September 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2023:3522-1: important: Security update for amazon-ecs-init
by maintenance＠opensuse.org 05 Sep '23

05 Sep '23

# Security update for amazon-ecs-init Announcement ID: SUSE-SU-2023:3522-1 Rating: important References: * #1212475 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP1 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.0 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.0 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.0 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has one security fix can now be installed. ## Description: This update of amazon-ecs-init fixes the following issues: * rebuild the package with the go 1.21 security release (bsc#1212475). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3522=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3522=1 * Public Cloud Module 15-SP1 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2023-3522=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2023-3522=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2023-3522=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-3522=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-3522=1 ## Package List: * openSUSE Leap 15.4 (aarch64 x86_64) * amazon-ecs-init-1.53.0-150100.4.17.1 * openSUSE Leap 15.5 (aarch64 x86_64) * amazon-ecs-init-1.53.0-150100.4.17.1 * Public Cloud Module 15-SP1 (aarch64 x86_64) * amazon-ecs-init-1.53.0-150100.4.17.1 * Public Cloud Module 15-SP2 (aarch64 x86_64) * amazon-ecs-init-1.53.0-150100.4.17.1 * Public Cloud Module 15-SP3 (aarch64 x86_64) * amazon-ecs-init-1.53.0-150100.4.17.1 * Public Cloud Module 15-SP4 (aarch64 x86_64) * amazon-ecs-init-1.53.0-150100.4.17.1 * Public Cloud Module 15-SP5 (aarch64 x86_64) * amazon-ecs-init-1.53.0-150100.4.17.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212475

1 0

SUSE-RU-2023:3523-1: moderate: Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by maintenance＠opensuse.org 05 Sep '23

05 Sep '23

# Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-RU-2023:3523-1 Rating: moderate References: * #1212724 Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Changes in nvidia-open-driver-G06-signed: * Update to version 535.104.05 Changes in kernel-firmware-nvidia-gspx-G06: * update firmware to version 535.104.05 * Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05 (bsc#1212724) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3523=1 openSUSE-SLE-15.4-2023-3523=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3523=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-3523=1 ## Package List: * openSUSE Leap 15.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.104.05-150400.9.6.1 * openSUSE Leap 15.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-535.104.05_k5.14.21_150400.24.81-150400.9.17.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.104.05_k5.14.21_150400.24.81-150400.9.17.1 * nvidia-open-driver-G06-signed-debugsource-535.104.05-150400.9.17.1 * openSUSE Leap 15.4 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-535.104.05_k5.14.21_150400.14.63-150400.9.17.1 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-535.104.05_k5.14.21_150400.14.63-150400.9.17.1 * openSUSE Leap 15.4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-535.104.05_k5.14.21_150400.24.81-150400.9.17.1 * nvidia-open-driver-G06-signed-kmp-64kb-535.104.05_k5.14.21_150400.24.81-150400.9.17.1 * Basesystem Module 15-SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.104.05-150400.9.6.1 * Basesystem Module 15-SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-535.104.05_k5.14.21_150400.24.81-150400.9.17.1 * nvidia-open-driver-G06-signed-kmp-64kb-535.104.05_k5.14.21_150400.24.81-150400.9.17.1 * nvidia-open-driver-G06-signed-debugsource-535.104.05-150400.9.17.1 * Basesystem Module 15-SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-535.104.05_k5.14.21_150400.24.81-150400.9.17.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.104.05_k5.14.21_150400.24.81-150400.9.17.1 * Public Cloud Module 15-SP4 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-535.104.05_k5.14.21_150400.14.63-150400.9.17.1 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-535.104.05_k5.14.21_150400.14.63-150400.9.17.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212724

1 0

SUSE-RU-2023:3524-1: moderate: Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by maintenance＠opensuse.org 05 Sep '23

05 Sep '23

# Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-RU-2023:3524-1 Rating: moderate References: * #1212724 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Changes in nvidia-open-driver-G06-signed: * Update to version 535.104.05 Changes in kernel-firmware-nvidia-gspx-G06: * update firmware to version 535.104.05 * Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05 (bsc#1212724) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-3524=1 openSUSE-SLE-15.5-2023-3524=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3524=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-3524=1 ## Package List: * openSUSE Leap 15.5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.104.05-150500.11.6.1 * openSUSE Leap 15.5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-535.104.05-150500.3.10.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.104.05_k5.14.21_150500.55.19-150500.3.10.1 * nvidia-open-driver-G06-signed-kmp-default-535.104.05_k5.14.21_150500.55.19-150500.3.10.1 * openSUSE Leap 15.5 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-535.104.05_k5.14.21_150500.33.14-150500.3.10.1 * nvidia-open-driver-G06-signed-kmp-azure-535.104.05_k5.14.21_150500.33.14-150500.3.10.1 * openSUSE Leap 15.5 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-535.104.05_k5.14.21_150500.55.19-150500.3.10.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-535.104.05_k5.14.21_150500.55.19-150500.3.10.1 * Basesystem Module 15-SP5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-535.104.05-150500.11.6.1 * Basesystem Module 15-SP5 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-535.104.05_k5.14.21_150500.55.19-150500.3.10.1 * nvidia-open-driver-G06-signed-debugsource-535.104.05-150500.3.10.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-535.104.05_k5.14.21_150500.55.19-150500.3.10.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-535.104.05_k5.14.21_150500.55.19-150500.3.10.1 * nvidia-open-driver-G06-signed-kmp-default-535.104.05_k5.14.21_150500.55.19-150500.3.10.1 * Public Cloud Module 15-SP5 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-535.104.05_k5.14.21_150500.33.14-150500.3.10.1 * nvidia-open-driver-G06-signed-kmp-azure-535.104.05_k5.14.21_150500.33.14-150500.3.10.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212724

