December 2023 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2023:0415-1: moderate: Recommended update for virtme
by maintenance＠opensuse.org 24 Dec '23

24 Dec '23

openSUSE Recommended Update: Recommended update for virtme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0415-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for virtme fixes the following issues: Ship virtme-ng in version 1.18. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-415=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): virtme-1.18-bp155.5.5.1 References:

1 0

openSUSE-RU-2023:0414-1: moderate: Recommended update for virtme
by maintenance＠opensuse.org 24 Dec '23

24 Dec '23

openSUSE Recommended Update: Recommended update for virtme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0414-1 Rating: moderate References: #1180125 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for virtme fixes the following issues: Ship virtme-ng in version 1.18. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-414=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): virtme-1.18-bp154.3.7.1 References: https://bugzilla.suse.com/1180125

1 0

openSUSE-SU-2023:0413-1: moderate: Security update for cppcheck
by opensuse-security＠opensuse.org 24 Dec '23

24 Dec '23

openSUSE Security Update: Security update for cppcheck ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0413-1 Rating: moderate References: #1215233 Cross-References: CVE-2023-39070 CVSS scores: CVE-2023-39070 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cppcheck fixes the following issues: - CVE-2023-39070: Fixed heap use-after-free in removeContradiction() (boo#1215233) - update to 2.12.1: * Support importing projects with project-name - update to 2.12.0: * uselessOverride finds overriding functions that either duplicate code from or delegate back to the base class implementation * knownPointerToBool finds pointer to bool conversions that are always true or false * truncLongCastAssignment and truncLongCastReturn check additional types, including float/double/long double * duplInheritedMember also reports duplicated member functions * constParameter*/constVariable* checks find more instances of pointers/references that can be const, e.g. when calling library functions * Write how many checkers was activated after a run * Added --checkers-report that can be used to generate a report in a file that shows what checkers was activated and disabled * The qmake build system has been deprecated and will be removed in a future version. * Command-line option '--template - update to 2.11: * pop_back on empty container is UB * Improve useStlAlgorithm check to handle many more conditions in the loop for any_of, all_of and none_of algorithms * ValueFlow can evaluate the return value of functions even when conditionals are used * ValueFlow will now forward the container sizes being returned from a function * ValueFlow can infer possible values from possible symbolic values * Improve valueflow after pushing to container * The new option --check-level= has been added that controls how much checking is made by Cppcheck. The default checking level is "normal". If you feel that you can wait longer on results you can use --check-level=exhaustive. * It is no longer necessary to run "--check-config" to get detailed "missingInclude" and "missingIncludeSystem" messages. They will always be issued in the regular analysis if "missingInclude" is enabled. * "missingInclude" and "missingIncludeSystem" are reported with "-j" is > 1 and processes are used in the backend (default in non-Windows binaries) * "missingInclude" and "missingIncludeSystem" will now cause the "--error-exitcode" to be applied * "--enable=information" will no longer implicitly enable "missingInclude" starting with 2.16. Please enable it explicitly if you require it. * The `constParameter` and `constVariable` checks have been split into 3 different IDs based on if the variable is a pointer, a reference, or local. The different IDs will allow users to suppress different const warning based on variable type. * `constParameter` * `constParameterReference` * `constParameterPointer` * `constVariable` * `constVariableReference` * `constVariablePointer` * More command-line parameters will now check if the given integer argument is actually valid. Several other internal string-to-integer conversions will now be error checked. * scanning projects (with -j1) will now defer the analysis of markup files until the whole code was processed - update to 2.10.3: * SymbolDatabase: Fix handling of function pointer arguments - update to 2.10.2: * GUI: Set proper title for compliance report dialog * GUI: Generate compliance report * Tokenizer: tweaked simplification of function pointers * fix whole program analysis * Import Project: Fix problem with define value with space * Fix execution of executable addons from GUI * fix for windows installer, no other changes * Fixes when importing AST from clang * comments can be added at end of suppression in suppressions file is similar to GCC. If you want to get warnings in the old * Added Cppcheck annotations cppcheck_low(VALUE) and * Added API01-C: Avoid laying out strings in memory directly * Duplicate expression for condition and assignment: if (x==3) x=3; * Patch was submitted (https://github.com/danmar/cppcheck/pull/1554) and accepted so this change should be reverted and replaced with a CMake compile definition - Multifile checking for buffer overruns and uninitialized - A bunch of additions to several Libraries, especially * Additionally, lots of false positives and bugs have been fixed and several existing checks have been improved. - Library files have now a 'format' attribute. Format version - Cppcheck does no longer abort checking if unhandled - Detect shift by too many bits, signed integer overflow and - Dead pointer usage when pointer alias local variable that - Improved AST creation (support placement new, C++-style - Support GCC extension __attriute__((used)) and MSVC - Better support for static member variables, inherited - Improved typedef support where multiple variables are - Avoid checking code multiple times by calculating a checksum. - HTML report: display 'verbose' message using clickable * Additionally, lots of false positives and bugs have been fixed - Returning references to literals or references to calculation - Enhanced support for commutative operators in duplicate - Definition of minsize for buffer arguments in .cfg files - Fixed handling of #error: Do not report them if -f and -D - Generate xml dump of AST/ValueFlow/SymbolDatabase/TokenList - Cppcheck requires a C++11 compiler supporting the common subset of features supported by GCC 4.4, Visual Studio 2010 - Much improved support of complex combinations of function - More robust error detection in several checks due to usage - Allocation/Deallocation functions can be extend across - Better handling of some C++11 language features like enum - Check for unhandled exceptions when exception specifiers * Additionally, a large number of false positives and crashs has been fixed. - New option to enable warnings but not style messages: - Cppcheck used to skip includes where the header filename is enclosed in <>. You can now include these headers also by using -I. - New POSIX checks: pipe() buffer size, redundant calls of set/get user id, too big value passed to usleep(), buffer - Storing getc() return value in char variable and comparing - Portability check that warns when using NULL as argument to variadic function. It has undefined behaviour on some - Improved checking for uninitialized struct members, - Added --include to the cppcheck command line client. This forces inclusion of the given file. This can for instance be used - The threads handling has been improved. Using -jN now works in - NULL pointers: Improved checking of default function argument values. - full change log http://raw.github.com/danmar/cppcheck/master/Changelog Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-413=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): cppcheck-2.12.1-bp155.2.3.1 cppcheck-gui-2.12.1-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-39070.html https://bugzilla.suse.com/1215233

