August 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2023:3208-1: important: Security update for librsvg
by maintenance＠opensuse.org 07 Aug '23

07 Aug '23

# Security update for librsvg Announcement ID: SUSE-SU-2023:3208-1 Rating: important References: * #1213502 Cross-References: * CVE-2023-38633 CVSS scores: * CVE-2023-38633 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-38633 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Enterprise Storage 7 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves one vulnerability can now be installed. ## Description: This update for librsvg fixes the following issues: librsvg was updated to version 2.46.7: * CVE-2023-38633: Fixed directory traversal in URI decoder (bsc#1213502). ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3208=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-3208=1 * SUSE Enterprise Storage 7 zypper in -t patch SUSE-Storage-7-2023-3208=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-3208=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-3208=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3208=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-3208=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-3208=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-3208=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-3208=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-3208=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-3208=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-3208=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3208=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-3208=1 ## Package List: * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Enterprise Storage 7 (aarch64 x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * openSUSE Leap 15.4 (noarch) * librsvg-lang-2.46.7-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * typelib-1_0-Rsvg-2_0-2.46.7-150200.3.9.1 * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-devel-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Manager Proxy 4.2 (x86_64) * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * librsvg-2-2-2.46.7-150200.3.9.1 * librsvg-2-2-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.46.7-150200.3.9.1 * gdk-pixbuf-loader-rsvg-2.46.7-150200.3.9.1 * librsvg-debugsource-2.46.7-150200.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38633.html * https://bugzilla.suse.com/show_bug.cgi?id=1213502

1 0

SUSE-FU-2023:3213-1: moderate: Feature update for gnu-compilers-hpc
by maintenance＠opensuse.org 07 Aug '23

07 Aug '23

# Feature update for gnu-compilers-hpc Announcement ID: SUSE-FU-2023:3213-1 Rating: moderate References: * #1212351 Affected Products: * HPC Module 15-SP4 * HPC Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that contains two features and has one feature fix can now be installed. ## Description: This recommended update for gnu-compilers-hpc provides the following feature: * Ship gnu12-compiler-hpc-devel and gnu12-compilers-hpc-macros-devel (jsc#PED-2896) * Fix posttrans script (bsc#1212351). ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2023-3213=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-3213=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-3213=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3213=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3213=1 * HPC Module 15-SP4 zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2023-3213=1 ## Package List: * HPC Module 15-SP5 (noarch) * gnu-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu-compilers-hpc-1.4-150100.3.25.1 * gnu-compilers-hpc-devel-1.4-150100.3.25.1 * gnu12-compilers-hpc-1.4-150100.3.25.1 * gnu12-compilers-hpc-devel-1.4-150100.3.25.1 * SUSE Package Hub 15 15-SP4 (noarch) * gnu-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu10-compilers-hpc-1.4-150100.3.25.1 * gnu10-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu-compilers-hpc-1.4-150100.3.25.1 * gnu10-compilers-hpc-devel-1.4-150100.3.25.1 * gnu-compilers-hpc-devel-1.4-150100.3.25.1 * SUSE Package Hub 15 15-SP5 (noarch) * gnu-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu10-compilers-hpc-1.4-150100.3.25.1 * gnu10-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu-compilers-hpc-1.4-150100.3.25.1 * gnu10-compilers-hpc-devel-1.4-150100.3.25.1 * gnu-compilers-hpc-devel-1.4-150100.3.25.1 * openSUSE Leap 15.4 (noarch) * gnu-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu10-compilers-hpc-1.4-150100.3.25.1 * gnu10-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu9-compilers-hpc-1.4-150100.3.25.1 * gnu11-compilers-hpc-1.4-150100.3.25.1 * gnu11-compilers-hpc-devel-1.4-150100.3.25.1 * gnu9-compilers-hpc-devel-1.4-150100.3.25.1 * gnu-compilers-hpc-1.4-150100.3.25.1 * gnu9-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu10-compilers-hpc-devel-1.4-150100.3.25.1 * gnu-compilers-hpc-devel-1.4-150100.3.25.1 * gnu11-compilers-hpc-macros-devel-1.4-150100.3.25.1 * openSUSE Leap 15.5 (noarch) * gnu-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu10-compilers-hpc-1.4-150100.3.25.1 * gnu10-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu9-compilers-hpc-1.4-150100.3.25.1 * gnu11-compilers-hpc-1.4-150100.3.25.1 * gnu11-compilers-hpc-devel-1.4-150100.3.25.1 * gnu9-compilers-hpc-devel-1.4-150100.3.25.1 * gnu-compilers-hpc-1.4-150100.3.25.1 * gnu9-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu10-compilers-hpc-devel-1.4-150100.3.25.1 * gnu12-compilers-hpc-1.4-150100.3.25.1 * gnu-compilers-hpc-devel-1.4-150100.3.25.1 * gnu11-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu12-compilers-hpc-devel-1.4-150100.3.25.1 * HPC Module 15-SP4 (noarch) * gnu-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu12-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu11-compilers-hpc-1.4-150100.3.25.1 * gnu11-compilers-hpc-devel-1.4-150100.3.25.1 * gnu-compilers-hpc-1.4-150100.3.25.1 * gnu-compilers-hpc-devel-1.4-150100.3.25.1 * gnu12-compilers-hpc-1.4-150100.3.25.1 * gnu11-compilers-hpc-macros-devel-1.4-150100.3.25.1 * gnu12-compilers-hpc-devel-1.4-150100.3.25.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212351 * https://jira.suse.com/browse/MSC-639 * https://jira.suse.com/browse/PED-2790

