11.41.1 * grub2-i386-pc-2.06-150400.11.41.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * grub2-debuginfo-2.06-150400.11.41.1 * grub2-debugsource-2.06-150400.11.41.1 * grub2-2.06-150400.11.41.1 * openSUSE Leap Micro 5.4 (noarch) * grub2-x86_64-efi-2.06-150400.11.41.1 * grub2-x86_64-xen-2.06-150400.11.41.1 * grub2-snapper-plugin-2.06-150400.11.41.1 * grub2-arm64-efi-2.06-150400.11.41.1 * grub2-i386-pc-2.06-150400.11.41.1 * openSUSE Leap Micro 5.4 (s390x) * grub2-s390x-emu-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * grub2-debuginfo-2.06-150400.11.41.1 * grub2-debugsource-2.06-150400.11.41.1 * grub2-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * grub2-x86_64-efi-2.06-150400.11.41.1 * grub2-x86_64-xen-2.06-150400.11.41.1 * grub2-snapper-plugin-2.06-150400.11.41.1 * grub2-arm64-efi-2.06-150400.11.41.1 * grub2-i386-pc-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (s390x) * grub2-s390x-emu-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * grub2-debuginfo-2.06-150400.11.41.1 * grub2-debugsource-2.06-150400.11.41.1 * grub2-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * grub2-x86_64-efi-2.06-150400.11.41.1 * grub2-x86_64-xen-2.06-150400.11.41.1 * grub2-snapper-plugin-2.06-150400.11.41.1 * grub2-arm64-efi-2.06-150400.11.41.1 * grub2-i386-pc-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro 5.3 (s390x) * grub2-s390x-emu-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * grub2-debuginfo-2.06-150400.11.41.1 * grub2-debugsource-2.06-150400.11.41.1 * grub2-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * grub2-x86_64-efi-2.06-150400.11.41.1 * grub2-x86_64-xen-2.06-150400.11.41.1 * grub2-snapper-plugin-2.06-150400.11.41.1 * grub2-arm64-efi-2.06-150400.11.41.1 * grub2-i386-pc-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (s390x) * grub2-s390x-emu-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * grub2-debuginfo-2.06-150400.11.41.1 * grub2-debugsource-2.06-150400.11.41.1 * grub2-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * grub2-x86_64-efi-2.06-150400.11.41.1 * grub2-x86_64-xen-2.06-150400.11.41.1 * grub2-snapper-plugin-2.06-150400.11.41.1 * grub2-arm64-efi-2.06-150400.11.41.1 * grub2-i386-pc-2.06-150400.11.41.1 * SUSE Linux Enterprise Micro 5.4 (s390x) * grub2-s390x-emu-2.06-150400.11.41.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * grub2-debuginfo-2.06-150400.11.41.1 * grub2-2.06-150400.11.41.1 * Basesystem Module 15-SP4 (noarch) * grub2-x86_64-efi-2.06-150400.11.41.1 * grub2-snapper-plugin-2.06-150400.11.41.1 * grub2-systemd-sleep-plugin-2.06-150400.11.41.1 * grub2-arm64-efi-2.06-150400.11.41.1 * grub2-powerpc-ieee1275-2.06-150400.11.41.1 * grub2-i386-pc-2.06-150400.11.41.1 * Basesystem Module 15-SP4 (aarch64 s390x x86_64) * grub2-debugsource-2.06-150400.11.41.1 * Basesystem Module 15-SP4 (s390x) * grub2-s390x-emu-2.06-150400.11.41.1 * Server Applications Module 15-SP4 (noarch) * grub2-x86_64-xen-2.06-150400.11.41.1 * SUSE Manager Proxy 4.3 Module 4.3 (noarch) * grub2-arm64-efi-2.06-150400.11.41.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216010 * https://bugzilla.suse.com/show_bug.cgi?id=1216075 * https://bugzilla.suse.com/show_bug.cgi?id=1216253

1 0

SUSE-RU-2023:4478-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 17 Nov '23

17 Nov '23

# Recommended update for grub2 Announcement ID: SUSE-RU-2023:4478-1 Rating: moderate References: * bsc#1216010 * bsc#1216075 * bsc#1216253 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has three fixes can now be installed. ## Description: This update for grub2 fixes the following issues: * Fix failure to identify recent ext4 filesystem (bsc#1216010) * Fix reading files from btrfs with "implicit" holes * Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253) * Fix detection of encrypted disk's uuid in powerpc (bsc#1216075) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4478=1 openSUSE-SLE-15.5-2023-4478=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4478=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4478=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4478=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * grub2-branding-upstream-2.06-150500.29.11.1 * grub2-2.06-150500.29.11.1 * grub2-debuginfo-2.06-150500.29.11.1 * openSUSE Leap 15.5 (aarch64 s390x x86_64 i586) * grub2-debugsource-2.06-150500.29.11.1 * openSUSE Leap 15.5 (noarch) * grub2-i386-efi-2.06-150500.29.11.1 * grub2-x86_64-xen-2.06-150500.29.11.1 * grub2-i386-pc-2.06-150500.29.11.1 * grub2-arm64-efi-extras-2.06-150500.29.11.1 * grub2-powerpc-ieee1275-extras-2.06-150500.29.11.1 * grub2-x86_64-efi-extras-2.06-150500.29.11.1 * grub2-i386-efi-extras-2.06-150500.29.11.1 * grub2-i386-xen-2.06-150500.29.11.1 * grub2-snapper-plugin-2.06-150500.29.11.1 * grub2-i386-pc-extras-2.06-150500.29.11.1 * grub2-systemd-sleep-plugin-2.06-150500.29.11.1 * grub2-x86_64-xen-extras-2.06-150500.29.11.1 * grub2-powerpc-ieee1275-2.06-150500.29.11.1 * grub2-powerpc-ieee1275-debug-2.06-150500.29.11.1 * grub2-s390x-emu-extras-2.06-150500.29.11.1 * grub2-i386-efi-debug-2.06-150500.29.11.1 * grub2-x86_64-efi-debug-2.06-150500.29.11.1 * grub2-i386-pc-debug-2.06-150500.29.11.1 * grub2-arm64-efi-2.06-150500.29.11.1 * grub2-arm64-efi-debug-2.06-150500.29.11.1 * grub2-i386-xen-extras-2.06-150500.29.11.1 * grub2-x86_64-efi-2.06-150500.29.11.1 * openSUSE Leap 15.5 (s390x) * grub2-s390x-emu-debug-2.06-150500.29.11.1 * grub2-s390x-emu-2.06-150500.29.11.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * grub2-2.06-150500.29.11.1 * grub2-debuginfo-2.06-150500.29.11.1 * grub2-debugsource-2.06-150500.29.11.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * grub2-x86_64-xen-2.06-150500.29.11.1 * grub2-arm64-efi-2.06-150500.29.11.1 * grub2-snapper-plugin-2.06-150500.29.11.1 * grub2-i386-pc-2.06-150500.29.11.1 * grub2-x86_64-efi-2.06-150500.29.11.1 * SUSE Linux Enterprise Micro 5.5 (s390x) * grub2-s390x-emu-2.06-150500.29.11.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * grub2-2.06-150500.29.11.1 * grub2-debuginfo-2.06-150500.29.11.1 * Basesystem Module 15-SP5 (noarch) * grub2-powerpc-ieee1275-2.06-150500.29.11.1 * grub2-arm64-efi-2.06-150500.29.11.1 * grub2-x86_64-efi-2.06-150500.29.11.1 * grub2-snapper-plugin-2.06-150500.29.11.1 * grub2-i386-pc-2.06-150500.29.11.1 * grub2-systemd-sleep-plugin-2.06-150500.29.11.1 * Basesystem Module 15-SP5 (aarch64 s390x x86_64) * grub2-debugsource-2.06-150500.29.11.1 * Basesystem Module 15-SP5 (s390x) * grub2-s390x-emu-2.06-150500.29.11.1 * Server Applications Module 15-SP5 (noarch) * grub2-x86_64-xen-2.06-150500.29.11.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216010 * https://bugzilla.suse.com/show_bug.cgi?id=1216075 * https://bugzilla.suse.com/show_bug.cgi?id=1216253

1 0

SUSE-SU-2023:4473-1: moderate: Security update for frr
by maintenance＠opensuse.org 17 Nov '23

17 Nov '23

# Security update for frr Announcement ID: SUSE-SU-2023:4473-1 Rating: moderate References: * bsc#1216626 * bsc#1216627 Cross-References: * CVE-2023-46752 * CVE-2023-46753 CVSS scores: * CVE-2023-46752 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46752 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46753 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46753 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for frr fixes the following issues: * CVE-2023-46753: Fixed a crash caused from a crafted BGP UPDATE message. (bsc#1216626) * CVE-2023-46752: Fixed a crash caused from a mishandled malformed MP_REACH_NLRI data. (bsc#1216627) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4473=1 openSUSE-SLE-15.5-2023-4473=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4473=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libmlag_pb0-debuginfo-8.4-150500.4.11.1 * libfrrzmq0-8.4-150500.4.11.1 * libfrrfpm_pb0-8.4-150500.4.11.1 * frr-debuginfo-8.4-150500.4.11.1 * libfrrcares0-debuginfo-8.4-150500.4.11.1 * libfrrfpm_pb0-debuginfo-8.4-150500.4.11.1 * libfrrospfapiclient0-8.4-150500.4.11.1 * libfrrzmq0-debuginfo-8.4-150500.4.11.1 * libfrr_pb0-8.4-150500.4.11.1 * libmlag_pb0-8.4-150500.4.11.1 * frr-debugsource-8.4-150500.4.11.1 * frr-8.4-150500.4.11.1 * libfrr_pb0-debuginfo-8.4-150500.4.11.1 * libfrrsnmp0-8.4-150500.4.11.1 * libfrr0-debuginfo-8.4-150500.4.11.1 * libfrrospfapiclient0-debuginfo-8.4-150500.4.11.1 * libfrrcares0-8.4-150500.4.11.1 * libfrrsnmp0-debuginfo-8.4-150500.4.11.1 * frr-devel-8.4-150500.4.11.1 * libfrr0-8.4-150500.4.11.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libmlag_pb0-debuginfo-8.4-150500.4.11.1 * libfrrzmq0-8.4-150500.4.11.1 * libfrrfpm_pb0-8.4-150500.4.11.1 * frr-debuginfo-8.4-150500.4.11.1 * libfrrcares0-debuginfo-8.4-150500.4.11.1 * libfrrfpm_pb0-debuginfo-8.4-150500.4.11.1 * libfrrospfapiclient0-8.4-150500.4.11.1 * libfrrzmq0-debuginfo-8.4-150500.4.11.1 * libfrr_pb0-8.4-150500.4.11.1 * libmlag_pb0-8.4-150500.4.11.1 * frr-debugsource-8.4-150500.4.11.1 * frr-8.4-150500.4.11.1 * libfrr_pb0-debuginfo-8.4-150500.4.11.1 * libfrrsnmp0-8.4-150500.4.11.1 * libfrr0-debuginfo-8.4-150500.4.11.1 * libfrrospfapiclient0-debuginfo-8.4-150500.4.11.1 * libfrrcares0-8.4-150500.4.11.1 * libfrrsnmp0-debuginfo-8.4-150500.4.11.1 * frr-devel-8.4-150500.4.11.1 * libfrr0-8.4-150500.4.11.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46752.html * https://www.suse.com/security/cve/CVE-2023-46753.html * https://bugzilla.suse.com/show_bug.cgi?id=1216626 * https://bugzilla.suse.com/show_bug.cgi?id=1216627

1 0

SUSE-RU-2023:4474-1: important: Recommended update for webkit2gtk3
by maintenance＠opensuse.org 17 Nov '23

17 Nov '23

# Recommended update for webkit2gtk3 Announcement ID: SUSE-RU-2023:4474-1 Rating: important References: * bsc#1216778 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP4 * Desktop Applications Module 15-SP5 * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: * Rendering of e-mails in Evolution is blank when using the proprietary NVIDIA driver (bsc#1216778) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4474=1 SUSE-2023-4474=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4474=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4474=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4474=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4474=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4474=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4474=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4474=1 ## Package List: * openSUSE Leap 15.4 (noarch) * WebKitGTK-6.0-lang-2.42.1-150400.4.60.1 * WebKitGTK-4.1-lang-2.42.1-150400.4.60.1 * WebKitGTK-4.0-lang-2.42.1-150400.4.60.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * webkit2gtk4-devel-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-2.42.1-150400.4.60.1 * webkit-jsc-4-2.42.1-150400.4.60.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2WebExtension-4_0-2.42.1-150400.4.60.1 * webkit-jsc-4-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk3-soup2-devel-2.42.1-150400.4.60.1 * webkit2gtk3-minibrowser-2.42.1-150400.4.60.1 * webkit2gtk4-debugsource-2.42.1-150400.4.60.1 * webkit2gtk3-devel-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-2.42.1-150400.4.60.1 * webkit-jsc-6.0-2.42.1-150400.4.60.1 * webkit2gtk4-minibrowser-2.42.1-150400.4.60.1 * libwebkitgtk-6_0-4-2.42.1-150400.4.60.1 * libjavascriptcoregtk-6_0-1-2.42.1-150400.4.60.1 * webkit2gtk3-minibrowser-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-JavaScriptCore-4_0-2.42.1-150400.4.60.1 * webkit2gtk3-soup2-minibrowser-2.42.1-150400.4.60.1 * typelib-1_0-JavaScriptCore-4_1-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-2.42.1-150400.4.60.1 * webkit2gtk3-debugsource-2.42.1-150400.4.60.1 * webkit2gtk-4_0-injected-bundles-2.42.1-150400.4.60.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.42.1-150400.4.60.1 * webkit-jsc-6.0-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk4-minibrowser-debuginfo-2.42.1-150400.4.60.1 * webkit-jsc-4.1-2.42.1-150400.4.60.1 * webkit2gtk3-soup2-debugsource-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2-4_0-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2WebExtension-4_1-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2-4_1-2.42.1-150400.4.60.1 * libwebkitgtk-6_0-4-debuginfo-2.42.1-150400.4.60.1 * webkitgtk-6_0-injected-bundles-2.42.1-150400.4.60.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.42.1-150400.4.60.1 * typelib-1_0-JavaScriptCore-6_0-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk3-soup2-minibrowser-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-WebKit-6_0-2.42.1-150400.4.60.1 * webkit2gtk-4_1-injected-bundles-2.42.1-150400.4.60.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.42.1-150400.4.60.1 * webkit-jsc-4.1-debuginfo-2.42.1-150400.4.60.1 * openSUSE Leap 15.4 (x86_64) * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-32bit-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-32bit-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-32bit-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-32bit-2.42.1-150400.4.60.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-64bit-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-64bit-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-64bit-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-64bit-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.42.1-150400.4.60.1 * openSUSE Leap 15.5 (noarch) * WebKitGTK-6.0-lang-2.42.1-150400.4.60.1 * WebKitGTK-4.1-lang-2.42.1-150400.4.60.1 * WebKitGTK-4.0-lang-2.42.1-150400.4.60.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * webkit2gtk4-devel-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-2.42.1-150400.4.60.1 * webkit-jsc-4-2.42.1-150400.4.60.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2WebExtension-4_0-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-debuginfo-2.42.1-150400.4.60.1 * webkit-jsc-4-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk3-soup2-devel-2.42.1-150400.4.60.1 * webkit2gtk3-minibrowser-2.42.1-150400.4.60.1 * webkit2gtk4-debugsource-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-2.42.1-150400.4.60.1 * webkit-jsc-6.0-2.42.1-150400.4.60.1 * webkit2gtk3-devel-2.42.1-150400.4.60.1 * webkit2gtk4-minibrowser-2.42.1-150400.4.60.1 * libwebkitgtk-6_0-4-2.42.1-150400.4.60.1 * libjavascriptcoregtk-6_0-1-2.42.1-150400.4.60.1 * webkit2gtk3-minibrowser-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-JavaScriptCore-4_0-2.42.1-150400.4.60.1 * webkit2gtk3-soup2-minibrowser-2.42.1-150400.4.60.1 * typelib-1_0-JavaScriptCore-4_1-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-2.42.1-150400.4.60.1 * webkit2gtk3-debugsource-2.42.1-150400.4.60.1 * webkit2gtk-4_0-injected-bundles-2.42.1-150400.4.60.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.42.1-150400.4.60.1 * webkit-jsc-6.0-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk4-minibrowser-debuginfo-2.42.1-150400.4.60.1 * webkit-jsc-4.1-2.42.1-150400.4.60.1 * webkit2gtk3-soup2-debugsource-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2-4_0-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2WebExtension-4_1-2.42.1-150400.4.60.1 * libwebkitgtk-6_0-4-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2-4_1-2.42.1-150400.4.60.1 * webkitgtk-6_0-injected-bundles-2.42.1-150400.4.60.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.42.1-150400.4.60.1 * typelib-1_0-JavaScriptCore-6_0-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk3-soup2-minibrowser-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-WebKit-6_0-2.42.1-150400.4.60.1 * webkit2gtk-4_1-injected-bundles-2.42.1-150400.4.60.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.42.1-150400.4.60.1 * webkit-jsc-4.1-debuginfo-2.42.1-150400.4.60.1 * openSUSE Leap 15.5 (x86_64) * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-32bit-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-32bit-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-32bit-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-32bit-2.42.1-150400.4.60.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-64bit-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-64bit-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-64bit-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-64bit-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.42.1-150400.4.60.1 * Basesystem Module 15-SP4 (noarch) * WebKitGTK-4.0-lang-2.42.1-150400.4.60.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-soup2-debugsource-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-JavaScriptCore-4_0-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2-4_0-2.42.1-150400.4.60.1 * webkit2gtk3-soup2-devel-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-2.42.1-150400.4.60.1 * webkit2gtk-4_0-injected-bundles-2.42.1-150400.4.60.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2WebExtension-4_0-2.42.1-150400.4.60.1 * Basesystem Module 15-SP5 (noarch) * WebKitGTK-4.0-lang-2.42.1-150400.4.60.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-soup2-debugsource-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-JavaScriptCore-4_0-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2-4_0-2.42.1-150400.4.60.1 * webkit2gtk3-soup2-devel-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-2.42.1-150400.4.60.1 * webkit2gtk-4_0-injected-bundles-2.42.1-150400.4.60.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.42.1-150400.4.60.1 * libwebkit2gtk-4_0-37-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2WebExtension-4_0-2.42.1-150400.4.60.1 * Desktop Applications Module 15-SP4 (noarch) * WebKitGTK-4.1-lang-2.42.1-150400.4.60.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * typelib-1_0-WebKit2WebExtension-4_1-2.42.1-150400.4.60.1 * typelib-1_0-JavaScriptCore-4_1-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2-4_1-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-2.42.1-150400.4.60.1 * webkit2gtk3-debugsource-2.42.1-150400.4.60.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk3-devel-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk-4_1-injected-bundles-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-debuginfo-2.42.1-150400.4.60.1 * Desktop Applications Module 15-SP5 (noarch) * WebKitGTK-4.1-lang-2.42.1-150400.4.60.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * typelib-1_0-WebKit2WebExtension-4_1-2.42.1-150400.4.60.1 * typelib-1_0-JavaScriptCore-4_1-2.42.1-150400.4.60.1 * typelib-1_0-WebKit2-4_1-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-2.42.1-150400.4.60.1 * webkit2gtk3-debugsource-2.42.1-150400.4.60.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk3-devel-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-2.42.1-150400.4.60.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk-4_1-injected-bundles-2.42.1-150400.4.60.1 * libwebkit2gtk-4_1-0-debuginfo-2.42.1-150400.4.60.1 * Development Tools Module 15-SP4 (noarch) * WebKitGTK-6.0-lang-2.42.1-150400.4.60.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libwebkitgtk-6_0-4-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk4-debugsource-2.42.1-150400.4.60.1 * webkitgtk-6_0-injected-bundles-2.42.1-150400.4.60.1 * libwebkitgtk-6_0-4-2.42.1-150400.4.60.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.42.1-150400.4.60.1 * libjavascriptcoregtk-6_0-1-2.42.1-150400.4.60.1 * Development Tools Module 15-SP5 (noarch) * WebKitGTK-6.0-lang-2.42.1-150400.4.60.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libwebkitgtk-6_0-4-debuginfo-2.42.1-150400.4.60.1 * webkit2gtk4-debugsource-2.42.1-150400.4.60.1 * webkitgtk-6_0-injected-bundles-2.42.1-150400.4.60.1 * libwebkitgtk-6_0-4-2.42.1-150400.4.60.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.42.1-150400.4.60.1 * libjavascriptcoregtk-6_0-1-2.42.1-150400.4.60.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216778

1 0

SUSE-SU-2023:4475-1: important: Security update for xen
by maintenance＠opensuse.org 17 Nov '23

17 Nov '23

# Security update for xen Announcement ID: SUSE-SU-2023:4475-1 Rating: important References: * bsc#1027519 * bsc#1215145 * bsc#1215474 * bsc#1215746 * bsc#1215747 * bsc#1215748 * bsc#1216654 * bsc#1216807 Cross-References: * CVE-2023-20588 * CVE-2023-34322 * CVE-2023-34325 * CVE-2023-34326 * CVE-2023-34327 * CVE-2023-34328 * CVE-2023-46835 * CVE-2023-46836 CVSS scores: * CVE-2023-20588 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2023-20588 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-34322 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2023-34325 ( SUSE ): 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2023-34326 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-34327 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-34328 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46835 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves eight vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2023-20588: AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). * CVE-2023-34322: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). * CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443) (bsc#1215747). * CVE-2023-34326: x86/AMD: missing IOMMU TLB flushing (XSA-442) (bsc#1215746). * CVE-2023-34327,CVE-2023-34328: x86/AMD: Debug Mask handling (XSA-444) (bsc#1215748). * CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654). * CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807). * Upstream bug fixes (bsc#1027519) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4475=1 openSUSE-SLE-15.5-2023-4475=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4475=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4475=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4475=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64 i586) * xen-libs-debuginfo-4.17.2_08-150500.3.15.1 * xen-debugsource-4.17.2_08-150500.3.15.1 * xen-libs-4.17.2_08-150500.3.15.1 * xen-tools-domU-debuginfo-4.17.2_08-150500.3.15.1 * xen-tools-domU-4.17.2_08-150500.3.15.1 * xen-devel-4.17.2_08-150500.3.15.1 * openSUSE Leap 15.5 (x86_64) * xen-libs-32bit-debuginfo-4.17.2_08-150500.3.15.1 * xen-libs-32bit-4.17.2_08-150500.3.15.1 * openSUSE Leap 15.5 (aarch64 x86_64) * xen-doc-html-4.17.2_08-150500.3.15.1 * xen-tools-4.17.2_08-150500.3.15.1 * xen-4.17.2_08-150500.3.15.1 * xen-tools-debuginfo-4.17.2_08-150500.3.15.1 * openSUSE Leap 15.5 (noarch) * xen-tools-xendomains-wait-disk-4.17.2_08-150500.3.15.1 * openSUSE Leap 15.5 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.17.2_08-150500.3.15.1 * xen-libs-64bit-4.17.2_08-150500.3.15.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * xen-libs-4.17.2_08-150500.3.15.1 * xen-libs-debuginfo-4.17.2_08-150500.3.15.1 * xen-debugsource-4.17.2_08-150500.3.15.1 * Basesystem Module 15-SP5 (x86_64) * xen-libs-debuginfo-4.17.2_08-150500.3.15.1 * xen-debugsource-4.17.2_08-150500.3.15.1 * xen-libs-4.17.2_08-150500.3.15.1 * xen-tools-domU-debuginfo-4.17.2_08-150500.3.15.1 * xen-tools-domU-4.17.2_08-150500.3.15.1 * Server Applications Module 15-SP5 (x86_64) * xen-tools-4.17.2_08-150500.3.15.1 * xen-debugsource-4.17.2_08-150500.3.15.1 * xen-4.17.2_08-150500.3.15.1 * xen-tools-debuginfo-4.17.2_08-150500.3.15.1 * xen-devel-4.17.2_08-150500.3.15.1 * Server Applications Module 15-SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.2_08-150500.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2023-20588.html * https://www.suse.com/security/cve/CVE-2023-34322.html * https://www.suse.com/security/cve/CVE-2023-34325.html * https://www.suse.com/security/cve/CVE-2023-34326.html * https://www.suse.com/security/cve/CVE-2023-34327.html * https://www.suse.com/security/cve/CVE-2023-34328.html * https://www.suse.com/security/cve/CVE-2023-46835.html * https://www.suse.com/security/cve/CVE-2023-46836.html * https://bugzilla.suse.com/show_bug.cgi?id=1027519 * https://bugzilla.suse.com/show_bug.cgi?id=1215145 * https://bugzilla.suse.com/show_bug.cgi?id=1215474 * https://bugzilla.suse.com/show_bug.cgi?id=1215746 * https://bugzilla.suse.com/show_bug.cgi?id=1215747 * https://bugzilla.suse.com/show_bug.cgi?id=1215748 * https://bugzilla.suse.com/show_bug.cgi?id=1216654 * https://bugzilla.suse.com/show_bug.cgi?id=1216807

1 0

SUSE-SU-2023:4476-1: important: Security update for xen
by maintenance＠opensuse.org 17 Nov '23

17 Nov '23

# Security update for xen Announcement ID: SUSE-SU-2023:4476-1 Rating: important References: * bsc#1027519 * bsc#1215145 * bsc#1215474 * bsc#1215746 * bsc#1215747 * bsc#1215748 * bsc#1216654 * bsc#1216807 Cross-References: * CVE-2023-20588 * CVE-2023-34322 * CVE-2023-34325 * CVE-2023-34326 * CVE-2023-34327 * CVE-2023-34328 * CVE-2023-46835 * CVE-2023-46836 CVSS scores: * CVE-2023-20588 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2023-20588 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-34322 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2023-34325 ( SUSE ): 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2023-34326 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-34327 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-34328 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46835 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Server Applications Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves eight vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2023-20588: AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). * CVE-2023-34322: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). * CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443) (bsc#1215747). * CVE-2023-34326: x86/AMD: missing IOMMU TLB flushing (XSA-442) (bsc#1215746). * CVE-2023-34327,CVE-2023-34328: x86/AMD: Debug Mask handling (XSA-444) (bsc#1215748). * CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654). * CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807). * Upstream bug fixes (bsc#1027519) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4476=1 SUSE-2023-4476=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4476=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4476=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4476=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4476=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4476=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4476=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4476=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4476=1 ## Package List: * openSUSE Leap 15.4 (aarch64 x86_64) * xen-tools-4.16.5_08-150400.4.40.1 * xen-tools-debuginfo-4.16.5_08-150400.4.40.1 * xen-4.16.5_08-150400.4.40.1 * xen-doc-html-4.16.5_08-150400.4.40.1 * openSUSE Leap 15.4 (aarch64 x86_64 i586) * xen-tools-domU-4.16.5_08-150400.4.40.1 * xen-libs-4.16.5_08-150400.4.40.1 * xen-libs-debuginfo-4.16.5_08-150400.4.40.1 * xen-tools-domU-debuginfo-4.16.5_08-150400.4.40.1 * xen-debugsource-4.16.5_08-150400.4.40.1 * xen-devel-4.16.5_08-150400.4.40.1 * openSUSE Leap 15.4 (x86_64) * xen-libs-32bit-4.16.5_08-150400.4.40.1 * xen-libs-32bit-debuginfo-4.16.5_08-150400.4.40.1 * openSUSE Leap 15.4 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1 * openSUSE Leap 15.4 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.16.5_08-150400.4.40.1 * xen-libs-64bit-4.16.5_08-150400.4.40.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * xen-libs-4.16.5_08-150400.4.40.1 * xen-libs-debuginfo-4.16.5_08-150400.4.40.1 * xen-debugsource-4.16.5_08-150400.4.40.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * xen-libs-4.16.5_08-150400.4.40.1 * xen-libs-debuginfo-4.16.5_08-150400.4.40.1 * xen-debugsource-4.16.5_08-150400.4.40.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * xen-libs-4.16.5_08-150400.4.40.1 * xen-libs-debuginfo-4.16.5_08-150400.4.40.1 * xen-debugsource-4.16.5_08-150400.4.40.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * xen-libs-4.16.5_08-150400.4.40.1 * xen-libs-debuginfo-4.16.5_08-150400.4.40.1 * xen-debugsource-4.16.5_08-150400.4.40.1 * Basesystem Module 15-SP4 (x86_64) * xen-tools-domU-4.16.5_08-150400.4.40.1 * xen-libs-4.16.5_08-150400.4.40.1 * xen-libs-debuginfo-4.16.5_08-150400.4.40.1 * xen-tools-domU-debuginfo-4.16.5_08-150400.4.40.1 * xen-debugsource-4.16.5_08-150400.4.40.1 * Server Applications Module 15-SP4 (x86_64) * xen-tools-debuginfo-4.16.5_08-150400.4.40.1 * xen-4.16.5_08-150400.4.40.1 * xen-tools-4.16.5_08-150400.4.40.1 * xen-debugsource-4.16.5_08-150400.4.40.1 * xen-devel-4.16.5_08-150400.4.40.1 * Server Applications Module 15-SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1 * openSUSE Leap Micro 5.3 (x86_64) * xen-libs-4.16.5_08-150400.4.40.1 * xen-libs-debuginfo-4.16.5_08-150400.4.40.1 * xen-debugsource-4.16.5_08-150400.4.40.1 * openSUSE Leap Micro 5.4 (x86_64) * xen-libs-4.16.5_08-150400.4.40.1 * xen-libs-debuginfo-4.16.5_08-150400.4.40.1 * xen-debugsource-4.16.5_08-150400.4.40.1 ## References: * https://www.suse.com/security/cve/CVE-2023-20588.html * https://www.suse.com/security/cve/CVE-2023-34322.html * https://www.suse.com/security/cve/CVE-2023-34325.html * https://www.suse.com/security/cve/CVE-2023-34326.html * https://www.suse.com/security/cve/CVE-2023-34327.html * https://www.suse.com/security/cve/CVE-2023-34328.html * https://www.suse.com/security/cve/CVE-2023-46835.html * https://www.suse.com/security/cve/CVE-2023-46836.html * https://bugzilla.suse.com/show_bug.cgi?id=1027519 * https://bugzilla.suse.com/show_bug.cgi?id=1215145 * https://bugzilla.suse.com/show_bug.cgi?id=1215474 * https://bugzilla.suse.com/show_bug.cgi?id=1215746 * https://bugzilla.suse.com/show_bug.cgi?id=1215747 * https://bugzilla.suse.com/show_bug.cgi?id=1215748 * https://bugzilla.suse.com/show_bug.cgi?id=1216654 * https://bugzilla.suse.com/show_bug.cgi?id=1216807

1 0

SUSE-SU-2023:4463-1: moderate: Security update for libnbd
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for libnbd Announcement ID: SUSE-SU-2023:4463-1 Rating: moderate References: * bsc#1216769 Cross-References: * CVE-2023-5871 CVSS scores: * CVE-2023-5871 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 An update that solves one vulnerability can now be installed. ## Description: This update for libnbd fixes the following issues: * CVE-2023-5871: Fixed an assertion problem in ext-mode BLOCK_STATUS (bsc#1216769). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4463=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4463=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4463=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libnbd-devel-1.18.1-150300.8.18.1 * libnbd-debuginfo-1.18.1-150300.8.18.1 * libnbd-1.18.1-150300.8.18.1 * libnbd0-1.18.1-150300.8.18.1 * libnbd0-debuginfo-1.18.1-150300.8.18.1 * nbdfuse-debuginfo-1.18.1-150300.8.18.1 * libnbd-debugsource-1.18.1-150300.8.18.1 * nbdfuse-1.18.1-150300.8.18.1 * openSUSE Leap 15.4 (noarch) * libnbd-bash-completion-1.18.1-150300.8.18.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libnbd-devel-1.18.1-150300.8.18.1 * python3-libnbd-1.18.1-150300.8.18.1 * python3-libnbd-debuginfo-1.18.1-150300.8.18.1 * libnbd-debuginfo-1.18.1-150300.8.18.1 * libnbd-1.18.1-150300.8.18.1 * libnbd0-1.18.1-150300.8.18.1 * libnbd0-debuginfo-1.18.1-150300.8.18.1 * nbdfuse-debuginfo-1.18.1-150300.8.18.1 * libnbd-debugsource-1.18.1-150300.8.18.1 * nbdfuse-1.18.1-150300.8.18.1 * openSUSE Leap 15.5 (noarch) * libnbd-bash-completion-1.18.1-150300.8.18.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libnbd-devel-1.18.1-150300.8.18.1 * python3-libnbd-1.18.1-150300.8.18.1 * python3-libnbd-debuginfo-1.18.1-150300.8.18.1 * libnbd-debuginfo-1.18.1-150300.8.18.1 * libnbd-1.18.1-150300.8.18.1 * libnbd0-1.18.1-150300.8.18.1 * libnbd0-debuginfo-1.18.1-150300.8.18.1 * nbdfuse-debuginfo-1.18.1-150300.8.18.1 * libnbd-debugsource-1.18.1-150300.8.18.1 * nbdfuse-1.18.1-150300.8.18.1 * openSUSE Leap 15.3 (noarch) * libnbd-bash-completion-1.18.1-150300.8.18.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5871.html * https://bugzilla.suse.com/show_bug.cgi?id=1216769

1 0

SUSE-SU-2023:4464-1: moderate: Security update for libxml2
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for libxml2 Announcement ID: SUSE-SU-2023:4464-1 Rating: moderate References: * bsc#1216129 Cross-References: * CVE-2023-45322 CVSS scores: * CVE-2023-45322 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-45322 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 An update that solves one vulnerability can now be installed. ## Description: This update for libxml2 fixes the following issues: * CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4464=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4464=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4464=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4464=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4464=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python3-libxml2-python-2.9.7-150000.3.63.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.63.1 * python-libxml2-python-debugsource-2.9.7-150000.3.63.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-libxml2-python-2.9.7-150000.3.63.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.63.1 * python-libxml2-python-debugsource-2.9.7-150000.3.63.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libxml2-2-debuginfo-2.9.7-150000.3.63.1 * libxml2-tools-debuginfo-2.9.7-150000.3.63.1 * libxml2-2-2.9.7-150000.3.63.1 * libxml2-tools-2.9.7-150000.3.63.1 * libxml2-debugsource-2.9.7-150000.3.63.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * python3-libxml2-python-2.9.7-150000.3.63.1 * libxml2-2-debuginfo-2.9.7-150000.3.63.1 * libxml2-tools-debuginfo-2.9.7-150000.3.63.1 * libxml2-2-2.9.7-150000.3.63.1 * libxml2-tools-2.9.7-150000.3.63.1 * libxml2-debugsource-2.9.7-150000.3.63.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.63.1 * python-libxml2-python-debugsource-2.9.7-150000.3.63.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * python3-libxml2-python-2.9.7-150000.3.63.1 * libxml2-2-debuginfo-2.9.7-150000.3.63.1 * libxml2-tools-debuginfo-2.9.7-150000.3.63.1 * libxml2-2-2.9.7-150000.3.63.1 * libxml2-tools-2.9.7-150000.3.63.1 * libxml2-debugsource-2.9.7-150000.3.63.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.63.1 * python-libxml2-python-debugsource-2.9.7-150000.3.63.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45322.html * https://bugzilla.suse.com/show_bug.cgi?id=1216129

1 0

SUSE-SU-2023:4465-1: important: Security update for python-Pillow
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for python-Pillow Announcement ID: SUSE-SU-2023:4465-1 Rating: important References: * bsc#1216894 Cross-References: * CVE-2023-44271 CVSS scores: * CVE-2023-44271 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-44271 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 An update that solves one vulnerability can now be installed. ## Description: This update for python-Pillow fixes the following issues: * CVE-2023-44271: Fixed uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (bsc#1216894). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4465=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4465=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4465=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-Pillow-debuginfo-7.2.0-150300.3.3.1 * python3-Pillow-tk-debuginfo-7.2.0-150300.3.3.1 * python3-Pillow-tk-7.2.0-150300.3.3.1 * python3-Pillow-7.2.0-150300.3.3.1 * python-Pillow-debugsource-7.2.0-150300.3.3.1 * python3-Pillow-debuginfo-7.2.0-150300.3.3.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python-Pillow-debuginfo-7.2.0-150300.3.3.1 * python3-Pillow-tk-debuginfo-7.2.0-150300.3.3.1 * python3-Pillow-tk-7.2.0-150300.3.3.1 * python3-Pillow-7.2.0-150300.3.3.1 * python-Pillow-debugsource-7.2.0-150300.3.3.1 * python3-Pillow-debuginfo-7.2.0-150300.3.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python-Pillow-debuginfo-7.2.0-150300.3.3.1 * python3-Pillow-tk-debuginfo-7.2.0-150300.3.3.1 * python3-Pillow-tk-7.2.0-150300.3.3.1 * python3-Pillow-7.2.0-150300.3.3.1 * python-Pillow-debugsource-7.2.0-150300.3.3.1 * python3-Pillow-debuginfo-7.2.0-150300.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-44271.html * https://bugzilla.suse.com/show_bug.cgi?id=1216894

1 0

SUSE-SU-2023:4466-1: important: Security update for xen
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for xen Announcement ID: SUSE-SU-2023:4466-1 Rating: important References: * bsc#1216654 * bsc#1216807 Cross-References: * CVE-2023-46835 * CVE-2023-46836 CVSS scores: * CVE-2023-46835 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654). * CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4466=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4466=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4466=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4466=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4466=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4466=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4466=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4466=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4466=1 ## Package List: * openSUSE Leap 15.3 (aarch64 x86_64 i586) * xen-debugsource-4.14.6_08-150300.3.60.1 * xen-tools-domU-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-4.14.6_08-150300.3.60.1 * xen-tools-domU-4.14.6_08-150300.3.60.1 * xen-devel-4.14.6_08-150300.3.60.1 * openSUSE Leap 15.3 (x86_64) * xen-libs-32bit-4.14.6_08-150300.3.60.1 * xen-libs-32bit-debuginfo-4.14.6_08-150300.3.60.1 * openSUSE Leap 15.3 (aarch64 x86_64) * xen-tools-debuginfo-4.14.6_08-150300.3.60.1 * xen-tools-4.14.6_08-150300.3.60.1 * xen-4.14.6_08-150300.3.60.1 * xen-doc-html-4.14.6_08-150300.3.60.1 * openSUSE Leap 15.3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_08-150300.3.60.1 * openSUSE Leap 15.3 (aarch64_ilp32) * xen-libs-64bit-4.14.6_08-150300.3.60.1 * xen-libs-64bit-debuginfo-4.14.6_08-150300.3.60.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * xen-4.14.6_08-150300.3.60.1 * xen-debugsource-4.14.6_08-150300.3.60.1 * xen-tools-debuginfo-4.14.6_08-150300.3.60.1 * xen-tools-domU-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-4.14.6_08-150300.3.60.1 * xen-tools-domU-4.14.6_08-150300.3.60.1 * xen-tools-4.14.6_08-150300.3.60.1 * xen-devel-4.14.6_08-150300.3.60.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_08-150300.3.60.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * xen-4.14.6_08-150300.3.60.1 * xen-debugsource-4.14.6_08-150300.3.60.1 * xen-tools-debuginfo-4.14.6_08-150300.3.60.1 * xen-tools-domU-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-4.14.6_08-150300.3.60.1 * xen-tools-domU-4.14.6_08-150300.3.60.1 * xen-tools-4.14.6_08-150300.3.60.1 * xen-devel-4.14.6_08-150300.3.60.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_08-150300.3.60.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * xen-4.14.6_08-150300.3.60.1 * xen-debugsource-4.14.6_08-150300.3.60.1 * xen-tools-debuginfo-4.14.6_08-150300.3.60.1 * xen-tools-domU-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-4.14.6_08-150300.3.60.1 * xen-tools-domU-4.14.6_08-150300.3.60.1 * xen-tools-4.14.6_08-150300.3.60.1 * xen-devel-4.14.6_08-150300.3.60.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_08-150300.3.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * xen-4.14.6_08-150300.3.60.1 * xen-debugsource-4.14.6_08-150300.3.60.1 * xen-tools-debuginfo-4.14.6_08-150300.3.60.1 * xen-tools-domU-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-4.14.6_08-150300.3.60.1 * xen-tools-domU-4.14.6_08-150300.3.60.1 * xen-tools-4.14.6_08-150300.3.60.1 * xen-devel-4.14.6_08-150300.3.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_08-150300.3.60.1 * SUSE Enterprise Storage 7.1 (x86_64) * xen-4.14.6_08-150300.3.60.1 * xen-debugsource-4.14.6_08-150300.3.60.1 * xen-tools-debuginfo-4.14.6_08-150300.3.60.1 * xen-tools-domU-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-debuginfo-4.14.6_08-150300.3.60.1 * xen-libs-4.14.6_08-150300.3.60.1 * xen-tools-domU-4.14.6_08-150300.3.60.1 * xen-tools-4.14.6_08-150300.3.60.1 * xen-devel-4.14.6_08-150300.3.60.1 * SUSE Enterprise Storage 7.1 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_08-150300.3.60.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * xen-libs-debuginfo-4.14.6_08-150300.3.60.1 * xen-debugsource-4.14.6_08-150300.3.60.1 * xen-libs-4.14.6_08-150300.3.60.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * xen-libs-debuginfo-4.14.6_08-150300.3.60.1 * xen-debugsource-4.14.6_08-150300.3.60.1 * xen-libs-4.14.6_08-150300.3.60.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * xen-libs-debuginfo-4.14.6_08-150300.3.60.1 * xen-debugsource-4.14.6_08-150300.3.60.1 * xen-libs-4.14.6_08-150300.3.60.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46835.html * https://www.suse.com/security/cve/CVE-2023-46836.html * https://bugzilla.suse.com/show_bug.cgi?id=1216654 * https://bugzilla.suse.com/show_bug.cgi?id=1216807

1 0

SUSE-SU-2023:4467-1: moderate: Security update for python-urllib3
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for python-urllib3 Announcement ID: SUSE-SU-2023:4467-1 Rating: moderate References: * bsc#1216377 Cross-References: * CVE-2023-45803 CVSS scores: * CVE-2023-45803 ( SUSE ): 4.2 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-45803 ( NVD ): 4.2 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2023-45803: Fix a request body leak that could occur when receiving a 303 HTTP response (bsc#1216377). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4467=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4467=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4467=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4467=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4467=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4467=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4467=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4467=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4467=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4467=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4467=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4467=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4467=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4467=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4467=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4467=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4467=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4467=1 ## Package List: * openSUSE Leap 15.3 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * openSUSE Leap Micro 5.3 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * openSUSE Leap Micro 5.4 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * openSUSE Leap 15.4 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * openSUSE Leap 15.5 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * Basesystem Module 15-SP4 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * Basesystem Module 15-SP5 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * SUSE Manager Proxy 4.2 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * SUSE Manager Retail Branch Server 4.2 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * SUSE Manager Server 4.2 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * python3-urllib3-1.25.10-150300.4.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45803.html * https://bugzilla.suse.com/show_bug.cgi?id=1216377

1 0

SUSE-SU-2023:4469-1: moderate: Security update for go1.21-openssl
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for go1.21-openssl Announcement ID: SUSE-SU-2023:4469-1 Rating: moderate References: * bsc#1212475 * bsc#1212667 * bsc#1212669 * bsc#1215084 * bsc#1215085 * bsc#1215086 * bsc#1215087 * bsc#1215090 * bsc#1215985 * bsc#1216109 * bsc#1216943 * bsc#1216944 * jsc#SLE-18320 Cross-References: * CVE-2023-39318 * CVE-2023-39319 * CVE-2023-39320 * CVE-2023-39321 * CVE-2023-39322 * CVE-2023-39323 * CVE-2023-39325 * CVE-2023-44487 * CVE-2023-45283 * CVE-2023-45284 CVSS scores: * CVE-2023-39318 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2023-39318 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2023-39319 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2023-39319 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2023-39320 ( SUSE ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2023-39320 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-39321 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-39321 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-39322 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-39322 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-39323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-39323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-39325 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-39325 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-44487 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-44487 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-45283 ( SUSE ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2023-45284 ( SUSE ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves 10 vulnerabilities, contains one feature and has two security fixes can now be installed. ## Description: This update for go1.21-openssl fixes the following issues: Update to version 1.21.4.1 cut from the go1.21-openssl-fips branch at the revision tagged go1.21.4-1-openssl-fips. * Update to go1.21.4 go1.21.4 (released 2023-11-07) includes security fixes to the path/filepath package, as well as bug fixes to the linker, the runtime, the compiler, and the go/types, net/http, and runtime/cgo packages. * security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths (bsc#1216943, bsc#1216944) * spec: update unification rules * cmd/compile: internal compiler error: expected struct value to have type struct * cmd/link: split text sections for arm 32-bit * runtime: MADV_COLLAPSE causes production performance issues on Linux * go/types, x/tools/go/ssa: panic: type param without replacement encountered * cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64 * net/http: http2 page fails on firefox/safari if pushing resources Initial package go1.21-openssl version 1.21.3.1 cut from the go1.21-openssl-fips branch at the revision tagged go1.21.3-1-openssl-fips. (jsc#SLE-18320) * Go upstream merged branch dev.boringcrypto in go1.19+. * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto. * In go1.x-openssl enable FIPS mode (or boring mode as the package is named) either via an environment variable GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode. * When the operating system is operating in FIPS mode, Go applications which import crypto/tls/fipsonly limit operations to the FIPS ciphersuite. * go1.x-openssl is delivered as two large patches to go1.x applying necessary modifications from the golang-fips/go GitHub project for the Go crypto library to use OpenSSL as the external cryptographic library in a FIPS compliant way. * go1.x-openssl modifies the crypto/* packages to use OpenSSL for cryptographic operations. * go1.x-openssl uses dlopen() to call into OpenSSL. * SUSE RPM packaging introduces a fourth version digit go1.x.y.z corresponding to the golang-fips/go patchset tagged revision. * Patchset improvements can be updated independently of upstream Go maintenance releases. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4469=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4469=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4469=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4469=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * go1.21-openssl-doc-1.21.4.1-150000.1.5.1 * go1.21-openssl-race-1.21.4.1-150000.1.5.1 * go1.21-openssl-1.21.4.1-150000.1.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.21-openssl-doc-1.21.4.1-150000.1.5.1 * go1.21-openssl-race-1.21.4.1-150000.1.5.1 * go1.21-openssl-1.21.4.1-150000.1.5.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * go1.21-openssl-doc-1.21.4.1-150000.1.5.1 * go1.21-openssl-race-1.21.4.1-150000.1.5.1 * go1.21-openssl-1.21.4.1-150000.1.5.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.21-openssl-doc-1.21.4.1-150000.1.5.1 * go1.21-openssl-race-1.21.4.1-150000.1.5.1 * go1.21-openssl-1.21.4.1-150000.1.5.1 ## References: * https://www.suse.com/security/cve/CVE-2023-39318.html * https://www.suse.com/security/cve/CVE-2023-39319.html * https://www.suse.com/security/cve/CVE-2023-39320.html * https://www.suse.com/security/cve/CVE-2023-39321.html * https://www.suse.com/security/cve/CVE-2023-39322.html * https://www.suse.com/security/cve/CVE-2023-39323.html * https://www.suse.com/security/cve/CVE-2023-39325.html * https://www.suse.com/security/cve/CVE-2023-44487.html * https://www.suse.com/security/cve/CVE-2023-45283.html * https://www.suse.com/security/cve/CVE-2023-45284.html * https://bugzilla.suse.com/show_bug.cgi?id=1212475 * https://bugzilla.suse.com/show_bug.cgi?id=1212667 * https://bugzilla.suse.com/show_bug.cgi?id=1212669 * https://bugzilla.suse.com/show_bug.cgi?id=1215084 * https://bugzilla.suse.com/show_bug.cgi?id=1215085 * https://bugzilla.suse.com/show_bug.cgi?id=1215086 * https://bugzilla.suse.com/show_bug.cgi?id=1215087 * https://bugzilla.suse.com/show_bug.cgi?id=1215090 * https://bugzilla.suse.com/show_bug.cgi?id=1215985 * https://bugzilla.suse.com/show_bug.cgi?id=1216109 * https://bugzilla.suse.com/show_bug.cgi?id=1216943 * https://bugzilla.suse.com/show_bug.cgi?id=1216944 * https://jira.suse.com/browse/SLE-18320

1 0

SUSE-SU-2023:4470-1: moderate: Security update for go1.20
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for go1.20 Announcement ID: SUSE-SU-2023:4470-1 Rating: moderate References: * bsc#1206346 * bsc#1216943 * bsc#1216944 Cross-References: * CVE-2023-45283 * CVE-2023-45284 CVSS scores: * CVE-2023-45283 ( SUSE ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2023-45284 ( SUSE ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for go1.20 fixes the following issues: go1.20.11 (released 2023-11-07) includes security fixes to the path/filepath package, as well as bug fixes to the linker and the net/http package. * security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths (bsc#1216943, bsc#1216944) * cmd/link: split text sections for arm 32-bit * net/http: http2 page fails on firefox/safari if pushing resources ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4470=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4470=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4470=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4470=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * go1.20-race-1.20.11-150000.1.32.1 * go1.20-debuginfo-1.20.11-150000.1.32.1 * go1.20-1.20.11-150000.1.32.1 * go1.20-doc-1.20.11-150000.1.32.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.20-race-1.20.11-150000.1.32.1 * go1.20-debuginfo-1.20.11-150000.1.32.1 * go1.20-1.20.11-150000.1.32.1 * go1.20-doc-1.20.11-150000.1.32.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * go1.20-doc-1.20.11-150000.1.32.1 * go1.20-1.20.11-150000.1.32.1 * Development Tools Module 15-SP4 (aarch64 x86_64) * go1.20-race-1.20.11-150000.1.32.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.20-race-1.20.11-150000.1.32.1 * go1.20-debuginfo-1.20.11-150000.1.32.1 * go1.20-1.20.11-150000.1.32.1 * go1.20-doc-1.20.11-150000.1.32.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45283.html * https://www.suse.com/security/cve/CVE-2023-45284.html * https://bugzilla.suse.com/show_bug.cgi?id=1206346 * https://bugzilla.suse.com/show_bug.cgi?id=1216943 * https://bugzilla.suse.com/show_bug.cgi?id=1216944

1 0

SUSE-SU-2023:4471-1: moderate: Security update for go1.21
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for go1.21 Announcement ID: SUSE-SU-2023:4471-1 Rating: moderate References: * bsc#1212475 * bsc#1216943 * bsc#1216944 Cross-References: * CVE-2023-45283 * CVE-2023-45284 CVSS scores: * CVE-2023-45283 ( SUSE ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2023-45284 ( SUSE ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for go1.21 fixes the following issues: go1.21.4 (released 2023-11-07) includes security fixes to the path/filepath package, as well as bug fixes to the linker, the runtime, the compiler, and the go/types, net/http, and runtime/cgo packages. * security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths (bsc#1216943, bsc#1216944) * spec: update unification rules * cmd/compile: internal compiler error: expected struct value to have type struct * cmd/link: split text sections for arm 32-bit * runtime: MADV_COLLAPSE causes production performance issues on Linux * go/types, x/tools/go/ssa: panic: type param without replacement encountered * cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64 * net/http: http2 page fails on firefox/safari if pushing resources ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4471=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4471=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4471=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4471=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * go1.21-1.21.4-150000.1.15.1 * go1.21-race-1.21.4-150000.1.15.1 * go1.21-doc-1.21.4-150000.1.15.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.21-1.21.4-150000.1.15.1 * go1.21-race-1.21.4-150000.1.15.1 * go1.21-doc-1.21.4-150000.1.15.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * go1.21-1.21.4-150000.1.15.1 * go1.21-doc-1.21.4-150000.1.15.1 * Development Tools Module 15-SP4 (aarch64 x86_64) * go1.21-race-1.21.4-150000.1.15.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.21-1.21.4-150000.1.15.1 * go1.21-race-1.21.4-150000.1.15.1 * go1.21-doc-1.21.4-150000.1.15.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45283.html * https://www.suse.com/security/cve/CVE-2023-45284.html * https://bugzilla.suse.com/show_bug.cgi?id=1212475 * https://bugzilla.suse.com/show_bug.cgi?id=1216943 * https://bugzilla.suse.com/show_bug.cgi?id=1216944

1 0

SUSE-SU-2023:4472-1: important: Security update for go1.20-openssl
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for go1.20-openssl Announcement ID: SUSE-SU-2023:4472-1 Rating: important References: * bsc#1206346 * bsc#1215985 * bsc#1216109 * bsc#1216943 * bsc#1216944 Cross-References: * CVE-2023-39323 * CVE-2023-39325 * CVE-2023-44487 * CVE-2023-45283 * CVE-2023-45284 CVSS scores: * CVE-2023-39323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-39323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-39325 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-39325 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-44487 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-44487 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-45283 ( SUSE ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2023-45284 ( SUSE ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves five vulnerabilities can now be installed. ## Description: This update for go1.20-openssl fixes the following issues: Update to version 1.20.11.1 cut from the go1.20-openssl-fips branch at the revision tagged go1.20.11-1-openssl-fips. * Update to go1.20.11 go1.20.11 (released 2023-11-07) includes security fixes to the path/filepath package, as well as bug fixes to the linker and the net/http package. * security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths (bsc#1216943, bsc#1216944) * cmd/link: split text sections for arm 32-bit * net/http: http2 page fails on firefox/safari if pushing resources Update to version 1.20.10.1 cut from the go1.20-openssl-fips branch at the revision tagged go1.20.10-1-openssl-fips. * Update to go1.20.10 go1.20.10 (released 2023-10-10) includes a security fix to the net/http package. * security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work (bsc#1216109) go1.20.9 (released 2023-10-05) includes one security fixes to the cmd/go package, as well as bug fixes to the go command and the linker. * security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build (bsc#1215985) * cmd/link: issues with Apple's new linker in Xcode 15 beta ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4472=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4472=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4472=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4472=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * go1.20-openssl-doc-1.20.11.1-150000.1.14.1 * go1.20-openssl-debuginfo-1.20.11.1-150000.1.14.1 * go1.20-openssl-1.20.11.1-150000.1.14.1 * go1.20-openssl-race-1.20.11.1-150000.1.14.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.20-openssl-doc-1.20.11.1-150000.1.14.1 * go1.20-openssl-debuginfo-1.20.11.1-150000.1.14.1 * go1.20-openssl-1.20.11.1-150000.1.14.1 * go1.20-openssl-race-1.20.11.1-150000.1.14.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * go1.20-openssl-doc-1.20.11.1-150000.1.14.1 * go1.20-openssl-debuginfo-1.20.11.1-150000.1.14.1 * go1.20-openssl-1.20.11.1-150000.1.14.1 * go1.20-openssl-race-1.20.11.1-150000.1.14.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.20-openssl-doc-1.20.11.1-150000.1.14.1 * go1.20-openssl-debuginfo-1.20.11.1-150000.1.14.1 * go1.20-openssl-1.20.11.1-150000.1.14.1 * go1.20-openssl-race-1.20.11.1-150000.1.14.1 ## References: * https://www.suse.com/security/cve/CVE-2023-39323.html * https://www.suse.com/security/cve/CVE-2023-39325.html * https://www.suse.com/security/cve/CVE-2023-44487.html * https://www.suse.com/security/cve/CVE-2023-45283.html * https://www.suse.com/security/cve/CVE-2023-45284.html * https://bugzilla.suse.com/show_bug.cgi?id=1206346 * https://bugzilla.suse.com/show_bug.cgi?id=1215985 * https://bugzilla.suse.com/show_bug.cgi?id=1216109 * https://bugzilla.suse.com/show_bug.cgi?id=1216943 * https://bugzilla.suse.com/show_bug.cgi?id=1216944

1 0

SUSE-SU-2023:4458-1: important: Security update for gcc13
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for gcc13 Announcement ID: SUSE-SU-2023:4458-1 Rating: important References: * bsc#1206480 * bsc#1206684 * bsc#1210557 * bsc#1211427 * bsc#1212101 * bsc#1213915 * bsc#1214052 * bsc#1214460 * bsc#1215427 * bsc#1216664 * jsc#PED-153 * jsc#PED-2005 * jsc#PED-252 * jsc#PED-253 * jsc#PED-6584 Cross-References: * CVE-2023-4039 CVSS scores: * CVE-2023-4039 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4039 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability, contains five features and has nine security fixes can now be installed. ## Description: This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP4 and SP5, and provided in the "Development Tools" module. The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories. To use gcc13 compilers use: * install "gcc13" or "gcc13-c++" or one of the other "gcc13-COMPILER" frontend packages. * override your Makefile to use CC=gcc-13, CXX=g++-13 and similar overrides for the other languages. For a full changelog with all new GCC13 features, check out https://gcc.gnu.org/gcc-13/changes.html Detailed changes: * CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable length stack allocations. (bsc#1214052) * Work around third party app crash during C++ standard library initialization. [bsc#1216664] * Fixed that GCC13 fails to compile some packages with error: unrecognizable insn (bsc#1215427) * Bump included newlib to version 4.3.0. * Update to GCC trunk head (r13-5254-g05b9868b182bb9) * Redo floatn fixinclude pick-up to simply keep what is there. * Turn cross compiler to s390x to a glibc cross. [bsc#1214460] * Also handle -static-pie in the default-PIE specs * Fixed missed optimization in Skia resulting in Firefox crashes when building with LTO. [bsc#1212101] * Make libstdc++6-devel packages own their directories since they can be installed standalone. [bsc#1211427] * Add new x86-related intrinsics (amxcomplexintrin.h). * RISC-V: Add support for inlining subword atomic operations * Use --enable-link-serialization rather that --enable-link-mutex, the benefit of the former one is that the linker jobs are not holding tokens of the make's jobserver. * Add cross-bpf packages. See https://gcc.gnu.org/wiki/BPFBackEnd for the general state of BPF with GCC. * Add bootstrap conditional to allow --without=bootstrap to be specified to speed up local builds for testing. * Bump included newlib to version 4.3.0. * Also package libhwasan_preinit.o on aarch64. * Configure external timezone database provided by the timezone package. Make libstdc++6 recommend timezone to get a fully working std::chrono. Install timezone when running the testsuite. * Package libhwasan_preinit.o on x86_64. * Fixed unwinding on aarch64 with pointer signing. [bsc#1206684] * Enable PRU flavour for gcc13 * update floatn fixinclude pickup to check each header separately (bsc#1206480) * Redo floatn fixinclude pick-up to simply keep what is there. * Bump libgo SONAME to libgo22. * Do not package libhwasan for biarch (32-bit architecture) as the extension depends on 64-bit pointers. * Adjust floatn fixincludes guard to work with SLE12 and earlier SLE15. * Depend on at least LLVM 13 for GCN cross compiler. * Update embedded newlib to version 4.2.0 * Allow cross-pru-gcc12-bootstrap for armv7l architecture. PRU architecture is used for real-time MCUs embedded into TI armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for armv7l in order to build both host applications and PRU firmware during the same build. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4458=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4458=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4458=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4458=1 * SUSE Linux Enterprise Server 15 SP1 zypper in -t patch SUSE-SLE-INSTALLER-15-SP1-2023-4458=1 * SUSE Linux Enterprise Server 15 SP2 zypper in -t patch SUSE-SLE-INSTALLER-15-SP2-2023-4458=1 * SUSE Linux Enterprise Server 15 SP3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP3-2023-4458=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4458=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4458=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4458=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4458=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4458=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4458=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4458=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4458=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4458=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4458=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4458=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4458=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4458=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4458=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4458=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4458=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4458=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4458=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4458=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4458=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4458=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4458=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4458=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4458=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4458=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4458=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4458=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4458=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4458=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4458=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4458=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4458=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4458=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4458=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4458=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4458=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 ppc64le s390x x86_64) * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * openSUSE Leap Micro 5.4 (aarch64 ppc64le s390x x86_64) * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * liblsan0-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * libada13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * libgo22-13.2.1+git7813-150000.1.6.1 * libm2cor18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * libgo22-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2iso18-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * gcc13-go-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * gcc13-ada-13.2.1+git7813-150000.1.6.1 * gcc13-ada-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libm2log18-debuginfo-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * gcc13-m2-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2iso18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * gcc13-objc-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libm2log18-13.2.1+git7813-150000.1.6.1 * libm2min18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-objc-13.2.1+git7813-150000.1.6.1 * libm2pim18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-go-13.2.1+git7813-150000.1.6.1 * libm2cor18-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-m2-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * libm2min18-13.2.1+git7813-150000.1.6.1 * libm2pim18-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.4 (x86_64) * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.4 (s390x x86_64) * libm2cor18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2pim18-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libgphobos4-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-go-32bit-13.2.1+git7813-150000.1.6.1 * libm2log18-32bit-13.2.1+git7813-150000.1.6.1 * libm2pim18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2cor18-32bit-13.2.1+git7813-150000.1.6.1 * libm2min18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgdruntime4-32bit-13.2.1+git7813-150000.1.6.1 * libgphobos4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-objc-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-m2-32bit-13.2.1+git7813-150000.1.6.1 * libgo22-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgdruntime4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2iso18-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-d-32bit-13.2.1+git7813-150000.1.6.1 * libgo22-32bit-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * libm2iso18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2min18-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-ada-32bit-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * libm2log18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.4 (aarch64 s390x x86_64) * libgdruntime4-13.2.1+git7813-150000.1.6.1 * gcc13-d-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-d-13.2.1+git7813-150000.1.6.1 * libgphobos4-debuginfo-13.2.1+git7813-150000.1.6.1 * libgphobos4-13.2.1+git7813-150000.1.6.1 * libgdruntime4-debuginfo-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.4 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.4 (aarch64 x86_64) * libhwasan0-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.4 (ppc64le x86_64) * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * liblsan0-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * libada13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * libgo22-13.2.1+git7813-150000.1.6.1 * libm2cor18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * libgo22-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2iso18-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * gcc13-go-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * gcc13-ada-13.2.1+git7813-150000.1.6.1 * gcc13-ada-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libm2log18-debuginfo-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * gcc13-m2-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2iso18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * gcc13-objc-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libm2log18-13.2.1+git7813-150000.1.6.1 * libm2min18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-objc-13.2.1+git7813-150000.1.6.1 * libm2pim18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-go-13.2.1+git7813-150000.1.6.1 * libm2cor18-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-m2-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * libm2min18-13.2.1+git7813-150000.1.6.1 * libm2pim18-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.5 (x86_64) * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.5 (s390x x86_64) * libm2cor18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2pim18-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libgphobos4-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-go-32bit-13.2.1+git7813-150000.1.6.1 * libm2log18-32bit-13.2.1+git7813-150000.1.6.1 * libm2pim18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2cor18-32bit-13.2.1+git7813-150000.1.6.1 * libm2min18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgdruntime4-32bit-13.2.1+git7813-150000.1.6.1 * libgphobos4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-objc-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-m2-32bit-13.2.1+git7813-150000.1.6.1 * libgo22-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgdruntime4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2iso18-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-d-32bit-13.2.1+git7813-150000.1.6.1 * libgo22-32bit-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * libm2iso18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2min18-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-ada-32bit-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * libm2log18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.5 (aarch64 s390x x86_64) * libgdruntime4-13.2.1+git7813-150000.1.6.1 * gcc13-d-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-d-13.2.1+git7813-150000.1.6.1 * libgphobos4-debuginfo-13.2.1+git7813-150000.1.6.1 * libgphobos4-13.2.1+git7813-150000.1.6.1 * libgdruntime4-debuginfo-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.5 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.5 (aarch64 x86_64) * libhwasan0-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * openSUSE Leap 15.5 (ppc64le x86_64) * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP1 (aarch64 ppc64le s390x x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 (aarch64 ppc64le s390x x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 (aarch64 ppc64le s390x x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Manager Proxy 4.3 (x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libstdc++6-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * Basesystem Module 15-SP4 (aarch64 x86_64) * libhwasan0-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * Basesystem Module 15-SP4 (ppc64le x86_64) * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-13.2.1+git7813-150000.1.6.1 * Basesystem Module 15-SP4 (x86_64) * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * libhwasan0-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * Basesystem Module 15-SP5 (ppc64le x86_64) * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-13.2.1+git7813-150000.1.6.1 * Basesystem Module 15-SP5 (x86_64) * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * Development Tools Module 15-SP4 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * Development Tools Module 15-SP4 (x86_64) * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * Development Tools Module 15-SP5 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * Development Tools Module 15-SP5 (x86_64) * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * libada13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * libgo22-13.2.1+git7813-150000.1.6.1 * libm2cor18-debuginfo-13.2.1+git7813-150000.1.6.1 * libgo22-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-13.2.1+git7813-150000.1.6.1 * libm2iso18-13.2.1+git7813-150000.1.6.1 * gcc13-go-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-ada-13.2.1+git7813-150000.1.6.1 * gcc13-ada-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2log18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-m2-13.2.1+git7813-150000.1.6.1 * libm2iso18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-13.2.1+git7813-150000.1.6.1 * libm2log18-13.2.1+git7813-150000.1.6.1 * gcc13-objc-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2min18-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2pim18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-objc-13.2.1+git7813-150000.1.6.1 * gcc13-go-13.2.1+git7813-150000.1.6.1 * libm2cor18-13.2.1+git7813-150000.1.6.1 * gcc13-m2-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2min18-13.2.1+git7813-150000.1.6.1 * libm2pim18-13.2.1+git7813-150000.1.6.1 * SUSE Package Hub 15 15-SP4 (aarch64 s390x x86_64) * libgdruntime4-13.2.1+git7813-150000.1.6.1 * gcc13-d-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-d-13.2.1+git7813-150000.1.6.1 * libgphobos4-debuginfo-13.2.1+git7813-150000.1.6.1 * libgphobos4-13.2.1+git7813-150000.1.6.1 * libgdruntime4-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Package Hub 15 15-SP4 (x86_64) * libm2cor18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2pim18-32bit-13.2.1+git7813-150000.1.6.1 * libgphobos4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-go-32bit-13.2.1+git7813-150000.1.6.1 * libm2log18-32bit-13.2.1+git7813-150000.1.6.1 * libm2pim18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2cor18-32bit-13.2.1+git7813-150000.1.6.1 * libm2min18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgdruntime4-32bit-13.2.1+git7813-150000.1.6.1 * libgphobos4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-objc-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-m2-32bit-13.2.1+git7813-150000.1.6.1 * libgo22-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgdruntime4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2iso18-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-d-32bit-13.2.1+git7813-150000.1.6.1 * libgo22-32bit-13.2.1+git7813-150000.1.6.1 * libm2iso18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-32bit-13.2.1+git7813-150000.1.6.1 * libm2min18-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-ada-32bit-13.2.1+git7813-150000.1.6.1 * libm2log18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-32bit-13.2.1+git7813-150000.1.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libada13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * libgo22-13.2.1+git7813-150000.1.6.1 * libm2cor18-debuginfo-13.2.1+git7813-150000.1.6.1 * libgo22-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-13.2.1+git7813-150000.1.6.1 * libm2iso18-13.2.1+git7813-150000.1.6.1 * gcc13-go-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-ada-13.2.1+git7813-150000.1.6.1 * gcc13-ada-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2log18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-m2-13.2.1+git7813-150000.1.6.1 * libm2iso18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-13.2.1+git7813-150000.1.6.1 * libm2log18-13.2.1+git7813-150000.1.6.1 * gcc13-objc-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2min18-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2pim18-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-objc-13.2.1+git7813-150000.1.6.1 * gcc13-go-13.2.1+git7813-150000.1.6.1 * libm2cor18-13.2.1+git7813-150000.1.6.1 * gcc13-m2-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2min18-13.2.1+git7813-150000.1.6.1 * libm2pim18-13.2.1+git7813-150000.1.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 s390x x86_64) * libgdruntime4-13.2.1+git7813-150000.1.6.1 * gcc13-d-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-d-13.2.1+git7813-150000.1.6.1 * libgphobos4-debuginfo-13.2.1+git7813-150000.1.6.1 * libgphobos4-13.2.1+git7813-150000.1.6.1 * libgdruntime4-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Package Hub 15 15-SP5 (x86_64) * libm2cor18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2pim18-32bit-13.2.1+git7813-150000.1.6.1 * libgphobos4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-go-32bit-13.2.1+git7813-150000.1.6.1 * libm2log18-32bit-13.2.1+git7813-150000.1.6.1 * libm2pim18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2cor18-32bit-13.2.1+git7813-150000.1.6.1 * libm2min18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgdruntime4-32bit-13.2.1+git7813-150000.1.6.1 * libgphobos4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-objc-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-m2-32bit-13.2.1+git7813-150000.1.6.1 * libgo22-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgdruntime4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libm2iso18-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-d-32bit-13.2.1+git7813-150000.1.6.1 * libgo22-32bit-13.2.1+git7813-150000.1.6.1 * libm2iso18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libada13-32bit-13.2.1+git7813-150000.1.6.1 * libm2min18-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-ada-32bit-13.2.1+git7813-150000.1.6.1 * libm2log18-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-obj-c++-32bit-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libquadmath0-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libquadmath0-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libquadmath0-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libquadmath0-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * libhwasan0-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (ppc64le x86_64) * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (s390x x86_64) * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libhwasan0-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (ppc64le x86_64) * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (s390x x86_64) * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 x86_64) * libhwasan0-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (ppc64le x86_64) * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (s390x x86_64) * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * libquadmath0-13.2.1+git7813-150000.1.6.1 * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libquadmath0-13.2.1+git7813-150000.1.6.1 * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libquadmath0-13.2.1+git7813-150000.1.6.1 * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * liblsan0-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * SUSE Enterprise Storage 7.1 (x86_64) * libquadmath0-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE Enterprise Storage 7.1 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE CaaS Platform 4.0 (x86_64) * libquadmath0-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-13.2.1+git7813-150000.1.6.1 * liblsan0-13.2.1+git7813-150000.1.6.1 * cpp13-13.2.1+git7813-150000.1.6.1 * liblsan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-13.2.1+git7813-150000.1.6.1 * libobjc4-13.2.1+git7813-150000.1.6.1 * gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-13.2.1+git7813-150000.1.6.1 * libatomic1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-debuginfo-13.2.1+git7813-150000.1.6.1 * libatomic1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-locale-13.2.1+git7813-150000.1.6.1 * libubsan1-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libobjc4-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * cross-nvptx-gcc13-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-c++-13.2.1+git7813-150000.1.6.1 * libobjc4-32bit-13.2.1+git7813-150000.1.6.1 * libgomp1-13.2.1+git7813-150000.1.6.1 * libasan8-13.2.1+git7813-150000.1.6.1 * libasan8-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-c++-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-32bit-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * libgfortran5-debuginfo-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-debuginfo-13.2.1+git7813-150000.1.6.1 * cpp13-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-debuginfo-13.2.1+git7813-150000.1.6.1 * libhwasan0-13.2.1+git7813-150000.1.6.1 * libubsan1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgomp1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-devel-gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-debugsource-13.2.1+git7813-150000.1.6.1 * libubsan1-13.2.1+git7813-150000.1.6.1 * libgcc_s1-32bit-13.2.1+git7813-150000.1.6.1 * cross-nvptx-newlib13-devel-13.2.1+git7813-150000.1.6.1 * libstdc++6-pp-32bit-13.2.1+git7813-150000.1.6.1 * libstdc++6-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-13.2.1+git7813-150000.1.6.1 * libitm1-13.2.1+git7813-150000.1.6.1 * libitm1-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libgfortran5-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-13.2.1+git7813-150000.1.6.1 * gcc13-32bit-13.2.1+git7813-150000.1.6.1 * gcc13-PIE-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libtsan2-13.2.1+git7813-150000.1.6.1 * gcc13-locale-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-13.2.1+git7813-150000.1.6.1 * libquadmath0-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * gcc13-fortran-13.2.1+git7813-150000.1.6.1 * libasan8-32bit-debuginfo-13.2.1+git7813-150000.1.6.1 * SUSE CaaS Platform 4.0 (noarch) * gcc13-info-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libgcc_s1-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-debuginfo-13.2.1+git7813-150000.1.6.1 * libstdc++6-13.2.1+git7813-150000.1.6.1 * libgcc_s1-13.2.1+git7813-150000.1.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4039.html * https://bugzilla.suse.com/show_bug.cgi?id=1206480 * https://bugzilla.suse.com/show_bug.cgi?id=1206684 * https://bugzilla.suse.com/show_bug.cgi?id=1210557 * https://bugzilla.suse.com/show_bug.cgi?id=1211427 * https://bugzilla.suse.com/show_bug.cgi?id=1212101 * https://bugzilla.suse.com/show_bug.cgi?id=1213915 * https://bugzilla.suse.com/show_bug.cgi?id=1214052 * https://bugzilla.suse.com/show_bug.cgi?id=1214460 * https://bugzilla.suse.com/show_bug.cgi?id=1215427 * https://bugzilla.suse.com/show_bug.cgi?id=1216664 * https://jira.suse.com/browse/PED-153 * https://jira.suse.com/browse/PED-2005 * https://jira.suse.com/browse/PED-252 * https://jira.suse.com/browse/PED-253 * https://jira.suse.com/browse/PED-6584

1 0

SUSE-RU-2023:4459-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Recommended update for crmsh Announcement ID: SUSE-RU-2023:4459-1 Rating: moderate References: * bsc#1213797 * bsc#1215319 * bsc#1215438 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has three fixes can now be installed. ## Description: This update for crmsh fixes the following issues: * Update to version 4.5.0+20231010.65aa0a09 * report: Pick up tarball suffix dynamically (bsc#1215438) * report: Pick 'gzip' as the first compress prog for cross-platform compatibility(bsc#1215438) * constants: Add several resource meta attributes (bsc#1215319) * upgradeutil: reduce the timeout for getting sequence from remote node (bsc#1213797) * corosync: Enable logging.to_logfile ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4459=1 openSUSE-SLE-15.5-2023-4459=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2023-4459=1 ## Package List: * openSUSE Leap 15.5 (noarch) * crmsh-4.5.0+20231010.65aa0a09-150500.3.13.1 * crmsh-test-4.5.0+20231010.65aa0a09-150500.3.13.1 * crmsh-scripts-4.5.0+20231010.65aa0a09-150500.3.13.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (noarch) * crmsh-4.5.0+20231010.65aa0a09-150500.3.13.1 * crmsh-scripts-4.5.0+20231010.65aa0a09-150500.3.13.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213797 * https://bugzilla.suse.com/show_bug.cgi?id=1215319 * https://bugzilla.suse.com/show_bug.cgi?id=1215438

