July 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2023:2980-1: moderate: Security update for php7
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Security update for php7 Announcement ID: SUSE-SU-2023:2980-1 Rating: moderate References: * #1212349 Cross-References: * CVE-2023-3247 CVSS scores: * CVE-2023-3247 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2023-3247 ( NVD ): 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Manager Server 4.2 An update that solves one vulnerability can now be installed. ## Description: This update for php7 fixes the following issues: * CVE-2023-3247: Fixed missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (bsc#1212349). ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-2980=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2980=1 ## Package List: * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * php7-mysql-7.4.33-150200.3.57.1 * php7-odbc-7.4.33-150200.3.57.1 * php7-fastcgi-debuginfo-7.4.33-150200.3.57.1 * php7-ldap-debuginfo-7.4.33-150200.3.57.1 * php7-debugsource-7.4.33-150200.3.57.1 * php7-xmlreader-7.4.33-150200.3.57.1 * php7-enchant-debuginfo-7.4.33-150200.3.57.1 * php7-enchant-7.4.33-150200.3.57.1 * php7-mbstring-7.4.33-150200.3.57.1 * php7-mysql-debuginfo-7.4.33-150200.3.57.1 * php7-sqlite-debuginfo-7.4.33-150200.3.57.1 * php7-dba-debuginfo-7.4.33-150200.3.57.1 * php7-7.4.33-150200.3.57.1 * php7-xmlrpc-7.4.33-150200.3.57.1 * php7-ctype-7.4.33-150200.3.57.1 * php7-intl-debuginfo-7.4.33-150200.3.57.1 * php7-sysvmsg-debuginfo-7.4.33-150200.3.57.1 * php7-sockets-7.4.33-150200.3.57.1 * php7-gmp-7.4.33-150200.3.57.1 * php7-phar-debuginfo-7.4.33-150200.3.57.1 * php7-bz2-debuginfo-7.4.33-150200.3.57.1 * php7-iconv-7.4.33-150200.3.57.1 * php7-calendar-debuginfo-7.4.33-150200.3.57.1 * php7-pdo-7.4.33-150200.3.57.1 * php7-sqlite-7.4.33-150200.3.57.1 * php7-fpm-7.4.33-150200.3.57.1 * php7-iconv-debuginfo-7.4.33-150200.3.57.1 * php7-openssl-debuginfo-7.4.33-150200.3.57.1 * php7-ldap-7.4.33-150200.3.57.1 * php7-tokenizer-7.4.33-150200.3.57.1 * php7-soap-debuginfo-7.4.33-150200.3.57.1 * php7-zip-debuginfo-7.4.33-150200.3.57.1 * php7-curl-debuginfo-7.4.33-150200.3.57.1 * php7-dom-debuginfo-7.4.33-150200.3.57.1 * php7-xsl-debuginfo-7.4.33-150200.3.57.1 * php7-openssl-7.4.33-150200.3.57.1 * php7-json-debuginfo-7.4.33-150200.3.57.1 * php7-exif-7.4.33-150200.3.57.1 * php7-gmp-debuginfo-7.4.33-150200.3.57.1 * php7-opcache-7.4.33-150200.3.57.1 * php7-sysvshm-debuginfo-7.4.33-150200.3.57.1 * php7-curl-7.4.33-150200.3.57.1 * php7-fileinfo-debuginfo-7.4.33-150200.3.57.1 * php7-ftp-debuginfo-7.4.33-150200.3.57.1 * php7-gd-7.4.33-150200.3.57.1 * php7-sysvshm-7.4.33-150200.3.57.1 * php7-bcmath-debuginfo-7.4.33-150200.3.57.1 * php7-pgsql-debuginfo-7.4.33-150200.3.57.1 * php7-pdo-debuginfo-7.4.33-150200.3.57.1 * php7-xsl-7.4.33-150200.3.57.1 * php7-odbc-debuginfo-7.4.33-150200.3.57.1 * php7-fastcgi-7.4.33-150200.3.57.1 * php7-posix-7.4.33-150200.3.57.1 * php7-json-7.4.33-150200.3.57.1 * php7-mbstring-debuginfo-7.4.33-150200.3.57.1 * apache2-mod_php7-7.4.33-150200.3.57.1 * php7-pcntl-7.4.33-150200.3.57.1 * php7-xmlreader-debuginfo-7.4.33-150200.3.57.1 * php7-sodium-7.4.33-150200.3.57.1 * php7-dba-7.4.33-150200.3.57.1 * php7-posix-debuginfo-7.4.33-150200.3.57.1 * php7-shmop-7.4.33-150200.3.57.1 * php7-snmp-debuginfo-7.4.33-150200.3.57.1 * php7-devel-7.4.33-150200.3.57.1 * php7-sysvmsg-7.4.33-150200.3.57.1 * php7-tokenizer-debuginfo-7.4.33-150200.3.57.1 * php7-sysvsem-debuginfo-7.4.33-150200.3.57.1 * php7-xmlwriter-debuginfo-7.4.33-150200.3.57.1 * php7-zlib-debuginfo-7.4.33-150200.3.57.1 * php7-intl-7.4.33-150200.3.57.1 * php7-calendar-7.4.33-150200.3.57.1 * php7-fpm-debuginfo-7.4.33-150200.3.57.1 * php7-xmlrpc-debuginfo-7.4.33-150200.3.57.1 * php7-readline-debuginfo-7.4.33-150200.3.57.1 * php7-snmp-7.4.33-150200.3.57.1 * php7-exif-debuginfo-7.4.33-150200.3.57.1 * php7-ftp-7.4.33-150200.3.57.1 * php7-bz2-7.4.33-150200.3.57.1 * php7-dom-7.4.33-150200.3.57.1 * php7-phar-7.4.33-150200.3.57.1 * php7-xmlwriter-7.4.33-150200.3.57.1 * php7-pgsql-7.4.33-150200.3.57.1 * php7-opcache-debuginfo-7.4.33-150200.3.57.1 * php7-fileinfo-7.4.33-150200.3.57.1 * php7-bcmath-7.4.33-150200.3.57.1 * php7-soap-7.4.33-150200.3.57.1 * php7-debuginfo-7.4.33-150200.3.57.1 * php7-zip-7.4.33-150200.3.57.1 * php7-sockets-debuginfo-7.4.33-150200.3.57.1 * php7-gettext-debuginfo-7.4.33-150200.3.57.1 * php7-ctype-debuginfo-7.4.33-150200.3.57.1 * php7-sysvsem-7.4.33-150200.3.57.1 * php7-tidy-7.4.33-150200.3.57.1 * php7-zlib-7.4.33-150200.3.57.1 * php7-pcntl-debuginfo-7.4.33-150200.3.57.1 * php7-gettext-7.4.33-150200.3.57.1 * php7-sodium-debuginfo-7.4.33-150200.3.57.1 * php7-shmop-debuginfo-7.4.33-150200.3.57.1 * php7-gd-debuginfo-7.4.33-150200.3.57.1 * php7-tidy-debuginfo-7.4.33-150200.3.57.1 * apache2-mod_php7-debuginfo-7.4.33-150200.3.57.1 * php7-readline-7.4.33-150200.3.57.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * php7-firebird-debuginfo-7.4.33-150200.3.57.1 * php7-firebird-7.4.33-150200.3.57.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3247.html * https://bugzilla.suse.com/show_bug.cgi?id=1212349