1 0

SUSE-RU-2023:3214-1: moderate: Recommended update for sssd
by maintenance＠opensuse.org 07 Aug '23

07 Aug '23

# Recommended update for sssd Announcement ID: SUSE-RU-2023:3214-1 Rating: moderate References: * #1213283 Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one recommended fix can now be installed. ## Description: This update for sssd fixes the following issues: * Fix sssd entering failed state under heavy load (bsc#1213283) ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3214=1 openSUSE-SLE-15.4-2023-3214=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-3214=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-3214=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3214=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3214=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3214=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3214=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3214=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * sssd-krb5-common-2.5.2-150400.4.14.1 * libsss_simpleifp-devel-2.5.2-150400.4.14.1 * sssd-ipa-debuginfo-2.5.2-150400.4.14.1 * libsss_simpleifp0-2.5.2-150400.4.14.1 * libsss_nss_idmap0-2.5.2-150400.4.14.1 * libipa_hbac0-2.5.2-150400.4.14.1 * sssd-proxy-2.5.2-150400.4.14.1 * libsss_certmap0-2.5.2-150400.4.14.1 * sssd-common-debuginfo-2.5.2-150400.4.14.1 * sssd-debugsource-2.5.2-150400.4.14.1 * libipa_hbac-devel-2.5.2-150400.4.14.1 * sssd-ad-2.5.2-150400.4.14.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.14.1 * libsss_simpleifp0-debuginfo-2.5.2-150400.4.14.1 * sssd-ipa-2.5.2-150400.4.14.1 * sssd-krb5-2.5.2-150400.4.14.1 * python3-ipa_hbac-2.5.2-150400.4.14.1 * libnfsidmap-sss-2.5.2-150400.4.14.1 * sssd-tools-2.5.2-150400.4.14.1 * sssd-kcm-debuginfo-2.5.2-150400.4.14.1 * python3-sss-murmur-debuginfo-2.5.2-150400.4.14.1 * libsss_idmap0-2.5.2-150400.4.14.1 * sssd-ad-debuginfo-2.5.2-150400.4.14.1 * python3-sss-murmur-2.5.2-150400.4.14.1 * python3-sss_nss_idmap-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap-devel-2.5.2-150400.4.14.1 * sssd-kcm-2.5.2-150400.4.14.1 * sssd-ldap-debuginfo-2.5.2-150400.4.14.1 * sssd-proxy-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_nss_idmap-devel-2.5.2-150400.4.14.1 * sssd-dbus-debuginfo-2.5.2-150400.4.14.1 * libnfsidmap-sss-debuginfo-2.5.2-150400.4.14.1 * sssd-dbus-2.5.2-150400.4.14.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.14.1 * sssd-2.5.2-150400.4.14.1 * sssd-ldap-2.5.2-150400.4.14.1 * python3-sss_nss_idmap-2.5.2-150400.4.14.1 * sssd-tools-debuginfo-2.5.2-150400.4.14.1 * sssd-winbind-idmap-debuginfo-2.5.2-150400.4.14.1 * sssd-winbind-idmap-2.5.2-150400.4.14.1 * sssd-krb5-debuginfo-2.5.2-150400.4.14.1 * libsss_idmap-devel-2.5.2-150400.4.14.1 * sssd-common-2.5.2-150400.4.14.1 * python3-ipa_hbac-debuginfo-2.5.2-150400.4.14.1 * python3-sssd-config-2.5.2-150400.4.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.14.1 * python3-sssd-config-debuginfo-2.5.2-150400.4.14.1 * libipa_hbac0-debuginfo-2.5.2-150400.4.14.1 * openSUSE Leap 15.4 (x86_64) * sssd-common-32bit-2.5.2-150400.4.14.1 * sssd-common-32bit-debuginfo-2.5.2-150400.4.14.1 * openSUSE Leap 15.4 (aarch64_ilp32) * sssd-common-64bit-2.5.2-150400.4.14.1 * sssd-common-64bit-debuginfo-2.5.2-150400.4.14.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libsss_idmap0-2.5.2-150400.4.14.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.14.1 * sssd-krb5-common-2.5.2-150400.4.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.14.1 * sssd-ldap-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_nss_idmap0-2.5.2-150400.4.14.1 * sssd-2.5.2-150400.4.14.1 * sssd-common-2.5.2-150400.4.14.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-2.5.2-150400.4.14.1 * sssd-ldap-2.5.2-150400.4.14.1 * sssd-common-debuginfo-2.5.2-150400.4.14.1 * sssd-debugsource-2.5.2-150400.4.14.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libsss_idmap0-2.5.2-150400.4.14.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.14.1 * sssd-krb5-common-2.5.2-150400.4.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.14.1 * sssd-ldap-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_nss_idmap0-2.5.2-150400.4.14.1 * sssd-2.5.2-150400.4.14.1 * sssd-common-2.5.2-150400.4.14.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-2.5.2-150400.4.14.1 * sssd-ldap-2.5.2-150400.4.14.1 * sssd-common-debuginfo-2.5.2-150400.4.14.1 * sssd-debugsource-2.5.2-150400.4.14.