1 0

SUSE-SU-2023:3525-1: important: Security update for keylime
by maintenance＠opensuse.org 05 Sep '23

05 Sep '23

# Security update for keylime Announcement ID: SUSE-SU-2023:3525-1 Rating: important References: * #1213314 Cross-References: * CVE-2023-38201 CVSS scores: * CVE-2023-38201 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-38201 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for keylime fixes the following issues: * CVE-2023-38201: Fixed a bug to avoid leaks of the authorization tag. (bsc#1213314) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3525=1 openSUSE-SLE-15.4-2023-3525=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3525=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3525=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3525=1 ## Package List: * openSUSE Leap 15.4 (noarch) * keylime-config-6.3.2-150400.4.20.1 * keylime-agent-6.3.2-150400.4.20.1 * keylime-tpm_cert_store-6.3.2-150400.4.20.1 * python3-keylime-6.3.2-150400.4.20.1 * keylime-verifier-6.3.2-150400.4.20.1 * keylime-registrar-6.3.2-150400.4.20.1 * keylime-logrotate-6.3.2-150400.4.20.1 * keylime-firewalld-6.3.2-150400.4.20.1 * openSUSE Leap 15.5 (noarch) * keylime-config-6.3.2-150400.4.20.1 * keylime-agent-6.3.2-150400.4.20.1 * keylime-tpm_cert_store-6.3.2-150400.4.20.1 * python3-keylime-6.3.2-150400.4.20.1 * keylime-verifier-6.3.2-150400.4.20.1 * keylime-registrar-6.3.2-150400.4.20.1 * keylime-logrotate-6.3.2-150400.4.20.1 * keylime-firewalld-6.3.2-150400.4.20.1 * Basesystem Module 15-SP4 (noarch) * keylime-config-6.3.2-150400.4.20.1 * keylime-agent-6.3.2-150400.4.20.1 * keylime-tpm_cert_store-6.3.2-150400.4.20.1 * python3-keylime-6.3.2-150400.4.20.1 * keylime-verifier-6.3.2-150400.4.20.1 * keylime-registrar-6.3.2-150400.4.20.1 * keylime-logrotate-6.3.2-150400.4.20.1 * keylime-firewalld-6.3.2-150400.4.20.1 * Basesystem Module 15-SP5 (noarch) * keylime-config-6.3.2-150400.4.20.1 * keylime-tpm_cert_store-6.3.2-150400.4.20.1 * keylime-agent-6.3.2-150400.4.20.1 * python3-keylime-6.3.2-150400.4.20.1 * keylime-verifier-6.3.2-150400.4.20.1 * keylime-registrar-6.3.2-150400.4.20.1 * keylime-logrotate-6.3.2-150400.4.20.1 * keylime-firewalld-6.3.2-150400.4.20.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38201.html * https://bugzilla.suse.com/show_bug.cgi?id=1213314

1 0

SUSE-SU-2023:3526-1: important: Security update for sccache
by maintenance＠opensuse.org 05 Sep '23

05 Sep '23

# Security update for sccache Announcement ID: SUSE-SU-2023:3526-1 Rating: important References: * #1181400 * #1194119 * #1196972 * #1208553 * #1212407 Cross-References: * CVE-2021-45710 * CVE-2022-24713 * CVE-2022-31394 * CVE-2023-1521 CVSS scores: * CVE-2021-45710 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2021-45710 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-24713 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2022-24713 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-31394 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2022-31394 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-1521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities and has one security fix can now be installed. ## Description: This update for sccache fixes the following issues: * Update to version 0.4.2. * CVE-2021-45710: Fixed a segmentation fault due to data race in tokio crate. (bsc#1194119) * CVE-2022-24713: Fixed a ReDoS issue due to vulnerable regex crate. (bsc#1196972) * CVE-2022-31394: Fixed a DoS issue due to the max header list size not settable. (bsc#1208553) * CVE-2023-1521: Fixed a local privilege escalation. (bsc#1212407) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3526=1 openSUSE-SLE-15.4-2023-3526=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3526=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-3526=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-3526=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * sccache-0.4.2~3-150400.3.3.1 * sccache-debuginfo-0.4.2~3-150400.3.3.1 * openSUSE Leap 15.5 (aarch64 x86_64) * sccache-0.4.2~3-150400.3.3.1 * sccache-debuginfo-0.4.2~3-150400.3.3.1 * Development Tools Module 15-SP4 (aarch64 x86_64) * sccache-0.4.2~3-150400.3.3.1 * sccache-debuginfo-0.4.2~3-150400.3.3.1 * Development Tools Module 15-SP5 (aarch64 x86_64) * sccache-0.4.2~3-150400.3.3.1 * sccache-debuginfo-0.4.2~3-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2021-45710.html * https://www.suse.com/security/cve/CVE-2022-24713.html * https://www.suse.com/security/cve/CVE-2022-31394.html * https://www.suse.com/security/cve/CVE-2023-1521.html * https://bugzilla.suse.com/show_bug.cgi?id=1181400 * https://bugzilla.suse.com/show_bug.cgi?id=1194119 * https://bugzilla.suse.com/show_bug.cgi?id=1196972 * https://bugzilla.suse.com/show_bug.cgi?id=1208553 * https://bugzilla.suse.com/show_bug.cgi?id=1212407

