November 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2023:4531-1: moderate: Recommended update for perl-DateTime-TimeZone
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Recommended update for perl-DateTime-TimeZone Announcement ID: SUSE-RU-2023:4531-1 Rating: moderate References: * bsc#1104700 * bsc#1113554 * bsc#1204923 * jsc#PED-6726 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that contains one feature and has three fixes can now be installed. ## Description: This update for perl-DateTime-TimeZone fixes the following issues: * updated to 2.60 (jsc#PED-6726, bsc#1204923, bsc#1113554, bsc#1104700) full changelog at https://metacpan.org/release/DROLSKY/DateTime- TimeZone-2.60/changes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4531=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4531=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4531=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4531=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4531=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4531=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4531=1 ## Package List: * SUSE Manager Retail Branch Server 4.2 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * SUSE Manager Server 4.2 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * openSUSE Leap 15.4 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * openSUSE Leap 15.5 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * Basesystem Module 15-SP4 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * Basesystem Module 15-SP5 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 * SUSE Manager Proxy 4.2 (noarch) * perl-DateTime-TimeZone-2.60-150000.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1104700 * https://bugzilla.suse.com/show_bug.cgi?id=1113554 * https://bugzilla.suse.com/show_bug.cgi?id=1204923 * https://jira.suse.com/browse/PED-6726

1 0

SUSE-RU-2023:4525-1: moderate: Recommended update for samba
by maintenance＠opensuse.org 22 Nov '23

22 Nov '23

# Recommended update for samba Announcement ID: SUSE-RU-2023:4525-1 Rating: moderate References: * bsc#1213607 * bsc#1213826 * bsc#1215212 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has three fixes can now be installed. ## Description: This update for samba fixes the following issues: * Update to samba 4.17.12 * Some filenames can cause assert to fail in openat_pathref_fsp_nosymlink * reply_sesssetup_and_X() can dereference uninitialized tmp pointer * Missing return in reply_exit_done() * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer * Improve GetNChanges to address synchronization tool looping during the initial user sync phase * Samba replication logs show (null) DN * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination * Spotlight results return wrong date in result list * Delays at reconnect with smb2_validate_sequence_number: bad message_id 2 * samba-tool ntacl get segfault if aio_pthread appended * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed * File doesn't show when user doesn't have permission if aio_pthread is loaded * net ads lookup with unspecified realm fails * Regression DFS not working with widelinks = true (bsc#1213607); * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1 * mdssvc: Do an early talloc_free() in _mdssvc_open() * Windows client join fails if a second container CN=System exists somewhere * Fix crossing automounter mount points (bsc#1215212) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4525=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4525=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2023-4525=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4525=1 openSUSE-SLE-15.5-2023-4525=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libsamba-policy-python3-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-gpupdate-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-tool-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-4.17.12+git.427.2619dc0bed-150500.3.14.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * samba-ceph-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ceph-4.17.12+git.427.2619dc0bed-150500.3.14.1 * Basesystem Module 15-SP5 (x86_64) * samba-client-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * ctdb-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libsamba-policy-python3-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-pcp-pmda-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-gpupdate-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-tool-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-pcp-pmda-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * ctdb-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-test-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ldb-ldap-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-test-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (x86_64) * samba-client-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (noarch) * samba-doc-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (aarch64 x86_64) * samba-ceph-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-ceph-4.17.12+git.427.2619dc0bed-150500.3.14.1 * openSUSE Leap 15.5 (aarch64_ilp32) * samba-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-client-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-devel-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-libs-python3-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * samba-winbind-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1 * libsamba-policy0-python3-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213607 * https://bugzilla.suse.com/show_bug.cgi?id=1213826 * https://bugzilla.suse.com/show_bug.cgi?id=1215212