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libsss_idmap0-2.5.2-150400.4.14.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.14.1 * sssd-krb5-common-2.5.2-150400.4.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.14.1 * sssd-ldap-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_nss_idmap0-2.5.2-150400.4.14.1 * sssd-2.5.2-150400.4.14.1 * sssd-common-2.5.2-150400.4.14.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-2.5.2-150400.4.14.1 * sssd-ldap-2.5.2-150400.4.14.1 * sssd-common-debuginfo-2.5.2-150400.4.14.1 * sssd-debugsource-2.5.2-150400.4.14.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libsss_idmap0-2.5.2-150400.4.14.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.14.1 * sssd-krb5-common-2.5.2-150400.4.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.14.1 * sssd-ldap-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_nss_idmap0-2.5.2-150400.4.14.1 * sssd-2.5.2-150400.4.14.1 * sssd-common-2.5.2-150400.4.14.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-2.5.2-150400.4.14.1 * sssd-ldap-2.5.2-150400.4.14.1 * sssd-common-debuginfo-2.5.2-150400.4.14.1 * sssd-debugsource-2.5.2-150400.4.14.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libsss_idmap0-2.5.2-150400.4.14.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.14.1 * sssd-krb5-common-2.5.2-150400.4.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.14.1 * sssd-ldap-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_nss_idmap0-2.5.2-150400.4.14.1 * sssd-2.5.2-150400.4.14.1 * sssd-common-2.5.2-150400.4.14.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-2.5.2-150400.4.14.1 * sssd-ldap-2.5.2-150400.4.14.1 * sssd-common-debuginfo-2.5.2-150400.4.14.1 * sssd-debugsource-2.5.2-150400.4.14.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libsss_idmap0-2.5.2-150400.4.14.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.14.1 * sssd-krb5-common-2.5.2-150400.4.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.14.1 * sssd-ldap-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_nss_idmap0-2.5.2-150400.4.14.1 * sssd-2.5.2-150400.4.14.1 * sssd-common-2.5.2-150400.4.14.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-2.5.2-150400.4.14.1 * sssd-ldap-2.5.2-150400.4.14.1 * sssd-common-debuginfo-2.5.2-150400.4.14.1 * sssd-debugsource-2.5.2-150400.4.14.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * sssd-krb5-common-2.5.2-150400.4.14.1 * libsss_simpleifp-devel-2.5.2-150400.4.14.1 * sssd-ipa-debuginfo-2.5.2-150400.4.14.1 * libsss_simpleifp0-2.5.2-150400.4.14.1 * libsss_nss_idmap0-2.5.2-150400.4.14.1 * libipa_hbac0-2.5.2-150400.4.14.1 * sssd-proxy-2.5.2-150400.4.14.1 * libsss_certmap0-2.5.2-150400.4.14.1 * sssd-common-debuginfo-2.5.2-150400.4.14.1 * sssd-debugsource-2.5.2-150400.4.14.1 * libipa_hbac-devel-2.5.2-150400.4.14.1 * sssd-ad-2.5.2-150400.4.14.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.14.1 * libsss_simpleifp0-debuginfo-2.5.2-150400.4.14.1 * sssd-ipa-2.5.2-150400.4.14.1 * sssd-krb5-2.5.2-150400.4.14.1 * sssd-tools-2.5.2-150400.4.14.1 * sssd-kcm-debuginfo-2.5.2-150400.4.14.1 * libsss_idmap0-2.5.2-150400.4.14.1 * sssd-ad-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap-devel-2.5.2-150400.4.14.1 * sssd-kcm-2.5.2-150400.4.14.1 * sssd-ldap-debuginfo-2.5.2-150400.4.14.1 * sssd-proxy-debuginfo-2.5.2-150400.4.14.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.14.1 * libsss_nss_idmap-devel-2.5.2-150400.4.14.1 * sssd-dbus-debuginfo-2.5.2-150400.4.14.1 * sssd-dbus-2.5.2-150400.4.14.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.14.1 * sssd-2.5.2-150400.4.14.1 * sssd-ldap-2.5.2-150400.4.14.1 * sssd-tools-debuginfo-2.5.2-150400.4.14.1 * sssd-winbind-idmap-debuginfo-2.5.2-150400.4.14.1 * sssd-winbind-idmap-2.5.2-150400.4.14.1 * sssd-krb5-debuginfo-2.5.2-150400.4.14.1 * libsss_idmap-devel-2.5.2-150400.4.14.1 * sssd-common-2.5.2-150400.4.14.1 * python3-sssd-config-2.5.2-150400.4.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.14.1 * python3-sssd-config-debuginfo-2.5.2-150400.4.14.1 * libipa_hbac0-debuginfo-2.5.2-150400.4.14.1 * Basesystem Module 15-SP4 (x86_64) * sssd-common-32bit-2.5.2-150400.4.14.1 * sssd-common-32bit-debuginfo-2.5.2-150400.4.14.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213283