1 0

SUSE-SU-2023:2981-1: moderate: Security update for libqt5-qtsvg
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Security update for libqt5-qtsvg Announcement ID: SUSE-SU-2023:2981-1 Rating: moderate References: * #1196654 * #1211298 Cross-References: * CVE-2021-45930 * CVE-2023-32573 CVSS scores: * CVE-2021-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2021-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-32573 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2023-32573 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Desktop Applications Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for libqt5-qtsvg fixes the following issues: * CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial- of-service (bsc#1196654). * CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm variable (bsc#1211298). ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-2981=1 openSUSE-SLE-15.4-2023-2981=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-2981=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-2981=1 ## Package List: * openSUSE Leap 15.4 (x86_64) * libQt5Svg5-32bit-5.15.2+kde16-150400.3.3.1 * libqt5-qtsvg-devel-32bit-5.15.2+kde16-150400.3.3.1 * libQt5Svg5-32bit-debuginfo-5.15.2+kde16-150400.3.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libqt5-qtsvg-examples-debuginfo-5.15.2+kde16-150400.3.3.1 * libqt5-qtsvg-devel-5.15.2+kde16-150400.3.3.1 * libqt5-qtsvg-examples-5.15.2+kde16-150400.3.3.1 * libqt5-qtsvg-debugsource-5.15.2+kde16-150400.3.3.1 * libQt5Svg5-5.15.2+kde16-150400.3.3.1 * libQt5Svg5-debuginfo-5.15.2+kde16-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * libqt5-qtsvg-private-headers-devel-5.15.2+kde16-150400.3.3.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libQt5Svg5-64bit-5.15.2+kde16-150400.3.3.1 * libQt5Svg5-64bit-debuginfo-5.15.2+kde16-150400.3.3.1 * libqt5-qtsvg-devel-64bit-5.15.2+kde16-150400.3.3.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libqt5-qtsvg-devel-5.15.2+kde16-150400.3.3.1 * libQt5Svg5-5.15.2+kde16-150400.3.3.1 * libQt5Svg5-debuginfo-5.15.2+kde16-150400.3.3.1 * libqt5-qtsvg-debugsource-5.15.2+kde16-150400.3.3.1 * Desktop Applications Module 15-SP4 (noarch) * libqt5-qtsvg-private-headers-devel-5.15.2+kde16-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2021-45930.html * https://www.suse.com/security/cve/CVE-2023-32573.html * https://bugzilla.suse.com/show_bug.cgi?id=1196654 * https://bugzilla.suse.com/show_bug.cgi?id=1211298

1 0

SUSE-SU-2023:2982-1: important: Security update for libqt5-qtbase
by maintenance＠opensuse.org 26 Jul '23