1 0

SUSE-SU-2023:4513-1: important: Security update for apache2-mod_jk
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for apache2-mod_jk Announcement ID: SUSE-SU-2023:4513-1 Rating: important References: * bsc#1114612 Cross-References: * CVE-2018-11759 CVSS scores: * CVE-2018-11759 ( SUSE ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2018-11759 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for apache2-mod_jk fixes the following issues: Update to version 1.2.49: Apache * Retrieve default request id from mod_unique_id. It can also be taken from an arbitrary environment variable by configuring "JkRequestIdIndicator". * Don't delegate the generatation of the response body to httpd when the status code represents an error if the request used the HEAD method. * Only export the main module symbol. Visibility of module internal symbols led to crashes when conflicting with library symbols. Based on a patch provided by Josef Čejka. * Remove support for implicit mapping of requests to workers. All mappings must now be explicit. IIS * Set default request id as a GUID. It can also be taken from an arbitrary request header by configuring "request_id_header". * Fix non-empty check for the Translate header. Common * Fix compiler warning when initializing and copying fixed length strings. * Add a request id to mod_jk log lines. * Enable configure to find the correct sizes for pid_t and pthread_t when building on MacOS. * Fix Clang 15/16 compatability. Pull request #6 provided by Sam James. * Improve XSS hardening in status worker. * Add additional bounds and error checking when reading AJP messages. Docs * Remove support for the Netscape / Sun ONE / Oracle iPlanet Web Server as the product has been retired. * Remove links to the old JK2 documentation. The JK2 documentation is still available, it is just no longer linked from the current JK documentation. * Restructure subsections in changelog starting with version 1.2.45. Changes for 1.2.47 and 1.2.48 updates: * Add: Apache: Extend trace level logging of method entry/exit to aid debugging of request mapping issues. * Fix: Apache: Fix a bug in the normalization checks that prevented file based requests, such as SSI file includes, from being processed. * Fix: Apache: When using JkAutoAlias, ensure that files that include spaces in their name are accessible. * Update: Common: Update the documentation to reflect that the source code for the Apache Tomcat Connectors has moved from Subversion to Git. * Fix: Common: When using set_session_cookie, ensure that an updated session cookie is issued if the load-balancer has to failover to a different worker. * Update: Common: Update config.guess and config.sub from https://git.savannah.gnu.org/git/config.git. * Update: Common: Update release script for migration to git. Update to version 1.2.46 Fixes: * Apache: Fix regression in 1.2.44 which resulted in socket_connect_timeout to be interpreted in units of seconds instead of milliseconds on platforms that provide poll(). (rjung) * Security: CVE-2018-11759 Connector path traversal [bsc#1114612] Update to version 1.2.45 Fixes: * Correct regression in 1.2.44 that broke request handling for OPTIONS * requests. (rjung) * Improve path parameter parsing so that the session ID specified by the session_path worker property for load-balanced workers can be extracted from a path parameter in any segment of the URI, rather than only from the final segment. (markt) * Apache: Improve path parameter handling so that JkStripSession can remove session IDs that are specified on path parameters in any segment of the URI rather than only the final segment. (markt) * IIS: Improve path parameter handling so that strip_session can remove session IDs that are specified on path parameters in any segment of the URI rather than only the final segment. (markt) Updates: * Apache: Update the documentation to note additional limitations of the JkAutoAlias directive. (markt) Code: * Common: Optimize path parameter handling. (rjung) Update to version 1.2.44 Updates: * Remove the Novell Netware make files and Netware specific source code since there has not been a supported version of Netware available for over five years. (markt) * Apache: Update the documentation to use httpd 2.4.x style access control directives. (markt) * Update PCRE bundled with the ISAPI redirector to 8.42. (rjung) * Update config.guess and config.sub from https://git.savannah.gnu.org/git/config.git. (rjung) Fixes: * Common: Use Local, rather than Global, mutexs on Windows to better support multi-user environments. (markt) * Apache: Use poll rather than select to avoid the limitations of select triggering an httpd crash. Patch provided by Koen Wilde. (markt) * ISAPI: Remove the check that rejects requests that contain path segments that match WEB-INF or META-INF as it duplicates a check that Tomcat performs and, because ISAPI does not have visibility of the current context path, it is impossible to implement this check without valid requests being rejected. (markt) * Refactor normalisation of request URIs to a common location and align the normalisation implementation for mod_jk with that implemented by Tomcat. (markt) Add: * Clarify the behvaiour of lb workers when all ajp13 workers fail with particular reference to the role of the retries attribute. (markt) * Add the new load-balancer worker property lb_retries to improve the control over the number of retries. Based on a patch provided by Frederik Nosi. (markt) * Add a note to the documentation that the CollapseSlashes options are now effectively hard-coded to CollpaseSlashesAll due to the changes made to align normalization with that implemented in Tomcat. (markt) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4513=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4513=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4513=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4513=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-mod_jk-debuginfo-1.2.49-150100.6.6.1 * apache2-mod_jk-debugsource-1.2.49-150100.6.6.1 * apache2-mod_jk-1.2.49-150100.6.6.1 ## References: * https://www.suse.com/security/cve/CVE-2018-11759.html * https://bugzilla.suse.com/show_bug.cgi?id=1114612