1 0

SUSE-RU-2023:3215-1: moderate: Recommended update for sssd
by maintenance＠opensuse.org 07 Aug '23

07 Aug '23

# Recommended update for sssd Announcement ID: SUSE-RU-2023:3215-1 Rating: moderate References: * #1213283 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one recommended fix can now be installed. ## Description: This update for sssd fixes the following issues: * Fix sssd entering failed state under heavy load (bsc#1213283) ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-3215=1 openSUSE-SLE-15.5-2023-3215=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3215=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * sssd-proxy-debuginfo-2.5.2-150500.10.3.1 * libsss_idmap-devel-2.5.2-150500.10.3.1 * sssd-ldap-debuginfo-2.5.2-150500.10.3.1 * libipa_hbac-devel-2.5.2-150500.10.3.1 * libsss_certmap0-2.5.2-150500.10.3.1 * libsss_idmap0-2.5.2-150500.10.3.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.3.1 * python3-sss_nss_idmap-debuginfo-2.5.2-150500.10.3.1 * sssd-common-2.5.2-150500.10.3.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.3.1 * libsss_simpleifp0-2.5.2-150500.10.3.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.3.1 * sssd-debugsource-2.5.2-150500.10.3.1 * sssd-krb5-common-2.5.2-150500.10.3.1 * sssd-ldap-2.5.2-150500.10.3.1 * python3-ipa_hbac-2.5.2-150500.10.3.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.3.1 * sssd-krb5-2.5.2-150500.10.3.1 * libsss_nss_idmap0-2.5.2-150500.10.3.1 * sssd-winbind-idmap-2.5.2-150500.10.3.1 * sssd-kcm-2.5.2-150500.10.3.1 * libnfsidmap-sss-2.5.2-150500.10.3.1 * libnfsidmap-sss-debuginfo-2.5.2-150500.10.3.1 * sssd-ad-debuginfo-2.5.2-150500.10.3.1 * sssd-dbus-2.5.2-150500.10.3.1 * sssd-ipa-2.5.2-150500.10.3.1 * sssd-krb5-debuginfo-2.5.2-150500.10.3.1 * sssd-tools-debuginfo-2.5.2-150500.10.3.1 * sssd-kcm-debuginfo-2.5.2-150500.10.3.1 * sssd-common-debuginfo-2.5.2-150500.10.3.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.3.1 * libipa_hbac0-2.5.2-150500.10.3.1 * libsss_certmap-devel-2.5.2-150500.10.3.1 * python3-sss-murmur-debuginfo-2.5.2-150500.10.3.1 * python3-sssd-config-2.5.2-150500.10.3.1 * python3-sss_nss_idmap-2.5.2-150500.10.3.1 * libsss_nss_idmap-devel-2.5.2-150500.10.3.1 * sssd-tools-2.5.2-150500.10.3.1 * libsss_simpleifp-devel-2.5.2-150500.10.3.1 * sssd-proxy-2.5.2-150500.10.3.1 * python3-ipa_hbac-debuginfo-2.5.2-150500.10.3.1 * sssd-2.5.2-150500.10.3.1 * python3-sss-murmur-2.5.2-150500.10.3.