1 0

SUSE-SU-2023:3527-1: moderate: Security update for gsl
by maintenance＠opensuse.org 05 Sep '23

05 Sep '23

# Security update for gsl Announcement ID: SUSE-SU-2023:3527-1 Rating: moderate References: * #1214681 Cross-References: * CVE-2020-35357 CVSS scores: * CVE-2020-35357 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2020-35357 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP4 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for gsl fixes the following issues: * CVE-2020-35357: Fixed a stack out of bounds read in gsl_stats_quantile_from_sorted_data(). (bsc#1214681) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Workstation Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-3527=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-3527=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3527=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3527=1 ## Package List: * SUSE Linux Enterprise Workstation Extension 15 SP4 (x86_64) * libgsl23-debuginfo-2.4-150100.9.4.1 * gsl-debuginfo-2.4-150100.9.4.1 * libgsl23-2.4-150100.9.4.1 * gsl-debugsource-2.4-150100.9.4.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * libgsl23-debuginfo-2.4-150100.9.4.1 * gsl-debuginfo-2.4-150100.9.4.1 * libgsl23-2.4-150100.9.4.1 * gsl-debugsource-2.4-150100.9.4.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * gsl_2_4-gnu-hpc-debuginfo-2.4-150100.9.4.1 * libgslcblas_2_4-gnu-hpc-debuginfo-2.4-150100.9.4.1 * libgsl_2_4-gnu-hpc-2.4-150100.9.4.1 * gsl_2_4-gnu-hpc-doc-2.4-150100.9.4.1 * gsl_2_4-gnu-hpc-debugsource-2.4-150100.9.4.1 * gsl_2_4-gnu-hpc-devel-2.4-150100.9.4.1 * libgslcblas_2_4-gnu-hpc-2.4-150100.9.4.1 * libgsl23-2.4-150100.9.4.1 * gsl_2_4-gnu-hpc-2.4-150100.9.4.1 * libgsl23-debuginfo-2.4-150100.9.4.1 * libgsl_2_4-gnu-hpc-debuginfo-2.4-150100.9.4.1 * openSUSE Leap 15.4 (noarch) * gsl_2_4-gnu-hpc-examples-2.4-150100.9.4.1 * gsl_2_4-gnu-hpc-module-2.4-150100.9.4.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * gsl_2_4-gnu-hpc-debuginfo-2.4-150100.9.4.1 * libgslcblas_2_4-gnu-hpc-debuginfo-2.4-150100.9.4.1 * libgsl_2_4-gnu-hpc-2.4-150100.9.4.1 * gsl_2_4-gnu-hpc-doc-2.4-150100.9.4.1 * gsl_2_4-gnu-hpc-debugsource-2.4-150100.9.4.1 * gsl_2_4-gnu-hpc-devel-2.4-150100.9.4.1 * libgslcblas_2_4-gnu-hpc-2.4-150100.9.4.1 * gsl_2_4-gnu-hpc-2.4-150100.9.4.1 * libgsl_2_4-gnu-hpc-debuginfo-2.4-150100.9.4.1 * openSUSE Leap 15.5 (noarch) * gsl_2_4-gnu-hpc-examples-2.4-150100.9.4.1 * gsl_2_4-gnu-hpc-module-2.4-150100.9.4.1 ## References: * https://www.suse.com/security/cve/CVE-2020-35357.html * https://bugzilla.suse.com/show_bug.cgi?id=1214681

1 0

SUSE-SU-2023:3528-1: important: Security update for php7
by maintenance＠opensuse.org 05 Sep '23

