June 2023 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2023:0125-1: moderate: Recommended update for perl-App-perlbrew
by maintenance＠opensuse.org 09 Jun '23

09 Jun '23

openSUSE Recommended Update: Recommended update for perl-App-perlbrew ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0125-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for perl-App-perlbrew fixes the following issues: perl-App-perlbrew was updated to 0.96. see /usr/share/doc/packages/perl-App-perlbrew/Changes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-125=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): perl-App-perlbrew-0.96-bp154.2.3.1 perl-CPAN-Perl-Releases-5.20221220-bp154.2.3.1 References:

1 0

openSUSE-SU-2023:0124-1: important: Security update for chromium
by opensuse-security＠opensuse.org 09 Jun '23

09 Jun '23

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0124-1 Rating: important References: #1211843 #1212044 Cross-References: CVE-2023-2929 CVE-2023-2930 CVE-2023-2931 CVE-2023-2932 CVE-2023-2933 CVE-2023-2934 CVE-2023-2935 CVE-2023-2936 CVE-2023-2937 CVE-2023-2938 CVE-2023-2939 CVE-2023-2940 CVE-2023-2941 CVE-2023-3079 CVSS scores: CVE-2023-2929 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-2930 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-2931 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-2932 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-2933 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-2934 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-2935 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-2936 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-2937 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-2938 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2023-2939 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-2940 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-2941 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium 114.0.5735.106 (boo#1212044): * CVE-2023-3079: Type Confusion in V8 - Chromium 114.0.5735.90 (boo#1211843): * CSS text-wrap: balance is available * Cookies partitioned by top level site (CHIPS) * New Popover API - Security fixes: * CVE-2023-2929: Out of bounds write in Swiftshader * CVE-2023-2930: Use after free in Extensions * CVE-2023-2931: Use after free in PDF * CVE-2023-2932: Use after free in PDF * CVE-2023-2933: Use after free in PDF * CVE-2023-2934: Out of bounds memory access in Mojo * CVE-2023-2935: Type Confusion in V8 * CVE-2023-2936: Type Confusion in V8 * CVE-2023-2937: Inappropriate implementation in Picture In Picture * CVE-2023-2938: Inappropriate implementation in Picture In Picture * CVE-2023-2939: Insufficient data validation in Installer * CVE-2023-2940: Inappropriate implementation in Downloads * CVE-2023-2941: Inappropriate implementation in Extensions API Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-124=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-114.0.5735.106-bp154.2.90.1 chromium-114.0.5735.106-bp154.2.90.1 References: https://www.suse.com/security/cve/CVE-2023-2929.html https://www.suse.com/security/cve/CVE-2023-2930.html https://www.suse.com/security/cve/CVE-2023-2931.html https://www.suse.com/security/cve/CVE-2023-2932.html https://www.suse.com/security/cve/CVE-2023-2933.html https://www.suse.com/security/cve/CVE-2023-2934.html https://www.suse.com/security/cve/CVE-2023-2935.html https://www.suse.com/security/cve/CVE-2023-2936.html https://www.suse.com/security/cve/CVE-2023-2937.html https://www.suse.com/security/cve/CVE-2023-2938.html https://www.suse.com/security/cve/CVE-2023-2939.html https://www.suse.com/security/cve/CVE-2023-2940.html https://www.suse.com/security/cve/CVE-2023-2941.html https://www.suse.com/security/cve/CVE-2023-3079.html https://bugzilla.suse.com/1211843 https://bugzilla.suse.com/1212044

1 0

openSUSE-RU-2023:0121-1: moderate: Recommended update for openSUSE-build-key
by maintenance＠opensuse.org 07 Jun '23

07 Jun '23

openSUSE Recommended Update: Recommended update for openSUSE-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0121-1 Rating: moderate References: Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for openSUSE-build-key fixes the following issues: - gpg-pubkey-25db7ae0-645bae34.asc: New backports key used since Leap 15.5 - gpg-pubkey-3fa1d6ce-63c9481c.asc: New SLES 15 4096 bit RSA key. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2023-121=1 Package List: - openSUSE Leap 15.4 (noarch): openSUSE-build-key-1.0-lp154.3.11.1 References:

1 0

openSUSE-RU-2023:0118-1: moderate: Recommended update for erofs-utils
by maintenance＠opensuse.org 05 Jun '23

05 Jun '23

openSUSE Recommended Update: Recommended update for erofs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0118-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for erofs-utils fixes the following issues: Update to release 1.6 * support fragments by using `-Efragments` * support compressed data deduplication by using `-Ededupe` * (erofsfuse) support extended attributes * (mkfs.erofs) support multiple algorithms in a single image * (mkfs.erofs) support chunk-based sparse files * (mkfs.erofs) add volume-label setting support * (mkfs.erofs) add uid/gid offsetting support * (mkfs.erofs) pack files entirely by using `-Eall-fragments` * various bugfixes and cleanups; Update to release 1.5 * fsck.erofs: support filesystem extraction * support ztailpacking inline feature for compressed files * dump.erofs: support listing directories * more liberofs APIs (including iterate APIs) * use mtime to allow more control over the timestamps Update to release 1.4 * mkfs.erofs: support pre-defined UUIDs and SELinux file contexts * Support new big pcluster feature together with Linux 5.13+ * Added support to override UID/GID * Introduced preliminary dump.erofs and fsck.erofs * Introduced MicroLZMA compression support Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-118=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): erofs-utils-1.6-bp154.2.3.1 References:

1 0