26 Jul '23

# Security update for libqt5-qtbase Announcement ID: SUSE-SU-2023:2982-1 Rating: important References: * #1209616 * #1211024 * #1211642 * #1211797 * #1211798 * #1211994 * #1213326 Cross-References: * CVE-2023-24607 * CVE-2023-32762 * CVE-2023-32763 * CVE-2023-33285 * CVE-2023-34410 * CVE-2023-38197 CVSS scores: * CVE-2023-24607 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-32762 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2023-32762 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-32763 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-32763 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-33285 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2023-33285 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-34410 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-34410 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-38197 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-38197 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Desktop Applications Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves six vulnerabilities and has one fix can now be installed. ## Description: This update for libqt5-qtbase fixes the following issues: * CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616). * CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport- security (HSTS) header (bsc#1211797). * CVE-2023-32763: Fixed buffer overflow when rendering an SVG file with an image inside it (bsc#1211798). * CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642). * CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994). * CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326). ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-2982=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-2982=1 openSUSE-SLE-15.4-2023-2982=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-2982=1 ## Package List: * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libQt5Sql5-mysql-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-mysql-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-postgresql-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-unixODBC-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-platformtheme-gtk3-debuginfo-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-debugsource-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-postgresql-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-unixODBC-debuginfo-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-platformtheme-gtk3-5.15.2+kde294-150400.6.6.1 * libQt5OpenGLExtensions-devel-static-5.15.2+kde294-150400.6.6.1 * openSUSE Leap 15.4 (x86_64) * libQt5Sql5-postgresql-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Network-devel-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent5-32bit-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL-devel-32bit-5.15.2+kde294-150400.6.6.1 * libQt5DBus5-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-unixODBC-32bit-5.15.2+kde294-150400.6.6.1 * libQt5DBus-devel-32bit-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport5-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-unixODBC-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL5-32bit-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-examples-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Network5-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Xml5-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Network5-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Xml5-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Test5-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Test5-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-postgresql-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5DBus-devel-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-mysql-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5OpenGLExtensions-devel-static-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Gui5-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-mysql-32bit-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport5-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Core5-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-sqlite-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Gui-devel-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql-devel-32bit-5.15.2+kde294-150400.6.6.1 * libQt5PlatformSupport-devel-static-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Core5-32bit-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport-devel-32bit-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL5-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Widgets-devel-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent-devel-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Widgets5-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Bootstrap-devel-static-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Gui5-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Core-devel-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent5-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Test-devel-32bit-5.15.2+kde294-150400.6.6.1 * libQt5DBus5-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Widgets5-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Xml-devel-32bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-sqlite-32bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-examples-32bit-5.15.2+kde294-150400.6.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libQt5Widgets5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-postgresql-debuginfo-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-examples-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Widgets5-5.15.2+kde294-150400.6.6.1 * libQt5Gui5-5.15.2+kde294-150400.6.6.1 * libQt5DBus5-5.15.2+kde294-150400.6.6.1 * libQt5Sql-devel-5.15.2+kde294-150400.6.6.1 * libQt5Network5-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-common-devel-debuginfo-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-platformtheme-xdgdesktopportal-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5DBus-devel-debuginfo-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-platformtheme-gtk3-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-mysql-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport5-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-mysql-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Test5-5.15.2+kde294-150400.6.6.1 * libQt5PlatformHeaders-devel-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-platformtheme-xdgdesktopportal-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-platformtheme-gtk3-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5DBus5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-sqlite-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Network-devel-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-unixODBC-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport-devel-5.15.2+kde294-150400.6.6.1 * libQt5Gui-devel-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-examples-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Widgets-devel-5.15.2+kde294-150400.6.6.1 * libQt5Network5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Core5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL5-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-postgresql-5.15.2+kde294-150400.6.6.1 * libQt5Test5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Test-devel-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-sqlite-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent-devel-5.15.2+kde294-150400.6.6.1 * libQt5OpenGLExtensions-devel-static-5.15.2+kde294-150400.6.6.1 * libQt5Bootstrap-devel-static-5.15.2+kde294-150400.6.6.1 * libQt5Xml5-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL-devel-5.15.2+kde294-150400.6.6.1 * libQt5Xml5-debuginfo-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-devel-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent5-5.15.2+kde294-150400.6.6.1 * libQt5DBus-devel-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-unixODBC-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-debugsource-5.15.2+kde294-150400.6.6.1 * libQt5Core-devel-5.15.2+kde294-150400.6.6.1 * libQt5Gui5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5KmsSupport-devel-static-5.15.2+kde294-150400.6.6.1 * libQt5Xml-devel-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-common-devel-5.15.2+kde294-150400.6.6.1 * libQt5PlatformSupport-devel-static-5.15.2+kde294-150400.6.6.1 * libQt5Core5-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent5-debuginfo-5.15.2+kde294-150400.6.6.1 * openSUSE Leap 15.4 (noarch) * libQt5Widgets-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5Network-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5KmsSupport-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5Test-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5PlatformSupport-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5Sql-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5DBus-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5Core-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5Gui-private-headers-devel-5.15.2+kde294-150400.6.6.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libQt5DBus-devel-64bit-5.15.2+kde294-150400.6.6.1 * libQt5DBus5-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-unixODBC-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Test5-64bit-5.15.2+kde294-150400.6.6.1 * libQt5PlatformSupport-devel-static-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-sqlite-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-postgresql-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Network5-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Test5-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Gui5-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Gui5-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Core5-64bit-5.15.2+kde294-150400.6.6.1 * libQt5DBus-devel-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql-devel-64bit-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-examples-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Xml5-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5OpenGLExtensions-devel-static-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-unixODBC-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport5-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-mysql-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5DBus5-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-sqlite-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport-devel-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-postgresql-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Core5-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Network-devel-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-mysql-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Widgets5-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Bootstrap-devel-static-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent5-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Gui-devel-64bit-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL-devel-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Widgets-devel-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-examples-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Network5-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Xml5-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent5-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Widgets5-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Xml-devel-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent-devel-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Core-devel-64bit-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL5-64bit-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL5-64bit-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport5-64bit-5.15.2+kde294-150400.6.6.1 * libQt5Test-devel-64bit-5.15.2+kde294-150400.6.6.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libQt5Widgets5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Widgets5-5.15.2+kde294-150400.6.6.1 * libQt5Gui5-5.15.2+kde294-150400.6.6.1 * libQt5DBus5-5.15.2+kde294-150400.6.6.1 * libQt5Sql-devel-5.15.2+kde294-150400.6.6.1 * libQt5Network5-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-common-devel-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5DBus-devel-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Test5-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport5-5.15.2+kde294-150400.6.6.1 * libQt5PlatformHeaders-devel-5.15.2+kde294-150400.6.6.1 * libQt5DBus5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-sqlite-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Network-devel-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport-devel-5.15.2+kde294-150400.6.6.1 * libQt5Gui-devel-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Widgets-devel-5.15.2+kde294-150400.6.6.1 * libQt5Network5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Core5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL5-5.15.2+kde294-150400.6.6.1 * libQt5Test5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5Test-devel-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-sqlite-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent-devel-5.15.2+kde294-150400.6.6.1 * libQt5Xml5-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL-devel-5.15.2+kde294-150400.6.6.1 * libQt5Xml5-debuginfo-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-devel-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent5-5.15.2+kde294-150400.6.6.1 * libQt5DBus-devel-5.15.2+kde294-150400.6.6.1 * libQt5Sql5-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-debugsource-5.15.2+kde294-150400.6.6.1 * libQt5Core-devel-5.15.2+kde294-150400.6.6.1 * libQt5Gui5-debuginfo-5.15.2+kde294-150400.6.6.1 * libQt5KmsSupport-devel-static-5.15.2+kde294-150400.6.6.1 * libQt5Xml-devel-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-common-devel-5.15.2+kde294-150400.6.6.1 * libQt5PlatformSupport-devel-static-5.15.2+kde294-150400.6.6.1 * libQt5Core5-5.15.2+kde294-150400.6.6.1 * libQt5Concurrent5-debuginfo-5.15.2+kde294-150400.6.6.1 * Basesystem Module 15-SP4 (noarch) * libQt5Widgets-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5Network-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libqt5-qtbase-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5KmsSupport-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5PrintSupport-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5Test-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5OpenGL-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5PlatformSupport-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5Sql-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5DBus-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5Core-private-headers-devel-5.15.2+kde294-150400.6.6.1 * libQt5Gui-private-headers-devel-5.15.2+kde294-150400.6.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-24607.html * https://www.suse.com/security/cve/CVE-2023-32762.html * https://www.suse.com/security/cve/CVE-2023-32763.html * https://www.suse.com/security/cve/CVE-2023-33285.html * https://www.suse.com/security/cve/CVE-2023-34410.html * https://www.suse.com/security/cve/CVE-2023-38197.html * https://bugzilla.suse.com/show_bug.cgi?id=1209616 * https://bugzilla.suse.com/show_bug.cgi?id=1211024 * https://bugzilla.suse.com/show_bug.cgi?id=1211642 * https://bugzilla.suse.com/show_bug.cgi?id=1211797 * https://bugzilla.suse.com/show_bug.cgi?id=1211798 * https://bugzilla.suse.com/show_bug.cgi?id=1211994 * https://bugzilla.suse.com/show_bug.cgi?id=1213326