05 Sep '23

# Security update for php7 Announcement ID: SUSE-SU-2023:3528-1 Rating: important References: * #1214103 * #1214106 Cross-References: * CVE-2023-3823 * CVE-2023-3824 CVSS scores: * CVE-2023-3823 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3823 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L * CVE-2023-3824 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-3824 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * Web and Scripting Module 15-SP4 * Web and Scripting Module 15-SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for php7 fixes the following issues: * CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. (bsc#1214106) * CVE-2023-3824: Fixed a buffer overflow in phar_dir_read(). (bsc#1214103) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3528=1 openSUSE-SLE-15.4-2023-3528=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3528=1 * Web and Scripting Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP4-2023-3528=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2023-3528=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * php8-xsl-8.0.30-150400.4.37.1 * php8-ftp-debuginfo-8.0.30-150400.4.37.1 * php8-ldap-debuginfo-8.0.30-150400.4.37.1 * php8-bcmath-debuginfo-8.0.30-150400.4.37.1 * php8-iconv-8.0.30-150400.4.37.1 * php8-gmp-debuginfo-8.0.30-150400.4.37.1 * php8-8.0.30-150400.4.37.1 * php8-xmlreader-8.0.30-150400.4.37.1 * php8-sockets-8.0.30-150400.4.37.1 * php8-iconv-debuginfo-8.0.30-150400.4.37.1 * php8-bcmath-8.0.30-150400.4.37.1 * php8-calendar-8.0.30-150400.4.37.1 * php8-shmop-debuginfo-8.0.30-150400.4.37.1 * php8-tokenizer-8.0.30-150400.4.37.1 * php8-bz2-8.0.30-150400.4.37.1 * php8-gmp-8.0.30-150400.4.37.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.37.1 * php8-debuginfo-8.0.30-150400.4.37.1 * php8-gd-8.0.30-150400.4.37.1 * php8-intl-8.0.30-150400.4.37.1 * php8-dom-8.0.30-150400.4.37.1 * php8-gd-debuginfo-8.0.30-150400.4.37.1 * php8-zip-8.0.30-150400.4.37.1 * php8-sysvsem-8.0.30-150400.4.37.1 * php8-exif-8.0.30-150400.4.37.1 * php8-openssl-debuginfo-8.0.30-150400.4.37.1 * php8-exif-debuginfo-8.0.30-150400.4.37.1 * php8-tidy-debuginfo-8.0.30-150400.4.37.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.37.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.37.1 * php8-curl-debuginfo-8.0.30-150400.4.37.1 * php8-dom-debuginfo-8.0.30-150400.4.37.1 * php8-snmp-debuginfo-8.0.30-150400.4.37.1 * php8-sodium-8.0.30-150400.4.37.1 * php8-pdo-8.0.30-150400.4.37.1 * php8-embed-8.0.30-150400.4.37.1 * php8-fpm-debugsource-8.0.30-150400.4.37.1 * php8-zip-debuginfo-8.0.30-150400.4.37.1 * php8-intl-debuginfo-8.0.30-150400.4.37.1 * php8-debugsource-8.0.30-150400.4.37.1 * php8-gettext-debuginfo-8.0.30-150400.4.37.1 * php8-pcntl-8.0.30-150400.4.37.1 * php8-odbc-8.0.30-150400.4.37.1 * php8-xsl-debuginfo-8.0.30-150400.4.37.1 * php8-odbc-debuginfo-8.0.30-150400.4.37.1 * php8-dba-8.0.30-150400.4.37.1 * php8-curl-8.0.30-150400.4.37.1 * php8-zlib-8.0.30-150400.4.37.1 * php8-soap-8.0.30-150400.4.37.1 * php8-mbstring-debuginfo-8.0.30-150400.4.37.1 * php8-pcntl-debuginfo-8.0.30-150400.4.37.1 * php8-cli-8.0.30-150400.4.37.1 * php8-fastcgi-debugsource-8.0.30-150400.4.37.1 * php8-devel-8.0.30-150400.4.37.1 * php8-phar-debuginfo-8.0.30-150400.4.37.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.37.1 * php8-opcache-8.0.30-150400.4.37.1 * php8-sqlite-debuginfo-8.0.30-150400.4.37.1 * php8-ftp-8.0.30-150400.4.37.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.37.1 * php8-ctype-debuginfo-8.0.30-150400.4.37.1 * php8-sysvmsg-8.0.30-150400.4.37.1 * php8-openssl-8.0.30-150400.4.37.1 * php8-fpm-8.0.30-150400.4.37.1 * php8-mbstring-8.0.30-150400.4.37.1 * php8-readline-debuginfo-8.0.30-150400.4.37.