1 0

SUSE-RU-2023:4460-1: moderate: Recommended update for rsyslog
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Recommended update for rsyslog Announcement ID: SUSE-RU-2023:4460-1 Rating: moderate References: * bsc#1210286 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for rsyslog fixes the following issue: * fix rsyslog crash in imrelp (bsc#1210286) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4460=1 openSUSE-SLE-15.4-2023-4460=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4460=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4460=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4460=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4460=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4460=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * rsyslog-module-relp-8.2306.0-150400.5.21.1 * rsyslog-module-mysql-8.2306.0-150400.5.21.1 * rsyslog-module-gtls-8.2306.0-150400.5.21.1 * rsyslog-module-elasticsearch-8.2306.0-150400.5.21.1 * rsyslog-module-gcrypt-8.2306.0-150400.5.21.1 * rsyslog-8.2306.0-150400.5.21.1 * rsyslog-module-gssapi-8.2306.0-150400.5.21.1 * rsyslog-module-dbi-8.2306.0-150400.5.21.1 * rsyslog-debugsource-8.2306.0-150400.5.21.1 * rsyslog-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-ossl-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-snmp-8.2306.0-150400.5.21.1 * rsyslog-module-dbi-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-diag-tools-8.2306.0-150400.5.21.1 * rsyslog-module-gcrypt-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-omamqp1-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-udpspoof-8.2306.0-150400.5.21.1 * rsyslog-module-elasticsearch-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-kafka-8.2306.0-150400.5.21.1 * rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-omtcl-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-mmnormalize-8.2306.0-150400.5.21.1 * rsyslog-module-ossl-8.2306.0-150400.5.21.1 * rsyslog-module-kafka-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-diag-tools-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-omhttpfs-8.2306.0-150400.5.21.1 * rsyslog-module-omtcl-8.2306.0-150400.5.21.1 * rsyslog-module-pgsql-8.2306.0-150400.5.21.1 * rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-doc-8.2306.0-150400.5.21.1 * rsyslog-module-relp-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-omamqp1-8.2306.0-150400.5.21.1 * rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-omhttpfs-debuginfo-8.2306.0-150400.5.21.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rsyslog-module-relp-8.2306.0-150400.5.21.1 * rsyslog-module-mysql-8.2306.0-150400.5.21.1 * rsyslog-module-gtls-8.2306.0-150400.5.21.1 * rsyslog-module-elasticsearch-8.2306.0-150400.5.21.1 * rsyslog-module-gcrypt-8.2306.0-150400.5.21.1 * rsyslog-8.2306.0-150400.5.21.1 * rsyslog-module-gssapi-8.2306.0-150400.5.21.1 * rsyslog-module-dbi-8.2306.0-150400.5.21.1 * rsyslog-debugsource-8.2306.0-150400.5.21.1 * rsyslog-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-ossl-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-snmp-8.2306.0-150400.5.21.1 * rsyslog-module-dbi-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-diag-tools-8.2306.0-150400.5.21.1 * rsyslog-module-gcrypt-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-omamqp1-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-udpspoof-8.2306.0-150400.5.21.1 * rsyslog-module-elasticsearch-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-kafka-8.2306.0-150400.5.21.1 * rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-omtcl-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-mmnormalize-8.2306.0-150400.5.21.1 * rsyslog-module-ossl-8.2306.0-150400.5.21.1 * rsyslog-module-kafka-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-diag-tools-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-omhttpfs-8.2306.0-150400.5.21.1 * rsyslog-module-omtcl-8.2306.0-150400.5.21.1 * rsyslog-module-pgsql-8.2306.0-150400.5.21.1 * rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-doc-8.2306.0-150400.5.21.1 * rsyslog-module-relp-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-omamqp1-8.2306.0-150400.5.21.1 * rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-omhttpfs-debuginfo-8.2306.0-150400.5.21.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * rsyslog-8.2306.0-150400.5.21.1 * rsyslog-debugsource-8.2306.0-150400.5.21.1 * rsyslog-debuginfo-8.2306.0-150400.5.21.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rsyslog-8.2306.0-150400.5.21.1 * rsyslog-debugsource-8.2306.0-150400.5.21.1 * rsyslog-debuginfo-8.2306.0-150400.5.21.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * rsyslog-module-relp-8.2306.0-150400.5.21.1 * rsyslog-module-relp-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-mysql-8.2306.0-150400.5.21.1 * rsyslog-module-udpspoof-8.2306.0-150400.5.21.1 * rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-gtls-8.2306.0-150400.5.21.1 * rsyslog-module-mmnormalize-8.2306.0-150400.5.21.1 * rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-snmp-8.2306.0-150400.5.21.1 * rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-pgsql-8.2306.0-150400.5.21.1 * rsyslog-module-gssapi-8.2306.0-150400.5.21.1 * rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-debugsource-8.2306.0-150400.5.21.1 * rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-debuginfo-8.2306.0-150400.5.21.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rsyslog-module-relp-8.2306.0-150400.5.21.1 * rsyslog-module-relp-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-mysql-8.2306.0-150400.5.21.1 * rsyslog-module-udpspoof-8.2306.0-150400.5.21.1 * rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-gtls-8.2306.0-150400.5.21.1 * rsyslog-module-mmnormalize-8.2306.0-150400.5.21.1 * rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-snmp-8.2306.0-150400.5.21.1 * rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-pgsql-8.2306.0-150400.5.21.1 * rsyslog-module-gssapi-8.2306.0-150400.5.21.1 * rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-debugsource-8.2306.0-150400.5.21.1 * rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.21.1 * rsyslog-debuginfo-8.2306.0-150400.5.21.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1210286

1 0

SUSE-RU-2023:4462-1: moderate: Recommended update for product-builder
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Recommended update for product-builder Announcement ID: SUSE-RU-2023:4462-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that can now be installed. ## Description: This update for product-builder fixes the following issue: * 1.2.15 disabling CD/DVD joliet format on debug and source media ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4462=1 openSUSE-SLE-15.4-2023-4462=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4462=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4462=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4462=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * product-builder-1.2.15-150400.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * product-builder-1.2.15-150400.3.3.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * product-builder-1.2.15-150400.3.3.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * product-builder-1.2.15-150400.3.3.1

1 0

openSUSE-RU-2023:0373-1: moderate: Recommended update for xfce4-terminal
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

openSUSE Recommended Update: Recommended update for xfce4-terminal ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0373-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for xfce4-terminal fixes the following issues: * backport fix for crash on window close (gxo#apps/xfce4-terminal#282) Update to version 1.1.1 * build: Simplify and clarify X11/Wayland distinction * Fix xfce_titled_dialog_create_action_area() deprecation * build: Define our own windowing macro instead of extending GDK's * wayland: Fix drop-down keep-above for non-prefs dialogs * wayland: Fix drop-down terminal keep-above * wayland: Fix window activation * wayland: Fix drop-down terminal positioning (Fixes #141) * wayland: Fix new window size * Replace XDT_CHECK_LIBX11 and use HAVE_LIBX11 when appropriate * Use the same windowing environment test everywhere * Fix build when X11 is disabled * drop-down: Make settings easier to understand * drop-down: Fix allocation warnings * Apply 7 suggestion(s) to 2 file(s) * Save and restore terminal window workspace in X11 session * doc: Remove reference to terminalrc * app: Put GtkSettings:gtk-menu-bar-accel overwrite back in place * Translation Updates Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-373=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-373=1 Package List: - openSUSE Leap 15.5 (noarch): libgarcon-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.1 libxfce4ui-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.1 thunar-volman-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.1 xfce4-notifyd-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.1 xfce4-panel-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.1 xfce4-power-manager-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.1 xfce4-session-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.1 xfce4-settings-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.1 xfdesktop-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.1 xfwm4-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.11.1 - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): xfce4-terminal-1.1.1-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): xfce4-terminal-lang-1.1.1-bp155.2.6.1 References:

1 0

SUSE-RU-2023:4457-1: important: Recommended update for nvme-cli
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Recommended update for nvme-cli Announcement ID: SUSE-RU-2023:4457-1 Rating: important References: * bsc#1213768 * bsc#1215994 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for nvme-cli fixes the following issues: * Update to version 2.4+31.gf7ec09: * NetApp udev rule updates (bsc#1215994) * Connection reuse issue when multiple Host NQNs are used for the same host (bsc#1213768) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4457=1 openSUSE-SLE-15.5-2023-4457=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4457=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4457=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * nvme-cli-2.4+31.gf7ec09-150500.4.12.1 * nvme-cli-debuginfo-2.4+31.gf7ec09-150500.4.12.1 * nvme-cli-debugsource-2.4+31.gf7ec09-150500.4.12.1 * openSUSE Leap 15.5 (noarch) * nvme-cli-zsh-completion-2.4+31.gf7ec09-150500.4.12.1 * nvme-cli-regress-script-2.4+31.gf7ec09-150500.4.12.1 * nvme-cli-bash-completion-2.4+31.gf7ec09-150500.4.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * nvme-cli-2.4+31.gf7ec09-150500.4.12.1 * nvme-cli-debuginfo-2.4+31.gf7ec09-150500.4.12.1 * nvme-cli-debugsource-2.4+31.gf7ec09-150500.4.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * nvme-cli-2.4+31.gf7ec09-150500.4.12.1 * nvme-cli-debuginfo-2.4+31.gf7ec09-150500.4.12.1 * nvme-cli-debugsource-2.4+31.gf7ec09-150500.4.12.1 * Basesystem Module 15-SP5 (noarch) * nvme-cli-zsh-completion-2.4+31.gf7ec09-150500.4.12.1 * nvme-cli-bash-completion-2.4+31.gf7ec09-150500.4.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213768 * https://bugzilla.suse.com/show_bug.cgi?id=1215994

1 0

openSUSE-SU-2023:0372-1: important: Security update for chromium
by opensuse-security＠opensuse.org 16 Nov '23

16 Nov '23

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0372-1 Rating: important References: #1217142 Cross-References: CVE-2023-5997 CVE-2023-6112 Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 119.0.6045.159 (boo#1217142) * CVE-2023-5997: Use after free in Garbage Collection * CVE-2023-6112: Use after free in Navigation * Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-372=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-372=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-119.0.6045.159-bp155.2.58.1 chromedriver-debuginfo-119.0.6045.159-bp155.2.58.1 chromium-119.0.6045.159-bp155.2.58.1 chromium-debuginfo-119.0.6045.159-bp155.2.58.1 - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-119.0.6045.159-bp154.2.144.1 chromium-119.0.6045.159-bp154.2.144.1 References: https://www.suse.com/security/cve/CVE-2023-5997.html https://www.suse.com/security/cve/CVE-2023-6112.html https://bugzilla.suse.com/1217142

1 0

SUSE-SU-2023:4454-1: important: Security update for postgresql12
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for postgresql12 Announcement ID: SUSE-SU-2023:4454-1 Rating: important References: * bsc#1216022 * bsc#1216734 * bsc#1216960 * bsc#1216961 * bsc#1216962 Cross-References: * CVE-2023-5868 * CVE-2023-5869 * CVE-2023-5870 CVSS scores: * CVE-2023-5868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-5869 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5870 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities and has two security fixes can now be installed. ## Description: This update for postgresql12 fixes the following issues: Security issues fixed: * CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT "any" aggregate functions. This error led to a text-type value being interpreted as an unknown-type value (that is, a zero-terminated string) at runtime. This could result in disclosure of server memory following the text value. (bsc#1216962) * CVE-2023-5869: Detect integer overflow while computing new array dimensions. When assigning new elements to array subscripts that are outside the current array bounds, an undetected integer overflow could occur in edge cases. Memory stomps that are potentially exploitable for arbitrary code execution are possible, and so is disclosure of server memory. (bsc#1216961) * CVE-2023-5870: Prevent the pg_signal_backend role from signalling background workers and autovacuum processes. The documentation says that pg_signal_backend cannot issue signals to superuser-owned processes. It was able to signal these background processes, though, because they advertise a role OID of zero. Treat that as indicating superuser ownership. The security implications of cancelling one of these process types are fairly small so far as the core code goes (we'll just start another one), but extensions might add background workers that are more vulnerable. Also ensure that the is_superuser parameter is set correctly in such processes. No specific security consequences are known for that oversight, but it might be significant for some extensions. (bsc#1216960) * Updated to 12.17: https://www.postgresql.org/docs/12/release-12-17.html * Overhaul postgresql-README.SUSE and move it from the binary package to the noarch wrapper package. * Change the unix domain socket location from /var/run to /run. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4454=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4454=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4454=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4454=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4454=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4454=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4454=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4454=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4454=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4454=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * postgresql12-debuginfo-12.17-150200.8.54.1 * postgresql12-debugsource-12.17-150200.8.54.1 * postgresql12-llvmjit-12.17-150200.8.54.1 * postgresql12-plperl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-debuginfo-12.17-150200.8.54.1 * postgresql12-plperl-12.17-150200.8.54.1 * postgresql12-llvmjit-devel-12.17-150200.8.54.1 * postgresql12-contrib-debuginfo-12.17-150200.8.54.1 * postgresql12-server-12.17-150200.8.54.1 * postgresql12-llvmjit-debuginfo-12.17-150200.8.54.1 * postgresql12-test-12.17-150200.8.54.1 * postgresql12-devel-12.17-150200.8.54.1 * postgresql12-pltcl-12.17-150200.8.54.1 * postgresql12-server-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-contrib-12.17-150200.8.54.1 * postgresql12-12.17-150200.8.54.1 * postgresql12-pltcl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-devel-12.17-150200.8.54.1 * postgresql12-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-plpython-12.17-150200.8.54.1 * postgresql12-plpython-debuginfo-12.17-150200.8.54.1 * openSUSE Leap 15.4 (noarch) * postgresql12-docs-12.17-150200.8.54.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * postgresql12-debuginfo-12.17-150200.8.54.1 * postgresql12-debugsource-12.17-150200.8.54.1 * postgresql12-llvmjit-12.17-150200.8.54.1 * postgresql12-plperl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-debuginfo-12.17-150200.8.54.1 * postgresql12-plperl-12.17-150200.8.54.1 * postgresql12-llvmjit-devel-12.17-150200.8.54.1 * postgresql12-contrib-debuginfo-12.17-150200.8.54.1 * postgresql12-server-12.17-150200.8.54.1 * postgresql12-llvmjit-debuginfo-12.17-150200.8.54.1 * postgresql12-test-12.17-150200.8.54.1 * postgresql12-devel-12.17-150200.8.54.1 * postgresql12-pltcl-12.17-150200.8.54.1 * postgresql12-server-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-contrib-12.17-150200.8.54.1 * postgresql12-12.17-150200.8.54.1 * postgresql12-pltcl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-devel-12.17-150200.8.54.1 * postgresql12-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-plpython-12.17-150200.8.54.1 * postgresql12-plpython-debuginfo-12.17-150200.8.54.1 * openSUSE Leap 15.5 (noarch) * postgresql12-docs-12.17-150200.8.54.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * postgresql12-debuginfo-12.17-150200.8.54.1 * postgresql12-server-debuginfo-12.17-150200.8.54.1 * postgresql12-contrib-12.17-150200.8.54.1 * postgresql12-12.17-150200.8.54.1 * postgresql12-plperl-12.17-150200.8.54.1 * postgresql12-pltcl-12.17-150200.8.54.1 * postgresql12-contrib-debuginfo-12.17-150200.8.54.1 * postgresql12-pltcl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-12.17-150200.8.54.1 * postgresql12-debugsource-12.17-150200.8.54.1 * postgresql12-server-devel-12.17-150200.8.54.1 * postgresql12-server-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-plperl-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-12.17-150200.8.54.1 * postgresql12-plpython-12.17-150200.8.54.1 * postgresql12-plpython-debuginfo-12.17-150200.8.54.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * postgresql12-docs-12.17-150200.8.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * postgresql12-debuginfo-12.17-150200.8.54.1 * postgresql12-server-debuginfo-12.17-150200.8.54.1 * postgresql12-contrib-12.17-150200.8.54.1 * postgresql12-12.17-150200.8.54.1 * postgresql12-plperl-12.17-150200.8.54.1 * postgresql12-pltcl-12.17-150200.8.54.1 * postgresql12-contrib-debuginfo-12.17-150200.8.54.1 * postgresql12-pltcl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-12.17-150200.8.54.1 * postgresql12-debugsource-12.17-150200.8.54.1 * postgresql12-server-devel-12.17-150200.8.54.1 * postgresql12-server-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-plperl-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-12.17-150200.8.54.1 * postgresql12-plpython-12.17-150200.8.54.1 * postgresql12-plpython-debuginfo-12.17-150200.8.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * postgresql12-docs-12.17-150200.8.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * postgresql12-debuginfo-12.17-150200.8.54.1 * postgresql12-server-debuginfo-12.17-150200.8.54.1 * postgresql12-contrib-12.17-150200.8.54.1 * postgresql12-12.17-150200.8.54.1 * postgresql12-plperl-12.17-150200.8.54.1 * postgresql12-pltcl-12.17-150200.8.54.1 * postgresql12-contrib-debuginfo-12.17-150200.8.54.1 * postgresql12-pltcl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-12.17-150200.8.54.1 * postgresql12-debugsource-12.17-150200.8.54.1 * postgresql12-server-devel-12.17-150200.8.54.1 * postgresql12-server-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-plperl-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-12.17-150200.8.54.1 * postgresql12-plpython-12.17-150200.8.54.1 * postgresql12-plpython-debuginfo-12.17-150200.8.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * postgresql12-docs-12.17-150200.8.54.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * postgresql12-debuginfo-12.17-150200.8.54.1 * postgresql12-server-debuginfo-12.17-150200.8.54.1 * postgresql12-contrib-12.17-150200.8.54.1 * postgresql12-12.17-150200.8.54.1 * postgresql12-plperl-12.17-150200.8.54.1 * postgresql12-pltcl-12.17-150200.8.54.1 * postgresql12-contrib-debuginfo-12.17-150200.8.54.1 * postgresql12-pltcl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-12.17-150200.8.54.1 * postgresql12-debugsource-12.17-150200.8.54.1 * postgresql12-server-devel-12.17-150200.8.54.1 * postgresql12-server-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-plperl-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-12.17-150200.8.54.1 * postgresql12-plpython-12.17-150200.8.54.1 * postgresql12-plpython-debuginfo-12.17-150200.8.54.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * postgresql12-docs-12.17-150200.8.54.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * postgresql12-debuginfo-12.17-150200.8.54.1 * postgresql12-server-debuginfo-12.17-150200.8.54.1 * postgresql12-contrib-12.17-150200.8.54.1 * postgresql12-12.17-150200.8.54.1 * postgresql12-plperl-12.17-150200.8.54.1 * postgresql12-pltcl-12.17-150200.8.54.1 * postgresql12-contrib-debuginfo-12.17-150200.8.54.1 * postgresql12-pltcl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-12.17-150200.8.54.1 * postgresql12-debugsource-12.17-150200.8.54.1 * postgresql12-server-devel-12.17-150200.8.54.1 * postgresql12-server-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-plperl-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-12.17-150200.8.54.1 * postgresql12-plpython-12.17-150200.8.54.1 * postgresql12-plpython-debuginfo-12.17-150200.8.54.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * postgresql12-docs-12.17-150200.8.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * postgresql12-debuginfo-12.17-150200.8.54.1 * postgresql12-server-debuginfo-12.17-150200.8.54.1 * postgresql12-contrib-12.17-150200.8.54.1 * postgresql12-12.17-150200.8.54.1 * postgresql12-plperl-12.17-150200.8.54.1 * postgresql12-pltcl-12.17-150200.8.54.1 * postgresql12-contrib-debuginfo-12.17-150200.8.54.1 * postgresql12-pltcl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-12.17-150200.8.54.1 * postgresql12-debugsource-12.17-150200.8.54.1 * postgresql12-server-devel-12.17-150200.8.54.1 * postgresql12-server-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-plperl-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-12.17-150200.8.54.1 * postgresql12-plpython-12.17-150200.8.54.1 * postgresql12-plpython-debuginfo-12.17-150200.8.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * postgresql12-docs-12.17-150200.8.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * postgresql12-debuginfo-12.17-150200.8.54.1 * postgresql12-server-debuginfo-12.17-150200.8.54.1 * postgresql12-contrib-12.17-150200.8.54.1 * postgresql12-12.17-150200.8.54.1 * postgresql12-plperl-12.17-150200.8.54.1 * postgresql12-pltcl-12.17-150200.8.54.1 * postgresql12-contrib-debuginfo-12.17-150200.8.54.1 * postgresql12-pltcl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-12.17-150200.8.54.1 * postgresql12-debugsource-12.17-150200.8.54.1 * postgresql12-server-devel-12.17-150200.8.54.1 * postgresql12-server-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-plperl-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-12.17-150200.8.54.1 * postgresql12-plpython-12.17-150200.8.54.1 * postgresql12-plpython-debuginfo-12.17-150200.8.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * postgresql12-docs-12.17-150200.8.54.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * postgresql12-debuginfo-12.17-150200.8.54.1 * postgresql12-server-debuginfo-12.17-150200.8.54.1 * postgresql12-contrib-12.17-150200.8.54.1 * postgresql12-12.17-150200.8.54.1 * postgresql12-plperl-12.17-150200.8.54.1 * postgresql12-pltcl-12.17-150200.8.54.1 * postgresql12-contrib-debuginfo-12.17-150200.8.54.1 * postgresql12-pltcl-debuginfo-12.17-150200.8.54.1 * postgresql12-server-12.17-150200.8.54.1 * postgresql12-debugsource-12.17-150200.8.54.1 * postgresql12-server-devel-12.17-150200.8.54.1 * postgresql12-server-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-debuginfo-12.17-150200.8.54.1 * postgresql12-plperl-debuginfo-12.17-150200.8.54.1 * postgresql12-devel-12.17-150200.8.54.1 * postgresql12-plpython-12.17-150200.8.54.1 * postgresql12-plpython-debuginfo-12.17-150200.8.54.1 * SUSE Enterprise Storage 7.1 (noarch) * postgresql12-docs-12.17-150200.8.54.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5868.html * https://www.suse.com/security/cve/CVE-2023-5869.html * https://www.suse.com/security/cve/CVE-2023-5870.html * https://bugzilla.suse.com/show_bug.cgi?id=1216022 * https://bugzilla.suse.com/show_bug.cgi?id=1216734 * https://bugzilla.suse.com/show_bug.cgi?id=1216960 * https://bugzilla.suse.com/show_bug.cgi?id=1216961 * https://bugzilla.suse.com/show_bug.cgi?id=1216962

1 0

SUSE-SU-2023:4455-1: important: Security update for postgresql13
by maintenance＠opensuse.org 16 Nov '23

16 Nov '23

# Security update for postgresql13 Announcement ID: SUSE-SU-2023:4455-1 Rating: important References: * bsc#1216022 * bsc#1216734 * bsc#1216960 * bsc#1216961 * bsc#1216962 Cross-References: * CVE-2023-5868 * CVE-2023-5869 * CVE-2023-5870 CVSS scores: * CVE-2023-5868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-5869 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5870 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Galera for Ericsson 15 SP5 * Legacy Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves three vulnerabilities and has two security fixes can now be installed. ## Description: This update for postgresql13 fixes the following issues: Security issues fixed: * CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT "any" aggregate functions. This error led to a text-type value being interpreted as an unknown-type value (that is, a zero-terminated string) at runtime. This could result in disclosure of server memory following the text value. (bsc#1216962) * CVE-2023-5869: Detect integer overflow while computing new array dimensions. When assigning new elements to array subscripts that are outside the current array bounds, an undetected integer overflow could occur in edge cases. Memory stomps that are potentially exploitable for arbitrary code execution are possible, and so is disclosure of server memory. (bsc#1216961) * CVE-2023-5870: Prevent the pg_signal_backend role from signalling background workers and autovacuum processes. The documentation says that pg_signal_backend cannot issue signals to superuser-owned processes. It was able to signal these background processes, though, because they advertise a role OID of zero. Treat that as indicating superuser ownership. The security implications of cancelling one of these process types are fairly small so far as the core code goes (we'll just start another one), but extensions might add background workers that are more vulnerable. Also ensure that the is_superuser parameter is set correctly in such processes. No specific security consequences are known for that oversight, but it might be significant for some extensions. (bsc#1216960) * Updated to 13.13: https://www.postgresql.org/docs/13/release-13-13.html * Overhaul postgresql-README.SUSE and move it from the binary package to the noarch wrapper package. * Change the unix domain socket location from /var/run to /run. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4455=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4455=1 * Legacy Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2023-4455=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4455=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4455=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4455=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4455=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4455=1 * Galera for Ericsson 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-ERICSSON-2023-4455=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4455=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4455=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4455=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-llvmjit-devel-13.13-150200.5.50.1 * postgresql13-test-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-llvmjit-debuginfo-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-llvmjit-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * openSUSE Leap 15.4 (noarch) * postgresql13-docs-13.13-150200.5.50.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-llvmjit-devel-13.13-150200.5.50.1 * postgresql13-test-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-llvmjit-debuginfo-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-llvmjit-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * openSUSE Leap 15.5 (noarch) * postgresql13-docs-13.13-150200.5.50.1 * Legacy Module 15-SP4 (aarch64 ppc64le s390x x86_64) * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-llvmjit-devel-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-llvmjit-debuginfo-13.13-150200.5.50.1 * postgresql13-llvmjit-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * Legacy Module 15-SP4 (noarch) * postgresql13-docs-13.13-150200.5.50.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * postgresql13-docs-13.13-150200.5.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * postgresql13-docs-13.13-150200.5.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * postgresql13-docs-13.13-150200.5.50.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * postgresql13-docs-13.13-150200.5.50.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * postgresql13-docs-13.13-150200.5.50.1 * Galera for Ericsson 15 SP5 (x86_64) * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * Galera for Ericsson 15 SP5 (noarch) * postgresql13-docs-13.13-150200.5.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * postgresql13-docs-13.13-150200.5.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * postgresql13-docs-13.13-150200.5.50.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * postgresql13-debugsource-13.13-150200.5.50.1 * postgresql13-pltcl-13.13-150200.5.50.1 * postgresql13-server-debuginfo-13.13-150200.5.50.1 * postgresql13-plpython-13.13-150200.5.50.1 * postgresql13-server-13.13-150200.5.50.1 * postgresql13-13.13-150200.5.50.1 * postgresql13-contrib-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-13.13-150200.5.50.1 * postgresql13-plperl-debuginfo-13.13-150200.5.50.1 * postgresql13-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-server-devel-debuginfo-13.13-150200.5.50.1 * postgresql13-pltcl-debuginfo-13.13-150200.5.50.1 * postgresql13-devel-13.13-150200.5.50.1 * postgresql13-plpython-debuginfo-13.13-150200.5.50.1 * postgresql13-plperl-13.13-150200.5.50.1 * postgresql13-contrib-13.13-150200.5.50.1 * SUSE Enterprise Storage 7.1 (noarch) * postgresql13-docs-13.13-150200.5.50.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5868.html * https://www.suse.com/security/cve/CVE-2023-5869.html * https://www.suse.com/security/cve/CVE-2023-5870.html * https://bugzilla.suse.com/show_bug.cgi?id=1216022 * https://bugzilla.suse.com/show_bug.cgi?id=1216734 * https://bugzilla.suse.com/show_bug.cgi?id=1216960 * https://bugzilla.suse.com/show_bug.cgi?id=1216961 * https://bugzilla.suse.com/show_bug.cgi?id=1216962

1 0

openSUSE-SU-2023:0371-1: moderate: Security update for jhead
by opensuse-security＠opensuse.org 15 Nov '23

15 Nov '23

openSUSE Security Update: Security update for jhead ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0371-1 Rating: moderate References: #1207150 Cross-References: CVE-2022-41751 CVSS scores: CVE-2022-41751 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for jhead fixes the following issues: - Fixed autorotation problem caused by CVE-2022-41751 patch. [boo#1207150] Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-371=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): jhead-3.06.0.1-bp155.5.3.1 References: https://www.suse.com/security/cve/CVE-2022-41751.html https://bugzilla.suse.com/1207150

1 0

SUSE-RU-2023:4453-1: moderate: Recommended update for libjansson
by maintenance＠opensuse.org 15 Nov '23

15 Nov '23

# Recommended update for libjansson Announcement ID: SUSE-RU-2023:4453-1 Rating: moderate References: * bsc#1216541 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for libjansson ships the missing 32bit library to the Basesystem module of 15 SP5. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4453=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4453=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4453=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4453=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4453=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4453=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4453=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4453=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4453=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4453=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4453=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4453=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4453=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4453=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4453=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4453=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4453=1 ## Package List: * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson-devel-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * openSUSE Leap 15.4 (x86_64) * libjansson4-32bit-2.14-150000.3.5.1 * libjansson4-32bit-debuginfo-2.14-150000.3.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson-devel-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * openSUSE Leap 15.5 (x86_64) * libjansson4-32bit-2.14-150000.3.5.1 * libjansson4-32bit-debuginfo-2.14-150000.3.5.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson-devel-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * Basesystem Module 15-SP4 (x86_64) * libjansson4-32bit-2.14-150000.3.5.1 * libjansson4-32bit-debuginfo-2.14-150000.3.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson-devel-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * Basesystem Module 15-SP5 (x86_64) * libjansson4-32bit-2.14-150000.3.5.1 * libjansson4-32bit-debuginfo-2.14-150000.3.5.1 * SUSE Manager Proxy 4.2 (x86_64) * libjansson4-2.14-150000.3.5.1 * libjansson4-32bit-2.14-150000.3.5.1 * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson-devel-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * libjansson4-32bit-debuginfo-2.14-150000.3.5.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * libjansson4-2.14-150000.3.5.1 * libjansson4-32bit-2.14-150000.3.5.1 * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson-devel-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * libjansson4-32bit-debuginfo-2.14-150000.3.5.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson-devel-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 * SUSE Manager Server 4.2 (x86_64) * libjansson4-32bit-2.14-150000.3.5.1 * libjansson4-32bit-debuginfo-2.14-150000.3.5.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libjansson4-debuginfo-2.14-150000.3.5.1 * libjansson4-2.14-150000.3.5.1 * libjansson-debugsource-2.14-150000.3.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216541

1 0

SUSE-SU-2023:4449-1: moderate: Security update for exfatprogs
by maintenance＠opensuse.org 15 Nov '23

15 Nov '23

# Security update for exfatprogs Announcement ID: SUSE-SU-2023:4449-1 Rating: moderate References: * bsc#1216701 Cross-References: * CVE-2023-45897 CVSS scores: * CVE-2023-45897 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2023-45897 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for exfatprogs fixes the following issues: * CVE-2023-45897: Fixed out-of-bound memory issues in fsck (bsc#1216701). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4449=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4449=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4449=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4449=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4449=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * exfatprogs-debuginfo-1.0.4-150300.3.12.1 * exfatprogs-1.0.4-150300.3.12.1 * exfatprogs-debugsource-1.0.4-150300.3.12.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * exfatprogs-debuginfo-1.0.4-150300.3.12.1 * exfatprogs-1.0.4-150300.3.12.1 * exfatprogs-debugsource-1.0.4-150300.3.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * exfatprogs-debuginfo-1.0.4-150300.3.12.1 * exfatprogs-1.0.4-150300.3.12.1 * exfatprogs-debugsource-1.0.4-150300.3.12.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * exfatprogs-debuginfo-1.0.4-150300.3.12.1 * exfatprogs-1.0.4-150300.3.12.1 * exfatprogs-debugsource-1.0.4-150300.3.12.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * exfatprogs-debuginfo-1.0.4-150300.3.12.1 * exfatprogs-1.0.4-150300.3.12.1 * exfatprogs-debugsource-1.0.4-150300.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45897.html * https://bugzilla.suse.com/show_bug.cgi?id=1216701

1 0

SUSE-RU-2023:4450-1: moderate: Recommended update for crypto-policies
by maintenance＠opensuse.org 15 Nov '23

15 Nov '23

# Recommended update for crypto-policies Announcement ID: SUSE-RU-2023:4450-1 Rating: moderate References: * bsc#1209998 * jsc#PED-5041 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has one fix can now be installed. ## Description: This update for crypto-policies fixes the following issues: * Enable setting the kernel FIPS mode with the fips-mode-setup and fips- finish-install commands (jsc#PED-5041) * Adapt fips-mode-setup to use the pbl command from the perl-Bootloader package instead of grubby and add a note for transactional systems * Ship the man pages for fips-mode-setup and fips-finish-install * Make the supported versions change in the update-crypto-policies(8) man page persistent (bsc#1209998) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4450=1 openSUSE-SLE-15.4-2023-4450=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4450=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4450=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4450=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4450=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4450=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4450=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4450=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4450=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4450=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4450=1 ## Package List: * openSUSE Leap 15.4 (noarch) * crypto-policies-scripts-20210917.c9d86d1-150400.3.6.1 * crypto-policies-20210917.c9d86d1-150400.3.6.1 * openSUSE Leap Micro 5.3 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.6.1 * openSUSE Leap Micro 5.4 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.6.1 * openSUSE Leap 15.5 (noarch) * crypto-policies-scripts-20210917.c9d86d1-150400.3.6.1 * crypto-policies-20210917.c9d86d1-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.6.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.6.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.6.1 * Basesystem Module 15-SP4 (noarch) * crypto-policies-scripts-20210917.c9d86d1-150400.3.6.1 * crypto-policies-20210917.c9d86d1-150400.3.6.1 * Basesystem Module 15-SP5 (noarch) * crypto-policies-scripts-20210917.c9d86d1-150400.3.6.1 * crypto-policies-20210917.c9d86d1-150400.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1209998 * https://jira.suse.com/browse/PED-5041

1 0

SUSE-FU-2023:2738-2: moderate: Feature update for Apache Commons components
by maintenance＠opensuse.org 15 Nov '23

15 Nov '23

# Feature update for Apache Commons components Announcement ID: SUSE-FU-2023:2738-2 Rating: moderate References: * jsc#SLE-23217 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * Web and Scripting Module 15-SP5 An update that contains one feature can now be installed. ## Description: This update for Apache Commons components fixes the following issues: apache-commons-text: * Add upstream signing key and verify source signature (jsc#SLE-23217) apache-commons-daemon: * Version update from 1.2.4 to 1.3.2 (jsc#SLE-23217): * Fix Procrun. Remove noisy INFO log message that triggered logging once per minute while the service was running * Fix typos in Javadoc and comments * Fix Procrun. The DependsOn parameter is no longer ignored when updating the service configuration * Provide an error level log message when the user attempts to start the service without configuring a JVM and none is available via the registry * Dependencies Updates: * Bump actions/cache from 3.0.3 to 3.0.8. * Bump actions/checkout from 3 to 3.0.2. * Bump commons-parent from 53 to 54. * Bump spotbugs-maven-plugin from 4.6.0.0 to 4.7.2.0. * Bump jacoco-maven-plugin from 0.8.7 to 0.8.8. * Bump japicmp-maven-plugin from 0.15.4 to 0.16.0. * Bump JUnit 4 to 5 vintage. apache-common-parent: * Version update from 52 to version 53 (jsc#SLE-23217): * New features: * Add .asf.yaml to RAT excludes. * Add versions-maven-plugin run for this build. * Add maven-checkstyle-plugin to pluginManagement. * Allow Maven PMD plugin to override PMD implementation jars with property "commons.pmd-impl.version". * Add property commons.javadoc16.java.link. * Add and use property commons.enforcer-plugin.version. * Add SpotBugs to plugin management section. * Add and use property commons.buildnumber-plugin.version. * Add property commons.javadoc17.java.link. * Fixed Bugs: * Use HTTPS for Javadoc links to Oracle. * Use HTTPS for most links to Apache. * Rename property biz.aQute.bndlib.version to commons.biz.aQute.bndlib.version. * Dependencies updates: * Bump versions-maven-plugin from 2.7 to 2.10.0 * Bump maven-project-info-reports-plugin from 3.1.0 to 3.2.2 * Bump Jacoco from 0.8.5 to 0.8.7 * Bump actions/setup-java from v1.4.0 to v2 * Bump commons-build-plugin 1.11 to 1.12 * Bump biz.aQute.bndlib from 5.1.2 to 6.2.0 * Bump actions/checkout from 2.3.1 to 3 * Bump com.github.siom79.japicmp:japicmp-maven-plugin 0.14.3 to 0.15.7 * Bump org.apache.maven.wagon:wagon-ssh 3.4.0 to 3.4.3 * Bump maven-pmd-plugin 3.13.0 to 3.16.0 * Bump commons.checkstyle-plugin.version 3.1.1 to 3.1.2 * Bump actions/cache from 2 to 3 * Bump animal-sniffer-maven-plugin from 1.19 to 1.21 * Bump com.puppycrawl.tools:checkstyle from 8.40 to 9.0.2 * Bump maven-bundle-plugin from 5.1.1 to 5.1.4 * Bump maven-jxr-plugin from 3.0.0 to 3.1.1 * Bump maven-javadoc-plugin from 3.2.0 to 3.3.2 * Bump commons.pmd-impl.version from 6.29.0 to 6.44.0 * Bump spotbugs-maven-plugin from 4.0.4 to 4.5.3.0 * Bump spotbugs from 4.0.6 to 4.5.3 * Bump maven-enforcer-plugin from 3.0.0-M3 to 3.0.0 * Bump buildnumber-maven-plugin from 1.4 to 3.0.0 * Bump maven-site-plugin from 3.9.1 to 3.11.0 * Bump wagon-ssh from 3.4.3 to 3.5.1 * Bump checkstyle from 9.2 to 9.3 * Bump maven-compiler-plugin from 3.8.1 to 3.10.1 * Bump maven-jar-plugin from 3.2.0 to 3.2.2 * Bump commons-release-plugin from 1.7 to 1.8.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2738=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-2738=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2023-2738=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache-commons-daemon-jsvc-debuginfo-1.3.2-150200.11.9.2 * apache-commons-daemon-1.3.2-150200.11.9.2 * apache-commons-daemon-debugsource-1.3.2-150200.11.9.2 * apache-commons-daemon-jsvc-1.3.2-150200.11.9.2 * openSUSE Leap 15.5 (noarch) * apache-commons-text-1.10.0-150200.5.8.7 * apache-commons-parent-53-150200.3.9.1 * apache-commons-text-javadoc-1.10.0-150200.5.8.7 * apache-commons-daemon-javadoc-1.3.2-150200.11.9.2 * Development Tools Module 15-SP5 (noarch) * apache-commons-text-1.10.0-150200.5.8.7 * Web and Scripting Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache-commons-daemon-1.3.2-150200.11.9.2 * apache-commons-daemon-debugsource-1.3.2-150200.11.9.2 ## References: * https://jira.suse.com/browse/SLE-23217

1 0

SUSE-RU-2023:4444-1: moderate: Recommended update for selinux-policy
by maintenance＠opensuse.org 15 Nov '23

15 Nov '23

# Recommended update for selinux-policy Announcement ID: SUSE-RU-2023:4444-1 Rating: moderate References: * bsc#1216060 Affected Products: * openSUSE Leap Micro 5.3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro for Rancher 5.3 An update that has one fix can now be installed. ## Description: This update for selinux-policy fixes the following issues: * Update to version 20210716+git59.bb8b3de0 * Allow keepalived to manage its tmp files (bsc#1216060) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4444=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4444=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4444=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * selinux-policy-targeted-20210716+git59.bb8b3de0-150400.5.6.1 * selinux-policy-20210716+git59.bb8b3de0-150400.5.6.1 * selinux-policy-devel-20210716+git59.bb8b3de0-150400.5.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * selinux-policy-targeted-20210716+git59.bb8b3de0-150400.5.6.1 * selinux-policy-20210716+git59.bb8b3de0-150400.5.6.1 * selinux-policy-devel-20210716+git59.bb8b3de0-150400.5.6.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * selinux-policy-targeted-20210716+git59.bb8b3de0-150400.5.6.1 * selinux-policy-20210716+git59.bb8b3de0-150400.5.6.1 * selinux-policy-devel-20210716+git59.bb8b3de0-150400.5.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216060

1 0

SUSE-RU-2023:4445-1: moderate: Recommended update for selinux-policy
by maintenance＠opensuse.org 15 Nov '23

15 Nov '23

# Recommended update for selinux-policy Announcement ID: SUSE-RU-2023:4445-1 Rating: moderate References: * bsc#1216060 Affected Products: * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that has one fix can now be installed. ## Description: This update for selinux-policy fixes the following issues: * Update to version 20230511+git5.54d165ea * Allow keepalived to manage its tmp files (bsc#1216060) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4445=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4445=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4445=1 ## Package List: * openSUSE Leap Micro 5.4 (noarch) * selinux-policy-devel-20230511+git5.54d165ea-150400.4.15.1 * selinux-policy-20230511+git5.54d165ea-150400.4.15.1 * selinux-policy-targeted-20230511+git5.54d165ea-150400.4.15.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * selinux-policy-devel-20230511+git5.54d165ea-150400.4.15.1 * selinux-policy-20230511+git5.54d165ea-150400.4.15.1 * selinux-policy-targeted-20230511+git5.54d165ea-150400.4.15.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * selinux-policy-devel-20230511+git5.54d165ea-150400.4.15.1 * selinux-policy-20230511+git5.54d165ea-150400.4.15.1 * selinux-policy-targeted-20230511+git5.54d165ea-150400.4.15.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216060

1 0

SUSE-RU-2023:4446-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 15 Nov '23

15 Nov '23

# Recommended update for open-vm-tools Announcement ID: SUSE-RU-2023:4446-1 Rating: moderate References: * bsc#1216670 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP4 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for open-vm-tools fixes the following issues: * Update to 12.3.5 (bsc#1216670) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4446=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4446=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4446=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4446=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4446=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4446=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4446=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4446=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4446=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4446=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4446=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4446=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4446=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4446=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4446=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4446=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4446=1 ## Package List: * openSUSE Leap 15.3 (aarch64 x86_64 i586) * open-vm-tools-desktop-debuginfo-12.3.5-150300.46.1 * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * libvmtools-devel-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * open-vm-tools-desktop-12.3.5-150300.46.1 * open-vm-tools-containerinfo-12.3.5-150300.46.1 * open-vm-tools-sdmp-debuginfo-12.3.5-150300.46.1 * open-vm-tools-sdmp-12.3.5-150300.46.1 * open-vm-tools-containerinfo-debuginfo-12.3.5-150300.46.1 * openSUSE Leap 15.3 (x86_64) * open-vm-tools-salt-minion-12.3.5-150300.46.1 * openSUSE Leap Micro 5.3 (x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * openSUSE Leap Micro 5.4 (x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * openSUSE Leap 15.4 (aarch64 x86_64) * open-vm-tools-desktop-debuginfo-12.3.5-150300.46.1 * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * libvmtools-devel-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * open-vm-tools-desktop-12.3.5-150300.46.1 * open-vm-tools-containerinfo-12.3.5-150300.46.1 * open-vm-tools-sdmp-debuginfo-12.3.5-150300.46.1 * open-vm-tools-sdmp-12.3.5-150300.46.1 * open-vm-tools-containerinfo-debuginfo-12.3.5-150300.46.1 * openSUSE Leap 15.4 (x86_64) * open-vm-tools-salt-minion-12.3.5-150300.46.1 * openSUSE Leap 15.5 (aarch64 x86_64) * open-vm-tools-desktop-debuginfo-12.3.5-150300.46.1 * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * libvmtools-devel-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * open-vm-tools-desktop-12.3.5-150300.46.1 * open-vm-tools-containerinfo-12.3.5-150300.46.1 * open-vm-tools-sdmp-debuginfo-12.3.5-150300.46.1 * open-vm-tools-sdmp-12.3.5-150300.46.1 * open-vm-tools-containerinfo-debuginfo-12.3.5-150300.46.1 * openSUSE Leap 15.5 (x86_64) * open-vm-tools-salt-minion-12.3.5-150300.46.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * Basesystem Module 15-SP4 (aarch64 x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * libvmtools-devel-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * open-vm-tools-sdmp-debuginfo-12.3.5-150300.46.1 * open-vm-tools-containerinfo-12.3.5-150300.46.1 * open-vm-tools-sdmp-12.3.5-150300.46.1 * open-vm-tools-containerinfo-debuginfo-12.3.5-150300.46.1 * Basesystem Module 15-SP4 (x86_64) * open-vm-tools-salt-minion-12.3.5-150300.46.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * open-vm-tools-sdmp-debuginfo-12.3.5-150300.46.1 * open-vm-tools-containerinfo-12.3.5-150300.46.1 * open-vm-tools-sdmp-12.3.5-150300.46.1 * open-vm-tools-containerinfo-debuginfo-12.3.5-150300.46.1 * Basesystem Module 15-SP5 (x86_64) * libvmtools-devel-12.3.5-150300.46.1 * open-vm-tools-salt-minion-12.3.5-150300.46.1 * Desktop Applications Module 15-SP4 (aarch64 x86_64) * open-vm-tools-desktop-debuginfo-12.3.5-150300.46.1 * open-vm-tools-desktop-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * Desktop Applications Module 15-SP5 (aarch64 x86_64) * open-vm-tools-desktop-debuginfo-12.3.5-150300.46.1 * open-vm-tools-desktop-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * libvmtools0-debuginfo-12.3.5-150300.46.1 * libvmtools0-12.3.5-150300.46.1 * open-vm-tools-debuginfo-12.3.5-150300.46.1 * open-vm-tools-12.3.5-150300.46.1 * open-vm-tools-debugsource-12.3.5-150300.46.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216670

1 0

SUSE-RU-2023:4448-1: moderate: Recommended update for php-memcached
by maintenance＠opensuse.org 15 Nov '23

15 Nov '23

# Recommended update for php-memcached Announcement ID: SUSE-RU-2023:4448-1 Rating: moderate References: * jsc#PED-6314 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * Web and Scripting Module 15-SP4 * Web and Scripting Module 15-SP5 An update that contains one feature can now be installed. ## Description: This update for php-memcached fixes the following issues: This adds php8-memcached to the Web and Scripting module. (jsc#PED-6314) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4448=1 openSUSE-SLE-15.4-2023-4448=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4448=1 * Web and Scripting Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP4-2023-4448=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2023-4448=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * php8-memcached-debugsource-3.2.0-150400.9.3.1 * php8-memcached-debuginfo-3.2.0-150400.9.3.1 * php8-memcached-3.2.0-150400.9.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * php8-memcached-debugsource-3.2.0-150400.9.3.1 * php8-memcached-debuginfo-3.2.0-150400.9.3.1 * php8-memcached-3.2.0-150400.9.3.1 * Web and Scripting Module 15-SP4 (aarch64 ppc64le s390x x86_64) * php8-memcached-debugsource-3.2.0-150400.9.3.1 * php8-memcached-debuginfo-3.2.0-150400.9.3.1 * php8-memcached-3.2.0-150400.9.3.1 * Web and Scripting Module 15-SP5 (aarch64 ppc64le s390x x86_64) * php8-memcached-debugsource-3.2.0-150400.9.3.1 * php8-memcached-debuginfo-3.2.0-150400.9.3.1 * php8-memcached-3.2.0-150400.9.3.1 ## References: * https://jira.suse.com/browse/PED-6314

1 0

SUSE-SU-2023:4440-1: important: Security update for ucode-intel
by maintenance＠opensuse.org 14 Nov '23

14 Nov '23

# Security update for ucode-intel Announcement ID: SUSE-SU-2023:4440-1 Rating: important References: * bsc#1215278 Cross-References: * CVE-2023-23583 CVSS scores: * CVE-2023-23583 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for ucode-intel fixes the following issues: * Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113). (bsc#1215278) * CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. (bsc#1215278) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4440=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4440=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4440=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4440=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4440=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4440=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4440=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4440=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4440=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4440=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4440=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4440=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4440=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4440=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4440=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4440=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4440=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4440=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4440=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4440=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4440=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4440=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4440=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4440=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4440=1 ## Package List: * openSUSE Leap Micro 5.3 (x86_64) * ucode-intel-20231113-150200.32.1 * openSUSE Leap Micro 5.4 (x86_64) * ucode-intel-20231113-150200.32.1 * openSUSE Leap 15.4 (x86_64) * ucode-intel-20231113-150200.32.1 * openSUSE Leap 15.5 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * ucode-intel-20231113-150200.32.1 * Basesystem Module 15-SP4 (x86_64) * ucode-intel-20231113-150200.32.1 * Basesystem Module 15-SP5 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Manager Proxy 4.2 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Manager Server 4.2 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Enterprise Storage 7.1 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * ucode-intel-20231113-150200.32.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * ucode-intel-20231113-150200.32.1 ## References: * https://www.suse.com/security/cve/CVE-2023-23583.html * https://bugzilla.suse.com/show_bug.cgi?id=1215278

1 0

openSUSE-SU-2023:0369-1: important: Security update for connman
by opensuse-security＠opensuse.org 14 Nov '23

14 Nov '23

openSUSE Security Update: Security update for connman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0369-1 Rating: important References: #1210395 Cross-References: CVE-2023-28488 CVSS scores: CVE-2023-28488 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for connman fixes the following issues: Update to 1.42 * Fix issue with iwd and signal strength calculation. * Fix issue with iwd and handling service removal. * Fix issue with iwd and handling new connections. * Fix issue with handling default online check URL. * Fix issue with handling nameservers refresh. * Fix issue with handling proxy from DHCP lease. (boo#1210395 CVE-2023-28488) * Fix issue with handling multiple proxies from PAC. * Fix issue with handling manual time update changes. * Fix issue with handling invalid gateway routes. * Fix issue with handling hidden WiFi agent requests. * Fix issue with handling WiFi SAE authentication failure. * Fix issue with handling DNS Proxy and TCP server replies. * Add support for regulatory domain following timezone. * Add support for localtime configuration option. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-369=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): connman-1.42-bp155.4.3.1 connman-client-1.42-bp155.4.3.1 connman-devel-1.42-bp155.4.3.1 connman-doc-1.42-bp155.4.3.1 connman-nmcompat-1.42-bp155.4.3.1 connman-plugin-iospm-1.42-bp155.4.3.1 connman-plugin-l2tp-1.42-bp155.4.3.1 connman-plugin-openvpn-1.42-bp155.4.3.1 connman-plugin-polkit-1.42-bp155.4.3.1 connman-plugin-pptp-1.42-bp155.4.3.1 connman-plugin-wireguard-1.42-bp155.4.3.1 connman-test-1.42-bp155.4.3.1 - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): connman-plugin-vpnc-1.42-bp155.4.3.1 - openSUSE Backports SLE-15-SP5 (aarch64 i586 s390x x86_64): connman-plugin-hh2serial-gps-1.42-bp155.4.3.1 connman-plugin-tist-1.42-bp155.4.3.1 References: https://www.suse.com/security/cve/CVE-2023-28488.html https://bugzilla.suse.com/1210395

1 0

openSUSE-SU-2023:0370-1: important: Security update for connman
by opensuse-security＠opensuse.org 14 Nov '23

14 Nov '23

openSUSE Security Update: Security update for connman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0370-1 Rating: important References: #1210395 Cross-References: CVE-2023-28488 CVSS scores: CVE-2023-28488 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for connman fixes the following issues: - Update to 1.42 * Fix issue with iwd and signal strength calculation. * Fix issue with iwd and handling service removal. * Fix issue with iwd and handling new connections. * Fix issue with handling default online check URL. * Fix issue with handling nameservers refresh. * Fix issue with handling proxy from DHCP lease. (boo#1210395 CVE-2023-28488) * Fix issue with handling multiple proxies from PAC. * Fix issue with handling manual time update changes. * Fix issue with handling invalid gateway routes. * Fix issue with handling hidden WiFi agent requests. * Fix issue with handling WiFi SAE authentication failure. * Fix issue with handling DNS Proxy and TCP server replies. * Add support for regulatory domain following timezone. * Add support for localtime configuration option. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-370=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): connman-1.42-bp154.2.6.1 connman-client-1.42-bp154.2.6.1 connman-devel-1.42-bp154.2.6.1 connman-doc-1.42-bp154.2.6.1 connman-nmcompat-1.42-bp154.2.6.1 connman-plugin-iospm-1.42-bp154.2.6.1 connman-plugin-l2tp-1.42-bp154.2.6.1 connman-plugin-openvpn-1.42-bp154.2.6.1 connman-plugin-polkit-1.42-bp154.2.6.1 connman-plugin-pptp-1.42-bp154.2.6.1 connman-plugin-wireguard-1.42-bp154.2.6.1 connman-test-1.42-bp154.2.6.1 - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le s390x x86_64): connman-plugin-vpnc-1.42-bp154.2.6.1 - openSUSE Backports SLE-15-SP4 (aarch64 i586 s390x x86_64): connman-plugin-hh2serial-gps-1.42-bp154.2.6.1 connman-plugin-tist-1.42-bp154.2.6.1 References: https://www.suse.com/security/cve/CVE-2023-28488.html https://bugzilla.suse.com/1210395

1 0

openSUSE-SU-2023:0368-1: important: Security update for chromium
by opensuse-security＠opensuse.org 14 Nov '23

14 Nov '23

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0368-1 Rating: important References: #1216783 #1216978 Cross-References: CVE-2023-5480 CVE-2023-5482 CVE-2023-5849 CVE-2023-5850 CVE-2023-5851 CVE-2023-5852 CVE-2023-5853 CVE-2023-5854 CVE-2023-5855 CVE-2023-5856 CVE-2023-5857 CVE-2023-5858 CVE-2023-5859 CVE-2023-5996 CVSS scores: CVE-2023-5480 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2023-5482 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5849 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5850 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-5851 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-5852 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5853 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-5854 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5855 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5856 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5857 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5858 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-5859 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 119.0.6045.123 (boo#1216978) * CVE-2023-5996: Use after free in WebAudio Chromium 119.0.6045.105 (boo#1216783) * CVE-2023-5480: Inappropriate implementation in Payments * CVE-2023-5482: Insufficient data validation in USB * CVE-2023-5849: Integer overflow in USB * CVE-2023-5850: Incorrect security UI in Downloads * CVE-2023-5851: Inappropriate implementation in Downloads * CVE-2023-5852: Use after free in Printing * CVE-2023-5853: Incorrect security UI in Downloads * CVE-2023-5854: Use after free in Profiles * CVE-2023-5855: Use after free in Reading Mode * CVE-2023-5856: Use after free in Side Panel * CVE-2023-5857: Inappropriate implementation in Downloads * CVE-2023-5858: Inappropriate implementation in WebApp Provider * CVE-2023-5859: Incorrect security UI in Picture In Picture gn was updated to version 0.20231023: * many updates to support Chromium 119 build Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-368=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-368=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): gn-0.20231023-bp155.5.3.1 gn-debuginfo-0.20231023-bp155.5.3.1 gn-debugsource-0.20231023-bp155.5.3.1 - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-119.0.6045.123-bp155.2.55.1 chromedriver-debuginfo-119.0.6045.123-bp155.2.55.1 chromium-119.0.6045.123-bp155.2.55.1 chromium-debuginfo-119.0.6045.123-bp155.2.55.1 - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): gn-0.20231023-bp154.3.6.1 gn-debuginfo-0.20231023-bp154.3.6.1 gn-debugsource-0.20231023-bp154.3.6.1 - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-119.0.6045.123-bp154.2.141.1 chromium-119.0.6045.123-bp154.2.141.1 References: https://www.suse.com/security/cve/CVE-2023-5480.html https://www.suse.com/security/cve/CVE-2023-5482.html https://www.suse.com/security/cve/CVE-2023-5849.html https://www.suse.com/security/cve/CVE-2023-5850.html https://www.suse.com/security/cve/CVE-2023-5851.html https://www.suse.com/security/cve/CVE-2023-5852.html https://www.suse.com/security/cve/CVE-2023-5853.html https://www.suse.com/security/cve/CVE-2023-5854.html https://www.suse.com/security/cve/CVE-2023-5855.html https://www.suse.com/security/cve/CVE-2023-5856.html https://www.suse.com/security/cve/CVE-2023-5857.html https://www.suse.com/security/cve/CVE-2023-5858.html https://www.suse.com/security/cve/CVE-2023-5859.html https://www.suse.com/security/cve/CVE-2023-5996.html https://bugzilla.suse.com/1216783 https://bugzilla.suse.com/1216978

1 0

SUSE-SU-2023:4439-1: moderate: Security update for w3m
by maintenance＠opensuse.org 14 Nov '23

14 Nov '23

# Security update for w3m Announcement ID: SUSE-SU-2023:4439-1 Rating: moderate References: * bsc#1213323 * bsc#1213324 Cross-References: * CVE-2023-38252 * CVE-2023-38253 CVSS scores: * CVE-2023-38252 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-38253 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for w3m fixes the following issues: * Update to version 0.5.3+git20230121 * CVE-2023-38252: Fixed an out-of-bounds write in function Strnew_size that allows attackers to cause a denial of service via a crafted HTML file. (bsc#1213324) * CVE-2023-38253: Fixed an out-of-bounds write in function growbuf_to_Str that allows attackers to cause a denial of service via a crafted HTML file. (bsc#1213323) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4439=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4439=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4439=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4439=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-debuginfo-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-debuginfo-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38252.html * https://www.suse.com/security/cve/CVE-2023-38253.html * https://bugzilla.suse.com/show_bug.cgi?id=1213323 * https://bugzilla.suse.com/show_bug.cgi?id=1213324

1 0

openSUSE-RU-2023:0367-1: moderate: Recommended update for tryton, trytond, trytond_account, trytond_account_invoice, trytond_currency, trytond_purchase, trytond_purchase_request, trytond_stock_lot
by maintenance＠opensuse.org 14 Nov '23

14 Nov '23

openSUSE Recommended Update: Recommended update for tryton, trytond, trytond_account, trytond_account_invoice, trytond_currency, trytond_purchase, trytond_purchase_request, trytond_stock_lot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0367-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tryton, trytond, trytond_account, trytond_account_invoice, trytond_currency, trytond_purchase, trytond_purchase_request, trytond_stock_lot fixes the following issues: Changes in tryton: - Version 6.0.30 - Bugfix Release - Version 6.0.29 - Bugfix Release Changes in trytond: - Version 6.0.37 - Bugfix Release - Version 6.0.36 - Bugfix Release Changes in trytond_account: - Version 6.0.19 - Bugfix Release Changes in trytond_account_invoice: - Version 6.0.14 - Bugfix Release Changes in trytond_currency: - Version 6.0.5 - Bugfix Release - Version 6.0.5 - Bugfix Release - Version 6.0.4 - Bugfix Release Changes in trytond_purchase: - Version 6.0.13 - Bugfix Release - Version 6.0.12 - Bugfix Release Changes in trytond_purchase_request: - Version 6.0.5 - Bugfix Release Changes in trytond_stock_lot: - Version 6.0.2 - Bugfix Release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-367=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): tryton-6.0.30-bp155.2.9.1 trytond-6.0.37-bp155.2.12.1 trytond_account-6.0.19-bp155.2.9.1 trytond_account_invoice-6.0.14-bp155.2.9.1 trytond_currency-6.0.5-bp155.2.3.1 trytond_purchase-6.0.13-bp155.2.6.1 trytond_purchase_request-6.0.5-bp155.2.3.1 trytond_stock_lot-6.0.2-bp155.3.6.1 References:

1 0

SUSE-RU-2023:4435-1: moderate: Recommended update for python-influxdb
by maintenance＠opensuse.org 14 Nov '23

14 Nov '23

# Recommended update for python-influxdb Announcement ID: SUSE-RU-2023:4435-1 Rating: moderate References: * jsc#MSC-707 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that contains one feature can now be installed. ## Description: This update for python-influxdb fixes the following issues: * Add `python3-influxdb` to Package Hub (no source changes) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4435=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4435=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4435=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4435=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python3-influxdb-5.0.0-150000.3.2.1 * openSUSE Leap 15.5 (noarch) * python3-influxdb-5.0.0-150000.3.2.1 * SUSE Package Hub 15 15-SP4 (noarch) * python3-influxdb-5.0.0-150000.3.2.1 * SUSE Package Hub 15 15-SP5 (noarch) * python3-influxdb-5.0.0-150000.3.2.1 ## References: * https://jira.suse.com/browse/MSC-707

1 0

SUSE-SU-2023:4438-1: low: Security update for xterm
by maintenance＠opensuse.org 14 Nov '23

14 Nov '23

# Security update for xterm Announcement ID: SUSE-SU-2023:4438-1 Rating: low References: * bsc#1214282 Cross-References: * CVE-2023-40359 CVSS scores: * CVE-2023-40359 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2023-40359 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for xterm fixes the following issues: * CVE-2023-40359: Fixed reporting characterset names in ReGiS graphics mode. (bsc#1214282) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4438=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4438=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4438=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4438=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4438=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4438=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4438=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * xterm-bin-330-150200.11.12.1 * xterm-debugsource-330-150200.11.12.1 * xterm-bin-debuginfo-330-150200.11.12.1 * xterm-330-150200.11.12.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * xterm-bin-330-150200.11.12.1 * xterm-debugsource-330-150200.11.12.1 * xterm-bin-debuginfo-330-150200.11.12.1 * xterm-330-150200.11.12.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * xterm-bin-330-150200.11.12.1 * xterm-debugsource-330-150200.11.12.1 * xterm-bin-debuginfo-330-150200.11.12.1 * xterm-330-150200.11.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * xterm-bin-330-150200.11.12.1 * xterm-debugsource-330-150200.11.12.1 * xterm-bin-debuginfo-330-150200.11.12.1 * xterm-330-150200.11.12.1 * SUSE Manager Proxy 4.2 (x86_64) * xterm-bin-330-150200.11.12.1 * xterm-debugsource-330-150200.11.12.1 * xterm-bin-debuginfo-330-150200.11.12.1 * xterm-330-150200.11.12.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * xterm-bin-330-150200.11.12.1 * xterm-debugsource-330-150200.11.12.1 * xterm-bin-debuginfo-330-150200.11.12.1 * xterm-330-150200.11.12.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * xterm-bin-330-150200.11.12.1 * xterm-debugsource-330-150200.11.12.1 * xterm-bin-debuginfo-330-150200.11.12.1 * xterm-330-150200.11.12.1 ## References: * https://www.suse.com/security/cve/CVE-2023-40359.html * https://bugzilla.suse.com/show_bug.cgi?id=1214282

1 0

SUSE-SU-2023:4429-1: moderate: Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by maintenance＠opensuse.org 13 Nov '23

13 Nov '23

# Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-SU-2023:4429-1 Rating: moderate References: * bsc#1216826 Cross-References: * CVE-2023-31022 CVSS scores: * CVE-2023-31022 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31022 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Security issues fixed: * CVE-2023-31022: Fixed NULL ptr deref in kernel module layer Changes in kernel-firmware-nvidia-gspx-G06: * update firmware to version 535.129.03 Changes in nvidia-open-driver-G06-signed: * Update to version 535.129.03 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4429=1 openSUSE-SLE-15.4-2023-4429=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4429=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4429=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4429=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4429=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4429=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4429=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-4429=1 ## Package List: * openSUSE Leap 15.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.129.03-150400.9.12.1 * openSUSE Leap 15.4 (x86_64) * nvidia-open-driver-G06-signed-azure-devel-535.129.03-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-azure-535.129.03_k5.14.21_150400.14.72-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-535.129.03_k5.14.21_150400.14.72-150400.9.27.1 * openSUSE Leap 15.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-535.129.03-150400.9.27.1 * nvidia-open-driver-G06-signed-default-devel-535.129.03-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * openSUSE Leap 15.4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * nvidia-open-driver-G06-signed-64kb-devel-535.129.03-150400.9.27.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.129.03-150400.9.12.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-535.129.03-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.129.03-150400.9.12.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-535.129.03-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.129.03-150400.9.12.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-535.129.03-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.129.03-150400.9.12.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-535.129.03-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * Basesystem Module 15-SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.129.03-150400.9.12.1 * Basesystem Module 15-SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * nvidia-open-driver-G06-signed-64kb-devel-535.129.03-150400.9.27.1 * Basesystem Module 15-SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-535.129.03-150400.9.27.1 * nvidia-open-driver-G06-signed-default-devel-535.129.03-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150400.24.92-150400.9.27.1 * Basesystem Module 15-SP5 (aarch64 nosrc) * kernel-firmware-nvidia-gspx-G06-535.129.03-150400.9.12.1 * Public Cloud Module 15-SP4 (x86_64) * nvidia-open-driver-G06-signed-azure-devel-535.129.03-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-azure-535.129.03_k5.14.21_150400.14.72-150400.9.27.1 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-535.129.03_k5.14.21_150400.14.72-150400.9.27.1 ## References: * https://www.suse.com/security/cve/CVE-2023-31022.html * https://bugzilla.suse.com/show_bug.cgi?id=1216826

1 0

SUSE-SU-2023:4416-1: important: Security update for containerized-data-importer
by maintenance＠opensuse.org 13 Nov '23

13 Nov '23

# Security update for containerized-data-importer Announcement ID: SUSE-SU-2023:4416-1 Rating: important References: Affected Products: * Containers Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that can now be installed. ## Description: This update for containerized-data-importer fixes the following issue: * rebuild with current go compiler ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4416=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4416=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4416=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4416=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4416=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4416=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-4416=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4416=1 ## Package List: * openSUSE Leap Micro 5.4 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * openSUSE Leap 15.4 (x86_64) * containerized-data-importer-api-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-importer-1.51.0-150400.4.20.2 * containerized-data-importer-importer-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-operator-1.51.0-150400.4.20.2 * containerized-data-importer-operator-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-controller-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-cloner-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-uploadproxy-1.51.0-150400.4.20.2 * containerized-data-importer-controller-1.51.0-150400.4.20.2 * containerized-data-importer-uploadserver-1.51.0-150400.4.20.2 * containerized-data-importer-uploadproxy-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-cloner-1.51.0-150400.4.20.2 * containerized-data-importer-uploadserver-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * containerized-data-importer-api-1.51.0-150400.4.20.2 * obs-service-cdi_containers_meta-1.51.0-150400.4.20.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * SUSE Linux Enterprise Micro 5.3 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * SUSE Linux Enterprise Micro 5.4 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * Containers Module 15-SP4 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * openSUSE Leap Micro 5.3 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2

1 0

SUSE-SU-2023:4430-1: important: Security update for apache2
by maintenance＠opensuse.org 13 Nov '23

13 Nov '23

# Security update for apache2 Announcement ID: SUSE-SU-2023:4430-1 Rating: important References: * bsc#1207399 * bsc#1214357 * bsc#1216424 Cross-References: * CVE-2023-31122 CVSS scores: * CVE-2023-31122 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31122 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability and has two security fixes can now be installed. ## Description: This update for apache2 fixes the following issues: * CVE-2023-31122: Fixed an out of bounds read in mod_macro (bsc#1216424). Non-security fixes: * Fixed the content type handling in mod_proxy_http2 (bsc#1214357). * Fixed a floating point exception crash (bsc#1207399). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4430=1 openSUSE-SLE-15.4-2023-4430=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4430=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4430=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4430=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4430=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4430=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4430=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4430=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * apache2-worker-2.4.51-150400.6.14.1 * apache2-debugsource-2.4.51-150400.6.14.1 * apache2-event-2.4.51-150400.6.14.1 * apache2-prefork-debuginfo-2.4.51-150400.6.14.1 * apache2-2.4.51-150400.6.14.1 * apache2-example-pages-2.4.51-150400.6.14.1 * apache2-utils-2.4.51-150400.6.14.1 * apache2-prefork-2.4.51-150400.6.14.1 * apache2-utils-debuginfo-2.4.51-150400.6.14.1 * apache2-worker-debuginfo-2.4.51-150400.6.14.1 * apache2-event-debuginfo-2.4.51-150400.6.14.1 * apache2-debuginfo-2.4.51-150400.6.14.1 * apache2-devel-2.4.51-150400.6.14.1 * openSUSE Leap 15.4 (noarch) * apache2-doc-2.4.51-150400.6.14.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-worker-2.4.51-150400.6.14.1 * apache2-debugsource-2.4.51-150400.6.14.1 * apache2-event-2.4.51-150400.6.14.1 * apache2-prefork-debuginfo-2.4.51-150400.6.14.1 * apache2-2.4.51-150400.6.14.1 * apache2-example-pages-2.4.51-150400.6.14.1 * apache2-utils-2.4.51-150400.6.14.1 * apache2-prefork-2.4.51-150400.6.14.1 * apache2-utils-debuginfo-2.4.51-150400.6.14.1 * apache2-worker-debuginfo-2.4.51-150400.6.14.1 * apache2-event-debuginfo-2.4.51-150400.6.14.1 * apache2-debuginfo-2.4.51-150400.6.14.1 * apache2-devel-2.4.51-150400.6.14.1 * openSUSE Leap 15.5 (noarch) * apache2-doc-2.4.51-150400.6.14.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-debugsource-2.4.51-150400.6.14.1 * apache2-prefork-debuginfo-2.4.51-150400.6.14.1 * apache2-2.4.51-150400.6.14.1 * apache2-utils-2.4.51-150400.6.14.1 * apache2-prefork-2.4.51-150400.6.14.1 * apache2-utils-debuginfo-2.4.51-150400.6.14.1 * apache2-debuginfo-2.4.51-150400.6.14.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-debugsource-2.4.51-150400.6.14.1 * apache2-prefork-debuginfo-2.4.51-150400.6.14.1 * apache2-2.4.51-150400.6.14.1 * apache2-utils-2.4.51-150400.6.14.1 * apache2-prefork-2.4.51-150400.6.14.1 * apache2-utils-debuginfo-2.4.51-150400.6.14.1 * apache2-debuginfo-2.4.51-150400.6.14.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-event-2.4.51-150400.6.14.1 * apache2-debuginfo-2.4.51-150400.6.14.1 * apache2-debugsource-2.4.51-150400.6.14.1 * apache2-event-debuginfo-2.4.51-150400.6.14.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-event-2.4.51-150400.6.14.1 * apache2-debuginfo-2.4.51-150400.6.14.1 * apache2-debugsource-2.4.51-150400.6.14.1 * apache2-event-debuginfo-2.4.51-150400.6.14.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-worker-2.4.51-150400.6.14.1 * apache2-debugsource-2.4.51-150400.6.14.1 * apache2-worker-debuginfo-2.4.51-150400.6.14.1 * apache2-debuginfo-2.4.51-150400.6.14.1 * apache2-devel-2.4.51-150400.6.14.1 * Server Applications Module 15-SP4 (noarch) * apache2-doc-2.4.51-150400.6.14.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-worker-2.4.51-150400.6.14.1 * apache2-debugsource-2.4.51-150400.6.14.1 * apache2-worker-debuginfo-2.4.51-150400.6.14.1 * apache2-debuginfo-2.4.51-150400.6.14.1 * apache2-devel-2.4.51-150400.6.14.1 * Server Applications Module 15-SP5 (noarch) * apache2-doc-2.4.51-150400.6.14.1 ## References: * https://www.suse.com/security/cve/CVE-2023-31122.html * https://bugzilla.suse.com/show_bug.cgi?id=1207399 * https://bugzilla.suse.com/show_bug.cgi?id=1214357 * https://bugzilla.suse.com/show_bug.cgi?id=1216424

1 0

SUSE-SU-2023:4427-1: moderate: Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by maintenance＠opensuse.org 13 Nov '23

13 Nov '23

# Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-SU-2023:4427-1 Rating: moderate References: * bsc#1211892 * bsc#1216826 * jsc#PED-4964 Cross-References: * CVE-2023-31022 CVSS scores: * CVE-2023-31022 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31022 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability, contains one feature and has one security fix can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Security issue fixed: * CVE-2023-31022: Fixed NULL ptr deref in kernel module layer Changes in kernel-firmware-nvidia-gspx-G06: * update firmware to version 535.129.03 * update firmware to version 535.113.01 Changes in nvidia-open-driver-G06-signed: * Update to version 535.129.03 * Add a devel package so other modules can be built against this one. [jira#PED-4964] * disabled build of nvidia-peermem module; it's no longer needed and never worked anyway (it was only a stub) [bsc#1211892] * preamble: added conflict to nvidia-gfxG05-kmp to prevent users from accidently installing conflicting proprietary kernelspace drivers from CUDA repository * Update to version 535.113.01 * kmp-post.sh/kmp-postun.sh: * add/remove nosimplefb=1 kernel option in order to fix Linux console also on sle15-sp6/Leap 15.6 kernel, which will come with simpledrm support ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4427=1 openSUSE-SLE-15.5-2023-4427=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4427=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4427=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-4427=1 ## Package List: * openSUSE Leap 15.5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.129.03-150500.11.9.1 * openSUSE Leap 15.5 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-535.129.03_k5.14.21_150500.33.20-150500.3.13.1 * nvidia-open-driver-G06-signed-kmp-azure-535.129.03_k5.14.21_150500.33.20-150500.3.13.1 * nvidia-open-driver-G06-signed-azure-devel-535.129.03-150500.3.13.1 * openSUSE Leap 15.5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-535.129.03-150500.3.13.1 * nvidia-open-driver-G06-signed-default-devel-535.129.03-150500.3.13.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.129.03_k5.14.21_150500.55.31-150500.3.13.1 * nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150500.55.31-150500.3.13.1 * openSUSE Leap 15.5 (aarch64) * nvidia-open-driver-G06-signed-64kb-devel-535.129.03-150500.3.13.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-535.129.03_k5.14.21_150500.55.31-150500.3.13.1 * nvidia-open-driver-G06-signed-kmp-64kb-535.129.03_k5.14.21_150500.55.31-150500.3.13.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.129.03-150500.11.9.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.129.03_k5.14.21_150500.55.31-150500.3.13.1 * nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150500.55.31-150500.3.13.1 * Basesystem Module 15-SP5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.129.03-150500.11.9.1 * Basesystem Module 15-SP5 (aarch64) * nvidia-open-driver-G06-signed-64kb-devel-535.129.03-150500.3.13.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-535.129.03_k5.14.21_150500.55.31-150500.3.13.1 * nvidia-open-driver-G06-signed-kmp-64kb-535.129.03_k5.14.21_150500.55.31-150500.3.13.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-535.129.03-150500.3.13.1 * nvidia-open-driver-G06-signed-default-devel-535.129.03-150500.3.13.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.129.03_k5.14.21_150500.55.31-150500.3.13.1 * nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150500.55.31-150500.3.13.1 * Public Cloud Module 15-SP5 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-535.129.03_k5.14.21_150500.33.20-150500.3.13.1 * nvidia-open-driver-G06-signed-kmp-azure-535.129.03_k5.14.21_150500.33.20-150500.3.13.1 * nvidia-open-driver-G06-signed-azure-devel-535.129.03-150500.3.13.1 ## References: * https://www.suse.com/security/cve/CVE-2023-31022.html * https://bugzilla.suse.com/show_bug.cgi?id=1211892 * https://bugzilla.suse.com/show_bug.cgi?id=1216826 * https://jira.suse.com/browse/PED-4964

1 0

SUSE-RU-2023:4428-1: low: Recommended update for sassc
by maintenance＠opensuse.org 13 Nov '23

13 Nov '23

# Recommended update for sassc Announcement ID: SUSE-RU-2023:4428-1 Rating: low References: * bsc#1201074 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This recommended update for sassc fixes the following issues: * No-change rebuild against a newer version of libsass (3.6.5) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4428=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4428=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4428=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4428=1 ## Package List: * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libsass-devel-3.6.5-150200.4.7.1 * sassc-debuginfo-3.6.2-150200.3.5.1 * sassc-3.6.2-150200.3.5.1 * libsass-3_6_5-1-3.6.5-150200.4.7.1 * sassc-debugsource-3.6.2-150200.3.5.1 * libsass-debugsource-3.6.5-150200.4.7.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libsass-devel-3.6.5-150200.4.7.1 * libsass-debugsource-3.6.5-150200.4.7.1 * sassc-debuginfo-3.6.2-150200.3.5.1 * sassc-3.6.2-150200.3.5.1 * libsass-3_6_5-1-3.6.5-150200.4.7.1 * sassc-debugsource-3.6.2-150200.3.5.1 * libsass-3_6_5-1-debuginfo-3.6.5-150200.4.7.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsass-devel-3.6.5-150200.4.7.1 * libsass-debugsource-3.6.5-150200.4.7.1 * sassc-debuginfo-3.6.2-150200.3.5.1 * sassc-3.6.2-150200.3.5.1 * libsass-3_6_5-1-3.6.5-150200.4.7.1 * sassc-debugsource-3.6.2-150200.3.5.1 * libsass-3_6_5-1-debuginfo-3.6.5-150200.4.7.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * libsass-3_6_5-1-3.6.5-150200.4.7.1 * libsass-devel-3.6.5-150200.4.7.1 * libsass-3_6_5-1-debuginfo-3.6.5-150200.4.7.1 * libsass-debugsource-3.6.5-150200.4.7.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1201074

