November 2023 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2023:0385-1: important: Security update for opera
by opensuse-security＠opensuse.org 30 Nov '23

30 Nov '23

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0385-1 Rating: important References: Cross-References: CVE-2023-5997 CVE-2023-6112 CVSS scores: CVE-2023-5997 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-6112 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 105.0.4970.21 * DNA-112425 Choosing Workspace Icons doesn’t work as expected * DNA-112787 glow around tiles in Top Sites section in BABE in dark theme - The update to chromium 119.0.6045.159 fixes following issues: CVE-2023-5997, CVE-2023-6112 - Update to 105.0.4970.16 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111903 [Lin] [Component-based-scrollbar] Old design is displayed on Ubuntu 20.04 * DNA-112914 Visual glitch with HWA enabled in some random places * DNA-113137 [WinLin][Sidebar autohide] Sidebar panel is not connected with sidebar - Update to 105.0.4970.13 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-111885 [Address bar] Hover effect on padlock icon is not rounded * DNA-112411 Active Tab in Tab Island in Dark Mode should have different colour * DNA-112431 Dragging tab quickly past last island on the right, causes tab to be dropped at the end of tab strip instead of at location of the cursor * DNA-112878 [Tab strip] Detached tab not restored after restarting browser * DNA-112900 Crash at opera::component_based:: ComponentTabDragController::StopViewDragging * DNA-112996 Translations for O105 * DNA-113213 Promote 105 to stable - Complete Opera 105 changelog at: https://blogs.opera.com/desktop/changelog-for-105/ - Update to 104.0.4944.54 * DNA-111938 Option 'Automatically hide sidebar' and Full screen makes Opera freeze * DNA-112241 Stuttering video on some systems with OOP SW H.264 decoding * DNA-112636 [Tab strip] Detach button on meeting tabs moves on hover and is replaced by close tab * DNA-112862 Crash at extensions::BookmarksPrivateAPI:: OnListenerAdded(extensions::EventListenerInfo const&) * DNA-112990 Crash when closing tab tooltip and opening Search tabs Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4:NonFree: zypper in -t patch openSUSE-2023-385=1 Package List: - openSUSE Leap 15.4:NonFree (x86_64): opera-105.0.4970.21-lp154.2.62.1 References: https://www.suse.com/security/cve/CVE-2023-5997.html https://www.suse.com/security/cve/CVE-2023-6112.html

1 0

SUSE-RU-2023:4620-1: moderate: Recommended update for libhugetlbfs
by maintenance＠opensuse.org 30 Nov '23

30 Nov '23

# Recommended update for libhugetlbfs Announcement ID: SUSE-RU-2023:4620-1 Rating: moderate References: * bsc#1213639 * bsc#1216576 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for libhugetlbfs fixes the following issue: * Add patch for upstream issue (bsc#1216576, bsc#1213639) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4620=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4620=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4620=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4620=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4620=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4620=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4620=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4620=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4620=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4620=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4620=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4620=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4620=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4620=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4620=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4620=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4620=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4620=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4620=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4620=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4620=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4620=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-tests-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-tests-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * libhugetlbfs-devel-2.20-150000.3.8.1 * openSUSE Leap 15.4 (x86_64) * libhugetlbfs-32bit-2.20-150000.3.8.1 * libhugetlbfs-32bit-debuginfo-2.20-150000.3.8.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-tests-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-tests-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * libhugetlbfs-devel-2.20-150000.3.8.1 * openSUSE Leap 15.5 (x86_64) * libhugetlbfs-32bit-2.20-150000.3.8.1 * libhugetlbfs-32bit-debuginfo-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE CaaS Platform 4.0 (x86_64) * libhugetlbfs-devel-2.20-150000.3.8.1 * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libhugetlbfs-2.20-150000.3.8.1 * libhugetlbfs-debuginfo-2.20-150000.3.8.1 * libhugetlbfs-debugsource-2.20-150000.3.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213639 * https://bugzilla.suse.com/show_bug.cgi?id=1216576

1 0

SUSE-RU-2023:4615-1: moderate: Recommended update for icu
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for icu Announcement ID: SUSE-RU-2023:4615-1 Rating: moderate References: * bsc#1217472 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update of icu fixes the following issue: * missing 32bit libraries in SLES 15 SP3 were added, required by xerces-c 32bit. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4615=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4615=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4615=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4615=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4615=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4615=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4615=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4615=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4615=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4615=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4615=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4615=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4615=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4615=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4615=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4615=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4615=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4615=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-4615=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4615=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4615=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4615=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4615=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-doc-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * openSUSE Leap 15.4 (x86_64) * libicu-devel-32bit-65.1-150200.4.10.1 * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * openSUSE Leap 15.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-doc-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * openSUSE Leap 15.5 (x86_64) * libicu-devel-32bit-65.1-150200.4.10.1 * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * openSUSE Leap 15.5 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * Basesystem Module 15-SP4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * Basesystem Module 15-SP5 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * icu-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-65.1-150200.4.10.1 * libicu-devel-65.1-150200.4.10.1 * SUSE Enterprise Storage 7.1 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Enterprise Storage 7.1 (x86_64) * libicu-suse65_1-32bit-debuginfo-65.1-150200.4.10.1 * libicu-suse65_1-32bit-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * openSUSE Leap Micro 5.3 (noarch) * libicu65_1-ledata-65.1-150200.4.10.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libicu-suse65_1-65.1-150200.4.10.1 * icu-debuginfo-65.1-150200.4.10.1 * icu-debugsource-65.1-150200.4.10.1 * libicu-suse65_1-debuginfo-65.1-150200.4.10.1 * openSUSE Leap Micro 5.4 (noarch) * libicu65_1-bedata-65.1-150200.4.10.1 * libicu65_1-ledata-65.1-150200.4.10.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217472

