December 2023 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2023:0422-1: moderate: Recommended update for qt6-webengine
by maintenance＠opensuse.org 30 Dec '23

30 Dec '23

openSUSE Recommended Update: Recommended update for qt6-webengine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0422-1 Rating: moderate References: #1217257 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for qt6-webengine fixes the following issues: - Build with re2-10 even when re2-11 is available (boo#1217257). re2-11 pulls in system abseil which is incompatible with bundled abseil causing build failure. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-422=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): libQt6Pdf6-6.4.2-bp155.2.3.1 libQt6PdfQuick6-6.4.2-bp155.2.3.1 libQt6PdfWidgets6-6.4.2-bp155.2.3.1 libQt6WebEngineCore6-6.4.2-bp155.2.3.1 libQt6WebEngineQuick6-6.4.2-bp155.2.3.1 libQt6WebEngineWidgets6-6.4.2-bp155.2.3.1 qt6-pdf-devel-6.4.2-bp155.2.3.1 qt6-pdf-imports-6.4.2-bp155.2.3.1 qt6-pdf-private-devel-6.4.2-bp155.2.3.1 qt6-pdfquick-devel-6.4.2-bp155.2.3.1 qt6-pdfquick-private-devel-6.4.2-bp155.2.3.1 qt6-pdfwidgets-devel-6.4.2-bp155.2.3.1 qt6-pdfwidgets-private-devel-6.4.2-bp155.2.3.1 qt6-webengine-6.4.2-bp155.2.3.1 qt6-webengine-docs-html-6.4.2-bp155.2.3.1 qt6-webengine-docs-qch-6.4.2-bp155.2.3.1 qt6-webengine-examples-6.4.2-bp155.2.3.1 qt6-webengine-imports-6.4.2-bp155.2.3.1 qt6-webenginecore-devel-6.4.2-bp155.2.3.1 qt6-webenginecore-private-devel-6.4.2-bp155.2.3.1 qt6-webenginequick-devel-6.4.2-bp155.2.3.1 qt6-webenginequick-private-devel-6.4.2-bp155.2.3.1 qt6-webenginewidgets-devel-6.4.2-bp155.2.3.1 qt6-webenginewidgets-private-devel-6.4.2-bp155.2.3.1 References: https://bugzilla.suse.com/1217257

1 0

openSUSE-SU-2023:0424-1: moderate: Security update for deepin-compressor
by opensuse-security＠opensuse.org 30 Dec '23

30 Dec '23

openSUSE Security Update: Security update for deepin-compressor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0424-1 Rating: moderate References: #1218428 Cross-References: CVE-2023-50255 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal (boo#1218428) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-424=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le s390x x86_64): deepin-compressor-5.12.2-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): deepin-compressor-lang-5.12.2-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-50255.html https://bugzilla.suse.com/1218428

1 0

openSUSE-SU-2023:0421-1: important: Security update for proftpd
by opensuse-security＠opensuse.org 30 Dec '23