1 0

SUSE-RU-2023:2968-1: moderate: Recommended update for libyui
by maintenance＠opensuse.org 25 Jul '23

25 Jul '23

# Recommended update for libyui Announcement ID: SUSE-RU-2023:2968-1 Rating: moderate References: * #1211354 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that has one recommended fix can now be installed. ## Description: This update for libyui fixes the following issues: * Version bump to 4.5.3 * NCurses UI: Prevent buffer overflow when drawing very wide labels (bsc#1211354) ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-2968=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-2968=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-2968=1 openSUSE-SLE-15.5-2023-2968=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-2968=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-2968=1 ## Package List: * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libyui-qt-rest-api-debugsource-4.5.3-150500.3.3.1 * libyui-qt-rest-api-devel-4.5.3-150500.3.3.1 * libyui-rest-api16-4.5.3-150500.3.3.1 * libyui-ncurses-rest-api-devel-4.5.3-150500.3.3.1 * libyui-qt-rest-api16-debuginfo-4.5.3-150500.3.3.1 * libyui-qt-rest-api16-4.5.3-150500.3.3.1 * libyui-ncurses-rest-api16-4.5.3-150500.3.3.1 * libyui-rest-api16-debuginfo-4.5.3-150500.3.3.1 * libyui-ncurses-rest-api16-debuginfo-4.5.3-150500.3.3.1 * libyui-ncurses-rest-api-debugsource-4.5.3-150500.3.3.1 * libyui-rest-api-devel-4.5.3-150500.3.3.1 * libyui-rest-api-debugsource-4.5.3-150500.3.3.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * perl-yui-debuginfo-4.5.3-150500.3.3.1 * ruby-yui-debuginfo-4.5.3-150500.3.3.1 * python3-yui-4.5.3-150500.3.3.1 * ruby-yui-4.5.3-150500.3.3.1 * python3-yui-debuginfo-4.5.3-150500.3.3.1 * perl-yui-4.5.3-150500.3.3.1 * libyui-bindings-debuginfo-4.5.3-150500.3.3.1 * libyui-bindings-debugsource-4.5.3-150500.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libyui-ncurses16-debuginfo-4.5.3-150500.3.3.1 * libyui-qt-rest-api-devel-4.5.3-150500.3.3.1 * libyui-qt-pkg16-debuginfo-4.5.3-150500.3.3.1 * libyui-qt-rest-api16-debuginfo-4.5.3-150500.3.3.1 * python3-yui-debuginfo-4.5.3-150500.3.3.1 * libyui-ncurses-rest-api16-4.5.3-150500.3.3.1 * libyui-qt-devel-4.5.3-150500.3.3.1 * libyui-ncurses-rest-api16-debuginfo-4.5.3-150500.3.3.1 * libyui-ncurses-rest-api-debugsource-4.5.3-150500.3.3.1 * libyui-rest-api-devel-4.5.3-150500.3.3.1 * libyui-ncurses-pkg-debugsource-4.5.3-150500.3.3.1 * libyui-ncurses16-4.5.3-150500.3.3.1 * python3-yui-4.5.3-150500.3.3.1 * libyui-qt-graph-devel-4.5.3-150500.3.3.1 * libyui16-4.5.3-150500.3.3.1 * libyui-ncurses-debugsource-4.5.3-150500.3.3.1 * libyui-qt-graph16-4.5.3-150500.3.3.1 * libyui-ncurses-tools-4.5.3-150500.3.3.1 * libyui-qt16-4.5.3-150500.3.3.1 * libyui-qt-pkg16-4.5.3-150500.3.3.1 * libyui-bindings-debuginfo-4.5.3-150500.3.3.1 * libyui-rest-api16-4.5.3-150500.3.3.1 * libyui-devel-4.5.3-150500.3.3.1 * perl-yui-debuginfo-4.5.3-150500.3.3.1 * ruby-yui-debuginfo-4.5.3-150500.3.3.1 * libyui-ncurses-rest-api-devel-4.5.3-150500.3.3.1 * ruby-yui-4.5.3-150500.3.3.1 * libyui-qt-rest-api16-4.5.3-150500.3.3.1 * libyui-qt16-debuginfo-4.5.3-150500.3.3.1 * libyui-bindings-debugsource-4.5.3-150500.3.3.1 * libyui-debugsource-4.5.3-150500.3.3.1 * libyui16-debuginfo-4.5.3-150500.3.3.1 * libyui-qt-rest-api-debugsource-4.5.3-150500.3.3.1 * libyui-ncurses-pkg16-debuginfo-4.5.3-150500.3.3.1 * libyui-qt-pkg-devel-4.5.3-150500.3.3.1 * libyui-ncurses-pkg16-4.5.3-150500.3.3.1 * libyui-qt-graph-debugsource-4.5.3-150500.3.3.1 * libyui-qt-debugsource-4.5.3-150500.3.3.1 * libyui-ncurses-devel-4.5.3-150500.3.3.1 * libyui-qt-pkg-debugsource-4.5.3-150500.3.3.1 * libyui-qt-graph16-debuginfo-4.5.3-150500.3.3.1 * libyui-rest-api16-debuginfo-4.5.3-150500.3.3.1 * perl-yui-4.5.3-150500.3.3.1 * libyui-ncurses-pkg-devel-4.5.3-150500.3.3.1 * libyui-rest-api-debugsource-4.5.3-150500.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libyui-ncurses16-debuginfo-4.5.3-150500.3.3.1 * libyui-qt-devel-4.5.3-150500.3.3.1 * libyui-ncurses-pkg-debugsource-4.5.3-150500.3.3.1 * libyui-ncurses16-4.5.3-150500.3.3.1 * libyui-qt-graph-devel-4.5.3-150500.3.3.1 * libyui16-4.5.3-150500.3.3.1 * libyui-ncurses-debugsource-4.5.3-150500.3.3.1 * libyui-qt-graph16-4.5.3-150500.3.3.1 * libyui-ncurses-tools-4.5.3-150500.3.3.1 * libyui-qt16-4.5.3-150500.3.3.1 * libyui-qt16-debuginfo-4.5.3-150500.3.3.1 * libyui-debugsource-4.5.3-150500.3.3.1 * libyui16-debuginfo-4.5.3-150500.3.3.1 * libyui-ncurses-pkg16-debuginfo-4.5.3-150500.3.3.1 * libyui-ncurses-pkg16-4.5.3-150500.3.3.1 * libyui-qt-graph-debugsource-4.5.3-150500.3.3.1 * libyui-qt-debugsource-4.5.3-150500.3.3.1 * libyui-ncurses-devel-4.5.3-150500.3.3.1 * libyui-qt-graph16-debuginfo-4.5.3-150500.3.3.1 * libyui-devel-4.5.3-150500.3.3.1 * libyui-ncurses-pkg-devel-4.5.3-150500.3.3.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libyui-qt-pkg16-4.5.3-150500.3.3.1 * libyui-qt-pkg16-debuginfo-4.5.3-150500.3.3.1 * libyui-qt-pkg-debugsource-4.5.3-150500.3.3.1 * libyui-qt-pkg-devel-4.5.3-150500.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1211354