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.3.1 * sssd-dbus-debuginfo-2.5.2-150500.10.3.1 * sssd-ad-2.5.2-150500.10.3.1 * sssd-ipa-debuginfo-2.5.2-150500.10.3.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.3.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.3.1 * openSUSE Leap 15.5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.3.1 * sssd-common-32bit-debuginfo-2.5.2-150500.10.3.1 * openSUSE Leap 15.5 (aarch64_ilp32) * sssd-common-64bit-debuginfo-2.5.2-150500.10.3.1 * sssd-common-64bit-2.5.2-150500.10.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sssd-proxy-debuginfo-2.5.2-150500.10.3.1 * libsss_idmap-devel-2.5.2-150500.10.3.1 * sssd-ldap-debuginfo-2.5.2-150500.10.3.1 * libipa_hbac-devel-2.5.2-150500.10.3.1 * libsss_certmap0-2.5.2-150500.10.3.1 * libsss_idmap0-2.5.2-150500.10.3.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.3.1 * sssd-common-2.5.2-150500.10.3.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.3.1 * libsss_simpleifp0-2.5.2-150500.10.3.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.3.1 * sssd-debugsource-2.5.2-150500.10.3.1 * sssd-krb5-common-2.5.2-150500.10.3.1 * sssd-ldap-2.5.2-150500.10.3.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.3.1 * sssd-krb5-2.5.2-150500.10.3.1 * libsss_nss_idmap0-2.5.2-150500.10.3.1 * sssd-winbind-idmap-2.5.2-150500.10.3.1 * sssd-kcm-2.5.2-150500.10.3.1 * sssd-ad-debuginfo-2.5.2-150500.10.3.1 * sssd-dbus-2.5.2-150500.10.3.1 * sssd-ipa-2.5.2-150500.10.3.1 * sssd-krb5-debuginfo-2.5.2-150500.10.3.1 * sssd-tools-debuginfo-2.5.2-150500.10.3.1 * sssd-kcm-debuginfo-2.5.2-150500.10.3.1 * sssd-common-debuginfo-2.5.2-150500.10.3.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.3.1 * libipa_hbac0-2.5.2-150500.10.3.1 * libsss_certmap-devel-2.5.2-150500.10.3.1 * python3-sssd-config-2.5.2-150500.10.3.1 * libsss_nss_idmap-devel-2.5.2-150500.10.3.1 * sssd-tools-2.5.2-150500.10.3.1 * libsss_simpleifp-devel-2.5.2-150500.10.3.1 * sssd-proxy-2.5.2-150500.10.3.1 * sssd-2.5.2-150500.10.3.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.3.1 * sssd-dbus-debuginfo-2.5.2-150500.10.3.1 * sssd-ad-2.5.2-150500.10.3.1 * sssd-ipa-debuginfo-2.5.2-150500.10.3.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.3.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.3.1 * Basesystem Module 15-SP5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.3.1 * sssd-common-32bit-debuginfo-2.5.2-150500.10.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213283