1 0

SUSE-SU-2023:4514-1: important: Security update for strongswan
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for strongswan Announcement ID: SUSE-SU-2023:4514-1 Rating: important References: * bsc#1216901 Cross-References: * CVE-2023-41913 CVSS scores: * CVE-2023-41913 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Workstation Extension 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 An update that solves one vulnerability can now be installed. ## Description: This update for strongswan fixes the following issues: * CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4514=1 openSUSE-SLE-15.4-2023-4514=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4514=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4514=1 * SUSE Linux Enterprise Workstation Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-4514=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * strongswan-mysql-debuginfo-5.9.11-150400.19.17.2 * strongswan-nm-5.9.11-150400.19.17.2 * strongswan-mysql-5.9.11-150400.19.17.2 * strongswan-sqlite-5.9.11-150400.19.17.2 * strongswan-libs0-debuginfo-5.9.11-150400.19.17.2 * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-ipsec-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-hmac-5.9.11-150400.19.17.2 * strongswan-sqlite-debuginfo-5.9.11-150400.19.17.2 * strongswan-ipsec-debuginfo-5.9.11-150400.19.17.2 * strongswan-libs0-5.9.11-150400.19.17.2 * strongswan-nm-debuginfo-5.9.11-150400.19.17.2 * strongswan-5.9.11-150400.19.17.2 * openSUSE Leap 15.4 (noarch) * strongswan-doc-5.9.11-150400.19.17.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * strongswan-libs0-debuginfo-5.9.11-150400.19.17.2 * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-ipsec-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-hmac-5.9.11-150400.19.17.2 * strongswan-ipsec-debuginfo-5.9.11-150400.19.17.2 * strongswan-libs0-5.9.11-150400.19.17.2 * strongswan-5.9.11-150400.19.17.2 * Basesystem Module 15-SP4 (noarch) * strongswan-doc-5.9.11-150400.19.17.2 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-nm-debuginfo-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-nm-5.9.11-150400.19.17.2 * SUSE Linux Enterprise Workstation Extension 15 SP4 (x86_64) * strongswan-debuginfo-5.9.11-150400.19.17.2 * strongswan-nm-debuginfo-5.9.11-150400.19.17.2 * strongswan-debugsource-5.9.11-150400.19.17.2 * strongswan-nm-5.9.11-150400.19.17.2 ## References: * https://www.suse.com/security/cve/CVE-2023-41913.html * https://bugzilla.suse.com/show_bug.cgi?id=1216901

1 0

SUSE-SU-2023:4517-1: moderate: Security update for python3-setuptools
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for python3-setuptools Announcement ID: SUSE-SU-2023:4517-1 Rating: moderate References: * bsc#1206667 Cross-References: * CVE-2022-40897 CVSS scores: * CVE-2022-40897 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2022-40897 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python3-setuptools fixes the following issues: * CVE-2022-40897: Fixed Regular Expression Denial of Service (ReDoS) in package_index.py (bsc#1206667). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4517=1 openSUSE-SLE-15.4-2023-4517=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4517=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4517=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4517=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4517=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4517=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4517=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4517=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4517=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4517=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4517=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 * openSUSE Leap Micro 5.3 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * openSUSE Leap Micro 5.4 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * openSUSE Leap 15.5 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-setuptools-44.1.1-150400.9.6.1 * Basesystem Module 15-SP4 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 * Basesystem Module 15-SP5 (noarch) * python3-setuptools-test-44.1.1-150400.9.6.1 * python3-setuptools-wheel-44.1.1-150400.9.6.1 * python3-setuptools-44.1.1-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-40897.html * https://bugzilla.suse.com/show_bug.cgi?id=1206667