1 0

SUSE-RU-2023:4416-1: low: Submit CDI to SUSE:SLE-15-SP4:Update
by maintenance＠opensuse.org 13 Nov '23

13 Nov '23

# Submit CDI to SUSE:SLE-15-SP4:Update Announcement ID: SUSE-RU-2023:4416-1 Rating: low References: Affected Products: * Containers Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that can now be installed. ## Description: Submit CDI to SUSE:SLE-15-SP4:Update CDI maintenance update for SLE15 SP4. Focusing primarily on rebuilding the container images and addressing the CVEs discovered so far in the base system. No ECO or Jira ticket required. Released under the process described in: https://confluence.suse.com/display/Virtualization/KubeVirt+toolstack+in+th… ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4416=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4416=1 SUSE-2023-4416=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4416=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4416=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4416=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4416=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-4416=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4416=1 ## Package List: * openSUSE Leap Micro 5.4 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * openSUSE Leap 15.4 (x86_64) * containerized-data-importer-api-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-importer-1.51.0-150400.4.20.2 * containerized-data-importer-importer-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-operator-1.51.0-150400.4.20.2 * containerized-data-importer-operator-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-controller-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-cloner-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-uploadproxy-1.51.0-150400.4.20.2 * containerized-data-importer-controller-1.51.0-150400.4.20.2 * containerized-data-importer-uploadserver-1.51.0-150400.4.20.2 * containerized-data-importer-uploadproxy-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-cloner-1.51.0-150400.4.20.2 * containerized-data-importer-uploadserver-debuginfo-1.51.0-150400.4.20.2 * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * containerized-data-importer-api-1.51.0-150400.4.20.2 * obs-service-cdi_containers_meta-1.51.0-150400.4.20.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * SUSE Linux Enterprise Micro 5.3 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * SUSE Linux Enterprise Micro 5.4 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * Containers Module 15-SP4 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2 * openSUSE Leap Micro 5.3 (x86_64) * containerized-data-importer-manifests-1.51.0-150400.4.20.2

1 0

openSUSE-SU-2023:0366-1: moderate: Security update for vlc
by opensuse-security＠opensuse.org 12 Nov '23

12 Nov '23

openSUSE Security Update: Security update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0366-1 Rating: moderate References: #1206142 Cross-References: CVE-2022-37434 CVE-2022-41325 CVE-2023-5217 CVSS scores: CVE-2022-37434 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-37434 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-41325 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5217 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5217 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for vlc fixes the following issues: Update to version 3.0.20: + Video Output: - Fix green line in fullscreen in D3D11 video output - Fix crash with some AMD drivers old versions - Fix events propagation issue when double-clicking with mouse wheel + Decoders: - Fix crash when AV1 hardware decoder fails + Interface: - Fix annoying disappearance of the Windows fullscreen controller + Demuxers: - Fix potential security issue (OOB Write) on MMS:// by checking user size bounds Update to version 3.0.19: + Core: - Fix next-frame freezing in most scenarios + Demux: - Support RIFF INFO tags for Wav files - Fix AVI files with flipped RAW video planes - Fix duration on short and small Ogg/Opus files - Fix some HLS/TS streams with ID3 prefix - Fix some HLS playlist refresh drift - Fix for GoPro MAX spatial metadata - Improve FFmpeg-muxed MP4 chapters handling - Improve playback for QNap-produced AVI files - Improve playback of some old RealVideo files - Fix duration probing on some MP4 with missing information + Decoders: - Multiple fixes on AAC handling - Activate hardware decoding of AV1 on Windows (DxVA) - Improve AV1 HDR support with software decoding - Fix some AV1 GBRP streams, AV1 super-resolution streams and monochrome ones - Fix black screen on poorly edited MP4 files on Android Mediacodec - Fix rawvid video in NV12 - Fix several issues on Windows hardware decoding (including "too large resolution in DxVA") - Improve crunchyroll-produced SSA rendering + Video Output: - Super Resolution scaling with nVidia and Intel GPUs - Fix for an issue when cropping on Direct3D9 - Multiple fixes for hardware decoding on D3D11 and OpenGL interop - Fix an issue when playing -90°rotated video - Fix subtitles rendering blur on recent macOS + Input: - Improve SMB compatibility with Windows 11 hosts + Contribs: - Update of fluidlite, fixing some MIDI rendering on Windows - Update of zlib to 1.2.13 (CVE-2022-37434) - Update of FFmpeg, vpx (CVE-2023-5217), ebml, dav1d, libass + Misc: - Improve muxing timestamps in a few formats (reset to 0) - Fix some rendering issues on Linux with the fullscreen controller - Fix GOOM visualization - Fixes for Youtube playback - Fix some MPRIS inconsistencies that broke some OS widgets on Linux - Implement MPRIS TrackList signals - Fix opening files in read-only mode - Fix password search using the Kwallet backend - Fix some crashes on macOS when switching application - Fix 5.1/7.1 output on macOS and tvOS - Fix several crashes and bugs in the macOS preferences panel - Improvements on the threading of the MMDevice audio output on Windows - Fix a potential security issue on the uninstaller DLLs - Fix memory leaks when using the media_list_player libVLC APIs + Translations: - Update of most translations - New translations to Esperanto, Interlingue, Lao, Macedonian, Burmese, Odia, Samoan and Swahili Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-366=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): libvlc5-3.0.20-bp155.2.3.1 libvlccore9-3.0.20-bp155.2.3.1 vlc-3.0.20-bp155.2.3.1 vlc-codec-gstreamer-3.0.20-bp155.2.3.1 vlc-devel-3.0.20-bp155.2.3.1 vlc-jack-3.0.20-bp155.2.3.1 vlc-noX-3.0.20-bp155.2.3.1 vlc-opencv-3.0.20-bp155.2.3.1 vlc-qt-3.0.20-bp155.2.3.1 vlc-vdpau-3.0.20-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): vlc-lang-3.0.20-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-37434.html https://www.suse.com/security/cve/CVE-2022-41325.html https://www.suse.com/security/cve/CVE-2023-5217.html https://bugzilla.suse.com/1206142

1 0

openSUSE-SU-2023:0365-1: moderate: Security update for vlc
by opensuse-security＠opensuse.org 12 Nov '23

12 Nov '23

openSUSE Security Update: Security update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0365-1 Rating: moderate References: Cross-References: CVE-2022-37434 CVE-2023-5217 CVSS scores: CVE-2022-37434 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-37434 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2023-5217 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-5217 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for vlc fixes the following issues: Update to version 3.0.20: + Video Output: - Fix green line in fullscreen in D3D11 video output - Fix crash with some AMD drivers old versions - Fix events propagation issue when double-clicking with mouse wheel + Decoders: - Fix crash when AV1 hardware decoder fails + Interface: - Fix annoying disappearance of the Windows fullscreen controller + Demuxers: - Fix potential security issue (OOB Write) on MMS:// by checking user size bounds Update to version 3.0.19: + Core: - Fix next-frame freezing in most scenarios + Demux: - Support RIFF INFO tags for Wav files - Fix AVI files with flipped RAW video planes - Fix duration on short and small Ogg/Opus files - Fix some HLS/TS streams with ID3 prefix - Fix some HLS playlist refresh drift - Fix for GoPro MAX spatial metadata - Improve FFmpeg-muxed MP4 chapters handling - Improve playback for QNap-produced AVI files - Improve playback of some old RealVideo files - Fix duration probing on some MP4 with missing information + Decoders: - Multiple fixes on AAC handling - Activate hardware decoding of AV1 on Windows (DxVA) - Improve AV1 HDR support with software decoding - Fix some AV1 GBRP streams, AV1 super-resolution streams and monochrome ones - Fix black screen on poorly edited MP4 files on Android Mediacodec - Fix rawvid video in NV12 - Fix several issues on Windows hardware decoding (including "too large resolution in DxVA") - Improve crunchyroll-produced SSA rendering + Video Output: - Super Resolution scaling with nVidia and Intel GPUs - Fix for an issue when cropping on Direct3D9 - Multiple fixes for hardware decoding on D3D11 and OpenGL interop - Fix an issue when playing -90°rotated video - Fix subtitles rendering blur on recent macOS + Input: - Improve SMB compatibility with Windows 11 hosts + Contribs: - Update of fluidlite, fixing some MIDI rendering on Windows - Update of zlib to 1.2.13 (CVE-2022-37434) - Update of FFmpeg, vpx (CVE-2023-5217), ebml, dav1d, libass + Misc: - Improve muxing timestamps in a few formats (reset to 0) - Fix some rendering issues on Linux with the fullscreen controller - Fix GOOM visualization - Fixes for Youtube playback - Fix some MPRIS inconsistencies that broke some OS widgets on Linux - Implement MPRIS TrackList signals - Fix opening files in read-only mode - Fix password search using the Kwallet backend - Fix some crashes on macOS when switching application - Fix 5.1/7.1 output on macOS and tvOS - Fix several crashes and bugs in the macOS preferences panel - Improvements on the threading of the MMDevice audio output on Windows - Fix a potential security issue on the uninstaller DLLs - Fix memory leaks when using the media_list_player libVLC APIs + Translations: - Update of most translations - New translations to Esperanto, Interlingue, Lao, Macedonian, Burmese, Odia, Samoan and Swahili Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-365=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le x86_64): libvlc5-3.0.20-bp154.2.6.1 libvlccore9-3.0.20-bp154.2.6.1 vlc-3.0.20-bp154.2.6.1 vlc-codec-gstreamer-3.0.20-bp154.2.6.1 vlc-devel-3.0.20-bp154.2.6.1 vlc-jack-3.0.20-bp154.2.6.1 vlc-noX-3.0.20-bp154.2.6.1 vlc-opencv-3.0.20-bp154.2.6.1 vlc-qt-3.0.20-bp154.2.6.1 vlc-vdpau-3.0.20-bp154.2.6.1 - openSUSE Backports SLE-15-SP4 (noarch): vlc-lang-3.0.20-bp154.2.6.1 References: https://www.suse.com/security/cve/CVE-2022-37434.html https://www.suse.com/security/cve/CVE-2023-5217.html

1 0

openSUSE-RU-2023:0364-1: moderate: Recommended update for bluedevil5, breeze, breeze-gtk, discover, drkonqi5, kactivitymanagerd, kcm_flatpak, kcm_sddm, kde-cli-tools5, kde-gtk-config5, kgamma5, khotkeys5, kinfocenter5, kmenuedit5, kpipewire, kscreen5, kscreenlocker, ksshaskpass5, ksystemstats5, kwayland-integration, kwin5, kwrited5, layer-shell-qt, libkdecoration2, libkscreen2, libksysguard5, milou5, oxygen5, oxygen5-sounds, pam_kwallet, plasma-browser-integration, plasma-nm5, plasma-vault, plasma5-addons,
by maintenance＠opensuse.org 11 Nov '23

11 Nov '23

openSUSE Recommended Update: Recommended update for bluedevil5, breeze, breeze-gtk, discover, drkonqi5, kactivitymanagerd, kcm_flatpak, kcm_sddm, kde-cli-tools5, kde-gtk-config5, kgamma5, khotkeys5, kinfocenter5, kmenuedit5, kpipewire, kscreen5, kscreenlocker, ksshaskpass5, ksystemstats5, kwayland-integration, kwin5, kwrited5, layer-shell-qt, libkdecoration2, libkscreen2, libksysguard5, milou5, oxygen5, oxygen5-sounds, pam_kwallet, plasma-browser-integration, plasma-nm5, plasma-vault, plasma5-addons, plasma5-bigscreen, plasma5-desktop, plasma5-disks, plasma5-firewall, plasma5-integration, plasma5-mobile, plasma5-nano, plasma5-pa, plasma5-sdk, plasma5-systemmonitor, plasma5-thunderbolt, plasma5-welcome, plasma5-workspace, plasma5-workspace-wallpapers, plymouth-theme-breeze, polkit-kde-agent-5, powerdevil5, qqc2-breeze-style, systemsettings5, xdg-desktop-portal-kde ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0364-1 Rating: moderate References: #1210747 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for bluedevil5, breeze, breeze-gtk, discover, drkonqi5, kactivitymanagerd, kcm_flatpak, kcm_sddm, kde-cli-tools5, kde-gtk-config5, kgamma5, khotkeys5, kinfocenter5, kmenuedit5, kpipewire, kscreen5, kscreenlocker, ksshaskpass5, ksystemstats5, kwayland-integration, kwin5, kwrited5, layer-shell-qt, libkdecoration2, libkscreen2, libksysguard5, milou5, oxygen5, oxygen5-sounds, pam_kwallet, plasma-browser-integration, plasma-nm5, plasma-vault, plasma5-addons, plasma5-bigscreen, plasma5-desktop, plasma5-disks, plasma5-firewall, plasma5-integration, plasma5-mobile, plasma5-nano, plasma5-pa, plasma5-sdk, plasma5-systemmonitor, plasma5-thunderbolt, plasma5-welcome, plasma5-workspace, plasma5-workspace-wallpapers, plymouth-theme-breeze, polkit-kde-agent-5, powerdevil5, qqc2-breeze-style, systemsettings5, xdg-desktop-portal-kde fixes the following issues: Update to Plasma 5.27.9 to fix high cpu usage (boo#1216913) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-364=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): kde-gtk-config5-5.27.9-bp155.2.3.1 kde-gtk-config5-debuginfo-5.27.9-bp155.2.3.1 kde-gtk-config5-debugsource-5.27.9-bp155.2.3.1 kde-gtk-config5-gtk3-5.27.9-bp155.2.3.1 kde-gtk-config5-gtk3-debuginfo-5.27.9-bp155.2.3.1 kgamma5-5.27.9-bp155.2.3.1 kgamma5-debuginfo-5.27.9-bp155.2.3.1 kgamma5-debugsource-5.27.9-bp155.2.3.1 ksshaskpass5-5.27.9-bp155.2.3.1 ksshaskpass5-debuginfo-5.27.9-bp155.2.3.1 ksshaskpass5-debugsource-5.27.9-bp155.2.3.1 layer-shell-qt-debugsource-5.27.9-bp155.2.3.1 layer-shell-qt5-5.27.9-bp155.2.3.1 layer-shell-qt5-debuginfo-5.27.9-bp155.2.3.1 layer-shell-qt5-devel-5.27.9-bp155.2.3.1 libkdecoration2-debuginfo-5.27.9-bp155.2.3.1 libkdecoration2-debugsource-5.27.9-bp155.2.3.1 libkdecoration2-devel-5.27.9-bp155.2.3.1 libkdecorations2-5-5.27.9-bp155.2.3.1 libkdecorations2-5-debuginfo-5.27.9-bp155.2.3.1 libkdecorations2private10-5.27.9-bp155.2.3.1 libkdecorations2private10-debuginfo-5.27.9-bp155.2.3.1 pam_kwallet-5.27.9-bp155.2.3.1 pam_kwallet-debuginfo-5.27.9-bp155.2.3.1 pam_kwallet-debugsource-5.27.9-bp155.2.3.1 plymouth-theme-breeze-5.27.9-bp155.2.3.1 plymouth-theme-breeze-debugsource-5.27.9-bp155.2.3.1 plymouth-theme-breeze-plugin-breeze-5.27.9-bp155.2.3.1 plymouth-theme-breeze-plugin-breeze-debuginfo-5.27.9-bp155.2.3.1 polkit-kde-agent-5-5.27.9-bp155.2.3.1 polkit-kde-agent-5-debuginfo-5.27.9-bp155.2.3.1 polkit-kde-agent-5-debugsource-5.27.9-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): bluedevil5-5.27.9-bp155.2.3.1 breeze-5.27.9-bp155.2.3.1 breeze-debuginfo-5.27.9-bp155.2.3.1 breeze-debugsource-5.27.9-bp155.2.3.1 breeze5-decoration-5.27.9-bp155.2.3.1 breeze5-decoration-debuginfo-5.27.9-bp155.2.3.1 breeze5-style-5.27.9-bp155.2.3.1 breeze5-style-debuginfo-5.27.9-bp155.2.3.1 discover-5.27.9-bp155.2.3.1 discover-backend-flatpak-5.27.9-bp155.2.3.1 discover-backend-flatpak-debuginfo-5.27.9-bp155.2.3.1 discover-backend-fwupd-5.27.9-bp155.2.3.1 discover-backend-fwupd-debuginfo-5.27.9-bp155.2.3.1 discover-backend-packagekit-5.27.9-bp155.2.3.1 discover-backend-packagekit-debuginfo-5.27.9-bp155.2.3.1 discover-debuginfo-5.27.9-bp155.2.3.1 discover-debugsource-5.27.9-bp155.2.3.1 discover-notifier-5.27.9-bp155.2.3.1 discover-notifier-debuginfo-5.27.9-bp155.2.3.1 drkonqi5-5.27.9-bp155.2.3.1 drkonqi5-debuginfo-5.27.9-bp155.2.3.1 drkonqi5-debugsource-5.27.9-bp155.2.3.1 kactivitymanagerd-5.27.9-bp155.2.3.1 kactivitymanagerd-debuginfo-5.27.9-bp155.2.3.1 kactivitymanagerd-debugsource-5.27.9-bp155.2.3.1 kactivitymanagerd-lang-5.27.9-bp155.2.3.1 kcm_flatpak-5.27.9-bp155.2.3.1 kcm_flatpak-debuginfo-5.27.9-bp155.2.3.1 kcm_flatpak-debugsource-5.27.9-bp155.2.3.1 kcm_sddm-5.27.9-bp155.2.3.1 kcm_sddm-debuginfo-5.27.9-bp155.2.3.1 kcm_sddm-debugsource-5.27.9-bp155.2.3.1 kpipewire-debuginfo-5.27.9-bp155.2.3.1 kpipewire-debugsource-5.27.9-bp155.2.3.1 kpipewire-devel-5.27.9-bp155.2.3.1 kpipewire-imports-5.27.9-bp155.2.3.1 kpipewire-imports-debuginfo-5.27.9-bp155.2.3.1 kscreen5-5.27.9-bp155.2.3.1 kscreen5-debuginfo-5.27.9-bp155.2.3.1 kscreen5-debugsource-5.27.9-bp155.2.3.1 kscreen5-plasmoid-5.27.9-bp155.2.3.1 kscreenlocker-5.27.9-bp155.2.3.1 kscreenlocker-debuginfo-5.27.9-bp155.2.3.1 kscreenlocker-debugsource-5.27.9-bp155.2.3.1 kscreenlocker-devel-5.27.9-bp155.2.3.1 kwayland-integration-5.27.9-bp155.2.3.1 kwayland-integration-debuginfo-5.27.9-bp155.2.3.1 kwayland-integration-debugsource-5.27.9-bp155.2.3.1 kwin5-5.27.9-bp155.2.3.1 kwin5-debuginfo-5.27.9-bp155.2.3.1 kwin5-debugsource-5.27.9-bp155.2.3.1 kwin5-devel-5.27.9-bp155.2.3.1 kwrited5-5.27.9-bp155.2.3.1 kwrited5-debuginfo-5.27.9-bp155.2.3.1 kwrited5-debugsource-5.27.9-bp155.2.3.1 libKF5Screen8-5.27.9-bp155.2.3.1 libKF5Screen8-debuginfo-5.27.9-bp155.2.3.1 libKF5ScreenDpms8-5.27.9-bp155.2.3.1 libKF5ScreenDpms8-debuginfo-5.27.9-bp155.2.3.1 libKPipeWire5-5.27.9-bp155.2.3.1 libKPipeWire5-debuginfo-5.27.9-bp155.2.3.1 libKPipeWireDmaBuf5-5.27.9-bp155.2.3.1 libKPipeWireDmaBuf5-debuginfo-5.27.9-bp155.2.3.1 libKPipeWireRecord5-5.27.9-bp155.2.3.1 libKPipeWireRecord5-debuginfo-5.27.9-bp155.2.3.1 libKScreenLocker5-5.27.9-bp155.2.3.1 libKScreenLocker5-debuginfo-5.27.9-bp155.2.3.1 libbreezecommon5-5-5.27.9-bp155.2.3.1 libbreezecommon5-5-debuginfo-5.27.9-bp155.2.3.1 libkscreen2-debuginfo-5.27.9-bp155.2.3.1 libkscreen2-debugsource-5.27.9-bp155.2.3.1 libkscreen2-devel-5.27.9-bp155.2.3.1 libkscreen2-plugin-5.27.9-bp155.2.3.1 libkscreen2-plugin-debuginfo-5.27.9-bp155.2.3.1 metatheme-breeze-common-5.27.9-bp155.2.3.1 milou5-5.27.9-bp155.2.3.1 milou5-debuginfo-5.27.9-bp155.2.3.1 milou5-debugsource-5.27.9-bp155.2.3.1 oxygen5-5.27.9-bp155.2.3.1 oxygen5-debuginfo-5.27.9-bp155.2.3.1 oxygen5-debugsource-5.27.9-bp155.2.3.1 oxygen5-decoration-5.27.9-bp155.2.3.1 oxygen5-decoration-debuginfo-5.27.9-bp155.2.3.1 oxygen5-style-5.27.9-bp155.2.3.1 oxygen5-style-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-5.27.9-bp155.2.3.1 plasma-nm5-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-debugsource-5.27.9-bp155.2.3.1 plasma-nm5-fortisslvpn-5.27.9-bp155.2.3.1 plasma-nm5-fortisslvpn-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-iodine-5.27.9-bp155.2.3.1 plasma-nm5-iodine-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-l2tp-5.27.9-bp155.2.3.1 plasma-nm5-l2tp-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-libreswan-5.27.9-bp155.2.3.1 plasma-nm5-libreswan-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-mobile-5.27.9-bp155.2.3.1 plasma-nm5-mobile-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-openconnect-5.27.9-bp155.2.3.1 plasma-nm5-openconnect-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-openvpn-5.27.9-bp155.2.3.1 plasma-nm5-openvpn-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-pptp-5.27.9-bp155.2.3.1 plasma-nm5-pptp-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-ssh-5.27.9-bp155.2.3.1 plasma-nm5-ssh-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-sstp-5.27.9-bp155.2.3.1 plasma-nm5-sstp-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-strongswan-5.27.9-bp155.2.3.1 plasma-nm5-strongswan-debuginfo-5.27.9-bp155.2.3.1 plasma-nm5-vpnc-5.27.9-bp155.2.3.1 plasma-nm5-vpnc-debuginfo-5.27.9-bp155.2.3.1 plasma5-disks-5.27.9-bp155.2.3.1 plasma5-disks-debuginfo-5.27.9-bp155.2.3.1 plasma5-disks-debugsource-5.27.9-bp155.2.3.1 plasma5-firewall-5.27.9-bp155.2.3.1 plasma5-firewall-debuginfo-5.27.9-bp155.2.3.1 plasma5-firewall-debugsource-5.27.9-bp155.2.3.1 plasma5-integration-debugsource-5.27.9-bp155.2.3.1 plasma5-integration-devel-5.27.9-bp155.2.3.1 plasma5-integration-plugin-5.27.9-bp155.2.3.1 plasma5-integration-plugin-debuginfo-5.27.9-bp155.2.3.1 plasma5-pa-5.27.9-bp155.2.3.1 plasma5-pa-debuginfo-5.27.9-bp155.2.3.1 plasma5-pa-debugsource-5.27.9-bp155.2.3.1 plasma5-sdk-5.27.9-bp155.2.3.1 plasma5-sdk-debuginfo-5.27.9-bp155.2.3.1 plasma5-sdk-debugsource-5.27.9-bp155.2.3.1 plasma5-thunderbolt-5.27.9-bp155.2.3.1 plasma5-thunderbolt-debuginfo-5.27.9-bp155.2.3.1 plasma5-thunderbolt-debugsource-5.27.9-bp155.2.3.1 plasma5-welcome-5.27.9-bp155.2.3.1 plasma5-welcome-debuginfo-5.27.9-bp155.2.3.1 plasma5-welcome-debugsource-5.27.9-bp155.2.3.1 plasmaengineexplorer5-5.27.9-bp155.2.3.1 plasmaengineexplorer5-debuginfo-5.27.9-bp155.2.3.1 qqc2-breeze-style-5.27.9-bp155.2.3.1 qqc2-breeze-style-debuginfo-5.27.9-bp155.2.3.1 qqc2-breeze-style-debugsource-5.27.9-bp155.2.3.1 qqc2-breeze-style-devel-5.27.9-bp155.2.3.1 xdg-desktop-portal-kde-5.27.9-bp155.2.3.1 xdg-desktop-portal-kde-debuginfo-5.27.9-bp155.2.3.1 xdg-desktop-portal-kde-debugsource-5.27.9-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): gmenudbusmenuproxy-5.27.9-bp155.2.3.1 gmenudbusmenuproxy-debuginfo-5.27.9-bp155.2.3.1 kde-cli-tools5-5.27.9-bp155.2.3.1 kde-cli-tools5-debuginfo-5.27.9-bp155.2.3.1 kde-cli-tools5-debugsource-5.27.9-bp155.2.3.1 khotkeys5-5.27.9-bp155.2.3.1 khotkeys5-debuginfo-5.27.9-bp155.2.3.1 khotkeys5-debugsource-5.27.9-bp155.2.3.1 khotkeys5-devel-5.27.9-bp155.2.3.1 kinfocenter5-5.27.9-bp155.2.3.1 kinfocenter5-debuginfo-5.27.9-bp155.2.3.1 kinfocenter5-debugsource-5.27.9-bp155.2.3.1 kmenuedit5-5.27.9-bp155.2.3.1 kmenuedit5-debuginfo-5.27.9-bp155.2.3.1 kmenuedit5-debugsource-5.27.9-bp155.2.3.1 ksysguardsystemstats-data-5.27.9-bp155.2.3.1 ksystemstats5-5.27.9-bp155.2.3.1 ksystemstats5-debuginfo-5.27.9-bp155.2.3.1 ksystemstats5-debugsource-5.27.9-bp155.2.3.1 libKSysGuardSystemStats1-5.27.9-bp155.2.3.1 libKSysGuardSystemStats1-debuginfo-5.27.9-bp155.2.3.1 libksysguard5-5.27.9-bp155.2.3.1 libksysguard5-debuginfo-5.27.9-bp155.2.3.1 libksysguard5-debugsource-5.27.9-bp155.2.3.1 libksysguard5-devel-5.27.9-bp155.2.3.1 libksysguard5-devel-debuginfo-5.27.9-bp155.2.3.1 libksysguard5-imports-5.27.9-bp155.2.3.1 libksysguard5-imports-debuginfo-5.27.9-bp155.2.3.1 libksysguard5-plugins-5.27.9-bp155.2.3.1 libksysguard5-plugins-debuginfo-5.27.9-bp155.2.3.1 plasma-browser-integration-5.27.9-bp155.2.3.1 plasma-browser-integration-debuginfo-5.27.9-bp155.2.3.1 plasma-browser-integration-debugsource-5.27.9-bp155.2.3.1 plasma-vault-5.27.9-bp155.2.3.1 plasma-vault-debuginfo-5.27.9-bp155.2.3.1 plasma-vault-debugsource-5.27.9-bp155.2.3.1 plasma5-addons-5.27.9-bp155.2.3.1 plasma5-addons-debuginfo-5.27.9-bp155.2.3.1 plasma5-addons-debugsource-5.27.9-bp155.2.3.1 plasma5-addons-devel-5.27.9-bp155.2.3.1 plasma5-bigscreen-5.27.9-bp155.2.3.1 plasma5-bigscreen-debuginfo-5.27.9-bp155.2.3.1 plasma5-bigscreen-debugsource-5.27.9-bp155.2.3.1 plasma5-desktop-5.27.9-bp155.2.3.1 plasma5-desktop-debuginfo-5.27.9-bp155.2.3.1 plasma5-desktop-debugsource-5.27.9-bp155.2.3.1 plasma5-desktop-emojier-5.27.9-bp155.2.3.1 plasma5-desktop-emojier-debuginfo-5.27.9-bp155.2.3.1 plasma5-mobile-5.27.9-bp155.2.3.1 plasma5-mobile-debuginfo-5.27.9-bp155.2.3.1 plasma5-mobile-debugsource-5.27.9-bp155.2.3.1 plasma5-nano-5.27.9-bp155.2.3.1 plasma5-nano-debuginfo-5.27.9-bp155.2.3.1 plasma5-nano-debugsource-5.27.9-bp155.2.3.1 plasma5-session-wayland-5.27.9-bp155.2.3.1 plasma5-systemmonitor-5.27.9-bp155.2.3.1 plasma5-systemmonitor-debuginfo-5.27.9-bp155.2.3.1 plasma5-systemmonitor-debugsource-5.27.9-bp155.2.3.1 plasma5-workspace-5.27.9-bp155.2.3.1 plasma5-workspace-debuginfo-5.27.9-bp155.2.3.1 plasma5-workspace-debugsource-5.27.9-bp155.2.3.1 plasma5-workspace-devel-5.27.9-bp155.2.3.1 plasma5-workspace-libs-5.27.9-bp155.2.3.1 plasma5-workspace-libs-debuginfo-5.27.9-bp155.2.3.1 powerdevil5-5.27.9-bp155.2.3.1 powerdevil5-debuginfo-5.27.9-bp155.2.3.1 powerdevil5-debugsource-5.27.9-bp155.2.3.1 systemsettings5-5.27.9-bp155.2.3.1 systemsettings5-debuginfo-5.27.9-bp155.2.3.1 systemsettings5-debugsource-5.27.9-bp155.2.3.1 xembedsniproxy-5.27.9-bp155.2.3.1 xembedsniproxy-debuginfo-5.27.9-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): pam_kwallet-64bit-5.27.9-bp155.2.3.1 pam_kwallet-64bit-debuginfo-5.27.9-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): bluedevil5-lang-5.27.9-bp155.2.3.1 breeze5-cursors-5.27.9-bp155.2.3.1 breeze5-style-lang-5.27.9-bp155.2.3.1 breeze5-wallpapers-5.27.9-bp155.2.3.1 discover-lang-5.27.9-bp155.2.3.1 drkonqi5-lang-5.27.9-bp155.2.3.1 gtk2-metatheme-breeze-5.27.9-bp155.2.3.1 gtk3-metatheme-breeze-5.27.9-bp155.2.3.1 gtk4-metatheme-breeze-5.27.9-bp155.2.3.1 kcm_flatpak-lang-5.27.9-bp155.2.3.1 kcm_sddm-lang-5.27.9-bp155.2.3.1 kde-cli-tools5-lang-5.27.9-bp155.2.3.1 kgamma5-lang-5.27.9-bp155.2.3.1 khotkeys5-lang-5.27.9-bp155.2.3.1 kinfocenter5-lang-5.27.9-bp155.2.3.1 kmenuedit5-lang-5.27.9-bp155.2.3.1 kscreen5-lang-5.27.9-bp155.2.3.1 kscreenlocker-lang-5.27.9-bp155.2.3.1 ksshaskpass5-lang-5.27.9-bp155.2.3.1 ksystemstats5-lang-5.27.9-bp155.2.3.1 kwin5-lang-5.27.9-bp155.2.3.1 libKF5Screen8-lang-5.27.9-bp155.2.3.1 libKPipeWire5-lang-5.27.9-bp155.2.3.1 libkdecorations2-5-lang-5.27.9-bp155.2.3.1 libksysguard5-lang-5.27.9-bp155.2.3.1 milou5-lang-5.27.9-bp155.2.3.1 oxygen5-cursors-5.27.9-bp155.2.3.1 oxygen5-lang-5.27.9-bp155.2.3.1 oxygen5-sounds-5.27.9-bp155.2.3.1 pam_kwallet-common-5.27.9-bp155.2.3.1 plasma-browser-integration-lang-5.27.9-bp155.2.3.1 plasma-nm5-lang-5.27.9-bp155.2.3.1 plasma-vault-backend-cryfs-5.27.9-bp155.2.3.1 plasma-vault-backend-encfs-5.27.9-bp155.2.3.1 plasma-vault-backend-gocryptfs-5.27.9-bp155.2.3.1 plasma-vault-lang-5.27.9-bp155.2.3.1 plasma5-addons-lang-5.27.9-bp155.2.3.1 plasma5-bigscreen-lang-5.27.9-bp155.2.3.1 plasma5-desktop-lang-5.27.9-bp155.2.3.1 plasma5-disks-lang-5.27.9-bp155.2.3.1 plasma5-firewall-lang-5.27.9-bp155.2.3.1 plasma5-integration-plugin-lang-5.27.9-bp155.2.3.1 plasma5-mobile-lang-5.27.9-bp155.2.3.1 plasma5-nano-lang-5.27.9-bp155.2.3.1 plasma5-pa-lang-5.27.9-bp155.2.3.1 plasma5-sdk-lang-5.27.9-bp155.2.3.1 plasma5-session-5.27.9-bp155.2.3.1 plasma5-systemmonitor-lang-5.27.9-bp155.2.3.1 plasma5-thunderbolt-lang-5.27.9-bp155.2.3.1 plasma5-welcome-lang-5.27.9-bp155.2.3.1 plasma5-workspace-lang-5.27.9-bp155.2.3.1 plasma5-workspace-wallpapers-5.27.9-bp155.2.3.1 polkit-kde-agent-5-lang-5.27.9-bp155.2.3.1 powerdevil5-lang-5.27.9-bp155.2.3.1 systemsettings5-lang-5.27.9-bp155.2.3.1 xdg-desktop-portal-kde-lang-5.27.9-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (x86_64): pam_kwallet-32bit-5.27.9-bp155.2.3.1 pam_kwallet-32bit-debuginfo-5.27.9-bp155.2.3.1 References: https://bugzilla.suse.com/1210747

1 0

openSUSE-SU-2023:0363-1: moderate: Security update for mupdf
by opensuse-security＠opensuse.org 11 Nov '23

11 Nov '23

openSUSE Security Update: Security update for mupdf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0363-1 Rating: moderate References: #1216728 Cross-References: CVE-2023-31794 CVSS scores: CVE-2023-31794 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mupdf fixes the following issues: - CVE-2023-31794: Fixed denial of service via crafted pdf in pdf_mark_list_push() (boo#1216728) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-363=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): mupdf-1.21.1-bp155.3.3.1 mupdf-devel-static-1.21.1-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2023-31794.html https://bugzilla.suse.com/1216728

1 0

SUSE-SU-2023:4414-1: important: Security update for the Linux Kernel
by maintenance＠opensuse.org 10 Nov '23

10 Nov '23

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2023:4414-1 Rating: important References: * bsc#1208788 * bsc#1211162 * bsc#1211307 * bsc#1212423 * bsc#1213705 * bsc#1213772 * bsc#1214754 * bsc#1214874 * bsc#1215104 * bsc#1215523 * bsc#1215545 * bsc#1215921 * bsc#1215955 * bsc#1215986 * bsc#1216062 * bsc#1216202 * bsc#1216322 * bsc#1216323 * bsc#1216324 * bsc#1216333 * bsc#1216345 * bsc#1216512 Cross-References: * CVE-2023-2163 * CVE-2023-2860 * CVE-2023-31085 * CVE-2023-34324 * CVE-2023-3777 * CVE-2023-39189 * CVE-2023-39191 * CVE-2023-39193 * CVE-2023-45862 * CVE-2023-46813 * CVE-2023-5178 CVSS scores: * CVE-2023-2163 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2023-2163 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2023-2860 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-2860 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-31085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31085 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-34324 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3777 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3777 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-39189 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-39189 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39191 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2023-39191 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2023-39193 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39193 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-45862 ( SUSE ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-45862 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46813 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-46813 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 11 vulnerabilities and has 11 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095) * CVE-2023-46813: Fixed a local privilege escalation with user-space programs that have access to MMIO regions (bsc#1212649). * CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) * CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051) * CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). * CVE-2023-5178: Fixed an UAF in queue intialization setup. (bsc#1215768) * CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518) * CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). * CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) * CVE-2023-39191: Fixed a lack of validation of dynamic pointers within user- supplied eBPF programs that may have allowed an attacker with CAP_BPF privileges to escalate privileges and execute arbitrary code. (bsc#1215863) * CVE-2023-2860: Fixed an out-of-bounds read vulnerability in the processing of seg6 attributes. This flaw allowed a privileged local user to disclose sensitive information. (bsc#1211592) The following non-security bugs were fixed: * 9p: virtio: make sure 'offs' is initialized in zc_request (git-fixes). * ACPI: irq: Fix incorrect return value in acpi_register_gsi() (git-fixes). * ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (git-fixes). * ALSA: hda/realtek - ALC287 I2S speaker platform support (git-fixes). * ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP (git-fixes). * ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (git-fixes). * ALSA: hda/realtek - Fixed two speaker platform (git-fixes). * ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes). * ALSA: hda/realtek: Change model for Intel RVP board (git-fixes). * ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx (git-fixes). * ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (git-fixes). * ALSA: hda: intel-dsp-cfg: add LunarLake support (git-fixes). * ALSA: hda: intel-sdw-acpi: Use u8 type for link index (git-fixes). * ALSA: usb-audio: Fix microphone sound on Nexigo webcam (git-fixes). * ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset (git-fixes). * ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM (git-fixes). * ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (git- fixes). * ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (git-fixes). * ASoC: codecs: wcd938x: drop bogus bind error handling (git-fixes). * ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes). * ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag (git-fixes). * ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link (git-fixes). * ASoC: pxa: fix a memory leak in probe() (git-fixes). * Bluetooth: Avoid redundant authentication (git-fixes). * Bluetooth: Fix a refcnt underflow problem for hci_conn (git-fixes). * Bluetooth: ISO: Fix handling of listen for unicast (git-fixes). * Bluetooth: Reject connection with the device which has same BD_ADDR (git- fixes). * Bluetooth: avoid memcmp() out of bounds warning (git-fixes). * Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes). * Bluetooth: hci_codec: Fix leaking content of local_codecs (git-fixes). * Bluetooth: hci_event: Fix coding style (git-fixes). * Bluetooth: hci_event: Fix using memcmp when comparing keys (git-fixes). * Bluetooth: hci_event: Ignore NULL link key (git-fixes). * Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (git-fixes). * Bluetooth: hci_sock: fix slab oob read in create_monitor_event (git-fixes). * Bluetooth: vhci: Fix race when opening vhci device (git-fixes). * Documentation: qat: change kernel version (PED-6401). * Documentation: qat: rewrite description (PED-6401). * Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (git- fixes). * Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (git- fixes). * Drop amdgpu patch causing spamming (bsc#1215523). * HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (git- fixes). * HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (git-fixes). * HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (git- fixes). * HID: multitouch: Add required quirk for Synaptics 0xcd7e device (git-fixes). * HID: sony: Fix a potential memory leak in sony_probe() (git-fixes). * HID: sony: remove duplicate NULL check before calling usb_free_urb() (git- fixes). * IB/mlx4: Fix the size of a buffer in add_port_entries() (git-fixes) * Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case (git-fixes). * Input: powermate - fix use-after-free in powermate_config_complete (git- fixes). * Input: psmouse - fix fast_reconnect function for PS/2 mode (git-fixes). * Input: xpad - add PXN V900 support (git-fixes). * KVM: SVM: Do not kill SEV guest if SMAP erratum triggers in usermode (git- fixes). * KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway (git-fixes). * KVM: s390: fix gisa destroy operation might lead to cpu stalls (git-fixes bsc#1216512). * KVM: x86/mmu: Reconstruct shadow page root if the guest PDPTEs is changed (git-fixes). * KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid() (git-fixes). * KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (bsc#1213772). * KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (bsc#1213772). * KVM: x86: add support for CPUID leaf 0x80000021 (bsc#1213772). * KVM: x86: synthesize CPUID leaf 0x80000021h if useful (bsc#1213772). * KVM: x86: work around QEMU issue with synthetic CPUID leaves (git-fixes). * NFS: Fix O_DIRECT locking issues (bsc#1211162). * NFS: Fix a few more clear_bit() instances that need release semantics (bsc#1211162). * NFS: Fix a potential data corruption (bsc#1211162). * NFS: Fix a use after free in nfs_direct_join_group() (bsc#1211162). * NFS: Fix error handling for O_DIRECT write scheduling (bsc#1211162). * NFS: More O_DIRECT accounting fixes for error paths (bsc#1211162). * NFS: More fixes for nfs_direct_write_reschedule_io() (bsc#1211162). * NFS: Use the correct commit info in nfs_join_page_group() (bsc#1211162). * NFSD: Never call nfsd_file_gc() in foreground paths (bsc#1215545). * RDMA/cma: Fix truncation compilation warning in make_cma_ports (git-fixes) * RDMA/cma: Initialize ib_sa_multicast structure to 0 when join (git-fixes) * RDMA/core: Require admin capabilities to set system parameters (git-fixes) * RDMA/cxgb4: Check skb value for failure to allocate (git-fixes) * RDMA/mlx5: Fix NULL string error (git-fixes) * RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation (git-fixes) * RDMA/siw: Fix connection failure handling (git-fixes) * RDMA/srp: Do not call scsi_done() from srp_abort() (git-fixes) * RDMA/uverbs: Fix typo of sizeof argument (git-fixes) * Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" (git-fixes). * Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" (git-fixes). * USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes). * USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes). * USB: serial: option: add entry for Sierra EM9191 with new firmware (git- fixes). * arm64/smmu: use TLBI ASID when invalidating entire range (bsc#1215921) * ata: libata-core: Do not register PM operations for SAS ports (git-fixes). * ata: libata-core: Fix ata_port_request_pm() locking (git-fixes). * ata: libata-core: Fix port and device removal (git-fixes). * ata: libata-sata: increase PMP SRST timeout to 10s (git-fixes). * ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (git-fixes). * blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (bsc#1216062). * blk-cgroup: support to track if policy is online (bsc#1216062). * bonding: Fix extraction of ports from the packet headers (bsc#1214754). * bonding: Return pointer to data after pull on skb (bsc#1214754). * bonding: do not assume skb mac_header is set (bsc#1214754). * bpf: Add copy_map_value_long to copy to remote percpu memory (git-fixes). * bpf: Add missing btf_put to register_btf_id_dtor_kfuncs (git-fixes). * bpf: Add override check to kprobe multi link attach (git-fixes). * bpf: Add zero_map_value to zero map value with special fields (git-fixes). * bpf: Cleanup check_refcount_ok (git-fixes). * bpf: Fix max stack depth check for async callbacks (git-fixes). * bpf: Fix offset calculation error in __copy_map_value and zero_map_value (git-fixes). * bpf: Fix ref_obj_id for dynptr data slices in verifier (git-fixes). * bpf: Fix resetting logic for unreferenced kptrs (git-fixes). * bpf: Fix subprog idx logic in check_max_stack_depth (git-fixes). * bpf: Gate dynptr API behind CAP_BPF (git-fixes). * bpf: Prevent decl_tag from being referenced in func_proto arg (git-fixes). * bpf: Repeat check_max_stack_depth for async callbacks (git-fixes). * bpf: Tighten ptr_to_btf_id checks (git-fixes). * bpf: fix precision propagation verbose logging (git-fixes). * bpf: prevent decl_tag from being referenced in func_proto (git-fixes). * bpf: propagate precision across all frames, not just the last one (git- fixes). * bpf: propagate precision in ALU/ALU64 operations (git-fixes). * btf: Export bpf_dynptr definition (git-fixes). * btrfs: do not start transaction for scrub if the fs is mounted read-only (bsc#1214874). * bus: ti-sysc: Fix missing AM35xx SoC matching (git-fixes). * bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() (git- fixes). * ceph: add base64 endcoding routines for encrypted names (jsc#SES-1880). * ceph: add encryption support to writepage and writepages (jsc#SES-1880). * ceph: add fscrypt ioctls and ceph.fscrypt.auth vxattr (jsc#SES-1880). * ceph: add helpers for converting names for userland presentation (jsc#SES-1880). * ceph: add infrastructure for file encryption and decryption (jsc#SES-1880). * ceph: add new mount option to enable sparse reads (jsc#SES-1880). * ceph: add object version support for sync read (jsc#SES-1880). * ceph: add read/modify/write to ceph_sync_write (jsc#SES-1880). * ceph: add some fscrypt guardrails (jsc#SES-1880). * ceph: add support for encrypted snapshot names (jsc#SES-1880). * ceph: add support to readdir for encrypted names (jsc#SES-1880). * ceph: add truncate size handling support for fscrypt (jsc#SES-1880). * ceph: align data in pages in ceph_sync_write (jsc#SES-1880). * ceph: allow encrypting a directory while not having Ax caps (jsc#SES-1880). * ceph: create symlinks with encrypted and base64-encoded targets (jsc#SES-1880). * ceph: decode alternate_name in lease info (jsc#SES-1880). * ceph: do not use special DIO path for encrypted inodes (jsc#SES-1880). * ceph: drop messages from MDS when unmounting (jsc#SES-1880). * ceph: encode encrypted name in ceph_mdsc_build_path and dentry release (jsc#SES-1880). * ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1216322). * ceph: fix type promotion bug on 32bit systems (bsc#1216324). * ceph: fix updating i_truncate_pagecache_size for fscrypt (jsc#SES-1880). * ceph: fscrypt_auth handling for ceph (jsc#SES-1880). * ceph: handle fscrypt fields in cap messages from MDS (jsc#SES-1880). * ceph: implement -o test_dummy_encryption mount option (jsc#SES-1880). * ceph: invalidate pages when doing direct/sync writes (jsc#SES-1880). * ceph: make ceph_fill_trace and ceph_get_name decrypt names (jsc#SES-1880). * ceph: make ceph_msdc_build_path use ref-walk (jsc#SES-1880). * ceph: make d_revalidate call fscrypt revalidator for encrypted dentries (jsc#SES-1880). * ceph: make ioctl cmds more readable in debug log (jsc#SES-1880). * ceph: make num_fwd and num_retry to __u32 (jsc#SES-1880). * ceph: mark directory as non-complete after loading key (jsc#SES-1880). * ceph: pass the request to parse_reply_info_readdir() (jsc#SES-1880). * ceph: plumb in decryption during reads (jsc#SES-1880). * ceph: preallocate inode for ops that may create one (jsc#SES-1880). * ceph: prevent snapshot creation in encrypted locked directories (jsc#SES-1880). * ceph: remove unnecessary check for NULL in parse_longname() (bsc#1216333). * ceph: send alternate_name in MClientRequest (jsc#SES-1880). * ceph: set DCACHE_NOKEY_NAME flag in ceph_lookup/atomic_open() (jsc#SES-1880). * ceph: size handling in MClientRequest, cap updates and inode traces (jsc#SES-1880). * ceph: switch ceph_lookup/atomic_open() to use new fscrypt helper (jsc#SES-1880). * ceph: use osd_req_op_extent_osd_iter for netfs reads (jsc#SES-1880). * ceph: voluntarily drop Xx caps for requests those touch parent mtime (jsc#SES-1880). * ceph: wait for OSD requests' callbacks to finish when unmounting (jsc#SES-1880). * cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (bsc#1215955). * cgroup: Remove duplicates in cgroup v1 tasks file (bsc#1211307). * clk: tegra: fix error return case for recalc_rate (git-fixes). * counter: microchip-tcb-capture: Fix the use of internal GCLK logic (git- fixes). * crypto: qat - Include algapi.h for low-level Crypto API (PED-6401). * crypto: qat - Remove unused function declarations (PED-6401). * crypto: qat - add fw_counters debugfs file (PED-6401). * crypto: qat - add heartbeat counters check (PED-6401). * crypto: qat - add heartbeat feature (PED-6401). * crypto: qat - add internal timer for qat 4xxx (PED-6401). * crypto: qat - add measure clock frequency (PED-6401). * crypto: qat - add missing function declaration in adf_dbgfs.h (PED-6401). * crypto: qat - add qat_zlib_deflate (PED-6401). * crypto: qat - add support for 402xx devices (PED-6401). * crypto: qat - change value of default idle filter (PED-6401). * crypto: qat - delay sysfs initialization (PED-6401). * crypto: qat - do not export adf_init_admin_pm() (PED-6401). * crypto: qat - drop log level of msg in get_instance_node() (PED-6401). * crypto: qat - drop obsolete heartbeat interface (PED-6401). * crypto: qat - drop redundant adf_enable_aer() (PED-6401). * crypto: qat - expose pm_idle_enabled through sysfs (PED-6401). * crypto: qat - extend buffer list logic interface (PED-6401). * crypto: qat - extend configuration for 4xxx (PED-6401). * crypto: qat - fix apply custom thread-service mapping for dc service (PED-6401). * crypto: qat - fix concurrency issue when device state changes (PED-6401). * crypto: qat - fix crypto capability detection for 4xxx (PED-6401). * crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (PED-6401). * crypto: qat - make fw images name constant (PED-6401). * crypto: qat - make state machine functions static (PED-6401). * crypto: qat - move dbgfs init to separate file (PED-6401). * crypto: qat - move returns to default case (PED-6401). * crypto: qat - refactor device restart logic (PED-6401). * crypto: qat - refactor fw config logic for 4xxx (PED-6401). * crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (PED-6401). * crypto: qat - replace state machine calls (PED-6401). * crypto: qat - replace the if statement with min() (PED-6401). * crypto: qat - set deprecated capabilities as reserved (PED-6401). * crypto: qat - unmap buffer before free for DH (PED-6401). * crypto: qat - unmap buffers before free for RSA (PED-6401). * crypto: qat - update slice mask for 4xxx devices (PED-6401). * crypto: qat - use kfree_sensitive instead of memset/kfree() (PED-6401). * dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq (git- fixes). * dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (git-fixes). * dmaengine: stm32-mdma: abort resume if no ongoing transfer (git-fixes). * drm/amd/display: Do not check registers, if using AUX BL control (git- fixes). * drm/amd/display: Do not set dpms_off for seamless boot (git-fixes). * drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes). * drm/amd: Fix detection of _PR3 on the PCIe root port (git-fixes). * drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV (git- fixes). * drm/amdgpu/soc21: do not remap HDP registers for SR-IOV (git-fixes). * drm/amdgpu: Handle null atom context in VBIOS info ioctl (git-fixes). * drm/amdgpu: add missing NULL check (git-fixes). * drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3 (git-fixes). * drm/amdkfd: Insert missing TLB flush on GFX10 and later (git-fixes). * drm/amdkfd: Use gpu_offset for user queue's wptr (git-fixes). * drm/atomic-helper: relax unregistered connector check (git-fixes). * drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet (git- fixes). * drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top (git-fixes). * drm/i915: Retry gtt fault when out of fence registers (git-fixes). * drm/mediatek: Correctly free sg_table in gem prime vmap (git-fixes). * drm/msm/dp: do not reinitialize phy unless retry during link training (git- fixes). * drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow (git- fixes). * drm/msm/dsi: fix irq_of_parse_and_map() error checking (git-fixes). * drm/msm/dsi: skip the wait for video mode done if not applicable (git- fixes). * drm/vmwgfx: fix typo of sizeof argument (git-fixes). * drm: panel-orientation-quirks: Add quirk for One Mix 2S (git-fixes). * firmware: arm_ffa: Do not set the memory region attributes for MEM_LEND (git-fixes). * firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() (git-fixes). * fprobe: Ensure running fprobe_exit_handler() finished before calling rethook_free() (git-fixes). * fscrypt: new helper function - fscrypt_prepare_lookup_partial() (jsc#SES-1880). * gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (git- fixes). * gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (git-fixes). * gpio: pxa: disable pinctrl calls for MMP_GPIO (git-fixes). * gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (git-fixes). * gpio: timberdale: Fix potential deadlock on &tgpio->lock (git-fixes). * gpio: vf610: set value before the direction to avoid a glitch (git-fixes). * gve: Do not fully free QPL pages on prefill errors (git-fixes). * i2c: i801: unregister tco_pdev in i801_probe() error path (git-fixes). * i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (git- fixes). * i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (git- fixes). * i2c: mux: gpio: Add missing fwnode_handle_put() (git-fixes). * i2c: mux: gpio:Â Replace custom acpi_get_local_address() (git-fixes). * i2c: npcm7xx: Fix callback completion ordering (git-fixes). * ieee802154: ca8210: Fix a potential UAF in ca8210_probe (git-fixes). * iio: pressure: bmp280: Fix NULL pointer exception (git-fixes). * iio: pressure: dps310: Adjust Timeout Settings (git-fixes). * iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (git-fixes). * intel x86 platform vsec kABI workaround (bsc#1216202). * io_uring/fs: remove sqe->rw_flags checking from LINKAT (git-fixes). * io_uring/rw: defer fsnotify calls to task context (git-fixes). * io_uring/rw: ensure kiocb_end_write() is always called (git-fixes). * io_uring/rw: remove leftover debug statement (git-fixes). * io_uring: Replace 0-length array with flexible array (git-fixes). * io_uring: ensure REQ_F_ISREG is set async offload (git-fixes). * io_uring: fix fdinfo sqe offsets calculation (git-fixes). * io_uring: fix memory leak when removing provided buffers (git-fixes). * iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). * iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). * iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). * iommu/arm-smmu-v3: Fix soft lockup triggered by (bsc#1215921) * kABI: fix bpf Tighten-ptr_to_btf_id checks (git-fixes). * kabi: blkcg_policy_data fix KABI (bsc#1216062). * kabi: workaround for enum nft_trans_phase (bsc#1215104). * kprobes: Prohibit probing on CFI preamble symbol (git-fixes). * leds: Drop BUG_ON check for LED_COLOR_ID_MULTI (git-fixes). * libceph: add CEPH_OSD_OP_ASSERT_VER support (jsc#SES-1880). * libceph: add new iov_iter-based ceph_msg_data_type and ceph_osd_data_type (jsc#SES-1880). * libceph: add sparse read support to OSD client (jsc#SES-1880). * libceph: add sparse read support to msgr1 (jsc#SES-1880). * libceph: add spinlock around osd->o_requests (jsc#SES-1880). * libceph: allow ceph_osdc_new_request to accept a multi-op read (jsc#SES-1880). * libceph: define struct ceph_sparse_extent and add some helpers (jsc#SES-1880). * libceph: new sparse_read op, support sparse reads on msgr2 crc codepath (jsc#SES-1880). * libceph: support sparse reads on msgr2 secure codepath (jsc#SES-1880). * libceph: use kernel_connect() (bsc#1216323). * mm, memcg: reconsider kmem.limit_in_bytes deprecation (bsc#1208788 bsc#1213705). * mmc: core: Capture correct oemid-bits for eMMC cards (git-fixes). * mmc: core: sdio: hold retuning if sdio in 1-bit mode (git-fixes). * mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw (git-fixes). * mtd: physmap-core: Restore map_rom fallback (git-fixes). * mtd: rawnand: arasan: Ensure program page operations are successful (git- fixes). * mtd: rawnand: marvell: Ensure program page operations are successful (git- fixes). * mtd: rawnand: pl353: Ensure program page operations are successful (git- fixes). * mtd: rawnand: qcom: Unmap the right resource upon probe failure (git-fixes). * mtd: spinand: micron: correct bitmask for ecc status (git-fixes). * net/sched: fix netdevice reference leaks in attach_default_qdiscs() (git- fixes). * net: mana: Fix TX CQE error handling (bsc#1215986). * net: mana: Fix oversized sge0 for GSO packets (bsc#1215986). * net: nfc: llcp: Add lock when modifying device list (git-fixes). * net: rfkill: gpio: prevent value glitch during probe (git-fixes). * net: sched: add barrier to fix packet stuck problem for lockless qdisc (bsc#1216345). * net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1216345). * net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (git- fixes). * net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git- fixes). * net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (git-fixes). * net: use sk_is_tcp() in more places (git-fixes). * netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (git-fixes). * netfilter: nf_tables: unbind non-anonymous set if rule construction fails (git-fixes). * nfc: nci: assert requested protocol is valid (git-fixes). * nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (git- fixes). * nfs: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162). * nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (git-fixes). * nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842). * phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (git-fixes). * phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes). * phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes). * pinctrl: avoid unsafe code pattern in find_pinctrl() (git-fixes). * pinctrl: renesas: rzn1: Enable missing PINMUX (git-fixes). * platform/surface: platform_profile: Propagate error if profile registration fails (git-fixes). * platform/x86/intel/pmt: Ignore uninitialized entries (bsc#1216202). * platform/x86/intel/pmt: telemetry: Fix fixed region handling (bsc#1216202). * platform/x86/intel/vsec: Rework early hardware code (bsc#1216202). * platform/x86/intel: Fix 'rmmod pmt_telemetry' panic (bsc#1216202). * platform/x86/intel: Fix pmt_crashlog array reference (bsc#1216202). * platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (git-fixes). * platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events (git- fixes). * platform/x86: think-lmi: Fix reference leak (git-fixes). * platform/x86: touchscreen_dmi: Add info for the Positivo C4128B (git-fixes). * power: supply: ucs1002: fix error code in ucs1002_get_property() (git- fixes). * quota: Fix slow quotaoff (bsc#1216621). * r8152: check budget for r8152_poll() (git-fixes). * regmap: fix NULL deref on lookup (git-fixes). * regmap: rbtree: Fix wrong register marked as in-cache when creating new node (git-fixes). * remove unnecessary WARN_ON_ONCE() (bsc#1214823). * ring-buffer: Avoid softlockup in ring_buffer_resize() (git-fixes). * ring-buffer: Do not attempt to read past "commit" (git-fixes). * ring-buffer: Fix bytes info in per_cpu buffer stats (git-fixes). * ring-buffer: Update "shortest_full" in polling (git-fixes). * s390/cio: fix a memleak in css_alloc_subchannel (git-fixes bsc#1216510). * s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511). * sched/cpuset: Bring back cpuset_mutex (bsc#1215955). * sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (git fixes (sched)). * sched/rt: Fix live lock between select_fallback_rq() and RT push (git fixes (sched)). * sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes (sched)). * scsi: be2iscsi: Add length check when parsing nlattrs (git-fixes). * scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (git-fixes). * scsi: iscsi: Add length check for nlattr payload (git-fixes). * scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (git-fixes). * scsi: iscsi_tcp: restrict to TCP sockets (git-fixes). * scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O (git-fixes). * scsi: mpt3sas: Perform additional retries if doorbell read returns 0 (git- fixes). * scsi: pm8001: Setup IRQs on resume (git-fixes). * scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (git-fixes). * scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (git-fixes). * scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes). * scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (git-fixes). * scsi: qla4xxx: Add length check when parsing nlattrs (git-fixes). * selftests/bpf: Add more tests for check_max_stack_depth bug (git-fixes). * selftests/bpf: Add reproducer for decl_tag in func_proto argument (git- fixes). * selftests/bpf: Add reproducer for decl_tag in func_proto return type (git- fixes). * selftests/bpf: Add selftest for check_stack_max_depth bug (git-fixes). * selftests/bpf: Clean up sys_nanosleep uses (git-fixes). * serial: 8250_port: Check IRQ data before use (git-fixes). * soc: imx8m: Enable OCOTP clock for imx8mm before reading registers (git- fixes). * spi: nxp-fspi: reset the FLSHxCR1 registers (git-fixes). * spi: stm32: add a delay before SPI disable (git-fixes). * spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (git-fixes). * spi: sun6i: reduce DMA RX transfer width to single byte (git-fixes). * thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding (git- fixes). * thunderbolt: Restart XDomain discovery handshake after failure (git-fixes). * thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge (git-fixes). * tracing: Have current_trace inc the trace array ref count (git-fixes). * tracing: Have event inject files inc the trace array ref count (git-fixes). * tracing: Have option files inc the trace array ref count (git-fixes). * tracing: Have tracing_max_latency inc the trace array ref count (git-fixes). * tracing: Increase trace array ref count on enable and filter files (git- fixes). * tracing: Make trace_marker{,_raw} stream-like (git-fixes). * usb: cdnsp: Fixes issue with dequeuing not queued requests (git-fixes). * usb: dwc3: Soft reset phy on probe for host (git-fixes). * usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (git- fixes). * usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes). * usb: hub: Guard against accesses to uninitialized BOS descriptors (git- fixes). * usb: musb: Get the musb_qh poniter after musb_giveback (git-fixes). * usb: musb: Modify the "HWVers" register address (git-fixes). * usb: typec: altmodes/displayport: Signal hpd low when exiting mode (git- fixes). * usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails (git- fixes). * usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes). * vmbus_testing: fix wrong python syntax for integer value comparison (git- fixes). * vringh: do not use vringh_kiov_advance() in vringh_iov_xfer() (git-fixes). * watchdog: iTCO_wdt: No need to stop the timer in probe (git-fixes). * watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (git-fixes). * wifi: cfg80211: Fix 6GHz scan configuration (git-fixes). * wifi: cfg80211: avoid leaking stack data into trace (git-fixes). * wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes). * wifi: iwlwifi: dbg_ini: fix structure packing (git-fixes). * wifi: iwlwifi: mvm: Fix a memory corruption issue (git-fixes). * wifi: mac80211: allow transmitting EAPOL frames with tainted key (git- fixes). * wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (git-fixes). * wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (git- fixes). * wifi: mwifiex: Fix tlv_buf_left calculation (git-fixes). * wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len (git-fixes). * x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (bsc#1213772). * x86/cpu, kvm: Add the Null Selector Clears Base feature (bsc#1213772). * x86/cpu, kvm: Add the SMM_CTL MSR not present feature (bsc#1213772). * x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (bsc#1213772). * x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (bsc#1213772). * x86/cpu: Support AMD Automatic IBRS (bsc#1213772). * x86/mm: Print the encryption features correctly when a paravisor is present (bsc#1206453). * x86/platform/uv: Use alternate source for socket to node data (bsc#1215696). * x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1212649). * x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1212649). * x86/sev: Disable MMIO emulation from user mode (bsc#1212649). * x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). * xen-netback: use default TX queue size for vifs (git-fixes). * xhci: Keep interrupt disabled in initialization until host is running (git- fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4414=1 openSUSE-SLE-15.5-2023-4414=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-4414=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * dlm-kmp-azure-5.14.21-150500.33.23.1 * kernel-azure-debugsource-5.14.21-150500.33.23.1 * reiserfs-kmp-azure-5.14.21-150500.33.23.1 * kselftests-kmp-azure-debuginfo-5.14.21-150500.33.23.1 * gfs2-kmp-azure-5.14.21-150500.33.23.1 * kernel-azure-debuginfo-5.14.21-150500.33.23.1 * cluster-md-kmp-azure-5.14.21-150500.33.23.1 * kernel-azure-optional-debuginfo-5.14.21-150500.33.23.1 * kernel-syms-azure-5.14.21-150500.33.23.1 * cluster-md-kmp-azure-debuginfo-5.14.21-150500.33.23.1 * ocfs2-kmp-azure-5.14.21-150500.33.23.1 * kernel-azure-livepatch-devel-5.14.21-150500.33.23.1 * kernel-azure-devel-5.14.21-150500.33.23.1 * reiserfs-kmp-azure-debuginfo-5.14.21-150500.33.23.1 * kernel-azure-extra-debuginfo-5.14.21-150500.33.23.1 * gfs2-kmp-azure-debuginfo-5.14.21-150500.33.23.1 * kernel-azure-optional-5.14.21-150500.33.23.1 * ocfs2-kmp-azure-debuginfo-5.14.21-150500.33.23.1 * dlm-kmp-azure-debuginfo-5.14.21-150500.33.23.1 * kernel-azure-extra-5.14.21-150500.33.23.1 * kselftests-kmp-azure-5.14.21-150500.33.23.1 * kernel-azure-devel-debuginfo-5.14.21-150500.33.23.1 * openSUSE Leap 15.5 (aarch64 nosrc x86_64) * kernel-azure-5.14.21-150500.33.23.1 * openSUSE Leap 15.5 (x86_64) * kernel-azure-vdso-debuginfo-5.14.21-150500.33.23.1 * kernel-azure-vdso-5.14.21-150500.33.23.1 * openSUSE Leap 15.5 (noarch) * kernel-source-azure-5.14.21-150500.33.23.1 * kernel-devel-azure-5.14.21-150500.33.23.1 * Public Cloud Module 15-SP5 (aarch64 nosrc x86_64) * kernel-azure-5.14.21-150500.33.23.1 * Public Cloud Module 15-SP5 (aarch64 x86_64) * kernel-azure-debugsource-5.14.21-150500.33.23.1 * kernel-azure-devel-5.14.21-150500.33.23.1 * kernel-syms-azure-5.14.21-150500.33.23.1 * kernel-azure-debuginfo-5.14.21-150500.33.23.1 * kernel-azure-devel-debuginfo-5.14.21-150500.33.23.1 * Public Cloud Module 15-SP5 (noarch) * kernel-source-azure-5.14.21-150500.33.23.1 * kernel-devel-azure-5.14.21-150500.33.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2163.html * https://www.suse.com/security/cve/CVE-2023-2860.html * https://www.suse.com/security/cve/CVE-2023-31085.html * https://www.suse.com/security/cve/CVE-2023-34324.html * https://www.suse.com/security/cve/CVE-2023-3777.html * https://www.suse.com/security/cve/CVE-2023-39189.html * https://www.suse.com/security/cve/CVE-2023-39191.html * https://www.suse.com/security/cve/CVE-2023-39193.html * https://www.suse.com/security/cve/CVE-2023-45862.html * https://www.suse.com/security/cve/CVE-2023-46813.html * https://www.suse.com/security/cve/CVE-2023-5178.html * https://bugzilla.suse.com/show_bug.cgi?id=1208788 * https://bugzilla.suse.com/show_bug.cgi?id=1211162 * https://bugzilla.suse.com/show_bug.cgi?id=1211307 * https://bugzilla.suse.com/show_bug.cgi?id=1212423 * https://bugzilla.suse.com/show_bug.cgi?id=1213705 * https://bugzilla.suse.com/show_bug.cgi?id=1213772 * https://bugzilla.suse.com/show_bug.cgi?id=1214754 * https://bugzilla.suse.com/show_bug.cgi?id=1214874 * https://bugzilla.suse.com/show_bug.cgi?id=1215104 * https://bugzilla.suse.com/show_bug.cgi?id=1215523 * https://bugzilla.suse.com/show_bug.cgi?id=1215545 * https://bugzilla.suse.com/show_bug.cgi?id=1215921 * https://bugzilla.suse.com/show_bug.cgi?id=1215955 * https://bugzilla.suse.com/show_bug.cgi?id=1215986 * https://bugzilla.suse.com/show_bug.cgi?id=1216062 * https://bugzilla.suse.com/show_bug.cgi?id=1216202 * https://bugzilla.suse.com/show_bug.cgi?id=1216322 * https://bugzilla.suse.com/show_bug.cgi?id=1216323 * https://bugzilla.suse.com/show_bug.cgi?id=1216324 * https://bugzilla.suse.com/show_bug.cgi?id=1216333 * https://bugzilla.suse.com/show_bug.cgi?id=1216345 * https://bugzilla.suse.com/show_bug.cgi?id=1216512

1 0

SUSE-SU-2023:4415-1: important: Security update for clamav
by maintenance＠opensuse.org 10 Nov '23

10 Nov '23

# Security update for clamav Announcement ID: SUSE-SU-2023:4415-1 Rating: important References: * bsc#1216625 Cross-References: * CVE-2023-40477 CVSS scores: Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for clamav fixes the following issues: * Updated to version 0.103.11: * CVE-2023-40477: Updated libclamunrar dependency to version 6.2.12 (bsc#1216625). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4415=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4415=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4415=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4415=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4415=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4415=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4415=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4415=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4415=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4415=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4415=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4415=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4415=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4415=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4415=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4415=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4415=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4415=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Manager Proxy 4.2 (x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 * SUSE CaaS Platform 4.0 (x86_64) * clamav-0.103.11-150000.3.50.1 * clamav-debuginfo-0.103.11-150000.3.50.1 * libclamav9-debuginfo-0.103.11-150000.3.50.1 * libfreshclam2-debuginfo-0.103.11-150000.3.50.1 * clamav-debugsource-0.103.11-150000.3.50.1 * libclamav9-0.103.11-150000.3.50.1 * libfreshclam2-0.103.11-150000.3.50.1 * clamav-devel-0.103.11-150000.3.50.1 ## References: * https://www.suse.com/security/cve/CVE-2023-40477.html * https://bugzilla.suse.com/show_bug.cgi?id=1216625

1 0

openSUSE-RU-2023:0362-1: moderate: Recommended update for perl-Mojo-IOLoop-ReadWriteProcess
by maintenance＠opensuse.org 10 Nov '23

10 Nov '23

openSUSE Recommended Update: Recommended update for perl-Mojo-IOLoop-ReadWriteProcess ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0362-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for perl-Mojo-IOLoop-ReadWriteProcess fixes the following issues: Updated to 0.34: see /usr/share/doc/packages/perl-Mojo-IOLoop-ReadWriteProcess/Changes + 0.34 2023-09-18T15:47:18Z - Adapt to deprecation of spurt in upstream Mojolicious - Make git work in github workflow - Turn warnings "Sleeping inside locked section" into notes - Avoid warnings about using undefined value as file handle Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-362=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-362=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): perl-Mojo-IOLoop-ReadWriteProcess-0.340.0-bp155.2.6.1 - openSUSE Backports SLE-15-SP4 (noarch): perl-Mojo-IOLoop-ReadWriteProcess-0.340.0-bp154.2.9.1 References:

1 0

openSUSE-SU-2023:0361-1: moderate: Security update for tor
by opensuse-security＠opensuse.org 10 Nov '23

10 Nov '23

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0361-1 Rating: moderate References: #1216873 Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for tor fixes the following issues: - tor 0.4.8.8: * Mitigate an issue when Tor compiled with OpenSSL can crash during handshake with a remote relay. (TROVE-2023-004, boo#1216873) * Regenerate fallback directories generated on November 03, 2023. * Update the geoip files to match the IPFire Location Database, as retrieved on 2023/11/03 * directory authority: Look at the network parameter "maxunmeasuredbw" with the correct spelling * vanguards addon support: Count the conflux linked cell as valid when it is successfully processed. This will quiet a spurious warn in the vanguards addon - tor 0.4.8.7: * Fix an issue that prevented us from pre-building more conflux sets after existing sets had been used - tor 0.4.8.6: * onion service: Fix a reliability issue where services were expiring their introduction points every consensus update. This caused connectivity issues for clients caching the old descriptor and intro points * Log the input and output buffer sizes when we detect a potential compression bomb * Disable multiple BUG warnings of a missing relay identity key when starting an instance of Tor compiled without relay support * When reporting a pseudo-networkstatus as a bridge authority, or answering "ns/purpose/*" controller requests, include accurate published-on dates from our list of router descriptors * Use less frightening language and lower the log-level of our run-time ABI compatibility check message in our Zstd compression subsystem - tor 0.4.8.5: * bugfixes creating log BUG stacktrace - tor 0.4.8.4: * Extend DoS protection to partially opened channels and known relays * Dynamic Proof-Of-Work protocol to thwart flooding DoS attacks against hidden services. Disabled by default, enable via "HiddenServicePoW" in torrc * Implement conflux traffic splitting * Directory authorities and relays now interact properly with directory authorities if they change addresses - tor 0.4.7.14: * bugfix affecting vanguards (onion service), and minor fixes - Enable support for scrypt() Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-361=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-361=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): tor-0.4.8.8-bp155.2.3.1 tor-debuginfo-0.4.8.8-bp155.2.3.1 tor-debugsource-0.4.8.8-bp155.2.3.1 - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): tor-0.4.8.8-bp154.2.15.1 References: https://bugzilla.suse.com/1216873

1 0

openSUSE-SU-2023:0360-1: moderate: Security update for go1.21
by opensuse-security＠opensuse.org 09 Nov '23