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.37.1 * php8-readline-8.0.30-150400.4.37.1 * php8-sodium-debuginfo-8.0.30-150400.4.37.1 * php8-tidy-8.0.30-150400.4.37.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.37.1 * php8-cli-debuginfo-8.0.30-150400.4.37.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.37.1 * php8-test-8.0.30-150400.4.37.1 * php8-fpm-debuginfo-8.0.30-150400.4.37.1 * php8-xmlwriter-8.0.30-150400.4.37.1 * php8-sysvshm-8.0.30-150400.4.37.1 * php8-fileinfo-8.0.30-150400.4.37.1 * php8-bz2-debuginfo-8.0.30-150400.4.37.1 * php8-embed-debugsource-8.0.30-150400.4.37.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.37.1 * php8-sockets-debuginfo-8.0.30-150400.4.37.1 * apache2-mod_php8-8.0.30-150400.4.37.1 * php8-fastcgi-8.0.30-150400.4.37.1 * php8-ldap-8.0.30-150400.4.37.1 * php8-zlib-debuginfo-8.0.30-150400.4.37.1 * php8-opcache-debuginfo-8.0.30-150400.4.37.1 * php8-gettext-8.0.30-150400.4.37.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.37.1 * php8-mysql-8.0.30-150400.4.37.1 * php8-posix-debuginfo-8.0.30-150400.4.37.1 * php8-mysql-debuginfo-8.0.30-150400.4.37.1 * php8-enchant-debuginfo-8.0.30-150400.4.37.1 * php8-enchant-8.0.30-150400.4.37.1 * php8-calendar-debuginfo-8.0.30-150400.4.37.1 * php8-soap-debuginfo-8.0.30-150400.4.37.1 * php8-snmp-8.0.30-150400.4.37.1 * php8-sqlite-8.0.30-150400.4.37.1 * php8-dba-debuginfo-8.0.30-150400.4.37.1 * php8-posix-8.0.30-150400.4.37.1 * php8-pgsql-8.0.30-150400.4.37.1 * php8-phar-8.0.30-150400.4.37.1 * php8-shmop-8.0.30-150400.4.37.1 * php8-pgsql-debuginfo-8.0.30-150400.4.37.1 * php8-ctype-8.0.30-150400.4.37.1 * php8-pdo-debuginfo-8.0.30-150400.4.37.1 * php8-embed-debuginfo-8.0.30-150400.4.37.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * php8-xsl-8.0.30-150400.4.37.1 * php8-ftp-debuginfo-8.0.30-150400.4.37.1 * php8-ldap-debuginfo-8.0.30-150400.4.37.1 * php8-bcmath-debuginfo-8.0.30-150400.4.37.1 * php8-iconv-8.0.30-150400.4.37.1 * php8-gmp-debuginfo-8.0.30-150400.4.37.1 * php8-8.0.30-150400.4.37.1 * php8-xmlreader-8.0.30-150400.4.37.1 * php8-sockets-8.0.30-150400.4.37.1 * php8-iconv-debuginfo-8.0.30-150400.4.37.1 * php8-bcmath-8.0.30-150400.4.37.1 * php8-calendar-8.0.30-150400.4.37.1 * php8-shmop-debuginfo-8.0.30-150400.4.37.1 * php8-tokenizer-8.0.30-150400.4.37.1 * php8-bz2-8.0.30-150400.4.37.1 * php8-gmp-8.0.30-150400.4.37.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.37.1 * php8-debuginfo-8.0.30-150400.4.37.1 * php8-gd-8.0.30-150400.4.37.1 * php8-intl-8.0.30-150400.4.37.1 * php8-dom-8.0.30-150400.4.37.1 * php8-gd-debuginfo-8.0.30-150400.4.37.1 * php8-zip-8.0.30-150400.4.37.1 * php8-sysvsem-8.0.30-150400.4.37.1 * php8-exif-8.0.30-150400.4.37.1 * php8-openssl-debuginfo-8.0.30-150400.4.37.1 * php8-exif-debuginfo-8.0.30-150400.4.37.1 * php8-tidy-debuginfo-8.0.30-150400.4.37.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.37.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.37.1 * php8-curl-debuginfo-8.0.30-150400.4.37.1 * php8-dom-debuginfo-8.0.30-150400.4.37.1 * php8-snmp-debuginfo-8.0.30-150400.4.37.1 * php8-sodium-8.0.30-150400.4.37.1 * php8-pdo-8.0.30-150400.4.37.1 * php8-embed-8.0.30-150400.4.37.1 * php8-fpm-debugsource-8.0.30-150400.4.37.1 * php8-zip-debuginfo-8.0.30-150400.4.37.1 * php8-intl-debuginfo-8.0.30-150400.4.37.1 * php8-debugsource-8.0.30-150400.4.37.1 * php8-gettext-debuginfo-8.0.30-150400.4.37.1 * php8-pcntl-8.0.30-150400.4.37.1 * php8-odbc-8.0.30-150400.4.37.1 * php8-xsl-debuginfo-8.0.30-150400.4.37.1 * php8-odbc-debuginfo-8.0.30-150400.4.37.1 * php8-dba-8.0.30-150400.4.37.1 * php8-curl-8.0.30-150400.4.37.1 * php8-zlib-8.0.30-150400.4.37.1 * php8-soap-8.0.30-150400.4.37.1 * php8-mbstring-debuginfo-8.0.30-150400.4.37.1 * php8-pcntl-debuginfo-8.0.30-150400.4.37.1 * php8-cli-8.0.30-150400.4.37.1 * php8-fastcgi-debugsource-8.0.30-150400.4.37.1 * php8-devel-8.0.30-150400.4.37.1 * php8-phar-debuginfo-8.0.30-150400.4.37.