1 0

SUSE-RU-2023:3217-1: moderate: Recommended update for cryptsetup
by maintenance＠opensuse.org 07 Aug '23

07 Aug '23

# Recommended update for cryptsetup Announcement ID: SUSE-RU-2023:3217-1 Rating: moderate References: * #1211079 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one recommended fix can now be installed. ## Description: This update for cryptsetup fixes the following issues: * Handle system with low memory and no swap space (bsc#1211079) ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3217=1 SUSE-2023-3217=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-3217=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-3217=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3217=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3217=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3217=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3217=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3217=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3217=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3217=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libcryptsetup12-2.4.3-150400.3.3.1 * cryptsetup-2.4.3-150400.3.3.1 * libcryptsetup12-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-ssh-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-ssh-2.4.3-150400.3.3.1 * libcryptsetup-devel-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-2.4.3-150400.3.3.1 * cryptsetup-debugsource-2.4.3-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * cryptsetup-lang-2.4.3-150400.3.3.1 * openSUSE Leap 15.4 (x86_64) * libcryptsetup12-32bit-debuginfo-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-32bit-2.4.3-150400.3.3.1 * libcryptsetup12-32bit-2.4.3-150400.3.3.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libcryptsetup12-64bit-debuginfo-2.4.3-150400.3.3.1 * libcryptsetup12-64bit-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-64bit-2.4.3-150400.3.3.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libcryptsetup12-2.4.3-150400.3.3.1 * cryptsetup-2.4.3-150400.3.3.1 * libcryptsetup12-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-debuginfo-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-2.4.3-150400.3.3.1 * cryptsetup-debugsource-2.4.3-150400.3.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libcryptsetup12-2.4.3-150400.3.3.1 * cryptsetup-2.4.3-150400.3.3.1 * libcryptsetup12-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-debuginfo-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-2.4.3-150400.3.3.1 * cryptsetup-debugsource-2.4.3-150400.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libcryptsetup12-2.4.3-150400.3.3.1 * cryptsetup-2.4.3-150400.3.3.1 * libcryptsetup12-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-ssh-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-ssh-2.4.3-150400.3.3.1 * libcryptsetup-devel-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-2.4.3-150400.3.3.1 * cryptsetup-debugsource-2.4.3-150400.3.3.1 * openSUSE Leap 15.5 (noarch) * cryptsetup-lang-2.4.3-150400.3.3.1 * openSUSE Leap 15.5 (x86_64) * libcryptsetup12-32bit-debuginfo-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-32bit-2.4.3-150400.3.3.1 * libcryptsetup12-32bit-2.4.3-150400.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libcryptsetup12-2.4.3-150400.3.3.1 * cryptsetup-2.4.3-150400.3.3.1 * libcryptsetup12-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-debuginfo-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-2.4.3-150400.3.3.1 * cryptsetup-debugsource-2.4.3-150400.3.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libcryptsetup12-2.4.3-150400.3.3.1 * cryptsetup-2.4.3-150400.3.3.1 * libcryptsetup12-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-debuginfo-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-2.4.3-150400.3.3.1 * cryptsetup-debugsource-2.4.3-150400.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libcryptsetup12-2.4.3-150400.3.3.1 * cryptsetup-2.4.3-150400.3.3.1 * libcryptsetup12-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-debuginfo-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-2.4.3-150400.3.3.1 * cryptsetup-debugsource-2.4.3-150400.3.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libcryptsetup12-2.4.3-150400.3.3.1 * cryptsetup-2.4.3-150400.3.3.1 * libcryptsetup12-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-debuginfo-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-2.4.3-150400.3.3.1 * cryptsetup-debugsource-2.4.3-150400.3.3.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libcryptsetup12-2.4.3-150400.3.3.1 * cryptsetup-2.4.3-150400.3.3.1 * libcryptsetup12-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-ssh-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-ssh-2.4.3-150400.3.3.1 * libcryptsetup-devel-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-2.4.3-150400.3.3.1 * cryptsetup-debugsource-2.4.3-150400.3.3.1 * Basesystem Module 15-SP4 (noarch) * cryptsetup-lang-2.4.3-150400.3.3.1 * Basesystem Module 15-SP4 (x86_64) * libcryptsetup12-32bit-debuginfo-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-32bit-2.4.3-150400.3.3.1 * libcryptsetup12-32bit-2.4.3-150400.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libcryptsetup12-2.4.3-150400.3.3.1 * cryptsetup-2.4.3-150400.3.3.1 * libcryptsetup12-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-ssh-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-debuginfo-2.4.3-150400.3.3.1 * cryptsetup-ssh-2.4.3-150400.3.3.1 * libcryptsetup-devel-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-2.4.3-150400.3.3.1 * cryptsetup-debugsource-2.4.3-150400.3.3.1 * Basesystem Module 15-SP5 (noarch) * cryptsetup-lang-2.4.3-150400.3.3.1 * Basesystem Module 15-SP5 (x86_64) * libcryptsetup12-32bit-debuginfo-2.4.3-150400.3.3.1 * libcryptsetup12-hmac-32bit-2.4.3-150400.3.3.1 * libcryptsetup12-32bit-2.4.3-150400.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1211079