1 0

SUSE-SU-2023:2969-1: moderate: Security update for libqt5-qtsvg
by maintenance＠opensuse.org 25 Jul '23

25 Jul '23

# Security update for libqt5-qtsvg Announcement ID: SUSE-SU-2023:2969-1 Rating: moderate References: * #1196654 * #1211298 Cross-References: * CVE-2021-45930 * CVE-2023-32573 CVSS scores: * CVE-2021-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2021-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-32573 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2023-32573 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for libqt5-qtsvg fixes the following issues: * CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial- of-service (bsc#1196654). * CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm variable (bsc#1211298). ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-2969=1 openSUSE-SLE-15.5-2023-2969=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-2969=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-2969=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * libQt5Svg5-32bit-5.15.8+kde8-150500.3.3.1 * libQt5Svg5-32bit-debuginfo-5.15.8+kde8-150500.3.3.1 * libqt5-qtsvg-devel-32bit-5.15.8+kde8-150500.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libQt5Svg5-5.15.8+kde8-150500.3.3.1 * libqt5-qtsvg-examples-debuginfo-5.15.8+kde8-150500.3.3.1 * libqt5-qtsvg-examples-5.15.8+kde8-150500.3.3.1 * libqt5-qtsvg-devel-5.15.8+kde8-150500.3.3.1 * libQt5Svg5-debuginfo-5.15.8+kde8-150500.3.3.1 * libqt5-qtsvg-debugsource-5.15.8+kde8-150500.3.3.1 * openSUSE Leap 15.5 (noarch) * libqt5-qtsvg-private-headers-devel-5.15.8+kde8-150500.3.3.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libQt5Svg5-64bit-5.15.8+kde8-150500.3.3.1 * libQt5Svg5-64bit-debuginfo-5.15.8+kde8-150500.3.3.1 * libqt5-qtsvg-devel-64bit-5.15.8+kde8-150500.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libQt5Svg5-5.15.8+kde8-150500.3.3.1 * libQt5Svg5-debuginfo-5.15.8+kde8-150500.3.3.1 * libqt5-qtsvg-devel-5.15.8+kde8-150500.3.3.1 * libqt5-qtsvg-debugsource-5.15.8+kde8-150500.3.3.1 * Desktop Applications Module 15-SP5 (noarch) * libqt5-qtsvg-private-headers-devel-5.15.8+kde8-150500.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2021-45930.html * https://www.suse.com/security/cve/CVE-2023-32573.html * https://bugzilla.suse.com/show_bug.cgi?id=1196654 * https://bugzilla.suse.com/show_bug.cgi?id=1211298

1 0

SUSE-SU-2023:2970-1: moderate: Security update for python-scipy
by maintenance＠opensuse.org 25 Jul '23

25 Jul '23

# Security update for python-scipy Announcement ID: SUSE-SU-2023:2970-1 Rating: moderate References: * #1213062 * #1213137 Cross-References: * CVE-2023-25399 * CVE-2023-29824 CVSS scores: * CVE-2023-25399 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-25399 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-29824 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2023-29824 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-scipy fixes the following issues: * CVE-2023-25399: Fixed minor refcounting issue in Py_FindObjects (bsc#1213062). * CVE-2023-29824: Fixed use-after-free in Py_FindObjects (bsc#1213137). ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2970=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2970=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python-scipy-debuginfo-1.2.0-150100.4.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * python-scipy_1_2_0-gnu-hpc-debuginfo-1.2.0-150100.4.6.1 * python3-scipy_1_2_0-gnu-hpc-debuginfo-1.2.0-150100.4.6.1 * python3-scipy_1_2_0-gnu-hpc-1.2.0-150100.4.6.1 * python-scipy_1_2_0-gnu-hpc-debugsource-1.2.0-150100.4.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * python-scipy_1_2_0-gnu-hpc-debuginfo-1.2.0-150100.4.6.1 * python3-scipy_1_2_0-gnu-hpc-debuginfo-1.2.0-150100.4.6.1 * python3-scipy_1_2_0-gnu-hpc-1.2.0-150100.4.6.1 * python-scipy_1_2_0-gnu-hpc-debugsource-1.2.0-150100.4.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-25399.html * https://www.suse.com/security/cve/CVE-2023-29824.html * https://bugzilla.suse.com/show_bug.cgi?id=1213062 * https://bugzilla.suse.com/show_bug.cgi?id=1213137

1 0

SUSE-SU-2023:2965-1: moderate: Security update for openssl-1_1
by maintenance＠opensuse.org 25 Jul '23

