July 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2023:2987-1: important: Security update for iperf
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Security update for iperf Announcement ID: SUSE-SU-2023:2987-1 Rating: important References: * #1213430 Cross-References: * CVE-2023-38403 CVSS scores: * CVE-2023-38403 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for iperf fixes the following issues: * CVE-2023-38403: Fixed integer overflow leading to heap buffer overflow (bsc#1213430). ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2987=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2987=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-2987=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-2987=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-2987=1 * SUSE Enterprise Storage 7 zypper in -t patch SUSE-Storage-7-2023-2987=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * iperf-debuginfo-3.5-150000.3.3.1 * libiperf0-debuginfo-3.5-150000.3.3.1 * iperf-3.5-150000.3.3.1 * iperf-devel-3.5-150000.3.3.1 * libiperf0-3.5-150000.3.3.1 * iperf-debugsource-3.5-150000.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * iperf-debuginfo-3.5-150000.3.3.1 * libiperf0-debuginfo-3.5-150000.3.3.1 * iperf-3.5-150000.3.3.1 * iperf-devel-3.5-150000.3.3.1 * libiperf0-3.5-150000.3.3.1 * iperf-debugsource-3.5-150000.3.3.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * iperf-debuginfo-3.5-150000.3.3.1 * libiperf0-debuginfo-3.5-150000.3.3.1 * iperf-3.5-150000.3.3.1 * iperf-devel-3.5-150000.3.3.1 * libiperf0-3.5-150000.3.3.1 * iperf-debugsource-3.5-150000.3.3.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * iperf-debuginfo-3.5-150000.3.3.1 * libiperf0-debuginfo-3.5-150000.3.3.1 * iperf-3.5-150000.3.3.1 * iperf-devel-3.5-150000.3.3.1 * libiperf0-3.5-150000.3.3.1 * iperf-debugsource-3.5-150000.3.3.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * iperf-debuginfo-3.5-150000.3.3.1 * libiperf0-debuginfo-3.5-150000.3.3.1 * iperf-3.5-150000.3.3.1 * libiperf0-3.5-150000.3.3.1 * iperf-debugsource-3.5-150000.3.3.1 * SUSE Enterprise Storage 7 (aarch64 x86_64) * iperf-debuginfo-3.5-150000.3.3.1 * libiperf0-debuginfo-3.5-150000.3.3.1 * iperf-3.5-150000.3.3.1 * libiperf0-3.5-150000.3.3.1 * iperf-debugsource-3.5-150000.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38403.html * https://bugzilla.suse.com/show_bug.cgi?id=1213430

1 0

SUSE-SU-2023:2988-1: important: Security update for conmon
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Security update for conmon Announcement ID: SUSE-SU-2023:2988-1 Rating: important References: * #1208737 * #1209307 Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for conmon fixes the following issues: conmon was updated to version 2.1.7: * Bumped go version to 1.19 (bsc#1209307). Bugfixes: * Fixed leaking symbolic links in the opt_socket_path directory * Fixed oom handling issues (bsc#1208737). * Fixed OOM watcher for cgroupv2 `oom_kill` events ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-2988=1 openSUSE-SLE-15.5-2023-2988=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2023-2988=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * conmon-debuginfo-2.1.7-150500.9.3.1 * conmon-2.1.7-150500.9.3.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * conmon-debuginfo-2.1.7-150500.9.3.1 * conmon-2.1.7-150500.9.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1208737 * https://bugzilla.suse.com/show_bug.cgi?id=1209307