1 0

SUSE-SU-2023:4518-1: important: Security update for openssl-1_1
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2023:4518-1 Rating: important References: * bsc#1216922 Cross-References: * CVE-2023-5678 CVSS scores: * CVE-2023-5678 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5678 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4518=1 openSUSE-SLE-15.5-2023-4518=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4518=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4518=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * openssl-1_1-debugsource-1.1.1l-150500.17.22.1 * libopenssl1_1-1.1.1l-150500.17.22.1 * openssl-1_1-1.1.1l-150500.17.22.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl-1_1-devel-1.1.1l-150500.17.22.1 * libopenssl1_1-hmac-1.1.1l-150500.17.22.1 * openSUSE Leap 15.5 (x86_64) * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.22.1 * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.22.1 * libopenssl1_1-32bit-1.1.1l-150500.17.22.1 * libopenssl-1_1-devel-32bit-1.1.1l-150500.17.22.1 * openSUSE Leap 15.5 (noarch) * openssl-1_1-doc-1.1.1l-150500.17.22.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl-1_1-devel-64bit-1.1.1l-150500.17.22.1 * libopenssl1_1-hmac-64bit-1.1.1l-150500.17.22.1 * libopenssl1_1-64bit-debuginfo-1.1.1l-150500.17.22.1 * libopenssl1_1-64bit-1.1.1l-150500.17.22.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * openssl-1_1-debugsource-1.1.1l-150500.17.22.1 * libopenssl1_1-1.1.1l-150500.17.22.1 * openssl-1_1-1.1.1l-150500.17.22.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl-1_1-devel-1.1.1l-150500.17.22.1 * libopenssl1_1-hmac-1.1.1l-150500.17.22.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openssl-1_1-debugsource-1.1.1l-150500.17.22.1 * libopenssl1_1-1.1.1l-150500.17.22.1 * openssl-1_1-1.1.1l-150500.17.22.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.22.1 * libopenssl-1_1-devel-1.1.1l-150500.17.22.1 * libopenssl1_1-hmac-1.1.1l-150500.17.22.1 * Basesystem Module 15-SP5 (x86_64) * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.22.1 * libopenssl1_1-32bit-1.1.1l-150500.17.22.1 * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.22.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5678.html * https://bugzilla.suse.com/show_bug.cgi?id=1216922

1 0

SUSE-SU-2023:4522-1: important: Security update for openssl-1_0_0
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for openssl-1_0_0 Announcement ID: SUSE-SU-2023:4522-1 Rating: important References: * bsc#1216922 Cross-References: * CVE-2023-5678 CVSS scores: * CVE-2023-5678 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5678 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Legacy Module 15-SP4 * Legacy Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_0_0 fixes the following issues: * CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4522=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4522=1 * Legacy Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2023-4522=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2023-4522=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4522=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4522=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4522=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4522=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4522=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4522=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4522=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4522=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4522=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-cavs-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * openssl-1_0_0-cavs-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * openSUSE Leap 15.4 (x86_64) * libopenssl-1_0_0-devel-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-32bit-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-32bit-1.0.2p-150000.3.88.1 * openSUSE Leap 15.4 (noarch) * openssl-1_0_0-doc-1.0.2p-150000.3.88.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-cavs-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * openssl-1_0_0-cavs-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * openSUSE Leap 15.5 (x86_64) * libopenssl-1_0_0-devel-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-32bit-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-steam-32bit-1.0.2p-150000.3.88.1 * libopenssl1_0_0-32bit-1.0.2p-150000.3.88.1 * openSUSE Leap 15.5 (noarch) * openssl-1_0_0-doc-1.0.2p-150000.3.88.1 * Legacy Module 15-SP4 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-debuginfo-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * libopenssl10-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 * SUSE CaaS Platform 4.0 (x86_64) * openssl-1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.88.1 * libopenssl1_0_0-1.0.2p-150000.3.88.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.88.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.88.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.88.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5678.html * https://bugzilla.suse.com/show_bug.cgi?id=1216922

1 0

SUSE-SU-2023:4524-1: important: Security update for openssl-1_1
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2023:4524-1 Rating: important References: * bsc#1216922 Cross-References: * CVE-2023-5678 CVSS scores: * CVE-2023-5678 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5678 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4524=1 SUSE-2023-4524=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4524=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4524=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4524=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4524=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4524=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4524=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4524=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * openSUSE Leap 15.4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.60.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.60.2 * libopenssl1_1-32bit-1.1.1l-150400.7.60.2 * openSUSE Leap 15.4 (noarch) * openssl-1_1-doc-1.1.1l-150400.7.60.2 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl1_1-64bit-debuginfo-1.1.1l-150400.7.60.2 * libopenssl1_1-64bit-1.1.1l-150400.7.60.2 * libopenssl1_1-hmac-64bit-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-64bit-1.1.1l-150400.7.60.2 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libopenssl1_1-hmac-1.1.1l-150400.7.60.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-1.1.1l-150400.7.60.2 * openssl-1_1-debugsource-1.1.1l-150400.7.60.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.60.2 * openssl-1_1-1.1.1l-150400.7.60.2 * libopenssl1_1-1.1.1l-150400.7.60.2 * Basesystem Module 15-SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.60.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.60.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.60.2 * libopenssl1_1-32bit-1.1.1l-150400.7.60.2 ## References: * https://www.suse.com/security/cve/CVE-2023-5678.html * https://bugzilla.suse.com/show_bug.cgi?id=1216922