09 Nov '23

openSUSE Security Update: Security update for go1.21 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0360-1 Rating: moderate References: #1212475 #1212667 #1212669 #1215084 #1215085 #1215086 #1215087 #1215090 #1215985 #1216109 Cross-References: CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322 CVE-2023-39323 CVE-2023-39325 CVE-2023-44487 CVSS scores: CVE-2023-39318 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2023-39318 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2023-39319 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2023-39319 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2023-39320 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2023-39320 (SUSE): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2023-39321 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-39321 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-39322 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-39322 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-39323 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2023-39323 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-39325 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-39325 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-44487 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-44487 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has two fixes is now available. Description: This update introduces go1.21, including fixes for the following issues: - go1.21.3 (released 2023-10-10) includes a security fix to the net/http package. Refs boo#1212475 go1.21 release tracking CVE-2023-39325 CVE-2023-44487 * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work - go1.21.2 (released 2023-10-05) includes one security fixes to the cmd/go package, as well as bug fixes to the compiler, the go command, the linker, the runtime, and the runtime/metrics package. Refs boo#1212475 go1.21 release tracking CVE-2023-39323 * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build * go#62464 runtime: "traceback did not unwind completely" * go#62478 runtime/metrics: /gc/scan* metrics return zero * go#62505 plugin: variable not initialized properly * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123 * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64 * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta * go#62668 cmd/compile: slow to compile 17,000 line switch statement? * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH - go1.21.1 (released 2023-09-06) includes four security fixes to the cmd/go, crypto/tls, and html/template packages, as well as bug fixes to the compiler, the go command, the linker, the runtime, and the context, crypto/tls, encoding/gob, encoding/xml, go/types, net/http, os, and path/filepath packages. Refs boo#1212475 go1.21 release tracking CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322 * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors * go#61821 runtime/internal/wasitest: TestTCPEcho is racy * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released * go#61909 cmd/compile: internal compiler error: missed typecheck * go#61910 os: ReadDir fails on file systems without File ID support on Windows * go#61927 cmd/distpack: release archives don't include directory members * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20 * go#61932 go/types, types2: index out of range panic in Checker.arguments * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0 * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows * go#61967 crypto/tls: add GODEBUG to control max RSA key size * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l' * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet) * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic * go#62051 encoding/xml: incompatible changes in the Go 1.21.0 * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values * go#62071 cmd/api: make non-importable * go#62140 cmd/link: slice bounds out of range * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory * go#62154 encoding/gob: panic decoding into local type, received remote type * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond * go#62204 maps: segfault in Clone * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory - go1.21 (released 2023-08-08) is a major release of Go. go1.21.x minor releases will be provided through August 2024. https://github.com/golang/go/wiki/Go-Release-Cycle go1.21 arrives six months after go1.20. Most of its changes are in the implementation of the toolchain, runtime, and libraries. As always, the release maintains the Go 1 promise of compatibility. We expect almost all Go programs to continue to compile and run as before. Refs boo#1212475 go1.21 release tracking * Go 1.21 introduces a small change to the numbering of releases. In the past, we used Go 1.N to refer to both the overall Go language version and release family as well as the first release in that family. Starting in Go 1.21, the first release is now Go 1.N.0. Today we are releasing both the Go 1.21 language and its initial implementation, the Go 1.21.0 release. These notes refer to "Go 1.21"; tools like go version will report "go1.21.0" (until you upgrade to Go 1.21.1). See "Go versions" in the "Go Toolchains" documentation for details about the new version numbering. * Language change: Go 1.21 adds three new built-ins to the language. * Language change: The new functions min and max compute the smallest (or largest, for max) value of a fixed number of given arguments. See the language spec for details. * Language change: The new function clear deletes all elements from a map or zeroes all elements of a slice. See the language spec for details. * Package initialization order is now specified more precisely. This may change the behavior of some programs that rely on a specific initialization ordering that was not expressed by explicit imports. The behavior of such programs was not well defined by the spec in past releases. The new rule provides an unambiguous definition. * Multiple improvements that increase the power and precision of type inference have been made. * A (possibly partially instantiated generic) function may now be called with arguments that are themselves (possibly partially instantiated) generic functions. * Type inference now also considers methods when a value is assigned to an interface: type arguments for type parameters used in method signatures may be inferred from the corresponding parameter types of matching methods. * Similarly, since a type argument must implement all the methods of its corresponding constraint, the methods of the type argument and constraint are matched which may lead to the inference of additional type arguments. * If multiple untyped constant arguments of different kinds (such as an untyped int and an untyped floating-point constant) are passed to parameters with the same (not otherwise specified) type parameter type, instead of an error, now type inference determines the type using the same approach as an operator with untyped constant operands. This change brings the types inferred from untyped constant arguments in line with the types of constant expressions. * Type inference is now precise when matching corresponding types in assignments * The description of type inference in the language spec has been clarified. * Go 1.21 includes a preview of a language change we are considering for a future version of Go: making for loop variables per-iteration instead of per-loop, to avoid accidental sharing bugs. For details about how to try that language change, see the LoopvarExperiment wiki page. * Go 1.21 now defines that if a goroutine is panicking and recover was called directly by a deferred function, the return value of recover is guaranteed not to be nil. To ensure this, calling panic with a nil interface value (or an untyped nil) causes a run-time panic of type *runtime.PanicNilError. To support programs written for older versions of Go, nil panics can be re-enabled by setting GODEBUG=panicnil=1. This setting is enabled automatically when compiling a program whose main package is in a module with that declares go 1.20 or earlier. * Go 1.21 adds improved support for backwards compatibility and forwards compatibility in the Go toolchain. * To improve backwards compatibility, Go 1.21 formalizes Go's use of the GODEBUG environment variable to control the default behavior for changes that are non-breaking according to the compatibility policy but nonetheless may cause existing programs to break. (For example, programs that depend on buggy behavior may break when a bug is fixed, but bug fixes are not considered breaking changes.) When Go must make this kind of behavior change, it now chooses between the old and new behavior based on the go line in the workspace's go.work file or else the main module's go.mod file. Upgrading to a new Go toolchain but leaving the go line set to its original (older) Go version preserves the behavior of the older toolchain. With this compatibility support, the latest Go toolchain should always be the best, most secure, implementation of an older version of Go. See "Go, Backwards Compatibility, and GODEBUG" for details. * To improve forwards compatibility, Go 1.21 now reads the go line in a go.work or go.mod file as a strict minimum requirement: go 1.21.0 means that the workspace or module cannot be used with Go 1.20 or with Go 1.21rc1. This allows projects that depend on fixes made in later versions of Go to ensure that they are not used with earlier versions. It also gives better error reporting for projects that make use of new Go features: when the problem is that a newer Go version is needed, that problem is reported clearly, instead of attempting to build the code and instead printing errors about unresolved imports or syntax errors. * To make these new stricter version requirements easier to manage, the go command can now invoke not just the toolchain bundled in its own release but also other Go toolchain versions found in the PATH or downloaded on demand. If a go.mod or go.work go line declares a minimum requirement on a newer version of Go, the go command will find and run that version automatically. The new toolchain directive sets a suggested minimum toolchain to use, which may be newer than the strict go minimum. See "Go Toolchains" for details. * go command: The -pgo build flag now defaults to -pgo=auto, and the restriction of specifying a single main package on the command line is now removed. If a file named default.pgo is present in the main package's directory, the go command will use it to enable profile-guided optimization for building the corresponding program. * go command: The -C dir flag must now be the first flag on the command-line when used. * go command: The new go test option -fullpath prints full path names in test log messages, rather than just base names. * go command: The go test -c flag now supports writing test binaries for multiple packages, each to pkg.test where pkg is the package name. It is an error if more than one test package being compiled has a given package name.] * go command: The go test -o flag now accepts a directory argument, in which case test binaries are written to that directory instead of the current directory. * cgo: In files that import "C", the Go toolchain now correctly reports errors for attempts to declare Go methods on C types. * runtime: When printing very deep stacks, the runtime now prints the first 50 (innermost) frames followed by the bottom 50 (outermost) frames, rather than just printing the first 100 frames. This makes it easier to see how deeply recursive stacks started, and is especially valuable for debugging stack overflows. * runtime: On Linux platforms that support transparent huge pages, the Go runtime now manages which parts of the heap may be backed by huge pages more explicitly. This leads to better utilization of memory: small heaps should see less memory used (up to 50% in pathological cases) while large heaps should see fewer broken huge pages for dense parts of the heap, improving CPU usage and latency by up to 1%. * runtime: As a result of runtime-internal garbage collection tuning, applications may see up to a 40% reduction in application tail latency and a small decrease in memory use. Some applications may also observe a small loss in throughput. The memory use decrease should be proportional to the loss in throughput, such that the previous release's throughput/memory tradeoff may be recovered (with little change to latency) by increasing GOGC and/or GOMEMLIMIT slightly. * runtime: Calls from C to Go on threads created in C require some setup to prepare for Go execution. On Unix platforms, this setup is now preserved across multiple calls from the same thread. This significantly reduces the overhead of subsequent C to Go calls from ~1-3 microseconds per call to ~100-200 nanoseconds per call. * compiler: Profile-guide optimization (PGO), added as a preview in Go 1.20, is now ready for general use. PGO enables additional optimizations on code identified as hot by profiles of production workloads. As mentioned in the Go command section, PGO is enabled by default for binaries that contain a default.pgo profile in the main package directory. Performance improvements vary depending on application behavior, with most programs from a representative set of Go programs seeing between 2 and 7% improvement from enabling PGO. See the PGO user guide for detailed documentation. * compiler: PGO builds can now devirtualize some interface method calls, adding a concrete call to the most common callee. This enables further optimization, such as inlining the callee. * compiler: Go 1.21 improves build speed by up to 6%, largely thanks to building the compiler itself with PGO. * assembler: On amd64, frameless nosplit assembly functions are no longer automatically marked as NOFRAME. Instead, the NOFRAME attribute must be explicitly specified if desired, which is already the behavior on other architectures supporting frame pointers. With this, the runtime now maintains the frame pointers for stack transitions. * assembler: The verifier that checks for incorrect uses of R15 when dynamic linking on amd64 has been improved. * linker: On windows/amd64, the linker (with help from the compiler) now emits SEH unwinding data by default, which improves the integration of Go applications with Windows debuggers and other tools. * linker: In Go 1.21 the linker (with help from the compiler) is now capable of deleting dead (unreferenced) global map variables, if the number of entries in the variable initializer is sufficiently large, and if the initializer expressions are side-effect free. * core library: The new log/slog package provides structured logging with levels. Structured logging emits key-value pairs to enable fast, accurate processing of large amounts of log data. The package supports integration with popular log analysis tools and services. * core library: The new testing/slogtest package can help to validate slog.Handler implementations. * core library: The new slices package provides many common operations on slices, using generic functions that work with slices of any element type. * core library: The new maps package provides several common operations on maps, using generic functions that work with maps of any key or element type. * core library: The new cmp package defines the type constraint Ordered and two new generic functions Less and Compare that are useful with ordered types. * Minor changes to the library: As always, there are various minor changes and updates to the library, made with the Go 1 promise of compatibility in mind. There are also various performance improvements, not enumerated here. * archive/tar: The implementation of the io/fs.FileInfo interface returned by Header.FileInfo now implements a String method that calls io/fs.FormatFileInfo. * archive/zip: The implementation of the io/fs.FileInfo interface returned by FileHeader.FileInfo now implements a String method that calls io/fs.FormatFileInfo. * archive/zip: The implementation of the io/fs.DirEntry interface returned by the io/fs.ReadDirFile.ReadDir method of the io/fs.File returned by Reader.Open now implements a String method that calls io/fs.FormatDirEntry. * bytes: The Buffer type has two new methods: Available and AvailableBuffer. These may be used along with the Write method to append directly to the Buffer. * context: The new WithoutCancel function returns a copy of a context that is not canceled when the original context is canceled. * context: The new WithDeadlineCause and WithTimeoutCause functions provide a way to set a context cancellation cause when a deadline or timer expires. The cause may be retrieved with the Cause function. * context: The new AfterFunc function registers a function to run after a context has been cancelled. * context: An optimization means that the results of calling Background and TODO and converting them to a shared type can be considered equal. In previous releases they were always different. Comparing Context values for equality has never been well-defined, so this is not considered to be an incompatible change. * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute in constant time. * crypto/elliptic: All of the Curve methods have been deprecated, along with GenerateKey, Marshal, and Unmarshal. For ECDH operations, the new crypto/ecdh package should be used instead. For lower-level operations, use third-party modules such as filippo.io/nistec. * crypto/rand: The crypto/rand package now uses the getrandom system call on NetBSD 10.0 and later. * crypto/rsa: The performance of private RSA operations (decryption and signing) is now better than Go 1.19 for GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20. * crypto/rsa: Due to the addition of private fields to PrecomputedValues, PrivateKey.Precompute must be called for optimal performance even if deserializing (for example from JSON) a previously-precomputed private key. * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in constant time. * crypto/rsa: The GenerateMultiPrimeKey function and the PrecomputedValues.CRTValues field have been deprecated. PrecomputedValues.CRTValues will still be populated when PrivateKey.Precompute is called, but the values will not be used during decryption operations. * crypto/sha256: SHA-224 and SHA-256 operations now use native instructions when available when GOARCH=amd64, providing a performance improvement on the order of 3-4x. * crypto/tls: Servers now skip verifying client certificates (including not running Config.VerifyPeerCertificate) for resumed connections, besides checking the expiration time. This makes session tickets larger when client certificates are in use. Clients were already skipping verification on resumption, but now check the expiration time even if Config.InsecureSkipVerify is set. * crypto/tls: Applications can now control the content of session tickets. * crypto/tls: The new SessionState type describes a resumable session. * crypto/tls: The SessionState.Bytes method and ParseSessionState function serialize and deserialize a SessionState. * crypto/tls: The Config.WrapSession and Config.UnwrapSession hooks convert a SessionState to and from a ticket on the server side. * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket methods provide a default implementation of WrapSession and UnwrapSession. * crypto/tls: The ClientSessionState.ResumptionState method and NewResumptionState function may be used by a ClientSessionCache implementation to store and resume sessions on the client side. * crypto/tls: To reduce the potential for session tickets to be used as a tracking mechanism across connections, the server now issues new tickets on every resumption (if they are supported and not disabled) and tickets don't bear an identifier for the key that encrypted them anymore. If passing a large number of keys to Conn.SetSessionTicketKeys, this might lead to a noticeable performance cost. * crypto/tls: Both clients and servers now implement the Extended Master Secret extension (RFC 7627). The deprecation of ConnectionState.TLSUnique has been reverted, and is now set for resumed connections that support Extended Master Secret. * crypto/tls: The new QUICConn type provides support for QUIC implementations, including 0-RTT support. Note that this is not itself a QUIC implementation, and 0-RTT is still not supported in TLS. * crypto/tls: The new VersionName function returns the name for a TLS version number. * crypto/tls: The TLS alert codes sent from the server for client authentication failures have been improved. Previously, these failures always resulted in a "bad certificate" alert. Now, certain failures will result in more appropriate alert codes, as defined by RFC 5246 and RFC 8446: * crypto/tls: For TLS 1.3 connections, if the server is configured to require client authentication using RequireAnyClientCert or RequireAndVerifyClientCert, and the client does not provide any certificate, the server will now return the "certificate required" alert. * crypto/tls: If the client provides a certificate that is not signed by the set of trusted certificate authorities configured on the server, the server will return the "unknown certificate authority" alert. * crypto/tls: If the client provides a certificate that is either expired or not yet valid, the server will return the "expired certificate" alert. * crypto/tls: In all other scenarios related to client authentication failures, the server still returns "bad certificate". * crypto/x509: RevocationList.RevokedCertificates has been deprecated and replaced with the new RevokedCertificateEntries field, which is a slice of RevocationListEntry. RevocationListEntry contains all of the fields in pkix.RevokedCertificate, as well as the revocation reason code. * crypto/x509: Name constraints are now correctly enforced on non-leaf certificates, and not on the certificates where they are expressed. * debug/elf: The new File.DynValue method may be used to retrieve the numeric values listed with a given dynamic tag. * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic tag are now defined with type DynFlag1. These tags have names starting with DF_1. * debug/elf: The package now defines the constant COMPRESS_ZSTD. * debug/elf: The package now defines the constant R_PPC64_REL24_P9NOTOC. * debug/pe: Attempts to read from a section containing uninitialized data using Section.Data or the reader returned by Section.Open now return an error. * embed: The io/fs.File returned by FS.Open now has a ReadAt method that implements io.ReaderAt. * embed: Calling FS.Open.Stat will return a type that now implements a String method that calls io/fs.FormatFileInfo. * errors: The new ErrUnsupported error provides a standardized way to indicate that a requested operation may not be performed because it is unsupported. For example, a call to os.Link when using a file system that does not support hard links. * flag: The new BoolFunc function and FlagSet.BoolFunc method define a flag that does not require an argument and calls a function when the flag is used. This is similar to Func but for a boolean flag. * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.) will panic if Set has already been called on a flag with the same name. This change is intended to detect cases where changes in initialization order cause flag operations to occur in a different order than expected. In many cases the fix to this problem is to introduce a explicit package dependence to correctly order the definition before any Set operations. * go/ast: The new IsGenerated predicate reports whether a file syntax tree contains the special comment that conventionally indicates that the file was generated by a tool. * go/ast: The new File.GoVersion field records the minimum Go version required by any //go:build or // +build directives. * go/build: The package now parses build directives (comments that start with //go:) in file headers (before the package declaration). These directives are available in the new Package fields Directives, TestDirectives, and XTestDirectives. * go/build/constraint: The new GoVersion function returns the minimum Go version implied by a build expression. * go/token: The new File.Lines method returns the file's line-number table in the same form as accepted by File.SetLines. * go/types: The new Package.GoVersion method returns the Go language version used to check the package. * hash/maphash: The hash/maphash package now has a pure Go implementation, selectable with the purego build tag. * html/template: The new error ErrJSTemplate is returned when an action appears in a JavaScript template literal. Previously an unexported error was returned. * io/fs: The new FormatFileInfo function returns a formatted version of a FileInfo. The new FormatDirEntry function returns a formatted version of a DirEntry. The implementation of DirEntry returned by ReadDir now implements a String method that calls FormatDirEntry, and the same is true for the DirEntry value passed to WalkDirFunc. * math/big: The new Int.Float64 method returns the nearest floating-point value to a multi-precision integer, along with an indication of any rounding that occurred. * net: On Linux, the net package can now use Multipath TCP when the kernel supports it. It is not used by default. To use Multipath TCP when available on a client, call the Dialer.SetMultipathTCP method before calling the Dialer.Dial or Dialer.DialContext methods. To use Multipath TCP when available on a server, call the ListenConfig.SetMultipathTCP method before calling the ListenConfig.Listen method. Specify the network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP is not supported by the kernel or the remote host, the connection will silently fall back to TCP. To test whether a particular connection is using Multipath TCP, use the TCPConn.MultipathTCP method. * net: In a future Go release we may enable Multipath TCP by default on systems that support it. * net/http: The new ResponseController.EnableFullDuplex method allows server handlers to concurrently read from an HTTP/1 request body while writing the response. Normally, the HTTP/1 server automatically consumes any remaining request body before starting to write the response, to avoid deadlocking clients which attempt to write a complete request before reading the response. The EnableFullDuplex method disables this behavior. * net/http: The new ErrSchemeMismatch error is returned by Client and Transport when the server responds to an HTTPS request with an HTTP response. * net/http: The net/http package now supports errors.ErrUnsupported, in that the expression errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will return true. * os: Programs may now pass an empty time.Time value to the Chtimes function to leave either the access time or the modification time unchanged. * os: On Windows the File.Chdir method now changes the current directory to the file, rather than always returning an error. * os: On Unix systems, if a non-blocking descriptor is passed to NewFile, calling the File.Fd method will now return a non-blocking descriptor. Previously the descriptor was converted to blocking mode. * os: On Windows calling Truncate on a non-existent file used to create an empty file. It now returns an error indicating that the file does not exist. * os: On Windows calling TempDir now uses GetTempPath2W when available, instead of GetTempPathW. The new behavior is a security hardening measure that prevents temporary files created by processes running as SYSTEM to be accessed by non-SYSTEM processes. * os: On Windows the os package now supports working with files whose names, stored as UTF-16, can't be represented as valid UTF-8. * os: On Windows Lstat now resolves symbolic links for paths ending with a path separator, consistent with its behavior on POSIX platforms. * os: The implementation of the io/fs.DirEntry interface returned by the ReadDir function and the File.ReadDir method now implements a String method that calls io/fs.FormatDirEntry. * os: The implementation of the io/fs.FS interface returned by the DirFS function now implements the io/fs.ReadFileFS and the io/fs.ReadDirFS interfaces. * path/filepath: The implementation of the io/fs.DirEntry interface passed to the function argument of WalkDir now implements a String method that calls io/fs.FormatDirEntry. * reflect: In Go 1.21, ValueOf no longer forces its argument to be allocated on the heap, allowing a Value's content to be allocated on the stack. Most operations on a Value also allow the underlying value to be stack allocated. * reflect: The new Value method Value.Clear clears the contents of a map or zeros the contents of a slice. This corresponds to the new clear built-in added to the language. * reflect: The SliceHeader and StringHeader types are now deprecated. In new code prefer unsafe.Slice, unsafe.SliceData, unsafe.String, or unsafe.StringData. * regexp: Regexp now defines MarshalText and UnmarshalText methods. These implement encoding.TextMarshaler and encoding.TextUnmarshaler and will be used by packages such as encoding/json. * runtime: Textual stack traces produced by Go programs, such as those produced when crashing, calling runtime.Stack, or collecting a goroutine profile with debug=2, now include the IDs of the goroutines that created each goroutine in the stack trace. * runtime: Crashing Go applications can now opt-in to Windows Error Reporting (WER) by setting the environment variable GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the crash. Other than enabling WER, the runtime will behave as with GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is ignored. * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer passing rules, is no longer available as a debug option. Instead, it is available as an experiment using GOEXPERIMENT=cgocheck2. In particular this means that this mode has to be selected at build time instead of startup time. * runtime: GODEBUG=cgocheck=1 is still available (and is still the default). * runtime: A new type Pinner has been added to the runtime package. Pinners may be used to "pin" Go memory such that it may be used more freely by non-Go code. For instance, passing Go values that reference pinned Go memory to C code is now allowed. Previously, passing any such nested reference was disallowed by the cgo pointer passing rules. See the docs for more details. * runtime/metrics: A few previously-internal GC metrics, such as live heap size, are now available. GOGC and GOMEMLIMIT are also now available as metrics. * runtime/trace: Collecting traces on amd64 and arm64 now incurs a substantially smaller CPU cost: up to a 10x improvement over the previous release. * runtime/trace: Traces now contain explicit stop-the-world events for every reason the Go runtime might stop-the-world, not just garbage collection. * sync: The new OnceFunc, OnceValue, and OnceValues functions capture a common use of Once to lazily initialize a value on first use. * syscall: On Windows the Fchdir function now changes the current directory to its argument, rather than always returning an error. * syscall: On FreeBSD SysProcAttr has a new field Jail that may be used to put the newly created process in a jailed environment. * syscall: On Windows the syscall package now supports working with files whose names, stored as UTF-16, can't be represented as valid UTF-8. The UTF16ToString and UTF16FromString functions now convert between UTF-16 data and WTF-8 strings. This is backward compatible as WTF-8 is a superset of the UTF-8 format that was used in earlier releases. * syscall: Several error values match the new errors.ErrUnsupported, such that errors.Is(err, errors.ErrUnsupported) returns true. ENOSYS ENOTSUP EOPNOTSUPP EPLAN9 (Plan 9 only) ERROR_CALL_NOT_IMPLEMENTED (Windows only) ERROR_NOT_SUPPORTED (Windows only) EWINDOWS (Windows only) * testing: The new -test.fullpath option will print full path names in test log messages, rather than just base names. * testing: The new Testing function reports whether the program is a test created by go test. * testing/fstest: Calling Open.Stat will return a type that now implements a String method that calls io/fs.FormatFileInfo. * unicode: The unicode package and associated support throughout the system has been upgraded to Unicode 15.0.0. * Darwin port: As announced in the Go 1.20 release notes, Go 1.21 requires macOS 10.15 Catalina or later; support for previous versions has been discontinued. * Windows port: As announced in the Go 1.20 release notes, Go 1.21 requires at least Windows 10 or Windows Server 2016; support for previous versions has been discontinued. * WebAssembly port: The new go:wasmimport directive can now be used in Go programs to import functions from the WebAssembly host. * WebAssembly port: The Go scheduler now interacts much more efficiently with the JavaScript event loop, especially in applications that block frequently on asynchronous events. * WebAssembly System Interface port: Go 1.21 adds an experimental port to the WebAssembly System Interface (WASI), Preview 1 (GOOS=wasip1, GOARCH=wasm). * WebAssembly System Interface port: As a result of the addition of the new GOOS value "wasip1", Go files named *_wasip1.go will now be ignored by Go tools except when that GOOS value is being used. If you have existing filenames matching that pattern, you will need to rename them. * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates PC-relative instructions, prefixed instructions, and other new Power10 instructions. On AIX, GOPPC64=power10 generates Power10 instructions, but does not generate PC-relative instructions. * ppc64/ppc64le port: When building position-independent binaries for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect reduced binary sizes in most cases, in some cases 3.5%. Position-independent binaries are built for ppc64le with the following -buildmode values: c-archive, c-shared, shared, pie, plugin. * loong64 port: The linux/loong64 port now supports -buildmode=c-archive, -buildmode=c-shared and -buildmode=pie. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2023-360=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): go-1.21-41.1 go-doc-1.21-41.1 go1.21-1.21.3-2.1 go1.21-doc-1.21.3-2.1 References: https://www.suse.com/security/cve/CVE-2023-39318.html https://www.suse.com/security/cve/CVE-2023-39319.html https://www.suse.com/security/cve/CVE-2023-39320.html https://www.suse.com/security/cve/CVE-2023-39321.html https://www.suse.com/security/cve/CVE-2023-39322.html https://www.suse.com/security/cve/CVE-2023-39323.html https://www.suse.com/security/cve/CVE-2023-39325.html https://www.suse.com/security/cve/CVE-2023-44487.html https://bugzilla.suse.com/1212475 https://bugzilla.suse.com/1212667 https://bugzilla.suse.com/1212669 https://bugzilla.suse.com/1215084 https://bugzilla.suse.com/1215085 https://bugzilla.suse.com/1215086 https://bugzilla.suse.com/1215087 https://bugzilla.suse.com/1215090 https://bugzilla.suse.com/1215985 https://bugzilla.suse.com/1216109

1 0

SUSE-RU-2023:4385-1: important: Maintenance update for SUSE Manager 4.3: Server, Proxy and Retail Branch Server
by maintenance＠opensuse.org 09 Nov '23

09 Nov '23

# Maintenance update for SUSE Manager 4.3: Server, Proxy and Retail Branch Server Announcement ID: SUSE-RU-2023:4385-1 Rating: important References: * bsc#1204270 * bsc#1211047 * bsc#1211145 * bsc#1211270 * bsc#1211912 * bsc#1212168 * bsc#1212507 * bsc#1213132 * bsc#1213376 * bsc#1213469 * bsc#1213680 * bsc#1213689 * bsc#1214041 * bsc#1214121 * bsc#1214463 * bsc#1214553 * bsc#1214746 * bsc#1215027 * bsc#1215120 * bsc#1215412 * bsc#1215514 * bsc#1216411 * bsc#1216661 * jsc#MSQA-706 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Proxy 4.3 Module 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 An update that contains one feature and has 23 fixes can now be installed. ## Recommended update for SUSE Manager Proxy and Retail Branch Server 4.3 ### Description: This update fixes the following issues: apache2-mod_wsgi: * Make sure that the keyword wsgi is preserved in the APACHE_MODULES variable when updating apache2-mod_wsgi (bsc#1216411) spacecmd: * Version 4.3.24-1 * Change default scheduler from (none) to (system) spacewalk-backend: * Version 4.3.24-1 * Only show missing /root/.curlrc error with log_level = 5 (bsc#1212507) spacewalk-client-tools: * Version 4.3.16-1 * Update translation strings spacewalk-web: * Version 4.3.35-1 * Add missing translation wrappers for Salt formula catalog * Shows a notification when an update for SUSE Manager is available How to apply this update: 1. Log in as root user to the SUSE Manager Proxy or Retail Branch Server. 2. Stop the proxy service: `spacewalk-proxy stop` 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: `spacewalk-proxy start` ## Recommended update for SUSE Manager Server 4.3 ### Description: This update fixes the following issues: billing-data-service: * Version 4.3.1-1 * Align the package version with the SUSE Manager major version 4.3 cobbler: * Buildiso: copy grub into ESP using mtools to allow execution in containers * Add mtools as dependency for Cobbler susemanager-docs_en: * Removed technical preview statement about Ansible in Administration Guide (bsc#1216661) * Replace the "Quick Start: Public Cloud" with "Public Cloud Guide" in Specialized Guides * Provide the right base operating system service pack version to be used for SUSE Manager Proxy (bsc#1213469) * Add Debian 12 as supported client in Client Configuration Guide smdba: * Version 1.7.12 * re-use configured max_connection value * keep previous selected value for SSD configuration spacecmd: * Version 4.3.24-1 * Change default scheduler from (none) to (system) spacewalk-backend: * Version 4.3.24-1 * Only show missing /root/.curlrc error with log_level = 5 (bsc#1212507) spacewalk-client-tools: * Version 4.3.16-1 * Update translation strings spacewalk-config: * Version 4.3.12-1 * Handle spaces in /ks/dist/ file names (bsc#1213680) spacewalk-java: * Version 4.3.68-1 * Sync GPG properties on each build in CLM (bsc#1213689) * Change list endpoints in saltkey namespace to accept GET requests instead of POST (bsc#1214463) * Respect user email preferences when sending 'user creation' emails (bsc#1214553) * Fix server error when visiting the notifications page * Fixed the value of the advisory release for Ubuntu erratas * Restart the bunch from where it was interrupted when rescheduling * Moved the Ubuntu errata processing in its own separate taskomatic task (bsc#1211145) * Stop the taskomatic bunch execution if it was not possible to execute one of the tasks * Add detection of Debian 12 * Implement different way to copy data for SystemPackageUpdate report database table (bsc#1211912) * Avoid SCC credentials check if `server.susemanager.fromdir` is set (bsc#1211270) * Fix bug about listing Ansible inventories (bsc#1213132) * Remove SUSE Manager proxy 4.2 product channel for PAYG instance (bsc#1215412) * Show a notification when an update for SUSE Manager is available * Optimize memory usage in UbuntuErrataManager * Handle spaces in /ks/dist/ file names (bsc#1213680) * Change default scheduler from (none) to (system) * Set user for package list refresh action if possible * Fix recurring state execution not using the correct order (bsc#1215027) * Ignore mandatory channels results that don't match list of channels (bsc#1204270) * Token cleanup process removing invalid tokens using sql query (bsc#1213376) * Fix failed actions rescheduling (bsc#1214121) * Fix unscheduling actions when the trigger name changed after retry (bsc#1214121) * Improve Taskomatic by removing invalid triggers before starting and enhancing logs * Revert action executor fix that was intended to prevent blocking of Taskomatic threads (bsc#1214121) * Extend success message after adding monitoring property (bsc#1212168) spacewalk-utils: * Version 4.3.18-1 * Add Debian 12 repositories spacewalk-web: * Version 4.3.35-1 * Add missing translation wrappers for Salt formula catalog * Shows a notification when an update for SUSE Manager is available susemanager: * Version 4.3.32-1 * Add bootstrap repository definition for OES2023.4 (bsc#1215514) * Add bootstrap repository definitions for Debian 12 * Fix SLES 15 for SAP not being listed in mgr-create-bootstrap-repo (bsc#1215120) * Add missing PKGLIST15_TRAD for SLES 15 SAP mgr-create-bootstrap-repo entries (bsc#1215120) * Fix possible permission issues with database migration script (bsc#1214746) susemanager-docs_en: * Added comment about SCC subscription to Administration Guide (bsc#1211270) * Added Debian 12 as a technology preview client in Client Configuration Guide * Fixed over-long table issue in openSCAP chapter in Administration Guide * Update Hardware Requirements section about disk space for /var/spacewalk in the Installation and Upgrade Guide * Documented disabling automatic channel selection for cloned channels in Content Lifecycle Management chapter of Administration Guide (bsc#1211047) * Fixed broken links and references in the Image building file in * Updated autoinstallation chapter in Client Configuration Guide about buildiso command in the context of Cobbler * Removed end-of-life openSUSE Leap clients from the support matrix in the Client Configuration Guide * Added note about Jinja templating for configuration files management on Salt Clients in Client Configuration Guide * Fixed DHCP example for Cobbler autoinstallation and added one per architecture in Client Configuration Guide (bsc#1214041) Guide (bsc#1213469) susemanager-schema: * Version 4.3.21-1 * Add index on server needed cache to improve performance for some queries (bsc#1211912) * Moved the Ubuntu errata processing in its own separate taskomatic task (bsc#1211145) susemanager-sls: * Version 4.3.36-1 * Do not install instance-flavor-check tool on openSUSE susemanager-sync-data: * Version 4.3.13-1 * Add OES2023.4 (bsc#1215514) * Add Debian 12 amd64 How to apply this update: 1. Log in as root user to the SUSE Manager Server. 2. Stop the Spacewalk service: `spacewalk-service stop` 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: `spacewalk-service start` ## Recommended update for apache2-mod_wsgi ### Description: This update fixes the following issues: apache2-mod_wsgi: * Make sure that the keyword wsgi is preserved in the APACHE_MODULES variable when updating apache2-mod_wsgi (bsc#1216411) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2023-4385=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2023-4385=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4385=1 openSUSE-SLE-15.4-2023-4385=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4385=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-4385=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-4385=1 ## Package List: * SUSE Manager Proxy 4.3 Module 4.3 (x86_64) * apache2-mod_wsgi-debugsource-4.7.1-150400.3.7.7 * apache2-mod_wsgi-debuginfo-4.7.1-150400.3.7.7 * apache2-mod_wsgi-4.7.1-150400.3.7.7 * SUSE Manager Proxy 4.3 Module 4.3 (noarch) * spacewalk-backend-4.3.24-150400.3.30.16 * python3-spacewalk-client-setup-4.3.16-150400.3.18.13 * spacewalk-base-minimal-4.3.35-150400.3.33.14 * spacewalk-check-4.3.16-150400.3.18.13 * python3-spacewalk-check-4.3.16-150400.3.18.13 * spacewalk-base-minimal-config-4.3.35-150400.3.33.14 * python3-spacewalk-client-tools-4.3.16-150400.3.18.13 * spacewalk-client-setup-4.3.16-150400.3.18.13 * spacewalk-client-tools-4.3.16-150400.3.18.13 * spacecmd-4.3.24-150400.3.27.10 * SUSE Manager Server 4.3 Module 4.3 (noarch) * susemanager-schema-utility-4.3.21-150400.3.27.11 * susemanager-docs_en-pdf-4.3-150400.9.47.1 * spacewalk-backend-iss-export-4.3.24-150400.3.30.16 * uyuni-config-modules-4.3.36-150400.3.34.6 * spacewalk-backend-sql-4.3.24-150400.3.30.16 * spacewalk-base-minimal-4.3.35-150400.3.33.14 * spacewalk-java-config-4.3.68-150400.3.66.14 * spacewalk-backend-iss-4.3.24-150400.3.30.16 * spacewalk-backend-sql-postgresql-4.3.24-150400.3.30.16 * cobbler-3.3.3-150400.5.36.10 * spacewalk-java-lib-4.3.68-150400.3.66.14 * spacewalk-utils-4.3.18-150400.3.18.10 * susemanager-docs_en-4.3-150400.9.47.1 * spacewalk-java-postgresql-4.3.68-150400.3.66.14 * spacewalk-backend-server-4.3.24-150400.3.30.16 * spacewalk-backend-config-files-tool-4.3.24-150400.3.30.16 * spacewalk-base-minimal-config-4.3.35-150400.3.33.14 * susemanager-schema-4.3.21-150400.3.27.11 * spacewalk-html-4.3.35-150400.3.33.14 * spacewalk-client-tools-4.3.16-150400.3.18.13 * spacewalk-backend-package-push-server-4.3.24-150400.3.30.16 * spacewalk-backend-applet-4.3.24-150400.3.30.16 * spacewalk-taskomatic-4.3.68-150400.3.66.14 * billing-data-service-4.3.1-150400.10.9.10 * spacewalk-backend-tools-4.3.24-150400.3.30.16 * susemanager-sls-4.3.36-150400.3.34.6 * spacewalk-backend-app-4.3.24-150400.3.30.16 * spacewalk-java-4.3.68-150400.3.66.14 * spacewalk-backend-xmlrpc-4.3.24-150400.3.30.16 * spacewalk-backend-xml-export-libs-4.3.24-150400.3.30.16 * spacecmd-4.3.24-150400.3.27.10 * spacewalk-backend-4.3.24-150400.3.30.16 * spacewalk-utils-extras-4.3.18-150400.3.18.10 * spacewalk-base-4.3.35-150400.3.33.14 * spacewalk-config-4.3.12-150400.3.12.10 * spacewalk-backend-config-files-4.3.24-150400.3.30.16 * susemanager-sync-data-4.3.13-150400.3.14.10 * python3-spacewalk-client-tools-4.3.16-150400.3.18.13 * spacewalk-backend-config-files-common-4.3.24-150400.3.30.16 * SUSE Manager Server 4.3 Module 4.3 (ppc64le s390x x86_64) * susemanager-4.3.32-150400.3.39.6 * susemanager-tools-4.3.32-150400.3.39.6 * smdba-1.7.12-0.150400.4.9.10 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * apache2-mod_wsgi-debugsource-4.7.1-150400.3.7.7 * apache2-mod_wsgi-debuginfo-4.7.1-150400.3.7.7 * apache2-mod_wsgi-4.7.1-150400.3.7.7 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-mod_wsgi-debugsource-4.7.1-150400.3.7.7 * apache2-mod_wsgi-debuginfo-4.7.1-150400.3.7.7 * apache2-mod_wsgi-4.7.1-150400.3.7.7 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-mod_wsgi-debugsource-4.7.1-150400.3.7.7 * apache2-mod_wsgi-debuginfo-4.7.1-150400.3.7.7 * apache2-mod_wsgi-4.7.1-150400.3.7.7 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-mod_wsgi-debugsource-4.7.1-150400.3.7.7 * apache2-mod_wsgi-debuginfo-4.7.1-150400.3.7.7 * apache2-mod_wsgi-4.7.1-150400.3.7.7 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1204270 * https://bugzilla.suse.com/show_bug.cgi?id=1211047 * https://bugzilla.suse.com/show_bug.cgi?id=1211145 * https://bugzilla.suse.com/show_bug.cgi?id=1211270 * https://bugzilla.suse.com/show_bug.cgi?id=1211912 * https://bugzilla.suse.com/show_bug.cgi?id=1212168 * https://bugzilla.suse.com/show_bug.cgi?id=1212507 * https://bugzilla.suse.com/show_bug.cgi?id=1213132 * https://bugzilla.suse.com/show_bug.cgi?id=1213376 * https://bugzilla.suse.com/show_bug.cgi?id=1213469 * https://bugzilla.suse.com/show_bug.cgi?id=1213680 * https://bugzilla.suse.com/show_bug.cgi?id=1213689 * https://bugzilla.suse.com/show_bug.cgi?id=1214041 * https://bugzilla.suse.com/show_bug.cgi?id=1214121 * https://bugzilla.suse.com/show_bug.cgi?id=1214463 * https://bugzilla.suse.com/show_bug.cgi?id=1214553 * https://bugzilla.suse.com/show_bug.cgi?id=1214746 * https://bugzilla.suse.com/show_bug.cgi?id=1215027 * https://bugzilla.suse.com/show_bug.cgi?id=1215120 * https://bugzilla.suse.com/show_bug.cgi?id=1215412 * https://bugzilla.suse.com/show_bug.cgi?id=1215514 * https://bugzilla.suse.com/show_bug.cgi?id=1216411 * https://bugzilla.suse.com/show_bug.cgi?id=1216661 * https://jira.suse.com/browse/MSQA-706

1 0

SUSE-SU-2023:4386-1: important: Security update for salt
by maintenance＠opensuse.org 09 Nov '23

09 Nov '23

# Security update for salt Announcement ID: SUSE-SU-2023:4386-1 Rating: important References: * bsc#1213293 * bsc#1213518 * bsc#1214477 * bsc#1215157 * jsc#MSQA-706 Cross-References: * CVE-2023-34049 CVSS scores: Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * Transactional Server Module 15-SP5 An update that solves one vulnerability, contains one feature and has three security fixes can now be installed. ## Description: This update for salt fixes the following issues: Security issues fixed: * CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157) Bugs fixed: * Fix optimization_order opt to prevent testsuite fails * Improve salt.utils.json.find_json to avoid fails (bsc#1213293) * Use salt-call from salt bundle with transactional_update * Only call native_str on curl_debug message in tornado when needed * Implement the calling for batch async from the salt CLI * Fix calculation of SLS context vars when trailing dots on targetted sls/state (bsc#1213518) * Rename salt-tests to python3-salt-testsuite * Allow all primitive grain types for autosign_grains (bsc#1214477) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4386=1 SUSE-2023-4386=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4386=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4386=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4386=1 * Transactional Server Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Transactional-Server-15-SP5-2023-4386=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * salt-proxy-3006.0-150500.4.24.2 * salt-standalone-formulas-configuration-3006.0-150500.4.24.2 * salt-3006.0-150500.4.24.2 * salt-cloud-3006.0-150500.4.24.2 * salt-master-3006.0-150500.4.24.2 * salt-api-3006.0-150500.4.24.2 * salt-minion-3006.0-150500.4.24.2 * salt-syndic-3006.0-150500.4.24.2 * python3-salt-3006.0-150500.4.24.2 * salt-transactional-update-3006.0-150500.4.24.2 * salt-doc-3006.0-150500.4.24.2 * python3-salt-testsuite-3006.0-150500.4.24.2 * salt-ssh-3006.0-150500.4.24.2 * openSUSE Leap 15.5 (noarch) * salt-bash-completion-3006.0-150500.4.24.2 * salt-fish-completion-3006.0-150500.4.24.2 * salt-zsh-completion-3006.0-150500.4.24.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * salt-3006.0-150500.4.24.2 * salt-minion-3006.0-150500.4.24.2 * python3-salt-3006.0-150500.4.24.2 * salt-transactional-update-3006.0-150500.4.24.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * salt-doc-3006.0-150500.4.24.2 * salt-3006.0-150500.4.24.2 * salt-minion-3006.0-150500.4.24.2 * python3-salt-3006.0-150500.4.24.2 * Basesystem Module 15-SP5 (noarch) * salt-bash-completion-3006.0-150500.4.24.2 * salt-zsh-completion-3006.0-150500.4.24.2 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * salt-proxy-3006.0-150500.4.24.2 * salt-standalone-formulas-configuration-3006.0-150500.4.24.2 * salt-cloud-3006.0-150500.4.24.2 * salt-master-3006.0-150500.4.24.2 * salt-api-3006.0-150500.4.24.2 * salt-syndic-3006.0-150500.4.24.2 * salt-ssh-3006.0-150500.4.24.2 * Server Applications Module 15-SP5 (noarch) * salt-fish-completion-3006.0-150500.4.24.2 * Transactional Server Module 15-SP5 (aarch64 ppc64le s390x x86_64) * salt-transactional-update-3006.0-150500.4.24.2 ## References: * https://www.suse.com/security/cve/CVE-2023-34049.html * https://bugzilla.suse.com/show_bug.cgi?id=1213293 * https://bugzilla.suse.com/show_bug.cgi?id=1213518 * https://bugzilla.suse.com/show_bug.cgi?id=1214477 * https://bugzilla.suse.com/show_bug.cgi?id=1215157 * https://jira.suse.com/browse/MSQA-706

1 0

SUSE-SU-2023:4387-1: important: Security update for salt
by maintenance＠opensuse.org 09 Nov '23

09 Nov '23

# Security update for salt Announcement ID: SUSE-SU-2023:4387-1 Rating: important References: * bsc#1213293 * bsc#1213518 * bsc#1214477 * bsc#1215157 * jsc#MSQA-706 Cross-References: * CVE-2023-34049 CVSS scores: Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Server Applications Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * Transactional Server Module 15-SP4 An update that solves one vulnerability, contains one feature and has three security fixes can now be installed. ## Description: This update for salt fixes the following issues: Security issues fixed: * CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157) Bugs fixed: * Fix optimization_order opt to prevent testsuite fails * Improve salt.utils.json.find_json to avoid fails (bsc#1213293) * Use salt-call from salt bundle with transactional_update * Only call native_str on curl_debug message in tornado when needed * Implement the calling for batch async from the salt CLI * Fix calculation of SLS context vars when trailing dots on targetted sls/state (bsc#1213518) * Rename salt-tests to python3-salt-testsuite * Allow all primitive grain types for autosign_grains (bsc#1214477) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4387=1 SUSE-2023-4387=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4387=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4387=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4387=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4387=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4387=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4387=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4387=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4387=1 * Transactional Server Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Transactional-Server-15-SP4-2023-4387=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * salt-master-3006.0-150400.8.49.2 * salt-proxy-3006.0-150400.8.49.2 * salt-transactional-update-3006.0-150400.8.49.2 * salt-3006.0-150400.8.49.2 * salt-standalone-formulas-configuration-3006.0-150400.8.49.2 * salt-minion-3006.0-150400.8.49.2 * salt-syndic-3006.0-150400.8.49.2 * salt-doc-3006.0-150400.8.49.2 * python3-salt-testsuite-3006.0-150400.8.49.2 * salt-api-3006.0-150400.8.49.2 * salt-cloud-3006.0-150400.8.49.2 * salt-ssh-3006.0-150400.8.49.2 * python3-salt-3006.0-150400.8.49.2 * openSUSE Leap 15.4 (noarch) * salt-bash-completion-3006.0-150400.8.49.2 * salt-fish-completion-3006.0-150400.8.49.2 * salt-zsh-completion-3006.0-150400.8.49.2 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * salt-minion-3006.0-150400.8.49.2 * salt-transactional-update-3006.0-150400.8.49.2 * salt-3006.0-150400.8.49.2 * python3-salt-3006.0-150400.8.49.2 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * salt-minion-3006.0-150400.8.49.2 * salt-transactional-update-3006.0-150400.8.49.2 * salt-3006.0-150400.8.49.2 * python3-salt-3006.0-150400.8.49.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * salt-minion-3006.0-150400.8.49.2 * salt-transactional-update-3006.0-150400.8.49.2 * salt-3006.0-150400.8.49.2 * python3-salt-3006.0-150400.8.49.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * salt-minion-3006.0-150400.8.49.2 * salt-transactional-update-3006.0-150400.8.49.2 * salt-3006.0-150400.8.49.2 * python3-salt-3006.0-150400.8.49.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * salt-minion-3006.0-150400.8.49.2 * salt-transactional-update-3006.0-150400.8.49.2 * salt-3006.0-150400.8.49.2 * python3-salt-3006.0-150400.8.49.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * salt-minion-3006.0-150400.8.49.2 * salt-transactional-update-3006.0-150400.8.49.2 * salt-3006.0-150400.8.49.2 * python3-salt-3006.0-150400.8.49.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * salt-minion-3006.0-150400.8.49.2 * salt-doc-3006.0-150400.8.49.2 * salt-3006.0-150400.8.49.2 * python3-salt-3006.0-150400.8.49.2 * Basesystem Module 15-SP4 (noarch) * salt-bash-completion-3006.0-150400.8.49.2 * salt-zsh-completion-3006.0-150400.8.49.2 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * salt-master-3006.0-150400.8.49.2 * salt-proxy-3006.0-150400.8.49.2 * salt-standalone-formulas-configuration-3006.0-150400.8.49.2 * salt-syndic-3006.0-150400.8.49.2 * salt-api-3006.0-150400.8.49.2 * salt-cloud-3006.0-150400.8.49.2 * salt-ssh-3006.0-150400.8.49.2 * Server Applications Module 15-SP4 (noarch) * salt-fish-completion-3006.0-150400.8.49.2 * Transactional Server Module 15-SP4 (aarch64 ppc64le s390x x86_64) * salt-transactional-update-3006.0-150400.8.49.2 ## References: * https://www.suse.com/security/cve/CVE-2023-34049.html * https://bugzilla.suse.com/show_bug.cgi?id=1213293 * https://bugzilla.suse.com/show_bug.cgi?id=1213518 * https://bugzilla.suse.com/show_bug.cgi?id=1214477 * https://bugzilla.suse.com/show_bug.cgi?id=1215157 * https://jira.suse.com/browse/MSQA-706

1 0

SUSE-SU-2023:4388-1: important: Security update for salt
by maintenance＠opensuse.org 09 Nov '23

09 Nov '23

# Security update for salt Announcement ID: SUSE-SU-2023:4388-1 Rating: important References: * bsc#1213293 * bsc#1213518 * bsc#1214477 * bsc#1215157 * jsc#MSQA-706 Cross-References: * CVE-2023-34049 CVSS scores: Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability, contains one feature and has three security fixes can now be installed. ## Description: This update for salt fixes the following issues: Security issues fixed: * CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157) Bugs fixed: * Fix optimization_order opt to prevent testsuite fails * Improve salt.utils.json.find_json to avoid fails (bsc#1213293) * Use salt-call from salt bundle with transactional_update * Only call native_str on curl_debug message in tornado when needed * Implement the calling for batch async from the salt CLI * Fix calculation of SLS context vars when trailing dots on targetted sls/state (bsc#1213518) * Rename salt-tests to python3-salt-testsuite * Allow all primitive grain types for autosign_grains (bsc#1214477) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4388=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4388=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4388=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4388=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4388=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4388=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4388=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4388=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4388=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4388=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4388=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4388=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4388=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4388=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4388=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4388=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4388=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4388=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4388=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4388=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python2-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-3.17.2-150300.3.4.1 * salt-proxy-3006.0-150300.53.65.2 * salt-minion-3006.0-150300.53.65.2 * salt-ssh-3006.0-150300.53.65.2 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * salt-doc-3006.0-150300.53.65.2 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * salt-master-3006.0-150300.53.65.2 * salt-standalone-formulas-configuration-3006.0-150300.53.65.2 * salt-transactional-update-3006.0-150300.53.65.2 * salt-api-3006.0-150300.53.65.2 * salt-3006.0-150300.53.65.2 * salt-syndic-3006.0-150300.53.65.2 * python2-simplejson-3.17.2-150300.3.4.1 * python3-salt-3006.0-150300.53.65.2 * python3-salt-testsuite-3006.0-150300.53.65.2 * salt-cloud-3006.0-150300.53.65.2 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * openSUSE Leap 15.3 (noarch) * salt-bash-completion-3006.0-150300.53.65.2 * salt-fish-completion-3006.0-150300.53.65.2 * salt-zsh-completion-3006.0-150300.53.65.2 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * salt-proxy-3006.0-150300.53.65.2 * salt-minion-3006.0-150300.53.65.2 * salt-ssh-3006.0-150300.53.65.2 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * salt-master-3006.0-150300.53.65.2 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * salt-standalone-formulas-configuration-3006.0-150300.53.65.2 * salt-api-3006.0-150300.53.65.2 * salt-3006.0-150300.53.65.2 * salt-syndic-3006.0-150300.53.65.2 * python3-salt-3006.0-150300.53.65.2 * salt-doc-3006.0-150300.53.65.2 * salt-cloud-3006.0-150300.53.65.2 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * salt-bash-completion-3006.0-150300.53.65.2 * salt-fish-completion-3006.0-150300.53.65.2 * salt-zsh-completion-3006.0-150300.53.65.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * salt-proxy-3006.0-150300.53.65.2 * salt-minion-3006.0-150300.53.65.2 * salt-ssh-3006.0-150300.53.65.2 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * salt-master-3006.0-150300.53.65.2 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * salt-standalone-formulas-configuration-3006.0-150300.53.65.2 * salt-api-3006.0-150300.53.65.2 * salt-3006.0-150300.53.65.2 * salt-syndic-3006.0-150300.53.65.2 * python3-salt-3006.0-150300.53.65.2 * salt-doc-3006.0-150300.53.65.2 * salt-cloud-3006.0-150300.53.65.2 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * salt-bash-completion-3006.0-150300.53.65.2 * salt-fish-completion-3006.0-150300.53.65.2 * salt-zsh-completion-3006.0-150300.53.65.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * salt-proxy-3006.0-150300.53.65.2 * salt-minion-3006.0-150300.53.65.2 * salt-ssh-3006.0-150300.53.65.2 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * salt-master-3006.0-150300.53.65.2 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * salt-standalone-formulas-configuration-3006.0-150300.53.65.2 * salt-transactional-update-3006.0-150300.53.65.2 * salt-api-3006.0-150300.53.65.2 * salt-3006.0-150300.53.65.2 * salt-syndic-3006.0-150300.53.65.2 * python3-salt-3006.0-150300.53.65.2 * salt-doc-3006.0-150300.53.65.2 * salt-cloud-3006.0-150300.53.65.2 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * salt-bash-completion-3006.0-150300.53.65.2 * salt-fish-completion-3006.0-150300.53.65.2 * salt-zsh-completion-3006.0-150300.53.65.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * salt-proxy-3006.0-150300.53.65.2 * salt-minion-3006.0-150300.53.65.2 * salt-ssh-3006.0-150300.53.65.2 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * salt-master-3006.0-150300.53.65.2 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * salt-standalone-formulas-configuration-3006.0-150300.53.65.2 * salt-api-3006.0-150300.53.65.2 * salt-3006.0-150300.53.65.2 * salt-syndic-3006.0-150300.53.65.2 * python3-salt-3006.0-150300.53.65.2 * salt-doc-3006.0-150300.53.65.2 * salt-cloud-3006.0-150300.53.65.2 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * salt-bash-completion-3006.0-150300.53.65.2 * salt-fish-completion-3006.0-150300.53.65.2 * salt-zsh-completion-3006.0-150300.53.65.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * salt-proxy-3006.0-150300.53.65.2 * salt-minion-3006.0-150300.53.65.2 * salt-ssh-3006.0-150300.53.65.2 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * salt-master-3006.0-150300.53.65.2 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * salt-standalone-formulas-configuration-3006.0-150300.53.65.2 * salt-transactional-update-3006.0-150300.53.65.2 * salt-api-3006.0-150300.53.65.2 * salt-3006.0-150300.53.65.2 * salt-syndic-3006.0-150300.53.65.2 * python3-salt-3006.0-150300.53.65.2 * salt-doc-3006.0-150300.53.65.2 * salt-cloud-3006.0-150300.53.65.2 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Enterprise Storage 7.1 (noarch) * salt-bash-completion-3006.0-150300.53.65.2 * salt-fish-completion-3006.0-150300.53.65.2 * salt-zsh-completion-3006.0-150300.53.65.2 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * salt-minion-3006.0-150300.53.65.2 * salt-transactional-update-3006.0-150300.53.65.2 * salt-3006.0-150300.53.65.2 * python3-salt-3006.0-150300.53.65.2 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * salt-minion-3006.0-150300.53.65.2 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * salt-transactional-update-3006.0-150300.53.65.2 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * salt-3006.0-150300.53.65.2 * python3-salt-3006.0-150300.53.65.2 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * python3-simplejson-3.17.2-150300.3.4.1 * salt-minion-3006.0-150300.53.65.2 * python-simplejson-debugsource-3.17.2-150300.3.4.1 * salt-transactional-update-3006.0-150300.53.65.2 * python-simplejson-debuginfo-3.17.2-150300.3.4.1 * salt-3006.0-150300.53.65.2 * python3-salt-3006.0-150300.53.65.2 * python3-simplejson-debuginfo-3.17.2-150300.3.4.1 ## References: * https://www.suse.com/security/cve/CVE-2023-34049.html * https://bugzilla.suse.com/show_bug.cgi?id=1213293 * https://bugzilla.suse.com/show_bug.cgi?id=1213518 * https://bugzilla.suse.com/show_bug.cgi?id=1214477 * https://bugzilla.suse.com/show_bug.cgi?id=1215157 * https://jira.suse.com/browse/MSQA-706

1 0

SUSE-RU-2023:4392-1: moderate: Recommended update for SUSE Manager Client Tools
by maintenance＠opensuse.org 09 Nov '23

09 Nov '23

# Recommended update for SUSE Manager Client Tools Announcement ID: SUSE-RU-2023:4392-1 Rating: moderate References: * jsc#MSQA-706 Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 * SUSE Linux Enterprise Desktop 15 SP1 * SUSE Linux Enterprise Desktop 15 SP2 * SUSE Linux Enterprise Desktop 15 SP3 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP1 * SUSE Linux Enterprise Real Time 15 SP2 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Client Tools for SLE 15 * SUSE Package Hub 15 15-SP5 An update that contains one feature can now be installed. ## Description: This update fixes the following issues: grafana: * Update to version 9.5.8: * Features and enhancements GenericOAuth: Set sub as auth id * Bug fixes: DataSourceProxy: Fix url validation error handling * Update to version 9.5.7: * Alerting: Sort NumberCaptureValues in EvaluationString * Alerting: Improve performance of matching captures * Alerting: No longer silence paused alerts during legacy migration * Alerting: Remove and revert flag alertingBigTransactions * Alerting: Migrate unknown NoData\Error settings to the default * Tracing: supply Grafana build version * Tempo: Escape regex-sensitive characters in span name before building promql query * Plugins: Only configure plugin proxy transport once * Alerting: Fix unique violation when updating rule group with title chains/cycles * Prometheus: Version detect bug * Prometheus: Fix heatmap format with no data * Database: Change getExistingDashboardByTitleAndFolder to get dashboard by title, not slug * Alerting: Convert 'Both' type Prometheus queries to 'Range' in * SQLStore: Fix Postgres dialect treating "false" migrator default as true * Alerting: Support newer http_config struct * InfluxDB: Interpolate retention policies * StatusHistory: Fix rendering of value-mapped null * Alerting: Fix provenance guard checks for Alertmanager configuration to not cause panic when compared nested objects * AnonymousAuth: Fix concurrent read-write crash * AzureMonitor: Ensure legacy properties containing template variables are correctly migrated * Explore: Remove data source onboarding page * Dashboard: Re-align Save form * Azure Monitor: Fix bug that did not show alert rule preview * Histogram: Respect min/max panel settings for x-axis * Heatmap: Fix color rendering for value ranges < 1 * Heatmap: Handle unsorted timestamps in calculate mode * Google Cloud Monitor: Fix mem usage for dropdown * AzureMonitor: Fix logs query multi-resource and timespan values * Utils: Reimplement util.GetRandomString to avoid modulo bias * Alerting: Fix matching labels with spaces in their values * Dashboard: Fix applying timezone to datetime variables * Dashboard: Fix panel description event triggering every time panel is rendered * Tempo: Fix get label values based on CoreApp type * Heatmap: Fix log scale editor * Dashboard: Fix disappearing panel when viewed panel is refreshed * Prometheus: Fix bug in creating autocomplete queries with labels * Prometheus: Fix Query Inspector expression range value * Alerting: Fix migration failing if alert_configuration table is not empty * InfluxDB: Fix querying retention policies on flux mode * Update to version 9.5.6: * Dashboard: Fix library panels in collapsed rows not getting updated * Auth: Add and document option for enabling email lookup spacecmd: * Version 4.3.24-1 * Change default scheduler from (none) to (system) spacewalk-client-tools: * Version 4.3.16-1 * Update translation strings ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4392=1 * SUSE Manager Client Tools for SLE 15 zypper in -t patch SUSE-SLE-Manager-Tools-15-2023-4392=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4392=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4392=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-promu-0.14.0-150000.3.15.2 * openSUSE Leap 15.5 (noarch) * spacecmd-4.3.24-150000.3.107.1 * SUSE Manager Client Tools for SLE 15 (aarch64 ppc64le s390x x86_64) * grafana-9.5.8-150000.1.57.2 * grafana-debuginfo-9.5.8-150000.1.57.2 * SUSE Manager Client Tools for SLE 15 (noarch) * spacecmd-4.3.24-150000.3.107.1 * python3-spacewalk-client-tools-4.3.16-150000.3.80.2 * python3-spacewalk-client-setup-4.3.16-150000.3.80.2 * python3-spacewalk-check-4.3.16-150000.3.80.2 * spacewalk-client-setup-4.3.16-150000.3.80.2 * spacewalk-client-tools-4.3.16-150000.3.80.2 * spacewalk-check-4.3.16-150000.3.80.2 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-promu-0.14.0-150000.3.15.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-promu-0.14.0-150000.3.15.2 * openSUSE Leap 15.4 (noarch) * spacecmd-4.3.24-150000.3.107.1 ## References: * https://jira.suse.com/browse/MSQA-706

1 0

SUSE-RU-2023:4393-1: moderate: Recommended update for grafana
by maintenance＠opensuse.org 09 Nov '23

09 Nov '23

# Recommended update for grafana Announcement ID: SUSE-RU-2023:4393-1 Rating: moderate References: * jsc#MSQA-706 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that contains one feature can now be installed. ## Description: This update for grafana fixes the following issues: * Update to version 9.5.8 GenericOAuth: Set sub as auth id DataSourceProxy: Fix url validation error handling Alerting: Sort NumberCaptureValues in EvaluationString Alerting: Improve performance of matching captures Alerting: No longer silence paused alerts during legacy migration Alerting: Remove and revert flag alertingBigTransactions Alerting: Migrate unknown NoData\Error settings to the default Tracing: supply Grafana build version Tempo: Escape regex-sensitive characters in span name before building promql query Plugins: Only configure plugin proxy transport once Alerting: Fix unique violation when updating rule group with title chains/cycles Prometheus: Version detect bug Prometheus: Fix heatmap format with no data Database: Change getExistingDashboardByTitleAndFolder to get dashboard by title, not slug Alerting: Convert 'Both' type Prometheus queries to 'Range' in migration SQLStore: Fix Postgres dialect treating "false" migrator default as true Alerting: Support newer http_config struct InfluxDB: Interpolate retention policies StatusHistory: Fix rendering of value-mapped null Alerting: Fix Alertmanager's provenance guard checks configuration to not cause panic when compared nested objects AnonymousAuth: Fix concurrent read-write crash AzureMonitor: Ensure legacy properties containing template variables are correctly migrated Explore: Remove data source onboarding page Dashboard: Re-align Save form Azure Monitor: Fix bug that did not show alert rule preview Histogram: Respect min/max panel settings for x-axis Heatmap: Fix color rendering for value ranges < 1 Heatmap: Handle unsorted timestamps in calculate mode Google Cloud Monitor: Fix mem usage for dropdown AzureMonitor: Fix logs query multi-resource and timespan values Utils: Reimplement util.GetRandomString to avoid modulo bias Alerting: Fix matching labels with spaces in their values Dashboard: Fix applying timezone to datetime variables Dashboard: Fix panel description event triggering every time panel is rendered Tempo: Fix get label values based on CoreApp type Heatmap: Fix log scale editor Dashboard: Fix disappearing panel when viewed panel is refreshed Prometheus: Fix bug in creating autocomplete queries with labels Prometheus: Fix Query Inspector expression range value Alerting: Fix migration failing if alert_configuration table is not empty InfluxDB: Fix querying retention policies on flux mode Dashboard: Fix library panels in collapsed rows not getting updated Auth: Add and document option for enabling email lookup ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4393=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4393=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4393=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4393=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * grafana-debuginfo-9.5.8-150200.3.50.4 * grafana-9.5.8-150200.3.50.4 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * grafana-debuginfo-9.5.8-150200.3.50.4 * grafana-9.5.8-150200.3.50.4 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * grafana-debuginfo-9.5.8-150200.3.50.4 * grafana-9.5.8-150200.3.50.4 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * grafana-debuginfo-9.5.8-150200.3.50.4 * grafana-9.5.8-150200.3.50.4 ## References: * https://jira.suse.com/browse/MSQA-706

1 0

SUSE-SU-2023:4412-1: moderate: Maintenance update for SUSE Manager 4.3.9 Release Notes
by maintenance＠opensuse.org 09 Nov '23

09 Nov '23

# Maintenance update for SUSE Manager 4.3.9 Release Notes Announcement ID: SUSE-SU-2023:4412-1 Rating: moderate References: * bsc#1204270 * bsc#1211047 * bsc#1211145 * bsc#1211270 * bsc#1211912 * bsc#1212168 * bsc#1212507 * bsc#1213132 * bsc#1213376 * bsc#1213469 * bsc#1213680 * bsc#1213689 * bsc#1214041 * bsc#1214121 * bsc#1214463 * bsc#1214553 * bsc#1214746 * bsc#1215027 * bsc#1215120 * bsc#1215157 * bsc#1215412 * bsc#1215514 * bsc#1216411 * bsc#1216661 * jsc#MSQA-706 * jsc#SUMA-111 Cross-References: * CVE-2023-34049 CVSS scores: Affected Products: * openSUSE Leap 15.4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability, contains two features and has 23 security fixes can now be installed. ## Recommended update for SUSE Manager Proxy and Retail Branch Server 4.3 ### Description: This update fixes the following issues: release-notes-susemanager-proxy: * Update to SUSE Manager 4.3.9 * Bugs mentioned bsc#1212507, bsc#1216411 ## Security update for SUSE Manager Server 4.3 ### Description: This update fixes the following issues: * Update to SUSE Manager 4.3.9 * Debian 12 support as client * New Update Notification (jsc#SUMA-111) * Monitoring: Grafana upgraded to 9.5.8 * Update 'saltkey' endpoints to accept GET instead of POST * CVEs fixed: CVE-2023-34049 * Bugs mentioned: bsc#1204270, bsc#1211047, bsc#1211145, bsc#1211270, bsc#1211912 bsc#1212168, bsc#1212507, bsc#1213132, bsc#1213376, bsc#1213469 bsc#1213680, bsc#1213689, bsc#1214041, bsc#1214121, bsc#1214463 bsc#1214553, bsc#1214746, bsc#1215027, bsc#1215120, bsc#1215412 bsc#1215514, bsc#1216661, bsc#1215157 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4412=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2023-4412=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2023-4412=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2023-4412=1 ## Package List: * openSUSE Leap 15.4 (noarch) * release-notes-susemanager-4.3.9-150400.3.90.1 * release-notes-susemanager-proxy-4.3.9-150400.3.69.1 * SUSE Manager Proxy 4.3 (noarch) * release-notes-susemanager-proxy-4.3.9-150400.3.69.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * release-notes-susemanager-proxy-4.3.9-150400.3.69.1 * SUSE Manager Server 4.3 (noarch) * release-notes-susemanager-4.3.9-150400.3.90.1 ## References: * https://www.suse.com/security/cve/CVE-2023-34049.html * https://bugzilla.suse.com/show_bug.cgi?id=1204270 * https://bugzilla.suse.com/show_bug.cgi?id=1211047 * https://bugzilla.suse.com/show_bug.cgi?id=1211145 * https://bugzilla.suse.com/show_bug.cgi?id=1211270 * https://bugzilla.suse.com/show_bug.cgi?id=1211912 * https://bugzilla.suse.com/show_bug.cgi?id=1212168 * https://bugzilla.suse.com/show_bug.cgi?id=1212507 * https://bugzilla.suse.com/show_bug.cgi?id=1213132 * https://bugzilla.suse.com/show_bug.cgi?id=1213376 * https://bugzilla.suse.com/show_bug.cgi?id=1213469 * https://bugzilla.suse.com/show_bug.cgi?id=1213680 * https://bugzilla.suse.com/show_bug.cgi?id=1213689 * https://bugzilla.suse.com/show_bug.cgi?id=1214041 * https://bugzilla.suse.com/show_bug.cgi?id=1214121 * https://bugzilla.suse.com/show_bug.cgi?id=1214463 * https://bugzilla.suse.com/show_bug.cgi?id=1214553 * https://bugzilla.suse.com/show_bug.cgi?id=1214746 * https://bugzilla.suse.com/show_bug.cgi?id=1215027 * https://bugzilla.suse.com/show_bug.cgi?id=1215120 * https://bugzilla.suse.com/show_bug.cgi?id=1215157 * https://bugzilla.suse.com/show_bug.cgi?id=1215412 * https://bugzilla.suse.com/show_bug.cgi?id=1215514 * https://bugzilla.suse.com/show_bug.cgi?id=1216411 * https://bugzilla.suse.com/show_bug.cgi?id=1216661 * https://jira.suse.com/browse/MSQA-706 * https://jira.suse.com/browse/SUMA-111

1 0

SUSE-RU-2023:4383-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 08 Nov '23

08 Nov '23

# Recommended update for crmsh Announcement ID: SUSE-RU-2023:4383-1 Rating: moderate References: * bsc#1203601 * bsc#1208216 * bsc#1213797 * bsc#1215438 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has four fixes can now be installed. ## Description: This update for crmsh fixes the following issues: * Update to version 4.4.2+20231010.03e9316f * report: Pick up tarball suffix dynamically (bsc#1215438) * report: Pick 'gzip' as the first compress prog for cross-platform compatibility(bsc#1215438) * upgradeutil: reduce ConnectTimeout when checking the availability of ssh access (bsc#1213797) * ui_cluster: 'crm cluster stop' failed to stop services (bsc#1203601) * utils: Change the way to get pacemaker's version (bsc#1208216) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4383=1 openSUSE-SLE-15.4-2023-4383=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2023-4383=1 ## Package List: * openSUSE Leap 15.4 (noarch) * crmsh-test-4.4.2+20231010.03e9316f-150400.3.28.1 * crmsh-scripts-4.4.2+20231010.03e9316f-150400.3.28.1 * crmsh-4.4.2+20231010.03e9316f-150400.3.28.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (noarch) * crmsh-scripts-4.4.2+20231010.03e9316f-150400.3.28.1 * crmsh-4.4.2+20231010.03e9316f-150400.3.28.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1203601 * https://bugzilla.suse.com/show_bug.cgi?id=1208216 * https://bugzilla.suse.com/show_bug.cgi?id=1213797 * https://bugzilla.suse.com/show_bug.cgi?id=1215438

1 0

openSUSE-RU-2023:0359-1: moderate: Recommended update for xfce4-notify
by maintenance＠opensuse.org 07 Nov '23

07 Nov '23

openSUSE Recommended Update: Recommended update for xfce4-notify ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0359-1 Rating: moderate References: #1216516 Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Leap 15.5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xfce4-dev-tools, xfce4-notifyd fixes the following issues: - X11 support which was broken in a previous update for xfce4-notifyd (boo#1216516) - xfce4-dev-tools was updated as a build dependency Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-359=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-359=1 Package List: - openSUSE Leap 15.5 (noarch): libgarcon-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.8.1 libxfce4ui-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.8.1 thunar-volman-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.8.1 xfce4-notifyd-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.8.1 xfce4-panel-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.8.1 xfce4-power-manager-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.8.1 xfce4-session-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.8.1 xfce4-settings-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.8.1 xfdesktop-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.8.1 xfwm4-branding-openSUSE-4.18.0+git0.9a2f754-lp155.2.8.1 - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): xfce4-dev-tools-4.18.1-bp155.3.5.1 xfce4-notifyd-0.9.2-bp155.2.6.1 xfce4-notifyd-debuginfo-0.9.2-bp155.2.6.1 xfce4-notifyd-debugsource-0.9.2-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): xfce4-notifyd-branding-upstream-0.9.2-bp155.2.6.1 xfce4-notifyd-lang-0.9.2-bp155.2.6.1 References: https://bugzilla.suse.com/1216516

1 0

openSUSE-RU-2023:0358-1: moderate: Recommended update for go1.15, go1.16, go1.17
by maintenance＠opensuse.org 07 Nov '23

07 Nov '23

openSUSE Recommended Update: Recommended update for go1.15, go1.16, go1.17 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0358-1 Rating: moderate References: Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update adds go1.15, go1.16 and go1.17 to bootstrap newer go versions. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2023-358=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): go1.15-1.15.15-5.1 go1.15-doc-1.15.15-5.1 go1.16-1.16.15-2.3 go1.16-doc-1.16.15-2.3 go1.17-1.17.13-2.1 go1.17-doc-1.17.13-2.1 References:

1 0

SUSE-RU-2023:4382-1: important: Recommended update for release-notes-sles
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

# Recommended update for release-notes-sles Announcement ID: SUSE-RU-2023:4382-1 Rating: important References: * bsc#933411 * jsc#PED-4489 * jsc#PED-4564 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains two features and has one fix can now be installed. ## Description: This update for release-notes-sles fixes the following issues: * Version 15.5.20231106: * aarch64: Added recommendation of 64K for NVIDIA Grace (jsc#PED-4564/jsc#PED-4489) * aarch64: Mention NVIDIA Grace Hopper and GPU (jsc#PED-4564) * aarch64: Updated 64K page size kernel flavor to supported (jsc#PED-4489) * aarch64: Added NVIDIA Grace (jsc#PED-4564) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-2023-4382=1 SUSE-SLE- INSTALLER-15-SP5-2023-4382=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4382=1 openSUSE-SLE-15.5-2023-4382=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4382=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4382=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4382=1 ## Package List: * SUSE Linux Enterprise Server 15 SP5 (noarch) * release-notes-sles-15.5.20231106-150500.3.9.1 * openSUSE Leap 15.5 (noarch) * release-notes-sles-15.5.20231106-150500.3.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (noarch) * release-notes-sles-15.5.20231106-150500.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * release-notes-sles-15.5.20231106-150500.3.9.1 * SUSE Linux Enterprise Desktop 15 SP5 (noarch) * release-notes-sles-15.5.20231106-150500.3.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=933411 * https://jira.suse.com/browse/PED-4489 * https://jira.suse.com/browse/PED-4564