1 0

openSUSE-SU-2023:0216-1: important: Security update for chromium
by opensuse-security＠opensuse.org 07 Aug '23

07 Aug '23

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0216-1 Rating: important References: #1213920 Cross-References: CVE-2023-4068 CVE-2023-4069 CVE-2023-4070 CVE-2023-4071 CVE-2023-4072 CVE-2023-4073 CVE-2023-4074 CVE-2023-4075 CVE-2023-4076 CVE-2023-4077 CVE-2023-4078 CVSS scores: CVE-2023-4068 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2023-4069 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4070 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2023-4071 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4072 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4073 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4074 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4075 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4076 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4077 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-4078 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 115.0.5790.170 (boo#1213920) * CVE-2023-4068: Type Confusion in V8 * CVE-2023-4069: Type Confusion in V8 * CVE-2023-4070: Type Confusion in V8 * CVE-2023-4071: Heap buffer overflow in Visuals * CVE-2023-4072: Out of bounds read and write in WebGL * CVE-2023-4073: Out of bounds memory access in ANGLE * CVE-2023-4074: Use after free in Blink Task Scheduling * CVE-2023-4075: Use after free in Cast * CVE-2023-4076: Use after free in WebRTC * CVE-2023-4077: Insufficient data validation in Extensions * CVE-2023-4078: Inappropriate implementation in Extensions - Specify re2 build dependency in a way that makes Leap packages build in devel project and in Maintenance Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-216=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-216=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-115.0.5790.170-bp155.2.16.1 chromedriver-debuginfo-115.0.5790.170-bp155.2.16.1 chromium-115.0.5790.170-bp155.2.16.1 chromium-debuginfo-115.0.5790.170-bp155.2.16.1 - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-115.0.5790.170-bp154.2.102.1 chromium-115.0.5790.170-bp154.2.102.1 References: https://www.suse.com/security/cve/CVE-2023-4068.html https://www.suse.com/security/cve/CVE-2023-4069.html https://www.suse.com/security/cve/CVE-2023-4070.html https://www.suse.com/security/cve/CVE-2023-4071.html https://www.suse.com/security/cve/CVE-2023-4072.html https://www.suse.com/security/cve/CVE-2023-4073.html https://www.suse.com/security/cve/CVE-2023-4074.html https://www.suse.com/security/cve/CVE-2023-4075.html https://www.suse.com/security/cve/CVE-2023-4076.html https://www.suse.com/security/cve/CVE-2023-4077.html https://www.suse.com/security/cve/CVE-2023-4078.html https://bugzilla.suse.com/1213920