1 0

SUSE-RU-2023:4966-1: critical: Recommended update for cloud-regionsrv-client
by OPENSUSE-UPDATES 22 Dec '23

22 Dec '23

# Recommended update for cloud-regionsrv-client Announcement ID: SUSE-RU-2023:4966-1 Rating: critical References: * bsc#1217451 * bsc#1217583 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP1 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.0 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.0 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.0 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for cloud-regionsrv-client fixes the following issues: * Update to version 10.1.5 (bsc#1217583) * Fix fallback path when IPv6 network path is not usable * Enable an IPv6 fallback path in IMDS access if it cannot be accessed over IPv4 * Enable IMDS access over IPv6 * Update to version 10.1.4 (bsc#1217451) * Fetch cert for new update server during failover ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4966=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4966=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4966=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4966=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4966=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4966=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4966=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4966=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4966=1 * Public Cloud Module 15-SP1 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2023-4966=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2023-4966=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2023-4966=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-4966=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-4966=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * openSUSE Leap Micro 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * openSUSE Leap 15.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * openSUSE Leap 15.5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * Public Cloud Module 15-SP1 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * Public Cloud Module 15-SP2 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * Public Cloud Module 15-SP3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * Public Cloud Module 15-SP4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 * Public Cloud Module 15-SP5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1 * cloud-regionsrv-client-10.1.5-150000.6.102.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217451 * https://bugzilla.suse.com/show_bug.cgi?id=1217583

1 0

SUSE-RU-2023:4962-1: important: Recommended update for curl
by OPENSUSE-UPDATES 22 Dec '23