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.37.1 * php8-ftp-8.0.30-150400.4.37.1 * php8-opcache-8.0.30-150400.4.37.1 * php8-sqlite-debuginfo-8.0.30-150400.4.37.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.37.1 * php8-ctype-debuginfo-8.0.30-150400.4.37.1 * php8-sysvmsg-8.0.30-150400.4.37.1 * php8-openssl-8.0.30-150400.4.37.1 * php8-fpm-8.0.30-150400.4.37.1 * php8-mbstring-8.0.30-150400.4.37.1 * php8-readline-debuginfo-8.0.30-150400.4.37.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.37.1 * php8-readline-8.0.30-150400.4.37.1 * php8-sodium-debuginfo-8.0.30-150400.4.37.1 * php8-tidy-8.0.30-150400.4.37.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.37.1 * php8-cli-debuginfo-8.0.30-150400.4.37.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.37.1 * php8-test-8.0.30-150400.4.37.1 * php8-fpm-debuginfo-8.0.30-150400.4.37.1 * php8-xmlwriter-8.0.30-150400.4.37.1 * php8-sysvshm-8.0.30-150400.4.37.1 * php8-fileinfo-8.0.30-150400.4.37.1 * php8-bz2-debuginfo-8.0.30-150400.4.37.1 * php8-embed-debugsource-8.0.30-150400.4.37.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.37.1 * php8-sockets-debuginfo-8.0.30-150400.4.37.1 * apache2-mod_php8-8.0.30-150400.4.37.1 * php8-fastcgi-8.0.30-150400.4.37.1 * php8-ldap-8.0.30-150400.4.37.1 * php8-zlib-debuginfo-8.0.30-150400.4.37.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.37.1 * php8-gettext-8.0.30-150400.4.37.1 * php8-opcache-debuginfo-8.0.30-150400.4.37.1 * php8-mysql-8.0.30-150400.4.37.1 * php8-posix-debuginfo-8.0.30-150400.4.37.1 * php8-mysql-debuginfo-8.0.30-150400.4.37.1 * php8-enchant-debuginfo-8.0.30-150400.4.37.1 * php8-enchant-8.0.30-150400.4.37.1 * php8-calendar-debuginfo-8.0.30-150400.4.37.1 * php8-soap-debuginfo-8.0.30-150400.4.37.1 * php8-snmp-8.0.30-150400.4.37.1 * php8-sqlite-8.0.30-150400.4.37.1 * php8-dba-debuginfo-8.0.30-150400.4.37.1 * php8-posix-8.0.30-150400.4.37.1 * php8-pgsql-8.0.30-150400.4.37.1 * php8-phar-8.0.30-150400.4.37.1 * php8-shmop-8.0.30-150400.4.37.1 * php8-pgsql-debuginfo-8.0.30-150400.4.37.1 * php8-ctype-8.0.30-150400.4.37.1 * php8-pdo-debuginfo-8.0.30-150400.4.37.1 * php8-embed-debuginfo-8.0.30-150400.4.37.1 * Web and Scripting Module 15-SP4 (aarch64 ppc64le s390x x86_64) * php8-xsl-8.0.30-150400.4.37.1 * php8-ftp-debuginfo-8.0.30-150400.4.37.1 * php8-ldap-debuginfo-8.0.30-150400.4.37.1 * php8-bcmath-debuginfo-8.0.30-150400.4.37.1 * php8-iconv-8.0.30-150400.4.37.1 * php8-gmp-debuginfo-8.0.30-150400.4.37.1 * php8-8.0.30-150400.4.37.1 * php8-xmlreader-8.0.30-150400.4.37.1 * php8-sockets-8.0.30-150400.4.37.1 * php8-iconv-debuginfo-8.0.30-150400.4.37.1 * php8-bcmath-8.0.30-150400.4.37.1 * php8-calendar-8.0.30-150400.4.37.1 * php8-shmop-debuginfo-8.0.30-150400.4.37.1 * php8-tokenizer-8.0.30-150400.4.37.1 * php8-bz2-8.0.30-150400.4.37.1 * php8-gmp-8.0.30-150400.4.37.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.37.1 * php8-debuginfo-8.0.30-150400.4.37.1 * php8-gd-8.0.30-150400.4.37.1 * php8-intl-8.0.30-150400.4.37.1 * php8-dom-8.0.30-150400.4.37.1 * php8-gd-debuginfo-8.0.30-150400.4.37.1 * php8-zip-8.0.30-150400.4.37.1 * php8-sysvsem-8.0.30-150400.4.37.1 * php8-exif-8.0.30-150400.4.37.1 * php8-openssl-debuginfo-8.0.30-150400.4.37.1 * php8-exif-debuginfo-8.0.30-150400.4.37.1 * php8-tidy-debuginfo-8.0.30-150400.4.37.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.37.