August 2023 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2023:0213-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 07 Aug '23

07 Aug '23

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0213-1 Rating: important References: #1209727 #1211941 #1212209 #1212761 Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for virtualbox fixes the following issues: VirtualBox 7.0.10 (released July 18 2023) This is a maintenance release. The following items were fixed and/or added: - OCI: Introduced general improvements - VMM: Fixed a bug while walking page tables while executing nested VMs causing flooding of the release log as a consequence (Intel hosts only, bug #21551) - GUI: Added general improvements - TPM: Fixed a crash when a VM has a TPM version 1.2 configured (bug #21622) - 3D: Initial support for OpenGL 4.1 - 3D: Fixed various graphics issues with Windows 11 guests (bugs #21136, #21515) - Guest Control/VBoxManage: Fixed parameter "--ignore-orphaned-processes" - Guest Control/VBoxManage: Fixed behavior of how handling argument 0 for a started guest process works: One can now explicitly specify it with the newly added option "--arg0". This will effectively restore the behavior of former VirtualBox versions - Audio: Also use the PulseAudio backend when pipewire-pulse is running instead of falling back to ALSA (bug #21575) - NAT: Adjusted UDP proxy timeout from 18-21 to 21-24 range to respect intended 20 second timeout (bug #21560) - Linux Host: Added initial support for Indirect Branch Tracking (bug #21435) - Linux Host: Added initial support for kernel 6.5 (NOTE: Guest Additions do not support kernel 6.5 yet) - Linux Host and Guest: Improved condition check when kernel modules need to be signed - Linux Host and Guest: Added initial support for RHEL 8.8 (bug #21692), 8.9 (bug #21690) and 9.3 (bugs #21598 and #21671) kernels - Linux Guest Additions: Fixed issue when kernel modules were rebuilt on each boot when guest system has no X11 installed - Linux Guest Additions: Added initial support for kernel 6.4 - Linux Guest Additions: Fixed issue when vboxvideo module reloading caused kernel panic in some guests (bug #21740) - Linux Guest Additions: Introduced general improvements in the installer area - Windows Guest Additions: Introduced general improvements in graphics drivers area - Fix issue with kernel on newer CPU (boo#1212209) - Turn build of VBoxSDL back on. This update addresses boo#1211941. - Detect vboxpython module with python 3.11 - Fix Vagrant/virtualbox startup problems boo#1209727 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-213=1 Package List: - openSUSE Leap 15.5 (noarch): virtualbox-guest-desktop-icons-7.0.10-lp155.2.5.1 virtualbox-guest-source-7.0.10-lp155.2.5.1 virtualbox-host-source-7.0.10-lp155.2.5.1 - openSUSE Leap 15.5 (x86_64): python3-virtualbox-7.0.10-lp155.2.5.1 python3-virtualbox-debuginfo-7.0.10-lp155.2.5.1 virtualbox-7.0.10-lp155.2.5.1 virtualbox-debuginfo-7.0.10-lp155.2.5.1 virtualbox-debugsource-7.0.10-lp155.2.5.1 virtualbox-devel-7.0.10-lp155.2.5.1 virtualbox-guest-tools-7.0.10-lp155.2.5.1 virtualbox-guest-tools-debuginfo-7.0.10-lp155.2.5.1 virtualbox-kmp-debugsource-7.0.10-lp155.2.5.1 virtualbox-kmp-default-7.0.10_k5.14.21_150500.55.7-lp155.2.5.1 virtualbox-kmp-default-debuginfo-7.0.10_k5.14.21_150500.55.7-lp155.2.5.1 virtualbox-qt-7.0.10-lp155.2.5.1 virtualbox-qt-debuginfo-7.0.10-lp155.2.5.1 virtualbox-vnc-7.0.10-lp155.2.5.1 virtualbox-websrv-7.0.10-lp155.2.5.1 virtualbox-websrv-debuginfo-7.0.10-lp155.2.5.1 References: https://bugzilla.suse.com/1209727 https://bugzilla.suse.com/1211941 https://bugzilla.suse.com/1212209 https://bugzilla.suse.com/1212761

1 0

openSUSE-RU-2023:0214-1: moderate: Recommended update for openSUSE-repos
by maintenance＠opensuse.org 07 Aug '23

07 Aug '23

openSUSE Recommended Update: Recommended update for openSUSE-repos ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0214-1 Rating: moderate References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for openSUSE-repos fixes the following issues: Update to version 20230725.c6c492e: * Use cdn-o-o instead of downloadcontentcdn-o-o * openSUSE-repos adaptation of CDN * improve comment on Leap16 handling * Build -Leap16 on ALP/TW like build env * correct flavor of Leap16 * Add Leap 16.0 definitions Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-214=1 Package List: - openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64): openSUSE-repos-Leap-20230725.c6c492e-lp155.2.3.1 References:

1 0

openSUSE-RU-2023:0210-1: moderate: Recommended update for trytond_account_invoice_stock, trytond_party
by maintenance＠opensuse.org 06 Aug '23

06 Aug '23

openSUSE Recommended Update: Recommended update for trytond_account_invoice_stock, trytond_party ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0210-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for trytond_account_invoice_stock, trytond_party fixes the following issues: Changes in trytond_account_invoice_stock: - Version 6.0.2 - Bugfix Release Changes in trytond_account_invoice_stock: - Version 6.0.2 - Bugfix Release Changes in trytond_party: - Version 6.0.4 - Bugfix Release Changes in trytond_party: - Version 6.0.4 - Bugfix Release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-210=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-210=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): trytond_account_invoice_stock-6.0.2-bp155.2.3.1 trytond_party-6.0.4-bp155.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): trytond_account_invoice_stock-6.0.2-bp154.2.6.1 trytond_party-6.0.4-bp154.2.6.1 References:

1 0

openSUSE-SU-2023:0208-1: moderate: Security update for trytond
by opensuse-security＠opensuse.org 06 Aug '23

06 Aug '23

openSUSE Security Update: Security update for trytond ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0208-1 Rating: moderate References: #1213869 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for trytond fixes the following issues: - Version 6.0.34 - Security Bugfix Release see https://discuss.tryton.org/t/security-release-for-issue-12428/6397 - Version 6.0.33 - Bugfix Release Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-208=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): trytond-6.0.34-bp154.2.30.1 References: https://bugzilla.suse.com/1213869

1 0

openSUSE-SU-2023:0209-1: moderate: Security update for trytond
by opensuse-security＠opensuse.org 06 Aug '23

06 Aug '23

openSUSE Security Update: Security update for trytond ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0209-1 Rating: moderate References: #1213869 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for trytond fixes the following issues: - Version 6.0.34 - Security Bugfix Release See https://discuss.tryton.org/t/security-release-for-issue-12428/6397 - Version 6.0.33 - Bugfix Release Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-209=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): trytond-6.0.34-bp155.2.6.1 References: https://bugzilla.suse.com/1213869

1 0

openSUSE-RU-2023:0211-1: moderate: Recommended update for lutris
by maintenance＠opensuse.org 06 Aug '23

06 Aug '23

openSUSE Recommended Update: Recommended update for lutris ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0211-1 Rating: moderate References: #1213366 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lutris fixes the following issues: - Fix steam sync (boo#1213366) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-211=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): lutris-0.5.9.1-bp154.2.3.1 References: https://bugzilla.suse.com/1213366

1 0

openSUSE-RU-2023:0212-1: moderate: Recommended update for lutris
by maintenance＠opensuse.org 06 Aug '23

06 Aug '23

openSUSE Recommended Update: Recommended update for lutris ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0212-1 Rating: moderate References: #1213366 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lutris fixes the following issues: - Fix steam sync(boo#1213366) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-212=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): lutris-0.5.9.1-bp155.3.3.1 References: https://bugzilla.suse.com/1213366

1 0

openSUSE-RU-2023:0207-1: moderate: Recommended update for NetworkManager-vpnc
by maintenance＠opensuse.org 06 Aug '23

06 Aug '23

openSUSE Recommended Update: Recommended update for NetworkManager-vpnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0207-1 Rating: moderate References: #1213769 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for NetworkManager-vpnc fixes the following issues: - Fixed creating and importing vpnc VPN connections in NetworkManager (boo#1213769). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-207=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): NetworkManager-vpnc-1.2.8-bp155.2.3.1 NetworkManager-vpnc-gnome-1.2.8-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): NetworkManager-vpnc-lang-1.2.8-bp155.2.3.1 References: https://bugzilla.suse.com/1213769

1 0

openSUSE-SU-2023:0206-1: moderate: Security update for amanda
by opensuse-security＠opensuse.org 05 Aug '23

05 Aug '23

openSUSE Security Update: Security update for amanda ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0206-1 Rating: moderate References: #1213701 Cross-References: CVE-2023-30577 CVSS scores: CVE-2023-30577 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for amanda fixes the following issues: - CVE-2023-30577: Fixed improper argument checking for runtar.c [boo#1213701], Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-206=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le s390x x86_64): amanda-3.5.1-bp154.3.6.1 References: https://www.suse.com/security/cve/CVE-2023-30577.html https://bugzilla.suse.com/1213701

1 0

openSUSE-SU-2023:0205-1: moderate: Security update for amanda
by opensuse-security＠opensuse.org 05 Aug '23

05 Aug '23

openSUSE Security Update: Security update for amanda ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0205-1 Rating: moderate References: #1213701 Cross-References: CVE-2023-30577 CVSS scores: CVE-2023-30577 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for amanda fixes the following issues: - CVE-2023-30577: Fixed improper argument checking for runtar.c [boo#1213701] Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-205=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): amanda-3.5.2-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-30577.html https://bugzilla.suse.com/1213701

1 0