30 Dec '23

openSUSE Security Update: Security update for proftpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0421-1 Rating: important References: Cross-References: CVE-2023-48795 CVSS scores: CVE-2023-48795 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2023-48795 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for proftpd fixes the following issues: Update to version 1.3.8a * Implemented mitigations for "Terrapin" SSH attack (CVE-2023-48795). * http://proftpd.org/docs/NEWS-1.3.8b Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-421=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-421=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): proftpd-1.3.8b-bp155.2.3.1 proftpd-debuginfo-1.3.8b-bp155.2.3.1 proftpd-debugsource-1.3.8b-bp155.2.3.1 proftpd-devel-1.3.8b-bp155.2.3.1 proftpd-doc-1.3.8b-bp155.2.3.1 proftpd-ldap-1.3.8b-bp155.2.3.1 proftpd-ldap-debuginfo-1.3.8b-bp155.2.3.1 proftpd-mysql-1.3.8b-bp155.2.3.1 proftpd-mysql-debuginfo-1.3.8b-bp155.2.3.1 proftpd-pgsql-1.3.8b-bp155.2.3.1 proftpd-pgsql-debuginfo-1.3.8b-bp155.2.3.1 proftpd-radius-1.3.8b-bp155.2.3.1 proftpd-radius-debuginfo-1.3.8b-bp155.2.3.1 proftpd-sqlite-1.3.8b-bp155.2.3.1 proftpd-sqlite-debuginfo-1.3.8b-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): proftpd-lang-1.3.8b-bp155.2.3.1 - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): proftpd-1.3.8b-bp154.3.12.1 proftpd-devel-1.3.8b-bp154.3.12.1 proftpd-doc-1.3.8b-bp154.3.12.1 proftpd-ldap-1.3.8b-bp154.3.12.1 proftpd-mysql-1.3.8b-bp154.3.12.1 proftpd-pgsql-1.3.8b-bp154.3.12.1 proftpd-radius-1.3.8b-bp154.3.12.1 proftpd-sqlite-1.3.8b-bp154.3.12.1 - openSUSE Backports SLE-15-SP4 (noarch): proftpd-lang-1.3.8b-bp154.3.12.1 References: https://www.suse.com/security/cve/CVE-2023-48795.html

1 0

openSUSE-SU-2023:0423-1: moderate: Security update for deepin-compressor
by opensuse-security＠opensuse.org 30 Dec '23

30 Dec '23

openSUSE Security Update: Security update for deepin-compressor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0423-1 Rating: moderate References: #1218428 Cross-References: CVE-2023-50255 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal (boo#1218428) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-423=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): deepin-compressor-5.12.13-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): deepin-compressor-lang-5.12.13-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-50255.html https://bugzilla.suse.com/1218428

1 0

SUSE-RU-2023:4989-1: moderate: Recommended update for 389-ds
by OPENSUSE-UPDATES 29 Dec '23

29 Dec '23

# Recommended update for 389-ds Announcement ID: SUSE-RU-2023:4989-1 Rating: moderate References: * bsc#1217581 Affected Products: * openSUSE Leap 15.4 * Server Applications Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for 389-ds fixes the following issues: * Fix 'Replica ID cannot be specified for consumer and hub roles' error when enabling replication (bsc#1217581) * Update to version 2.0.17~git91.37da5ec * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987) * Issue 5984 - Crash when paged result search are abandoned (#5985) * Issue 5971 - CLI - Fix password prompt for repl status (#5972) * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959) * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967) * Issue 5956 - After an upgrade the server won't start - nsslapd-connta… …blesize (#5963) * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957) * Issue 5848 - Fix condition and add a CI test (#5916) * Issue 5853 - Revert MSRV check (#5908) * Issue 5722 - improve testcase (#5904) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-4989=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4989=1 openSUSE-SLE-15.4-2023-4989=1 ## Package List: * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * 389-ds-debuginfo-2.0.17~git91.37da5ec-150400.3.34.1 * 389-ds-2.0.17~git91.37da5ec-150400.3.34.1 * 389-ds-devel-2.0.17~git91.37da5ec-150400.3.34.1 * lib389-2.0.17~git91.37da5ec-150400.3.34.1 * libsvrcore0-2.0.17~git91.37da5ec-150400.3.34.1 * 389-ds-debugsource-2.0.17~git91.37da5ec-150400.3.34.1 * libsvrcore0-debuginfo-2.0.17~git91.37da5ec-150400.3.34.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * 389-ds-debuginfo-2.0.17~git91.37da5ec-150400.3.34.1 * 389-ds-2.0.17~git91.37da5ec-150400.3.34.1 * 389-ds-devel-2.0.17~git91.37da5ec-150400.3.34.1 * 389-ds-snmp-debuginfo-2.0.17~git91.37da5ec-150400.3.34.1 * lib389-2.0.17~git91.37da5ec-150400.3.34.1 * libsvrcore0-2.0.17~git91.37da5ec-150400.3.34.1 * 389-ds-debugsource-2.0.17~git91.37da5ec-150400.3.34.1 * 389-ds-snmp-2.0.17~git91.37da5ec-150400.3.34.1 * libsvrcore0-debuginfo-2.0.17~git91.37da5ec-150400.3.34.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217581