1 0

SUSE-SU-2023:2989-1: important: Security update for conmon
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Security update for conmon Announcement ID: SUSE-SU-2023:2989-1 Rating: important References: * #1208737 * #1209307 Affected Products: * Containers Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for conmon fixes the following issues: conmon was updated to version 2.1.7: * Bumped go version to 1.19 (bsc#1209307). Bugfixes: * Fixed leaking symbolic links in the opt_socket_path directory. * Fixed cgroup oom issues (bsc#1208737). * Fixed OOM watcher for cgroupv2 `oom_kill` events. ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2989=1 SUSE-2023-2989=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-2989=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-2989=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-2989=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-2989=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-2989=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-2989=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-2989=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * conmon-debuginfo-2.1.7-150400.3.11.1 * conmon-2.1.7-150400.3.11.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * conmon-debuginfo-2.1.7-150400.3.11.1 * conmon-2.1.7-150400.3.11.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * conmon-debuginfo-2.1.7-150400.3.11.1 * conmon-2.1.7-150400.3.11.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * conmon-debuginfo-2.1.7-150400.3.11.1 * conmon-2.1.7-150400.3.11.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * conmon-debuginfo-2.1.7-150400.3.11.1 * conmon-2.1.7-150400.3.11.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * conmon-debuginfo-2.1.7-150400.3.11.1 * conmon-2.1.7-150400.3.11.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * conmon-debuginfo-2.1.7-150400.3.11.1 * conmon-2.1.7-150400.3.11.1 * Containers Module 15-SP4 (aarch64 ppc64le s390x x86_64) * conmon-debuginfo-2.1.7-150400.3.11.1 * conmon-2.1.7-150400.3.11.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1208737 * https://bugzilla.suse.com/show_bug.cgi?id=1209307

1 0

SUSE-RU-2023:2984-1: moderate: Recommended update for scap-security-guide
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Recommended update for scap-security-guide Announcement ID: SUSE-RU-2023:2984-1 Rating: moderate References: Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.0 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Client Tools for SLE Micro 5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for scap-security-guide fixes the following issues: * scap-security-guide was updated to 0.1.68 (jsc#ECO-3319) * Bump OL8 STIG version to V1R6 * Introduce a Product class, make the project work with it * Introduce Fedora and Firefox CaC profiles for common workstation users * OL7 DISA STIG v2r11 update * Publish rendered policy artifacts * Update ANSSI BP-028 to version 2.0 * scap-security-guide was updated to 0.1.67 (jsc#ECO-3319) * Add utils/controlrefcheck.py * RHEL 9 STIG Update Q1 2023 * Include warning for NetworkManager keyfiles in RHEL9 * OL7 stig v2r10 update * Bump version of OL8 STIG to V1R5 * various enhancements to SLE profiles ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2984=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2984=1 * SUSE Manager Client Tools for SLE Micro 5 zypper in -t patch SUSE-SLE-Manager-Tools-For-Micro-5-2023-2984=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-2984=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-2984=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-2984=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-2984=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2984=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2984=1 * SUSE Linux Enterprise Real Time 15 SP3 zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-2984=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-2984=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-2984=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2984=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-2984=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-2984=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2984=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-2984=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-2984=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-2984=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-2984=1 * SUSE Enterprise Storage 7 zypper in -t patch SUSE-Storage-7-2023-2984=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. ## Package List: * openSUSE Leap 15.4 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * openSUSE Leap 15.5 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Manager Client Tools for SLE Micro 5 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * Basesystem Module 15-SP4 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * Basesystem Module 15-SP5 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Linux Enterprise Real Time 15 SP3 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Manager Proxy 4.2 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Manager Retail Branch Server 4.2 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Manager Server 4.2 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Enterprise Storage 7.1 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE Enterprise Storage 7 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 * SUSE CaaS Platform 4.0 (noarch) * scap-security-guide-0.1.68-150000.1.59.1 * scap-security-guide-ubuntu-0.1.68-150000.1.59.1 * scap-security-guide-debian-0.1.68-150000.1.59.1 * scap-security-guide-redhat-0.1.68-150000.1.59.1 ## References: * https://jira.suse.com/browse/ECO-3319