22 Dec '23

# Recommended update for curl Announcement ID: SUSE-RU-2023:4962-1 Rating: important References: * bsc#1216987 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for curl fixes the following issues: * libssh: Implement SFTP packet size limit (bsc#1216987) This update also ships curl to the INSTALLER channel. ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4962=1 openSUSE-SLE-15.4-2023-4962=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4962=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4962=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4962=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4962=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4962=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4962=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4962=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4962=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4962=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2023-4962=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4962=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4962=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4962=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2023-4962=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4962=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4962=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4962=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4962=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4962=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4962=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4962=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2023-4962=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * libcurl-devel-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 * openSUSE Leap 15.4 (x86_64) * libcurl4-32bit-8.0.1-150400.5.41.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.41.1 * libcurl-devel-32bit-8.0.1-150400.5.41.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libcurl4-64bit-8.0.1-150400.5.41.1 * libcurl4-64bit-debuginfo-8.0.1-150400.5.41.1 * libcurl-devel-64bit-8.0.1-150400.5.41.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * libcurl-devel-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 * openSUSE Leap 15.5 (x86_64) * libcurl4-32bit-8.0.1-150400.5.41.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.41.1 * libcurl-devel-32bit-8.0.1-150400.5.41.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libcurl4-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libcurl4-8.0.1-150400.5.41.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libcurl4-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libcurl4-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libcurl4-8.0.1-150400.5.41.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libcurl4-8.0.1-150400.5.41.1 * SUSE Manager Proxy 4.3 (x86_64) * libcurl4-8.0.1-150400.5.41.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libcurl4-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libcurl4-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libcurl4-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libcurl4-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * libcurl-devel-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 * Basesystem Module 15-SP4 (x86_64) * libcurl4-32bit-8.0.1-150400.5.41.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.41.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * libcurl-devel-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 * Basesystem Module 15-SP5 (x86_64) * libcurl4-32bit-8.0.1-150400.5.41.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.41.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * libcurl4-32bit-8.0.1-150400.5.41.1 * curl-debugsource-8.0.1-150400.5.41.1 * curl-8.0.1-150400.5.41.1 * libcurl4-debuginfo-8.0.1-150400.5.41.1 * libcurl4-8.0.1-150400.5.41.1 * libcurl-devel-8.0.1-150400.5.41.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.41.1 * curl-debuginfo-8.0.1-150400.5.41.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216987

1 0

SUSE-RU-2023:4073-3: low: Recommended update for rpm
by OPENSUSE-UPDATES 22 Dec '23

22 Dec '23

# Recommended update for rpm Announcement ID: SUSE-RU-2023:4073-3 Rating: low References: * jsc#PED-1988 * jsc#PED-68 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 An update that contains two features can now be installed. ## Description: This update for rpm fixes the following issue: * Enables build for all python modules (jsc#PED-68, jsc#PED-1988) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4073=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4073=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * rpm-debugsource-4.14.3-150400.59.3.1 * rpm-ndb-4.14.3-150400.59.3.1 * python3-rpm-4.14.3-150400.59.3.1 * python311-rpm-4.14.3-150400.59.3.1 * rpm-4.14.3-150400.59.3.1 * python3-rpm-debuginfo-4.14.3-150400.59.3.1 * rpm-debuginfo-4.14.3-150400.59.3.1 * rpm-devel-4.14.3-150400.59.3.1 * rpm-build-4.14.3-150400.59.3.1 * rpm-ndb-debugsource-4.14.3-150400.59.3.1 * rpm-build-debuginfo-4.14.3-150400.59.3.1 * rpm-ndb-debuginfo-4.14.3-150400.59.3.1 * python311-rpm-debuginfo-4.14.3-150400.59.3.1 * python-rpm-debugsource-4.14.3-150400.59.3.1 * openSUSE Leap 15.4 (x86_64) * rpm-ndb-32bit-debuginfo-4.14.3-150400.59.3.1 * rpm-ndb-32bit-4.14.3-150400.59.3.1 * rpm-32bit-4.14.3-150400.59.3.1 * rpm-32bit-debuginfo-4.14.3-150400.59.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rpm-debugsource-4.14.3-150400.59.3.1 * rpm-ndb-4.14.3-150400.59.3.1 * python3-rpm-4.14.3-150400.59.3.1 * python311-rpm-4.14.3-150400.59.3.1 * rpm-4.14.3-150400.59.3.1 * python3-rpm-debuginfo-4.14.3-150400.59.3.1 * rpm-debuginfo-4.14.3-150400.59.3.1 * rpm-devel-4.14.3-150400.59.3.1 * rpm-build-4.14.3-150400.59.3.1 * rpm-ndb-debugsource-4.14.3-150400.59.3.1 * rpm-build-debuginfo-4.14.3-150400.59.3.1 * rpm-ndb-debuginfo-4.14.3-150400.59.3.1 * python311-rpm-debuginfo-4.14.3-150400.59.3.1 * python-rpm-debugsource-4.14.3-150400.59.3.1 * openSUSE Leap 15.5 (x86_64) * rpm-ndb-32bit-debuginfo-4.14.3-150400.59.3.1 * rpm-ndb-32bit-4.14.3-150400.59.3.1 * rpm-32bit-4.14.3-150400.59.3.1 * rpm-32bit-debuginfo-4.14.3-150400.59.3.1 ## References: * https://jira.suse.com/browse/PED-1988 * https://jira.suse.com/browse/PED-68

1 0

SUSE-SU-2023:4965-1: moderate: Security update for ppp
by OPENSUSE-UPDATES 22 Dec '23