25 Jul '23

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2023:2965-1 Rating: moderate References: * #1213487 Cross-References: * CVE-2023-3446 CVSS scores: * CVE-2023-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487). ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-2965=1 openSUSE-SLE-15.5-2023-2965=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-2965=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libopenssl-1_1-devel-1.1.1l-150500.17.9.1 * libopenssl1_1-hmac-1.1.1l-150500.17.9.1 * openssl-1_1-1.1.1l-150500.17.9.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.9.1 * libopenssl1_1-1.1.1l-150500.17.9.1 * openssl-1_1-debugsource-1.1.1l-150500.17.9.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.9.1 * openSUSE Leap 15.5 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.9.1 * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.9.1 * libopenssl1_1-32bit-1.1.1l-150500.17.9.1 * libopenssl-1_1-devel-32bit-1.1.1l-150500.17.9.1 * openSUSE Leap 15.5 (noarch) * openssl-1_1-doc-1.1.1l-150500.17.9.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl1_1-64bit-1.1.1l-150500.17.9.1 * libopenssl-1_1-devel-64bit-1.1.1l-150500.17.9.1 * libopenssl1_1-hmac-64bit-1.1.1l-150500.17.9.1 * libopenssl1_1-64bit-debuginfo-1.1.1l-150500.17.9.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libopenssl-1_1-devel-1.1.1l-150500.17.9.1 * libopenssl1_1-hmac-1.1.1l-150500.17.9.1 * openssl-1_1-1.1.1l-150500.17.9.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.9.1 * libopenssl1_1-1.1.1l-150500.17.9.1 * openssl-1_1-debugsource-1.1.1l-150500.17.9.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.9.1 * Basesystem Module 15-SP5 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.9.1 * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.9.1 * libopenssl1_1-32bit-1.1.1l-150500.17.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3446.html * https://bugzilla.suse.com/show_bug.cgi?id=1213487

1 0

openSUSE-RU-2023:0192-1: moderate: Recommended update for nqptp
by maintenance＠opensuse.org 25 Jul '23

25 Jul '23

openSUSE Recommended Update: Recommended update for nqptp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0192-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for nqptp fixes the following issues: - Initial package for version 1.2.1 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-192=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): nqptp-1.2.1-bp155.2.1 References:

1 0

SUSE-SU-2023:2956-1: moderate: Security update for libcap
by maintenance＠opensuse.org 25 Jul '23

25 Jul '23

# Security update for libcap Announcement ID: SUSE-SU-2023:2956-1 Rating: moderate References: * #1211419 Cross-References: * CVE-2023-2603 CVSS scores: * CVE-2023-2603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2023-2603 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves one vulnerability can now be installed. ## Description: This update for libcap fixes the following issues: * CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419). ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-2956=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-2956=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-2956=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-2956=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2956=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2956=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2956=1 * SUSE Linux Enterprise Real Time 15 SP3 zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-2956=1 ## Package List: * SUSE Manager Proxy 4.2 (x86_64) * libcap2-2.26-150000.4.9.1 * libcap2-32bit-2.26-150000.4.9.1 * libcap2-32bit-debuginfo-2.26-150000.4.9.1 * libcap-progs-2.26-150000.4.9.1 * libcap-progs-debuginfo-2.26-150000.4.9.1 * libcap2-debuginfo-2.26-150000.4.9.1 * libcap-debugsource-2.26-150000.4.9.1 * libcap-devel-2.26-150000.4.9.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * libcap2-2.26-150000.4.9.1 * libcap2-32bit-2.26-150000.4.9.1 * libcap2-32bit-debuginfo-2.26-150000.4.9.1 * libcap-progs-2.26-150000.4.9.1 * libcap-progs-debuginfo-2.26-150000.4.9.1 * libcap2-debuginfo-2.26-150000.4.9.1 * libcap-debugsource-2.26-150000.4.9.1 * libcap-devel-2.26-150000.4.9.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * libcap2-2.26-150000.4.9.1 * libcap-progs-2.26-150000.4.9.1 * libcap-progs-debuginfo-2.26-150000.4.9.1 * libcap2-debuginfo-2.26-150000.4.9.1 * libcap-debugsource-2.26-150000.4.9.1 * libcap-devel-2.26-150000.4.9.1 * SUSE Manager Server 4.2 (x86_64) * libcap2-32bit-2.26-150000.4.9.1 * libcap2-32bit-debuginfo-2.26-150000.4.9.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libcap2-2.26-150000.4.9.1 * libcap2-debuginfo-2.26-150000.4.9.1 * libcap-debugsource-2.26-150000.4.9.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libcap2-2.26-150000.4.9.1 * libcap2-debuginfo-2.26-150000.4.9.1 * libcap-debugsource-2.26-150000.4.9.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libcap2-2.26-150000.4.9.1 * libcap2-debuginfo-2.26-150000.4.9.1 * libcap-debugsource-2.26-150000.4.9.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * pam_cap-2.26-150000.4.9.1 * pam_cap-debuginfo-2.26-150000.4.9.1 * openSUSE Leap 15.4 (x86_64) * pam_cap-32bit-2.26-150000.4.9.1 * pam_cap-32bit-debuginfo-2.26-150000.4.9.1 * SUSE Linux Enterprise Real Time 15 SP3 (x86_64) * libcap2-2.26-150000.4.9.1 * libcap2-32bit-2.26-150000.4.9.1 * libcap2-32bit-debuginfo-2.26-150000.4.9.1 * libcap-progs-2.26-150000.4.9.1 * libcap-progs-debuginfo-2.26-150000.4.9.1 * libcap2-debuginfo-2.26-150000.4.9.1 * libcap-debugsource-2.26-150000.4.9.1 * libcap-devel-2.26-150000.4.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2603.html * https://bugzilla.suse.com/show_bug.cgi?id=1211419

1 0

SUSE-SU-2023:2957-1: important: Security update for python39
by maintenance＠opensuse.org 25 Jul '23