1 0

SUSE-RU-2023:2985-1: moderate: Recommended update for javassist
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Recommended update for javassist Announcement ID: SUSE-RU-2023:2985-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Manager Server 4.2 * SUSE Manager Server 4.2 Module 4.2 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 An update that can now be installed. ## Description: This update for javassist fixes the following issues: * Clean up the spec file and make it build on a vanilla SLE-12-SP5 ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2985=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2985=1 * SUSE Manager Server 4.2 Module 4.2 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.2-2023-2985=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2023-2985=1 ## Package List: * openSUSE Leap 15.4 (noarch) * javassist-manual-3.29.2-150200.3.10.1 * javassist-3.29.2-150200.3.10.1 * javassist-javadoc-3.29.2-150200.3.10.1 * javassist-demo-3.29.2-150200.3.10.1 * openSUSE Leap 15.5 (noarch) * javassist-manual-3.29.2-150200.3.10.1 * javassist-3.29.2-150200.3.10.1 * javassist-javadoc-3.29.2-150200.3.10.1 * javassist-demo-3.29.2-150200.3.10.1 * SUSE Manager Server 4.2 Module 4.2 (noarch) * javassist-3.29.2-150200.3.10.1 * SUSE Manager Server 4.3 Module 4.3 (noarch) * javassist-3.29.2-150200.3.10.1

1 0

SUSE-SU-2023:2974-1: moderate: Security update for netty, netty-tcnative
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Security update for netty, netty-tcnative Announcement ID: SUSE-SU-2023:2974-1 Rating: moderate References: * #1212637 Cross-References: * CVE-2023-34462 CVSS scores: * CVE-2023-34462 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-34462 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for netty, netty-tcnative fixes the following issues: Upgrade to upstream version 4.1.94: * CVE-2023-34462: Allow to limit the maximum lenght of the ClientHello (bsc#1212637). ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2974=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2974=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-2974=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-2974=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-2974=1 * SUSE Linux Enterprise Real Time 15 SP3 zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-2974=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * netty-tcnative-2.0.61-150200.3.13.1 * netty-4.1.94-150200.4.17.1 * openSUSE Leap 15.4 (noarch) * netty-tcnative-javadoc-2.0.61-150200.3.13.1 * netty-poms-4.1.94-150200.4.17.1 * netty-javadoc-4.1.94-150200.4.17.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * netty-tcnative-2.0.61-150200.3.13.1 * netty-4.1.94-150200.4.17.1 * openSUSE Leap 15.5 (noarch) * netty-tcnative-javadoc-2.0.61-150200.3.13.1 * netty-poms-4.1.94-150200.4.17.1 * netty-javadoc-4.1.94-150200.4.17.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * netty-tcnative-2.0.61-150200.3.13.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * netty-tcnative-2.0.61-150200.3.13.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * netty-4.1.94-150200.4.17.1 * SUSE Package Hub 15 15-SP5 (noarch) * netty-poms-4.1.94-150200.4.17.1 * netty-javadoc-4.1.94-150200.4.17.1 * SUSE Linux Enterprise Real Time 15 SP3 (x86_64) * netty-tcnative-2.0.61-150200.3.13.1 ## References: * https://www.suse.com/security/cve/CVE-2023-34462.html * https://bugzilla.suse.com/show_bug.cgi?id=1212637