1 0

SUSE-RU-2023:4990-1: moderate: Recommended update for 389-ds
by OPENSUSE-UPDATES 29 Dec '23

29 Dec '23

# Recommended update for 389-ds Announcement ID: SUSE-RU-2023:4990-1 Rating: moderate References: * bsc#1217581 Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for 389-ds fixes the following issues: * Fix 'Replica ID cannot be specified for consumer and hub roles' error when enabling replication (bsc#1217581) * Update to version 2.2.8~git51.3688d68 * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987) * Issue 5984 - Crash when paged result search are abandoned (#5985) * Issue 5971 - CLI - Fix password prompt for repl status (#5972) * Issue 5956 - After an upgrade the server won't start - nsslapd-connta… …blesize (#5963) * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959) * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967) * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957) * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926) * Issue 5848 - Fix condition and add a CI test (#5916) * Issue 5909 - Multi listener hang with 20k connections (#5917) * Issue 5853 - Revert MSRV check (#5908) * Issue 5722 - improve testcase (#5904) * Issue 5858 - WebUI monitoring test fails to run ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4990=1 openSUSE-SLE-15.5-2023-4990=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4990=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * lib389-2.2.8~git51.3688d68-150500.3.14.1 * 389-ds-2.2.8~git51.3688d68-150500.3.14.1 * 389-ds-devel-2.2.8~git51.3688d68-150500.3.14.1 * 389-ds-debugsource-2.2.8~git51.3688d68-150500.3.14.1 * libsvrcore0-2.2.8~git51.3688d68-150500.3.14.1 * libsvrcore0-debuginfo-2.2.8~git51.3688d68-150500.3.14.1 * 389-ds-snmp-2.2.8~git51.3688d68-150500.3.14.1 * 389-ds-debuginfo-2.2.8~git51.3688d68-150500.3.14.1 * 389-ds-snmp-debuginfo-2.2.8~git51.3688d68-150500.3.14.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * lib389-2.2.8~git51.3688d68-150500.3.14.1 * 389-ds-2.2.8~git51.3688d68-150500.3.14.1 * 389-ds-devel-2.2.8~git51.3688d68-150500.3.14.1 * 389-ds-debugsource-2.2.8~git51.3688d68-150500.3.14.1 * libsvrcore0-2.2.8~git51.3688d68-150500.3.14.1 * libsvrcore0-debuginfo-2.2.8~git51.3688d68-150500.3.14.1 * 389-ds-debuginfo-2.2.8~git51.3688d68-150500.3.14.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217581

1 0

SUSE-SU-2023:4983-1: moderate: Security update for gnutls
by OPENSUSE-UPDATES 28 Dec '23