1 0

SUSE-SU-2023:4503-1: moderate: Security update for avahi
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for avahi Announcement ID: SUSE-SU-2023:4503-1 Rating: moderate References: * bsc#1215947 * bsc#1216419 Cross-References: * CVE-2023-38470 * CVE-2023-38473 CVSS scores: * CVE-2023-38470 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38470 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38473 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38473 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP4 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro 6.0 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for avahi fixes the following issues: * CVE-2023-38470: Ensure each label is at least one byte long (bsc#1215947). * CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4503=1 openSUSE-SLE-15.4-2023-4503=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4503=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4503=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4503=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4503=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4503=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4503=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4503=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4503=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4503=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4503=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4503=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4503=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4503=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4503=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libavahi-gobject-devel-0.8-150400.7.10.1 * libdns_sd-0.8-150400.7.10.1 * libavahi-glib-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * avahi-autoipd-debuginfo-0.8-150400.7.10.1 * libavahi-libevent1-0.8-150400.7.10.1 * libhowl0-debuginfo-0.8-150400.7.10.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.10.1 * libavahi-devel-0.8-150400.7.10.1 * avahi-utils-gtk-0.8-150400.7.10.1 * libavahi-glib1-0.8-150400.7.10.1 * avahi-utils-0.8-150400.7.10.1 * avahi-autoipd-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * libavahi-core7-debuginfo-0.8-150400.7.10.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.10.1 * python3-avahi-0.8-150400.7.10.1 * libavahi-glib1-debuginfo-0.8-150400.7.10.1 * libhowl0-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * python3-avahi-gtk-0.8-150400.7.10.1 * libavahi-qt5-1-0.8-150400.7.10.1 * libavahi-libevent1-debuginfo-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * avahi-qt5-debugsource-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.10.1 * avahi-utils-debuginfo-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * libavahi-qt5-devel-0.8-150400.7.10.1 * libavahi-gobject0-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * avahi-utils-gtk-debuginfo-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-0.8-150400.7.10.1 * avahi-compat-howl-devel-0.8-150400.7.10.1 * libavahi-qt5-1-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-debuginfo-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * libdns_sd-debuginfo-0.8-150400.7.10.1 * openSUSE Leap 15.4 (x86_64) * libdns_sd-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-common3-32bit-0.8-150400.7.10.1 * libavahi-client3-32bit-0.8-150400.7.10.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.10.1 * libdns_sd-32bit-0.8-150400.7.10.1 * avahi-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-glib1-32bit-0.8-150400.7.10.1 * libavahi-glib1-32bit-debuginfo-0.8-150400.7.10.1 * openSUSE Leap 15.4 (noarch) * avahi-lang-0.8-150400.7.10.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libavahi-client3-64bit-0.8-150400.7.10.1 * avahi-64bit-debuginfo-0.8-150400.7.10.1 * libavahi-common3-64bit-0.8-150400.7.10.1 * libavahi-common3-64bit-debuginfo-0.8-150400.7.10.1 * libdns_sd-64bit-debuginfo-0.8-150400.7.10.1 * libavahi-glib1-64bit-0.8-150400.7.10.1 * libdns_sd-64bit-0.8-150400.7.10.1 * libavahi-glib1-64bit-debuginfo-0.8-150400.7.10.1 * libavahi-client3-64bit-debuginfo-0.8-150400.7.10.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libavahi-gobject-devel-0.8-150400.7.10.1 * libdns_sd-0.8-150400.7.10.1 * libavahi-glib-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * avahi-autoipd-debuginfo-0.8-150400.7.10.1 * libavahi-libevent1-0.8-150400.7.10.1 * libhowl0-debuginfo-0.8-150400.7.10.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.10.1 * libavahi-devel-0.8-150400.7.10.1 * avahi-utils-gtk-0.8-150400.7.10.1 * libavahi-glib1-0.8-150400.7.10.1 * avahi-utils-0.8-150400.7.10.1 * avahi-autoipd-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * libavahi-core7-debuginfo-0.8-150400.7.10.