1 0

SUSE-RU-2023:2976-1: moderate: Recommended update for gdm
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Recommended update for gdm Announcement ID: SUSE-RU-2023:2976-1 Rating: moderate References: * #1211825 Affected Products: * Desktop Applications Module 15-SP4 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one recommended fix can now be installed. ## Description: This update for gdm fixes the following issues: * Update /var/log/btmp after failed login (bsc#1211825) ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-2976=1 openSUSE-SLE-15.4-2023-2976=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2976=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-2976=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-2976=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gdm-debugsource-41.3-150400.4.9.1 * libgdm1-41.3-150400.4.9.1 * gdm-debuginfo-41.3-150400.4.9.1 * gdm-devel-41.3-150400.4.9.1 * gdm-41.3-150400.4.9.1 * libgdm1-debuginfo-41.3-150400.4.9.1 * typelib-1_0-Gdm-1_0-41.3-150400.4.9.1 * openSUSE Leap 15.4 (noarch) * gdmflexiserver-41.3-150400.4.9.1 * gdm-schema-41.3-150400.4.9.1 * gdm-branding-upstream-41.3-150400.4.9.1 * gdm-lang-41.3-150400.4.9.1 * gdm-systemd-41.3-150400.4.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * gdm-debugsource-41.3-150400.4.9.1 * libgdm1-41.3-150400.4.9.1 * gdm-debuginfo-41.3-150400.4.9.1 * gdm-devel-41.3-150400.4.9.1 * gdm-41.3-150400.4.9.1 * libgdm1-debuginfo-41.3-150400.4.9.1 * typelib-1_0-Gdm-1_0-41.3-150400.4.9.1 * openSUSE Leap 15.5 (noarch) * gdmflexiserver-41.3-150400.4.9.1 * gdm-schema-41.3-150400.4.9.1 * gdm-branding-upstream-41.3-150400.4.9.1 * gdm-lang-41.3-150400.4.9.1 * gdm-systemd-41.3-150400.4.9.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * gdm-debugsource-41.3-150400.4.9.1 * libgdm1-41.3-150400.4.9.1 * gdm-debuginfo-41.3-150400.4.9.1 * gdm-devel-41.3-150400.4.9.1 * gdm-41.3-150400.4.9.1 * libgdm1-debuginfo-41.3-150400.4.9.1 * typelib-1_0-Gdm-1_0-41.3-150400.4.9.1 * Desktop Applications Module 15-SP4 (noarch) * gdmflexiserver-41.3-150400.4.9.1 * gdm-schema-41.3-150400.4.9.1 * gdm-systemd-41.3-150400.4.9.1 * gdm-lang-41.3-150400.4.9.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gdm-debugsource-41.3-150400.4.9.1 * libgdm1-41.3-150400.4.9.1 * gdm-debuginfo-41.3-150400.4.9.1 * gdm-devel-41.3-150400.4.9.1 * gdm-41.3-150400.4.9.1 * libgdm1-debuginfo-41.3-150400.4.9.1 * typelib-1_0-Gdm-1_0-41.3-150400.4.9.1 * Desktop Applications Module 15-SP5 (noarch) * gdmflexiserver-41.3-150400.4.9.1 * gdm-schema-41.3-150400.4.9.1 * gdm-systemd-41.3-150400.4.9.1 * gdm-lang-41.3-150400.4.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1211825