1 0

SUSE-SU-2023:4375-1: important: Security update for the Linux Kernel
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2023:4375-1 Rating: important References: * bsc#1208788 * bsc#1211162 * bsc#1211307 * bsc#1212423 * bsc#1212649 * bsc#1213705 * bsc#1213772 * bsc#1214754 * bsc#1214874 * bsc#1215095 * bsc#1215104 * bsc#1215523 * bsc#1215545 * bsc#1215921 * bsc#1215955 * bsc#1215986 * bsc#1216062 * bsc#1216202 * bsc#1216322 * bsc#1216323 * bsc#1216324 * bsc#1216333 * bsc#1216345 * bsc#1216512 * bsc#1216621 * bsc#802154 Cross-References: * CVE-2023-2163 * CVE-2023-31085 * CVE-2023-34324 * CVE-2023-3777 * CVE-2023-39189 * CVE-2023-39191 * CVE-2023-39193 * CVE-2023-46813 * CVE-2023-5178 CVSS scores: * CVE-2023-2163 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2023-2163 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2023-31085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31085 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-34324 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3777 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3777 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-39189 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-39189 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39191 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2023-39191 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2023-39193 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39193 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-46813 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * Legacy Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that solves nine vulnerabilities and has 17 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095) * CVE-2023-46813: Fixed a local privilege escalation with user-space programs that have access to MMIO regions (bsc#1212649). * CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) * CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). * CVE-2023-5178: Fixed an use-after-free and a double-free flaw that could allow a malicious user to execute a remote code execution. (bsc#1215768) * CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518) * CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). * CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) * CVE-2023-39191: Fixed a lack of validation of dynamic pointers within user- supplied eBPF programs that may have allowed an attacker with CAP_BPF privileges to escalate privileges and execute arbitrary code. (bsc#1215863) The following non-security bugs were fixed: * 9p: virtio: make sure 'offs' is initialized in zc_request (git-fixes). * ACPI: irq: Fix incorrect return value in acpi_register_gsi() (git-fixes). * ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (git-fixes). * ALSA: hda/realtek - ALC287 I2S speaker platform support (git-fixes). * ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP (git-fixes). * ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (git-fixes). * ALSA: hda/realtek - Fixed two speaker platform (git-fixes). * ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes). * ALSA: hda/realtek: Change model for Intel RVP board (git-fixes). * ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx (git-fixes). * ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (git-fixes). * ALSA: hda: intel-dsp-cfg: add LunarLake support (git-fixes). * ALSA: hda: intel-sdw-acpi: Use u8 type for link index (git-fixes). * ALSA: usb-audio: Fix microphone sound on Nexigo webcam (git-fixes). * ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset (git-fixes). * ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM (git-fixes). * ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (git- fixes). * ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (git-fixes). * ASoC: codecs: wcd938x: drop bogus bind error handling (git-fixes). * ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes). * ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag (git-fixes). * ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link (git-fixes). * ASoC: pxa: fix a memory leak in probe() (git-fixes). * Bluetooth: Avoid redundant authentication (git-fixes). * Bluetooth: Fix a refcnt underflow problem for hci_conn (git-fixes). * Bluetooth: ISO: Fix handling of listen for unicast (git-fixes). * Bluetooth: Reject connection with the device which has same BD_ADDR (git- fixes). * Bluetooth: avoid memcmp() out of bounds warning (git-fixes). * Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes). * Bluetooth: hci_codec: Fix leaking content of local_codecs (git-fixes). * Bluetooth: hci_event: Fix coding style (git-fixes). * Bluetooth: hci_event: Fix using memcmp when comparing keys (git-fixes). * Bluetooth: hci_event: Ignore NULL link key (git-fixes). * Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (git-fixes). * Bluetooth: hci_sock: fix slab oob read in create_monitor_event (git-fixes). * Bluetooth: vhci: Fix race when opening vhci device (git-fixes). * Documentation: qat: change kernel version (PED-6401). * Documentation: qat: rewrite description (PED-6401). * Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (git- fixes). * Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (git- fixes). * HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (git- fixes). * HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (git-fixes). * HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (git- fixes). * HID: multitouch: Add required quirk for Synaptics 0xcd7e device (git-fixes). * HID: sony: Fix a potential memory leak in sony_probe() (git-fixes). * HID: sony: remove duplicate NULL check before calling usb_free_urb() (git- fixes). * IB/mlx4: Fix the size of a buffer in add_port_entries() (git-fixes) * Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case (git-fixes). * Input: powermate - fix use-after-free in powermate_config_complete (git- fixes). * Input: psmouse - fix fast_reconnect function for PS/2 mode (git-fixes). * Input: xpad - add PXN V900 support (git-fixes). * KVM: SVM: Do not kill SEV guest if SMAP erratum triggers in usermode (git- fixes). * KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway (git-fixes). * KVM: s390: fix gisa destroy operation might lead to cpu stalls (git-fixes bsc#1216512). * KVM: x86/mmu: Reconstruct shadow page root if the guest PDPTEs is changed (git-fixes). * KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid() (git-fixes). * KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (bsc#1213772). * KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (bsc#1213772). * KVM: x86: add support for CPUID leaf 0x80000021 (bsc#1213772). * KVM: x86: synthesize CPUID leaf 0x80000021h if useful (bsc#1213772). * KVM: x86: work around QEMU issue with synthetic CPUID leaves (git-fixes). * NFS: Fix O_DIRECT locking issues (bsc#1211162). * NFS: Fix a few more clear_bit() instances that need release semantics (bsc#1211162). * NFS: Fix a potential data corruption (bsc#1211162). * NFS: Fix a use after free in nfs_direct_join_group() (bsc#1211162). * NFS: Fix error handling for O_DIRECT write scheduling (bsc#1211162). * NFS: More O_DIRECT accounting fixes for error paths (bsc#1211162). * NFS: More fixes for nfs_direct_write_reschedule_io() (bsc#1211162). * NFS: Use the correct commit info in nfs_join_page_group() (bsc#1211162). * NFS: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162). * NFSD: Never call nfsd_file_gc() in foreground paths (bsc#1215545). * RDMA/cma: Fix truncation compilation warning in make_cma_ports (git-fixes) * RDMA/cma: Initialize ib_sa_multicast structure to 0 when join (git-fixes) * RDMA/core: Require admin capabilities to set system parameters (git-fixes) * RDMA/cxgb4: Check skb value for failure to allocate (git-fixes) * RDMA/mlx5: Fix NULL string error (git-fixes) * RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation (git-fixes) * RDMA/siw: Fix connection failure handling (git-fixes) * RDMA/srp: Do not call scsi_done() from srp_abort() (git-fixes) * RDMA/uverbs: Fix typo of sizeof argument (git-fixes) * arm64/smmu: use TLBI ASID when invalidating entire range (bsc#1215921) * ata: libata-core: Do not register PM operations for SAS ports (git-fixes). * ata: libata-core: Fix ata_port_request_pm() locking (git-fixes). * ata: libata-core: Fix port and device removal (git-fixes). * ata: libata-sata: increase PMP SRST timeout to 10s (git-fixes). * ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (git-fixes). * blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (bsc#1216062). * blk-cgroup: support to track if policy is online (bsc#1216062). * bonding: Fix extraction of ports from the packet headers (bsc#1214754). * bonding: Return pointer to data after pull on skb (bsc#1214754). * bonding: do not assume skb mac_header is set (bsc#1214754). * bpf: Add copy_map_value_long to copy to remote percpu memory (git-fixes). * bpf: Add missing btf_put to register_btf_id_dtor_kfuncs (git-fixes). * bpf: Add override check to kprobe multi link attach (git-fixes). * bpf: Add zero_map_value to zero map value with special fields (git-fixes). * bpf: Cleanup check_refcount_ok (git-fixes). * bpf: Fix max stack depth check for async callbacks (git-fixes). * bpf: Fix offset calculation error in __copy_map_value and zero_map_value (git-fixes). * bpf: Fix ref_obj_id for dynptr data slices in verifier (git-fixes). * bpf: Fix resetting logic for unreferenced kptrs (git-fixes). * bpf: Fix subprog idx logic in check_max_stack_depth (git-fixes). * bpf: Gate dynptr API behind CAP_BPF (git-fixes). * bpf: Prevent decl_tag from being referenced in func_proto arg (git-fixes). * bpf: Repeat check_max_stack_depth for async callbacks (git-fixes). * bpf: Tighten ptr_to_btf_id checks (git-fixes). * bpf: fix precision propagation verbose logging (git-fixes). * bpf: prevent decl_tag from being referenced in func_proto (git-fixes). * bpf: propagate precision across all frames, not just the last one (git- fixes). * bpf: propagate precision in ALU/ALU64 operations (git-fixes). * bpf: propagate precision in ALU/ALU64 operations (git-fixes). * btf: Export bpf_dynptr definition (git-fixes). * btrfs: do not start transaction for scrub if the fs is mounted read-only (bsc#1214874). * bus: ti-sysc: Fix missing AM35xx SoC matching (git-fixes). * bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() (git- fixes). * ceph: add base64 endcoding routines for encrypted names (jsc#SES-1880). * ceph: add encryption support to writepage and writepages (jsc#SES-1880). * ceph: add fscrypt ioctls and ceph.fscrypt.auth vxattr (jsc#SES-1880). * ceph: add helpers for converting names for userland presentation (jsc#SES-1880). * ceph: add infrastructure for file encryption and decryption (jsc#SES-1880). * ceph: add new mount option to enable sparse reads (jsc#SES-1880). * ceph: add object version support for sync read (jsc#SES-1880). * ceph: add read/modify/write to ceph_sync_write (jsc#SES-1880). * ceph: add some fscrypt guardrails (jsc#SES-1880). * ceph: add support for encrypted snapshot names (jsc#SES-1880). * ceph: add support to readdir for encrypted names (jsc#SES-1880). * ceph: add truncate size handling support for fscrypt (jsc#SES-1880). * ceph: align data in pages in ceph_sync_write (jsc#SES-1880). * ceph: allow encrypting a directory while not having Ax caps (jsc#SES-1880). * ceph: create symlinks with encrypted and base64-encoded targets (jsc#SES-1880). * ceph: decode alternate_name in lease info (jsc#SES-1880). * ceph: do not use special DIO path for encrypted inodes (jsc#SES-1880). * ceph: drop messages from MDS when unmounting (jsc#SES-1880). * ceph: encode encrypted name in ceph_mdsc_build_path and dentry release (jsc#SES-1880). * ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1216322). * ceph: fix type promotion bug on 32bit systems (bsc#1216324). * ceph: fix updating i_truncate_pagecache_size for fscrypt (jsc#SES-1880). * ceph: fscrypt_auth handling for ceph (jsc#SES-1880). * ceph: handle fscrypt fields in cap messages from MDS (jsc#SES-1880). * ceph: implement -o test_dummy_encryption mount option (jsc#SES-1880). * ceph: invalidate pages when doing direct/sync writes (jsc#SES-1880). * ceph: make ceph_fill_trace and ceph_get_name decrypt names (jsc#SES-1880). * ceph: make ceph_msdc_build_path use ref-walk (jsc#SES-1880). * ceph: make d_revalidate call fscrypt revalidator for encrypted dentries (jsc#SES-1880). * ceph: make ioctl cmds more readable in debug log (jsc#SES-1880). * ceph: make num_fwd and num_retry to __u32 (jsc#SES-1880). * ceph: mark directory as non-complete after loading key (jsc#SES-1880). * ceph: pass the request to parse_reply_info_readdir() (jsc#SES-1880). * ceph: plumb in decryption during reads (jsc#SES-1880). * ceph: preallocate inode for ops that may create one (jsc#SES-1880). * ceph: prevent snapshot creation in encrypted locked directories (jsc#SES-1880). * ceph: remove unnecessary check for NULL in parse_longname() (bsc#1216333). * ceph: send alternate_name in MClientRequest (jsc#SES-1880). * ceph: set DCACHE_NOKEY_NAME flag in ceph_lookup/atomic_open() (jsc#SES-1880). * ceph: size handling in MClientRequest, cap updates and inode traces (jsc#SES-1880). * ceph: switch ceph_lookup/atomic_open() to use new fscrypt helper (jsc#SES-1880). * ceph: use osd_req_op_extent_osd_iter for netfs reads (jsc#SES-1880). * ceph: voluntarily drop Xx caps for requests those touch parent mtime (jsc#SES-1880). * ceph: wait for OSD requests' callbacks to finish when unmounting (jsc#SES-1880). * cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (bsc#1215955). * cgroup: Remove duplicates in cgroup v1 tasks file (bsc#1211307). * clk: tegra: fix error return case for recalc_rate (git-fixes). * counter: microchip-tcb-capture: Fix the use of internal GCLK logic (git- fixes). * crypto: qat - Include algapi.h for low-level Crypto API (PED-6401). * crypto: qat - Remove unused function declarations (PED-6401). * crypto: qat - add fw_counters debugfs file (PED-6401). * crypto: qat - add heartbeat counters check (PED-6401). * crypto: qat - add heartbeat feature (PED-6401). * crypto: qat - add internal timer for qat 4xxx (PED-6401). * crypto: qat - add measure clock frequency (PED-6401). * crypto: qat - add missing function declaration in adf_dbgfs.h (PED-6401). * crypto: qat - add qat_zlib_deflate (PED-6401). * crypto: qat - add support for 402xx devices (PED-6401). * crypto: qat - change value of default idle filter (PED-6401). * crypto: qat - delay sysfs initialization (PED-6401). * crypto: qat - do not export adf_init_admin_pm() (PED-6401). * crypto: qat - drop log level of msg in get_instance_node() (PED-6401). * crypto: qat - drop obsolete heartbeat interface (PED-6401). * crypto: qat - drop redundant adf_enable_aer() (PED-6401). * crypto: qat - expose pm_idle_enabled through sysfs (PED-6401). * crypto: qat - extend buffer list logic interface (PED-6401). * crypto: qat - extend configuration for 4xxx (PED-6401). * crypto: qat - fix apply custom thread-service mapping for dc service (PED-6401). * crypto: qat - fix concurrency issue when device state changes (PED-6401). * crypto: qat - fix crypto capability detection for 4xxx (PED-6401). * crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (PED-6401). * crypto: qat - make fw images name constant (PED-6401). * crypto: qat - make state machine functions static (PED-6401). * crypto: qat - move dbgfs init to separate file (PED-6401). * crypto: qat - move returns to default case (PED-6401). * crypto: qat - refactor device restart logic (PED-6401). * crypto: qat - refactor fw config logic for 4xxx (PED-6401). * crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (PED-6401). * crypto: qat - replace state machine calls (PED-6401). * crypto: qat - replace the if statement with min() (PED-6401). * crypto: qat - set deprecated capabilities as reserved (PED-6401). * crypto: qat - unmap buffer before free for DH (PED-6401). * crypto: qat - unmap buffers before free for RSA (PED-6401). * crypto: qat - update slice mask for 4xxx devices (PED-6401). * crypto: qat - use kfree_sensitive instead of memset/kfree() (PED-6401). * dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq (git- fixes). * dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (git-fixes). * dmaengine: stm32-mdma: abort resume if no ongoing transfer (git-fixes). * drm/amd/display: Do not check registers, if using AUX BL control (git- fixes). * drm/amd/display: Do not set dpms_off for seamless boot (git-fixes). * drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes). * drm/amd: Fix detection of _PR3 on the PCIe root port (git-fixes). * drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV (git- fixes). * drm/amdgpu/soc21: do not remap HDP registers for SR-IOV (git-fixes). * drm/amdgpu: Handle null atom context in VBIOS info ioctl (git-fixes). * drm/amdgpu: add missing NULL check (git-fixes). * drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3 (git-fixes). * drm/amdkfd: Insert missing TLB flush on GFX10 and later (git-fixes). * drm/amdkfd: Use gpu_offset for user queue's wptr (git-fixes). * drm/atomic-helper: relax unregistered connector check (git-fixes). * drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet (git- fixes). * drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top (git-fixes). * drm/i915/pmu: Check if pmu is closed before stopping event (git-fixes). * drm/i915: Retry gtt fault when out of fence registers (git-fixes). * drm/mediatek: Correctly free sg_table in gem prime vmap (git-fixes). * drm/msm/dp: do not reinitialize phy unless retry during link training (git- fixes). * drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow (git- fixes). * drm/msm/dsi: fix irq_of_parse_and_map() error checking (git-fixes). * drm/msm/dsi: skip the wait for video mode done if not applicable (git- fixes). * drm/vmwgfx: fix typo of sizeof argument (git-fixes). * drm: panel-orientation-quirks: Add quirk for One Mix 2S (git-fixes). * firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() (git- fixes). * firmware: arm_ffa: Do not set the memory region attributes for MEM_LEND (git-fixes). * firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() (git-fixes). * fix x86/mm: print the encryption features in hyperv is disabled * fprobe: Ensure running fprobe_exit_handler() finished before calling rethook_free() (git-fixes). * fscrypt: new helper function - fscrypt_prepare_lookup_partial() (jsc#SES-1880). * gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (git- fixes). * gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (git-fixes). * gpio: pxa: disable pinctrl calls for MMP_GPIO (git-fixes). * gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (git-fixes). * gpio: timberdale: Fix potential deadlock on &tgpio->lock (git-fixes). * gpio: vf610: set value before the direction to avoid a glitch (git-fixes). * gve: Do not fully free QPL pages on prefill errors (git-fixes). * i2c: aspeed: Fix i2c bus hang in slave read (git-fixes). * i2c: i801: unregister tco_pdev in i801_probe() error path (git-fixes). * i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (git- fixes). * i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (git- fixes). * i2c: mux: gpio: Add missing fwnode_handle_put() (git-fixes). * i2c: mux: gpio:Â Replace custom acpi_get_local_address() (git-fixes). * i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (git-fixes). * i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (git-fixes). * i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (git-fixes). * i2c: npcm7xx: Fix callback completion ordering (git-fixes). * i2c: stm32f7: Fix PEC handling in case of SMBUS transfers (git-fixes). * ieee802154: ca8210: Fix a potential UAF in ca8210_probe (git-fixes). * iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale (git- fixes). * iio: adc: xilinx-xadc: Do not clobber preset voltage/temperature thresholds (git-fixes). * iio: exynos-adc: request second interupt only when touchscreen mode is used (git-fixes). * iio: pressure: bmp280: Fix NULL pointer exception (git-fixes). * iio: pressure: dps310: Adjust Timeout Settings (git-fixes). * iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (git-fixes). * intel x86 platform vsec kABI workaround (bsc#1216202). * io_uring/fs: remove sqe->rw_flags checking from LINKAT (git-fixes). * io_uring/rw: defer fsnotify calls to task context (git-fixes). * io_uring/rw: ensure kiocb_end_write() is always called (git-fixes). * io_uring/rw: remove leftover debug statement (git-fixes). * io_uring: Replace 0-length array with flexible array (git-fixes). * io_uring: ensure REQ_F_ISREG is set async offload (git-fixes). * io_uring: fix fdinfo sqe offsets calculation (git-fixes). * io_uring: fix memory leak when removing provided buffers (git-fixes). * iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). * iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). * iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). * iommu/arm-smmu-v3: Fix soft lockup triggered by (bsc#1215921) * kABI: fix bpf Tighten-ptr_to_btf_id checks (git-fixes). * kabi: blkcg_policy_data fix KABI (bsc#1216062). * kabi: workaround for enum nft_trans_phase (bsc#1215104). * kprobes: Prohibit probing on CFI preamble symbol (git-fixes). * leds: Drop BUG_ON check for LED_COLOR_ID_MULTI (git-fixes). * libceph: add CEPH_OSD_OP_ASSERT_VER support (jsc#SES-1880). * libceph: add new iov_iter-based ceph_msg_data_type and ceph_osd_data_type (jsc#SES-1880). * libceph: add sparse read support to OSD client (jsc#SES-1880). * libceph: add sparse read support to msgr1 (jsc#SES-1880). * libceph: add spinlock around osd->o_requests (jsc#SES-1880). * libceph: allow ceph_osdc_new_request to accept a multi-op read (jsc#SES-1880). * libceph: define struct ceph_sparse_extent and add some helpers (jsc#SES-1880). * libceph: new sparse_read op, support sparse reads on msgr2 crc codepath (jsc#SES-1880). * libceph: support sparse reads on msgr2 secure codepath (jsc#SES-1880). * libceph: use kernel_connect() (bsc#1216323). * misc: fastrpc: Clean buffers on remote invocation failures (git-fixes). * mm, memcg: reconsider kmem.limit_in_bytes deprecation (bsc#1208788 bsc#1213705). * mmc: core: Capture correct oemid-bits for eMMC cards (git-fixes). * mmc: core: sdio: hold retuning if sdio in 1-bit mode (git-fixes). * mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw (git-fixes). * mtd: physmap-core: Restore map_rom fallback (git-fixes). * mtd: rawnand: arasan: Ensure program page operations are successful (git- fixes). * mtd: rawnand: marvell: Ensure program page operations are successful (git- fixes). * mtd: rawnand: pl353: Ensure program page operations are successful (git- fixes). * mtd: rawnand: qcom: Unmap the right resource upon probe failure (git-fixes). * mtd: spinand: micron: correct bitmask for ecc status (git-fixes). * net/sched: fix netdevice reference leaks in attach_default_qdiscs() (git- fixes). * net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() (git-fixes). * net: mana: Fix TX CQE error handling (bsc#1215986). * net: mana: Fix oversized sge0 for GSO packets (bsc#1215986). * net: nfc: llcp: Add lock when modifying device list (git-fixes). * net: rfkill: gpio: prevent value glitch during probe (git-fixes). * net: sched: add barrier to fix packet stuck problem for lockless qdisc (bsc#1216345). * net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1216345). * net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (git- fixes). * net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git- fixes). * net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git- fixes). * net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (git-fixes). * net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg (git- fixes). * net: use sk_is_tcp() in more places (git-fixes). * netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (git-fixes). * netfilter: nf_tables: unbind non-anonymous set if rule construction fails (git-fixes). * nfc: nci: assert requested protocol is valid (git-fixes). * nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (git- fixes). * nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (git-fixes). * nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842). * phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (git-fixes). * phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes). * phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes). * pinctrl: avoid unsafe code pattern in find_pinctrl() (git-fixes). * pinctrl: renesas: rzn1: Enable missing PINMUX (git-fixes). * platform/surface: platform_profile: Propagate error if profile registration fails (git-fixes). * platform/x86/intel/pmt: Ignore uninitialized entries (bsc#1216202). * platform/x86/intel/pmt: telemetry: Fix fixed region handling (bsc#1216202). * platform/x86/intel/vsec: Rework early hardware code (bsc#1216202). * platform/x86/intel: Fix 'rmmod pmt_telemetry' panic (bsc#1216202). * platform/x86/intel: Fix pmt_crashlog array reference (bsc#1216202). * platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (git-fixes). * platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events (git- fixes). * platform/x86: think-lmi: Fix reference leak (git-fixes). * platform/x86: touchscreen_dmi: Add info for the Positivo C4128B (git-fixes). * power: supply: ucs1002: fix error code in ucs1002_get_property() (git- fixes). * quota: Fix slow quotaoff (bsc#1216621). * r8152: Cancel hw_phy_work if we have an error in probe (git-fixes). * r8152: Increase USB control msg timeout to 5000ms as per spec (git-fixes). * r8152: Release firmware if we have an error in probe (git-fixes). * r8152: Run the unload routine if we have errors during probe (git-fixes). * r8152: check budget for r8152_poll() (git-fixes). * regmap: fix NULL deref on lookup (git-fixes). * regmap: rbtree: Fix wrong register marked as in-cache when creating new node (git-fixes). * ring-buffer: Avoid softlockup in ring_buffer_resize() (git-fixes). * ring-buffer: Do not attempt to read past "commit" (git-fixes). * ring-buffer: Fix bytes info in per_cpu buffer stats (git-fixes). * ring-buffer: Update "shortest_full" in polling (git-fixes). * s390/cio: fix a memleak in css_alloc_subchannel (git-fixes bsc#1216510). * s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511). * s390: add z16 elf platform (git-fixes LTC#203789 bsc#1215956 LTC#203788 bsc#1215957). * sched/cpuset: Bring back cpuset_mutex (bsc#1215955). * sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (git fixes (sched)). * sched/rt: Fix live lock between select_fallback_rq() and RT push (git fixes (sched)). * sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes (sched)). * scsi: be2iscsi: Add length check when parsing nlattrs (git-fixes). * scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (git-fixes). * scsi: iscsi: Add length check for nlattr payload (git-fixes). * scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (git-fixes). * scsi: iscsi_tcp: restrict to TCP sockets (git-fixes). * scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O (git-fixes). * scsi: mpt3sas: Perform additional retries if doorbell read returns 0 (git- fixes). * scsi: pm8001: Setup IRQs on resume (git-fixes). * scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (git-fixes). * scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (git-fixes). * scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes). * scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (git-fixes). * scsi: qla4xxx: Add length check when parsing nlattrs (git-fixes). * selftests/bpf: Add more tests for check_max_stack_depth bug (git-fixes). * selftests/bpf: Add reproducer for decl_tag in func_proto argument (git- fixes). * selftests/bpf: Add reproducer for decl_tag in func_proto return type (git- fixes). * selftests/bpf: Add selftest for check_stack_max_depth bug (git-fixes). * selftests/bpf: Clean up sys_nanosleep uses (git-fixes). * serial: 8250_port: Check IRQ data before use (git-fixes). * soc: imx8m: Enable OCOTP clock for imx8mm before reading registers (git- fixes). * spi: nxp-fspi: reset the FLSHxCR1 registers (git-fixes). * spi: stm32: add a delay before SPI disable (git-fixes). * spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (git-fixes). * spi: sun6i: reduce DMA RX transfer width to single byte (git-fixes). * thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding (git- fixes). * thunderbolt: Restart XDomain discovery handshake after failure (git-fixes). * thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge (git-fixes). * tracing: Have current_trace inc the trace array ref count (git-fixes). * tracing: Have event inject files inc the trace array ref count (git-fixes). * tracing: Have option files inc the trace array ref count (git-fixes). * tracing: Have tracing_max_latency inc the trace array ref count (git-fixes). * tracing: Increase trace array ref count on enable and filter files (git- fixes). * tracing: Make trace_marker{,_raw} stream-like (git-fixes). * treewide: Spelling fix in comment (git-fixes). * usb: cdnsp: Fixes issue with dequeuing not queued requests (git-fixes). * usb: dwc3: Soft reset phy on probe for host (git-fixes). * usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (git- fixes). * usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes). * usb: hub: Guard against accesses to uninitialized BOS descriptors (git- fixes). * usb: musb: Get the musb_qh poniter after musb_giveback (git-fixes). * usb: musb: Modify the "HWVers" register address (git-fixes). * usb: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes). * usb: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes). * usb: serial: option: add entry for Sierra EM9191 with new firmware (git- fixes). * usb: typec: altmodes/displayport: Signal hpd low when exiting mode (git- fixes). * usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails (git- fixes). * usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes). * vmbus_testing: fix wrong python syntax for integer value comparison (git- fixes). * vringh: do not use vringh_kiov_advance() in vringh_iov_xfer() (git-fixes). * watchdog: iTCO_wdt: No need to stop the timer in probe (git-fixes). * watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (git-fixes). * wifi: cfg80211: Fix 6GHz scan configuration (git-fixes). * wifi: cfg80211: avoid leaking stack data into trace (git-fixes). * wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes). * wifi: iwlwifi: dbg_ini: fix structure packing (git-fixes). * wifi: iwlwifi: mvm: Fix a memory corruption issue (git-fixes). * wifi: mac80211: allow transmitting EAPOL frames with tainted key (git- fixes). * wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (git-fixes). * wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (git- fixes). * wifi: mwifiex: Fix tlv_buf_left calculation (git-fixes). * wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len (git-fixes). * x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (bsc#1213772). * x86/cpu, kvm: Add the Null Selector Clears Base feature (bsc#1213772). * x86/cpu, kvm: Add the SMM_CTL MSR not present feature (bsc#1213772). * x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (bsc#1213772). * x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (bsc#1213772). * x86/cpu: Support AMD Automatic IBRS (bsc#1213772). * x86/mm: Print the encryption features correctly when a paravisor is present (bsc#1206453). * x86/platform/uv: Use alternate source for socket to node data (bsc#1215696). * x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1212649). * x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1212649). * x86/sev: Disable MMIO emulation from user mode (bsc#1212649). * x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). * xen-netback: use default TX queue size for vifs (git-fixes). * xhci: Keep interrupt disabled in initialization until host is running (git- fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2023-4375=1 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2023-4375=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-4375=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4375=1 openSUSE-SLE-15.5-2023-4375=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4375=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4375=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4375=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2023-4375=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.36.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-default-livepatch-5.14.21-150500.55.36.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-1-150500.11.5.1 * kernel-livepatch-5_14_21-150500_55_36-default-1-150500.11.5.1 * kernel-default-debuginfo-5.14.21-150500.55.36.1 * kernel-default-livepatch-devel-5.14.21-150500.55.36.1 * kernel-default-debugsource-5.14.21-150500.55.36.1 * kernel-livepatch-SLE15-SP5_Update_7-debugsource-1-150500.11.5.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * dlm-kmp-default-debuginfo-5.14.21-150500.55.36.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.36.1 * ocfs2-kmp-default-5.14.21-150500.55.36.1 * dlm-kmp-default-5.14.21-150500.55.36.1 * cluster-md-kmp-default-5.14.21-150500.55.36.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.36.1 * kernel-default-debuginfo-5.14.21-150500.55.36.1 * kernel-default-debugsource-5.14.21-150500.55.36.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.36.1 * gfs2-kmp-default-5.14.21-150500.55.36.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (nosrc) * kernel-default-5.14.21-150500.55.36.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (nosrc) * kernel-default-5.14.21-150500.55.36.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * kernel-default-debugsource-5.14.21-150500.55.36.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.36.1 * kernel-default-debuginfo-5.14.21-150500.55.36.1 * kernel-default-extra-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (noarch) * kernel-devel-5.14.21-150500.55.36.1 * kernel-source-vanilla-5.14.21-150500.55.36.1 * kernel-docs-html-5.14.21-150500.55.36.1 * kernel-source-5.14.21-150500.55.36.1 * kernel-macros-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (nosrc ppc64le x86_64) * kernel-debug-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (ppc64le x86_64) * kernel-debug-devel-debuginfo-5.14.21-150500.55.36.1 * kernel-debug-debuginfo-5.14.21-150500.55.36.1 * kernel-debug-devel-5.14.21-150500.55.36.1 * kernel-debug-livepatch-devel-5.14.21-150500.55.36.1 * kernel-debug-debugsource-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (x86_64) * kernel-default-vdso-debuginfo-5.14.21-150500.55.36.1 * kernel-kvmsmall-vdso-5.14.21-150500.55.36.1 * kernel-debug-vdso-5.14.21-150500.55.36.1 * kernel-default-vdso-5.14.21-150500.55.36.1 * kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.36.1 * kernel-debug-vdso-debuginfo-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * kernel-kvmsmall-devel-5.14.21-150500.55.36.1 * kernel-kvmsmall-debugsource-5.14.21-150500.55.36.1 * kernel-default-base-rebuild-5.14.21-150500.55.36.1.150500.6.15.3 * kernel-kvmsmall-livepatch-devel-5.14.21-150500.55.36.1 * kernel-kvmsmall-debuginfo-5.14.21-150500.55.36.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.36.1 * kernel-default-base-5.14.21-150500.55.36.1.150500.6.15.3 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-obs-qa-5.14.21-150500.55.36.1 * kselftests-kmp-default-5.14.21-150500.55.36.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.36.1 * kernel-default-devel-5.14.21-150500.55.36.1 * reiserfs-kmp-default-5.14.21-150500.55.36.1 * kernel-obs-build-debugsource-5.14.21-150500.55.36.1 * kernel-default-optional-debuginfo-5.14.21-150500.55.36.1 * kernel-obs-build-5.14.21-150500.55.36.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.36.1 * kernel-default-livepatch-5.14.21-150500.55.36.1 * kernel-default-extra-5.14.21-150500.55.36.1 * cluster-md-kmp-default-5.14.21-150500.55.36.1 * kernel-default-livepatch-devel-5.14.21-150500.55.36.1 * kselftests-kmp-default-debuginfo-5.14.21-150500.55.36.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.36.1 * ocfs2-kmp-default-5.14.21-150500.55.36.1 * dlm-kmp-default-5.14.21-150500.55.36.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.36.1 * kernel-default-debuginfo-5.14.21-150500.55.36.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.36.1 * kernel-syms-5.14.21-150500.55.36.1 * gfs2-kmp-default-5.14.21-150500.55.36.1 * kernel-default-optional-5.14.21-150500.55.36.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.36.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.36.1 * kernel-default-debugsource-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_7-debugsource-1-150500.11.5.1 * kernel-livepatch-5_14_21-150500_55_36-default-1-150500.11.5.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-1-150500.11.5.1 * openSUSE Leap 15.5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150500.55.36.1 * kernel-zfcpdump-debuginfo-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (nosrc) * dtb-aarch64-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (aarch64) * dlm-kmp-64kb-debuginfo-5.14.21-150500.55.36.1 * kernel-64kb-debugsource-5.14.21-150500.55.36.1 * ocfs2-kmp-64kb-5.14.21-150500.55.36.1 * reiserfs-kmp-64kb-5.14.21-150500.55.36.1 * kernel-64kb-extra-debuginfo-5.14.21-150500.55.36.1 * kernel-64kb-optional-debuginfo-5.14.21-150500.55.36.1 * dtb-allwinner-5.14.21-150500.55.36.1 * kernel-64kb-livepatch-devel-5.14.21-150500.55.36.1 * dtb-arm-5.14.21-150500.55.36.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.36.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.36.1 * dtb-rockchip-5.14.21-150500.55.36.1 * dtb-socionext-5.14.21-150500.55.36.1 * dtb-altera-5.14.21-150500.55.36.1 * kernel-64kb-devel-5.14.21-150500.55.36.1 * dtb-broadcom-5.14.21-150500.55.36.1 * dtb-cavium-5.14.21-150500.55.36.1 * dtb-freescale-5.14.21-150500.55.36.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.36.1 * dtb-lg-5.14.21-150500.55.36.1 * dtb-amlogic-5.14.21-150500.55.36.1 * kernel-64kb-debuginfo-5.14.21-150500.55.36.1 * dlm-kmp-64kb-5.14.21-150500.55.36.1 * dtb-apple-5.14.21-150500.55.36.1 * dtb-sprd-5.14.21-150500.55.36.1 * dtb-renesas-5.14.21-150500.55.36.1 * dtb-mediatek-5.14.21-150500.55.36.1 * kernel-64kb-extra-5.14.21-150500.55.36.1 * gfs2-kmp-64kb-5.14.21-150500.55.36.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.36.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.36.1 * dtb-qcom-5.14.21-150500.55.36.1 * dtb-apm-5.14.21-150500.55.36.1 * dtb-xilinx-5.14.21-150500.55.36.1 * dtb-nvidia-5.14.21-150500.55.36.1 * kselftests-kmp-64kb-5.14.21-150500.55.36.1 * dtb-exynos-5.14.21-150500.55.36.1 * kernel-64kb-optional-5.14.21-150500.55.36.1 * dtb-amd-5.14.21-150500.55.36.1 * dtb-amazon-5.14.21-150500.55.36.1 * dtb-marvell-5.14.21-150500.55.36.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.36.1 * cluster-md-kmp-64kb-5.14.21-150500.55.36.1 * dtb-hisilicon-5.14.21-150500.55.36.1 * openSUSE Leap 15.5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.36.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150500.55.36.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * kernel-default-base-5.14.21-150500.55.36.1.150500.6.15.3 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.36.1 * kernel-default-debuginfo-5.14.21-150500.55.36.1 * Basesystem Module 15-SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.36.1 * Basesystem Module 15-SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.36.1 * kernel-64kb-debugsource-5.14.21-150500.55.36.1 * kernel-64kb-devel-5.14.21-150500.55.36.1 * kernel-64kb-debuginfo-5.14.21-150500.55.36.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150500.55.36.1 * Basesystem Module 15-SP5 (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.36.1.150500.6.15.3 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.36.1 * kernel-default-devel-5.14.21-150500.55.36.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.36.1 * kernel-default-debuginfo-5.14.21-150500.55.36.1 * Basesystem Module 15-SP5 (noarch) * kernel-macros-5.14.21-150500.55.36.1 * kernel-devel-5.14.21-150500.55.36.1 * Basesystem Module 15-SP5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.36.1 * Basesystem Module 15-SP5 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150500.55.36.1 * kernel-zfcpdump-debuginfo-5.14.21-150500.55.36.1 * Development Tools Module 15-SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.36.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kernel-obs-build-debugsource-5.14.21-150500.55.36.1 * kernel-obs-build-5.14.21-150500.55.36.1 * kernel-syms-5.14.21-150500.55.36.1 * Development Tools Module 15-SP5 (noarch) * kernel-source-5.14.21-150500.55.36.1 * Legacy Module 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.36.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.36.1 * kernel-default-debuginfo-5.14.21-150500.55.36.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.36.1 * reiserfs-kmp-default-5.14.21-150500.55.36.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2163.html * https://www.suse.com/security/cve/CVE-2023-31085.html * https://www.suse.com/security/cve/CVE-2023-34324.html * https://www.suse.com/security/cve/CVE-2023-3777.html * https://www.suse.com/security/cve/CVE-2023-39189.html * https://www.suse.com/security/cve/CVE-2023-39191.html * https://www.suse.com/security/cve/CVE-2023-39193.html * https://www.suse.com/security/cve/CVE-2023-46813.html * https://www.suse.com/security/cve/CVE-2023-5178.html * https://bugzilla.suse.com/show_bug.cgi?id=1208788 * https://bugzilla.suse.com/show_bug.cgi?id=1211162 * https://bugzilla.suse.com/show_bug.cgi?id=1211307 * https://bugzilla.suse.com/show_bug.cgi?id=1212423 * https://bugzilla.suse.com/show_bug.cgi?id=1212649 * https://bugzilla.suse.com/show_bug.cgi?id=1213705 * https://bugzilla.suse.com/show_bug.cgi?id=1213772 * https://bugzilla.suse.com/show_bug.cgi?id=1214754 * https://bugzilla.suse.com/show_bug.cgi?id=1214874 * https://bugzilla.suse.com/show_bug.cgi?id=1215095 * https://bugzilla.suse.com/show_bug.cgi?id=1215104 * https://bugzilla.suse.com/show_bug.cgi?id=1215523 * https://bugzilla.suse.com/show_bug.cgi?id=1215545 * https://bugzilla.suse.com/show_bug.cgi?id=1215921 * https://bugzilla.suse.com/show_bug.cgi?id=1215955 * https://bugzilla.suse.com/show_bug.cgi?id=1215986 * https://bugzilla.suse.com/show_bug.cgi?id=1216062 * https://bugzilla.suse.com/show_bug.cgi?id=1216202 * https://bugzilla.suse.com/show_bug.cgi?id=1216322 * https://bugzilla.suse.com/show_bug.cgi?id=1216323 * https://bugzilla.suse.com/show_bug.cgi?id=1216324 * https://bugzilla.suse.com/show_bug.cgi?id=1216333 * https://bugzilla.suse.com/show_bug.cgi?id=1216345 * https://bugzilla.suse.com/show_bug.cgi?id=1216512 * https://bugzilla.suse.com/show_bug.cgi?id=1216621 * https://bugzilla.suse.com/show_bug.cgi?id=802154

1 0

SUSE-SU-2023:4378-1: important: Security update for the Linux Kernel
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2023:4378-1 Rating: important References: * bsc#1208788 * bsc#1210778 * bsc#1211307 * bsc#1212423 * bsc#1212649 * bsc#1213705 * bsc#1213772 * bsc#1214842 * bsc#1215095 * bsc#1215104 * bsc#1215518 * bsc#1215955 * bsc#1215956 * bsc#1215957 * bsc#1215986 * bsc#1216062 * bsc#1216345 * bsc#1216510 * bsc#1216511 * bsc#1216512 * bsc#1216621 Cross-References: * CVE-2023-2163 * CVE-2023-31085 * CVE-2023-34324 * CVE-2023-3777 * CVE-2023-39189 * CVE-2023-39193 * CVE-2023-5178 CVSS scores: * CVE-2023-2163 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2023-2163 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2023-31085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31085 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-34324 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3777 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3777 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-39189 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-39189 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39193 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39193 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-5178 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Development Tools Module 15-SP4 * Legacy Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Workstation Extension 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves seven vulnerabilities and has 14 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518) * CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). * CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) * CVE-2023-5178: Fixed an UAF in queue intialization setup. (bsc#1215768) * CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) * CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). * CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095) The following non-security bugs were fixed: * 9p: virtio: make sure 'offs' is initialized in zc_request (git-fixes). * ACPI: irq: Fix incorrect return value in acpi_register_gsi() (git-fixes). * ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (git-fixes). * ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (git-fixes). * ALSA: hda/realtek: Change model for Intel RVP board (git-fixes). * ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset (git-fixes). * ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (git- fixes). * ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (git-fixes). * ASoC: codecs: wcd938x: drop bogus bind error handling (git-fixes). * ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes). * ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag (git-fixes). * ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link (git-fixes). * ASoC: pxa: fix a memory leak in probe() (git-fixes). * ata: libata-core: Do not register PM operations for SAS ports (git-fixes). * ata: libata-core: Fix ata_port_request_pm() locking (git-fixes). * ata: libata-core: Fix port and device removal (git-fixes). * ata: libata-sata: increase PMP SRST timeout to 10s (git-fixes). * ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (git-fixes). * blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (bsc#1216062). * blk-cgroup: support to track if policy is online (bsc#1216062). * Bluetooth: avoid memcmp() out of bounds warning (git-fixes). * Bluetooth: Avoid redundant authentication (git-fixes). * Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes). * Bluetooth: Fix a refcnt underflow problem for hci_conn (git-fixes). * Bluetooth: hci_event: Fix coding style (git-fixes). * Bluetooth: hci_event: Fix using memcmp when comparing keys (git-fixes). * Bluetooth: hci_event: Ignore NULL link key (git-fixes). * Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (git-fixes). * Bluetooth: hci_sock: fix slab oob read in create_monitor_event (git-fixes). * Bluetooth: Reject connection with the device which has same BD_ADDR (git- fixes). * Bluetooth: vhci: Fix race when opening vhci device (git-fixes). * bpf: propagate precision in ALU/ALU64 operations (git-fixes). * bus: ti-sysc: Fix missing AM35xx SoC matching (git-fixes). * bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() (git- fixes). * cgroup: Remove duplicates in cgroup v1 tasks file (bsc#1211307). * cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (bsc#1215955). * clk: tegra: fix error return case for recalc_rate (git-fixes). * counter: microchip-tcb-capture: Fix the use of internal GCLK logic (git- fixes). * crypto: qat - add fw_counters debugfs file (PED-6401). * crypto: qat - add heartbeat counters check (PED-6401). * crypto: qat - add heartbeat feature (PED-6401). * crypto: qat - add internal timer for qat 4xxx (PED-6401). * crypto: qat - add measure clock frequency (PED-6401). * crypto: qat - add missing function declaration in adf_dbgfs.h (PED-6401). * crypto: qat - add qat_zlib_deflate (PED-6401). * crypto: qat - add support for 402xx devices (PED-6401). * crypto: qat - change value of default idle filter (PED-6401). * crypto: qat - delay sysfs initialization (PED-6401). * crypto: qat - do not export adf_init_admin_pm() (PED-6401). * crypto: qat - drop log level of msg in get_instance_node() (PED-6401). * crypto: qat - drop obsolete heartbeat interface (PED-6401). * crypto: qat - drop redundant adf_enable_aer() (PED-6401). * crypto: qat - expose pm_idle_enabled through sysfs (PED-6401). * crypto: qat - extend buffer list logic interface (PED-6401). * crypto: qat - extend configuration for 4xxx (PED-6401). * crypto: qat - fix apply custom thread-service mapping for dc service (PED-6401). * crypto: qat - fix concurrency issue when device state changes (PED-6401). * crypto: qat - fix crypto capability detection for 4xxx (PED-6401). * crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (PED-6401). * crypto: qat - Include algapi.h for low-level Crypto API (PED-6401). * crypto: qat - make fw images name constant (PED-6401). * crypto: qat - make state machine functions static (PED-6401). * crypto: qat - move dbgfs init to separate file (PED-6401). * crypto: qat - move returns to default case (PED-6401). * crypto: qat - refactor device restart logic (PED-6401). * crypto: qat - refactor fw config logic for 4xxx (PED-6401). * crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (PED-6401). * crypto: qat - Remove unused function declarations (PED-6401). * crypto: qat - replace state machine calls (PED-6401). * crypto: qat - replace the if statement with min() (PED-6401). * crypto: qat - set deprecated capabilities as reserved (PED-6401). * crypto: qat - unmap buffer before free for DH (PED-6401). * crypto: qat - unmap buffers before free for RSA (PED-6401). * crypto: qat - update slice mask for 4xxx devices (PED-6401). * crypto: qat - use kfree_sensitive instead of memset/kfree() (PED-6401). * dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq (git- fixes). * dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (git-fixes). * dmaengine: stm32-mdma: abort resume if no ongoing transfer (git-fixes). * Documentation: qat: change kernel version (PED-6401). * Documentation: qat: rewrite description (PED-6401). * Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (git- fixes). * Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (git- fixes). * drm: panel-orientation-quirks: Add quirk for One Mix 2S (git-fixes). * drm/amd/display: Do not check registers, if using AUX BL control (git- fixes). * drm/amd/display: Do not set dpms_off for seamless boot (git-fixes). * drm/amdgpu: add missing NULL check (git-fixes). * drm/amdgpu: Handle null atom context in VBIOS info ioctl (git-fixes). * drm/i915: Retry gtt fault when out of fence registers (git-fixes). * drm/msm/dp: do not reinitialize phy unless retry during link training (git- fixes). * drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow (git- fixes). * drm/msm/dsi: fix irq_of_parse_and_map() error checking (git-fixes). * drm/msm/dsi: skip the wait for video mode done if not applicable (git- fixes). * drm/vmwgfx: fix typo of sizeof argument (git-fixes). * firmware: arm_ffa: Do not set the memory region attributes for MEM_LEND (git-fixes). * firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() (git-fixes). * gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (git- fixes). * gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (git-fixes). * gpio: pxa: disable pinctrl calls for MMP_GPIO (git-fixes). * gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (git-fixes). * gpio: timberdale: Fix potential deadlock on &tgpio->lock (git-fixes). * gpio: vf610: set value before the direction to avoid a glitch (git-fixes). * gve: Do not fully free QPL pages on prefill errors (git-fixes). * HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (git- fixes). * HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (git-fixes). * HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (git- fixes). * HID: multitouch: Add required quirk for Synaptics 0xcd7e device (git-fixes). * HID: sony: Fix a potential memory leak in sony_probe() (git-fixes). * HID: sony: remove duplicate NULL check before calling usb_free_urb() (git- fixes). * i2c: i801: unregister tco_pdev in i801_probe() error path (git-fixes). * i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (git- fixes). * i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (git- fixes). * i2c: mux: gpio: Add missing fwnode_handle_put() (git-fixes). * i2c: mux: gpio: Replace custom acpi_get_local_address() (git-fixes). * i2c: npcm7xx: Fix callback completion ordering (git-fixes). * IB/mlx4: Fix the size of a buffer in add_port_entries() (git-fixes) * ieee802154: ca8210: Fix a potential UAF in ca8210_probe (git-fixes). * iio: pressure: bmp280: Fix NULL pointer exception (git-fixes). * iio: pressure: dps310: Adjust Timeout Settings (git-fixes). * iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (git-fixes). * Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case (git-fixes). * Input: powermate - fix use-after-free in powermate_config_complete (git- fixes). * Input: psmouse - fix fast_reconnect function for PS/2 mode (git-fixes). * Input: xpad - add PXN V900 support (git-fixes). * iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). * iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). * iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). * kabi: blkcg_policy_data fix KABI (bsc#1216062). * kabi: workaround for enum nft_trans_phase (bsc#1215104). * kprobes: Prohibit probing on CFI preamble symbol (git-fixes). * KVM: s390: fix gisa destroy operation might lead to cpu stalls (git-fixes bsc#1216512). * KVM: SVM: Do not kill SEV guest if SMAP erratum triggers in usermode (git- fixes). * KVM: x86: add support for CPUID leaf 0x80000021 (bsc#1213772). * KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid() (git-fixes). * KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (bsc#1213772). * KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (bsc#1213772). * KVM: x86: synthesize CPUID leaf 0x80000021h if useful (bsc#1213772). * KVM: x86: work around QEMU issue with synthetic CPUID leaves (git-fixes). * KVM: x86/mmu: Reconstruct shadow page root if the guest PDPTEs is changed (git-fixes). * leds: Drop BUG_ON check for LED_COLOR_ID_MULTI (git-fixes). * mm, memcg: reconsider kmem.limit_in_bytes deprecation (bsc#1208788 bsc#1213705). * mmc: core: Capture correct oemid-bits for eMMC cards (git-fixes). * mmc: core: sdio: hold retuning if sdio in 1-bit mode (git-fixes). * mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw (git-fixes). * mtd: physmap-core: Restore map_rom fallback (git-fixes). * mtd: rawnand: arasan: Ensure program page operations are successful (git- fixes). * mtd: rawnand: marvell: Ensure program page operations are successful (git- fixes). * mtd: rawnand: pl353: Ensure program page operations are successful (git- fixes). * mtd: rawnand: qcom: Unmap the right resource upon probe failure (git-fixes). * mtd: spinand: micron: correct bitmask for ecc status (git-fixes). * net: mana: Fix oversized sge0 for GSO packets (bsc#1215986). * net: mana: Fix TX CQE error handling (bsc#1215986). * net: nfc: llcp: Add lock when modifying device list (git-fixes). * net: rfkill: gpio: prevent value glitch during probe (git-fixes). * net: sched: add barrier to fix packet stuck problem for lockless qdisc (bsc#1216345). * net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1216345). * net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (git- fixes). * net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git- fixes). * net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git- fixes). * net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (git-fixes). * net/sched: fix netdevice reference leaks in attach_default_qdiscs() (git- fixes). * netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (git-fixes). * netfilter: nf_tables: unbind non-anonymous set if rule construction fails (git-fixes). * nfc: nci: assert requested protocol is valid (git-fixes). * nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (git- fixes). * nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (git-fixes). * nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842). * phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (git-fixes). * phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes). * phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes). * pinctrl: avoid unsafe code pattern in find_pinctrl() (git-fixes). * pinctrl: renesas: rzn1: Enable missing PINMUX (git-fixes). * platform/surface: platform_profile: Propagate error if profile registration fails (git-fixes). * platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (git-fixes). * platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events (git- fixes). * platform/x86: think-lmi: Fix reference leak (git-fixes). * platform/x86: touchscreen_dmi: Add info for the Positivo C4128B (git-fixes). * power: supply: ucs1002: fix error code in ucs1002_get_property() (git- fixes). * r8152: check budget for r8152_poll() (git-fixes). * RDMA/cma: Fix truncation compilation warning in make_cma_ports (git-fixes) * RDMA/cma: Initialize ib_sa_multicast structure to 0 when join (git-fixes) * RDMA/core: Require admin capabilities to set system parameters (git-fixes) * RDMA/cxgb4: Check skb value for failure to allocate (git-fixes) * RDMA/mlx5: Fix NULL string error (git-fixes) * RDMA/siw: Fix connection failure handling (git-fixes) * RDMA/srp: Do not call scsi_done() from srp_abort() (git-fixes) * RDMA/uverbs: Fix typo of sizeof argument (git-fixes) * regmap: fix NULL deref on lookup (git-fixes). * regmap: rbtree: Fix wrong register marked as in-cache when creating new node (git-fixes). * ring-buffer: Avoid softlockup in ring_buffer_resize() (git-fixes). * ring-buffer: Do not attempt to read past "commit" (git-fixes). * ring-buffer: Fix bytes info in per_cpu buffer stats (git-fixes). * ring-buffer: Update "shortest_full" in polling (git-fixes). * s390: add z16 elf platform (git-fixes LTC#203789 bsc#1215956 LTC#203788 bsc#1215957). * s390/cio: fix a memleak in css_alloc_subchannel (git-fixes bsc#1216510). * s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511). * sched/cpuset: Bring back cpuset_mutex (bsc#1215955). * sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (git fixes (sched)). * sched/rt: Fix live lock between select_fallback_rq() and RT push (git fixes (sched)). * sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes (sched)). * serial: 8250_port: Check IRQ data before use (git-fixes). * soc: imx8m: Enable OCOTP clock for imx8mm before reading registers (git- fixes). * spi: nxp-fspi: reset the FLSHxCR1 registers (git-fixes). * spi: stm32: add a delay before SPI disable (git-fixes). * spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (git-fixes). * spi: sun6i: reduce DMA RX transfer width to single byte (git-fixes). * thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding (git- fixes). * thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge (git-fixes). * tracing: Have current_trace inc the trace array ref count (git-fixes). * tracing: Have event inject files inc the trace array ref count (git-fixes). * tracing: Have option files inc the trace array ref count (git-fixes). * tracing: Have tracing_max_latency inc the trace array ref count (git-fixes). * tracing: Increase trace array ref count on enable and filter files (git- fixes). * tracing: Make trace_marker{,_raw} stream-like (git-fixes). * usb: cdnsp: Fixes issue with dequeuing not queued requests (git-fixes). * usb: dwc3: Soft reset phy on probe for host (git-fixes). * usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (git- fixes). * usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes). * usb: musb: Get the musb_qh poniter after musb_giveback (git-fixes). * usb: musb: Modify the "HWVers" register address (git-fixes). * usb: serial: option: add entry for Sierra EM9191 with new firmware (git- fixes). * usb: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes). * usb: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes). * usb: typec: altmodes/displayport: Signal hpd low when exiting mode (git- fixes). * usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes). * vmbus_testing: fix wrong python syntax for integer value comparison (git- fixes). * vringh: do not use vringh_kiov_advance() in vringh_iov_xfer() (git-fixes). * watchdog: iTCO_wdt: No need to stop the timer in probe (git-fixes). * watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (git-fixes). * wifi: cfg80211: avoid leaking stack data into trace (git-fixes). * wifi: cfg80211: Fix 6GHz scan configuration (git-fixes). * wifi: iwlwifi: dbg_ini: fix structure packing (git-fixes). * wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes). * wifi: iwlwifi: mvm: Fix a memory corruption issue (git-fixes). * wifi: mac80211: allow transmitting EAPOL frames with tainted key (git- fixes). * wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (git-fixes). * wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (git- fixes). * wifi: mwifiex: Fix tlv_buf_left calculation (git-fixes). * wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len (git-fixes). * x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (bsc#1213772). * x86/cpu, kvm: Add the Null Selector Clears Base feature (bsc#1213772). * x86/cpu, kvm: Add the SMM_CTL MSR not present feature (bsc#1213772). * x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (bsc#1213772). * x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (bsc#1213772). * x86/cpu: Support AMD Automatic IBRS (bsc#1213772). * x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1212649). * x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1212649). * x86/sev: Disable MMIO emulation from user mode (bsc#1212649). * xen-netback: use default TX queue size for vifs (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4378=1 SUSE-2023-4378=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4378=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4378=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4378=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4378=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4378=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4378=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4378=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4378=1 * Legacy Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2023-4378=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2023-4378=1 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2023-4378=1 * SUSE Linux Enterprise Workstation Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-4378=1 ## Package List: * openSUSE Leap 15.4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (noarch) * kernel-devel-5.14.21-150400.24.97.1 * kernel-source-5.14.21-150400.24.97.1 * kernel-source-vanilla-5.14.21-150400.24.97.1 * kernel-macros-5.14.21-150400.24.97.1 * kernel-docs-html-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (nosrc ppc64le x86_64) * kernel-debug-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (ppc64le x86_64) * kernel-debug-debuginfo-5.14.21-150400.24.97.1 * kernel-debug-devel-5.14.21-150400.24.97.1 * kernel-debug-debugsource-5.14.21-150400.24.97.1 * kernel-debug-livepatch-devel-5.14.21-150400.24.97.1 * kernel-debug-devel-debuginfo-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debuginfo-5.14.21-150400.24.97.1 * kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2 * kernel-default-base-rebuild-5.14.21-150400.24.97.1.150400.24.44.2 * kernel-kvmsmall-devel-debuginfo-5.14.21-150400.24.97.1 * kernel-kvmsmall-devel-5.14.21-150400.24.97.1 * kernel-kvmsmall-debugsource-5.14.21-150400.24.97.1 * kernel-kvmsmall-livepatch-devel-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.97.1 * dlm-kmp-default-5.14.21-150400.24.97.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.97.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.97.1 * gfs2-kmp-default-5.14.21-150400.24.97.1 * kernel-default-extra-5.14.21-150400.24.97.1 * kernel-default-extra-debuginfo-5.14.21-150400.24.97.1 * kernel-obs-qa-5.14.21-150400.24.97.1 * cluster-md-kmp-default-5.14.21-150400.24.97.1 * kernel-default-devel-5.14.21-150400.24.97.1 * kernel-obs-build-debugsource-5.14.21-150400.24.97.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.97.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-livepatch-devel-5.14.21-150400.24.97.1 * kernel-default-optional-debuginfo-5.14.21-150400.24.97.1 * ocfs2-kmp-default-5.14.21-150400.24.97.1 * kernel-syms-5.14.21-150400.24.97.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.97.1 * reiserfs-kmp-default-5.14.21-150400.24.97.1 * kernel-default-debugsource-5.14.21-150400.24.97.1 * kernel-default-optional-5.14.21-150400.24.97.1 * kselftests-kmp-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-livepatch-5.14.21-150400.24.97.1 * kselftests-kmp-default-5.14.21-150400.24.97.1 * kernel-obs-build-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_20-debugsource-1-150400.9.3.2 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-1-150400.9.3.2 * kernel-livepatch-5_14_21-150400_24_97-default-1-150400.9.3.2 * openSUSE Leap 15.4 (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.97.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (nosrc) * dtb-aarch64-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (aarch64) * kernel-64kb-extra-5.14.21-150400.24.97.1 * dtb-xilinx-5.14.21-150400.24.97.1 * dtb-socionext-5.14.21-150400.24.97.1 * ocfs2-kmp-64kb-5.14.21-150400.24.97.1 * dtb-sprd-5.14.21-150400.24.97.1 * dlm-kmp-64kb-5.14.21-150400.24.97.1 * dtb-allwinner-5.14.21-150400.24.97.1 * reiserfs-kmp-64kb-5.14.21-150400.24.97.1 * dtb-amd-5.14.21-150400.24.97.1 * dtb-exynos-5.14.21-150400.24.97.1 * dtb-mediatek-5.14.21-150400.24.97.1 * dtb-arm-5.14.21-150400.24.97.1 * dtb-altera-5.14.21-150400.24.97.1 * dtb-lg-5.14.21-150400.24.97.1 * dtb-renesas-5.14.21-150400.24.97.1 * dtb-freescale-5.14.21-150400.24.97.1 * kernel-64kb-debuginfo-5.14.21-150400.24.97.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150400.24.97.1 * dtb-qcom-5.14.21-150400.24.97.1 * dtb-marvell-5.14.21-150400.24.97.1 * dtb-cavium-5.14.21-150400.24.97.1 * dlm-kmp-64kb-debuginfo-5.14.21-150400.24.97.1 * gfs2-kmp-64kb-5.14.21-150400.24.97.1 * kernel-64kb-optional-5.14.21-150400.24.97.1 * cluster-md-kmp-64kb-5.14.21-150400.24.97.1 * dtb-apm-5.14.21-150400.24.97.1 * kernel-64kb-optional-debuginfo-5.14.21-150400.24.97.1 * kernel-64kb-livepatch-devel-5.14.21-150400.24.97.1 * dtb-rockchip-5.14.21-150400.24.97.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150400.24.97.1 * dtb-hisilicon-5.14.21-150400.24.97.1 * dtb-amlogic-5.14.21-150400.24.97.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150400.24.97.1 * dtb-amazon-5.14.21-150400.24.97.1 * kselftests-kmp-64kb-5.14.21-150400.24.97.1 * dtb-apple-5.14.21-150400.24.97.1 * dtb-nvidia-5.14.21-150400.24.97.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150400.24.97.1 * kernel-64kb-devel-5.14.21-150400.24.97.1 * dtb-broadcom-5.14.21-150400.24.97.1 * kernel-64kb-extra-debuginfo-5.14.21-150400.24.97.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150400.24.97.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.97.1 * kernel-64kb-debugsource-5.14.21-150400.24.97.1 * openSUSE Leap 15.4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.97.1 * openSUSE Leap Micro 5.3 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.97.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * kernel-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2 * kernel-default-debugsource-5.14.21-150400.24.97.1 * openSUSE Leap Micro 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.97.1 * openSUSE Leap Micro 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-debugsource-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-debugsource-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-debugsource-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-debugsource-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-debugsource-5.14.21-150400.24.97.1 * Basesystem Module 15-SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.97.1 * Basesystem Module 15-SP4 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150400.24.97.1 * kernel-64kb-debugsource-5.14.21-150400.24.97.1 * kernel-64kb-devel-5.14.21-150400.24.97.1 * kernel-64kb-debuginfo-5.14.21-150400.24.97.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150400.24.97.1 * Basesystem Module 15-SP4 (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-5.14.21-150400.24.97.1 * kernel-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.97.1 * kernel-default-debugsource-5.14.21-150400.24.97.1 * Basesystem Module 15-SP4 (noarch) * kernel-macros-5.14.21-150400.24.97.1 * kernel-devel-5.14.21-150400.24.97.1 * Basesystem Module 15-SP4 (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.97.1 * Basesystem Module 15-SP4 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.97.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.97.1 * Development Tools Module 15-SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.97.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * kernel-obs-build-debugsource-5.14.21-150400.24.97.1 * kernel-syms-5.14.21-150400.24.97.1 * kernel-obs-build-5.14.21-150400.24.97.1 * Development Tools Module 15-SP4 (noarch) * kernel-source-5.14.21-150400.24.97.1 * Legacy Module 15-SP4 (nosrc) * kernel-default-5.14.21-150400.24.97.1 * Legacy Module 15-SP4 (aarch64 ppc64le s390x x86_64) * reiserfs-kmp-default-5.14.21-150400.24.97.1 * kernel-default-debuginfo-5.14.21-150400.24.97.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-debugsource-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Live Patching 15-SP4 (nosrc) * kernel-default-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-debugsource-5.14.21-150400.24.97.1 * kernel-default-livepatch-devel-5.14.21-150400.24.97.1 * kernel-default-livepatch-5.14.21-150400.24.97.1 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-1-150400.9.3.2 * kernel-livepatch-SLE15-SP4_Update_20-debugsource-1-150400.9.3.2 * kernel-livepatch-5_14_21-150400_24_97-default-1-150400.9.3.2 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.97.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-debuginfo-5.14.21-150400.24.97.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-debugsource-5.14.21-150400.24.97.1 * gfs2-kmp-default-5.14.21-150400.24.97.1 * ocfs2-kmp-default-5.14.21-150400.24.97.1 * cluster-md-kmp-default-5.14.21-150400.24.97.1 * dlm-kmp-default-5.14.21-150400.24.97.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.97.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (nosrc) * kernel-default-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Workstation Extension 15 SP4 (nosrc) * kernel-default-5.14.21-150400.24.97.1 * SUSE Linux Enterprise Workstation Extension 15 SP4 (x86_64) * kernel-default-extra-5.14.21-150400.24.97.1 * kernel-default-debuginfo-5.14.21-150400.24.97.1 * kernel-default-extra-debuginfo-5.14.21-150400.24.97.1 * kernel-default-debugsource-5.14.21-150400.24.97.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2163.html * https://www.suse.com/security/cve/CVE-2023-31085.html * https://www.suse.com/security/cve/CVE-2023-34324.html * https://www.suse.com/security/cve/CVE-2023-3777.html * https://www.suse.com/security/cve/CVE-2023-39189.html * https://www.suse.com/security/cve/CVE-2023-39193.html * https://www.suse.com/security/cve/CVE-2023-5178.html * https://bugzilla.suse.com/show_bug.cgi?id=1208788 * https://bugzilla.suse.com/show_bug.cgi?id=1210778 * https://bugzilla.suse.com/show_bug.cgi?id=1211307 * https://bugzilla.suse.com/show_bug.cgi?id=1212423 * https://bugzilla.suse.com/show_bug.cgi?id=1212649 * https://bugzilla.suse.com/show_bug.cgi?id=1213705 * https://bugzilla.suse.com/show_bug.cgi?id=1213772 * https://bugzilla.suse.com/show_bug.cgi?id=1214842 * https://bugzilla.suse.com/show_bug.cgi?id=1215095 * https://bugzilla.suse.com/show_bug.cgi?id=1215104 * https://bugzilla.suse.com/show_bug.cgi?id=1215518 * https://bugzilla.suse.com/show_bug.cgi?id=1215955 * https://bugzilla.suse.com/show_bug.cgi?id=1215956 * https://bugzilla.suse.com/show_bug.cgi?id=1215957 * https://bugzilla.suse.com/show_bug.cgi?id=1215986 * https://bugzilla.suse.com/show_bug.cgi?id=1216062 * https://bugzilla.suse.com/show_bug.cgi?id=1216345 * https://bugzilla.suse.com/show_bug.cgi?id=1216510 * https://bugzilla.suse.com/show_bug.cgi?id=1216511 * https://bugzilla.suse.com/show_bug.cgi?id=1216512 * https://bugzilla.suse.com/show_bug.cgi?id=1216621

1 0

SUSE-SU-2023:4380-1: important: Security update for squid
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

# Security update for squid Announcement ID: SUSE-SU-2023:4380-1 Rating: important References: * bsc#1216495 * bsc#1216498 * bsc#1216500 * bsc#1216803 Cross-References: * CVE-2023-46724 * CVE-2023-46846 * CVE-2023-46847 * CVE-2023-46848 CVSS scores: * CVE-2023-46724 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2023-46724 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2023-46846 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-46846 ( NVD ): 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N * CVE-2023-46847 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46847 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H * CVE-2023-46848 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46848 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500). * CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495). * CVE-2023-46724: Fix validation of certificates with CN=* (bsc#1216803). * CVE-2023-46848: Denial of Service in FTP (bsc#1216498). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4380=1 openSUSE-SLE-15.4-2023-4380=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4380=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4380=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4380=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * squid-5.7-150400.3.12.1 * squid-debugsource-5.7-150400.3.12.1 * squid-debuginfo-5.7-150400.3.12.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.12.1 * squid-debugsource-5.7-150400.3.12.1 * squid-debuginfo-5.7-150400.3.12.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.12.1 * squid-debugsource-5.7-150400.3.12.1 * squid-debuginfo-5.7-150400.3.12.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.12.1 * squid-debugsource-5.7-150400.3.12.1 * squid-debuginfo-5.7-150400.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46724.html * https://www.suse.com/security/cve/CVE-2023-46846.html * https://www.suse.com/security/cve/CVE-2023-46847.html * https://www.suse.com/security/cve/CVE-2023-46848.html * https://bugzilla.suse.com/show_bug.cgi?id=1216495 * https://bugzilla.suse.com/show_bug.cgi?id=1216498 * https://bugzilla.suse.com/show_bug.cgi?id=1216500 * https://bugzilla.suse.com/show_bug.cgi?id=1216803

1 0

openSUSE-RU-2023:0357-1: moderate: Recommended update for tayga
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

openSUSE Recommended Update: Recommended update for tayga ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0357-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tayga fixes the following issues: - Add tayga_destroy_tun to delete the tunnel interface when the service is stopped - Drop PrivateDevices and ProtectClock hardening options to repair startup failure while accessing /dev/net/tun - Add conditional to tayga_setup_tun to facilitate operation on systems without iptables Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-357=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): tayga-0.9.2-bp155.4.3.1 References:

1 0

SUSE-SU-2023:4370-1: moderate: Security update for tiff
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

# Security update for tiff Announcement ID: SUSE-SU-2023:4370-1 Rating: moderate References: * bsc#1212535 * bsc#1212881 * bsc#1212883 * bsc#1212888 * bsc#1213273 * bsc#1213274 * bsc#1213589 * bsc#1213590 * bsc#1214574 Cross-References: * CVE-2020-18768 * CVE-2023-25433 * CVE-2023-26966 * CVE-2023-2908 * CVE-2023-3316 * CVE-2023-3576 * CVE-2023-3618 * CVE-2023-38288 * CVE-2023-38289 CVSS scores: * CVE-2020-18768 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2020-18768 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-25433 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-26966 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2023-26966 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-2908 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-2908 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-3316 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-3316 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3576 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-3576 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-3618 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-3618 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-38288 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-38289 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for tiff fixes the following issues: * CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff (bsc#1213589). * CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590). * CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273). * CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574). * CVE-2023-26966: Fixed an out of bounds read when transforming a little- endian file to a big-endian output (bsc#1212881) * CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3 files (bsc#1213274). * CVE-2023-2908: Fixed an undefined behavior issue when doing pointer arithmetic on a NULL pointer (bsc#1212888). * CVE-2023-3316: Fixed a NULL pointer dereference while opening a file in an inaccessible path (bsc#1212535). * CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4370=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4370=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4370=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4370=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4370=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4370=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4370=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4370=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4370=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4370=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4370=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4370=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4370=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4370=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4370=1 ## Package List: * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * tiff-debugsource-4.0.9-150000.45.32.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * tiff-debugsource-4.0.9-150000.45.32.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libtiff5-debuginfo-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * tiff-debugsource-4.0.9-150000.45.32.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * tiff-debugsource-4.0.9-150000.45.32.1 * openSUSE Leap 15.4 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.32.1 * libtiff5-32bit-4.0.9-150000.45.32.1 * libtiff-devel-32bit-4.0.9-150000.45.32.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * tiff-debugsource-4.0.9-150000.45.32.1 * libtiff5-debuginfo-4.0.9-150000.45.32.1 * libtiff-devel-4.0.9-150000.45.32.1 * tiff-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * openSUSE Leap 15.5 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.32.1 * libtiff5-32bit-4.0.9-150000.45.32.1 * libtiff-devel-32bit-4.0.9-150000.45.32.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * tiff-debugsource-4.0.9-150000.45.32.1 * libtiff5-debuginfo-4.0.9-150000.45.32.1 * libtiff-devel-4.0.9-150000.45.32.1 * tiff-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * tiff-debugsource-4.0.9-150000.45.32.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * tiff-debugsource-4.0.9-150000.45.32.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * tiff-debugsource-4.0.9-150000.45.32.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * tiff-debugsource-4.0.9-150000.45.32.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * tiff-debugsource-4.0.9-150000.45.32.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * tiff-debugsource-4.0.9-150000.45.32.1 * libtiff5-debuginfo-4.0.9-150000.45.32.1 * libtiff-devel-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * Basesystem Module 15-SP4 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.32.1 * libtiff5-32bit-4.0.9-150000.45.32.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * tiff-debugsource-4.0.9-150000.45.32.1 * libtiff5-debuginfo-4.0.9-150000.45.32.1 * libtiff-devel-4.0.9-150000.45.32.1 * tiff-debuginfo-4.0.9-150000.45.32.1 * libtiff5-4.0.9-150000.45.32.1 * Basesystem Module 15-SP5 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.32.1 * libtiff5-32bit-4.0.9-150000.45.32.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.32.1 * tiff-debugsource-4.0.9-150000.45.32.1 * tiff-4.0.9-150000.45.32.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.32.1 * tiff-debugsource-4.0.9-150000.45.32.1 * tiff-4.0.9-150000.45.32.1 ## References: * https://www.suse.com/security/cve/CVE-2020-18768.html * https://www.suse.com/security/cve/CVE-2023-25433.html * https://www.suse.com/security/cve/CVE-2023-26966.html * https://www.suse.com/security/cve/CVE-2023-2908.html * https://www.suse.com/security/cve/CVE-2023-3316.html * https://www.suse.com/security/cve/CVE-2023-3576.html * https://www.suse.com/security/cve/CVE-2023-3618.html * https://www.suse.com/security/cve/CVE-2023-38288.html * https://www.suse.com/security/cve/CVE-2023-38289.html * https://bugzilla.suse.com/show_bug.cgi?id=1212535 * https://bugzilla.suse.com/show_bug.cgi?id=1212881 * https://bugzilla.suse.com/show_bug.cgi?id=1212883 * https://bugzilla.suse.com/show_bug.cgi?id=1212888 * https://bugzilla.suse.com/show_bug.cgi?id=1213273 * https://bugzilla.suse.com/show_bug.cgi?id=1213274 * https://bugzilla.suse.com/show_bug.cgi?id=1213589 * https://bugzilla.suse.com/show_bug.cgi?id=1213590 * https://bugzilla.suse.com/show_bug.cgi?id=1214574

1 0

SUSE-SU-2023:4372-1: important: Security update for util-linux
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

# Security update for util-linux Announcement ID: SUSE-SU-2023:4372-1 Rating: important References: * bsc#1213865 Cross-References: * CVE-2018-7738 CVSS scores: * CVE-2018-7738 ( SUSE ): 8.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2018-7738 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 An update that solves one vulnerability can now be installed. ## Description: This update for util-linux fixes the following issues: * CVE-2018-7738: Fixed shell code injection in umount bash-completions (bsc#1213865). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4372=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4372=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python-libmount-debugsource-2.31.1-150000.9.24.1 * python-libmount-debuginfo-2.31.1-150000.9.24.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-libmount-debugsource-2.31.1-150000.9.24.1 * python-libmount-debuginfo-2.31.1-150000.9.24.1 ## References: * https://www.suse.com/security/cve/CVE-2018-7738.html * https://bugzilla.suse.com/show_bug.cgi?id=1213865

1 0

SUSE-SU-2023:4373-1: important: Security update for nodejs12
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

# Security update for nodejs12 Announcement ID: SUSE-SU-2023:4373-1 Rating: important References: * bsc#1216190 * bsc#1216272 Cross-References: * CVE-2023-38552 * CVE-2023-44487 CVSS scores: * CVE-2023-38552 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2023-38552 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-44487 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-44487 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Server 4.2 An update that solves two vulnerabilities can now be installed. ## Description: This update for nodejs12 fixes the following issues: * CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) * CVE-2023-38552: Fixed an integrity checks according to policies that could be circumvented. (bsc#1216272) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4373=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4373=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4373=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4373=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4373=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4373=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4373=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4373=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4373=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4373=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * nodejs14-14.21.3-150200.15.52.2 * nodejs14-devel-14.21.3-150200.15.52.2 * corepack14-14.21.3-150200.15.52.2 * nodejs14-debugsource-14.21.3-150200.15.52.2 * npm14-14.21.3-150200.15.52.2 * nodejs14-debuginfo-14.21.3-150200.15.52.2 * openSUSE Leap 15.4 (noarch) * nodejs14-docs-14.21.3-150200.15.52.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * nodejs14-14.21.3-150200.15.52.2 * nodejs14-devel-14.21.3-150200.15.52.2 * nodejs14-debugsource-14.21.3-150200.15.52.2 * npm14-14.21.3-150200.15.52.2 * nodejs14-debuginfo-14.21.3-150200.15.52.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * nodejs14-docs-14.21.3-150200.15.52.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * nodejs14-14.21.3-150200.15.52.2 * nodejs14-devel-14.21.3-150200.15.52.2 * nodejs14-debugsource-14.21.3-150200.15.52.2 * npm14-14.21.3-150200.15.52.2 * nodejs14-debuginfo-14.21.3-150200.15.52.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * nodejs14-docs-14.21.3-150200.15.52.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * nodejs14-14.21.3-150200.15.52.2 * nodejs14-devel-14.21.3-150200.15.52.2 * nodejs14-debugsource-14.21.3-150200.15.52.2 * npm14-14.21.3-150200.15.52.2 * nodejs14-debuginfo-14.21.3-150200.15.52.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * nodejs14-docs-14.21.3-150200.15.52.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * nodejs14-14.21.3-150200.15.52.2 * nodejs14-devel-14.21.3-150200.15.52.2 * nodejs14-debugsource-14.21.3-150200.15.52.2 * npm14-14.21.3-150200.15.52.2 * nodejs14-debuginfo-14.21.3-150200.15.52.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * nodejs14-docs-14.21.3-150200.15.52.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * nodejs14-14.21.3-150200.15.52.2 * nodejs14-devel-14.21.3-150200.15.52.2 * nodejs14-debugsource-14.21.3-150200.15.52.2 * npm14-14.21.3-150200.15.52.2 * nodejs14-debuginfo-14.21.3-150200.15.52.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * nodejs14-docs-14.21.3-150200.15.52.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * nodejs14-14.21.3-150200.15.52.2 * nodejs14-devel-14.21.3-150200.15.52.2 * nodejs14-debugsource-14.21.3-150200.15.52.2 * npm14-14.21.3-150200.15.52.2 * nodejs14-debuginfo-14.21.3-150200.15.52.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * nodejs14-docs-14.21.3-150200.15.52.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * nodejs14-14.21.3-150200.15.52.2 * nodejs14-devel-14.21.3-150200.15.52.2 * nodejs14-debugsource-14.21.3-150200.15.52.2 * npm14-14.21.3-150200.15.52.2 * nodejs14-debuginfo-14.21.3-150200.15.52.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * nodejs14-docs-14.21.3-150200.15.52.2 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * nodejs14-14.21.3-150200.15.52.2 * nodejs14-devel-14.21.3-150200.15.52.2 * nodejs14-debugsource-14.21.3-150200.15.52.2 * npm14-14.21.3-150200.15.52.2 * nodejs14-debuginfo-14.21.3-150200.15.52.2 * SUSE Manager Server 4.2 (noarch) * nodejs14-docs-14.21.3-150200.15.52.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * nodejs14-14.21.3-150200.15.52.2 * nodejs14-devel-14.21.3-150200.15.52.2 * nodejs14-debugsource-14.21.3-150200.15.52.2 * npm14-14.21.3-150200.15.52.2 * nodejs14-debuginfo-14.21.3-150200.15.52.2 * SUSE Enterprise Storage 7.1 (noarch) * nodejs14-docs-14.21.3-150200.15.52.2 ## References: * https://www.suse.com/security/cve/CVE-2023-38552.html * https://www.suse.com/security/cve/CVE-2023-44487.html * https://bugzilla.suse.com/show_bug.cgi?id=1216190 * https://bugzilla.suse.com/show_bug.cgi?id=1216272

1 0

SUSE-SU-2023:4374-1: important: Security update for nodejs12
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

# Security update for nodejs12 Announcement ID: SUSE-SU-2023:4374-1 Rating: important References: * bsc#1216190 * bsc#1216272 Cross-References: * CVE-2023-38552 * CVE-2023-44487 CVSS scores: * CVE-2023-38552 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2023-38552 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-44487 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-44487 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Server 4.2 An update that solves two vulnerabilities can now be installed. ## Description: This update for nodejs12 fixes the following issues: * CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) * CVE-2023-38552: Fixed an integrity checks according to policies that could be circumvented. (bsc#1216272) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4374=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4374=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4374=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4374=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4374=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4374=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4374=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4374=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4374=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4374=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * nodejs12-12.22.12-150200.4.53.2 * npm12-12.22.12-150200.4.53.2 * nodejs12-devel-12.22.12-150200.4.53.2 * nodejs12-debuginfo-12.22.12-150200.4.53.2 * nodejs12-debugsource-12.22.12-150200.4.53.2 * openSUSE Leap 15.4 (noarch) * nodejs12-docs-12.22.12-150200.4.53.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * nodejs12-12.22.12-150200.4.53.2 * npm12-12.22.12-150200.4.53.2 * nodejs12-devel-12.22.12-150200.4.53.2 * nodejs12-debuginfo-12.22.12-150200.4.53.2 * nodejs12-debugsource-12.22.12-150200.4.53.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * nodejs12-docs-12.22.12-150200.4.53.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * nodejs12-12.22.12-150200.4.53.2 * npm12-12.22.12-150200.4.53.2 * nodejs12-devel-12.22.12-150200.4.53.2 * nodejs12-debuginfo-12.22.12-150200.4.53.2 * nodejs12-debugsource-12.22.12-150200.4.53.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * nodejs12-docs-12.22.12-150200.4.53.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * nodejs12-12.22.12-150200.4.53.2 * npm12-12.22.12-150200.4.53.2 * nodejs12-devel-12.22.12-150200.4.53.2 * nodejs12-debuginfo-12.22.12-150200.4.53.2 * nodejs12-debugsource-12.22.12-150200.4.53.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * nodejs12-docs-12.22.12-150200.4.53.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * nodejs12-12.22.12-150200.4.53.2 * npm12-12.22.12-150200.4.53.2 * nodejs12-devel-12.22.12-150200.4.53.2 * nodejs12-debuginfo-12.22.12-150200.4.53.2 * nodejs12-debugsource-12.22.12-150200.4.53.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * nodejs12-docs-12.22.12-150200.4.53.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * nodejs12-12.22.12-150200.4.53.2 * npm12-12.22.12-150200.4.53.2 * nodejs12-devel-12.22.12-150200.4.53.2 * nodejs12-debuginfo-12.22.12-150200.4.53.2 * nodejs12-debugsource-12.22.12-150200.4.53.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * nodejs12-docs-12.22.12-150200.4.53.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * nodejs12-12.22.12-150200.4.53.2 * npm12-12.22.12-150200.4.53.2 * nodejs12-devel-12.22.12-150200.4.53.2 * nodejs12-debuginfo-12.22.12-150200.4.53.2 * nodejs12-debugsource-12.22.12-150200.4.53.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * nodejs12-docs-12.22.12-150200.4.53.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * nodejs12-12.22.12-150200.4.53.2 * npm12-12.22.12-150200.4.53.2 * nodejs12-devel-12.22.12-150200.4.53.2 * nodejs12-debuginfo-12.22.12-150200.4.53.2 * nodejs12-debugsource-12.22.12-150200.4.53.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * nodejs12-docs-12.22.12-150200.4.53.2 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * nodejs12-12.22.12-150200.4.53.2 * npm12-12.22.12-150200.4.53.2 * nodejs12-devel-12.22.12-150200.4.53.2 * nodejs12-debuginfo-12.22.12-150200.4.53.2 * nodejs12-debugsource-12.22.12-150200.4.53.2 * SUSE Manager Server 4.2 (noarch) * nodejs12-docs-12.22.12-150200.4.53.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * nodejs12-12.22.12-150200.4.53.2 * npm12-12.22.12-150200.4.53.2 * nodejs12-devel-12.22.12-150200.4.53.2 * nodejs12-debuginfo-12.22.12-150200.4.53.2 * nodejs12-debugsource-12.22.12-150200.4.53.2 * SUSE Enterprise Storage 7.1 (noarch) * nodejs12-docs-12.22.12-150200.4.53.2 ## References: * https://www.suse.com/security/cve/CVE-2023-38552.html * https://www.suse.com/security/cve/CVE-2023-44487.html * https://bugzilla.suse.com/show_bug.cgi?id=1216190 * https://bugzilla.suse.com/show_bug.cgi?id=1216272