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.10.1 * python3-avahi-0.8-150400.7.10.1 * libavahi-glib1-debuginfo-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * libhowl0-0.8-150400.7.10.1 * python3-avahi-gtk-0.8-150400.7.10.1 * libavahi-qt5-1-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-libevent1-debuginfo-0.8-150400.7.10.1 * avahi-qt5-debugsource-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.10.1 * avahi-utils-debuginfo-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * libavahi-qt5-devel-0.8-150400.7.10.1 * libavahi-gobject0-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * avahi-utils-gtk-debuginfo-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-0.8-150400.7.10.1 * avahi-compat-howl-devel-0.8-150400.7.10.1 * libavahi-qt5-1-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-debuginfo-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * libdns_sd-debuginfo-0.8-150400.7.10.1 * openSUSE Leap 15.5 (x86_64) * libdns_sd-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-common3-32bit-0.8-150400.7.10.1 * libavahi-client3-32bit-0.8-150400.7.10.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.10.1 * libdns_sd-32bit-0.8-150400.7.10.1 * avahi-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-glib1-32bit-0.8-150400.7.10.1 * libavahi-glib1-32bit-debuginfo-0.8-150400.7.10.1 * openSUSE Leap 15.5 (noarch) * avahi-lang-0.8-150400.7.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libavahi-core7-debuginfo-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libdns_sd-0.8-150400.7.10.1 * libavahi-glib-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-libevent1-0.8-150400.7.10.1 * libhowl0-debuginfo-0.8-150400.7.10.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.10.1 * libavahi-devel-0.8-150400.7.10.1 * libavahi-glib1-0.8-150400.7.10.1 * avahi-utils-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * libavahi-core7-debuginfo-0.8-150400.7.10.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.10.1 * libavahi-glib1-debuginfo-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * libhowl0-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-libevent1-debuginfo-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.10.1 * avahi-utils-debuginfo-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-0.8-150400.7.10.1 * avahi-compat-howl-devel-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-debuginfo-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * libdns_sd-debuginfo-0.8-150400.7.10.1 * Basesystem Module 15-SP4 (noarch) * avahi-lang-0.8-150400.7.10.1 * Basesystem Module 15-SP4 (x86_64) * libavahi-common3-32bit-0.8-150400.7.10.1 * libavahi-client3-32bit-0.8-150400.7.10.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.10.1 * avahi-32bit-debuginfo-0.8-150400.7.10.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libdns_sd-0.8-150400.7.10.1 * libavahi-glib-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * libavahi-libevent1-0.8-150400.7.10.1 * libhowl0-debuginfo-0.8-150400.7.10.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.10.1 * libavahi-devel-0.8-150400.7.10.1 * libavahi-glib1-0.8-150400.7.10.1 * avahi-utils-0.8-150400.7.10.1 * avahi-0.8-150400.7.10.1 * libavahi-core7-debuginfo-0.8-150400.7.10.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.10.1 * libavahi-glib1-debuginfo-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * libhowl0-0.8-150400.7.10.1 * libavahi-common3-debuginfo-0.8-150400.7.10.1 * libavahi-libevent1-debuginfo-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.10.1 * avahi-utils-debuginfo-0.8-150400.7.10.1 * libavahi-client3-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-0.8-150400.7.10.1 * libavahi-core7-0.8-150400.7.10.1 * libavahi-common3-0.8-150400.7.10.1 * libavahi-ui-gtk3-0-0.8-150400.7.10.1 * avahi-compat-howl-devel-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * libavahi-gobject0-debuginfo-0.8-150400.7.10.1 * libavahi-client3-0.8-150400.7.10.1 * libdns_sd-debuginfo-0.8-150400.7.10.1 * Basesystem Module 15-SP5 (noarch) * avahi-lang-0.8-150400.7.10.1 * Basesystem Module 15-SP5 (x86_64) * libavahi-common3-32bit-0.8-150400.7.10.1 * libavahi-client3-32bit-0.8-150400.7.10.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.10.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.10.1 * avahi-32bit-debuginfo-0.8-150400.7.10.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * avahi-utils-gtk-debuginfo-0.8-150400.7.10.1 * libavahi-gobject-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * avahi-autoipd-debuginfo-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * avahi-utils-gtk-0.8-150400.7.10.1 * avahi-autoipd-0.8-150400.7.10.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * avahi-utils-gtk-debuginfo-0.8-150400.7.10.1 * libavahi-gobject-devel-0.8-150400.7.10.1 * avahi-debugsource-0.8-150400.7.10.1 * avahi-autoipd-debuginfo-0.8-150400.7.10.1 * avahi-glib2-debugsource-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * avahi-utils-gtk-0.8-150400.7.10.1 * avahi-autoipd-0.8-150400.7.10.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * avahi-debugsource-0.8-150400.7.10.1 * python3-avahi-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * avahi-debugsource-0.8-150400.7.10.1 * python3-avahi-0.8-150400.7.10.1 * avahi-debuginfo-0.8-150400.7.10.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38470.html * https://www.suse.com/security/cve/CVE-2023-38473.html * https://bugzilla.suse.com/show_bug.cgi?id=1215947 * https://bugzilla.suse.com/show_bug.cgi?id=1216419