1 0

SUSE-RU-2023:2977-1: moderate: Recommended update for wayland
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Recommended update for wayland Announcement ID: SUSE-RU-2023:2977-1 Rating: moderate References: * #1194190 Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has one recommended fix can now be installed. ## Description: This update for wayland fixes the following issues: * Update to version 1.21 (PED-2423) * New wl_pointer high-resolution scroll event, new convenience functions, collection of bug fixes ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-2977=1 openSUSE-SLE-15.4-2023-2977=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-2977=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-2977=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-2977=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-2977=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-2977=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-2977=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-2977=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libwayland-server0-debuginfo-1.21.0-150400.3.6.1 * wayland-devel-1.21.0-150400.3.6.1 * libwayland-server0-1.21.0-150400.3.6.1 * wayland-debugsource-1.21.0-150400.3.6.1 * wayland-devel-debuginfo-1.21.0-150400.3.6.1 * libwayland-egl1-99~1.21.0-150400.3.6.1 * libwayland-client0-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-debuginfo-1.21.0-150400.3.6.1 * libwayland-client0-1.21.0-150400.3.6.1 * libwayland-egl1-debuginfo-99~1.21.0-150400.3.6.1 * libwayland-cursor0-1.21.0-150400.3.6.1 * openSUSE Leap 15.4 (x86_64) * libwayland-client0-32bit-1.21.0-150400.3.6.1 * libwayland-egl1-32bit-99~1.21.0-150400.3.6.1 * wayland-devel-32bit-1.21.0-150400.3.6.1 * libwayland-server0-32bit-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-32bit-debuginfo-1.21.0-150400.3.6.1 * wayland-devel-32bit-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-32bit-1.21.0-150400.3.6.1 * libwayland-egl1-32bit-debuginfo-99~1.21.0-150400.3.6.1 * libwayland-client0-32bit-debuginfo-1.21.0-150400.3.6.1 * libwayland-server0-32bit-1.21.0-150400.3.6.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libwayland-client0-64bit-1.21.0-150400.3.6.1 * libwayland-client0-64bit-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-64bit-1.21.0-150400.3.6.1 * libwayland-egl1-64bit-debuginfo-99~1.21.0-150400.3.6.1 * libwayland-egl1-64bit-99~1.21.0-150400.3.6.1 * libwayland-server0-64bit-debuginfo-1.21.0-150400.3.6.1 * wayland-devel-64bit-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-64bit-debuginfo-1.21.0-150400.3.6.1 * wayland-devel-64bit-1.21.0-150400.3.6.1 * libwayland-server0-64bit-1.21.0-150400.3.6.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libwayland-server0-debuginfo-1.21.0-150400.3.6.1 * libwayland-server0-1.21.0-150400.3.6.1 * wayland-debugsource-1.21.0-150400.3.6.1 * libwayland-egl1-99~1.21.0-150400.3.6.1 * libwayland-client0-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-debuginfo-1.21.0-150400.3.6.1 * libwayland-client0-1.21.0-150400.3.6.1 * libwayland-egl1-debuginfo-99~1.21.0-150400.3.6.1 * libwayland-cursor0-1.21.0-150400.3.6.