1 0

SUSE-SU-2023:4072-2: important: Security update for the Linux Kernel
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2023:4072-2 Rating: important References: * bsc#1202845 * bsc#1213808 * bsc#1214928 * bsc#1214940 * bsc#1214941 * bsc#1214942 * bsc#1214943 * bsc#1214944 * bsc#1214950 * bsc#1214951 * bsc#1214954 * bsc#1214957 * bsc#1214986 * bsc#1214988 * bsc#1214992 * bsc#1214993 * bsc#1215322 * bsc#1215877 * bsc#1215894 * bsc#1215895 * bsc#1215896 * bsc#1215911 * bsc#1215915 * bsc#1215916 Cross-References: * CVE-2023-1192 * CVE-2023-1206 * CVE-2023-1859 * CVE-2023-2177 * CVE-2023-39192 * CVE-2023-39193 * CVE-2023-39194 * CVE-2023-4155 * CVE-2023-42753 * CVE-2023-42754 * CVE-2023-4389 * CVE-2023-4563 * CVE-2023-4622 * CVE-2023-4623 * CVE-2023-4881 * CVE-2023-4921 * CVE-2023-5345 CVSS scores: * CVE-2023-1192 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-1192 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-1206 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-1206 ( NVD ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-1859 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2023-1859 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-2177 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-2177 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-39192 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H * CVE-2023-39192 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L * CVE-2023-39193 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39193 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39194 ( SUSE ): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N * CVE-2023-39194 ( NVD ): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N * CVE-2023-4155 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2023-4155 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2023-42753 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42753 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42754 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-42754 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-4389 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2023-4389 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4563 ( SUSE ): 0.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N * CVE-2023-4622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4622 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4881 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-4881 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2023-4921 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4921 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5345 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5345 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 An update that solves 17 vulnerabilities and has seven security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-4563: Fixed an use-after-free flaw in the nftables sub-component. This vulnerability could allow a local attacker to crash the system or lead to a kernel information leak problem. (bsc#1214727) * CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215861) * CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215860) * CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to disclose sensitive information. (bsc#1215858) * CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated attacker to trigger a DoS. (bsc#1215467) * CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899) * CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022) * CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351). * CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150). * CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703). * CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275). * CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). * CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). * CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169). * CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221). * CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643). * CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995). The following non-security bugs were fixed: * ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git- fixes). * ALSA: hda/realtek: Splitting the UX3402 into two separate models (git- fixes). * ARM: pxa: remove use of symbol_get() (git-fixes). * arm64: csum: Fix OoB access in IP checksum code for negative lengths (git- fixes). * arm64: module-plts: inline linux/moduleloader.h (git-fixes) * arm64: module: Use module_init_layout_section() to spot init sections (git- fixes) * arm64: sdei: abort running SDEI handlers during crash (git-fixes) * arm64: tegra: Update AHUB clock parent and rate (git-fixes) * arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git- fixes) * ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes). * ASoC: meson: spdifin: start hw on dai probe (git-fixes). * ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes). * ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes). * ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes). * ata: pata_falcon: fix IO base selection for Q40 (git-fixes). * ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes). * ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes). * backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes). * blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986). * blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992). * block/mq-deadline: use correct way to throttling write requests (bsc#1214993). * Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes). * bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322). * bpf: Clear the probe_addr for uprobe (git-fixes). * btrfs: do not hold CPU for too long when defragging a file (bsc#1214988). * drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes). * drm/amd/display: fix the white screen issue when >= 64GB DRAM (git-fixes). * drm/amd/display: prevent potential division by zero errors (git-fixes). * drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808). * drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes). * drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes). * drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). * drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). * ext4: avoid potential data overflow in next_linear_group (bsc#1214951). * ext4: correct inline offset when handling xattrs in inode body (bsc#1214950). * ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954). * ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943). * ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944). * ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942). * ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941). * ext4: Remove ext4 locking of moved directory (bsc#1214957). * ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940). * fs: do not update freeing inode i_io_list (bsc#1214813). * fs: Establish locking order for unrelated directories (bsc#1214958). * fs: Lock moved directories (bsc#1214959). * fs: lockd: avoid possible wrong NULL parameter (git-fixes). * fs: no need to check source (bsc#1215752). * fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813). * fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581). * gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479). * gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). * gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). * gve: Changes to add new TX queues (bsc#1214479). * gve: Control path for DQO-QPL (bsc#1214479). * gve: fix frag_list chaining (bsc#1214479). * gve: Fix gve interrupt names (bsc#1214479). * gve: RX path for DQO-QPL (bsc#1214479). * gve: trivial spell fix Recive to Receive (bsc#1214479). * gve: Tx path for DQO-QPL (bsc#1214479). * gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). * gve: use vmalloc_array and vcalloc (bsc#1214479). * gve: XDP support GQI-QPL: helper function changes (bsc#1214479). * hwrng: virtio - add an internal buffer (git-fixes). * hwrng: virtio - always add a pending request (git-fixes). * hwrng: virtio - do not wait on cleanup (git-fixes). * hwrng: virtio - do not waste entropy (git-fixes). * hwrng: virtio - Fix race on data_avail and actual data (git-fixes). * i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes). * i3c: master: svc: fix probe failure when no i3c device exist (git-fixes). * idr: fix param name in idr_alloc_cyclic() doc (git-fixes). * Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes). * iommu/virtio: Detach domain on endpoint release (git-fixes). * jbd2: check 'jh->b_transaction' before removing it from checkpoint (bsc#1214953). * jbd2: correct the end of the journal recovery scan range (bsc#1214955). * jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949). * jbd2: fix checkpoint cleanup performance regression (bsc#1214952). * jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948). * jbd2: recheck chechpointing non-dirty buffer (bsc#1214945). * jbd2: remove journal_clean_one_cp_list() (bsc#1214947). * jbd2: remove t_checkpoint_io_list (bsc#1214946). * jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946). * kabi/severities: ignore mlx4 internal symbols * kconfig: fix possible buffer overflow (git-fixes). * kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template. * kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist. * kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes). * KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915). * KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896). * KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916). * KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894). * KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895). * KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911). * KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git- fixes). * KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes). * KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes). * KVM: x86/mmu: Include mmu.h in spte.h (git-fixes). * loop: Fix use-after-free issues (bsc#1214991). * loop: loop_set_status_from_info() check before assignment (bsc#1214990). * mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236). * mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236). * mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236). * mlx4: Delete custom device management logic (bsc#1187236). * mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236). * mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236). * mlx4: Move the bond work to the core driver (bsc#1187236). * mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236). * mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236). * mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236). * mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236). * module: Expose module_init_layout_section() (git-fixes) * net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes). * net: mana: Add page pool for RX buffers (bsc#1214040). * net: mana: Configure hwc timeout from hardware (bsc#1214037). * net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes). * net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes). * net/mlx4: Remove many unnecessary NULL values (bsc#1187236). * NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git- fixes). * NFS/blocklayout: Use the passed in gfp flags (git-fixes). * NFS/pNFS: Fix assignment of xprtdata.cred (git-fixes). * NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes). * NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes). * NFSD: fix change_info in NFSv4 RENAME replies (git-fixes). * NFSD: Fix race to FREE_STATEID and cl_revoked (git-fixes). * NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes). * NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes). * NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes). * NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes). * NFSv4/pNFS: minor fix for cleanup path in nfs4_get_device_info (git-fixes). * ntb: Clean up tx tail index on link down (git-fixes). * ntb: Drop packets when qp link is down (git-fixes). * ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes). * nvme-auth: use chap->s2 to indicate bidirectional authentication (bsc#1214543). * nvme-tcp: add recovery_delay to sysfs (bsc#1201284). * nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284). * nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284). * nvme-tcp: make 'err_work' a delayed work (bsc#1201284). * PCI: Free released resource after coalescing (git-fixes). * platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes). * platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git- fixes). * platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes). * platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes). * platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git- fixes). * platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes). * platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes). * platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes). * powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582). * powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729). * powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051). * powerpc/xics: Remove unnecessary endian conversion (bsc#1065729). * printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875). * pwm: lpc32xx: Remove handling of PWM channels (git-fixes). * quota: add new helper dquot_active() (bsc#1214998). * quota: factor out dquot_write_dquot() (bsc#1214995). * quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963). * quota: fix warning in dqgrab() (bsc#1214962). * quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961). * quota: rename dquot_active() to inode_quota_active() (bsc#1214997). * s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes). * s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148). * scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). * scsi: 53c700: Check that command slot is not NULL (git-fixes). * scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). * scsi: core: Fix possible memory leak if device_add() fails (git-fixes). * scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). * scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes). * scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes). * scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git- fixes). * scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes). * scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes). * scsi: lpfc: Remove reftag check in DIF paths (git-fixes). * scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658). * scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). * scsi: qedf: Fix NULL dereference in error handling (git-fixes). * scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). * scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928). * scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928). * scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928). * scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928). * scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git- fixes). * scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928). * scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928). * scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928). * scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928). * scsi: qla2xxx: Remove unused declarations (bsc#1214928). * scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928). * scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928). * scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes). * scsi: scsi_debug: Remove dead code (git-fixes). * scsi: snic: Fix double free in snic_tgt_create() (git-fixes). * scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). * scsi: storvsc: Handle additional SRB status values (git-fixes). * scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941). * selftests: tracing: Fix to unmount tracefs for recovering environment (git- fixes). * SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes). * tcpm: Avoid soft reset when partner does not support get_status (git-fixes). * tracing: Fix race issue between cpu buffer write and swap (git-fixes). * tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes). * tracing: Remove unnecessary copying of tr->current_trace (git-fixes). * uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes). * udf: Fix extension of the last extent in the file (bsc#1214964). * udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965). * udf: Fix off-by-one error when discarding preallocation (bsc#1214966). * udf: Fix uninitialized array access for some pathnames (bsc#1214967). * uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes). * usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes). * usb: ehci: move new member has_ci_pec_bug into hole (git-fixes). * usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes). * usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes). * usb: typec: tcpci: clear the fault status bit (git-fixes). * usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes). * vhost_vdpa: fix the crash in unmap a large memory (git-fixes). * vhost-scsi: unbreak any layout for response (git-fixes). * vhost: allow batching hint without size (git-fixes). * vhost: fix hung thread due to erroneous iotlb entries (git-fixes). * vhost: handle error while adding split ranges to iotlb (git-fixes). * virtio_net: add checking sq is full inside xdp xmit (git-fixes). * virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). * virtio_net: reorder some funcs (git-fixes). * virtio_net: separate the logic of checking whether sq is full (git-fixes). * virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes). * virtio-mmio: do not break lifecycle of vm_dev (git-fixes). * virtio-net: fix race between set queues and probe (git-fixes). * virtio-net: set queues after driver_ok (git-fixes). * virtio-rng: make device ready before making request (git-fixes). * virtio: acknowledge all features before access (git-fixes). * vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582). * watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes). * word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729). * x86/alternative: Fix race in try_get_desc() (git-fixes). * x86/boot/e820: Fix typo in e820.c comment (git-fixes). * x86/bugs: Reset speculation control settings on init (git-fixes). * x86/cpu: Add Lunar Lake M (git-fixes). * x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes). * x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git- fixes). * x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git- fixes). * x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes). * x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes). * x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git- fixes). * x86/mce: Retrieve poison range from hardware (git-fixes). * x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). * x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes). * x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes). * x86/purgatory: remove PGO flags (git-fixes). * x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git- fixes). * x86/reboot: Disable virtualization in an emergency if SVM is supported (git- fixes). * x86/resctl: fix scheduler confusion with 'current' (git-fixes). * x86/resctrl: Fix task CLOSID/RMID update race (git-fixes). * x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes). * x86/rtc: Remove __init for runtime functions (git-fixes). * x86/sgx: Reduce delay and interference of enclave release (git-fixes). * x86/srso: Do not probe microcode in a guest (git-fixes). * x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes). * x86/srso: Fix srso_show_state() side effect (git-fixes). * x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes). * x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes). * xen: remove a confusing comment on auto-translated guest I/O (git-fixes). * xprtrdma: Remap Receive buffers after a reconnect (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4072=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-5.14.21-150400.24.92.1 * kselftests-kmp-default-debuginfo-5.14.21-150400.24.92.1 * gfs2-kmp-default-5.14.21-150400.24.92.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.92.1 * kernel-syms-5.14.21-150400.24.92.1 * kselftests-kmp-default-5.14.21-150400.24.92.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.92.1 * kernel-default-optional-5.14.21-150400.24.92.1 * kernel-default-extra-5.14.21-150400.24.92.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.92.1 * ocfs2-kmp-default-5.14.21-150400.24.92.1 * kernel-default-devel-5.14.21-150400.24.92.1 * kernel-default-optional-debuginfo-5.14.21-150400.24.92.1 * kernel-obs-qa-5.14.21-150400.24.92.1 * kernel-default-debugsource-5.14.21-150400.24.92.1 * dlm-kmp-default-5.14.21-150400.24.92.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.92.1 * kernel-obs-build-debugsource-5.14.21-150400.24.92.1 * kernel-default-livepatch-5.14.21-150400.24.92.1 * kernel-obs-build-5.14.21-150400.24.92.1 * kernel-default-debuginfo-5.14.21-150400.24.92.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.92.1 * reiserfs-kmp-default-5.14.21-150400.24.92.1 * kernel-default-extra-debuginfo-5.14.21-150400.24.92.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.92.1 * kernel-default-livepatch-devel-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (nosrc ppc64le x86_64) * kernel-debug-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (ppc64le x86_64) * kernel-debug-devel-5.14.21-150400.24.92.1 * kernel-debug-livepatch-devel-5.14.21-150400.24.92.1 * kernel-debug-debugsource-5.14.21-150400.24.92.1 * kernel-debug-debuginfo-5.14.21-150400.24.92.1 * kernel-debug-devel-debuginfo-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * kernel-kvmsmall-livepatch-devel-5.14.21-150400.24.92.1 * kernel-default-base-rebuild-5.14.21-150400.24.92.1.150400.24.42.1 * kernel-kvmsmall-debuginfo-5.14.21-150400.24.92.1 * kernel-kvmsmall-devel-5.14.21-150400.24.92.1 * kernel-default-base-5.14.21-150400.24.92.1.150400.24.42.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150400.24.92.1 * kernel-kvmsmall-debugsource-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (noarch) * kernel-docs-html-5.14.21-150400.24.92.1 * kernel-source-5.14.21-150400.24.92.1 * kernel-source-vanilla-5.14.21-150400.24.92.1 * kernel-macros-5.14.21-150400.24.92.1 * kernel-devel-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.92.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (aarch64) * dtb-allwinner-5.14.21-150400.24.92.1 * dtb-altera-5.14.21-150400.24.92.1 * dtb-marvell-5.14.21-150400.24.92.1 * dtb-apple-5.14.21-150400.24.92.1 * kernel-64kb-devel-5.14.21-150400.24.92.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150400.24.92.1 * cluster-md-kmp-64kb-5.14.21-150400.24.92.1 * kernel-64kb-extra-5.14.21-150400.24.92.1 * kselftests-kmp-64kb-5.14.21-150400.24.92.1 * dtb-hisilicon-5.14.21-150400.24.92.1 * kernel-64kb-debugsource-5.14.21-150400.24.92.1 * dtb-freescale-5.14.21-150400.24.92.1 * dtb-apm-5.14.21-150400.24.92.1 * dtb-amd-5.14.21-150400.24.92.1 * dtb-arm-5.14.21-150400.24.92.1 * dtb-qcom-5.14.21-150400.24.92.1 * dtb-rockchip-5.14.21-150400.24.92.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150400.24.92.1 * dtb-nvidia-5.14.21-150400.24.92.1 * kernel-64kb-debuginfo-5.14.21-150400.24.92.1 * kernel-64kb-optional-5.14.21-150400.24.92.1 * dtb-amlogic-5.14.21-150400.24.92.1 * dtb-broadcom-5.14.21-150400.24.92.1 * dtb-exynos-5.14.21-150400.24.92.1 * ocfs2-kmp-64kb-5.14.21-150400.24.92.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150400.24.92.1 * reiserfs-kmp-64kb-5.14.21-150400.24.92.1 * dlm-kmp-64kb-5.14.21-150400.24.92.1 * dtb-lg-5.14.21-150400.24.92.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150400.24.92.1 * dtb-renesas-5.14.21-150400.24.92.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.92.1 * dtb-amazon-5.14.21-150400.24.92.1 * dtb-socionext-5.14.21-150400.24.92.1 * dtb-cavium-5.14.21-150400.24.92.1 * kernel-64kb-optional-debuginfo-5.14.21-150400.24.92.1 * dlm-kmp-64kb-debuginfo-5.14.21-150400.24.92.1 * dtb-xilinx-5.14.21-150400.24.92.1 * kernel-64kb-livepatch-devel-5.14.21-150400.24.92.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150400.24.92.1 * kernel-64kb-extra-debuginfo-5.14.21-150400.24.92.1 * dtb-mediatek-5.14.21-150400.24.92.1 * dtb-sprd-5.14.21-150400.24.92.1 * gfs2-kmp-64kb-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (nosrc) * dtb-aarch64-5.14.21-150400.24.92.1 * openSUSE Leap 15.4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.92.1 ## References: * https://www.suse.com/security/cve/CVE-2023-1192.html * https://www.suse.com/security/cve/CVE-2023-1206.html * https://www.suse.com/security/cve/CVE-2023-1859.html * https://www.suse.com/security/cve/CVE-2023-2177.html * https://www.suse.com/security/cve/CVE-2023-39192.html * https://www.suse.com/security/cve/CVE-2023-39193.html * https://www.suse.com/security/cve/CVE-2023-39194.html * https://www.suse.com/security/cve/CVE-2023-4155.html * https://www.suse.com/security/cve/CVE-2023-42753.html * https://www.suse.com/security/cve/CVE-2023-42754.html * https://www.suse.com/security/cve/CVE-2023-4389.html * https://www.suse.com/security/cve/CVE-2023-4563.html * https://www.suse.com/security/cve/CVE-2023-4622.html * https://www.suse.com/security/cve/CVE-2023-4623.html * https://www.suse.com/security/cve/CVE-2023-4881.html * https://www.suse.com/security/cve/CVE-2023-4921.html * https://www.suse.com/security/cve/CVE-2023-5345.html * https://bugzilla.suse.com/show_bug.cgi?id=1202845 * https://bugzilla.suse.com/show_bug.cgi?id=1213808 * https://bugzilla.suse.com/show_bug.cgi?id=1214928 * https://bugzilla.suse.com/show_bug.cgi?id=1214940 * https://bugzilla.suse.com/show_bug.cgi?id=1214941 * https://bugzilla.suse.com/show_bug.cgi?id=1214942 * https://bugzilla.suse.com/show_bug.cgi?id=1214943 * https://bugzilla.suse.com/show_bug.cgi?id=1214944 * https://bugzilla.suse.com/show_bug.cgi?id=1214950 * https://bugzilla.suse.com/show_bug.cgi?id=1214951 * https://bugzilla.suse.com/show_bug.cgi?id=1214954 * https://bugzilla.suse.com/show_bug.cgi?id=1214957 * https://bugzilla.suse.com/show_bug.cgi?id=1214986 * https://bugzilla.suse.com/show_bug.cgi?id=1214988 * https://bugzilla.suse.com/show_bug.cgi?id=1214992 * https://bugzilla.suse.com/show_bug.cgi?id=1214993 * https://bugzilla.suse.com/show_bug.cgi?id=1215322 * https://bugzilla.suse.com/show_bug.cgi?id=1215877 * https://bugzilla.suse.com/show_bug.cgi?id=1215894 * https://bugzilla.suse.com/show_bug.cgi?id=1215895 * https://bugzilla.suse.com/show_bug.cgi?id=1215896 * https://bugzilla.suse.com/show_bug.cgi?id=1215911 * https://bugzilla.suse.com/show_bug.cgi?id=1215915 * https://bugzilla.suse.com/show_bug.cgi?id=1215916

1 0

SUSE-SU-2023:4367-1: important: Security update for apache-ivy
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

# Security update for apache-ivy Announcement ID: SUSE-SU-2023:4367-1 Rating: important References: * bsc#1214422 Cross-References: * CVE-2022-46751 CVSS scores: * CVE-2022-46751 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2022-46751 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for apache-ivy fixes the following issues: * Upgrade to version 2.5.2 (bsc#1214422) * CVE-2022-46751: Fixed an XML External Entity Injections that could be exploited to exfiltrate data, access resources only the machine running Ivy has access to or disturb the execution of Ivy in different ways. (bsc#1214422) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4367=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4367=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4367=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4367=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4367=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4367=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4367=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4367=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4367=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4367=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4367=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4367=1 ## Package List: * openSUSE Leap 15.4 (noarch) * apache-ivy-2.5.2-150200.3.9.1 * apache-ivy-javadoc-2.5.2-150200.3.9.1 * openSUSE Leap 15.5 (noarch) * apache-ivy-2.5.2-150200.3.9.1 * apache-ivy-javadoc-2.5.2-150200.3.9.1 * Development Tools Module 15-SP4 (noarch) * apache-ivy-2.5.2-150200.3.9.1 * Development Tools Module 15-SP5 (noarch) * apache-ivy-2.5.2-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * apache-ivy-2.5.2-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * apache-ivy-2.5.2-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * apache-ivy-2.5.2-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * apache-ivy-2.5.2-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * apache-ivy-2.5.2-150200.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * apache-ivy-2.5.2-150200.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * apache-ivy-2.5.2-150200.3.9.1 * SUSE Enterprise Storage 7.1 (noarch) * apache-ivy-2.5.2-150200.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2022-46751.html * https://bugzilla.suse.com/show_bug.cgi?id=1214422

1 0

openSUSE-RU-2023:0356-1: moderate: Recommended update for seamonkey
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

openSUSE Recommended Update: Recommended update for seamonkey ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0356-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for seamonkey fixes the following issues: - Fixed building with rust >= 1.48 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-356=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 x86_64): seamonkey-2.53.17.1-bp155.2.9.1 seamonkey-dom-inspector-2.53.17.1-bp155.2.9.1 seamonkey-irc-2.53.17.1-bp155.2.9.1 References:

1 0

openSUSE-RU-2023:0355-1: moderate: Recommended update for seamonkey
by maintenance＠opensuse.org 06 Nov '23

06 Nov '23

openSUSE Recommended Update: Recommended update for seamonkey ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0355-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for seamonkey fixes the following issues: - Fixed building with rust >= 1.48 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-355=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 x86_64): seamonkey-2.53.17.1-bp154.2.17.1 seamonkey-dom-inspector-2.53.17.1-bp154.2.17.1 seamonkey-irc-2.53.17.1-bp154.2.17.1 References:

1 0

openSUSE-SU-2023:0351-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 04 Nov '23

04 Nov '23

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0351-1 Rating: important References: #1216363 #1216364 #1216365 Cross-References: CVE-2023-22098 CVE-2023-22099 CVE-2023-22100 CVSS scores: CVE-2023-22098 (NVD) : 7.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H CVE-2023-22098 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H CVE-2023-22099 (NVD) : 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2023-22099 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H CVE-2023-22100 (NVD) : 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H CVE-2023-22100 (SUSE): 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for virtualbox fixes the following issues: - Version bump to VirtualBox 7.0.12 (released October 17 2023 by Oracle) Fixes the following: - CVE-2023-22098 (boo#1216363) - CVE-2023-22099 (boo#1216364) - CVE-2023-22100 (boo#1216365) This is a maintenance release. The following items were fixed and/or added: - VMM: Fixed using a debugger inside the guest under certain circumstances (bugs #21413 and #21546) - VMM: Fixed detection of VT-x being used by other hypervisors (bug #21867) - VMM: Introduced additional improvements in Split Lock Detection feature of recent Intel CPUs on Linux hosts (bug #20180) - GUI: Fixed issue when the nested hardware virtualization setting was not displayed in the VM details panel (bug #21707) - GUI: Introduced NLS update for Croatian, Indonesian, Italian, Japanese, Korean, Dutch and Turkish languages as well as added general look-and-feel improvements - Devices: Fixed black screen in Windows guests with multiple guest screens when 3D is disabled (7.0.10 regression) - Devices: Fixed PCI device identifiers for the VirtIO network interface (bug #21516) - Devices: Fixed VLAN support for the VirtIO network interface (bug #21778) - Devices: Fixed loading saved states when a TPM is configured (7.0.10 regression, bug #21773) - Networking: Fixed memory leaks in the VBoxIntNetSwitch process on macOS (bug #21752) - Networking: Fixed TCP connections with IP addresses ending on .2 when the NAT network attachment is used (bug #21513) - VRDP: Added general improvements - VBoxManage: Added improvements for "list usbfilters" command - Unattended: Added kick start file support for Oracle Linux 8 and Oracle Linux 9. - Main: Added more Linux OS subtypes - Host Services: Fixed Guest Properties service crash under rare circumstance - Linux Host and Guest: Fixed few "field-spanning write" kernel warnings (bugs #21410 and #21862) - Linux Guest Additions: Added more fixes for RHEL 8.9 and 9.3 kernel - Linux Guest Additions: Added more fixes for kernel 6.4 - Linux Guest Additions: Added initial support for OpenSUSE 15.5 kernel - Linux Guest Additions: Added initial support for kernels 6.5 and 6.6 - Linux Guest Additions: Added version reporting for "rcvboxadd status-kernel" and "rcvboxadd status-user" commands - BIOS: Restored support for ISA SCSI HBAs in the BIOS (bug #21736) - Convert to systemd-sysusers Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2023-351=1 Package List: - openSUSE Leap 15.4 (x86_64): python3-virtualbox-7.0.12-lp154.2.43.1 python3-virtualbox-debuginfo-7.0.12-lp154.2.43.1 virtualbox-7.0.12-lp154.2.43.1 virtualbox-debuginfo-7.0.12-lp154.2.43.1 virtualbox-debugsource-7.0.12-lp154.2.43.1 virtualbox-devel-7.0.12-lp154.2.43.1 virtualbox-guest-tools-7.0.12-lp154.2.43.1 virtualbox-guest-tools-debuginfo-7.0.12-lp154.2.43.1 virtualbox-kmp-debugsource-7.0.12-lp154.2.43.1 virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1 virtualbox-kmp-default-debuginfo-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1 virtualbox-qt-7.0.12-lp154.2.43.1 virtualbox-qt-debuginfo-7.0.12-lp154.2.43.1 virtualbox-vnc-7.0.12-lp154.2.43.1 virtualbox-websrv-7.0.12-lp154.2.43.1 virtualbox-websrv-debuginfo-7.0.12-lp154.2.43.1 - openSUSE Leap 15.4 (noarch): virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1 virtualbox-guest-source-7.0.12-lp154.2.43.1 virtualbox-host-source-7.0.12-lp154.2.43.1 References: https://www.suse.com/security/cve/CVE-2023-22098.html https://www.suse.com/security/cve/CVE-2023-22099.html https://www.suse.com/security/cve/CVE-2023-22100.html https://bugzilla.suse.com/1216363 https://bugzilla.suse.com/1216364 https://bugzilla.suse.com/1216365

1 0

openSUSE-SU-2023:0352-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 04 Nov '23

04 Nov '23

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0352-1 Rating: important References: #1215463 #1216363 #1216364 #1216365 Cross-References: CVE-2023-22098 CVE-2023-22099 CVE-2023-22100 CVSS scores: CVE-2023-22098 (NVD) : 7.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H CVE-2023-22098 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H CVE-2023-22099 (NVD) : 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2023-22099 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H CVE-2023-22100 (NVD) : 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H CVE-2023-22100 (SUSE): 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for virtualbox fixes the following issues: - Version bump to VirtualBox 7.0.12 (released October 17 2023 by Oracle) Fixes the following: - CVE-2023-22098 (boo#1216363) - CVE-2023-22099 (boo#1216364) - CVE-2023-22100 (boo#1216365) This is a maintenance release. The following items were fixed and/or added: - VMM: Fixed using a debugger inside the guest under certain circumstances (bugs #21413 and #21546) - VMM: Fixed detection of VT-x being used by other hypervisors (bug #21867) - VMM: Introduced additional improvements in Split Lock Detection feature of recent Intel CPUs on Linux hosts (bug #20180) - GUI: Fixed issue when the nested hardware virtualization setting was not displayed in the VM details panel (bug #21707) - GUI: Introduced NLS update for Croatian, Indonesian, Italian, Japanese, Korean, Dutch and Turkish languages as well as added general look-and-feel improvements - Devices: Fixed black screen in Windows guests with multiple guest screens when 3D is disabled (7.0.10 regression) - Devices: Fixed PCI device identifiers for the VirtIO network interface (bug #21516) - Devices: Fixed VLAN support for the VirtIO network interface (bug #21778) - Devices: Fixed loading saved states when a TPM is configured (7.0.10 regression, bug #21773) - Networking: Fixed memory leaks in the VBoxIntNetSwitch process on macOS (bug #21752) - Networking: Fixed TCP connections with IP addresses ending on .2 when the NAT network attachment is used (bug #21513) - VRDP: Added general improvements - VBoxManage: Added improvements for "list usbfilters" command - Unattended: Added kick start file support for Oracle Linux 8 and Oracle Linux 9. - Main: Added more Linux OS subtypes - Host Services: Fixed Guest Properties service crash under rare circumstance - Linux Host and Guest: Fixed few "field-spanning write" kernel warnings (bugs #21410 and #21862) - Linux Guest Additions: Added more fixes for RHEL 8.9 and 9.3 kernel - Linux Guest Additions: Added more fixes for kernel 6.4 - Linux Guest Additions: Added initial support for OpenSUSE 15.5 kernel - Linux Guest Additions: Added initial support for kernels 6.5 and 6.6 - Linux Guest Additions: Added version reporting for "rcvboxadd status-kernel" and "rcvboxadd status-user" commands - BIOS: Restored support for ISA SCSI HBAs in the BIOS (bug #21736) - Convert to systemd-sysusers - Fix problems with 6.5 kernels and shared folders. (boo#1215463). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-352=1 Package List: - openSUSE Leap 15.5 (noarch): virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1 virtualbox-guest-source-7.0.12-lp155.2.13.1 virtualbox-host-source-7.0.12-lp155.2.13.1 - openSUSE Leap 15.5 (x86_64): python3-virtualbox-7.0.12-lp155.2.13.1 python3-virtualbox-debuginfo-7.0.12-lp155.2.13.1 virtualbox-7.0.12-lp155.2.13.1 virtualbox-debuginfo-7.0.12-lp155.2.13.1 virtualbox-debugsource-7.0.12-lp155.2.13.1 virtualbox-devel-7.0.12-lp155.2.13.1 virtualbox-guest-tools-7.0.12-lp155.2.13.1 virtualbox-guest-tools-debuginfo-7.0.12-lp155.2.13.1 virtualbox-kmp-debugsource-7.0.12-lp155.2.13.1 virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1 virtualbox-kmp-default-debuginfo-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1 virtualbox-qt-7.0.12-lp155.2.13.1 virtualbox-qt-debuginfo-7.0.12-lp155.2.13.1 virtualbox-vnc-7.0.12-lp155.2.13.1 virtualbox-websrv-7.0.12-lp155.2.13.1 virtualbox-websrv-debuginfo-7.0.12-lp155.2.13.1 References: https://www.suse.com/security/cve/CVE-2023-22098.html https://www.suse.com/security/cve/CVE-2023-22099.html https://www.suse.com/security/cve/CVE-2023-22100.html https://bugzilla.suse.com/1215463 https://bugzilla.suse.com/1216363 https://bugzilla.suse.com/1216364 https://bugzilla.suse.com/1216365

1 0

openSUSE-SU-2023:0354-1: important: Security update for opera
by opensuse-security＠opensuse.org 04 Nov '23

04 Nov '23

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0354-1 Rating: important References: Cross-References: CVE-2023-5472 CVSS scores: CVE-2023-5472 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for opera fixes the following issues: - Update to 104.0.4944.36 * CHR-9492 Update Chromium on desktop-stable-118-4944 to 118.0.5993.118 * DNA-112757 [Tab close button] Close button is cutted when a lot tabs are opened - The update to chromium 118.0.5993.118 fixes following issues: CVE-2023-5472 - Update to 104.0.4944.33 * CHR-9487 Update Chromium on desktop-stable-118-4944 to 118.0.5993.96 * DNA-111963 Show duplicate indicator when hovering tab in tab tooltip - Changes in 104.0.4944.28 * DNA-112454 [Start Page] No context menu in Search bar using right button of mouse * DNA-112053 Context menu is too large on Mac * DNA-111989 Favicons are displayed too close to titles in history menu Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2023-354=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-104.0.4944.36-lp155.3.18.1 References: https://www.suse.com/security/cve/CVE-2023-5472.html

1 0

openSUSE-SU-2023:0353-1: important: Security update for opera
by opensuse-security＠opensuse.org 04 Nov '23

04 Nov '23

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0353-1 Rating: important References: Cross-References: CVE-2023-5472 CVSS scores: CVE-2023-5472 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for opera fixes the following issues: - Update to 104.0.4944.36 * CHR-9492 Update Chromium on desktop-stable-118-4944 to 118.0.5993.118 * DNA-112757 [Tab close button] Close button is cutted when a lot tabs are opened - The update to chromium 118.0.5993.118 fixes following issues: CVE-2023-5472 - Update to 104.0.4944.33 * CHR-9487 Update Chromium on desktop-stable-118-4944 to 118.0.5993.96 * DNA-111963 Show duplicate indicator when hovering tab in tab tooltip - Changes in 104.0.4944.28 * DNA-112454 [Start Page] No context menu in Search bar using right button of mouse * DNA-112053 Context menu is too large on Mac * DNA-111989 Favicons are displayed too close to titles in history menu Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4:NonFree: zypper in -t patch openSUSE-2023-353=1 Package List: - openSUSE Leap 15.4:NonFree (x86_64): opera-104.0.4944.36-lp154.2.59.1 References: https://www.suse.com/security/cve/CVE-2023-5472.html

1 0

openSUSE-SU-2023:0350-1: moderate: Security update for rubygem-activesupport-5.2
by opensuse-security＠opensuse.org 04 Nov '23

04 Nov '23

openSUSE Security Update: Security update for rubygem-activesupport-5.2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0350-1 Rating: moderate References: #1214807 Cross-References: CVE-2023-38037 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-activesupport-5.2 fixes the following issue: - CVE-2023-38037: fixed a File Disclosure of Locally Encrypted Files (bsc#1214807) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-350=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): ruby2.5-rubygem-activesupport-5.2-5.2.3-bp155.3.5.1 ruby2.5-rubygem-activesupport-doc-5.2-5.2.3-bp155.3.5.1 References: https://www.suse.com/security/cve/CVE-2023-38037.html https://bugzilla.suse.com/1214807

1 0

SUSE-RU-2023:4365-1: moderate: Recommended update for kubernetes1.25
by maintenance＠opensuse.org 03 Nov '23

03 Nov '23

# Recommended update for kubernetes1.25 Announcement ID: SUSE-RU-2023:4365-1 Rating: moderate References: * bsc#1214406 * jsc#PED-5839 Affected Products: * Containers Module 15-SP4 * Containers Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has one fix can now be installed. ## Description: This update for kubernetes1.25 fixes the following issues: This update ships the kubernetes1.25-client package. (jsc#PED-5839) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-4365=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2023-4365=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4365=1 openSUSE-SLE-15.4-2023-4365=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4365=1 ## Package List: * Containers Module 15-SP4 (aarch64 ppc64le s390x x86_64) * kubernetes1.25-client-1.25.14-150400.9.3.2 * kubernetes1.25-client-common-1.25.14-150400.9.3.2 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kubernetes1.25-client-1.25.14-150400.9.3.2 * kubernetes1.25-client-common-1.25.14-150400.9.3.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kubernetes1.25-kubelet-common-1.25.14-150400.9.3.2 * kubernetes1.25-apiserver-1.25.14-150400.9.3.2 * kubernetes1.25-kubelet-1.25.14-150400.9.3.2 * kubernetes1.25-controller-manager-1.25.14-150400.9.3.2 * kubernetes1.25-client-common-1.25.14-150400.9.3.2 * kubernetes1.25-scheduler-1.25.14-150400.9.3.2 * kubernetes1.25-kubeadm-1.25.14-150400.9.3.2 * kubernetes1.25-client-1.25.14-150400.9.3.2 * kubernetes1.25-proxy-1.25.14-150400.9.3.2 * openSUSE Leap 15.4 (noarch) * kubernetes1.25-client-bash-completion-1.25.14-150400.9.3.2 * kubernetes1.25-client-fish-completion-1.25.14-150400.9.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kubernetes1.25-client-1.25.14-150400.9.3.2 * kubernetes1.25-client-common-1.25.14-150400.9.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214406 * https://jira.suse.com/browse/PED-5839

1 0

SUSE-RU-2023:4366-1: moderate: Recommended update for kubernetes1.26
by maintenance＠opensuse.org 03 Nov '23

03 Nov '23

# Recommended update for kubernetes1.26 Announcement ID: SUSE-RU-2023:4366-1 Rating: moderate References: * bsc#1213829 * bsc#1214406 * jsc#PED-5839 Affected Products: * Containers Module 15-SP4 * Containers Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has two fixes can now be installed. ## Description: This update for kubernetes1.26 fixes the following issues: This update ships the kubernetes1.26-client package. (jsc#PED-5839) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4366=1 openSUSE-SLE-15.4-2023-4366=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4366=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-4366=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2023-4366=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kubernetes1.26-kubelet-common-1.26.9-150400.9.3.2 * kubernetes1.26-proxy-1.26.9-150400.9.3.2 * kubernetes1.26-controller-manager-1.26.9-150400.9.3.2 * kubernetes1.26-kubelet-1.26.9-150400.9.3.2 * kubernetes1.26-scheduler-1.26.9-150400.9.3.2 * kubernetes1.26-apiserver-1.26.9-150400.9.3.2 * kubernetes1.26-kubeadm-1.26.9-150400.9.3.2 * kubernetes1.26-client-common-1.26.9-150400.9.3.2 * kubernetes1.26-client-1.26.9-150400.9.3.2 * openSUSE Leap 15.4 (noarch) * kubernetes1.26-client-bash-completion-1.26.9-150400.9.3.2 * kubernetes1.26-client-fish-completion-1.26.9-150400.9.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kubernetes1.26-client-1.26.9-150400.9.3.2 * kubernetes1.26-client-common-1.26.9-150400.9.3.2 * Containers Module 15-SP4 (aarch64 ppc64le s390x x86_64) * kubernetes1.26-client-1.26.9-150400.9.3.2 * kubernetes1.26-client-common-1.26.9-150400.9.3.2 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kubernetes1.26-client-1.26.9-150400.9.3.2 * kubernetes1.26-client-common-1.26.9-150400.9.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213829 * https://bugzilla.suse.com/show_bug.cgi?id=1214406 * https://jira.suse.com/browse/PED-5839

1 0

openSUSE-RU-2023:0349-1: Security update for rubygem-railties-5.2
by maintenance＠opensuse.org 03 Nov '23

03 Nov '23

openSUSE Recommended Update: Security update for rubygem-railties-5.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0349-1 Rating: low References: #1214807 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-railties-5.2 fixes the following issue: - CVE-2023-38037: Fixed File Disclosure of Locally Encrypted [bsc#1214807] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-349=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): ruby2.5-rubygem-railties-5.2-5.2.3-bp155.3.3.1 ruby2.5-rubygem-railties-doc-5.2-5.2.3-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2023-38037.html https://bugzilla.suse.com/1214807

1 0

openSUSE-RU-2023:0348-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 03 Nov '23

03 Nov '23

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0348-1 Rating: moderate References: Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update of yast2-theme provides a rebuild of yast2 theme, no other changes. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2023-348=1 Package List: - openSUSE Leap 15.4 (noarch): yast2-theme-4.4.4-lp154.2.10.1 yast2-theme-breeze-4.4.4-lp154.2.10.1 yast2-theme-oxygen-4.4.4-lp154.2.10.1 References:

1 0

SUSE-SU-2023:4360-1: important: Security update for gstreamer-plugins-bad
by maintenance＠opensuse.org 03 Nov '23

03 Nov '23

# Security update for gstreamer-plugins-bad Announcement ID: SUSE-SU-2023:4360-1 Rating: important References: * bsc#1215793 Cross-References: * CVE-2023-40474 CVSS scores: * CVE-2023-40474 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Desktop Applications Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 An update that solves one vulnerability can now be installed. ## Description: This update for gstreamer-plugins-bad fixes the following issues: * CVE-2023-40474: Fixed a remote code execution issue due to improper parsing of H265 encoded video files (bsc#1215793). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4360=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4360=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4360=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4360=1 ## Package List: * openSUSE Leap 15.4 (x86_64) * libgstplayer-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstbasecamerabinsrc-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstphotography-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstplay-1_0-0-32bit-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstcodecs-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstisoff-1_0-0-32bit-1.20.1-150400.3.6.1 * libgsturidownloader-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstplay-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstmpegts-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstbadaudio-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstwebrtc-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstcodecs-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstsctp-1_0-0-32bit-1.20.1-150400.3.6.1 * libgsturidownloader-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstphotography-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstva-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstcodecparsers-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstvulkan-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstvulkan-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-chromaprint-32bit-1.20.1-150400.3.6.1 * libgstinsertbin-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstplayer-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstwayland-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstva-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstinsertbin-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstwebrtc-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstadaptivedemux-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstadaptivedemux-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstbadaudio-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstmpegts-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstwayland-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstisoff-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstcodecparsers-1_0-0-32bit-1.20.1-150400.3.6.1 * libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * libgstsctp-1_0-0-32bit-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-32bit-1.20.1-150400.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libgstadaptivedemux-1_0-0-1.20.1-150400.3.6.1 * libgstplay-1_0-0-1.20.1-150400.3.6.1 * libgstva-1_0-0-1.20.1-150400.3.6.1 * libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstwayland-1_0-0-1.20.1-150400.3.6.1 * libgstisoff-1_0-0-1.20.1-150400.3.6.1 * libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.6.1 * typelib-1_0-GstVulkanWayland-1_0-1.20.1-150400.3.6.1 * libgstmpegts-1_0-0-1.20.1-150400.3.6.1 * libgstcodecparsers-1_0-0-1.20.1-150400.3.6.1 * libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-1.20.1-150400.3.6.1 * libgsttranscoder-1_0-0-1.20.1-150400.3.6.1 * libgstinsertbin-1_0-0-1.20.1-150400.3.6.1 * typelib-1_0-GstVulkanXCB-1_0-1.20.1-150400.3.6.1 * libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.6.1 * typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.6.1 * gstreamer-transcoder-devel-1.20.1-150400.3.6.1 * libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.6.1 * gstreamer-transcoder-1.20.1-150400.3.6.1 * libgsturidownloader-1_0-0-1.20.1-150400.3.6.1 * libgsttranscoder-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.6.1 * libgstsctp-1_0-0-1.20.1-150400.3.6.1 * libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.6.1 * typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.6.1 * libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstwebrtc-1_0-0-1.20.1-150400.3.6.1 * typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.6.1 * typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.6.1 * libgstcodecs-1_0-0-1.20.1-150400.3.6.1 * libgstva-1_0-0-debuginfo-1.20.1-150400.3.6.1 * typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.6.1 * libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-devel-1.20.1-150400.3.6.1 * libgstbadaudio-1_0-0-1.20.1-150400.3.6.1 * typelib-1_0-GstTranscoder-1_0-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.6.1 * typelib-1_0-GstVulkan-1_0-1.20.1-150400.3.6.1 * libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstphotography-1_0-0-1.20.1-150400.3.6.1 * libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstplay-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstplayer-1_0-0-1.20.1-150400.3.6.1 * libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstvulkan-1_0-0-1.20.1-150400.3.6.1 * typelib-1_0-GstPlay-1_0-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.6.1 * typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.6.1 * gstreamer-transcoder-debuginfo-1.20.1-150400.3.6.1 * openSUSE Leap 15.4 (noarch) * gstreamer-plugins-bad-lang-1.20.1-150400.3.6.1 * openSUSE Leap 15.4 (aarch64_ilp32) * gstreamer-plugins-bad-64bit-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstwebrtc-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstplayer-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstsctp-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstwayland-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstadaptivedemux-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstplay-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-chromaprint-64bit-1.20.1-150400.3.6.1 * libgstcodecs-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstphotography-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstwebrtc-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstbasecamerabinsrc-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstvulkan-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstisoff-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstbadaudio-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstmpegts-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstbadaudio-1_0-0-64bit-1.20.1-150400.3.6.1 * libgsturidownloader-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstisoff-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstphotography-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstinsertbin-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstplayer-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstva-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstsctp-1_0-0-64bit-1.20.1-150400.3.6.1 * libgsturidownloader-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstvulkan-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstva-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstcodecparsers-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstwayland-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstadaptivedemux-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstinsertbin-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstcodecparsers-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstplay-1_0-0-64bit-1.20.1-150400.3.6.1 * libgstcodecs-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * libgstmpegts-1_0-0-64bit-debuginfo-1.20.1-150400.3.6.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libgstplay-1_0-0-1.20.1-150400.3.6.1 * libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstplay-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstplayer-1_0-0-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.6.1 * libgstphotography-1_0-0-1.20.1-150400.3.6.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libgstadaptivedemux-1_0-0-1.20.1-150400.3.6.1 * libgstva-1_0-0-1.20.1-150400.3.6.1 * libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstwayland-1_0-0-1.20.1-150400.3.6.1 * libgstisoff-1_0-0-1.20.1-150400.3.6.1 * libgstmpegts-1_0-0-1.20.1-150400.3.6.1 * libgstcodecparsers-1_0-0-1.20.1-150400.3.6.1 * libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-1.20.1-150400.3.6.1 * libgstinsertbin-1_0-0-1.20.1-150400.3.6.1 * libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.6.1 * typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.6.1 * libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgsturidownloader-1_0-0-1.20.1-150400.3.6.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.6.1 * libgstsctp-1_0-0-1.20.1-150400.3.6.1 * libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.6.1 * typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.6.1 * libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstwebrtc-1_0-0-1.20.1-150400.3.6.1 * typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.6.1 * typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.6.1 * libgstcodecs-1_0-0-1.20.1-150400.3.6.1 * libgstva-1_0-0-debuginfo-1.20.1-150400.3.6.1 * typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.6.1 * libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-devel-1.20.1-150400.3.6.1 * libgstbadaudio-1_0-0-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.6.1 * libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.6.1 * libgstvulkan-1_0-0-1.20.1-150400.3.6.1 * typelib-1_0-GstPlay-1_0-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.6.1 * typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.6.1 * Desktop Applications Module 15-SP4 (noarch) * gstreamer-plugins-bad-lang-1.20.1-150400.3.6.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * libgsttranscoder-1_0-0-1.20.1-150400.3.6.1 * libgsttranscoder-1_0-0-debuginfo-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-debugsource-1.20.1-150400.3.6.1 * gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-40474.html * https://bugzilla.suse.com/show_bug.cgi?id=1215793

1 0

SUSE-SU-2023:4361-1: important: Security update for gstreamer-plugins-bad
by maintenance＠opensuse.org 03 Nov '23

03 Nov '23

# Security update for gstreamer-plugins-bad Announcement ID: SUSE-SU-2023:4361-1 Rating: important References: * bsc#1215793 Cross-References: * CVE-2023-40474 CVSS scores: * CVE-2023-40474 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for gstreamer-plugins-bad fixes the following issues: * CVE-2023-40474: Fixed a remote code execution issue due to improper parsing of H265 encoded video files (bsc#1215793). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4361=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4361=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4361=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4361=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4361=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4361=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * gstreamer-plugins-bad-doc-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-devel-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.9.1 * openSUSE Leap 15.3 (x86_64) * libgstplayer-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-32bit-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-32bit-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-32bit-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-32bit-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-32bit-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-32bit-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-32bit-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-32bit-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-32bit-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-32bit-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-32bit-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-32bit-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-32bit-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-32bit-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-32bit-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-32bit-1.16.3-150300.9.9.1 * openSUSE Leap 15.3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.9.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libgstinsertbin-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-64bit-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-64bit-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-64bit-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-64bit-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-64bit-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-64bit-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-64bit-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-64bit-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-64bit-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-64bit-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-64bit-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-64bit-debuginfo-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-64bit-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-64bit-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-64bit-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-64bit-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-64bit-debuginfo-1.16.3-150300.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-devel-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-devel-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-devel-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-devel-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.9.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-devel-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstwebrtc-1_0-0-1.16.3-150300.9.9.1 * libgstisoff-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.9.1 * libgstwayland-1_0-0-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.9.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.9.1 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.9.1 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstcodecparsers-1_0-0-1.16.3-150300.9.9.1 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.9.1 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.9.1 * libgstinsertbin-1_0-0-1.16.3-150300.9.9.1 * libgstphotography-1_0-0-1.16.3-150300.9.9.1 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.9.1 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.9.1 * SUSE Enterprise Storage 7.1 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-40474.html * https://bugzilla.suse.com/show_bug.cgi?id=1215793

1 0

SUSE-SU-2023:4363-1: moderate: Security update for poppler
by maintenance＠opensuse.org 03 Nov '23

03 Nov '23

# Security update for poppler Announcement ID: SUSE-SU-2023:4363-1 Rating: moderate References: * bsc#1213888 * bsc#1214726 Cross-References: * CVE-2022-37052 * CVE-2023-34872 CVSS scores: * CVE-2022-37052 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-34872 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-34872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for poppler fixes the following issues: * CVE-2022-37052: Fixed a crash that could be triggered when opening a crafted file (bsc#1214726). * CVE-2023-34872: Fixed a remote denial-of-service in Outline.cc (bsc#1213888). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4363=1 openSUSE-SLE-15.4-2023-4363=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4363=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4363=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-4363=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * poppler-debugsource-22.01.0-150400.3.16.1 * libpoppler-devel-22.01.0-150400.3.16.1 * libpoppler-glib8-debuginfo-22.01.0-150400.3.16.1 * libpoppler-qt6-3-debuginfo-22.01.0-150400.3.16.1 * libpoppler-qt6-devel-22.01.0-150400.3.16.1 * poppler-tools-debuginfo-22.01.0-150400.3.16.1 * libpoppler-cpp0-debuginfo-22.01.0-150400.3.16.1 * poppler-qt6-debugsource-22.01.0-150400.3.16.1 * poppler-tools-22.01.0-150400.3.16.1 * libpoppler-cpp0-22.01.0-150400.3.16.1 * poppler-qt5-debugsource-22.01.0-150400.3.16.1 * libpoppler117-debuginfo-22.01.0-150400.3.16.1 * libpoppler-qt6-3-22.01.0-150400.3.16.1 * libpoppler-glib8-22.01.0-150400.3.16.1 * libpoppler-qt5-1-22.01.0-150400.3.16.1 * libpoppler-glib-devel-22.01.0-150400.3.16.1 * libpoppler-qt5-1-debuginfo-22.01.0-150400.3.16.1 * libpoppler117-22.01.0-150400.3.16.1 * typelib-1_0-Poppler-0_18-22.01.0-150400.3.16.1 * libpoppler-qt5-devel-22.01.0-150400.3.16.1 * openSUSE Leap 15.4 (x86_64) * libpoppler-qt5-1-32bit-22.01.0-150400.3.16.1 * libpoppler117-32bit-debuginfo-22.01.0-150400.3.16.1 * libpoppler-cpp0-32bit-debuginfo-22.01.0-150400.3.16.1 * libpoppler-qt5-1-32bit-debuginfo-22.01.0-150400.3.16.1 * libpoppler-cpp0-32bit-22.01.0-150400.3.16.1 * libpoppler-glib8-32bit-debuginfo-22.01.0-150400.3.16.1 * libpoppler-glib8-32bit-22.01.0-150400.3.16.1 * libpoppler117-32bit-22.01.0-150400.3.16.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpoppler-glib8-64bit-22.01.0-150400.3.16.1 * libpoppler117-64bit-22.01.0-150400.3.16.1 * libpoppler-qt5-1-64bit-debuginfo-22.01.0-150400.3.16.1 * libpoppler-cpp0-64bit-debuginfo-22.01.0-150400.3.16.1 * libpoppler-qt5-1-64bit-22.01.0-150400.3.16.1 * libpoppler-cpp0-64bit-22.01.0-150400.3.16.1 * libpoppler117-64bit-debuginfo-22.01.0-150400.3.16.1 * libpoppler-glib8-64bit-debuginfo-22.01.0-150400.3.16.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * poppler-debugsource-22.01.0-150400.3.16.1 * libpoppler-devel-22.01.0-150400.3.16.1 * libpoppler-glib8-debuginfo-22.01.0-150400.3.16.1 * poppler-tools-debuginfo-22.01.0-150400.3.16.1 * libpoppler-cpp0-debuginfo-22.01.0-150400.3.16.1 * poppler-tools-22.01.0-150400.3.16.1 * libpoppler-cpp0-22.01.0-150400.3.16.1 * libpoppler117-debuginfo-22.01.0-150400.3.16.1 * libpoppler-glib8-22.01.0-150400.3.16.1 * libpoppler-glib-devel-22.01.0-150400.3.16.1 * libpoppler117-22.01.0-150400.3.16.1 * typelib-1_0-Poppler-0_18-22.01.0-150400.3.16.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * poppler-debugsource-22.01.0-150400.3.16.1 * libpoppler-devel-22.01.0-150400.3.16.1 * libpoppler-cpp0-debuginfo-22.01.0-150400.3.16.1 * libpoppler-cpp0-22.01.0-150400.3.16.1 * poppler-qt5-debugsource-22.01.0-150400.3.16.1 * libpoppler-qt5-1-22.01.0-150400.3.16.1 * libpoppler-qt5-1-debuginfo-22.01.0-150400.3.16.1 * libpoppler-qt5-devel-22.01.0-150400.3.16.1 * SUSE Package Hub 15 15-SP4 (x86_64) * libpoppler-glib8-32bit-22.01.0-150400.3.16.1 * libpoppler117-32bit-debuginfo-22.01.0-150400.3.16.1 * libpoppler117-32bit-22.01.0-150400.3.16.1 * libpoppler-glib8-32bit-debuginfo-22.01.0-150400.3.16.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * poppler-debugsource-22.01.0-150400.3.16.1 * libpoppler117-22.01.0-150400.3.16.1 * libpoppler117-debuginfo-22.01.0-150400.3.16.1 ## References: * https://www.suse.com/security/cve/CVE-2022-37052.html * https://www.suse.com/security/cve/CVE-2023-34872.html * https://bugzilla.suse.com/show_bug.cgi?id=1213888 * https://bugzilla.suse.com/show_bug.cgi?id=1214726

1 0

SUSE-SU-2023:4357-1: important: Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container
by maintenance＠opensuse.org 03 Nov '23

03 Nov '23

# Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools- container, virt-operator-container Announcement ID: SUSE-SU-2023:4357-1 Rating: important References: Affected Products: * Containers Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that can now be installed. ## Description: This update for kubevirt, virt-api-container, virt-controller-container, virt- handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues: kubevirt is rebuilt against the current GO security release. * Set cache mode on hotplugged disks * Delete VMI prior to NFS server pod in tests ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4357=1 openSUSE-SLE-15.4-2023-4357=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4357=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4357=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4357=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4357=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4357=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4357=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-4357=1 ## Package List: * openSUSE Leap 15.4 (x86_64) * kubevirt-virt-handler-0.54.0-150400.3.23.1 * kubevirt-manifests-0.54.0-150400.3.23.1 * kubevirt-tests-debuginfo-0.54.0-150400.3.23.1 * kubevirt-virt-api-0.54.0-150400.3.23.1 * kubevirt-virt-controller-debuginfo-0.54.0-150400.3.23.1 * kubevirt-virt-launcher-0.54.0-150400.3.23.1 * kubevirt-container-disk-0.54.0-150400.3.23.1 * kubevirt-virt-api-debuginfo-0.54.0-150400.3.23.1 * kubevirt-virtctl-0.54.0-150400.3.23.1 * kubevirt-tests-0.54.0-150400.3.23.1 * kubevirt-virt-controller-0.54.0-150400.3.23.1 * kubevirt-virt-operator-debuginfo-0.54.0-150400.3.23.1 * kubevirt-virtctl-debuginfo-0.54.0-150400.3.23.1 * kubevirt-virt-launcher-debuginfo-0.54.0-150400.3.23.1 * obs-service-kubevirt_containers_meta-0.54.0-150400.3.23.1 * kubevirt-virt-handler-debuginfo-0.54.0-150400.3.23.1 * kubevirt-virt-operator-0.54.0-150400.3.23.1 * kubevirt-container-disk-debuginfo-0.54.0-150400.3.23.1 * openSUSE Leap Micro 5.3 (x86_64) * kubevirt-virtctl-0.54.0-150400.3.23.1 * kubevirt-manifests-0.54.0-150400.3.23.1 * kubevirt-virtctl-debuginfo-0.54.0-150400.3.23.1 * openSUSE Leap Micro 5.4 (x86_64) * kubevirt-virtctl-0.54.0-150400.3.23.1 * kubevirt-manifests-0.54.0-150400.3.23.1 * kubevirt-virtctl-debuginfo-0.54.0-150400.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * kubevirt-virtctl-0.54.0-150400.3.23.1 * kubevirt-manifests-0.54.0-150400.3.23.1 * kubevirt-virtctl-debuginfo-0.54.0-150400.3.23.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * kubevirt-virtctl-0.54.0-150400.3.23.1 * kubevirt-manifests-0.54.0-150400.3.23.1 * kubevirt-virtctl-debuginfo-0.54.0-150400.3.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * kubevirt-virtctl-0.54.0-150400.3.23.1 * kubevirt-manifests-0.54.0-150400.3.23.1 * kubevirt-virtctl-debuginfo-0.54.0-150400.3.23.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * kubevirt-virtctl-0.54.0-150400.3.23.1 * kubevirt-manifests-0.54.0-150400.3.23.1 * kubevirt-virtctl-debuginfo-0.54.0-150400.3.23.1 * Containers Module 15-SP4 (x86_64) * kubevirt-virtctl-0.54.0-150400.3.23.1 * kubevirt-manifests-0.54.0-150400.3.23.1 * kubevirt-virtctl-debuginfo-0.54.0-150400.3.23.1

1 0

SUSE-SU-2023:4351-1: important: Security update for the Linux Kernel
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2023:4351-1 Rating: important References: * bsc#1211307 * bsc#1212423 * bsc#1213772 * bsc#1215955 * bsc#1216062 * bsc#1216512 Cross-References: * CVE-2023-2163 * CVE-2023-31085 * CVE-2023-34324 * CVE-2023-3777 * CVE-2023-39189 * CVE-2023-45862 * CVE-2023-46813 * CVE-2023-5178 CVSS scores: * CVE-2023-2163 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2023-2163 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2023-31085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31085 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-34324 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3777 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3777 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-39189 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-39189 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-45862 ( SUSE ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-45862 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46813 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Real Time Module 15-SP4 An update that solves eight vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095) * CVE-2023-46813: Fixed a local privilege escalation with user-space programs that have access to MMIO regions (bsc#1212649). * CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) * CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051) * CVE-2023-5178: Fixed an UAF in queue intialization setup. (bsc#1215768) * CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518) * CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). * CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) The following non-security bugs were fixed: * 9p: virtio: make sure 'offs' is initialized in zc_request (git-fixes). * ACPI: irq: Fix incorrect return value in acpi_register_gsi() (git-fixes). * ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (git-fixes). * ALSA: hda/realtek: Change model for Intel RVP board (git-fixes). * ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (git-fixes). * ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset (git-fixes). * ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (git- fixes). * ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (git-fixes). * ASoC: codecs: wcd938x: drop bogus bind error handling (git-fixes). * ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes). * ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag (git-fixes). * ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link (git-fixes). * ASoC: pxa: fix a memory leak in probe() (git-fixes). * Bluetooth: Avoid redundant authentication (git-fixes). * Bluetooth: Fix a refcnt underflow problem for hci_conn (git-fixes). * Bluetooth: Reject connection with the device which has same BD_ADDR (git- fixes). * Bluetooth: avoid memcmp() out of bounds warning (git-fixes). * Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes). * Bluetooth: hci_event: Fix coding style (git-fixes). * Bluetooth: hci_event: Fix using memcmp when comparing keys (git-fixes). * Bluetooth: hci_event: Ignore NULL link key (git-fixes). * Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (git-fixes). * Bluetooth: hci_sock: fix slab oob read in create_monitor_event (git-fixes). * Bluetooth: vhci: Fix race when opening vhci device (git-fixes). * Documentation: qat: change kernel version (PED-6401). * Documentation: qat: rewrite description (PED-6401). * Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (git- fixes). * Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (git- fixes). * Fix metadata references * HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (git- fixes). * HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (git-fixes). * HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (git- fixes). * HID: multitouch: Add required quirk for Synaptics 0xcd7e device (git-fixes). * HID: sony: Fix a potential memory leak in sony_probe() (git-fixes). * HID: sony: remove duplicate NULL check before calling usb_free_urb() (git- fixes). * IB/mlx4: Fix the size of a buffer in add_port_entries() (git-fixes) * Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case (git-fixes). * Input: powermate - fix use-after-free in powermate_config_complete (git- fixes). * Input: psmouse - fix fast_reconnect function for PS/2 mode (git-fixes). * Input: xpad - add PXN V900 support (git-fixes). * KVM: SVM: Do not kill SEV guest if SMAP erratum triggers in usermode (git- fixes). * KVM: s390: fix gisa destroy operation might lead to cpu stalls (git-fixes bsc#1216512). * KVM: x86/mmu: Reconstruct shadow page root if the guest PDPTEs is changed (git-fixes). * KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid() (git-fixes). * KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (bsc#1213772). * KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (bsc#1213772). * KVM: x86: add support for CPUID leaf 0x80000021 (bsc#1213772). * KVM: x86: synthesize CPUID leaf 0x80000021h if useful (bsc#1213772). * KVM: x86: work around QEMU issue with synthetic CPUID leaves (git-fixes). * RDMA/cma: Fix truncation compilation warning in make_cma_ports (git-fixes) * RDMA/cma: Initialize ib_sa_multicast structure to 0 when join (git-fixes) * RDMA/core: Require admin capabilities to set system parameters (git-fixes) * RDMA/cxgb4: Check skb value for failure to allocate (git-fixes) * RDMA/mlx5: Fix NULL string error (git-fixes) * RDMA/siw: Fix connection failure handling (git-fixes) * RDMA/srp: Do not call scsi_done() from srp_abort() (git-fixes) * RDMA/uverbs: Fix typo of sizeof argument (git-fixes) * Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" (git-fixes). * Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" (git-fixes). * USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes). * USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes). * USB: serial: option: add entry for Sierra EM9191 with new firmware (git- fixes). * ata: libata-core: Do not register PM operations for SAS ports (git-fixes). * ata: libata-core: Fix ata_port_request_pm() locking (git-fixes). * ata: libata-core: Fix port and device removal (git-fixes). * ata: libata-sata: increase PMP SRST timeout to 10s (git-fixes). * ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (git-fixes). * blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (bsc#1216062). * blk-cgroup: support to track if policy is online (bsc#1216062). * bpf: propagate precision in ALU/ALU64 operations (git-fixes). * bus: ti-sysc: Fix missing AM35xx SoC matching (git-fixes). * bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() (git- fixes). * cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (bsc#1215955). * cgroup: Remove duplicates in cgroup v1 tasks file (bsc#1211307). * clk: tegra: fix error return case for recalc_rate (git-fixes). * counter: microchip-tcb-capture: Fix the use of internal GCLK logic (git- fixes). * crypto: qat - Include algapi.h for low-level Crypto API (PED-6401). * crypto: qat - Remove unused function declarations (PED-6401). * crypto: qat - add fw_counters debugfs file (PED-6401). * crypto: qat - add heartbeat counters check (PED-6401). * crypto: qat - add heartbeat feature (PED-6401). * crypto: qat - add internal timer for qat 4xxx (PED-6401). * crypto: qat - add measure clock frequency (PED-6401). * crypto: qat - add missing function declaration in adf_dbgfs.h (PED-6401). * crypto: qat - add qat_zlib_deflate (PED-6401). * crypto: qat - add support for 402xx devices (PED-6401). * crypto: qat - change value of default idle filter (PED-6401). * crypto: qat - delay sysfs initialization (PED-6401). * crypto: qat - do not export adf_init_admin_pm() (PED-6401). * crypto: qat - drop log level of msg in get_instance_node() (PED-6401). * crypto: qat - drop obsolete heartbeat interface (PED-6401). * crypto: qat - drop redundant adf_enable_aer() (PED-6401). * crypto: qat - expose pm_idle_enabled through sysfs (PED-6401). * crypto: qat - extend buffer list logic interface (PED-6401). * crypto: qat - extend configuration for 4xxx (PED-6401). * crypto: qat - fix apply custom thread-service mapping for dc service (PED-6401). * crypto: qat - fix concurrency issue when device state changes (PED-6401). * crypto: qat - fix crypto capability detection for 4xxx (PED-6401). * crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (PED-6401). * crypto: qat - make fw images name constant (PED-6401). * crypto: qat - make state machine functions static (PED-6401). * crypto: qat - move dbgfs init to separate file (PED-6401). * crypto: qat - move returns to default case (PED-6401). * crypto: qat - refactor device restart logic (PED-6401). * crypto: qat - refactor fw config logic for 4xxx (PED-6401). * crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (PED-6401). * crypto: qat - replace state machine calls (PED-6401). * crypto: qat - replace the if statement with min() (PED-6401). * crypto: qat - set deprecated capabilities as reserved (PED-6401). * crypto: qat - unmap buffer before free for DH (PED-6401). * crypto: qat - unmap buffers before free for RSA (PED-6401). * crypto: qat - update slice mask for 4xxx devices (PED-6401). * crypto: qat - use kfree_sensitive instead of memset/kfree() (PED-6401). * dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq (git- fixes). * dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (git-fixes). * dmaengine: stm32-mdma: abort resume if no ongoing transfer (git-fixes). * drm/amd/display: Do not check registers, if using AUX BL control (git- fixes). * drm/amd/display: Do not set dpms_off for seamless boot (git-fixes). * drm/amdgpu: Handle null atom context in VBIOS info ioctl (git-fixes). * drm/amdgpu: add missing NULL check (git-fixes). * drm/i915: Retry gtt fault when out of fence registers (git-fixes). * drm/msm/dp: do not reinitialize phy unless retry during link training (git- fixes). * drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow (git- fixes). * drm/msm/dsi: fix irq_of_parse_and_map() error checking (git-fixes). * drm/msm/dsi: skip the wait for video mode done if not applicable (git- fixes). * drm/vmwgfx: fix typo of sizeof argument (git-fixes). * drm: panel-orientation-quirks: Add quirk for One Mix 2S (git-fixes). * firmware: arm_ffa: Do not set the memory region attributes for MEM_LEND (git-fixes). * firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() (git-fixes). * gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (git- fixes). * gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (git-fixes). * gpio: pxa: disable pinctrl calls for MMP_GPIO (git-fixes). * gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (git-fixes). * gpio: timberdale: Fix potential deadlock on &tgpio->lock (git-fixes). * gpio: vf610: set value before the direction to avoid a glitch (git-fixes). * gve: Do not fully free QPL pages on prefill errors (git-fixes). * i2c: i801: unregister tco_pdev in i801_probe() error path (git-fixes). * i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (git- fixes). * i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (git- fixes). * i2c: mux: gpio: Add missing fwnode_handle_put() (git-fixes). * i2c: mux: gpio:Â Replace custom acpi_get_local_address() (git-fixes). * i2c: npcm7xx: Fix callback completion ordering (git-fixes). * ieee802154: ca8210: Fix a potential UAF in ca8210_probe (git-fixes). * iio: pressure: bmp280: Fix NULL pointer exception (git-fixes). * iio: pressure: dps310: Adjust Timeout Settings (git-fixes). * iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (git-fixes). * iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). * iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). * iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). * kabi: blkcg_policy_data fix KABI (bsc#1216062). * kabi: workaround for enum nft_trans_phase (bsc#1215104). * kprobes: Prohibit probing on CFI preamble symbol (git-fixes). * leds: Drop BUG_ON check for LED_COLOR_ID_MULTI (git-fixes). * mm, memcg: reconsider kmem.limit_in_bytes deprecation (bsc#1208788 bsc#1213705). * mmc: core: Capture correct oemid-bits for eMMC cards (git-fixes). * mmc: core: sdio: hold retuning if sdio in 1-bit mode (git-fixes). * mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw (git-fixes). * mtd: physmap-core: Restore map_rom fallback (git-fixes). * mtd: rawnand: arasan: Ensure program page operations are successful (git- fixes). * mtd: rawnand: marvell: Ensure program page operations are successful (git- fixes). * mtd: rawnand: pl353: Ensure program page operations are successful (git- fixes). * mtd: rawnand: qcom: Unmap the right resource upon probe failure (git-fixes). * mtd: spinand: micron: correct bitmask for ecc status (git-fixes). * net/sched: fix netdevice reference leaks in attach_default_qdiscs() (git- fixes). * net: mana: Fix TX CQE error handling (bsc#1215986). * net: mana: Fix oversized sge0 for GSO packets (bsc#1215986). * net: nfc: llcp: Add lock when modifying device list (git-fixes). * net: rfkill: gpio: prevent value glitch during probe (git-fixes). * net: sched: add barrier to fix packet stuck problem for lockless qdisc (bsc#1216345). * net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1216345). * net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (git- fixes). * net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git- fixes). * net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (git-fixes). * netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (git-fixes). * netfilter: nf_tables: unbind non-anonymous set if rule construction fails (git-fixes). * nfc: nci: assert requested protocol is valid (git-fixes). * nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (git- fixes). * nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (git-fixes). * nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842). * phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (git-fixes). * phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes). * phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes). * pinctrl: avoid unsafe code pattern in find_pinctrl() (git-fixes). * pinctrl: renesas: rzn1: Enable missing PINMUX (git-fixes). * platform/surface: platform_profile: Propagate error if profile registration fails (git-fixes). * platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (git-fixes). * platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events (git- fixes). * platform/x86: think-lmi: Fix reference leak (git-fixes). * platform/x86: touchscreen_dmi: Add info for the Positivo C4128B (git-fixes). * power: supply: ucs1002: fix error code in ucs1002_get_property() (git- fixes). * quota: Fix slow quotaoff (bsc#1216621). * r8152: check budget for r8152_poll() (git-fixes). * regmap: fix NULL deref on lookup (git-fixes). * regmap: rbtree: Fix wrong register marked as in-cache when creating new node (git-fixes). * ring-buffer: Avoid softlockup in ring_buffer_resize() (git-fixes). * ring-buffer: Do not attempt to read past "commit" (git-fixes). * ring-buffer: Fix bytes info in per_cpu buffer stats (git-fixes). * ring-buffer: Update "shortest_full" in polling (git-fixes). * s390/cio: fix a memleak in css_alloc_subchannel (git-fixes bsc#1216510). * s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511). * s390: add z16 elf platform (git-fixes LTC#203789 bsc#1215956 LTC#203788 bsc#1215957). * sched/cpuset: Bring back cpuset_mutex (bsc#1215955). * sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (git fixes (sched)). * sched/rt: Fix live lock between select_fallback_rq() and RT push (git fixes (sched)). * sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes (sched)). * serial: 8250_port: Check IRQ data before use (git-fixes). * soc: imx8m: Enable OCOTP clock for imx8mm before reading registers (git- fixes). * spi: nxp-fspi: reset the FLSHxCR1 registers (git-fixes). * spi: stm32: add a delay before SPI disable (git-fixes). * spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (git-fixes). * spi: sun6i: reduce DMA RX transfer width to single byte (git-fixes). * thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding (git- fixes). * thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge (git-fixes). * tracing: Have current_trace inc the trace array ref count (git-fixes). * tracing: Have event inject files inc the trace array ref count (git-fixes). * tracing: Have option files inc the trace array ref count (git-fixes). * tracing: Have tracing_max_latency inc the trace array ref count (git-fixes). * tracing: Increase trace array ref count on enable and filter files (git- fixes). * tracing: Make trace_marker{,_raw} stream-like (git-fixes). * usb: cdnsp: Fixes issue with dequeuing not queued requests (git-fixes). * usb: dwc3: Soft reset phy on probe for host (git-fixes). * usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (git- fixes). * usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes). * usb: musb: Get the musb_qh poniter after musb_giveback (git-fixes). * usb: musb: Modify the "HWVers" register address (git-fixes). * usb: typec: altmodes/displayport: Signal hpd low when exiting mode (git- fixes). * usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes). * vmbus_testing: fix wrong python syntax for integer value comparison (git- fixes). * vringh: do not use vringh_kiov_advance() in vringh_iov_xfer() (git-fixes). * watchdog: iTCO_wdt: No need to stop the timer in probe (git-fixes). * watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (git-fixes). * wifi: cfg80211: Fix 6GHz scan configuration (git-fixes). * wifi: cfg80211: avoid leaking stack data into trace (git-fixes). * wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes). * wifi: iwlwifi: dbg_ini: fix structure packing (git-fixes). * wifi: iwlwifi: mvm: Fix a memory corruption issue (git-fixes). * wifi: mac80211: allow transmitting EAPOL frames with tainted key (git- fixes). * wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (git-fixes). * wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (git- fixes). * wifi: mwifiex: Fix tlv_buf_left calculation (git-fixes). * wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len (git-fixes). * x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (bsc#1213772). * x86/cpu, kvm: Add the Null Selector Clears Base feature (bsc#1213772). * x86/cpu, kvm: Add the SMM_CTL MSR not present feature (bsc#1213772). * x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (bsc#1213772). * x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (bsc#1213772). * x86/cpu: Support AMD Automatic IBRS (bsc#1213772). * x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1212649). * x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1212649). * x86/sev: Disable MMIO emulation from user mode (bsc#1212649). * xen-netback: use default TX queue size for vifs (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4351=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4351=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4351=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4351=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4351=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4351=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4351=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2023-4351=1 * SUSE Real Time Module 15-SP4 zypper in -t patch SUSE-SLE-Module-RT-15-SP4-2023-4351=1 ## Package List: * openSUSE Leap Micro 5.3 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.59.1 * openSUSE Leap Micro 5.3 (x86_64) * kernel-rt-debugsource-5.14.21-150400.15.59.1 * kernel-rt-debuginfo-5.14.21-150400.15.59.1 * openSUSE Leap Micro 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.59.1 * openSUSE Leap Micro 5.4 (x86_64) * kernel-rt-debugsource-5.14.21-150400.15.59.1 * kernel-rt-debuginfo-5.14.21-150400.15.59.1 * openSUSE Leap 15.4 (x86_64) * kernel-rt_debug-debuginfo-5.14.21-150400.15.59.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150400.15.59.1 * kernel-rt_debug-devel-5.14.21-150400.15.59.1 * kernel-rt-debugsource-5.14.21-150400.15.59.1 * dlm-kmp-rt-5.14.21-150400.15.59.1 * cluster-md-kmp-rt-5.14.21-150400.15.59.1 * kernel-rt-debuginfo-5.14.21-150400.15.59.1 * kernel-rt-devel-5.14.21-150400.15.59.1 * kernel-syms-rt-5.14.21-150400.15.59.1 * dlm-kmp-rt-debuginfo-5.14.21-150400.15.59.1 * gfs2-kmp-rt-debuginfo-5.14.21-150400.15.59.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150400.15.59.1 * kernel-rt_debug-debugsource-5.14.21-150400.15.59.1 * kernel-rt-devel-debuginfo-5.14.21-150400.15.59.1 * gfs2-kmp-rt-5.14.21-150400.15.59.1 * ocfs2-kmp-rt-5.14.21-150400.15.59.1 * ocfs2-kmp-rt-debuginfo-5.14.21-150400.15.59.1 * openSUSE Leap 15.4 (noarch) * kernel-devel-rt-5.14.21-150400.15.59.1 * kernel-source-rt-5.14.21-150400.15.59.1 * openSUSE Leap 15.4 (nosrc x86_64) * kernel-rt_debug-5.14.21-150400.15.59.1 * kernel-rt-5.14.21-150400.15.59.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.59.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * kernel-rt-debugsource-5.14.21-150400.15.59.1 * kernel-rt-debuginfo-5.14.21-150400.15.59.1 * SUSE Linux Enterprise Micro 5.3 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.59.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * kernel-rt-debugsource-5.14.21-150400.15.59.1 * kernel-rt-debuginfo-5.14.21-150400.15.59.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.59.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * kernel-rt-debugsource-5.14.21-150400.15.59.1 * kernel-rt-debuginfo-5.14.21-150400.15.59.1 * SUSE Linux Enterprise Micro 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.59.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * kernel-rt-debugsource-5.14.21-150400.15.59.1 * kernel-rt-debuginfo-5.14.21-150400.15.59.1 * SUSE Linux Enterprise Live Patching 15-SP4 (x86_64) * kernel-livepatch-5_14_21-150400_15_59-rt-debuginfo-1-150400.1.3.1 * kernel-livepatch-SLE15-SP4-RT_Update_15-debugsource-1-150400.1.3.1 * kernel-livepatch-5_14_21-150400_15_59-rt-1-150400.1.3.1 * SUSE Real Time Module 15-SP4 (x86_64) * kernel-rt_debug-debuginfo-5.14.21-150400.15.59.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150400.15.59.1 * kernel-rt_debug-devel-5.14.21-150400.15.59.1 * kernel-rt-debugsource-5.14.21-150400.15.59.1 * dlm-kmp-rt-5.14.21-150400.15.59.1 * cluster-md-kmp-rt-5.14.21-150400.15.59.1 * kernel-rt-debuginfo-5.14.21-150400.15.59.1 * kernel-rt-devel-5.14.21-150400.15.59.1 * kernel-syms-rt-5.14.21-150400.15.59.1 * dlm-kmp-rt-debuginfo-5.14.21-150400.15.59.1 * gfs2-kmp-rt-debuginfo-5.14.21-150400.15.59.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150400.15.59.1 * kernel-rt_debug-debugsource-5.14.21-150400.15.59.1 * kernel-rt-devel-debuginfo-5.14.21-150400.15.59.1 * gfs2-kmp-rt-5.14.21-150400.15.59.1 * ocfs2-kmp-rt-5.14.21-150400.15.59.1 * ocfs2-kmp-rt-debuginfo-5.14.21-150400.15.59.1 * SUSE Real Time Module 15-SP4 (noarch) * kernel-devel-rt-5.14.21-150400.15.59.1 * kernel-source-rt-5.14.21-150400.15.59.1 * SUSE Real Time Module 15-SP4 (nosrc x86_64) * kernel-rt_debug-5.14.21-150400.15.59.1 * kernel-rt-5.14.21-150400.15.59.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2163.html * https://www.suse.com/security/cve/CVE-2023-31085.html * https://www.suse.com/security/cve/CVE-2023-34324.html * https://www.suse.com/security/cve/CVE-2023-3777.html * https://www.suse.com/security/cve/CVE-2023-39189.html * https://www.suse.com/security/cve/CVE-2023-45862.html * https://www.suse.com/security/cve/CVE-2023-46813.html * https://www.suse.com/security/cve/CVE-2023-5178.html * https://bugzilla.suse.com/show_bug.cgi?id=1211307 * https://bugzilla.suse.com/show_bug.cgi?id=1212423 * https://bugzilla.suse.com/show_bug.cgi?id=1213772 * https://bugzilla.suse.com/show_bug.cgi?id=1215955 * https://bugzilla.suse.com/show_bug.cgi?id=1216062 * https://bugzilla.suse.com/show_bug.cgi?id=1216512