1 0

openSUSE-SU-2023:0383-1: important: Security update for optipng
by opensuse-security＠opensuse.org 29 Nov '23

29 Nov '23

openSUSE Security Update: Security update for optipng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0383-1 Rating: important References: #1215937 Cross-References: CVE-2023-43907 CVSS scores: CVE-2023-43907 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for optipng fixes the following issues: optipng was updated to 0.7.8: * Upgraded libpng to version 1.6.40. * Upgraded zlib to version 1.3-optipng. * Upgraded cexcept to version 2.0.2-optipng. * Fixed a global-buffer-overflow vulnerability in the GIF reader (boo#1215937 CVE-2023-43907). * Fixed a stack-print-after-scope defect in the error handler. * Fixed an assertion failure in the image reduction module. * Fixed the command-line wildargs expansion in the Windows port. * Raised the minimum required libpng version from 1.2.9 to 1.6.35. * Raised the minimum required zlib version from 1.2.1 to 1.2.8. * Refactored the structured exception handling. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-383=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): optipng-0.7.8-bp155.5.5.1 optipng-debuginfo-0.7.8-bp155.5.5.1 optipng-debugsource-0.7.8-bp155.5.5.1 References: https://www.suse.com/security/cve/CVE-2023-43907.html https://bugzilla.suse.com/1215937

1 0

SUSE-RU-2023:4610-1: moderate: Recommended update for google-guest-configs
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for google-guest-configs Announcement ID: SUSE-RU-2023:4610-1 Rating: moderate References: * bsc#1212418 * bsc#1212759 * bsc#1214546 * bsc#1214572 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has four fixes can now be installed. ## Description: This update for google-guest-configs fixes the following issues: * Update to version 20230808.00 (bsc#1214546, bsc#1214572, bsc#1212418, bsc#1212759) * Replace xxd with dd for google_nvme_id * Setup irq binding for a3 8g vm * dracut: Add a new dracut module for gcp udev rules * src/lib/udev: only create symlinks for GCP devices * Set hostname: consider fully qualified static hostname * Support multiple local SSD controllers * Update OWNERS file * DHCP hostname: don't reset hostname if the hostname hasn't changed ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4610=1 openSUSE-SLE-15.4-2023-4610=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4610=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-4610=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-4610=1 ## Package List: * openSUSE Leap 15.4 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 * openSUSE Leap 15.5 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 * Public Cloud Module 15-SP4 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 * Public Cloud Module 15-SP5 (noarch) * google-guest-configs-20230808.00-150400.13.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212418 * https://bugzilla.suse.com/show_bug.cgi?id=1212759 * https://bugzilla.suse.com/show_bug.cgi?id=1214546 * https://bugzilla.suse.com/show_bug.cgi?id=1214572

1 0

SUSE-SU-2023:4612-1: moderate: Security update for java-1_8_0-openj9
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Security update for java-1_8_0-openj9 Announcement ID: SUSE-SU-2023:4612-1 Rating: moderate References: * bsc#1216374 * bsc#1216379 * bsc#1217214 Cross-References: * CVE-2023-22067 * CVE-2023-22081 * CVE-2023-5676 CVSS scores: * CVE-2023-22067 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22067 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-22081 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-22081 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-5676 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2023-5676 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual machine * CVE-2023-22067: Fixed an IOR deserialization issue in CORBA (bsc#1216379). * CVE-2023-22081: Fixed a certificate path validation issue during client authentication (bsc#1216374). * CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4612=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4612=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4612=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openj9-src-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-accessibility-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debugsource-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-1.8.0.392-150200.3.39.1 * openSUSE Leap 15.4 (noarch) * java-1_8_0-openj9-javadoc-1.8.0.392-150200.3.39.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openj9-src-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-accessibility-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debugsource-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-1.8.0.392-150200.3.39.1 * openSUSE Leap 15.5 (noarch) * java-1_8_0-openj9-javadoc-1.8.0.392-150200.3.39.1 * SUSE Package Hub 15 15-SP5 (ppc64le s390x) * java-1_8_0-openj9-src-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-devel-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-headless-debuginfo-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-accessibility-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-debugsource-1.8.0.392-150200.3.39.1 * java-1_8_0-openj9-demo-1.8.0.392-150200.3.39.1 ## References: * https://www.suse.com/security/cve/CVE-2023-22067.html * https://www.suse.com/security/cve/CVE-2023-22081.html * https://www.suse.com/security/cve/CVE-2023-5676.html * https://bugzilla.suse.com/show_bug.cgi?id=1216374 * https://bugzilla.suse.com/show_bug.cgi?id=1216379 * https://bugzilla.suse.com/show_bug.cgi?id=1217214