25 Jul '23

# Security update for python39 Announcement ID: SUSE-SU-2023:2957-1 Rating: important References: * #1203750 * #1208471 Cross-References: * CVE-2007-4559 * CVE-2023-24329 CVSS scores: * CVE-2007-4559 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2023-24329 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L * CVE-2023-24329 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves two vulnerabilities can now be installed. ## Description: This update for python39 fixes the following issues: Update to 3.9.17: * urllib.parse.urlsplit() now strips leading C0 control and space characters following the specification for URLs defined by WHATWG in response to CVE-2023-24329 (bsc#1208471). * Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified. * Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler. * trace. **main** now uses io.open_code() for files to be executed instead of raw open(). * CVE-2007-4559: The extraction methods in tarfile, and shutil.unpack_archive(), have a new filter argument that allows limiting tar features than may be surprising or dangerous, such as creating files outside the destination directory. See Extraction filters for details (fixing bsc#1203750). * Fixed a deadlock at shutdown when clearing thread states if any finalizer tries to acquire the runtime head lock. * Fixed a crash due to a race while iterating over thread states in clearing threading.local. ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2957=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2957=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2957=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2957=1 * SUSE Linux Enterprise Real Time 15 SP3 zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-2957=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2957=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2957=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-2957=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-2957=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-2957=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-2957=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libpython3_9-1_0-3.9.17-150300.4.30.1 * python39-testsuite-3.9.17-150300.4.30.1 * python39-3.9.17-150300.4.30.1 * python39-base-3.9.17-150300.4.30.1 * python39-doc-devhelp-3.9.17-150300.4.30.1 * python39-dbm-debuginfo-3.9.17-150300.4.30.1 * python39-doc-3.9.17-150300.4.30.1 * python39-curses-3.9.17-150300.4.30.1 * python39-debuginfo-3.9.17-150300.4.30.1 * python39-idle-3.9.17-150300.4.30.1 * python39-dbm-3.9.17-150300.4.30.1 * python39-tk-3.9.17-150300.4.30.1 * python39-tools-3.9.17-150300.4.30.1 * python39-base-debuginfo-3.9.17-150300.4.30.1 * python39-testsuite-debuginfo-3.9.17-150300.4.30.1 * python39-core-debugsource-3.9.17-150300.4.30.1 * python39-curses-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-debuginfo-3.9.17-150300.4.30.1 * python39-tk-debuginfo-3.9.17-150300.4.30.1 * python39-debugsource-3.9.17-150300.4.30.1 * python39-devel-3.9.17-150300.4.30.1 * openSUSE Leap 15.4 (x86_64) * python39-32bit-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-32bit-3.9.17-150300.4.30.1 * libpython3_9-1_0-32bit-debuginfo-3.9.17-150300.4.30.1 * python39-base-32bit-debuginfo-3.9.17-150300.4.30.1 * python39-32bit-3.9.17-150300.4.30.1 * python39-base-32bit-3.9.17-150300.4.30.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libpython3_9-1_0-3.9.17-150300.4.30.1 * python39-testsuite-3.9.17-150300.4.30.1 * python39-3.9.17-150300.4.30.1 * python39-base-3.9.17-150300.4.30.1 * python39-doc-devhelp-3.9.17-150300.4.30.1 * python39-dbm-debuginfo-3.9.17-150300.4.30.1 * python39-doc-3.9.17-150300.4.30.1 * python39-curses-3.9.17-150300.4.30.1 * python39-debuginfo-3.9.17-150300.4.30.1 * python39-idle-3.9.17-150300.4.30.1 * python39-dbm-3.9.17-150300.4.30.1 * python39-tk-3.9.17-150300.4.30.1 * python39-tools-3.9.17-150300.4.30.1 * python39-base-debuginfo-3.9.17-150300.4.30.1 * python39-testsuite-debuginfo-3.9.17-150300.4.30.1 * python39-core-debugsource-3.9.17-150300.4.30.1 * python39-curses-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-debuginfo-3.9.17-150300.4.30.1 * python39-tk-debuginfo-3.9.17-150300.4.30.1 * python39-debugsource-3.9.17-150300.4.30.1 * python39-devel-3.9.17-150300.4.30.1 * openSUSE Leap 15.5 (x86_64) * python39-32bit-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-32bit-3.9.17-150300.4.30.1 * libpython3_9-1_0-32bit-debuginfo-3.9.17-150300.4.30.1 * python39-base-32bit-debuginfo-3.9.17-150300.4.30.1 * python39-32bit-3.9.17-150300.4.30.1 * python39-base-32bit-3.9.17-150300.4.30.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libpython3_9-1_0-3.9.17-150300.4.30.1 * python39-dbm-debuginfo-3.9.17-150300.4.30.1 * python39-core-debugsource-3.9.17-150300.4.30.1 * python39-3.9.17-150300.4.30.1 * python39-debuginfo-3.9.17-150300.4.30.1 * python39-idle-3.9.17-150300.4.30.1 * python39-dbm-3.9.17-150300.4.30.1 * python39-curses-3.9.17-150300.4.30.1 * python39-curses-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-debuginfo-3.9.17-150300.4.30.1 * python39-base-3.9.17-150300.4.30.1 * python39-tk-3.9.17-150300.4.30.1 * python39-tk-debuginfo-3.9.17-150300.4.30.1 * python39-debugsource-3.9.17-150300.4.30.1 * python39-tools-3.9.17-150300.4.30.1 * python39-base-debuginfo-3.9.17-150300.4.30.1 * python39-devel-3.9.17-150300.4.30.