28 Dec '23

# Security update for gnutls Announcement ID: SUSE-SU-2023:4983-1 Rating: moderate References: * bsc#1217277 Cross-References: * CVE-2023-5981 CVSS scores: * CVE-2023-5981 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-5981 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for gnutls fixes the following issues: * CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange (bsc#1217277). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4983=1 SUSE-2023-4983=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4983=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4983=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4983=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4983=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4983=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4983=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4983=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libgnutlsxx-devel-3.7.3-150400.4.38.1 * libgnutlsxx28-3.7.3-150400.4.38.1 * gnutls-debugsource-3.7.3-150400.4.38.1 * libgnutls30-hmac-3.7.3-150400.4.38.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.38.1 * gnutls-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-3.7.3-150400.4.38.1 * gnutls-guile-debuginfo-3.7.3-150400.4.38.1 * gnutls-guile-3.7.3-150400.4.38.1 * libgnutls-devel-3.7.3-150400.4.38.1 * gnutls-3.7.3-150400.4.38.1 * libgnutls30-debuginfo-3.7.3-150400.4.38.1 * openSUSE Leap 15.4 (x86_64) * libgnutls-devel-32bit-3.7.3-150400.4.38.1 * libgnutls30-32bit-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-32bit-3.7.3-150400.4.38.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.38.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgnutls30-64bit-3.7.3-150400.4.38.1 * libgnutls30-hmac-64bit-3.7.3-150400.4.38.1 * libgnutls-devel-64bit-3.7.3-150400.4.38.1 * libgnutls30-64bit-debuginfo-3.7.3-150400.4.38.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.38.1 * libgnutls30-hmac-3.7.3-150400.4.38.1 * gnutls-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-3.7.3-150400.4.38.1 * gnutls-3.7.3-150400.4.38.1 * libgnutls30-debuginfo-3.7.3-150400.4.38.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libgnutlsxx-devel-3.7.3-150400.4.38.1 * libgnutlsxx28-3.7.3-150400.4.38.1 * gnutls-debugsource-3.7.3-150400.4.38.1 * libgnutls30-hmac-3.7.3-150400.4.38.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.38.1 * gnutls-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-3.7.3-150400.4.38.1 * gnutls-guile-debuginfo-3.7.3-150400.4.38.1 * gnutls-guile-3.7.3-150400.4.38.1 * libgnutls-devel-3.7.3-150400.4.38.1 * gnutls-3.7.3-150400.4.38.1 * libgnutls30-debuginfo-3.7.3-150400.4.38.1 * openSUSE Leap 15.5 (x86_64) * libgnutls-devel-32bit-3.7.3-150400.4.38.1 * libgnutls30-32bit-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-32bit-3.7.3-150400.4.38.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.38.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.38.1 * libgnutls30-hmac-3.7.3-150400.4.38.1 * gnutls-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-3.7.3-150400.4.38.1 * gnutls-3.7.3-150400.4.38.1 * libgnutls30-debuginfo-3.7.3-150400.4.38.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.38.1 * libgnutls30-hmac-3.7.3-150400.4.38.1 * gnutls-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-3.7.3-150400.4.38.1 * gnutls-3.7.3-150400.4.38.1 * libgnutls30-debuginfo-3.7.3-150400.4.38.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.38.1 * libgnutls30-hmac-3.7.3-150400.4.38.1 * gnutls-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-3.7.3-150400.4.38.1 * gnutls-3.7.3-150400.4.38.1 * libgnutls30-debuginfo-3.7.3-150400.4.38.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libgnutlsxx-devel-3.7.3-150400.4.38.1 * libgnutlsxx28-3.7.3-150400.4.38.1 * gnutls-debugsource-3.7.3-150400.4.38.1 * libgnutls30-hmac-3.7.3-150400.4.38.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.38.1 * gnutls-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-3.7.3-150400.4.38.1 * libgnutls-devel-3.7.3-150400.4.38.1 * gnutls-3.7.3-150400.4.38.1 * libgnutls30-debuginfo-3.7.3-150400.4.38.1 * Basesystem Module 15-SP4 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-32bit-3.7.3-150400.4.38.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.38.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgnutlsxx-devel-3.7.3-150400.4.38.1 * libgnutlsxx28-3.7.3-150400.4.38.1 * gnutls-debugsource-3.7.3-150400.4.38.1 * libgnutls30-hmac-3.7.3-150400.4.38.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.38.1 * gnutls-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-3.7.3-150400.4.38.1 * libgnutls-devel-3.7.3-150400.4.38.1 * gnutls-3.7.3-150400.4.38.1 * libgnutls30-debuginfo-3.7.3-150400.4.38.1 * Basesystem Module 15-SP5 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.38.1 * libgnutls30-32bit-3.7.3-150400.4.38.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.38.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5981.html * https://bugzilla.suse.com/show_bug.cgi?id=1217277