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.37.1 * php8-curl-debuginfo-8.0.30-150400.4.37.1 * php8-dom-debuginfo-8.0.30-150400.4.37.1 * php8-snmp-debuginfo-8.0.30-150400.4.37.1 * php8-sodium-8.0.30-150400.4.37.1 * php8-pdo-8.0.30-150400.4.37.1 * php8-embed-8.0.30-150400.4.37.1 * php8-fpm-debugsource-8.0.30-150400.4.37.1 * php8-zip-debuginfo-8.0.30-150400.4.37.1 * php8-intl-debuginfo-8.0.30-150400.4.37.1 * php8-debugsource-8.0.30-150400.4.37.1 * php8-gettext-debuginfo-8.0.30-150400.4.37.1 * php8-pcntl-8.0.30-150400.4.37.1 * php8-odbc-8.0.30-150400.4.37.1 * php8-xsl-debuginfo-8.0.30-150400.4.37.1 * php8-odbc-debuginfo-8.0.30-150400.4.37.1 * php8-dba-8.0.30-150400.4.37.1 * php8-curl-8.0.30-150400.4.37.1 * php8-zlib-8.0.30-150400.4.37.1 * php8-soap-8.0.30-150400.4.37.1 * php8-mbstring-debuginfo-8.0.30-150400.4.37.1 * php8-pcntl-debuginfo-8.0.30-150400.4.37.1 * php8-cli-8.0.30-150400.4.37.1 * php8-fastcgi-debugsource-8.0.30-150400.4.37.1 * php8-devel-8.0.30-150400.4.37.1 * php8-phar-debuginfo-8.0.30-150400.4.37.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.37.1 * php8-ftp-8.0.30-150400.4.37.1 * php8-opcache-8.0.30-150400.4.37.1 * php8-sqlite-debuginfo-8.0.30-150400.4.37.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.37.1 * php8-ctype-debuginfo-8.0.30-150400.4.37.1 * php8-sysvmsg-8.0.30-150400.4.37.1 * php8-openssl-8.0.30-150400.4.37.1 * php8-fpm-8.0.30-150400.4.37.1 * php8-mbstring-8.0.30-150400.4.37.1 * php8-readline-debuginfo-8.0.30-150400.4.37.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.37.1 * php8-readline-8.0.30-150400.4.37.1 * php8-sodium-debuginfo-8.0.30-150400.4.37.1 * php8-tidy-8.0.30-150400.4.37.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.37.1 * php8-cli-debuginfo-8.0.30-150400.4.37.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.37.1 * php8-test-8.0.30-150400.4.37.1 * php8-fpm-debuginfo-8.0.30-150400.4.37.1 * php8-xmlwriter-8.0.30-150400.4.37.1 * php8-sysvshm-8.0.30-150400.4.37.1 * php8-fileinfo-8.0.30-150400.4.37.1 * php8-bz2-debuginfo-8.0.30-150400.4.37.1 * php8-embed-debugsource-8.0.30-150400.4.37.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.37.1 * php8-sockets-debuginfo-8.0.30-150400.4.37.1 * apache2-mod_php8-8.0.30-150400.4.37.1 * php8-fastcgi-8.0.30-150400.4.37.1 * php8-ldap-8.0.30-150400.4.37.1 * php8-zlib-debuginfo-8.0.30-150400.4.37.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.37.1 * php8-gettext-8.0.30-150400.4.37.1 * php8-opcache-debuginfo-8.0.30-150400.4.37.1 * php8-mysql-8.0.30-150400.4.37.1 * php8-posix-debuginfo-8.0.30-150400.4.37.1 * php8-mysql-debuginfo-8.0.30-150400.4.37.1 * php8-enchant-debuginfo-8.0.30-150400.4.37.1 * php8-enchant-8.0.30-150400.4.37.1 * php8-calendar-debuginfo-8.0.30-150400.4.37.1 * php8-soap-debuginfo-8.0.30-150400.4.37.1 * php8-snmp-8.0.30-150400.4.37.1 * php8-sqlite-8.0.30-150400.4.37.1 * php8-dba-debuginfo-8.0.30-150400.4.37.1 * php8-posix-8.0.30-150400.4.37.1 * php8-pgsql-8.0.30-150400.4.37.1 * php8-phar-8.0.30-150400.4.37.1 * php8-shmop-8.0.30-150400.4.37.1 * php8-pgsql-debuginfo-8.0.30-150400.4.37.1 * php8-ctype-8.0.30-150400.4.37.1 * php8-pdo-debuginfo-8.0.30-150400.4.37.1 * php8-embed-debuginfo-8.0.30-150400.4.37.1 * Web and Scripting Module 15-SP5 (aarch64 ppc64le s390x x86_64) * php8-xsl-8.0.30-150400.4.37.1 * php8-ftp-debuginfo-8.0.30-150400.4.37.1 * php8-ldap-debuginfo-8.0.30-150400.4.37.1 * php8-bcmath-debuginfo-8.0.30-150400.4.37.1 * php8-iconv-8.0.30-150400.4.37.1 * php8-gmp-debuginfo-8.0.30-150400.4.37.1 * php8-8.0.30-150400.4.37.1 * php8-xmlreader-8.0.30-150400.4.37.1 * php8-sockets-8.0.30-150400.4.37.1 * php8-iconv-debuginfo-8.0.30-150400.4.37.1 * php8-bcmath-8.0.30-150400.4.37.1 * php8-calendar-8.0.30-150400.4.37.1 * php8-shmop-debuginfo-8.0.30-150400.4.37.1 * php8-tokenizer-8.0.30-150400.4.37.1 * php8-bz2-8.0.30-150400.4.37.1 * php8-gmp-8.0.30-150400.4.37.