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libwayland-server0-debuginfo-1.21.0-150400.3.6.1 * libwayland-server0-1.21.0-150400.3.6.1 * wayland-debugsource-1.21.0-150400.3.6.1 * libwayland-egl1-99~1.21.0-150400.3.6.1 * libwayland-client0-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-debuginfo-1.21.0-150400.3.6.1 * libwayland-client0-1.21.0-150400.3.6.1 * libwayland-egl1-debuginfo-99~1.21.0-150400.3.6.1 * libwayland-cursor0-1.21.0-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libwayland-server0-debuginfo-1.21.0-150400.3.6.1 * libwayland-server0-1.21.0-150400.3.6.1 * wayland-debugsource-1.21.0-150400.3.6.1 * libwayland-egl1-99~1.21.0-150400.3.6.1 * libwayland-client0-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-debuginfo-1.21.0-150400.3.6.1 * libwayland-client0-1.21.0-150400.3.6.1 * libwayland-egl1-debuginfo-99~1.21.0-150400.3.6.1 * libwayland-cursor0-1.21.0-150400.3.6.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libwayland-server0-debuginfo-1.21.0-150400.3.6.1 * libwayland-server0-1.21.0-150400.3.6.1 * wayland-debugsource-1.21.0-150400.3.6.1 * libwayland-egl1-99~1.21.0-150400.3.6.1 * libwayland-client0-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-debuginfo-1.21.0-150400.3.6.1 * libwayland-client0-1.21.0-150400.3.6.1 * libwayland-egl1-debuginfo-99~1.21.0-150400.3.6.1 * libwayland-cursor0-1.21.0-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libwayland-server0-debuginfo-1.21.0-150400.3.6.1 * libwayland-server0-1.21.0-150400.3.6.1 * wayland-debugsource-1.21.0-150400.3.6.1 * libwayland-egl1-99~1.21.0-150400.3.6.1 * libwayland-client0-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-debuginfo-1.21.0-150400.3.6.1 * libwayland-client0-1.21.0-150400.3.6.1 * libwayland-egl1-debuginfo-99~1.21.0-150400.3.6.1 * libwayland-cursor0-1.21.0-150400.3.6.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libwayland-server0-debuginfo-1.21.0-150400.3.6.1 * libwayland-server0-1.21.0-150400.3.6.1 * wayland-debugsource-1.21.0-150400.3.6.1 * libwayland-egl1-99~1.21.0-150400.3.6.1 * libwayland-client0-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-debuginfo-1.21.0-150400.3.6.1 * libwayland-client0-1.21.0-150400.3.6.1 * libwayland-egl1-debuginfo-99~1.21.0-150400.3.6.1 * libwayland-cursor0-1.21.0-150400.3.6.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libwayland-server0-debuginfo-1.21.0-150400.3.6.1 * wayland-devel-1.21.0-150400.3.6.1 * libwayland-server0-1.21.0-150400.3.6.1 * wayland-debugsource-1.21.0-150400.3.6.1 * wayland-devel-debuginfo-1.21.0-150400.3.6.1 * libwayland-egl1-99~1.21.0-150400.3.6.1 * libwayland-client0-debuginfo-1.21.0-150400.3.6.1 * libwayland-cursor0-debuginfo-1.21.0-150400.3.6.1 * libwayland-client0-1.21.0-150400.3.6.1 * libwayland-egl1-debuginfo-99~1.21.0-150400.3.6.1 * libwayland-cursor0-1.21.0-150400.3.6.1 * Basesystem Module 15-SP4 (x86_64) * libwayland-server0-32bit-debuginfo-1.21.0-150400.3.6.1 * libwayland-client0-32bit-1.21.0-150400.3.6.1 * libwayland-client0-32bit-debuginfo-1.21.0-150400.3.6.1 * libwayland-server0-32bit-1.21.0-150400.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1194190 * https://jira.suse.com/browse/PED-2423