1 0

SUSE-SU-2023:4504-1: moderate: Security update for libxml2
by maintenance＠opensuse.org 21 Nov '23

21 Nov '23

# Security update for libxml2 Announcement ID: SUSE-SU-2023:4504-1 Rating: moderate References: * bsc#1216129 Cross-References: * CVE-2023-45322 CVSS scores: * CVE-2023-45322 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-45322 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libxml2 fixes the following issues: * CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4504=1 openSUSE-SLE-15.5-2023-4504=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4504=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4504=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2023-4504=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libxml2-tools-debuginfo-2.10.3-150500.5.11.1 * libxml2-devel-2.10.3-150500.5.11.1 * libxml2-tools-2.10.3-150500.5.11.1 * libxml2-python-debugsource-2.10.3-150500.5.11.1 * python311-libxml2-2.10.3-150500.5.11.1 * python311-libxml2-debuginfo-2.10.3-150500.5.11.1 * libxml2-debugsource-2.10.3-150500.5.11.1 * python3-libxml2-2.10.3-150500.5.11.1 * python3-libxml2-debuginfo-2.10.3-150500.5.11.1 * libxml2-2-2.10.3-150500.5.11.1 * libxml2-2-debuginfo-2.10.3-150500.5.11.1 * openSUSE Leap 15.5 (x86_64) * libxml2-2-32bit-2.10.3-150500.5.11.1 * libxml2-2-32bit-debuginfo-2.10.3-150500.5.11.1 * libxml2-devel-32bit-2.10.3-150500.5.11.1 * openSUSE Leap 15.5 (noarch) * libxml2-doc-2.10.3-150500.5.11.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libxml2-2-64bit-2.10.3-150500.5.11.1 * libxml2-2-64bit-debuginfo-2.10.3-150500.5.11.1 * libxml2-devel-64bit-2.10.3-150500.5.11.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libxml2-tools-debuginfo-2.10.3-150500.5.11.1 * libxml2-tools-2.10.3-150500.5.11.1 * libxml2-python-debugsource-2.10.3-150500.5.11.1 * libxml2-debugsource-2.10.3-150500.5.11.1 * python3-libxml2-2.10.3-150500.5.11.1 * python3-libxml2-debuginfo-2.10.3-150500.5.11.1 * libxml2-2-2.10.3-150500.5.11.1 * libxml2-2-debuginfo-2.10.3-150500.5.11.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libxml2-tools-debuginfo-2.10.3-150500.5.11.1 * libxml2-devel-2.10.3-150500.5.11.1 * libxml2-python-debugsource-2.10.3-150500.5.11.1 * libxml2-tools-2.10.3-150500.5.11.1 * libxml2-debugsource-2.10.3-150500.5.11.1 * python3-libxml2-2.10.3-150500.5.11.1 * python3-libxml2-debuginfo-2.10.3-150500.5.11.1 * libxml2-2-2.10.3-150500.5.11.1 * libxml2-2-debuginfo-2.10.3-150500.5.11.1 * Basesystem Module 15-SP5 (x86_64) * libxml2-2-32bit-2.10.3-150500.5.11.1 * libxml2-2-32bit-debuginfo-2.10.3-150500.5.11.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-libxml2-debuginfo-2.10.3-150500.5.11.1 * python311-libxml2-2.10.3-150500.5.11.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45322.html * https://bugzilla.suse.com/show_bug.cgi?id=1216129

1 0