1 0

openSUSE-RU-2023:0346-1: moderate: Recommended update for python-yamllint
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

openSUSE Recommended Update: Recommended update for python-yamllint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0346-1 Rating: moderate References: #1151703 #1216677 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-yamllint fixes the following issues: - Add python-setuptools requirement needed for entrypoints (boo#1151703, boo#1216677) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-346=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): python3-yamllint-1.22.1-bp154.2.3.1 References: https://bugzilla.suse.com/1151703 https://bugzilla.suse.com/1216677

1 0

openSUSE-RU-2023:0347-1: moderate: Recommended update for python-yamllint
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

openSUSE Recommended Update: Recommended update for python-yamllint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0347-1 Rating: moderate References: #1151703 #1216677 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-yamllint fixes the following issues: - Add python-setuptools requirement needed for entrypoints (boo#1151703, boo#1216677) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-347=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-yamllint-1.22.1-bp155.3.3.1 References: https://bugzilla.suse.com/1151703 https://bugzilla.suse.com/1216677

1 0

openSUSE-SU-2023:0345-1: important: Security update for roundcubemail
by opensuse-security＠opensuse.org 02 Nov '23

02 Nov '23

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0345-1 Rating: important References: #1216429 Cross-References: CVE-2023-5631 CVSS scores: CVE-2023-5631 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2023-5631 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for roundcubemail fixes the following issues: Update to version 1.6.4 (boo#1216429): * CVE-2023-5631: Fix cross-site scripting vulnerability in handling of SVG in HTML messages * Fix PHP8 warnings * Fix default 'mime.types' path on Windows * Managesieve: Fix javascript error when relational or spamtest extension is not enabled Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-345=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): roundcubemail-1.6.4-bp155.2.6.1 References: https://www.suse.com/security/cve/CVE-2023-5631.html https://bugzilla.suse.com/1216429

1 0

SUSE-RU-2023:4342-1: moderate: Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-RU-2023:4342-1 Rating: moderate References: * bsc#1211892 * jsc#PED-4964 * jsc#PED-7112 Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains two features and has one fix can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Changes in nvidia-open-driver-G06-signed: * Update to version 535.113.01 * post install scripts: * add/remove nosimplefb=1 kernel option in order to fix Linux console also on sle15-sp6/Leap 15.6 kernel, which will come with simpledrm support * Add a devel package so other modules can be built against this one. [jira#PED-4964] * disabled build of nvidia-peermem module; it's no longer needed and never worked anyway (it was only a stub) [boo#1211892] * preamble: added conflict to nvidia-gfxG05-kmp to prevent users from accidently installing conflicting proprietary kernelspace drivers from CUDA repository Changes in kernel-firmware-nvidia-gspx-G06: * update firmware to version 535.113.01 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4342=1 openSUSE-SLE-15.4-2023-4342=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4342=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4342=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4342=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4342=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4342=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-4342=1 ## Package List: * openSUSE Leap 15.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.113.01-150400.9.9.1 * openSUSE Leap 15.4 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-535.113.01_k5.14.21_150400.14.69-150400.9.24.1 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-535.113.01_k5.14.21_150400.14.69-150400.9.24.1 * nvidia-open-driver-G06-signed-azure-devel-535.113.01-150400.9.24.1 * openSUSE Leap 15.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * nvidia-open-driver-G06-signed-debugsource-535.113.01-150400.9.24.1 * nvidia-open-driver-G06-signed-default-devel-535.113.01-150400.9.24.1 * nvidia-open-driver-G06-signed-kmp-default-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * openSUSE Leap 15.4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * nvidia-open-driver-G06-signed-64kb-devel-535.113.01-150400.9.24.1 * nvidia-open-driver-G06-signed-kmp-64kb-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.113.01-150400.9.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * nvidia-open-driver-G06-signed-debugsource-535.113.01-150400.9.24.1 * nvidia-open-driver-G06-signed-kmp-default-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.113.01-150400.9.9.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * nvidia-open-driver-G06-signed-debugsource-535.113.01-150400.9.24.1 * nvidia-open-driver-G06-signed-kmp-default-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.113.01-150400.9.9.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * nvidia-open-driver-G06-signed-debugsource-535.113.01-150400.9.24.1 * nvidia-open-driver-G06-signed-kmp-default-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.113.01-150400.9.9.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * nvidia-open-driver-G06-signed-debugsource-535.113.01-150400.9.24.1 * nvidia-open-driver-G06-signed-kmp-default-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * Basesystem Module 15-SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.113.01-150400.9.9.1 * Basesystem Module 15-SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * nvidia-open-driver-G06-signed-64kb-devel-535.113.01-150400.9.24.1 * nvidia-open-driver-G06-signed-kmp-64kb-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * Basesystem Module 15-SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * nvidia-open-driver-G06-signed-debugsource-535.113.01-150400.9.24.1 * nvidia-open-driver-G06-signed-default-devel-535.113.01-150400.9.24.1 * nvidia-open-driver-G06-signed-kmp-default-535.113.01_k5.14.21_150400.24.92-150400.9.24.1 * Public Cloud Module 15-SP4 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-535.113.01_k5.14.21_150400.14.69-150400.9.24.1 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-535.113.01_k5.14.21_150400.14.69-150400.9.24.1 * nvidia-open-driver-G06-signed-azure-devel-535.113.01-150400.9.24.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1211892 * https://jira.suse.com/browse/PED-4964 * https://jira.suse.com/browse/PED-7112

1 0

SUSE-RU-2023:4344-1: moderate: Recommended update for nodejs20
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Recommended update for nodejs20 Announcement ID: SUSE-RU-2023:4344-1 Rating: moderate References: * jsc#PED-4819 * jsc#PED-7088 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * Web and Scripting Module 15-SP5 An update that contains two features can now be installed. ## Description: This update for nodejs20 fixes the following issues: This update provides nodejs 20 in version 20.8.1. For overview of changes and details since 19.x and earlier see: https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V20.md#20… * Permission Model Node.js now has an experimental feature called the Permission Model. It allows developers to restrict access to specific resources during program execution, such as file system operations, child process spawning, and worker thread creation. The API exists behind a flag \--experimental-permission which when enabled will restrict access to all available permissions. By using this feature, developers can prevent their applications from accessing or modifying sensitive data or running potentially harmful code. More information about the Permission Model can be found in the Node.js documentation. The Permission Model was a contribution by Rafael Gonzaga in #44004. * Custom ESM loader hooks run on dedicated thread ESM hooks supplied via loaders (--experimental-loader=foo.mjs) now run in a dedicated thread, isolated from the main thread. This provides a separate scope for loaders and ensures no cross-contamination between loaders and application code. * Synchronous import.meta.resolve() In alignment with browser behavior, this function now returns synchronously. Despite this, user loader resolve hooks can still be defined as async functions (or as sync functions, if the author prefers). Even when there are async resolve hooks loaded, import.meta.resolve will still return synchronously for application code. Contributed by Anna Henningsen, Antoine du Hamel, Geoffrey Booth, Guy Bedford, Jacob Smith, and Michaël Zasso in #44710 * V8 11.3 The V8 engine is updated to version 11.3, which is part of Chromium 113. This version includes three new features to the JavaScript API: String.prototype.isWellFormed and toWellFormed Methods that change Array and TypedArray by copy Resizable ArrayBuffer and growable SharedArrayBuffer RegExp v flag with set notation + properties of strings WebAssembly Tail Call The V8 update was a contribution by Michaël Zasso in #47251. * Stable Test Runner The recent update to Node.js, version 20, includes an important change to the test_runner module. The module has been marked as stable after a recent update. Previously, the test_runner module was experimental, but this change marks it as a stable module that is ready for production use. Contributed by Colin Ihrig in #46983 * Ada 2.0 Node.js v20 comes with the latest version of the URL parser, Ada. This update brings significant performance improvements to URL parsing, including enhancements to the url.domainToASCII and url.domainToUnicode functions in node:url. Ada 2.0 has been integrated into the Node.js codebase, ensuring that all parts of the application can benefit from the improved performance. Additionally, Ada 2.0 features a significant performance boost over its predecessor, Ada 1.0.4, while also eliminating the need for the ICU requirement for URL hostname parsing. Contributed by Yagiz Nizipli and Daniel Lemire in #47339 * Preparing single executable apps now requires injecting a Blob Building a single executable app now requires injecting a blob prepared by Node.js from a JSON config instead of injecting the raw JS file. This opens up the possibility of embedding multiple co-existing resources into the SEA (Single Executable Apps). Contributed by Joyee Cheung in #47125 * Web Crypto API Web Crypto API functions' arguments are now coerced and validated as per their WebIDL definitions like in other Web Crypto API implementations. This further improves interoperability with other implementations of Web Crypto API. This change was made by Filip Skokan in #46067. * WASI version must now be specified When new WASI() is called, the version option is now required and has no default value. Any code that relied on the default for the version will need to be updated to request a specific version. This change was made by Michael Dawson in #47391. * Deprecations and Removals * (SEMVER-MAJOR) url: runtime-deprecate url.parse() with invalid ports (Rich Trott) #45526 url.parse() accepts URLs with ports that are not numbers. This behavior might result in host name spoofing with unexpected input. These URLs will throw an error in future versions of Node.js, as the WHATWG URL API does already. Starting with Node.js 20, these URLS cause url.parse() to emit a warning. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4344=1 openSUSE-SLE-15.5-2023-4344=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2023-4344=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * nodejs20-20.8.1-150500.11.3.1 * nodejs20-debugsource-20.8.1-150500.11.3.1 * nodejs20-devel-20.8.1-150500.11.3.1 * npm20-20.8.1-150500.11.3.1 * nodejs20-debuginfo-20.8.1-150500.11.3.1 * corepack20-20.8.1-150500.11.3.1 * openSUSE Leap 15.5 (noarch) * nodejs20-docs-20.8.1-150500.11.3.1 * Web and Scripting Module 15-SP5 (aarch64 ppc64le s390x x86_64) * nodejs20-20.8.1-150500.11.3.1 * nodejs20-debugsource-20.8.1-150500.11.3.1 * nodejs20-devel-20.8.1-150500.11.3.1 * npm20-20.8.1-150500.11.3.1 * nodejs20-debuginfo-20.8.1-150500.11.3.1 * Web and Scripting Module 15-SP5 (noarch) * nodejs20-docs-20.8.1-150500.11.3.1 ## References: * https://jira.suse.com/browse/PED-4819 * https://jira.suse.com/browse/PED-7088

1 0

SUSE-SU-2023:4345-1: important: Security update for the Linux Kernel
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2023:4345-1 Rating: important References: * bsc#1208788 * bsc#1210778 * bsc#1211307 * bsc#1212423 * bsc#1212649 * bsc#1213705 * bsc#1214842 * bsc#1215095 * bsc#1215104 * bsc#1215518 * bsc#1215745 * bsc#1215768 * bsc#1215860 * bsc#1215955 * bsc#1215986 * bsc#1216046 * bsc#1216051 * bsc#1216062 * bsc#1216345 * bsc#1216510 * bsc#1216511 * bsc#1216512 * bsc#1216621 Cross-References: * CVE-2023-2163 * CVE-2023-31085 * CVE-2023-34324 * CVE-2023-3777 * CVE-2023-39189 * CVE-2023-39193 * CVE-2023-45862 * CVE-2023-46813 * CVE-2023-5178 CVSS scores: * CVE-2023-2163 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2023-2163 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2023-31085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31085 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-34324 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3777 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3777 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-39189 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-39189 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39193 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39193 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-45862 ( SUSE ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-45862 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46813 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves nine vulnerabilities and has 14 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095) * CVE-2023-46813: Fixed an incorrect access checking in the VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses that could lead to arbitrary write access to kernel memory. (bsc#1212649) * CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) * CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051) * CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). * CVE-2023-5178: Fixed an UAF in queue intialization setup. (bsc#1215768) * CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518) * CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). * CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) The following non-security bugs were fixed: * 9p: virtio: make sure 'offs' is initialized in zc_request (git-fixes). * ACPI: irq: Fix incorrect return value in acpi_register_gsi() (git-fixes). * ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (git-fixes). * ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (git-fixes). * ALSA: hda/realtek: Change model for Intel RVP board (git-fixes). * ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset (git-fixes). * ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (git- fixes). * ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (git-fixes). * ASoC: codecs: wcd938x: drop bogus bind error handling (git-fixes). * ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes). * ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag (git-fixes). * ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link (git-fixes). * ASoC: pxa: fix a memory leak in probe() (git-fixes). * ata: libata-core: Do not register PM operations for SAS ports (git-fixes). * ata: libata-core: Fix ata_port_request_pm() locking (git-fixes). * ata: libata-core: Fix port and device removal (git-fixes). * ata: libata-sata: increase PMP SRST timeout to 10s (git-fixes). * ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (git-fixes). * blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (bsc#1216062). * blk-cgroup: support to track if policy is online (bsc#1216062). * Bluetooth: avoid memcmp() out of bounds warning (git-fixes). * Bluetooth: Avoid redundant authentication (git-fixes). * Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes). * Bluetooth: Fix a refcnt underflow problem for hci_conn (git-fixes). * Bluetooth: hci_event: Fix coding style (git-fixes). * Bluetooth: hci_event: Fix using memcmp when comparing keys (git-fixes). * Bluetooth: hci_event: Ignore NULL link key (git-fixes). * Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (git-fixes). * Bluetooth: hci_sock: fix slab oob read in create_monitor_event (git-fixes). * Bluetooth: Reject connection with the device which has same BD_ADDR (git- fixes). * Bluetooth: vhci: Fix race when opening vhci device (git-fixes). * bpf: propagate precision in ALU/ALU64 operations (git-fixes). * bus: ti-sysc: Fix missing AM35xx SoC matching (git-fixes). * bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() (git- fixes). * cgroup: Remove duplicates in cgroup v1 tasks file (bsc#1211307). * cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (bsc#1215955). * clk: tegra: fix error return case for recalc_rate (git-fixes). * counter: microchip-tcb-capture: Fix the use of internal GCLK logic (git- fixes). * crypto: qat - add fw_counters debugfs file (PED-6401). * crypto: qat - add heartbeat counters check (PED-6401). * crypto: qat - add heartbeat feature (PED-6401). * crypto: qat - add internal timer for qat 4xxx (PED-6401). * crypto: qat - add measure clock frequency (PED-6401). * crypto: qat - add missing function declaration in adf_dbgfs.h (PED-6401). * crypto: qat - add qat_zlib_deflate (PED-6401). * crypto: qat - add support for 402xx devices (PED-6401). * crypto: qat - change value of default idle filter (PED-6401). * crypto: qat - delay sysfs initialization (PED-6401). * crypto: qat - do not export adf_init_admin_pm() (PED-6401). * crypto: qat - drop log level of msg in get_instance_node() (PED-6401). * crypto: qat - drop obsolete heartbeat interface (PED-6401). * crypto: qat - drop redundant adf_enable_aer() (PED-6401). * crypto: qat - expose pm_idle_enabled through sysfs (PED-6401). * crypto: qat - extend buffer list logic interface (PED-6401). * crypto: qat - extend configuration for 4xxx (PED-6401). * crypto: qat - fix apply custom thread-service mapping for dc service (PED-6401). * crypto: qat - fix concurrency issue when device state changes (PED-6401). * crypto: qat - fix crypto capability detection for 4xxx (PED-6401). * crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (PED-6401). * crypto: qat - Include algapi.h for low-level Crypto API (PED-6401). * crypto: qat - make fw images name constant (PED-6401). * crypto: qat - make state machine functions static (PED-6401). * crypto: qat - move dbgfs init to separate file (PED-6401). * crypto: qat - move returns to default case (PED-6401). * crypto: qat - refactor device restart logic (PED-6401). * crypto: qat - refactor fw config logic for 4xxx (PED-6401). * crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (PED-6401). * crypto: qat - Remove unused function declarations (PED-6401). * crypto: qat - replace state machine calls (PED-6401). * crypto: qat - replace the if statement with min() (PED-6401). * crypto: qat - set deprecated capabilities as reserved (PED-6401). * crypto: qat - unmap buffer before free for DH (PED-6401). * crypto: qat - unmap buffers before free for RSA (PED-6401). * crypto: qat - update slice mask for 4xxx devices (PED-6401). * crypto: qat - use kfree_sensitive instead of memset/kfree() (PED-6401). * dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq (git- fixes). * dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (git-fixes). * dmaengine: stm32-mdma: abort resume if no ongoing transfer (git-fixes). * Documentation: qat: change kernel version (PED-6401). * Documentation: qat: rewrite description (PED-6401). * Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (git- fixes). * Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (git- fixes). * drm: panel-orientation-quirks: Add quirk for One Mix 2S (git-fixes). * drm/amd/display: Do not check registers, if using AUX BL control (git- fixes). * drm/amd/display: Do not set dpms_off for seamless boot (git-fixes). * drm/amdgpu: add missing NULL check (git-fixes). * drm/amdgpu: Handle null atom context in VBIOS info ioctl (git-fixes). * drm/i915: Retry gtt fault when out of fence registers (git-fixes). * drm/msm/dp: do not reinitialize phy unless retry during link training (git- fixes). * drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow (git- fixes). * drm/msm/dsi: fix irq_of_parse_and_map() error checking (git-fixes). * drm/msm/dsi: skip the wait for video mode done if not applicable (git- fixes). * drm/vmwgfx: fix typo of sizeof argument (git-fixes). * firmware: arm_ffa: Do not set the memory region attributes for MEM_LEND (git-fixes). * firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() (git-fixes). * gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (git- fixes). * gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (git-fixes). * gpio: pxa: disable pinctrl calls for MMP_GPIO (git-fixes). * gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (git-fixes). * gpio: timberdale: Fix potential deadlock on &tgpio->lock (git-fixes). * gpio: vf610: set value before the direction to avoid a glitch (git-fixes). * gve: Do not fully free QPL pages on prefill errors (git-fixes). * HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (git- fixes). * HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (git-fixes). * HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (git- fixes). * HID: multitouch: Add required quirk for Synaptics 0xcd7e device (git-fixes). * HID: sony: Fix a potential memory leak in sony_probe() (git-fixes). * HID: sony: remove duplicate NULL check before calling usb_free_urb() (git- fixes). * i2c: i801: unregister tco_pdev in i801_probe() error path (git-fixes). * i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (git- fixes). * i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (git- fixes). * i2c: mux: gpio: Add missing fwnode_handle_put() (git-fixes). * i2c: mux: gpio: Replace custom acpi_get_local_address() (git-fixes). * i2c: npcm7xx: Fix callback completion ordering (git-fixes). * IB/mlx4: Fix the size of a buffer in add_port_entries() (git-fixes) * ieee802154: ca8210: Fix a potential UAF in ca8210_probe (git-fixes). * iio: pressure: bmp280: Fix NULL pointer exception (git-fixes). * iio: pressure: dps310: Adjust Timeout Settings (git-fixes). * iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (git-fixes). * Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case (git-fixes). * Input: powermate - fix use-after-free in powermate_config_complete (git- fixes). * Input: psmouse - fix fast_reconnect function for PS/2 mode (git-fixes). * Input: xpad - add PXN V900 support (git-fixes). * iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). * iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). * iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). * kabi: blkcg_policy_data fix KABI (bsc#1216062). * kabi: workaround for enum nft_trans_phase (bsc#1215104). * kprobes: Prohibit probing on CFI preamble symbol (git-fixes). * KVM: s390: fix gisa destroy operation might lead to cpu stalls (git-fixes bsc#1216512). * KVM: SVM: Do not kill SEV guest if SMAP erratum triggers in usermode (git- fixes). * KVM: x86/mmu: Reconstruct shadow page root if the guest PDPTEs is changed (git-fixes). * leds: Drop BUG_ON check for LED_COLOR_ID_MULTI (git-fixes). * mm, memcg: reconsider kmem.limit_in_bytes deprecation (bsc#1208788 bsc#1213705). * mmc: core: Capture correct oemid-bits for eMMC cards (git-fixes). * mmc: core: sdio: hold retuning if sdio in 1-bit mode (git-fixes). * mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw (git-fixes). * mtd: physmap-core: Restore map_rom fallback (git-fixes). * mtd: rawnand: arasan: Ensure program page operations are successful (git- fixes). * mtd: rawnand: marvell: Ensure program page operations are successful (git- fixes). * mtd: rawnand: pl353: Ensure program page operations are successful (git- fixes). * mtd: rawnand: qcom: Unmap the right resource upon probe failure (git-fixes). * mtd: spinand: micron: correct bitmask for ecc status (git-fixes). * net: mana: Fix oversized sge0 for GSO packets (bsc#1215986). * net: mana: Fix TX CQE error handling (bsc#1215986). * net: nfc: llcp: Add lock when modifying device list (git-fixes). * net: rfkill: gpio: prevent value glitch during probe (git-fixes). * net: sched: add barrier to fix packet stuck problem for lockless qdisc (bsc#1216345). * net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1216345). * net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (git- fixes). * net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git- fixes). * net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git- fixes). * net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (git-fixes). * net/sched: fix netdevice reference leaks in attach_default_qdiscs() (git- fixes). * netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (git-fixes). * netfilter: nf_tables: unbind non-anonymous set if rule construction fails (git-fixes). * nfc: nci: assert requested protocol is valid (git-fixes). * nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (git- fixes). * nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (git-fixes). * nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842). * phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (git-fixes). * phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes). * phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes). * pinctrl: avoid unsafe code pattern in find_pinctrl() (git-fixes). * pinctrl: renesas: rzn1: Enable missing PINMUX (git-fixes). * platform/surface: platform_profile: Propagate error if profile registration fails (git-fixes). * platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (git-fixes). * platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events (git- fixes). * platform/x86: think-lmi: Fix reference leak (git-fixes). * platform/x86: touchscreen_dmi: Add info for the Positivo C4128B (git-fixes). * power: supply: ucs1002: fix error code in ucs1002_get_property() (git- fixes). * quota: Fix slow quotaoff (bsc#1216621). * r8152: check budget for r8152_poll() (git-fixes). * RDMA/cma: Fix truncation compilation warning in make_cma_ports (git-fixes) * RDMA/cma: Initialize ib_sa_multicast structure to 0 when join (git-fixes) * RDMA/core: Require admin capabilities to set system parameters (git-fixes) * RDMA/cxgb4: Check skb value for failure to allocate (git-fixes) * RDMA/mlx5: Fix NULL string error (git-fixes) * RDMA/siw: Fix connection failure handling (git-fixes) * RDMA/srp: Do not call scsi_done() from srp_abort() (git-fixes) * RDMA/uverbs: Fix typo of sizeof argument (git-fixes) * regmap: fix NULL deref on lookup (git-fixes). * regmap: rbtree: Fix wrong register marked as in-cache when creating new node (git-fixes). * ring-buffer: Avoid softlockup in ring_buffer_resize() (git-fixes). * ring-buffer: Do not attempt to read past "commit" (git-fixes). * ring-buffer: Fix bytes info in per_cpu buffer stats (git-fixes). * ring-buffer: Update "shortest_full" in polling (git-fixes). * s390/cio: fix a memleak in css_alloc_subchannel (git-fixes bsc#1216510). * s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511). * sched/cpuset: Bring back cpuset_mutex (bsc#1215955). * sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (git fixes (sched)). * sched/rt: Fix live lock between select_fallback_rq() and RT push (git fixes (sched)). * sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes (sched)). * serial: 8250_port: Check IRQ data before use (git-fixes). * soc: imx8m: Enable OCOTP clock for imx8mm before reading registers (git- fixes). * spi: nxp-fspi: reset the FLSHxCR1 registers (git-fixes). * spi: stm32: add a delay before SPI disable (git-fixes). * spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (git-fixes). * spi: sun6i: reduce DMA RX transfer width to single byte (git-fixes). * thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding (git- fixes). * thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge (git-fixes). * tracing: Have current_trace inc the trace array ref count (git-fixes). * tracing: Have event inject files inc the trace array ref count (git-fixes). * tracing: Have option files inc the trace array ref count (git-fixes). * tracing: Have tracing_max_latency inc the trace array ref count (git-fixes). * tracing: Increase trace array ref count on enable and filter files (git- fixes). * tracing: Make trace_marker{,_raw} stream-like (git-fixes). * usb: cdnsp: Fixes issue with dequeuing not queued requests (git-fixes). * usb: dwc3: Soft reset phy on probe for host (git-fixes). * usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (git- fixes). * usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes). * usb: musb: Get the musb_qh poniter after musb_giveback (git-fixes). * usb: musb: Modify the "HWVers" register address (git-fixes). * usb: serial: option: add entry for Sierra EM9191 with new firmware (git- fixes). * usb: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes). * usb: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes). * usb: typec: altmodes/displayport: Signal hpd low when exiting mode (git- fixes). * usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes). * vmbus_testing: fix wrong python syntax for integer value comparison (git- fixes). * vringh: do not use vringh_kiov_advance() in vringh_iov_xfer() (git-fixes). * watchdog: iTCO_wdt: No need to stop the timer in probe (git-fixes). * watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (git-fixes). * wifi: cfg80211: avoid leaking stack data into trace (git-fixes). * wifi: cfg80211: Fix 6GHz scan configuration (git-fixes). * wifi: iwlwifi: dbg_ini: fix structure packing (git-fixes). * wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes). * wifi: iwlwifi: mvm: Fix a memory corruption issue (git-fixes). * wifi: mac80211: allow transmitting EAPOL frames with tainted key (git- fixes). * wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (git-fixes). * wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (git- fixes). * wifi: mwifiex: Fix tlv_buf_left calculation (git-fixes). * wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len (git-fixes). * x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1212649). * x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1212649). * x86/sev: Disable MMIO emulation from user mode (bsc#1212649). * xen-netback: use default TX queue size for vifs (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4345=1 openSUSE-SLE-15.4-2023-4345=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-4345=1 ## Package List: * openSUSE Leap 15.4 (aarch64 x86_64) * gfs2-kmp-azure-debuginfo-5.14.21-150400.14.72.1 * kernel-azure-extra-5.14.21-150400.14.72.1 * kernel-azure-extra-debuginfo-5.14.21-150400.14.72.1 * kselftests-kmp-azure-5.14.21-150400.14.72.1 * kernel-azure-debuginfo-5.14.21-150400.14.72.1 * cluster-md-kmp-azure-debuginfo-5.14.21-150400.14.72.1 * kernel-azure-devel-5.14.21-150400.14.72.1 * reiserfs-kmp-azure-5.14.21-150400.14.72.1 * kernel-azure-optional-debuginfo-5.14.21-150400.14.72.1 * dlm-kmp-azure-5.14.21-150400.14.72.1 * kernel-azure-livepatch-devel-5.14.21-150400.14.72.1 * ocfs2-kmp-azure-5.14.21-150400.14.72.1 * kernel-azure-optional-5.14.21-150400.14.72.1 * dlm-kmp-azure-debuginfo-5.14.21-150400.14.72.1 * ocfs2-kmp-azure-debuginfo-5.14.21-150400.14.72.1 * kernel-azure-debugsource-5.14.21-150400.14.72.1 * reiserfs-kmp-azure-debuginfo-5.14.21-150400.14.72.1 * kselftests-kmp-azure-debuginfo-5.14.21-150400.14.72.1 * cluster-md-kmp-azure-5.14.21-150400.14.72.1 * kernel-syms-azure-5.14.21-150400.14.72.1 * gfs2-kmp-azure-5.14.21-150400.14.72.1 * kernel-azure-devel-debuginfo-5.14.21-150400.14.72.1 * openSUSE Leap 15.4 (aarch64 nosrc x86_64) * kernel-azure-5.14.21-150400.14.72.1 * openSUSE Leap 15.4 (noarch) * kernel-devel-azure-5.14.21-150400.14.72.1 * kernel-source-azure-5.14.21-150400.14.72.1 * Public Cloud Module 15-SP4 (aarch64 nosrc x86_64) * kernel-azure-5.14.21-150400.14.72.1 * Public Cloud Module 15-SP4 (aarch64 x86_64) * kernel-syms-azure-5.14.21-150400.14.72.1 * kernel-azure-devel-5.14.21-150400.14.72.1 * kernel-azure-debugsource-5.14.21-150400.14.72.1 * kernel-azure-debuginfo-5.14.21-150400.14.72.1 * kernel-azure-devel-debuginfo-5.14.21-150400.14.72.1 * Public Cloud Module 15-SP4 (noarch) * kernel-devel-azure-5.14.21-150400.14.72.1 * kernel-source-azure-5.14.21-150400.14.72.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2163.html * https://www.suse.com/security/cve/CVE-2023-31085.html * https://www.suse.com/security/cve/CVE-2023-34324.html * https://www.suse.com/security/cve/CVE-2023-3777.html * https://www.suse.com/security/cve/CVE-2023-39189.html * https://www.suse.com/security/cve/CVE-2023-39193.html * https://www.suse.com/security/cve/CVE-2023-45862.html * https://www.suse.com/security/cve/CVE-2023-46813.html * https://www.suse.com/security/cve/CVE-2023-5178.html * https://bugzilla.suse.com/show_bug.cgi?id=1208788 * https://bugzilla.suse.com/show_bug.cgi?id=1210778 * https://bugzilla.suse.com/show_bug.cgi?id=1211307 * https://bugzilla.suse.com/show_bug.cgi?id=1212423 * https://bugzilla.suse.com/show_bug.cgi?id=1212649 * https://bugzilla.suse.com/show_bug.cgi?id=1213705 * https://bugzilla.suse.com/show_bug.cgi?id=1214842 * https://bugzilla.suse.com/show_bug.cgi?id=1215095 * https://bugzilla.suse.com/show_bug.cgi?id=1215104 * https://bugzilla.suse.com/show_bug.cgi?id=1215518 * https://bugzilla.suse.com/show_bug.cgi?id=1215745 * https://bugzilla.suse.com/show_bug.cgi?id=1215768 * https://bugzilla.suse.com/show_bug.cgi?id=1215860 * https://bugzilla.suse.com/show_bug.cgi?id=1215955 * https://bugzilla.suse.com/show_bug.cgi?id=1215986 * https://bugzilla.suse.com/show_bug.cgi?id=1216046 * https://bugzilla.suse.com/show_bug.cgi?id=1216051 * https://bugzilla.suse.com/show_bug.cgi?id=1216062 * https://bugzilla.suse.com/show_bug.cgi?id=1216345 * https://bugzilla.suse.com/show_bug.cgi?id=1216510 * https://bugzilla.suse.com/show_bug.cgi?id=1216511 * https://bugzilla.suse.com/show_bug.cgi?id=1216512 * https://bugzilla.suse.com/show_bug.cgi?id=1216621

1 0

SUSE-SU-2023:4348-1: important: Security update for the Linux Kernel
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2023:4348-1 Rating: important References: * bsc#1210778 * bsc#1210853 * bsc#1212051 * bsc#1214842 * bsc#1215095 * bsc#1215467 * bsc#1215518 * bsc#1215745 * bsc#1215858 * bsc#1215860 * bsc#1215861 * bsc#1216046 * bsc#1216051 * bsc#1216134 Cross-References: * CVE-2023-2163 * CVE-2023-31085 * CVE-2023-3111 * CVE-2023-34324 * CVE-2023-3777 * CVE-2023-39189 * CVE-2023-39192 * CVE-2023-39193 * CVE-2023-39194 * CVE-2023-42754 * CVE-2023-45862 CVSS scores: * CVE-2023-2163 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2023-2163 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2023-31085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31085 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3111 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3111 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-34324 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3777 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3777 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-39189 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-39189 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39192 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H * CVE-2023-39192 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L * CVE-2023-39193 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39193 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39194 ( SUSE ): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N * CVE-2023-39194 ( NVD ): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N * CVE-2023-42754 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-42754 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-45862 ( SUSE ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-45862 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Availability Extension 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves 11 vulnerabilities and has three security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) * CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051) * CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518) * CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095) * CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). * CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) * CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). * CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). * CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). * CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858). * CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467). The following non-security bugs were fixed: * bpf: propagate precision in ALU/ALU64 operations (git-fixes). * KVM: x86: fix sending PV IPI (git-fixes, bsc#1210853, bsc#1216134). * nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4348=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4348=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2023-4348=1 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * SUSE Linux Enterprise High Availability Extension 15 SP3 zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2023-4348=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4348=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4348=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4348=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4348=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4348=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4348=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4348=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4348=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4348=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4348=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4348=1 ## Package List: * openSUSE Leap 15.3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.141.2 * openSUSE Leap 15.3 (noarch) * kernel-devel-5.3.18-150300.59.141.1 * kernel-source-vanilla-5.3.18-150300.59.141.1 * kernel-source-5.3.18-150300.59.141.1 * kernel-macros-5.3.18-150300.59.141.1 * kernel-docs-html-5.3.18-150300.59.141.2 * openSUSE Leap 15.3 (nosrc ppc64le x86_64) * kernel-debug-5.3.18-150300.59.141.2 * kernel-kvmsmall-5.3.18-150300.59.141.2 * openSUSE Leap 15.3 (ppc64le x86_64) * kernel-kvmsmall-devel-debuginfo-5.3.18-150300.59.141.2 * kernel-debug-devel-debuginfo-5.3.18-150300.59.141.2 * kernel-debug-devel-5.3.18-150300.59.141.2 * kernel-debug-debuginfo-5.3.18-150300.59.141.2 * kernel-debug-livepatch-devel-5.3.18-150300.59.141.2 * kernel-kvmsmall-debuginfo-5.3.18-150300.59.141.2 * kernel-kvmsmall-devel-5.3.18-150300.59.141.2 * kernel-debug-debugsource-5.3.18-150300.59.141.2 * kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.141.2 * kernel-kvmsmall-debugsource-5.3.18-150300.59.141.2 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-5.3.18-150300.59.141.2 * kselftests-kmp-default-5.3.18-150300.59.141.2 * kernel-default-extra-debuginfo-5.3.18-150300.59.141.2 * dlm-kmp-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-extra-5.3.18-150300.59.141.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * kernel-default-livepatch-5.3.18-150300.59.141.2 * kernel-obs-qa-5.3.18-150300.59.141.1 * cluster-md-kmp-default-debuginfo-5.3.18-150300.59.141.2 * reiserfs-kmp-default-5.3.18-150300.59.141.2 * kernel-default-optional-debuginfo-5.3.18-150300.59.141.2 * gfs2-kmp-default-5.3.18-150300.59.141.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-syms-5.3.18-150300.59.141.1 * kernel-default-base-rebuild-5.3.18-150300.59.141.2.150300.18.82.2 * kernel-default-optional-5.3.18-150300.59.141.2 * kernel-default-devel-5.3.18-150300.59.141.2 * kernel-obs-build-5.3.18-150300.59.141.2 * gfs2-kmp-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-livepatch-devel-5.3.18-150300.59.141.2 * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * dlm-kmp-default-5.3.18-150300.59.141.2 * ocfs2-kmp-default-5.3.18-150300.59.141.2 * kernel-obs-build-debugsource-5.3.18-150300.59.141.2 * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.141.2 * ocfs2-kmp-default-debuginfo-5.3.18-150300.59.141.2 * kselftests-kmp-default-debuginfo-5.3.18-150300.59.141.2 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.3.18-150300.59.141.2 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_38-debugsource-1-150300.7.3.2 * kernel-livepatch-5_3_18-150300_59_141-default-1-150300.7.3.2 * kernel-livepatch-5_3_18-150300_59_141-default-debuginfo-1-150300.7.3.2 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_141-preempt-1-150300.7.3.2 * kernel-livepatch-5_3_18-150300_59_141-preempt-debuginfo-1-150300.7.3.2 * openSUSE Leap 15.3 (aarch64 x86_64) * kernel-preempt-devel-5.3.18-150300.59.141.2 * kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.141.2 * dlm-kmp-preempt-debuginfo-5.3.18-150300.59.141.2 * ocfs2-kmp-preempt-5.3.18-150300.59.141.2 * gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.141.2 * kselftests-kmp-preempt-5.3.18-150300.59.141.2 * cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-optional-debuginfo-5.3.18-150300.59.141.2 * ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-optional-5.3.18-150300.59.141.2 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.141.2 * reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-livepatch-devel-5.3.18-150300.59.141.2 * dlm-kmp-preempt-5.3.18-150300.59.141.2 * kernel-preempt-extra-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-extra-5.3.18-150300.59.141.2 * kernel-preempt-debugsource-5.3.18-150300.59.141.2 * gfs2-kmp-preempt-5.3.18-150300.59.141.2 * reiserfs-kmp-preempt-5.3.18-150300.59.141.2 * cluster-md-kmp-preempt-5.3.18-150300.59.141.2 * openSUSE Leap 15.3 (aarch64 nosrc x86_64) * kernel-preempt-5.3.18-150300.59.141.2 * openSUSE Leap 15.3 (nosrc s390x) * kernel-zfcpdump-5.3.18-150300.59.141.2 * openSUSE Leap 15.3 (s390x) * kernel-zfcpdump-debugsource-5.3.18-150300.59.141.2 * kernel-zfcpdump-debuginfo-5.3.18-150300.59.141.2 * openSUSE Leap 15.3 (nosrc) * dtb-aarch64-5.3.18-150300.59.141.1 * openSUSE Leap 15.3 (aarch64) * reiserfs-kmp-64kb-5.3.18-150300.59.141.2 * kselftests-kmp-64kb-5.3.18-150300.59.141.2 * gfs2-kmp-64kb-5.3.18-150300.59.141.2 * kernel-64kb-debuginfo-5.3.18-150300.59.141.2 * kernel-64kb-extra-debuginfo-5.3.18-150300.59.141.2 * kselftests-kmp-64kb-debuginfo-5.3.18-150300.59.141.2 * kernel-64kb-livepatch-devel-5.3.18-150300.59.141.2 * kernel-64kb-optional-5.3.18-150300.59.141.2 * dtb-al-5.3.18-150300.59.141.1 * dtb-exynos-5.3.18-150300.59.141.1 * cluster-md-kmp-64kb-debuginfo-5.3.18-150300.59.141.2 * dtb-xilinx-5.3.18-150300.59.141.1 * ocfs2-kmp-64kb-5.3.18-150300.59.141.2 * kernel-64kb-optional-debuginfo-5.3.18-150300.59.141.2 * dtb-cavium-5.3.18-150300.59.141.1 * dtb-apm-5.3.18-150300.59.141.1 * dtb-arm-5.3.18-150300.59.141.1 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.141.2 * dtb-altera-5.3.18-150300.59.141.1 * dtb-rockchip-5.3.18-150300.59.141.1 * kernel-64kb-devel-5.3.18-150300.59.141.2 * dtb-broadcom-5.3.18-150300.59.141.1 * dtb-zte-5.3.18-150300.59.141.1 * dtb-amd-5.3.18-150300.59.141.1 * dlm-kmp-64kb-5.3.18-150300.59.141.2 * cluster-md-kmp-64kb-5.3.18-150300.59.141.2 * dtb-renesas-5.3.18-150300.59.141.1 * kernel-64kb-debugsource-5.3.18-150300.59.141.2 * reiserfs-kmp-64kb-debuginfo-5.3.18-150300.59.141.2 * gfs2-kmp-64kb-debuginfo-5.3.18-150300.59.141.2 * dtb-marvell-5.3.18-150300.59.141.1 * dtb-amlogic-5.3.18-150300.59.141.1 * dlm-kmp-64kb-debuginfo-5.3.18-150300.59.141.2 * dtb-freescale-5.3.18-150300.59.141.1 * dtb-hisilicon-5.3.18-150300.59.141.1 * dtb-socionext-5.3.18-150300.59.141.1 * dtb-sprd-5.3.18-150300.59.141.1 * dtb-qcom-5.3.18-150300.59.141.1 * dtb-allwinner-5.3.18-150300.59.141.1 * kernel-64kb-extra-5.3.18-150300.59.141.2 * dtb-nvidia-5.3.18-150300.59.141.1 * dtb-mediatek-5.3.18-150300.59.141.1 * dtb-lg-5.3.18-150300.59.141.1 * ocfs2-kmp-64kb-debuginfo-5.3.18-150300.59.141.2 * openSUSE Leap 15.3 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.141.2 * openSUSE Leap 15.4 (nosrc) * dtb-aarch64-5.3.18-150300.59.141.1 * openSUSE Leap 15.4 (aarch64) * dtb-al-5.3.18-150300.59.141.1 * dtb-zte-5.3.18-150300.59.141.1 * SUSE Linux Enterprise Live Patching 15-SP3 (nosrc) * kernel-default-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-default-livepatch-devel-5.3.18-150300.59.141.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * kernel-default-livepatch-5.3.18-150300.59.141.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-livepatch-5_3_18-150300_59_141-default-1-150300.7.3.2 * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-debuginfo-5.3.18-150300.59.141.2 * gfs2-kmp-default-5.3.18-150300.59.141.2 * gfs2-kmp-default-debuginfo-5.3.18-150300.59.141.2 * cluster-md-kmp-default-5.3.18-150300.59.141.2 * dlm-kmp-default-5.3.18-150300.59.141.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * ocfs2-kmp-default-5.3.18-150300.59.141.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * dlm-kmp-default-debuginfo-5.3.18-150300.59.141.2 * ocfs2-kmp-default-debuginfo-5.3.18-150300.59.141.2 * SUSE Linux Enterprise High Availability Extension 15 SP3 (nosrc) * kernel-default-5.3.18-150300.59.141.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.141.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64) * kernel-64kb-devel-5.3.18-150300.59.141.2 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.141.2 * kernel-64kb-debuginfo-5.3.18-150300.59.141.2 * kernel-64kb-debugsource-5.3.18-150300.59.141.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 nosrc x86_64) * kernel-default-5.3.18-150300.59.141.2 * kernel-preempt-5.3.18-150300.59.141.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * kernel-default-devel-5.3.18-150300.59.141.2 * kernel-obs-build-5.3.18-150300.59.141.2 * kernel-preempt-debuginfo-5.3.18-150300.59.141.2 * reiserfs-kmp-default-5.3.18-150300.59.141.2 * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * kernel-preempt-devel-5.3.18-150300.59.141.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * kernel-preempt-debugsource-5.3.18-150300.59.141.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.141.2 * kernel-obs-build-debugsource-5.3.18-150300.59.141.2 * kernel-syms-5.3.18-150300.59.141.1 * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.141.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * kernel-devel-5.3.18-150300.59.141.1 * kernel-macros-5.3.18-150300.59.141.1 * kernel-source-5.3.18-150300.59.141.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.141.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.141.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64) * kernel-64kb-devel-5.3.18-150300.59.141.2 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.141.2 * kernel-64kb-debuginfo-5.3.18-150300.59.141.2 * kernel-64kb-debugsource-5.3.18-150300.59.141.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 nosrc x86_64) * kernel-default-5.3.18-150300.59.141.2 * kernel-preempt-5.3.18-150300.59.141.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * kernel-default-devel-5.3.18-150300.59.141.2 * kernel-obs-build-5.3.18-150300.59.141.2 * kernel-preempt-debuginfo-5.3.18-150300.59.141.2 * reiserfs-kmp-default-5.3.18-150300.59.141.2 * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * kernel-preempt-devel-5.3.18-150300.59.141.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * kernel-preempt-debugsource-5.3.18-150300.59.141.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.141.2 * kernel-obs-build-debugsource-5.3.18-150300.59.141.2 * kernel-syms-5.3.18-150300.59.141.1 * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.141.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * kernel-devel-5.3.18-150300.59.141.1 * kernel-macros-5.3.18-150300.59.141.1 * kernel-source-5.3.18-150300.59.141.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64) * kernel-64kb-devel-5.3.18-150300.59.141.2 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.141.2 * kernel-64kb-debuginfo-5.3.18-150300.59.141.2 * kernel-64kb-debugsource-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-5.3.18-150300.59.141.2 * kernel-obs-build-5.3.18-150300.59.141.2 * reiserfs-kmp-default-5.3.18-150300.59.141.2 * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-syms-5.3.18-150300.59.141.1 * kernel-obs-build-debugsource-5.3.18-150300.59.141.2 * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * kernel-devel-5.3.18-150300.59.141.1 * kernel-macros-5.3.18-150300.59.141.1 * kernel-source-5.3.18-150300.59.141.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 nosrc x86_64) * kernel-preempt-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 x86_64) * kernel-preempt-devel-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-devel-5.3.18-150300.59.141.2 * kernel-preempt-debugsource-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (nosrc s390x) * kernel-zfcpdump-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (s390x) * kernel-zfcpdump-debugsource-5.3.18-150300.59.141.2 * kernel-zfcpdump-debuginfo-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc ppc64le x86_64) * kernel-default-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * kernel-default-devel-5.3.18-150300.59.141.2 * kernel-obs-build-5.3.18-150300.59.141.2 * reiserfs-kmp-default-5.3.18-150300.59.141.2 * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-syms-5.3.18-150300.59.141.1 * kernel-obs-build-debugsource-5.3.18-150300.59.141.2 * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * kernel-devel-5.3.18-150300.59.141.1 * kernel-macros-5.3.18-150300.59.141.1 * kernel-source-5.3.18-150300.59.141.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc x86_64) * kernel-preempt-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * kernel-preempt-devel-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-devel-5.3.18-150300.59.141.2 * kernel-preempt-debugsource-5.3.18-150300.59.141.2 * SUSE Manager Proxy 4.2 (nosrc x86_64) * kernel-default-5.3.18-150300.59.141.2 * kernel-preempt-5.3.18-150300.59.141.2 * SUSE Manager Proxy 4.2 (x86_64) * kernel-default-devel-5.3.18-150300.59.141.2 * kernel-preempt-debuginfo-5.3.18-150300.59.141.2 * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * kernel-preempt-debugsource-5.3.18-150300.59.141.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.141.2 * SUSE Manager Proxy 4.2 (noarch) * kernel-devel-5.3.18-150300.59.141.1 * kernel-macros-5.3.18-150300.59.141.1 * SUSE Manager Retail Branch Server 4.2 (nosrc x86_64) * kernel-default-5.3.18-150300.59.141.2 * kernel-preempt-5.3.18-150300.59.141.2 * SUSE Manager Retail Branch Server 4.2 (x86_64) * kernel-default-devel-5.3.18-150300.59.141.2 * kernel-preempt-debuginfo-5.3.18-150300.59.141.2 * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * kernel-preempt-debugsource-5.3.18-150300.59.141.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.141.2 * SUSE Manager Retail Branch Server 4.2 (noarch) * kernel-devel-5.3.18-150300.59.141.1 * kernel-macros-5.3.18-150300.59.141.1 * SUSE Manager Server 4.2 (nosrc ppc64le s390x x86_64) * kernel-default-5.3.18-150300.59.141.2 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * kernel-default-devel-5.3.18-150300.59.141.2 * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.141.2 * SUSE Manager Server 4.2 (noarch) * kernel-devel-5.3.18-150300.59.141.1 * kernel-macros-5.3.18-150300.59.141.1 * SUSE Manager Server 4.2 (nosrc s390x) * kernel-zfcpdump-5.3.18-150300.59.141.2 * SUSE Manager Server 4.2 (s390x) * kernel-zfcpdump-debugsource-5.3.18-150300.59.141.2 * kernel-zfcpdump-debuginfo-5.3.18-150300.59.141.2 * SUSE Manager Server 4.2 (nosrc x86_64) * kernel-preempt-5.3.18-150300.59.141.2 * SUSE Manager Server 4.2 (x86_64) * kernel-preempt-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-debugsource-5.3.18-150300.59.141.2 * SUSE Enterprise Storage 7.1 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.141.2 * SUSE Enterprise Storage 7.1 (aarch64) * kernel-64kb-devel-5.3.18-150300.59.141.2 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.141.2 * kernel-64kb-debuginfo-5.3.18-150300.59.141.2 * kernel-64kb-debugsource-5.3.18-150300.59.141.2 * SUSE Enterprise Storage 7.1 (aarch64 nosrc x86_64) * kernel-default-5.3.18-150300.59.141.2 * kernel-preempt-5.3.18-150300.59.141.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * kernel-default-devel-5.3.18-150300.59.141.2 * kernel-obs-build-5.3.18-150300.59.141.2 * kernel-preempt-debuginfo-5.3.18-150300.59.141.2 * reiserfs-kmp-default-5.3.18-150300.59.141.2 * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * kernel-preempt-devel-5.3.18-150300.59.141.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * kernel-preempt-debugsource-5.3.18-150300.59.141.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.141.2 * kernel-obs-build-debugsource-5.3.18-150300.59.141.2 * kernel-syms-5.3.18-150300.59.141.1 * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.141.2 * SUSE Enterprise Storage 7.1 (noarch) * kernel-devel-5.3.18-150300.59.141.1 * kernel-macros-5.3.18-150300.59.141.1 * kernel-source-5.3.18-150300.59.141.1 * SUSE Enterprise Storage 7.1 (noarch nosrc) * kernel-docs-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Micro 5.1 (aarch64 nosrc s390x x86_64) * kernel-default-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Micro 5.2 (aarch64 nosrc s390x x86_64) * kernel-default-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Micro 5.2 (aarch64 x86_64) * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 nosrc s390x x86_64) * kernel-default-5.3.18-150300.59.141.2 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 x86_64) * kernel-default-base-5.3.18-150300.59.141.2.150300.18.82.2 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.3.18-150300.59.141.2 * kernel-default-debugsource-5.3.18-150300.59.141.2 ## References: * https://www.suse.com/security/cve/CVE-2023-2163.html * https://www.suse.com/security/cve/CVE-2023-31085.html * https://www.suse.com/security/cve/CVE-2023-3111.html * https://www.suse.com/security/cve/CVE-2023-34324.html * https://www.suse.com/security/cve/CVE-2023-3777.html * https://www.suse.com/security/cve/CVE-2023-39189.html * https://www.suse.com/security/cve/CVE-2023-39192.html * https://www.suse.com/security/cve/CVE-2023-39193.html * https://www.suse.com/security/cve/CVE-2023-39194.html * https://www.suse.com/security/cve/CVE-2023-42754.html * https://www.suse.com/security/cve/CVE-2023-45862.html * https://bugzilla.suse.com/show_bug.cgi?id=1210778 * https://bugzilla.suse.com/show_bug.cgi?id=1210853 * https://bugzilla.suse.com/show_bug.cgi?id=1212051 * https://bugzilla.suse.com/show_bug.cgi?id=1214842 * https://bugzilla.suse.com/show_bug.cgi?id=1215095 * https://bugzilla.suse.com/show_bug.cgi?id=1215467 * https://bugzilla.suse.com/show_bug.cgi?id=1215518 * https://bugzilla.suse.com/show_bug.cgi?id=1215745 * https://bugzilla.suse.com/show_bug.cgi?id=1215858 * https://bugzilla.suse.com/show_bug.cgi?id=1215860 * https://bugzilla.suse.com/show_bug.cgi?id=1215861 * https://bugzilla.suse.com/show_bug.cgi?id=1216046 * https://bugzilla.suse.com/show_bug.cgi?id=1216051 * https://bugzilla.suse.com/show_bug.cgi?id=1216134

1 0

SUSE-SU-2023:4343-1: important: Security update for the Linux Kernel
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2023:4343-1 Rating: important References: * bsc#1211162 * bsc#1211307 * bsc#1213772 * bsc#1214754 * bsc#1214874 * bsc#1215545 * bsc#1215921 * bsc#1215955 * bsc#1216062 * bsc#1216202 * bsc#1216322 * bsc#1216324 * bsc#1216333 * bsc#1216512 Cross-References: * CVE-2023-2163 * CVE-2023-2860 * CVE-2023-31085 * CVE-2023-34324 * CVE-2023-39189 * CVE-2023-39191 * CVE-2023-39193 * CVE-2023-45862 * CVE-2023-5178 CVSS scores: * CVE-2023-2163 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2023-2163 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2023-2860 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-2860 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-31085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31085 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-34324 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-39189 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-39189 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39191 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2023-39191 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2023-39193 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39193 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-45862 ( SUSE ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-45862 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5178 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Real Time Module 15-SP5 An update that solves nine vulnerabilities and has five security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) * CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051) * CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). * CVE-2023-5178: Fixed an UAF in queue intialization setup. (bsc#1215768) * CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518) * CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). * CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) * CVE-2023-39191: Fixed a lack of validation of dynamic pointers within user- supplied eBPF programs that may have allowed an attacker with CAP_BPF privileges to escalate privileges and execute arbitrary code. (bsc#1215863) * CVE-2023-2860: Fixed an out-of-bounds read vulnerability in the processing of seg6 attributes. This flaw allowed a privileged local user to disclose sensitive information. (bsc#1211592) The following non-security bugs were fixed: * 9p: virtio: make sure 'offs' is initialized in zc_request (git-fixes). * ACPI: irq: Fix incorrect return value in acpi_register_gsi() (git-fixes). * ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (git-fixes). * ALSA: hda/realtek - ALC287 I2S speaker platform support (git-fixes). * ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP (git-fixes). * ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (git-fixes). * ALSA: hda/realtek - Fixed two speaker platform (git-fixes). * ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes). * ALSA: hda/realtek: Change model for Intel RVP board (git-fixes). * ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx (git-fixes). * ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (git-fixes). * ALSA: hda: intel-dsp-cfg: add LunarLake support (git-fixes). * ALSA: hda: intel-sdw-acpi: Use u8 type for link index (git-fixes). * ALSA: usb-audio: Fix microphone sound on Nexigo webcam (git-fixes). * ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset (git-fixes). * ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM (git-fixes). * ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (git- fixes). * ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (git-fixes). * ASoC: codecs: wcd938x: drop bogus bind error handling (git-fixes). * ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes). * ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag (git-fixes). * ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link (git-fixes). * ASoC: pxa: fix a memory leak in probe() (git-fixes). * Bluetooth: Avoid redundant authentication (git-fixes). * Bluetooth: Fix a refcnt underflow problem for hci_conn (git-fixes). * Bluetooth: ISO: Fix handling of listen for unicast (git-fixes). * Bluetooth: Reject connection with the device which has same BD_ADDR (git- fixes). * Bluetooth: avoid memcmp() out of bounds warning (git-fixes). * Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes). * Bluetooth: hci_codec: Fix leaking content of local_codecs (git-fixes). * Bluetooth: hci_event: Fix coding style (git-fixes). * Bluetooth: hci_event: Fix using memcmp when comparing keys (git-fixes). * Bluetooth: hci_event: Ignore NULL link key (git-fixes). * Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (git-fixes). * Bluetooth: hci_sock: fix slab oob read in create_monitor_event (git-fixes). * Bluetooth: vhci: Fix race when opening vhci device (git-fixes). * Documentation: qat: change kernel version (PED-6401). * Documentation: qat: rewrite description (PED-6401). * Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (git- fixes). * Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (git- fixes). * Fix metadata references * HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (git- fixes). * HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (git-fixes). * HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (git- fixes). * HID: multitouch: Add required quirk for Synaptics 0xcd7e device (git-fixes). * HID: sony: Fix a potential memory leak in sony_probe() (git-fixes). * HID: sony: remove duplicate NULL check before calling usb_free_urb() (git- fixes). * IB/mlx4: Fix the size of a buffer in add_port_entries() (git-fixes) * Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case (git-fixes). * Input: powermate - fix use-after-free in powermate_config_complete (git- fixes). * Input: psmouse - fix fast_reconnect function for PS/2 mode (git-fixes). * Input: xpad - add PXN V900 support (git-fixes). * KVM: SVM: Do not kill SEV guest if SMAP erratum triggers in usermode (git- fixes). * KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway (git-fixes). * KVM: s390: fix gisa destroy operation might lead to cpu stalls (git-fixes bsc#1216512). * KVM: x86/mmu: Reconstruct shadow page root if the guest PDPTEs is changed (git-fixes). * KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid() (git-fixes). * KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (bsc#1213772). * KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (bsc#1213772). * KVM: x86: add support for CPUID leaf 0x80000021 (bsc#1213772). * KVM: x86: synthesize CPUID leaf 0x80000021h if useful (bsc#1213772). * KVM: x86: work around QEMU issue with synthetic CPUID leaves (git-fixes). * NFS: Fix O_DIRECT locking issues (bsc#1211162). * NFS: Fix a few more clear_bit() instances that need release semantics (bsc#1211162). * NFS: Fix a potential data corruption (bsc#1211162). * NFS: Fix a use after free in nfs_direct_join_group() (bsc#1211162). * NFS: Fix error handling for O_DIRECT write scheduling (bsc#1211162). * NFS: More O_DIRECT accounting fixes for error paths (bsc#1211162). * NFS: More fixes for nfs_direct_write_reschedule_io() (bsc#1211162). * NFS: Use the correct commit info in nfs_join_page_group() (bsc#1211162). * NFSD: Never call nfsd_file_gc() in foreground paths (bsc#1215545). * RDMA/cma: Fix truncation compilation warning in make_cma_ports (git-fixes) * RDMA/cma: Initialize ib_sa_multicast structure to 0 when join (git-fixes) * RDMA/core: Require admin capabilities to set system parameters (git-fixes) * RDMA/cxgb4: Check skb value for failure to allocate (git-fixes) * RDMA/mlx5: Fix NULL string error (git-fixes) * RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation (git-fixes) * RDMA/siw: Fix connection failure handling (git-fixes) * RDMA/srp: Do not call scsi_done() from srp_abort() (git-fixes) * RDMA/uverbs: Fix typo of sizeof argument (git-fixes) * Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" (git-fixes). * Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" (git-fixes). * USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes). * USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes). * USB: serial: option: add entry for Sierra EM9191 with new firmware (git- fixes). * arm64/smmu: use TLBI ASID when invalidating entire range (bsc#1215921) * ata: libata-core: Do not register PM operations for SAS ports (git-fixes). * ata: libata-core: Fix ata_port_request_pm() locking (git-fixes). * ata: libata-core: Fix port and device removal (git-fixes). * ata: libata-sata: increase PMP SRST timeout to 10s (git-fixes). * ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (git-fixes). * blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (bsc#1216062). * blk-cgroup: support to track if policy is online (bsc#1216062). * bonding: Fix extraction of ports from the packet headers (bsc#1214754). * bonding: Return pointer to data after pull on skb (bsc#1214754). * bonding: do not assume skb mac_header is set (bsc#1214754). * bpf: Add copy_map_value_long to copy to remote percpu memory (git-fixes). * bpf: Add missing btf_put to register_btf_id_dtor_kfuncs (git-fixes). * bpf: Add override check to kprobe multi link attach (git-fixes). * bpf: Add zero_map_value to zero map value with special fields (git-fixes). * bpf: Cleanup check_refcount_ok (git-fixes). * bpf: Fix max stack depth check for async callbacks (git-fixes). * bpf: Fix offset calculation error in __copy_map_value and zero_map_value (git-fixes). * bpf: Fix ref_obj_id for dynptr data slices in verifier (git-fixes). * bpf: Fix resetting logic for unreferenced kptrs (git-fixes). * bpf: Fix subprog idx logic in check_max_stack_depth (git-fixes). * bpf: Gate dynptr API behind CAP_BPF (git-fixes). * bpf: Prevent decl_tag from being referenced in func_proto arg (git-fixes). * bpf: Repeat check_max_stack_depth for async callbacks (git-fixes). * bpf: Tighten ptr_to_btf_id checks (git-fixes). * bpf: fix precision propagation verbose logging (git-fixes). * bpf: prevent decl_tag from being referenced in func_proto (git-fixes). * bpf: propagate precision across all frames, not just the last one (git- fixes). * bpf: propagate precision in ALU/ALU64 operations (git-fixes). * btf: Export bpf_dynptr definition (git-fixes). * btrfs: do not start transaction for scrub if the fs is mounted read-only (bsc#1214874). * bus: ti-sysc: Fix missing AM35xx SoC matching (git-fixes). * bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() (git- fixes). * ceph: add base64 endcoding routines for encrypted names (jsc#SES-1880). * ceph: add encryption support to writepage and writepages (jsc#SES-1880). * ceph: add fscrypt ioctls and ceph.fscrypt.auth vxattr (jsc#SES-1880). * ceph: add helpers for converting names for userland presentation (jsc#SES-1880). * ceph: add infrastructure for file encryption and decryption (jsc#SES-1880). * ceph: add new mount option to enable sparse reads (jsc#SES-1880). * ceph: add object version support for sync read (jsc#SES-1880). * ceph: add read/modify/write to ceph_sync_write (jsc#SES-1880). * ceph: add some fscrypt guardrails (jsc#SES-1880). * ceph: add support for encrypted snapshot names (jsc#SES-1880). * ceph: add support to readdir for encrypted names (jsc#SES-1880). * ceph: add truncate size handling support for fscrypt (jsc#SES-1880). * ceph: align data in pages in ceph_sync_write (jsc#SES-1880). * ceph: allow encrypting a directory while not having Ax caps (jsc#SES-1880). * ceph: create symlinks with encrypted and base64-encoded targets (jsc#SES-1880). * ceph: decode alternate_name in lease info (jsc#SES-1880). * ceph: do not use special DIO path for encrypted inodes (jsc#SES-1880). * ceph: drop messages from MDS when unmounting (jsc#SES-1880). * ceph: encode encrypted name in ceph_mdsc_build_path and dentry release (jsc#SES-1880). * ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1216322). * ceph: fix type promotion bug on 32bit systems (bsc#1216324). * ceph: fix updating i_truncate_pagecache_size for fscrypt (jsc#SES-1880). * ceph: fscrypt_auth handling for ceph (jsc#SES-1880). * ceph: handle fscrypt fields in cap messages from MDS (jsc#SES-1880). * ceph: implement -o test_dummy_encryption mount option (jsc#SES-1880). * ceph: invalidate pages when doing direct/sync writes (jsc#SES-1880). * ceph: make ceph_fill_trace and ceph_get_name decrypt names (jsc#SES-1880). * ceph: make ceph_msdc_build_path use ref-walk (jsc#SES-1880). * ceph: make d_revalidate call fscrypt revalidator for encrypted dentries (jsc#SES-1880). * ceph: make ioctl cmds more readable in debug log (jsc#SES-1880). * ceph: make num_fwd and num_retry to __u32 (jsc#SES-1880). * ceph: mark directory as non-complete after loading key (jsc#SES-1880). * ceph: pass the request to parse_reply_info_readdir() (jsc#SES-1880). * ceph: plumb in decryption during reads (jsc#SES-1880). * ceph: preallocate inode for ops that may create one (jsc#SES-1880). * ceph: prevent snapshot creation in encrypted locked directories (jsc#SES-1880). * ceph: remove unnecessary check for NULL in parse_longname() (bsc#1216333). * ceph: send alternate_name in MClientRequest (jsc#SES-1880). * ceph: set DCACHE_NOKEY_NAME flag in ceph_lookup/atomic_open() (jsc#SES-1880). * ceph: size handling in MClientRequest, cap updates and inode traces (jsc#SES-1880). * ceph: switch ceph_lookup/atomic_open() to use new fscrypt helper (jsc#SES-1880). * ceph: use osd_req_op_extent_osd_iter for netfs reads (jsc#SES-1880). * ceph: voluntarily drop Xx caps for requests those touch parent mtime (jsc#SES-1880). * ceph: wait for OSD requests' callbacks to finish when unmounting (jsc#SES-1880). * cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (bsc#1215955). * cgroup: Remove duplicates in cgroup v1 tasks file (bsc#1211307). * clk: tegra: fix error return case for recalc_rate (git-fixes). * counter: microchip-tcb-capture: Fix the use of internal GCLK logic (git- fixes). * crypto: qat - Include algapi.h for low-level Crypto API (PED-6401). * crypto: qat - Remove unused function declarations (PED-6401). * crypto: qat - add fw_counters debugfs file (PED-6401). * crypto: qat - add heartbeat counters check (PED-6401). * crypto: qat - add heartbeat feature (PED-6401). * crypto: qat - add internal timer for qat 4xxx (PED-6401). * crypto: qat - add measure clock frequency (PED-6401). * crypto: qat - add missing function declaration in adf_dbgfs.h (PED-6401). * crypto: qat - add qat_zlib_deflate (PED-6401). * crypto: qat - add support for 402xx devices (PED-6401). * crypto: qat - change value of default idle filter (PED-6401). * crypto: qat - delay sysfs initialization (PED-6401). * crypto: qat - do not export adf_init_admin_pm() (PED-6401). * crypto: qat - drop log level of msg in get_instance_node() (PED-6401). * crypto: qat - drop obsolete heartbeat interface (PED-6401). * crypto: qat - drop redundant adf_enable_aer() (PED-6401). * crypto: qat - expose pm_idle_enabled through sysfs (PED-6401). * crypto: qat - extend buffer list logic interface (PED-6401). * crypto: qat - extend configuration for 4xxx (PED-6401). * crypto: qat - fix apply custom thread-service mapping for dc service (PED-6401). * crypto: qat - fix concurrency issue when device state changes (PED-6401). * crypto: qat - fix crypto capability detection for 4xxx (PED-6401). * crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (PED-6401). * crypto: qat - make fw images name constant (PED-6401). * crypto: qat - make state machine functions static (PED-6401). * crypto: qat - move dbgfs init to separate file (PED-6401). * crypto: qat - move returns to default case (PED-6401). * crypto: qat - refactor device restart logic (PED-6401). * crypto: qat - refactor fw config logic for 4xxx (PED-6401). * crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (PED-6401). * crypto: qat - replace state machine calls (PED-6401). * crypto: qat - replace the if statement with min() (PED-6401). * crypto: qat - set deprecated capabilities as reserved (PED-6401). * crypto: qat - unmap buffer before free for DH (PED-6401). * crypto: qat - unmap buffers before free for RSA (PED-6401). * crypto: qat - update slice mask for 4xxx devices (PED-6401). * crypto: qat - use kfree_sensitive instead of memset/kfree() (PED-6401). * dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq (git- fixes). * dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (git-fixes). * dmaengine: stm32-mdma: abort resume if no ongoing transfer (git-fixes). * drm/amd/display: Do not check registers, if using AUX BL control (git- fixes). * drm/amd/display: Do not set dpms_off for seamless boot (git-fixes). * drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes). * drm/amd: Fix detection of _PR3 on the PCIe root port (git-fixes). * drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV (git- fixes). * drm/amdgpu/soc21: do not remap HDP registers for SR-IOV (git-fixes). * drm/amdgpu: Handle null atom context in VBIOS info ioctl (git-fixes). * drm/amdgpu: add missing NULL check (git-fixes). * drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3 (git-fixes). * drm/amdkfd: Insert missing TLB flush on GFX10 and later (git-fixes). * drm/amdkfd: Use gpu_offset for user queue's wptr (git-fixes). * drm/atomic-helper: relax unregistered connector check (git-fixes). * drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet (git- fixes). * drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top (git-fixes). * drm/i915: Retry gtt fault when out of fence registers (git-fixes). * drm/mediatek: Correctly free sg_table in gem prime vmap (git-fixes). * drm/msm/dp: do not reinitialize phy unless retry during link training (git- fixes). * drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow (git- fixes). * drm/msm/dsi: fix irq_of_parse_and_map() error checking (git-fixes). * drm/msm/dsi: skip the wait for video mode done if not applicable (git- fixes). * drm/vmwgfx: fix typo of sizeof argument (git-fixes). * drm: panel-orientation-quirks: Add quirk for One Mix 2S (git-fixes). * firmware: arm_ffa: Do not set the memory region attributes for MEM_LEND (git-fixes). * firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() (git-fixes). * fprobe: Ensure running fprobe_exit_handler() finished before calling rethook_free() (git-fixes). * fscrypt: new helper function - fscrypt_prepare_lookup_partial() (jsc#SES-1880). * gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (git- fixes). * gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (git-fixes). * gpio: pxa: disable pinctrl calls for MMP_GPIO (git-fixes). * gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (git-fixes). * gpio: timberdale: Fix potential deadlock on &tgpio->lock (git-fixes). * gpio: vf610: set value before the direction to avoid a glitch (git-fixes). * gve: Do not fully free QPL pages on prefill errors (git-fixes). * i2c: i801: unregister tco_pdev in i801_probe() error path (git-fixes). * i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (git- fixes). * i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (git- fixes). * i2c: mux: gpio: Add missing fwnode_handle_put() (git-fixes). * i2c: mux: gpio:Â Replace custom acpi_get_local_address() (git-fixes). * i2c: npcm7xx: Fix callback completion ordering (git-fixes). * ieee802154: ca8210: Fix a potential UAF in ca8210_probe (git-fixes). * iio: pressure: bmp280: Fix NULL pointer exception (git-fixes). * iio: pressure: dps310: Adjust Timeout Settings (git-fixes). * iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (git-fixes). * intel x86 platform vsec kABI workaround (bsc#1216202). * io_uring/fs: remove sqe->rw_flags checking from LINKAT (git-fixes). * io_uring/rw: defer fsnotify calls to task context (git-fixes). * io_uring/rw: ensure kiocb_end_write() is always called (git-fixes). * io_uring/rw: remove leftover debug statement (git-fixes). * io_uring: Replace 0-length array with flexible array (git-fixes). * io_uring: ensure REQ_F_ISREG is set async offload (git-fixes). * io_uring: fix fdinfo sqe offsets calculation (git-fixes). * io_uring: fix memory leak when removing provided buffers (git-fixes). * iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). * iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). * iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). * iommu/arm-smmu-v3: Fix soft lockup triggered by (bsc#1215921) * kABI: fix bpf Tighten-ptr_to_btf_id checks (git-fixes). * kabi: blkcg_policy_data fix KABI (bsc#1216062). * kabi: workaround for enum nft_trans_phase (bsc#1215104). * kprobes: Prohibit probing on CFI preamble symbol (git-fixes). * leds: Drop BUG_ON check for LED_COLOR_ID_MULTI (git-fixes). * libceph: add CEPH_OSD_OP_ASSERT_VER support (jsc#SES-1880). * libceph: add new iov_iter-based ceph_msg_data_type and ceph_osd_data_type (jsc#SES-1880). * libceph: add sparse read support to OSD client (jsc#SES-1880). * libceph: add sparse read support to msgr1 (jsc#SES-1880). * libceph: add spinlock around osd->o_requests (jsc#SES-1880). * libceph: allow ceph_osdc_new_request to accept a multi-op read (jsc#SES-1880). * libceph: define struct ceph_sparse_extent and add some helpers (jsc#SES-1880). * libceph: new sparse_read op, support sparse reads on msgr2 crc codepath (jsc#SES-1880). * libceph: support sparse reads on msgr2 secure codepath (jsc#SES-1880). * libceph: use kernel_connect() (bsc#1216323). * mm, memcg: reconsider kmem.limit_in_bytes deprecation (bsc#1208788 bsc#1213705). * mmc: core: Capture correct oemid-bits for eMMC cards (git-fixes). * mmc: core: sdio: hold retuning if sdio in 1-bit mode (git-fixes). * mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw (git-fixes). * mtd: physmap-core: Restore map_rom fallback (git-fixes). * mtd: rawnand: arasan: Ensure program page operations are successful (git- fixes). * mtd: rawnand: marvell: Ensure program page operations are successful (git- fixes). * mtd: rawnand: pl353: Ensure program page operations are successful (git- fixes). * mtd: rawnand: qcom: Unmap the right resource upon probe failure (git-fixes). * mtd: spinand: micron: correct bitmask for ecc status (git-fixes). * net/sched: fix netdevice reference leaks in attach_default_qdiscs() (git- fixes). * net: mana: Fix TX CQE error handling (bsc#1215986). * net: mana: Fix oversized sge0 for GSO packets (bsc#1215986). * net: nfc: llcp: Add lock when modifying device list (git-fixes). * net: rfkill: gpio: prevent value glitch during probe (git-fixes). * net: sched: add barrier to fix packet stuck problem for lockless qdisc (bsc#1216345). * net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1216345). * net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (git- fixes). * net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git- fixes). * net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (git-fixes). * net: use sk_is_tcp() in more places (git-fixes). * netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (git-fixes). * netfilter: nf_tables: unbind non-anonymous set if rule construction fails (git-fixes). * nfc: nci: assert requested protocol is valid (git-fixes). * nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (git- fixes). * nfs: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162). * nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (git-fixes). * nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842). * phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (git-fixes). * phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes). * phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes). * pinctrl: avoid unsafe code pattern in find_pinctrl() (git-fixes). * pinctrl: renesas: rzn1: Enable missing PINMUX (git-fixes). * platform/surface: platform_profile: Propagate error if profile registration fails (git-fixes). * platform/x86/intel/pmt: Ignore uninitialized entries (bsc#1216202). * platform/x86/intel/pmt: telemetry: Fix fixed region handling (bsc#1216202). * platform/x86/intel/vsec: Rework early hardware code (bsc#1216202). * platform/x86/intel: Fix 'rmmod pmt_telemetry' panic (bsc#1216202). * platform/x86/intel: Fix pmt_crashlog array reference (bsc#1216202). * platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (git-fixes). * platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events (git- fixes). * platform/x86: think-lmi: Fix reference leak (git-fixes). * platform/x86: touchscreen_dmi: Add info for the Positivo C4128B (git-fixes). * power: supply: ucs1002: fix error code in ucs1002_get_property() (git- fixes). * r8152: check budget for r8152_poll() (git-fixes). * regmap: fix NULL deref on lookup (git-fixes). * regmap: rbtree: Fix wrong register marked as in-cache when creating new node (git-fixes). * remove unnecessary WARN_ON_ONCE() (bsc#1214823). * ring-buffer: Avoid softlockup in ring_buffer_resize() (git-fixes). * ring-buffer: Do not attempt to read past "commit" (git-fixes). * ring-buffer: Fix bytes info in per_cpu buffer stats (git-fixes). * ring-buffer: Update "shortest_full" in polling (git-fixes). * s390/cio: fix a memleak in css_alloc_subchannel (git-fixes bsc#1216510). * s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511). * s390: add z16 elf platform (git-fixes LTC#203789 bsc#1215956 LTC#203788 bsc#1215957). * sched/cpuset: Bring back cpuset_mutex (bsc#1215955). * sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (git fixes (sched)). * sched/rt: Fix live lock between select_fallback_rq() and RT push (git fixes (sched)). * sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes (sched)). * scsi: be2iscsi: Add length check when parsing nlattrs (git-fixes). * scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (git-fixes). * scsi: iscsi: Add length check for nlattr payload (git-fixes). * scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (git-fixes). * scsi: iscsi_tcp: restrict to TCP sockets (git-fixes). * scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O (git-fixes). * scsi: mpt3sas: Perform additional retries if doorbell read returns 0 (git- fixes). * scsi: pm8001: Setup IRQs on resume (git-fixes). * scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (git-fixes). * scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (git-fixes). * scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes). * scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (git-fixes). * scsi: qla4xxx: Add length check when parsing nlattrs (git-fixes). * selftests/bpf: Add more tests for check_max_stack_depth bug (git-fixes). * selftests/bpf: Add reproducer for decl_tag in func_proto argument (git- fixes). * selftests/bpf: Add reproducer for decl_tag in func_proto return type (git- fixes). * selftests/bpf: Add selftest for check_stack_max_depth bug (git-fixes). * selftests/bpf: Clean up sys_nanosleep uses (git-fixes). * serial: 8250_port: Check IRQ data before use (git-fixes). * soc: imx8m: Enable OCOTP clock for imx8mm before reading registers (git- fixes). * spi: nxp-fspi: reset the FLSHxCR1 registers (git-fixes). * spi: stm32: add a delay before SPI disable (git-fixes). * spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (git-fixes). * spi: sun6i: reduce DMA RX transfer width to single byte (git-fixes). * thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding (git- fixes). * thunderbolt: Restart XDomain discovery handshake after failure (git-fixes). * thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge (git-fixes). * tracing: Have current_trace inc the trace array ref count (git-fixes). * tracing: Have event inject files inc the trace array ref count (git-fixes). * tracing: Have option files inc the trace array ref count (git-fixes). * tracing: Have tracing_max_latency inc the trace array ref count (git-fixes). * tracing: Increase trace array ref count on enable and filter files (git- fixes). * tracing: Make trace_marker{,_raw} stream-like (git-fixes). * usb: cdnsp: Fixes issue with dequeuing not queued requests (git-fixes). * usb: dwc3: Soft reset phy on probe for host (git-fixes). * usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (git- fixes). * usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes). * usb: hub: Guard against accesses to uninitialized BOS descriptors (git- fixes). * usb: musb: Get the musb_qh poniter after musb_giveback (git-fixes). * usb: musb: Modify the "HWVers" register address (git-fixes). * usb: typec: altmodes/displayport: Signal hpd low when exiting mode (git- fixes). * usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails (git- fixes). * usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes). * vmbus_testing: fix wrong python syntax for integer value comparison (git- fixes). * vringh: do not use vringh_kiov_advance() in vringh_iov_xfer() (git-fixes). * watchdog: iTCO_wdt: No need to stop the timer in probe (git-fixes). * watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (git-fixes). * wifi: cfg80211: Fix 6GHz scan configuration (git-fixes). * wifi: cfg80211: avoid leaking stack data into trace (git-fixes). * wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes). * wifi: iwlwifi: dbg_ini: fix structure packing (git-fixes). * wifi: iwlwifi: mvm: Fix a memory corruption issue (git-fixes). * wifi: mac80211: allow transmitting EAPOL frames with tainted key (git- fixes). * wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (git-fixes). * wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (git- fixes). * wifi: mwifiex: Fix tlv_buf_left calculation (git-fixes). * wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len (git-fixes). * x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (bsc#1213772). * x86/cpu, kvm: Add the Null Selector Clears Base feature (bsc#1213772). * x86/cpu, kvm: Add the SMM_CTL MSR not present feature (bsc#1213772). * x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (bsc#1213772). * x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (bsc#1213772). * x86/cpu: Support AMD Automatic IBRS (bsc#1213772). * x86/mm: Print the encryption features correctly when a paravisor is present (bsc#1206453). * x86/platform/uv: Use alternate source for socket to node data (bsc#1215696). * x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1212649). * x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1212649). * x86/sev: Disable MMIO emulation from user mode (bsc#1212649). * xen-netback: use default TX queue size for vifs (git-fixes). * xhci: Keep interrupt disabled in initialization until host is running (git- fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2023-4343=1 * SUSE Real Time Module 15-SP5 zypper in -t patch SUSE-SLE-Module-RT-15-SP5-2023-4343=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4343=1 openSUSE-SLE-15.5-2023-4343=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4343=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_24-rt-debuginfo-1-150500.11.3.1 * kernel-livepatch-5_14_21-150500_13_24-rt-1-150500.11.3.1 * kernel-livepatch-SLE15-SP5-RT_Update_7-debugsource-1-150500.11.3.1 * SUSE Real Time Module 15-SP5 (x86_64) * ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.24.1 * kernel-rt_debug-vdso-5.14.21-150500.13.24.1 * dlm-kmp-rt-debuginfo-5.14.21-150500.13.24.1 * kernel-rt-devel-debuginfo-5.14.21-150500.13.24.1 * ocfs2-kmp-rt-5.14.21-150500.13.24.1 * kernel-rt-vdso-debuginfo-5.14.21-150500.13.24.1 * kernel-rt-debuginfo-5.14.21-150500.13.24.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.24.1 * kernel-rt_debug-debugsource-5.14.21-150500.13.24.1 * kernel-rt_debug-debuginfo-5.14.21-150500.13.24.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.24.1 * cluster-md-kmp-rt-5.14.21-150500.13.24.1 * kernel-rt-vdso-5.14.21-150500.13.24.1 * gfs2-kmp-rt-5.14.21-150500.13.24.1 * kernel-syms-rt-5.14.21-150500.13.24.1 * gfs2-kmp-rt-debuginfo-5.14.21-150500.13.24.1 * kernel-rt-devel-5.14.21-150500.13.24.1 * dlm-kmp-rt-5.14.21-150500.13.24.1 * kernel-rt_debug-devel-5.14.21-150500.13.24.1 * kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.24.1 * kernel-rt-debugsource-5.14.21-150500.13.24.1 * SUSE Real Time Module 15-SP5 (noarch) * kernel-source-rt-5.14.21-150500.13.24.1 * kernel-devel-rt-5.14.21-150500.13.24.1 * SUSE Real Time Module 15-SP5 (nosrc x86_64) * kernel-rt_debug-5.14.21-150500.13.24.1 * kernel-rt-5.14.21-150500.13.24.1 * openSUSE Leap 15.5 (noarch) * kernel-source-rt-5.14.21-150500.13.24.1 * kernel-devel-rt-5.14.21-150500.13.24.1 * openSUSE Leap 15.5 (x86_64) * ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.24.1 * kernel-livepatch-5_14_21-150500_13_24-rt-1-150500.11.3.1 * kselftests-kmp-rt-5.14.21-150500.13.24.1 * kernel-rt_debug-vdso-5.14.21-150500.13.24.1 * kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.24.1 * dlm-kmp-rt-debuginfo-5.14.21-150500.13.24.1 * kselftests-kmp-rt-debuginfo-5.14.21-150500.13.24.1 * reiserfs-kmp-rt-5.14.21-150500.13.24.1 * kernel-rt-devel-debuginfo-5.14.21-150500.13.24.1 * ocfs2-kmp-rt-5.14.21-150500.13.24.1 * kernel-rt-vdso-debuginfo-5.14.21-150500.13.24.1 * kernel-rt-debuginfo-5.14.21-150500.13.24.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.24.1 * kernel-rt-livepatch-5.14.21-150500.13.24.1 * kernel-livepatch-5_14_21-150500_13_24-rt-debuginfo-1-150500.11.3.1 * kernel-rt_debug-debugsource-5.14.21-150500.13.24.1 * kernel-rt_debug-debuginfo-5.14.21-150500.13.24.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.24.1 * kernel-rt-extra-debuginfo-5.14.21-150500.13.24.1 * cluster-md-kmp-rt-5.14.21-150500.13.24.1 * reiserfs-kmp-rt-debuginfo-5.14.21-150500.13.24.1 * gfs2-kmp-rt-5.14.21-150500.13.24.1 * kernel-rt-optional-5.14.21-150500.13.24.1 * kernel-syms-rt-5.14.21-150500.13.24.1 * gfs2-kmp-rt-debuginfo-5.14.21-150500.13.24.1 * kernel-rt-extra-5.14.21-150500.13.24.1 * kernel-rt-optional-debuginfo-5.14.21-150500.13.24.1 * kernel-rt-livepatch-devel-5.14.21-150500.13.24.1 * kernel-rt-devel-5.14.21-150500.13.24.1 * dlm-kmp-rt-5.14.21-150500.13.24.1 * kernel-rt_debug-livepatch-devel-5.14.21-150500.13.24.1 * kernel-rt_debug-devel-5.14.21-150500.13.24.1 * kernel-rt-vdso-5.14.21-150500.13.24.1 * kernel-rt-debugsource-5.14.21-150500.13.24.1 * kernel-livepatch-SLE15-SP5-RT_Update_7-debugsource-1-150500.11.3.1 * openSUSE Leap 15.5 (nosrc x86_64) * kernel-rt_debug-5.14.21-150500.13.24.1 * kernel-rt-5.14.21-150500.13.24.1 * SUSE Linux Enterprise Micro 5.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.24.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * kernel-rt-debugsource-5.14.21-150500.13.24.1 * kernel-rt-debuginfo-5.14.21-150500.13.24.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2163.html * https://www.suse.com/security/cve/CVE-2023-2860.html * https://www.suse.com/security/cve/CVE-2023-31085.html * https://www.suse.com/security/cve/CVE-2023-34324.html * https://www.suse.com/security/cve/CVE-2023-39189.html * https://www.suse.com/security/cve/CVE-2023-39191.html * https://www.suse.com/security/cve/CVE-2023-39193.html * https://www.suse.com/security/cve/CVE-2023-45862.html * https://www.suse.com/security/cve/CVE-2023-5178.html * https://bugzilla.suse.com/show_bug.cgi?id=1211162 * https://bugzilla.suse.com/show_bug.cgi?id=1211307 * https://bugzilla.suse.com/show_bug.cgi?id=1213772 * https://bugzilla.suse.com/show_bug.cgi?id=1214754 * https://bugzilla.suse.com/show_bug.cgi?id=1214874 * https://bugzilla.suse.com/show_bug.cgi?id=1215545 * https://bugzilla.suse.com/show_bug.cgi?id=1215921 * https://bugzilla.suse.com/show_bug.cgi?id=1215955 * https://bugzilla.suse.com/show_bug.cgi?id=1216062 * https://bugzilla.suse.com/show_bug.cgi?id=1216202 * https://bugzilla.suse.com/show_bug.cgi?id=1216322 * https://bugzilla.suse.com/show_bug.cgi?id=1216324 * https://bugzilla.suse.com/show_bug.cgi?id=1216333 * https://bugzilla.suse.com/show_bug.cgi?id=1216512