1 0

SUSE-RU-2023:4985-1: moderate: Recommended update for samba
by OPENSUSE-UPDATES 28 Dec '23

28 Dec '23

# Recommended update for samba Announcement ID: SUSE-RU-2023:4985-1 Rating: moderate References: * bsc#1214076 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for samba fixes the following issues: * Add "net offlinejoin composeodj" command (bsc#1214076) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4985=1 openSUSE-SLE-15.5-2023-4985=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4985=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4985=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2023-4985=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * samba-libs-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-libs-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-test-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-python3-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-devel-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-ldb-ldap-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * ctdb-pcp-pmda-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * libsamba-policy-devel-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-libs-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-python3-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-libs-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * libsamba-policy0-python3-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * ctdb-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-gpupdate-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-test-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-ldb-ldap-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-python3-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-debugsource-4.17.12+git.444.922f3bd625-150500.3.17.1 * ctdb-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * ctdb-pcp-pmda-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-python3-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-libs-4.17.12+git.444.922f3bd625-150500.3.17.1 * libsamba-policy-python3-devel-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-tool-4.17.12+git.444.922f3bd625-150500.3.17.1 * libsamba-policy0-python3-4.17.12+git.444.922f3bd625-150500.3.17.1 * openSUSE Leap 15.5 (x86_64) * samba-libs-32bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-libs-32bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-32bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-python3-32bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-libs-32bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-libs-32bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-libs-32bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * libsamba-policy0-python3-32bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * libsamba-policy0-python3-32bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-32bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-python3-32bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-32bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-devel-32bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * openSUSE Leap 15.5 (noarch) * samba-doc-4.17.12+git.444.922f3bd625-150500.3.17.1 * openSUSE Leap 15.5 (aarch64 x86_64) * samba-ceph-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-ceph-4.17.12+git.444.922f3bd625-150500.3.17.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libsamba-policy0-python3-64bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-64bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-libs-64bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-python3-64bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-64bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-libs-64bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-libs-64bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-libs-64bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * libsamba-policy0-python3-64bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-64bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-devel-64bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-python3-64bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-64bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * samba-client-libs-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-libs-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-debugsource-4.17.12+git.444.922f3bd625-150500.3.17.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * samba-libs-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-libs-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-python3-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-devel-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-ldb-ldap-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * libsamba-policy-devel-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-libs-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-python3-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-libs-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * libsamba-policy0-python3-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-gpupdate-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-ldb-ldap-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-python3-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-debugsource-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-python3-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-libs-4.17.12+git.444.922f3bd625-150500.3.17.1 * libsamba-policy-python3-devel-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-tool-4.17.12+git.444.922f3bd625-150500.3.17.1 * libsamba-policy0-python3-4.17.12+git.444.922f3bd625-150500.3.17.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * samba-ceph-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-ceph-4.17.12+git.444.922f3bd625-150500.3.17.1 * Basesystem Module 15-SP5 (x86_64) * samba-winbind-libs-32bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-libs-32bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-client-libs-32bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-winbind-libs-32bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-32bit-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-libs-32bit-4.17.12+git.444.922f3bd625-150500.3.17.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * samba-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * samba-debugsource-4.17.12+git.444.922f3bd625-150500.3.17.1 * ctdb-debuginfo-4.17.12+git.444.922f3bd625-150500.3.17.1 * ctdb-4.17.12+git.444.922f3bd625-150500.3.17.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214076

1 0

SUSE-SU-2023:4988-1: low: Security update for python-pip
by OPENSUSE-UPDATES 28 Dec '23