1 0

SUSE-RU-2023:4606-1: important: Recommended update for python-apache-libcloud
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for python-apache-libcloud Announcement ID: SUSE-RU-2023:4606-1 Rating: important References: * bsc#1214808 Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for python-apache-libcloud fixes the following issues: * list_nodes() function in the Azure ARM driver does not handle pagination and does not return all the VMs for a subscription (bsc#1214808) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4606=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4606=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4606=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4606=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4606=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4606=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4606=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4606=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4606=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4606=1 ## Package List: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * SUSE Enterprise Storage 7.1 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * openSUSE Leap 15.3 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * openSUSE Leap 15.4 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * openSUSE Leap 15.5 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * Server Applications Module 15-SP4 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 * Server Applications Module 15-SP5 (noarch) * python3-apache-libcloud-3.3.1-150300.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214808

1 0

SUSE-SU-2023:4607-1: moderate: Security update for python3-Twisted
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Security update for python3-Twisted Announcement ID: SUSE-SU-2023:4607-1 Rating: moderate References: * bsc#1216588 Cross-References: * CVE-2023-46137 CVSS scores: * CVE-2023-46137 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-46137 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python3-Twisted fixes the following issues: * CVE-2023-46137: Fixed issue inside serializing pipelined HTTP requests. (bsc#1216588) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4607=1 openSUSE-SLE-15.4-2023-4607=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4607=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4607=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4607=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python3-Twisted-22.2.0-150400.15.1 * python-Twisted-doc-22.2.0-150400.15.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-Twisted-22.2.0-150400.15.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-Twisted-22.2.0-150400.15.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-Twisted-22.2.0-150400.15.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46137.html * https://bugzilla.suse.com/show_bug.cgi?id=1216588

1 0

SUSE-SU-2023:4608-1: moderate: Security update for python-Twisted
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Security update for python-Twisted Announcement ID: SUSE-SU-2023:4608-1 Rating: moderate References: * bsc#1216588 Cross-References: * CVE-2023-46137 CVSS scores: * CVE-2023-46137 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-46137 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP4 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-Twisted fixes the following issues: * CVE-2023-46137: Fixed issue inside serializing pipelined HTTP requests. (bsc#1216588) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4608=1 openSUSE-SLE-15.4-2023-4608=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4608=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-4608=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2023-4608=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 * openSUSE Leap 15.5 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 * Python 3 Module 15-SP4 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 * Python 3 Module 15-SP5 (noarch) * python311-Twisted-22.10.0-150400.5.13.1 * python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 * python311-Twisted-serial-22.10.0-150400.5.13.1 * python311-Twisted-tls-22.10.0-150400.5.13.1 * python311-Twisted-contextvars-22.10.0-150400.5.13.1 * python311-Twisted-http2-22.10.0-150400.5.13.1 * python311-Twisted-conch-22.10.0-150400.5.13.1 * python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46137.html * https://bugzilla.suse.com/show_bug.cgi?id=1216588

1 0

SUSE-RU-2023:4601-1: moderate: Recommended update for suseconnect-ng
by maintenance＠opensuse.org 29 Nov '23

29 Nov '23

# Recommended update for suseconnect-ng Announcement ID: SUSE-RU-2023:4601-1 Rating: moderate References: * bsc#1170267 * bsc#1212799 * bsc#1214781 * jsc#PED-3179 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has three fixes can now be installed. ## Description: This update for suseconnect-ng fixes the following issues: * Update to version 1.4.0~git0.b0f7c25bfdfa * Added EULA display for addons (bsc#1170267) * Fix zypper argument for auto-agreeing licenses (bsc#1214781) * Enable building on SLE12 SP5 (jsc#PED-3179) * Fixed `provides` to work with yast2-registration on SLE15 SP4 (bsc#1212799) * Improve error message if product set more than once ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4601=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4601=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4601=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsuseconnect-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * libsuseconnect-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ruby-bindings-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libsuseconnect-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-debuginfo-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * libsuseconnect-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 * suseconnect-ruby-bindings-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1170267 * https://bugzilla.suse.com/show_bug.cgi?id=1212799 * https://bugzilla.suse.com/show_bug.cgi?id=1214781 * https://jira.suse.com/browse/PED-3179

1 0