1 0

SUSE-SU-2023:4347-1: important: Security update for the Linux Kernel
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2023:4347-1 Rating: important References: * bsc#1208995 * bsc#1210169 * bsc#1210778 * bsc#1212703 * bsc#1214233 * bsc#1214380 * bsc#1214386 * bsc#1215115 * bsc#1215117 * bsc#1215221 * bsc#1215275 * bsc#1215299 * bsc#1215467 * bsc#1215745 * bsc#1215858 * bsc#1215860 * bsc#1215861 * bsc#1216046 * bsc#1216051 Cross-References: * CVE-2020-36766 * CVE-2023-1192 * CVE-2023-1206 * CVE-2023-1859 * CVE-2023-31085 * CVE-2023-34324 * CVE-2023-39189 * CVE-2023-39192 * CVE-2023-39193 * CVE-2023-39194 * CVE-2023-40283 * CVE-2023-42754 * CVE-2023-45862 * CVE-2023-4622 * CVE-2023-4623 * CVE-2023-4881 * CVE-2023-4921 CVSS scores: * CVE-2020-36766 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2020-36766 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2023-1192 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-1192 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-1206 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-1206 ( NVD ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-1859 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2023-1859 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-31085 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-34324 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-39189 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-39189 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39192 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H * CVE-2023-39192 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L * CVE-2023-39193 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39193 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-39194 ( SUSE ): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N * CVE-2023-39194 ( NVD ): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N * CVE-2023-40283 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-40283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42754 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-42754 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-45862 ( SUSE ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-45862 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-4622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4622 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4881 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-4881 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2023-4921 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4921 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Linux Enterprise High Availability Extension 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Live Patching 15-SP1 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 Business Critical Linux 15-SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Manager Proxy 4.0 * SUSE Manager Retail Branch Server 4.0 * SUSE Manager Server 4.0 An update that solves 17 vulnerabilities and has two security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) * CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051) * CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). * CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) * CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). * CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). * CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858). * CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467). * CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table which could be exploited by network adjacent attackers, increasing CPU usage by 95% (bsc#1212703). * CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215275). * CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). * CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). * CVE-2020-36766: Fixed a potential information leak in in the CEC driver (bsc#1215299). * CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169). * CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221). * CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). * CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995). The following non-security bugs were fixed: * check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does. * mkspec: Allow unsupported KMPs (bsc#1214386) * old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4347=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4347=1 * SUSE Linux Enterprise Live Patching 15-SP1 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2023-4347=1 * SUSE Linux Enterprise High Availability Extension 15 SP1 zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2023-4347=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4347=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4347=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4347=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. ## Package List: * openSUSE Leap 15.4 (nosrc) * kernel-debug-4.12.14-150100.197.160.1 * kernel-zfcpdump-4.12.14-150100.197.160.1 * kernel-kvmsmall-4.12.14-150100.197.160.1 * kernel-default-4.12.14-150100.197.160.1 * openSUSE Leap 15.4 (ppc64le x86_64) * kernel-debug-base-4.12.14-150100.197.160.1 * kernel-debug-base-debuginfo-4.12.14-150100.197.160.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kernel-vanilla-debuginfo-4.12.14-150100.197.160.1 * kernel-vanilla-base-4.12.14-150100.197.160.1 * kernel-vanilla-devel-4.12.14-150100.197.160.1 * kernel-vanilla-livepatch-devel-4.12.14-150100.197.160.1 * kernel-vanilla-base-debuginfo-4.12.14-150100.197.160.1 * kernel-vanilla-devel-debuginfo-4.12.14-150100.197.160.1 * kernel-default-base-debuginfo-4.12.14-150100.197.160.1 * kernel-vanilla-debugsource-4.12.14-150100.197.160.1 * openSUSE Leap 15.4 (x86_64) * kernel-kvmsmall-base-debuginfo-4.12.14-150100.197.160.1 * kernel-kvmsmall-base-4.12.14-150100.197.160.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-vanilla-4.12.14-150100.197.160.1 * openSUSE Leap 15.4 (s390x) * kernel-default-man-4.12.14-150100.197.160.1 * kernel-zfcpdump-man-4.12.14-150100.197.160.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-vanilla-4.12.14-150100.197.160.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-vanilla-debuginfo-4.12.14-150100.197.160.1 * kernel-vanilla-devel-4.12.14-150100.197.160.1 * kernel-vanilla-livepatch-devel-4.12.14-150100.197.160.1 * kernel-vanilla-base-debuginfo-4.12.14-150100.197.160.1 * kernel-vanilla-devel-debuginfo-4.12.14-150100.197.160.1 * kernel-vanilla-base-4.12.14-150100.197.160.1 * kernel-vanilla-debugsource-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Live Patching 15-SP1 (nosrc) * kernel-default-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Live Patching 15-SP1 (ppc64le x86_64) * kernel-livepatch-4_12_14-150100_197_160-default-1-150100.3.3.1 * kernel-default-livepatch-devel-4.12.14-150100.197.160.1 * kernel-default-livepatch-4.12.14-150100.197.160.1 * kernel-default-debuginfo-4.12.14-150100.197.160.1 * kernel-default-debugsource-4.12.14-150100.197.160.1 * SUSE Linux Enterprise High Availability Extension 15 SP1 (aarch64 ppc64le s390x x86_64) * ocfs2-kmp-default-debuginfo-4.12.14-150100.197.160.1 * dlm-kmp-default-debuginfo-4.12.14-150100.197.160.1 * cluster-md-kmp-default-debuginfo-4.12.14-150100.197.160.1 * kernel-default-debuginfo-4.12.14-150100.197.160.1 * kernel-default-debugsource-4.12.14-150100.197.160.1 * cluster-md-kmp-default-4.12.14-150100.197.160.1 * gfs2-kmp-default-4.12.14-150100.197.160.1 * ocfs2-kmp-default-4.12.14-150100.197.160.1 * gfs2-kmp-default-debuginfo-4.12.14-150100.197.160.1 * dlm-kmp-default-4.12.14-150100.197.160.1 * SUSE Linux Enterprise High Availability Extension 15 SP1 (nosrc) * kernel-default-4.12.14-150100.197.160.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 nosrc x86_64) * kernel-default-4.12.14-150100.197.160.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * kernel-default-devel-debuginfo-4.12.14-150100.197.160.1 * kernel-obs-build-debugsource-4.12.14-150100.197.160.1 * kernel-syms-4.12.14-150100.197.160.1 * kernel-default-debuginfo-4.12.14-150100.197.160.1 * kernel-default-debugsource-4.12.14-150100.197.160.1 * kernel-default-base-4.12.14-150100.197.160.1 * kernel-obs-build-4.12.14-150100.197.160.1 * kernel-default-base-debuginfo-4.12.14-150100.197.160.1 * kernel-default-devel-4.12.14-150100.197.160.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch) * kernel-devel-4.12.14-150100.197.160.1 * kernel-macros-4.12.14-150100.197.160.1 * kernel-source-4.12.14-150100.197.160.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch nosrc) * kernel-docs-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-debuginfo-4.12.14-150100.197.160.1 * kernel-obs-build-debugsource-4.12.14-150100.197.160.1 * kernel-syms-4.12.14-150100.197.160.1 * kernel-default-debuginfo-4.12.14-150100.197.160.1 * kernel-default-debugsource-4.12.14-150100.197.160.1 * reiserfs-kmp-default-debuginfo-4.12.14-150100.197.160.1 * kernel-default-base-4.12.14-150100.197.160.1 * reiserfs-kmp-default-4.12.14-150100.197.160.1 * kernel-obs-build-4.12.14-150100.197.160.1 * kernel-default-base-debuginfo-4.12.14-150100.197.160.1 * kernel-default-devel-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (noarch) * kernel-devel-4.12.14-150100.197.160.1 * kernel-macros-4.12.14-150100.197.160.1 * kernel-source-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (noarch nosrc) * kernel-docs-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (s390x) * kernel-zfcpdump-debuginfo-4.12.14-150100.197.160.1 * kernel-default-man-4.12.14-150100.197.160.1 * kernel-zfcpdump-debugsource-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (nosrc) * kernel-zfcpdump-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (nosrc ppc64le x86_64) * kernel-default-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * kernel-default-devel-debuginfo-4.12.14-150100.197.160.1 * kernel-obs-build-debugsource-4.12.14-150100.197.160.1 * kernel-syms-4.12.14-150100.197.160.1 * kernel-default-debuginfo-4.12.14-150100.197.160.1 * kernel-default-debugsource-4.12.14-150100.197.160.1 * reiserfs-kmp-default-debuginfo-4.12.14-150100.197.160.1 * kernel-default-base-4.12.14-150100.197.160.1 * reiserfs-kmp-default-4.12.14-150100.197.160.1 * kernel-obs-build-4.12.14-150100.197.160.1 * kernel-default-base-debuginfo-4.12.14-150100.197.160.1 * kernel-default-devel-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (noarch) * kernel-devel-4.12.14-150100.197.160.1 * kernel-macros-4.12.14-150100.197.160.1 * kernel-source-4.12.14-150100.197.160.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (noarch nosrc) * kernel-docs-4.12.14-150100.197.160.1 * SUSE CaaS Platform 4.0 (nosrc x86_64) * kernel-default-4.12.14-150100.197.160.1 * SUSE CaaS Platform 4.0 (x86_64) * kernel-default-devel-debuginfo-4.12.14-150100.197.160.1 * kernel-obs-build-debugsource-4.12.14-150100.197.160.1 * kernel-syms-4.12.14-150100.197.160.1 * kernel-default-debuginfo-4.12.14-150100.197.160.1 * kernel-default-debugsource-4.12.14-150100.197.160.1 * reiserfs-kmp-default-debuginfo-4.12.14-150100.197.160.1 * kernel-default-base-4.12.14-150100.197.160.1 * reiserfs-kmp-default-4.12.14-150100.197.160.1 * kernel-obs-build-4.12.14-150100.197.160.1 * kernel-default-base-debuginfo-4.12.14-150100.197.160.1 * kernel-default-devel-4.12.14-150100.197.160.1 * SUSE CaaS Platform 4.0 (noarch) * kernel-devel-4.12.14-150100.197.160.1 * kernel-macros-4.12.14-150100.197.160.1 * kernel-source-4.12.14-150100.197.160.1 * SUSE CaaS Platform 4.0 (noarch nosrc) * kernel-docs-4.12.14-150100.197.160.1 ## References: * https://www.suse.com/security/cve/CVE-2020-36766.html * https://www.suse.com/security/cve/CVE-2023-1192.html * https://www.suse.com/security/cve/CVE-2023-1206.html * https://www.suse.com/security/cve/CVE-2023-1859.html * https://www.suse.com/security/cve/CVE-2023-31085.html * https://www.suse.com/security/cve/CVE-2023-34324.html * https://www.suse.com/security/cve/CVE-2023-39189.html * https://www.suse.com/security/cve/CVE-2023-39192.html * https://www.suse.com/security/cve/CVE-2023-39193.html * https://www.suse.com/security/cve/CVE-2023-39194.html * https://www.suse.com/security/cve/CVE-2023-40283.html * https://www.suse.com/security/cve/CVE-2023-42754.html * https://www.suse.com/security/cve/CVE-2023-45862.html * https://www.suse.com/security/cve/CVE-2023-4622.html * https://www.suse.com/security/cve/CVE-2023-4623.html * https://www.suse.com/security/cve/CVE-2023-4881.html * https://www.suse.com/security/cve/CVE-2023-4921.html * https://bugzilla.suse.com/show_bug.cgi?id=1208995 * https://bugzilla.suse.com/show_bug.cgi?id=1210169 * https://bugzilla.suse.com/show_bug.cgi?id=1210778 * https://bugzilla.suse.com/show_bug.cgi?id=1212703 * https://bugzilla.suse.com/show_bug.cgi?id=1214233 * https://bugzilla.suse.com/show_bug.cgi?id=1214380 * https://bugzilla.suse.com/show_bug.cgi?id=1214386 * https://bugzilla.suse.com/show_bug.cgi?id=1215115 * https://bugzilla.suse.com/show_bug.cgi?id=1215117 * https://bugzilla.suse.com/show_bug.cgi?id=1215221 * https://bugzilla.suse.com/show_bug.cgi?id=1215275 * https://bugzilla.suse.com/show_bug.cgi?id=1215299 * https://bugzilla.suse.com/show_bug.cgi?id=1215467 * https://bugzilla.suse.com/show_bug.cgi?id=1215745 * https://bugzilla.suse.com/show_bug.cgi?id=1215858 * https://bugzilla.suse.com/show_bug.cgi?id=1215860 * https://bugzilla.suse.com/show_bug.cgi?id=1215861 * https://bugzilla.suse.com/show_bug.cgi?id=1216046 * https://bugzilla.suse.com/show_bug.cgi?id=1216051

1 0

SUSE-SU-2023:4338-1: important: Security update for xorg-x11-server
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Security update for xorg-x11-server Announcement ID: SUSE-SU-2023:4338-1 Rating: important References: * bsc#1216133 * bsc#1216135 * bsc#1216261 Cross-References: * CVE-2023-5367 * CVE-2023-5380 * CVE-2023-5574 CVSS scores: * CVE-2023-5367 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5380 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5380 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5574 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5574 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP4 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261). * CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133). * CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4338=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4338=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4338=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4338=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4338=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4338=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4338=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4338=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4338=1 * SUSE Linux Enterprise Workstation Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-4338=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-4338=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4338=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4338=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4338=1 ## Package List: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Manager Proxy 4.2 (x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Workstation Extension 15 SP4 (x86_64) * xorg-x11-server-wayland-1.20.3-150200.22.5.79.1 * xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * xorg-x11-server-wayland-1.20.3-150200.22.5.79.1 * xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-wayland-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5367.html * https://www.suse.com/security/cve/CVE-2023-5380.html * https://www.suse.com/security/cve/CVE-2023-5574.html * https://bugzilla.suse.com/show_bug.cgi?id=1216133 * https://bugzilla.suse.com/show_bug.cgi?id=1216135 * https://bugzilla.suse.com/show_bug.cgi?id=1216261

1 0

SUSE-RU-2023:4340-1: moderate: Recommended update for kubernetes1.28
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Recommended update for kubernetes1.28 Announcement ID: SUSE-RU-2023:4340-1 Rating: moderate References: * jsc#PED-5839 Affected Products: * Containers Module 15-SP4 * Containers Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for kubernetes1.28 fixes the following issues: This update ships the kubernetes1.28-client package. (jsc#PED-5839) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4340=1 openSUSE-SLE-15.4-2023-4340=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4340=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-4340=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2023-4340=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kubernetes1.28-apiserver-1.28.2-150400.9.3.3 * kubernetes1.28-kubelet-common-1.28.2-150400.9.3.3 * kubernetes1.28-kubelet-1.28.2-150400.9.3.3 * kubernetes1.28-proxy-1.28.2-150400.9.3.3 * kubernetes1.28-scheduler-1.28.2-150400.9.3.3 * kubernetes1.28-client-1.28.2-150400.9.3.3 * kubernetes1.28-client-common-1.28.2-150400.9.3.3 * kubernetes1.28-controller-manager-1.28.2-150400.9.3.3 * kubernetes1.28-kubeadm-1.28.2-150400.9.3.3 * openSUSE Leap 15.4 (noarch) * kubernetes1.28-client-fish-completion-1.28.2-150400.9.3.3 * kubernetes1.28-client-bash-completion-1.28.2-150400.9.3.3 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kubernetes1.28-client-1.28.2-150400.9.3.3 * kubernetes1.28-client-common-1.28.2-150400.9.3.3 * Containers Module 15-SP4 (aarch64 ppc64le s390x x86_64) * kubernetes1.28-client-1.28.2-150400.9.3.3 * kubernetes1.28-client-common-1.28.2-150400.9.3.3 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kubernetes1.28-client-1.28.2-150400.9.3.3 * kubernetes1.28-client-common-1.28.2-150400.9.3.3 ## References: * https://jira.suse.com/browse/PED-5839

1 0

SUSE-RU-2023:4341-1: moderate: Recommended update for kubernetes1.27
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Recommended update for kubernetes1.27 Announcement ID: SUSE-RU-2023:4341-1 Rating: moderate References: * bsc#1213829 * bsc#1214406 * jsc#PED-5839 Affected Products: * Containers Module 15-SP4 * Containers Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has two fixes can now be installed. ## Description: This update for kubernetes1.27 fixes the following issues: This update ships the kubernetes1.27-client package. (jsc#PED-5839) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4341=1 openSUSE-SLE-15.4-2023-4341=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4341=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-4341=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2023-4341=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kubernetes1.27-apiserver-1.27.6-150400.9.3.2 * kubernetes1.27-client-1.27.6-150400.9.3.2 * kubernetes1.27-controller-manager-1.27.6-150400.9.3.2 * kubernetes1.27-kubelet-common-1.27.6-150400.9.3.2 * kubernetes1.27-proxy-1.27.6-150400.9.3.2 * kubernetes1.27-client-common-1.27.6-150400.9.3.2 * kubernetes1.27-kubelet-1.27.6-150400.9.3.2 * kubernetes1.27-kubeadm-1.27.6-150400.9.3.2 * kubernetes1.27-scheduler-1.27.6-150400.9.3.2 * openSUSE Leap 15.4 (noarch) * kubernetes1.27-client-fish-completion-1.27.6-150400.9.3.2 * kubernetes1.27-client-bash-completion-1.27.6-150400.9.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kubernetes1.27-client-1.27.6-150400.9.3.2 * kubernetes1.27-client-common-1.27.6-150400.9.3.2 * Containers Module 15-SP4 (aarch64 ppc64le s390x x86_64) * kubernetes1.27-client-1.27.6-150400.9.3.2 * kubernetes1.27-client-common-1.27.6-150400.9.3.2 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kubernetes1.27-client-1.27.6-150400.9.3.2 * kubernetes1.27-client-common-1.27.6-150400.9.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213829 * https://bugzilla.suse.com/show_bug.cgi?id=1214406 * https://jira.suse.com/browse/PED-5839

1 0

SUSE-RU-2023:4332-1: moderate: Recommended update for slurm
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Recommended update for slurm Announcement ID: SUSE-RU-2023:4332-1 Rating: moderate References: * bsc#1215437 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update for slurm fixes the following issues: * Updated to version 23.02.5 with the following changes: * Bug Fixes: * Revert a change in 23.02 where `SLURM_NTASKS` was no longer set in the job's environment when `--ntasks-per-node` was requested. The method that is is being set, however, is different and should be more accurate in more situations. * Change pmi2 plugin to honor the `SrunPortRange` option. This matches the new behavior of the pmix plugin in 23.02.0. Note that neither of these plugins makes use of the `MpiParams=ports=` option, and previously were only limited by the systems ephemeral port range. * Fix regression in 23.02.2 that caused slurmctld -R to crash on startup if a node features plugin is configured. * Fix and prevent reoccurring reservations from overlapping. * `job_container/tmpfs` \- Avoid attempts to share BasePath between nodes. * With `CR_Cpu_Memory`, fix node selection for jobs that request gres and `--mem-per-cpu`. * Fix a regression from 22.05.7 in which some jobs were allocated too few nodes, thus overcommitting cpus to some tasks. * Fix a job being stuck in the completing state if the job ends while the primary controller is down or unresponsive and the backup controller has not yet taken over. * Fix `slurmctld` segfault when a node registers with a configured `CpuSpecList` while `slurmctld` configuration has the node without `CpuSpecList`. * Fix cloud nodes getting stuck in `POWERED_DOWN+NO_RESPOND` state after not registering by `ResumeTimeout`. * `slurmstepd` \- Avoid cleanup of `config.json-less` containers spooldir getting skipped. * Fix scontrol segfault when 'completing' command requested repeatedly in interactive mode. * Properly handle a race condition between `bind()` and `listen()` calls in the network stack when running with SrunPortRange set. * Federation - Fix revoked jobs being returned regardless of the `-a`/`--all` option for privileged users. * Federation - Fix canceling pending federated jobs from non-origin clusters which could leave federated jobs orphaned from the origin cluster. * Fix sinfo segfault when printing multiple clusters with `--noheader` option. * Federation - fix clusters not syncing if clusters are added to a federation before they have registered with the dbd. * `node_features/helpers` \- Fix node selection for jobs requesting changeable. features with the `|` operator, which could prevent jobs from running on some valid nodes. * `node_features/helpers` \- Fix inconsistent handling of `&` and `|`, where an AND'd feature was sometimes AND'd to all sets of features instead of just the current set. E.g. `foo|bar&baz` was interpreted as `{foo,baz}` or `{bar,baz}` instead of how it is documented: `{foo} or {bar,baz}`. * Fix job accounting so that when a job is requeued its allocated node count is cleared. After the requeue, sacct will correctly show that the job has 0 `AllocNodes` while it is pending or if it is canceled before restarting. * `sacct` \- `AllocCPUS` now correctly shows 0 if a job has not yet received an allocation or if the job was canceled before getting one. * Fix intel OneAPI autodetect: detect the `/dev/dri/renderD[0-9]+` GPUs, and do not detect `/dev/dri/card[0-9]+`. * Fix node selection for jobs that request `--gpus` and a number of tasks fewer than GPUs, which resulted in incorrectly rejecting these jobs. * Remove `MYSQL_OPT_RECONNECT` completely. * Fix cloud nodes in `POWERING_UP` state disappearing (getting set to `FUTURE`) when an `scontrol reconfigure` happens. * `openapi/dbv0.0.39` \- Avoid assert / segfault on missing coordinators list. * `slurmrestd` \- Correct memory leak while parsing OpenAPI specification templates with server overrides. * Fix overwriting user node reason with system message. * Prevent deadlock when `rpc_queue` is enabled. * `slurmrestd` \- Correct OpenAPI specification generation bug where fields with overlapping parent paths would not get generated. * Fix memory leak as a result of a partition info query. * Fix memory leak as a result of a job info query. * For step allocations, fix `--gres=none` sometimes not ignoring gres from the job. * Fix `--exclusive` jobs incorrectly gang-scheduling where they shouldn't. * Fix allocations with `CR_SOCKET`, gres not assigned to a specific socket, and block core distribion potentially allocating more sockets than required. * Revert a change in 23.02.3 where Slurm would kill a script's process group as soon as the script ended instead of waiting as long as any process in that process group held the stdout/stderr file descriptors open. That change broke some scripts that relied on the previous behavior. Setting time limits for scripts (such as `PrologEpilogTimeout`) is strongly encouraged to avoid Slurm waiting indefinitely for scripts to finish. * Fix `slurmdbd -R` not returning an error under certain conditions. * `slurmdbd` \- Avoid potential NULL pointer dereference in the mysql plugin. * Fix regression in 23.02.3 which broken X11 forwarding for hosts when MUNGE sends a localhost address in the encode host field. This is caused when the node hostname is mapped to 127.0.0.1 (or similar) in `/etc/hosts`. * `openapi/[db]v0.0.39` \- fix memory leak on parsing error. * `data_parser/v0.0.39` \- fix updating qos for associations. * `openapi/dbv0.0.39` \- fix updating values for associations with null users. * Fix minor memory leak with `--tres-per-task` and licenses. * Fix cyclic socket cpu distribution for tasks in a step where `--cpus-per-task` < usable threads per core. * `slurmrestd` \- For `GET /slurm/v0.0.39/node[s]`, change format of node's energy field `current_watts` to a dictionary to account for unset value instead of dumping 4294967294. * `slurmrestd` \- For `GET /slurm/v0.0.39/qos`, change format of QOS's field "priority" to a dictionary to account for unset value instead of dumping 4294967294. * slurmrestd - For `GET /slurm/v0.0.39/job[s]`, the 'return code' code field in `v0.0.39_job_exit`_code will be set to -127 instead of being left unset where job does not have a relevant return code. * Other Changes: * Remove --uid / --gid options from salloc and srun commands. These options did not work correctly since the CVE-2022-29500 fix in combination with some changes made in 23.02.0. * Add the `JobId` to `debug()` messages indicating when `cpus_per_task/mem_per_cpu` or `pn_min_cpus` are being automatically adjusted. * Change the log message warning for rate limited users from verbose to info. * `slurmstepd` \- Cleanup per task generated environment for containers in spooldir. * Format batch, extern, interactive, and pending step ids into strings that are human readable. * `slurmrestd` \- Reduce memory usage when printing out job CPU frequency. * `data_parser/v0.0.39` \- Add `required/memory_per_cpu` and `required/memory_per_node` to `sacct --json` and `sacct --yaml` and `GET /slurmdb/v0.0.39/jobs` from slurmrestd. * `gpu/oneapi` \- Store cores correctly so CPU affinity is tracked. * Allow `slurmdbd -R` to work if the root assoc id is not 1. * Limit periodic node registrations to 50 instead of the full `TreeWidth`. Since unresolvable `cloud/dynamic` nodes must disable fanout by setting `TreeWidth` to a large number, this would cause all nodes to register at once. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4332=1 openSUSE-SLE-15.5-2023-4332=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2023-4332=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4332=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * slurm-pam_slurm-debuginfo-23.02.5-150500.5.9.2 * libpmi0-23.02.5-150500.5.9.2 * slurm-hdf5-debuginfo-23.02.5-150500.5.9.2 * slurm-hdf5-23.02.5-150500.5.9.2 * slurm-munge-debuginfo-23.02.5-150500.5.9.2 * slurm-cray-23.02.5-150500.5.9.2 * slurm-sview-debuginfo-23.02.5-150500.5.9.2 * slurm-plugin-ext-sensors-rrd-debuginfo-23.02.5-150500.5.9.2 * slurm-torque-debuginfo-23.02.5-150500.5.9.2 * slurm-rest-debuginfo-23.02.5-150500.5.9.2 * slurm-lua-23.02.5-150500.5.9.2 * slurm-slurmdbd-23.02.5-150500.5.9.2 * slurm-lua-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-23.02.5-150500.5.9.2 * slurm-slurmdbd-debuginfo-23.02.5-150500.5.9.2 * slurm-node-debuginfo-23.02.5-150500.5.9.2 * slurm-pam_slurm-23.02.5-150500.5.9.2 * slurm-devel-23.02.5-150500.5.9.2 * perl-slurm-debuginfo-23.02.5-150500.5.9.2 * slurm-plugins-debuginfo-23.02.5-150500.5.9.2 * slurm-sql-debuginfo-23.02.5-150500.5.9.2 * libpmi0-debuginfo-23.02.5-150500.5.9.2 * slurm-munge-23.02.5-150500.5.9.2 * slurm-node-23.02.5-150500.5.9.2 * perl-slurm-23.02.5-150500.5.9.2 * slurm-plugin-ext-sensors-rrd-23.02.5-150500.5.9.2 * slurm-plugins-23.02.5-150500.5.9.2 * libnss_slurm2-23.02.5-150500.5.9.2 * slurm-torque-23.02.5-150500.5.9.2 * libslurm39-debuginfo-23.02.5-150500.5.9.2 * slurm-sql-23.02.5-150500.5.9.2 * libnss_slurm2-debuginfo-23.02.5-150500.5.9.2 * slurm-23.02.5-150500.5.9.2 * slurm-sview-23.02.5-150500.5.9.2 * slurm-rest-23.02.5-150500.5.9.2 * slurm-cray-debuginfo-23.02.5-150500.5.9.2 * slurm-debugsource-23.02.5-150500.5.9.2 * slurm-testsuite-23.02.5-150500.5.9.2 * slurm-debuginfo-23.02.5-150500.5.9.2 * libslurm39-23.02.5-150500.5.9.2 * openSUSE Leap 15.5 (noarch) * slurm-webdoc-23.02.5-150500.5.9.2 * slurm-config-23.02.5-150500.5.9.2 * slurm-seff-23.02.5-150500.5.9.2 * slurm-doc-23.02.5-150500.5.9.2 * slurm-sjstat-23.02.5-150500.5.9.2 * slurm-openlava-23.02.5-150500.5.9.2 * slurm-config-man-23.02.5-150500.5.9.2 * HPC Module 15-SP5 (aarch64 x86_64) * slurm-pam_slurm-debuginfo-23.02.5-150500.5.9.2 * libpmi0-23.02.5-150500.5.9.2 * slurm-munge-debuginfo-23.02.5-150500.5.9.2 * slurm-cray-23.02.5-150500.5.9.2 * slurm-sview-debuginfo-23.02.5-150500.5.9.2 * slurm-plugin-ext-sensors-rrd-debuginfo-23.02.5-150500.5.9.2 * slurm-torque-debuginfo-23.02.5-150500.5.9.2 * slurm-rest-debuginfo-23.02.5-150500.5.9.2 * slurm-lua-23.02.5-150500.5.9.2 * slurm-slurmdbd-23.02.5-150500.5.9.2 * slurm-lua-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-23.02.5-150500.5.9.2 * slurm-slurmdbd-debuginfo-23.02.5-150500.5.9.2 * slurm-node-debuginfo-23.02.5-150500.5.9.2 * slurm-pam_slurm-23.02.5-150500.5.9.2 * slurm-devel-23.02.5-150500.5.9.2 * perl-slurm-debuginfo-23.02.5-150500.5.9.2 * slurm-plugins-debuginfo-23.02.5-150500.5.9.2 * slurm-sql-debuginfo-23.02.5-150500.5.9.2 * libpmi0-debuginfo-23.02.5-150500.5.9.2 * slurm-munge-23.02.5-150500.5.9.2 * slurm-node-23.02.5-150500.5.9.2 * perl-slurm-23.02.5-150500.5.9.2 * slurm-plugin-ext-sensors-rrd-23.02.5-150500.5.9.2 * slurm-plugins-23.02.5-150500.5.9.2 * libnss_slurm2-23.02.5-150500.5.9.2 * slurm-torque-23.02.5-150500.5.9.2 * libslurm39-debuginfo-23.02.5-150500.5.9.2 * slurm-sql-23.02.5-150500.5.9.2 * libnss_slurm2-debuginfo-23.02.5-150500.5.9.2 * slurm-23.02.5-150500.5.9.2 * slurm-sview-23.02.5-150500.5.9.2 * slurm-rest-23.02.5-150500.5.9.2 * slurm-cray-debuginfo-23.02.5-150500.5.9.2 * slurm-debugsource-23.02.5-150500.5.9.2 * slurm-debuginfo-23.02.5-150500.5.9.2 * libslurm39-23.02.5-150500.5.9.2 * HPC Module 15-SP5 (noarch) * slurm-webdoc-23.02.5-150500.5.9.2 * slurm-config-man-23.02.5-150500.5.9.2 * slurm-config-23.02.5-150500.5.9.2 * slurm-doc-23.02.5-150500.5.9.2 * SUSE Package Hub 15 15-SP5 (ppc64le s390x) * slurm-pam_slurm-debuginfo-23.02.5-150500.5.9.2 * libpmi0-23.02.5-150500.5.9.2 * slurm-hdf5-debuginfo-23.02.5-150500.5.9.2 * slurm-hdf5-23.02.5-150500.5.9.2 * slurm-munge-debuginfo-23.02.5-150500.5.9.2 * slurm-cray-23.02.5-150500.5.9.2 * slurm-sview-debuginfo-23.02.5-150500.5.9.2 * slurm-torque-debuginfo-23.02.5-150500.5.9.2 * slurm-rest-debuginfo-23.02.5-150500.5.9.2 * slurm-lua-23.02.5-150500.5.9.2 * slurm-slurmdbd-23.02.5-150500.5.9.2 * slurm-lua-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-23.02.5-150500.5.9.2 * slurm-slurmdbd-debuginfo-23.02.5-150500.5.9.2 * slurm-node-debuginfo-23.02.5-150500.5.9.2 * slurm-pam_slurm-23.02.5-150500.5.9.2 * slurm-devel-23.02.5-150500.5.9.2 * perl-slurm-debuginfo-23.02.5-150500.5.9.2 * slurm-plugins-debuginfo-23.02.5-150500.5.9.2 * slurm-sql-debuginfo-23.02.5-150500.5.9.2 * libpmi0-debuginfo-23.02.5-150500.5.9.2 * slurm-munge-23.02.5-150500.5.9.2 * slurm-node-23.02.5-150500.5.9.2 * perl-slurm-23.02.5-150500.5.9.2 * slurm-plugins-23.02.5-150500.5.9.2 * libnss_slurm2-23.02.5-150500.5.9.2 * slurm-torque-23.02.5-150500.5.9.2 * slurm-sql-23.02.5-150500.5.9.2 * libnss_slurm2-debuginfo-23.02.5-150500.5.9.2 * slurm-23.02.5-150500.5.9.2 * slurm-sview-23.02.5-150500.5.9.2 * slurm-rest-23.02.5-150500.5.9.2 * slurm-cray-debuginfo-23.02.5-150500.5.9.2 * slurm-debugsource-23.02.5-150500.5.9.2 * slurm-debuginfo-23.02.5-150500.5.9.2 * SUSE Package Hub 15 15-SP5 (noarch) * slurm-webdoc-23.02.5-150500.5.9.2 * slurm-config-23.02.5-150500.5.9.2 * slurm-seff-23.02.5-150500.5.9.2 * slurm-doc-23.02.5-150500.5.9.2 * slurm-sjstat-23.02.5-150500.5.9.2 * slurm-openlava-23.02.5-150500.5.9.2 * slurm-config-man-23.02.5-150500.5.9.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215437

1 0

SUSE-RU-2023:4333-1: moderate: Recommended update for slurm_23_02
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Recommended update for slurm_23_02 Announcement ID: SUSE-RU-2023:4333-1 Rating: moderate References: * bsc#1215437 Affected Products: * HPC Module 15-SP4 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 An update that has one fix can now be installed. ## Description: This update for slurm_23_02 fixes the following issues: * Updated to version 23.02.5 with the following changes: * Bug Fixes: * Revert a change in 23.02 where `SLURM_NTASKS` was no longer set in the job's environment when `--ntasks-per-node` was requested. The method that is is being set, however, is different and should be more accurate in more situations. * Change pmi2 plugin to honor the `SrunPortRange` option. This matches the new behavior of the pmix plugin in 23.02.0. Note that neither of these plugins makes use of the `MpiParams=ports=` option, and previously were only limited by the systems ephemeral port range. * Fix regression in 23.02.2 that caused slurmctld -R to crash on startup if a node features plugin is configured. * Fix and prevent reoccurring reservations from overlapping. * `job_container/tmpfs` \- Avoid attempts to share BasePath between nodes. * With `CR_Cpu_Memory`, fix node selection for jobs that request gres and `--mem-per-cpu`. * Fix a regression from 22.05.7 in which some jobs were allocated too few nodes, thus overcommitting cpus to some tasks. * Fix a job being stuck in the completing state if the job ends while the primary controller is down or unresponsive and the backup controller has not yet taken over. * Fix `slurmctld` segfault when a node registers with a configured `CpuSpecList` while `slurmctld` configuration has the node without `CpuSpecList`. * Fix cloud nodes getting stuck in `POWERED_DOWN+NO_RESPOND` state after not registering by `ResumeTimeout`. * `slurmstepd` \- Avoid cleanup of `config.json-less` containers spooldir getting skipped. * Fix scontrol segfault when 'completing' command requested repeatedly in interactive mode. * Properly handle a race condition between `bind()` and `listen()` calls in the network stack when running with SrunPortRange set. * Federation - Fix revoked jobs being returned regardless of the `-a`/`--all` option for privileged users. * Federation - Fix canceling pending federated jobs from non-origin clusters which could leave federated jobs orphaned from the origin cluster. * Fix sinfo segfault when printing multiple clusters with `--noheader` option. * Federation - fix clusters not syncing if clusters are added to a federation before they have registered with the dbd. * `node_features/helpers` \- Fix node selection for jobs requesting changeable. features with the `|` operator, which could prevent jobs from running on some valid nodes. * `node_features/helpers` \- Fix inconsistent handling of `&` and `|`, where an AND'd feature was sometimes AND'd to all sets of features instead of just the current set. E.g. `foo|bar&baz` was interpreted as `{foo,baz}` or `{bar,baz}` instead of how it is documented: `{foo} or {bar,baz}`. * Fix job accounting so that when a job is requeued its allocated node count is cleared. After the requeue, sacct will correctly show that the job has 0 `AllocNodes` while it is pending or if it is canceled before restarting. * `sacct` \- `AllocCPUS` now correctly shows 0 if a job has not yet received an allocation or if the job was canceled before getting one. * Fix intel OneAPI autodetect: detect the `/dev/dri/renderD[0-9]+` GPUs, and do not detect `/dev/dri/card[0-9]+`. * Fix node selection for jobs that request `--gpus` and a number of tasks fewer than GPUs, which resulted in incorrectly rejecting these jobs. * Remove `MYSQL_OPT_RECONNECT` completely. * Fix cloud nodes in `POWERING_UP` state disappearing (getting set to `FUTURE`) when an `scontrol reconfigure` happens. * `openapi/dbv0.0.39` \- Avoid assert / segfault on missing coordinators list. * `slurmrestd` \- Correct memory leak while parsing OpenAPI specification templates with server overrides. * Fix overwriting user node reason with system message. * Prevent deadlock when `rpc_queue` is enabled. * `slurmrestd` \- Correct OpenAPI specification generation bug where fields with overlapping parent paths would not get generated. * Fix memory leak as a result of a partition info query. * Fix memory leak as a result of a job info query. * For step allocations, fix `--gres=none` sometimes not ignoring gres from the job. * Fix `--exclusive` jobs incorrectly gang-scheduling where they shouldn't. * Fix allocations with `CR_SOCKET`, gres not assigned to a specific socket, and block core distribion potentially allocating more sockets than required. * Revert a change in 23.02.3 where Slurm would kill a script's process group as soon as the script ended instead of waiting as long as any process in that process group held the stdout/stderr file descriptors open. That change broke some scripts that relied on the previous behavior. Setting time limits for scripts (such as `PrologEpilogTimeout`) is strongly encouraged to avoid Slurm waiting indefinitely for scripts to finish. * Fix `slurmdbd -R` not returning an error under certain conditions. * `slurmdbd` \- Avoid potential NULL pointer dereference in the mysql plugin. * Fix regression in 23.02.3 which broken X11 forwarding for hosts when MUNGE sends a localhost address in the encode host field. This is caused when the node hostname is mapped to 127.0.0.1 (or similar) in `/etc/hosts`. * `openapi/[db]v0.0.39` \- fix memory leak on parsing error. * `data_parser/v0.0.39` \- fix updating qos for associations. * `openapi/dbv0.0.39` \- fix updating values for associations with null users. * Fix minor memory leak with `--tres-per-task` and licenses. * Fix cyclic socket cpu distribution for tasks in a step where `--cpus-per-task` < usable threads per core. * `slurmrestd` \- For `GET /slurm/v0.0.39/node[s]`, change format of node's energy field `current_watts` to a dictionary to account for unset value instead of dumping 4294967294. * `slurmrestd` \- For `GET /slurm/v0.0.39/qos`, change format of QOS's field "priority" to a dictionary to account for unset value instead of dumping 4294967294. * slurmrestd - For `GET /slurm/v0.0.39/job[s]`, the 'return code' code field in `v0.0.39_job_exit`_code will be set to -127 instead of being left unset where job does not have a relevant return code. * Other Changes: * Remove --uid / --gid options from salloc and srun commands. These options did not work correctly since the CVE-2022-29500 fix in combination with some changes made in 23.02.0. * Add the `JobId` to `debug()` messages indicating when `cpus_per_task/mem_per_cpu` or `pn_min_cpus` are being automatically adjusted. * Change the log message warning for rate limited users from verbose to info. * `slurmstepd` \- Cleanup per task generated environment for containers in spooldir. * Format batch, extern, interactive, and pending step ids into strings that are human readable. * `slurmrestd` \- Reduce memory usage when printing out job CPU frequency. * `data_parser/v0.0.39` \- Add `required/memory_per_cpu` and `required/memory_per_node` to `sacct --json` and `sacct --yaml` and `GET /slurmdb/v0.0.39/jobs` from slurmrestd. * `gpu/oneapi` \- Store cores correctly so CPU affinity is tracked. * Allow `slurmdbd -R` to work if the root assoc id is not 1. * Limit periodic node registrations to 50 instead of the full `TreeWidth`. Since unresolvable `cloud/dynamic` nodes must disable fanout by setting `TreeWidth` to a large number, this would cause all nodes to register at once. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4333=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4333=1 * HPC Module 15-SP4 zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2023-4333=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4333=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4333=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * slurm_23_02-hdf5-23.02.5-150300.7.11.2 * slurm_23_02-torque-23.02.5-150300.7.11.2 * slurm_23_02-sql-23.02.5-150300.7.11.2 * slurm_23_02-lua-23.02.5-150300.7.11.2 * slurm_23_02-cray-23.02.5-150300.7.11.2 * slurm_23_02-hdf5-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-23.02.5-150300.7.11.2 * slurm_23_02-node-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-lua-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-23.02.5-150300.7.11.2 * slurm_23_02-sview-23.02.5-150300.7.11.2 * libpmi0_23_02-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-23.02.5-150300.7.11.2 * slurm_23_02-cray-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-23.02.5-150300.7.11.2 * slurm_23_02-debugsource-23.02.5-150300.7.11.2 * libslurm39-debuginfo-23.02.5-150300.7.11.2 * libpmi0_23_02-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-sql-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-debuginfo-23.02.5-150300.7.11.2 * libslurm39-23.02.5-150300.7.11.2 * slurm_23_02-sview-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-23.02.5-150300.7.11.2 * slurm_23_02-testsuite-23.02.5-150300.7.11.2 * slurm_23_02-plugins-23.02.5-150300.7.11.2 * slurm_23_02-torque-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-devel-23.02.5-150300.7.11.2 * slurm_23_02-23.02.5-150300.7.11.2 * openSUSE Leap 15.3 (noarch) * slurm_23_02-config-man-23.02.5-150300.7.11.2 * slurm_23_02-sjstat-23.02.5-150300.7.11.2 * slurm_23_02-doc-23.02.5-150300.7.11.2 * slurm_23_02-webdoc-23.02.5-150300.7.11.2 * slurm_23_02-config-23.02.5-150300.7.11.2 * slurm_23_02-seff-23.02.5-150300.7.11.2 * slurm_23_02-openlava-23.02.5-150300.7.11.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * slurm_23_02-torque-23.02.5-150300.7.11.2 * slurm_23_02-sql-23.02.5-150300.7.11.2 * slurm_23_02-lua-23.02.5-150300.7.11.2 * slurm_23_02-cray-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-23.02.5-150300.7.11.2 * slurm_23_02-rest-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-lua-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-23.02.5-150300.7.11.2 * slurm_23_02-sview-23.02.5-150300.7.11.2 * libpmi0_23_02-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-23.02.5-150300.7.11.2 * slurm_23_02-cray-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-23.02.5-150300.7.11.2 * slurm_23_02-debugsource-23.02.5-150300.7.11.2 * libslurm39-debuginfo-23.02.5-150300.7.11.2 * libpmi0_23_02-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-sql-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-debuginfo-23.02.5-150300.7.11.2 * libslurm39-23.02.5-150300.7.11.2 * slurm_23_02-sview-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-23.02.5-150300.7.11.2 * slurm_23_02-torque-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-23.02.5-150300.7.11.2 * slurm_23_02-devel-23.02.5-150300.7.11.2 * slurm_23_02-23.02.5-150300.7.11.2 * openSUSE Leap 15.4 (noarch) * slurm_23_02-config-23.02.5-150300.7.11.2 * slurm_23_02-webdoc-23.02.5-150300.7.11.2 * slurm_23_02-doc-23.02.5-150300.7.11.2 * slurm_23_02-config-man-23.02.5-150300.7.11.2 * HPC Module 15-SP4 (aarch64 x86_64) * slurm_23_02-torque-23.02.5-150300.7.11.2 * slurm_23_02-sql-23.02.5-150300.7.11.2 * slurm_23_02-lua-23.02.5-150300.7.11.2 * slurm_23_02-cray-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-23.02.5-150300.7.11.2 * slurm_23_02-rest-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-lua-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-23.02.5-150300.7.11.2 * slurm_23_02-sview-23.02.5-150300.7.11.2 * libpmi0_23_02-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-23.02.5-150300.7.11.2 * slurm_23_02-cray-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-23.02.5-150300.7.11.2 * slurm_23_02-debugsource-23.02.5-150300.7.11.2 * libslurm39-debuginfo-23.02.5-150300.7.11.2 * libpmi0_23_02-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-sql-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-debuginfo-23.02.5-150300.7.11.2 * libslurm39-23.02.5-150300.7.11.2 * slurm_23_02-sview-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-23.02.5-150300.7.11.2 * slurm_23_02-torque-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-23.02.5-150300.7.11.2 * slurm_23_02-devel-23.02.5-150300.7.11.2 * slurm_23_02-23.02.5-150300.7.11.2 * HPC Module 15-SP4 (noarch) * slurm_23_02-config-23.02.5-150300.7.11.2 * slurm_23_02-webdoc-23.02.5-150300.7.11.2 * slurm_23_02-doc-23.02.5-150300.7.11.2 * slurm_23_02-config-man-23.02.5-150300.7.11.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * slurm_23_02-torque-23.02.5-150300.7.11.2 * slurm_23_02-sql-23.02.5-150300.7.11.2 * slurm_23_02-lua-23.02.5-150300.7.11.2 * slurm_23_02-cray-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-23.02.5-150300.7.11.2 * slurm_23_02-rest-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-lua-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-23.02.5-150300.7.11.2 * slurm_23_02-sview-23.02.5-150300.7.11.2 * libpmi0_23_02-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-23.02.5-150300.7.11.2 * slurm_23_02-cray-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-23.02.5-150300.7.11.2 * slurm_23_02-debugsource-23.02.5-150300.7.11.2 * libslurm39-debuginfo-23.02.5-150300.7.11.2 * libpmi0_23_02-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-sql-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-debuginfo-23.02.5-150300.7.11.2 * libslurm39-23.02.5-150300.7.11.2 * slurm_23_02-sview-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-23.02.5-150300.7.11.2 * slurm_23_02-torque-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-23.02.5-150300.7.11.2 * slurm_23_02-devel-23.02.5-150300.7.11.2 * slurm_23_02-23.02.5-150300.7.11.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * slurm_23_02-config-23.02.5-150300.7.11.2 * slurm_23_02-webdoc-23.02.5-150300.7.11.2 * slurm_23_02-doc-23.02.5-150300.7.11.2 * slurm_23_02-config-man-23.02.5-150300.7.11.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * slurm_23_02-torque-23.02.5-150300.7.11.2 * slurm_23_02-sql-23.02.5-150300.7.11.2 * slurm_23_02-lua-23.02.5-150300.7.11.2 * slurm_23_02-cray-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-23.02.5-150300.7.11.2 * slurm_23_02-rest-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-lua-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-23.02.5-150300.7.11.2 * slurm_23_02-sview-23.02.5-150300.7.11.2 * libpmi0_23_02-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-23.02.5-150300.7.11.2 * slurm_23_02-cray-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-23.02.5-150300.7.11.2 * slurm_23_02-debugsource-23.02.5-150300.7.11.2 * libslurm39-debuginfo-23.02.5-150300.7.11.2 * libpmi0_23_02-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-sql-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-debuginfo-23.02.5-150300.7.11.2 * libslurm39-23.02.5-150300.7.11.2 * slurm_23_02-sview-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-23.02.5-150300.7.11.2 * slurm_23_02-torque-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-23.02.5-150300.7.11.2 * slurm_23_02-devel-23.02.5-150300.7.11.2 * slurm_23_02-23.02.5-150300.7.11.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * slurm_23_02-config-23.02.5-150300.7.11.2 * slurm_23_02-webdoc-23.02.5-150300.7.11.2 * slurm_23_02-doc-23.02.5-150300.7.11.2 * slurm_23_02-config-man-23.02.5-150300.7.11.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215437

1 0

openSUSE-RU-2023:0344-1: moderate: Recommended update for yubioath-desktop
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

openSUSE Recommended Update: Recommended update for yubioath-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0344-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for yubioath-desktop fixes the following issues: Version 5.1.0 - Support and manage FIDO-enabled YubiKeys. - Toggle applications over USB and NFC. - Major UI improvements. Version 5.0.5 - Compatibility update for yubikey-manager 4.0 - Add additional product names. Version 5.0.4 - New app icons on all platforms - Adjust the behaviour of the search bar, do not search accounts without having focus - Bugfix: Fix keyboard shortcut to copy account code - Bugfix: Show firmware version for YubiKey NEO correctly - Windows: Show correct version number in .msi installers - macOS: Fix issue with window positioning - macOS: Fix occacional crashes on startup - Linux: Fix the app icon and desktop entry for the Snap package. Version 5.0.3 - macOS: Make the app available in the macOS App Store - Windows: Make the app available in the Microsoft Store (for Windows 10 20.04 and higher) - Linux: Make the app available in the Snap Store - Add support for YubiKey 5C NFC - Bugfix: Make sure the application is always visible on Windows Version 5.0.2 - Allow spaces in secret key when adding accounts - UI: Move favorite button to the credential card - UI: Improved scrolling behaviour Version 5.0.1 - New colors for the account icons. - Use Roboto font on all platforms. - Increase some text sizes for better readability. - Change icon for the Settings button and move it to the left. - SysTray: Open application on double-click. - Terminology: Use "Accounts" instead of "Credentials". - Bugfix: Clear old accounts correctly when switching between devices. - Add keyboard shortcut (Ctrl/Cmd + i) for info popup. Version 5.0.0 - New UI based on Material Design and Qt Quick Controls 2 - Add Dark Mode and Light Mode - Feature: Allow switching between connected YubiKeys - Feature: Select favorite credentials, available from the System Tray/Menu Bar - Show some information about the connected YubiKey, such as firmware version and serial number - Add experimental support for external smart card readers, enabling the use of a YubiKey over NFC - Add initial accessability support Version 4.3.6b - Fixes problem where YubiKey was not being detected on macOS. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-344=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): yubioath-desktop-5.1.0-bp155.3.3.1 References:

1 0

openSUSE-RU-2023:0343-1: moderate: Recommended update for yubioath-desktop
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

openSUSE Recommended Update: Recommended update for yubioath-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0343-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for yubioath-desktop fixes the following issues: Version 5.1.0 - Support and manage FIDO-enabled YubiKeys. - Toggle applications over USB and NFC. - Major UI improvements. Version 5.0.5 - Compatibility update for yubikey-manager 4.0 - Add additional product names. Version 5.0.4 - New app icons on all platforms - Adjust the behaviour of the search bar, do not search accounts without having focus - Bugfix: Fix keyboard shortcut to copy account code - Bugfix: Show firmware version for YubiKey NEO correctly - Windows: Show correct version number in .msi installers - macOS: Fix issue with window positioning - macOS: Fix occacional crashes on startup - Linux: Fix the app icon and desktop entry for the Snap package. Version 5.0.3 - macOS: Make the app available in the macOS App Store - Windows: Make the app available in the Microsoft Store (for Windows 10 20.04 and higher) - Linux: Make the app available in the Snap Store - Add support for YubiKey 5C NFC - Bugfix: Make sure the application is always visible on Windows Version 5.0.2 - Allow spaces in secret key when adding accounts - UI: Move favorite button to the credential card - UI: Improved scrolling behaviour Version 5.0.1 - New colors for the account icons. - Use Roboto font on all platforms. - Increase some text sizes for better readability. - Change icon for the Settings button and move it to the left. - SysTray: Open application on double-click. - Terminology: Use "Accounts" instead of "Credentials". - Bugfix: Clear old accounts correctly when switching between devices. - Add keyboard shortcut (Ctrl/Cmd + i) for info popup. Version 5.0.0 - New UI based on Material Design and Qt Quick Controls 2 - Add Dark Mode and Light Mode - Feature: Allow switching between connected YubiKeys - Feature: Select favorite credentials, available from the System Tray/Menu Bar - Show some information about the connected YubiKey, such as firmware version and serial number - Add experimental support for external smart card readers, enabling the use of a YubiKey over NFC - Add initial accessability support Version 4.3.6b - Fixes problem where YubiKey was not being detected on macOS. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-343=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): yubioath-desktop-5.1.0-bp154.2.3.1 References:

1 0

SUSE-SU-2023:4329-1: important: Security update for slurm
by maintenance＠opensuse.org 01 Nov '23

01 Nov '23

# Security update for slurm Announcement ID: SUSE-SU-2023:4329-1 Rating: important References: * bsc#1208810 * bsc#1216207 Cross-References: * CVE-2023-41914 CVSS scores: * CVE-2023-41914 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for slurm fixes the following issues: * CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. (bsc#1216207) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4329=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4329=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4329=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-plugins-20.11.9-150200.6.13.1 * libpmi0_20_11-20.11.9-150200.6.13.1 * slurm_20_11-slurmdbd-20.11.9-150200.6.13.1 * slurm_20_11-sql-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-devel-20.11.9-150200.6.13.1 * slurm_20_11-auth-none-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-torque-20.11.9-150200.6.13.1 * slurm_20_11-webdoc-20.11.9-150200.6.13.1 * slurm_20_11-debugsource-20.11.9-150200.6.13.1 * slurm_20_11-rest-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-lua-20.11.9-150200.6.13.1 * slurm_20_11-rest-20.11.9-150200.6.13.1 * slurm_20_11-hdf5-20.11.9-150200.6.13.1 * slurm_20_11-pam_slurm-20.11.9-150200.6.13.1 * libnss_slurm2_20_11-20.11.9-150200.6.13.1 * slurm_20_11-plugins-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-torque-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-seff-20.11.9-150200.6.13.1 * slurm_20_11-sview-20.11.9-150200.6.13.1 * slurm_20_11-config-20.11.9-150200.6.13.1 * slurm_20_11-munge-20.11.9-150200.6.13.1 * slurm_20_11-slurmdbd-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-sview-debuginfo-20.11.9-150200.6.13.1 * libpmi0_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-lua-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-config-man-20.11.9-150200.6.13.1 * slurm_20_11-pam_slurm-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-node-20.11.9-150200.6.13.1 * perl-slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-node-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-cray-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-openlava-20.11.9-150200.6.13.1 * slurm_20_11-sql-20.11.9-150200.6.13.1 * slurm_20_11-auth-none-20.11.9-150200.6.13.1 * perl-slurm_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-hdf5-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-doc-20.11.9-150200.6.13.1 * libnss_slurm2_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-sjstat-20.11.9-150200.6.13.1 * slurm_20_11-cray-20.11.9-150200.6.13.1 * slurm_20_11-munge-debuginfo-20.11.9-150200.6.13.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-plugins-20.11.9-150200.6.13.1 * libpmi0_20_11-20.11.9-150200.6.13.1 * slurm_20_11-slurmdbd-20.11.9-150200.6.13.1 * slurm_20_11-sql-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-devel-20.11.9-150200.6.13.1 * slurm_20_11-auth-none-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-torque-20.11.9-150200.6.13.1 * slurm_20_11-webdoc-20.11.9-150200.6.13.1 * slurm_20_11-debugsource-20.11.9-150200.6.13.1 * slurm_20_11-rest-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-lua-20.11.9-150200.6.13.1 * slurm_20_11-rest-20.11.9-150200.6.13.1 * slurm_20_11-hdf5-20.11.9-150200.6.13.1 * slurm_20_11-pam_slurm-20.11.9-150200.6.13.1 * libnss_slurm2_20_11-20.11.9-150200.6.13.1 * slurm_20_11-plugins-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-torque-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-seff-20.11.9-150200.6.13.1 * slurm_20_11-sview-20.11.9-150200.6.13.1 * slurm_20_11-config-20.11.9-150200.6.13.1 * slurm_20_11-munge-20.11.9-150200.6.13.1 * slurm_20_11-slurmdbd-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-sview-debuginfo-20.11.9-150200.6.13.1 * libpmi0_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-lua-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-config-man-20.11.9-150200.6.13.1 * slurm_20_11-pam_slurm-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-node-20.11.9-150200.6.13.1 * perl-slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-node-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-cray-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-openlava-20.11.9-150200.6.13.1 * slurm_20_11-sql-20.11.9-150200.6.13.1 * slurm_20_11-auth-none-20.11.9-150200.6.13.1 * perl-slurm_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-hdf5-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-doc-20.11.9-150200.6.13.1 * libnss_slurm2_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-sjstat-20.11.9-150200.6.13.1 * slurm_20_11-cray-20.11.9-150200.6.13.1 * slurm_20_11-munge-debuginfo-20.11.9-150200.6.13.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libslurm36-20.11.9-150200.6.13.1 * slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-plugins-20.11.9-150200.6.13.1 * libpmi0_20_11-20.11.9-150200.6.13.1 * slurm_20_11-slurmdbd-20.11.9-150200.6.13.1 * slurm_20_11-torque-20.11.9-150200.6.13.1 * slurm_20_11-devel-20.11.9-150200.6.13.1 * slurm_20_11-webdoc-20.11.9-150200.6.13.1 * slurm_20_11-lua-20.11.9-150200.6.13.1 * slurm_20_11-pam_slurm-20.11.9-150200.6.13.1 * libnss_slurm2_20_11-20.11.9-150200.6.13.1 * slurm_20_11-sview-20.11.9-150200.6.13.1 * slurm_20_11-munge-20.11.9-150200.6.13.1 * slurm_20_11-config-20.11.9-150200.6.13.1 * slurm_20_11-config-man-20.11.9-150200.6.13.1 * slurm_20_11-node-20.11.9-150200.6.13.1 * perl-slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-sql-20.11.9-150200.6.13.1 * slurm_20_11-auth-none-20.11.9-150200.6.13.1 * slurm_20_11-doc-20.11.9-150200.6.13.1 * libslurm36-debuginfo-20.11.9-150200.6.13.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41914.html * https://bugzilla.suse.com/show_bug.cgi?id=1208810 * https://bugzilla.suse.com/show_bug.cgi?id=1216207

1 0

SUSE-SU-2023:4330-1: important: Security update for libsndfile
by maintenance＠opensuse.org 01 Nov '23

01 Nov '23

# Security update for libsndfile Announcement ID: SUSE-SU-2023:4330-1 Rating: important References: * bsc#1213451 Cross-References: * CVE-2022-33065 CVSS scores: * CVE-2022-33065 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-33065 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libsndfile fixes the following issues: * CVE-2022-33065: Fixed an integer overflow that could cause memory safety issues when reading a MAT4 file (bsc#1213451). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4330=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4330=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4330=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4330=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4330=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4330=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4330=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4330=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4330=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4330=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4330=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4330=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4330=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4330=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4330=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4330=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4330=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4330=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4330=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4330=1 ## Package List: * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Manager Proxy 4.2 (x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE CaaS Platform 4.0 (x86_64) * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-1.0.28-150000.5.20.1 * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libsndfile-progs-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile-progs-debuginfo-1.0.28-150000.5.20.1 * libsndfile1-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-progs-debugsource-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * openSUSE Leap 15.4 (x86_64) * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsndfile-progs-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile-progs-debuginfo-1.0.28-150000.5.20.1 * libsndfile1-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-progs-debugsource-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * openSUSE Leap 15.5 (x86_64) * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Package Hub 15 15-SP4 (x86_64) * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * SUSE Package Hub 15 15-SP5 (x86_64) * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 ## References: * https://www.suse.com/security/cve/CVE-2022-33065.html * https://bugzilla.suse.com/show_bug.cgi?id=1213451

1 0

SUSE-SU-2023:4328-1: important: Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4)
by maintenance＠opensuse.org 01 Nov '23

01 Nov '23

# Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4) Announcement ID: SUSE-SU-2023:4328-1 Rating: important References: * bsc#1215440 Cross-References: * CVE-2023-4623 CVSS scores: * CVE-2023-4623 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_88 fixes one issue. The following security issue was fixed: * CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2023-4327=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4328=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2023-4328=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4327=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_18-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-2-150400.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_28-default-2-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_5-debugsource-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-2-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_28-default-2-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5_Update_5-debugsource-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-2-150500.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_18-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-2-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4623.html * https://bugzilla.suse.com/show_bug.cgi?id=1215440

1 0