1 0

SUSE-RU-2023:2978-1: moderate: Recommended update for rust, rust1.71
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Recommended update for rust, rust1.71 Announcement ID: SUSE-RU-2023:2978-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for rust and rust1.71 fixes the following issues: This update ships rust1.71. # Version 1.71.0 (2023-07-13) ## Language * Stabilize `raw-dylib`, `link_ordinal`, `import_name_type` and `-Cdlltool`. * Uplift `clippy::{drop,forget}_{ref,copy}` lints. * Type inference is more conservative around constrained vars. * Use fulfillment to check `Drop` impl compatibility ## Compiler * Evaluate place expression in `PlaceMention` making `let _ =` patterns more consistent with respect to the borrow checker. * Add `--print deployment-target` flag for Apple targets. * Stabilize `extern "C-unwind"` and friends. The existing `extern "C"` etc. may change behavior for cross-language unwinding in a future release. * Update the version of musl used on `*-linux-musl` targets to 1.2.3 enabling time64 on 32-bit systems. * Stabilize `debugger_visualizer` for embedding metadata like Microsoft's Natvis. * Enable flatten-format-args by default. * Make `Self` respect tuple constructor privacy. * Improve niche placement by trying two strategies and picking the better result. * Use `apple-m1` as the target CPU for `aarch64-apple-darwin`. * Add Tier 3 support for the `x86_64h-apple-darwin` target. * Promote `loongarch64-unknown-linux-gnu` to Tier 2 with host tools. Refer to Rust's [platform support page][platform-support-doc] for more information on Rust's tiered platform support. ## Libraries * Rework handling of recursive panics. Additional panics are allowed while unwinding, as long as they are caught before escaping a `Drop` implementation, but panicking within a panic hook is now an immediate abort. * Loosen `From<&[T]> for Box<[T]>` bound to `T: Clone`. * Remove unnecessary `T: Send` bound in `Error for mpsc::SendError<T>` and `TrySendError<T>`. * Fix docs for `alloc::realloc` to match `Layout` requirements that the size must not exceed `isize::MAX`. * Document `const {}` syntax for `std::thread_local`. This syntax was stabilized in Rust 1.59, but not previously mentioned in release notes. ## Stabilized APIs * `CStr::is_empty`](https://doc.rust- lang.org/stable/std/ffi/struct.CStr.html#method.is_empty) * `BuildHasher::hash_one`](https://doc.rust- lang.org/stable/std/hash/trait.BuildHasher.html#method.hash_one) * `NonZeroI*::is_positive`](https://doc.rust- lang.org/stable/std/num/struct.NonZeroI32.html#method.is_positive) * `NonZeroI*::is_negative`](https://doc.rust- lang.org/stable/std/num/struct.NonZeroI32.html#method.is_negative) * `NonZeroI*::checked_neg`](https://doc.rust- lang.org/stable/std/num/struct.NonZeroI32.html#method.checked_neg) * `NonZeroI*::overflowing_neg`](https://doc.rust- lang.org/stable/std/num/struct.NonZeroI32.html#method.overflowing_neg) * `NonZeroI*::saturating_neg`](https://doc.rust- lang.org/stable/std/num/struct.NonZeroI32.html#method.saturating_neg) * `NonZeroI*::wrapping_neg`](https://doc.rust- lang.org/stable/std/num/struct.NonZeroI32.html#method.wrapping_neg) * `Neg for NonZeroI*`](https://doc.rust- lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-NonZeroI32) * `Neg for &NonZeroI*`](https://doc.rust- lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-%26NonZeroI32) * `From<[T; N]> for (T...)`](https://doc.rust- lang.org/stable/std/primitive.array.html#impl-From%3C%5BT;+1%5D%3E-for-(T,)) (array to N-tuple for N in 1..=12) * `From<(T...)> for [T; N]`](https://doc.rust- lang.org/stable/std/primitive.array.html#impl-From%3C(T,)%3E-for-%5BT;+1%5D) (N-tuple to array for N in 1..=12) * `windows::io::AsHandle for Box<T>`](https://doc.rust- lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for- Box%3CT%3E) * `windows::io::AsHandle for Rc<T>`](https://doc.rust- lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for- Rc%3CT%3E) * `windows::io::AsHandle for Arc<T>`](https://doc.rust- lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for- Arc%3CT%3E) * `windows::io::AsSocket for Box<T>`](https://doc.rust- lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for- Box%3CT%3E) * `windows::io::AsSocket for Rc<T>`](https://doc.rust- lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for- Rc%3CT%3E) * `windows::io::AsSocket for Arc<T>`](https://doc.rust- lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for- Arc%3CT%3E) These APIs are now stable in const contexts: * `<*const T>::read`](https://doc.rust- lang.org/stable/std/primitive.pointer.html#method.read) * `<*const T>::read_unaligned`](https://doc.rust- lang.org/stable/std/primitive.pointer.html#method.read_unaligned) * `<*mut T>::read`](https://doc.rust- lang.org/stable/std/primitive.pointer.html#method.read-1) * `<*mut