1 0

openSUSE-SU-2023:0217-1: moderate: Security update for perl-Net-Netmask
by opensuse-security＠opensuse.org 07 Aug '23

07 Aug '23

openSUSE Security Update: Security update for perl-Net-Netmask ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0217-1 Rating: moderate References: #1184425 Cross-References: CVE-2021-29424 CVSS scores: CVE-2021-29424 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-29424 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-Net-Netmask fixes the following issues: * CVE-2021-29424: Leading zeros are no longer allowed for IPv4 octets. This (in some situations) allows attackers to bypass access control that is based on IP addresses. (boo#1184425) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-217=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): perl-Net-Netmask-1.9022-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-29424.html https://bugzilla.suse.com/1184425

1 0

SUSE-RU-2023:3203-1: moderate: Recommended update for yast2-installation
by maintenance＠opensuse.org 07 Aug '23

07 Aug '23

# Recommended update for yast2-installation Announcement ID: SUSE-RU-2023:3203-1 Rating: moderate References: * #1211764 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one recommended fix can now be installed. ## Description: This update for yast2-installation fixes the following issues: * Don't always enable sshd and open the ssh port (bsc#1211764) * Update to version 4.5.17 ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-3203=1 openSUSE-SLE-15.5-2023-3203=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3203=1 ## Package List: * openSUSE Leap 15.5 (noarch) * yast2-installation-4.5.17-150500.3.3.1 * Basesystem Module 15-SP5 (noarch) * yast2-installation-4.5.17-150500.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1211764

1 0

SUSE-RU-2023:3204-1: important: Recommended update for tboot
by maintenance＠opensuse.org 07 Aug '23

07 Aug '23

# Recommended update for tboot Announcement ID: SUSE-RU-2023:3204-1 Rating: important References: * #1207833 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one recommended fix can now be installed. ## Description: This update for tboot fixes the following issues: * Correctly move MBI from a lower address above tboot (bsc#1207833). This fixes a broken boot situation in some configurations stopping with log line "TBOOT: loader context was moved from 0x<address> to 0x<address>". * Bump date in version string to fix the upgrade path from SLE-12-SP5 and SLE-15-SP2 (currently at 2019070 and 20200501 respectively). ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3204=1 openSUSE-SLE-15.4-2023-3204=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3204=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3204=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3204=1 ## Package List: * openSUSE Leap 15.4 (x86_64 i586) * tboot-debugsource-20200901_1.10.2-150400.3.4.1 * tboot-debuginfo-20200901_1.10.2-150400.3.4.1 * tboot-20200901_1.10.2-150400.3.4.1 * openSUSE Leap 15.5 (x86_64) * tboot-debugsource-20200901_1.10.2-150400.3.4.1 * tboot-debuginfo-20200901_1.10.2-150400.3.4.1 * tboot-20200901_1.10.2-150400.3.4.1 * Basesystem Module 15-SP4 (x86_64) * tboot-debugsource-20200901_1.10.2-150400.3.4.1 * tboot-debuginfo-20200901_1.10.2-150400.3.4.1 * tboot-20200901_1.10.2-150400.3.4.1 * Basesystem Module 15-SP5 (x86_64) * tboot-debugsource-20200901_1.10.2-150400.3.4.1 * tboot-debuginfo-20200901_1.10.2-150400.3.4.1 * tboot-20200901_1.10.2-150400.3.4.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1207833

1 0

openSUSE-SU-2023:0215-1: moderate: Security update for perl-Net-Netmask
by opensuse-security＠opensuse.org 07 Aug '23

07 Aug '23

openSUSE Security Update: Security update for perl-Net-Netmask ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0215-1 Rating: moderate References: #1184425 Cross-References: CVE-2021-29424 CVSS scores: CVE-2021-29424 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-29424 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-Net-Netmask fixes the following issues: * CVE-2021-29424: Leading zeros are no longer allowed for IPv4 octets. This (in some situations) allows attackers to bypass access control that is based on IP addresses.(boo#1184425) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-215=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): perl-Net-Netmask-1.9022-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-29424.html https://bugzilla.suse.com/1184425

1 0