22 Dec '23

# Security update for ppp Announcement ID: SUSE-SU-2023:4965-1 Rating: moderate References: * bsc#1218251 Cross-References: * CVE-2022-4603 CVSS scores: * CVE-2022-4603 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2022-4603 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for ppp fixes the following issues: * CVE-2022-4603: Fixed improper validation of array index of the component pppdump (bsc#1218251). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4965=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4965=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4965=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4965=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2023-4965=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4965=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4965=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4965=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4965=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4965=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4965=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * openSUSE Leap Micro 5.3 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * openSUSE Leap 15.4 (noarch) * ppp-modem-2.4.7-150000.5.13.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * openSUSE Leap 15.5 (noarch) * ppp-modem-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 ## References: * https://www.suse.com/security/cve/CVE-2022-4603.html * https://bugzilla.suse.com/show_bug.cgi?id=1218251

1 0

SUSE-SU-2023:4949-1: important: Security update for xorg-x11-server
by OPENSUSE-UPDATES 22 Dec '23

22 Dec '23

# Security update for xorg-x11-server Announcement ID: SUSE-SU-2023:4949-1 Rating: important References: * bsc#1217765 Cross-References: * CVE-2023-6377 CVSS scores: * CVE-2023-6377 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Development Tools Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions (bsc#1217765). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4949=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4949=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4949=1 openSUSE-SLE-15.4-2023-4949=1 ## Package List: * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-1.20.3-150400.38.35.1 * xorg-x11-server-extra-1.20.3-150400.38.35.1 * xorg-x11-server-debugsource-1.20.3-150400.38.35.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.35.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.35.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-sdk-1.20.3-150400.38.35.1 * xorg-x11-server-debugsource-1.20.3-150400.38.35.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.35.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * xorg-x11-server-1.20.3-150400.38.35.1 * xorg-x11-server-extra-1.20.3-150400.38.35.1 * xorg-x11-server-debugsource-1.20.3-150400.38.35.1 * xorg-x11-server-sdk-1.20.3-150400.38.35.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.35.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.35.1 * xorg-x11-server-source-1.20.3-150400.38.35.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6377.html * https://bugzilla.suse.com/show_bug.cgi?id=1217765

1 0

SUSE-SU-2023:4958-1: moderate: Security update for tinyxml
by OPENSUSE-UPDATES 22 Dec '23

22 Dec '23

# Security update for tinyxml Announcement ID: SUSE-SU-2023:4958-1 Rating: moderate References: * bsc#1218040 Cross-References: * CVE-2023-34194 CVSS scores: * CVE-2023-34194 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-34194 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for tinyxml fixes the following issues: * CVE-2023-34194: Fixed reachable assertion may lead to denial of service (bsc#1218040). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4958=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4958=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4958=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libtinyxml0-2.6.2-150000.3.6.1 * libtinyxml0-debuginfo-2.6.2-150000.3.6.1 * tinyxml-devel-2.6.2-150000.3.6.1 * tinyxml-debugsource-2.6.2-150000.3.6.1 * tinyxml-docs-2.6.2-150000.3.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libtinyxml0-2.6.2-150000.3.6.1 * libtinyxml0-debuginfo-2.6.2-150000.3.6.1 * tinyxml-devel-2.6.2-150000.3.6.1 * tinyxml-debugsource-2.6.2-150000.3.6.1 * tinyxml-docs-2.6.2-150000.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libtinyxml0-2.6.2-150000.3.6.1 * libtinyxml0-debuginfo-2.6.2-150000.3.6.1 * tinyxml-devel-2.6.2-150000.3.6.1 * tinyxml-debugsource-2.6.2-150000.3.6.1 * tinyxml-docs-2.6.2-150000.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-34194.html * https://bugzilla.suse.com/show_bug.cgi?id=1218040

1 0

SUSE-SU-2023:4957-1: moderate: Security update for libcryptopp
by OPENSUSE-UPDATES 21 Dec '23

21 Dec '23

# Security update for libcryptopp Announcement ID: SUSE-SU-2023:4957-1 Rating: moderate References: * bsc#1218219 Cross-References: * CVE-2023-50980 CVSS scores: * CVE-2023-50980 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 An update that solves one vulnerability can now be installed. ## Description: This update for libcryptopp fixes the following issues: * CVE-2023-50980: Fixed DoS via malformed DER public key file (bsc#1218219). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4957=1 ## Package List: * openSUSE Leap 15.4 (x86_64) * libcryptopp5_6_5-32bit-debuginfo-5.6.5-150000.1.9.1 * libcryptopp5_6_5-32bit-5.6.5-150000.1.9.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libcryptopp5_6_5-debuginfo-5.6.5-150000.1.9.1 * libcryptopp5_6_5-5.6.5-150000.1.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50980.html * https://bugzilla.suse.com/show_bug.cgi?id=1218219

1 0