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libpython3_9-1_0-3.9.17-150300.4.30.1 * python39-dbm-debuginfo-3.9.17-150300.4.30.1 * python39-core-debugsource-3.9.17-150300.4.30.1 * python39-3.9.17-150300.4.30.1 * python39-debuginfo-3.9.17-150300.4.30.1 * python39-idle-3.9.17-150300.4.30.1 * python39-dbm-3.9.17-150300.4.30.1 * python39-curses-3.9.17-150300.4.30.1 * python39-curses-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-debuginfo-3.9.17-150300.4.30.1 * python39-base-3.9.17-150300.4.30.1 * python39-tk-3.9.17-150300.4.30.1 * python39-tk-debuginfo-3.9.17-150300.4.30.1 * python39-debugsource-3.9.17-150300.4.30.1 * python39-tools-3.9.17-150300.4.30.1 * python39-base-debuginfo-3.9.17-150300.4.30.1 * python39-devel-3.9.17-150300.4.30.1 * SUSE Linux Enterprise Real Time 15 SP3 (x86_64) * libpython3_9-1_0-3.9.17-150300.4.30.1 * python39-dbm-debuginfo-3.9.17-150300.4.30.1 * python39-core-debugsource-3.9.17-150300.4.30.1 * python39-3.9.17-150300.4.30.1 * python39-debuginfo-3.9.17-150300.4.30.1 * python39-idle-3.9.17-150300.4.30.1 * python39-dbm-3.9.17-150300.4.30.1 * python39-curses-3.9.17-150300.4.30.1 * python39-curses-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-debuginfo-3.9.17-150300.4.30.1 * python39-base-3.9.17-150300.4.30.1 * python39-tk-3.9.17-150300.4.30.1 * python39-tk-debuginfo-3.9.17-150300.4.30.1 * python39-debugsource-3.9.17-150300.4.30.1 * python39-tools-3.9.17-150300.4.30.1 * python39-base-debuginfo-3.9.17-150300.4.30.1 * python39-devel-3.9.17-150300.4.30.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libpython3_9-1_0-3.9.17-150300.4.30.1 * python39-dbm-debuginfo-3.9.17-150300.4.30.1 * python39-core-debugsource-3.9.17-150300.4.30.1 * python39-3.9.17-150300.4.30.1 * python39-debuginfo-3.9.17-150300.4.30.1 * python39-idle-3.9.17-150300.4.30.1 * python39-dbm-3.9.17-150300.4.30.1 * python39-curses-3.9.17-150300.4.30.1 * python39-curses-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-debuginfo-3.9.17-150300.4.30.1 * python39-base-3.9.17-150300.4.30.1 * python39-tk-3.9.17-150300.4.30.1 * python39-tk-debuginfo-3.9.17-150300.4.30.1 * python39-debugsource-3.9.17-150300.4.30.1 * python39-tools-3.9.17-150300.4.30.1 * python39-base-debuginfo-3.9.17-150300.4.30.1 * python39-devel-3.9.17-150300.4.30.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libpython3_9-1_0-3.9.17-150300.4.30.1 * python39-dbm-debuginfo-3.9.17-150300.4.30.1 * python39-core-debugsource-3.9.17-150300.4.30.1 * python39-3.9.17-150300.4.30.1 * python39-debuginfo-3.9.17-150300.4.30.1 * python39-idle-3.9.17-150300.4.30.1 * python39-dbm-3.9.17-150300.4.30.1 * python39-curses-3.9.17-150300.4.30.1 * python39-curses-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-debuginfo-3.9.17-150300.4.30.1 * python39-base-3.9.17-150300.4.30.1 * python39-tk-3.9.17-150300.4.30.1 * python39-tk-debuginfo-3.9.17-150300.4.30.1 * python39-debugsource-3.9.17-150300.4.30.1 * python39-tools-3.9.17-150300.4.30.1 * python39-base-debuginfo-3.9.17-150300.4.30.1 * python39-devel-3.9.17-150300.4.30.1 * SUSE Manager Proxy 4.2 (x86_64) * libpython3_9-1_0-3.9.17-150300.4.30.1 * python39-dbm-debuginfo-3.9.17-150300.4.30.1 * python39-core-debugsource-3.9.17-150300.4.30.1 * python39-3.9.17-150300.4.30.1 * python39-debuginfo-3.9.17-150300.4.30.1 * python39-idle-3.9.17-150300.4.30.1 * python39-dbm-3.9.17-150300.4.30.1 * python39-curses-3.9.17-150300.4.30.1 * python39-curses-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-debuginfo-3.9.17-150300.4.30.1 * python39-base-3.9.17-150300.4.30.1 * python39-tk-3.9.17-150300.4.30.1 * python39-tk-debuginfo-3.9.17-150300.4.30.1 * python39-debugsource-3.9.17-150300.4.30.1 * python39-base-debuginfo-3.9.17-150300.4.30.1 * python39-devel-3.9.17-150300.4.30.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * libpython3_9-1_0-3.9.17-150300.4.30.1 * python39-dbm-debuginfo-3.9.17-150300.4.30.1 * python39-core-debugsource-3.9.17-150300.4.30.1 * python39-3.9.17-150300.4.30.1 * python39-debuginfo-3.9.17-150300.4.30.1 * python39-idle-3.9.17-150300.4.30.1 * python39-dbm-3.9.17-150300.4.30.1 * python39-curses-3.9.17-150300.4.30.1 * python39-curses-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-debuginfo-3.9.17-150300.4.30.1 * python39-base-3.9.17-150300.4.30.1 * python39-tk-3.9.17-150300.4.30.1 * python39-tk-debuginfo-3.9.17-150300.4.30.1 * python39-debugsource-3.9.17-150300.4.30.1 * python39-base-debuginfo-3.9.17-150300.4.30.1 * python39-devel-3.9.17-150300.4.30.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * libpython3_9-1_0-3.9.17-150300.4.30.1 * python39-dbm-debuginfo-3.9.17-150300.4.30.1 * python39-core-debugsource-3.9.17-150300.4.30.1 * python39-3.9.17-150300.4.30.1 * python39-debuginfo-3.9.17-150300.4.30.1 * python39-idle-3.9.17-150300.4.30.1 * python39-dbm-3.9.17-150300.4.30.1 * python39-curses-3.9.17-150300.4.30.1 * python39-curses-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-debuginfo-3.9.17-150300.4.30.1 * python39-base-3.9.17-150300.4.30.1 * python39-tk-3.9.17-150300.4.30.1 * python39-tk-debuginfo-3.9.17-150300.4.30.1 * python39-debugsource-3.9.17-150300.4.30.1 * python39-base-debuginfo-3.9.17-150300.4.30.1 * python39-devel-3.9.17-150300.4.30.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libpython3_9-1_0-3.9.17-150300.4.30.1 * python39-dbm-debuginfo-3.9.17-150300.4.30.1 * python39-core-debugsource-3.9.17-150300.4.30.1 * python39-3.9.17-150300.4.30.1 * python39-debuginfo-3.9.17-150300.4.30.1 * python39-idle-3.9.17-150300.4.30.1 * python39-dbm-3.9.17-150300.4.30.1 * python39-curses-3.9.17-150300.4.30.1 * python39-curses-debuginfo-3.9.17-150300.4.30.1 * libpython3_9-1_0-debuginfo-3.9.17-150300.4.30.1 * python39-base-3.9.17-150300.4.30.1 * python39-tk-3.9.17-150300.4.30.1 * python39-tk-debuginfo-3.9.17-150300.4.30.1 * python39-debugsource-3.9.17-150300.4.30.1 * python39-tools-3.9.17-150300.4.30.1 * python39-base-debuginfo-3.9.17-150300.4.30.1 * python39-devel-3.9.17-150300.4.30.1 ## References: * https://www.suse.com/security/cve/CVE-2007-4559.html * https://www.suse.com/security/cve/CVE-2023-24329.html * https://bugzilla.suse.com/show_bug.cgi?id=1203750 * https://bugzilla.suse.com/show_bug.cgi?id=1208471

1 0