28 Dec '23

# Security update for python-pip Announcement ID: SUSE-SU-2023:4988-1 Rating: low References: * bsc#1217353 Cross-References: * CVE-2023-5752 CVSS scores: * CVE-2023-5752 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2023-5752 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP4 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-pip fixes the following issues: * CVE-2023-5752: Fixed injection of arbitrary configuration through Mercurial parameter (bsc#1217353). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4988=1 openSUSE-SLE-15.4-2023-4988=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4988=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-4988=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2023-4988=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-pip-22.3.1-150400.17.12.1 * openSUSE Leap 15.5 (noarch) * python311-pip-22.3.1-150400.17.12.1 * Python 3 Module 15-SP4 (noarch) * python311-pip-22.3.1-150400.17.12.1 * Python 3 Module 15-SP5 (noarch) * python311-pip-22.3.1-150400.17.12.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5752.html * https://bugzilla.suse.com/show_bug.cgi?id=1217353

1 0

SUSE-SU-2023:4981-1: important: Security update for postfix
by OPENSUSE-UPDATES 28 Dec '23

28 Dec '23

# Security update for postfix Announcement ID: SUSE-SU-2023:4981-1 Rating: important References: * bsc#1218304 * bsc#1218314 Cross-References: * CVE-2023-51764 CVSS scores: * CVE-2023-51764 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP5 * Legacy Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for postfix fixes the following issues: * CVE-2023-51764: Fixed new SMTP smuggling attack (bsc#1218304). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4981=1 openSUSE-SLE-15.5-2023-4981=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4981=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2023-4981=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4981=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * postfix-bdb-debugsource-3.7.3-150500.3.11.1 * postfix-debugsource-3.7.3-150500.3.11.1 * postfix-3.7.3-150500.3.11.1 * postfix-debuginfo-3.7.3-150500.3.11.1 * postfix-ldap-debuginfo-3.7.3-150500.3.11.1 * postfix-postgresql-3.7.3-150500.3.11.1 * postfix-bdb-debuginfo-3.7.3-150500.3.11.1 * postfix-ldap-3.7.3-150500.3.11.1 * postfix-postgresql-debuginfo-3.7.3-150500.3.11.1 * postfix-bdb-lmdb-debuginfo-3.7.3-150500.3.11.1 * postfix-bdb-3.7.3-150500.3.11.1 * postfix-bdb-lmdb-3.7.3-150500.3.11.1 * postfix-devel-3.7.3-150500.3.11.1 * postfix-mysql-3.7.3-150500.3.11.1 * postfix-mysql-debuginfo-3.7.3-150500.3.11.1 * openSUSE Leap 15.5 (noarch) * postfix-doc-3.7.3-150500.3.11.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * postfix-debugsource-3.7.3-150500.3.11.1 * postfix-3.7.3-150500.3.11.1 * postfix-debuginfo-3.7.3-150500.3.11.1 * postfix-ldap-debuginfo-3.7.3-150500.3.11.1 * postfix-ldap-3.7.3-150500.3.11.1 * postfix-devel-3.7.3-150500.3.11.1 * Basesystem Module 15-SP5 (noarch) * postfix-doc-3.7.3-150500.3.11.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * postfix-bdb-debugsource-3.7.3-150500.3.11.1 * postfix-bdb-debuginfo-3.7.3-150500.3.11.1 * postfix-bdb-lmdb-debuginfo-3.7.3-150500.3.11.1 * postfix-bdb-3.7.3-150500.3.11.1 * postfix-bdb-lmdb-3.7.3-150500.3.11.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * postfix-debuginfo-3.7.3-150500.3.11.1 * postfix-debugsource-3.7.3-150500.3.11.1 * postfix-mysql-3.7.3-150500.3.11.1 * postfix-mysql-debuginfo-3.7.3-150500.3.11.1 ## References: * https://www.suse.com/security/cve/CVE-2023-51764.html * https://bugzilla.suse.com/show_bug.cgi?id=1218304 * https://bugzilla.suse.com/show_bug.cgi?id=1218314

1 0