T>::read_unaligned`](https://doc.rust- lang.org/stable/std/primitive.pointer.html#method.read_unaligned-1) * `ptr::read`](https://doc.rust-lang.org/stable/std/ptr/fn.read.html) * `ptr::read_unaligned`](https://doc.rust- lang.org/stable/std/ptr/fn.read_unaligned.html) * `<[T]>::split_at`](https://doc.rust- lang.org/stable/std/primitive.slice.html#method.split_at) ## Cargo * Allow named debuginfo options in `Cargo.toml`. * Add `workspace_default_members` to the output of `cargo metadata`. * `cargo add` now considers `rust-version` when selecting packages. * Automatically inherit workspace fields when running `cargo new`/`cargo init`. ## Rustdoc * Add a new `rustdoc::unescaped_backticks` lint for broken inline code. * Support strikethrough with single tildes.](https://github.com/rust- lang/rust/pull/111152/) (`~~old~~` vs. `~new~`) ## Misc ## Compatibility Notes * Remove structural match from `TypeId`. Code that uses a constant `TypeId` in a pattern will potentially be broken. Known cases have already been fixed -- in particular, users of the `log` crate's `kv_unstable` feature should update to `log v0.4.18` or later. * Add a `sysroot` crate to represent the standard library crates. This does not affect stable users, but may require adjustment in tools that build their own standard library. * Cargo optimizes its usage under `rustup`. When Cargo detects it will run `rustc` pointing to a rustup proxy, it'll try bypassing the proxy and use the underlying binary directly. There are assumptions around the interaction with rustup and `RUSTUP_TOOLCHAIN`. However, it's not expected to affect normal users. * When querying a package, Cargo tries only the original name, all hyphens, and all underscores to handle misspellings. Previously, Cargo tried each combination of hyphens and underscores, causing excessive requests to crates.io. * Cargo now disallows `RUSTUP_HOME` and `RUSTUP_TOOLCHAIN` in the `[env]` configuration table. This is considered to be not a use case Cargo would like to support, since it will likely cause problems or lead to confusion. ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-2978=1 openSUSE-SLE-15.4-2023-2978=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2978=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-2978=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-2978=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * rust-1.71.0-150400.24.21.1 * cargo-1.71.0-150400.24.21.1 * cargo1.71-1.71.0-150400.9.3.1 * rust1.71-debuginfo-1.71.0-150400.9.3.1 * cargo1.71-debuginfo-1.71.0-150400.9.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586 nosrc) * rust1.71-1.71.0-150400.9.3.1 * openSUSE Leap 15.4 (nosrc) * rust1.71-test-1.71.0-150400.9.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rust-1.71.0-150400.24.21.1 * cargo-1.71.0-150400.24.21.1 * cargo1.71-1.71.0-150400.9.3.1 * rust1.71-debuginfo-1.71.0-150400.9.3.1 * cargo1.71-debuginfo-1.71.0-150400.9.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.71-1.71.0-150400.9.3.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * rust-1.71.0-150400.24.21.1 * cargo-1.71.0-150400.24.21.1 * cargo1.71-1.71.0-150400.9.3.1 * rust1.71-debuginfo-1.71.0-150400.9.3.1 * cargo1.71-debuginfo-1.71.0-150400.9.3.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.71-1.71.0-150400.9.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rust-1.71.0-150400.24.21.1 * cargo-1.71.0-150400.24.21.1 * cargo1.71-1.71.0-150400.9.3.1 * rust1.71-debuginfo-1.71.0-150400.9.3.1 * cargo1.71-debuginfo-1.71.0-150400.9.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.71-1.71.0-150400.9.3.1 ## References: * https://jira.suse.com/browse/SLE-18626

1 0

SUSE-SU-2023:2979-1: moderate: Security update for mysql-connector-java
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Security update for mysql-connector-java Announcement ID: SUSE-SU-2023:2979-1 Rating: moderate References: * #1211247 Cross-References: * CVE-2023-21971 CVSS scores: * CVE-2023-21971 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H * CVE-2023-21971 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 An update that solves one vulnerability can now be installed. ## Description: This update for mysql-connector-java fixes the following issues: * CVE-2023-21971: Fixed a denial-of-service vulnerability in the java.sql.DriverManager.getConnection() method when used with untrusted inputs (bsc#1211247). ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2979=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2979=1 ## Package List: * openSUSE Leap 15.4 (noarch) * mysql-connector-java-8.0.33-150200.3.18.1 * openSUSE Leap 15.5 (noarch) * mysql-connector-java-8.0.33-150200.3.18.1 ## References: * https://www.suse.com/security/cve/CVE-2023-21971.html * https://bugzilla.suse.com/show_bug.cgi?id=1211247

1 0