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.37.1 * php8-debuginfo-8.0.30-150400.4.37.1 * php8-gd-8.0.30-150400.4.37.1 * php8-intl-8.0.30-150400.4.37.1 * php8-dom-8.0.30-150400.4.37.1 * php8-gd-debuginfo-8.0.30-150400.4.37.1 * php8-zip-8.0.30-150400.4.37.1 * php8-sysvsem-8.0.30-150400.4.37.1 * php8-exif-8.0.30-150400.4.37.1 * php8-openssl-debuginfo-8.0.30-150400.4.37.1 * php8-exif-debuginfo-8.0.30-150400.4.37.1 * php8-tidy-debuginfo-8.0.30-150400.4.37.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.37.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.37.1 * php8-curl-debuginfo-8.0.30-150400.4.37.1 * php8-dom-debuginfo-8.0.30-150400.4.37.1 * php8-snmp-debuginfo-8.0.30-150400.4.37.1 * php8-sodium-8.0.30-150400.4.37.1 * php8-pdo-8.0.30-150400.4.37.1 * php8-embed-8.0.30-150400.4.37.1 * php8-fpm-debugsource-8.0.30-150400.4.37.1 * php8-zip-debuginfo-8.0.30-150400.4.37.1 * php8-intl-debuginfo-8.0.30-150400.4.37.1 * php8-debugsource-8.0.30-150400.4.37.1 * php8-gettext-debuginfo-8.0.30-150400.4.37.1 * php8-pcntl-8.0.30-150400.4.37.1 * php8-odbc-8.0.30-150400.4.37.1 * php8-xsl-debuginfo-8.0.30-150400.4.37.1 * php8-odbc-debuginfo-8.0.30-150400.4.37.1 * php8-dba-8.0.30-150400.4.37.1 * php8-curl-8.0.30-150400.4.37.1 * php8-zlib-8.0.30-150400.4.37.1 * php8-soap-8.0.30-150400.4.37.1 * php8-mbstring-debuginfo-8.0.30-150400.4.37.1 * php8-pcntl-debuginfo-8.0.30-150400.4.37.1 * php8-cli-8.0.30-150400.4.37.1 * php8-fastcgi-debugsource-8.0.30-150400.4.37.1 * php8-devel-8.0.30-150400.4.37.1 * php8-phar-debuginfo-8.0.30-150400.4.37.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.37.1 * php8-ftp-8.0.30-150400.4.37.1 * php8-opcache-8.0.30-150400.4.37.1 * php8-sqlite-debuginfo-8.0.30-150400.4.37.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.37.1 * php8-ctype-debuginfo-8.0.30-150400.4.37.1 * php8-sysvmsg-8.0.30-150400.4.37.1 * php8-openssl-8.0.30-150400.4.37.1 * php8-fpm-8.0.30-150400.4.37.1 * php8-mbstring-8.0.30-150400.4.37.1 * php8-readline-debuginfo-8.0.30-150400.4.37.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.37.1 * php8-readline-8.0.30-150400.4.37.1 * php8-sodium-debuginfo-8.0.30-150400.4.37.1 * php8-tidy-8.0.30-150400.4.37.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.37.1 * php8-cli-debuginfo-8.0.30-150400.4.37.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.37.1 * php8-test-8.0.30-150400.4.37.1 * php8-fpm-debuginfo-8.0.30-150400.4.37.1 * php8-xmlwriter-8.0.30-150400.4.37.1 * php8-sysvshm-8.0.30-150400.4.37.1 * php8-fileinfo-8.0.30-150400.4.37.1 * php8-bz2-debuginfo-8.0.30-150400.4.37.1 * php8-embed-debugsource-8.0.30-150400.4.37.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.37.1 * php8-sockets-debuginfo-8.0.30-150400.4.37.1 * apache2-mod_php8-8.0.30-150400.4.37.1 * php8-fastcgi-8.0.30-150400.4.37.1 * php8-ldap-8.0.30-150400.4.37.1 * php8-zlib-debuginfo-8.0.30-150400.4.37.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.37.1 * php8-gettext-8.0.30-150400.4.37.1 * php8-opcache-debuginfo-8.0.30-150400.4.37.1 * php8-mysql-8.0.30-150400.4.37.1 * php8-posix-debuginfo-8.0.30-150400.4.37.1 * php8-mysql-debuginfo-8.0.30-150400.4.37.1 * php8-enchant-debuginfo-8.0.30-150400.4.37.1 * php8-enchant-8.0.30-150400.4.37.1 * php8-calendar-debuginfo-8.0.30-150400.4.37.1 * php8-soap-debuginfo-8.0.30-150400.4.37.1 * php8-snmp-8.0.30-150400.4.37.1 * php8-sqlite-8.0.30-150400.4.37.1 * php8-dba-debuginfo-8.0.30-150400.4.37.1 * php8-posix-8.0.30-150400.4.37.1 * php8-pgsql-8.0.30-150400.4.37.1 * php8-phar-8.0.30-150400.4.37.1 * php8-shmop-8.0.30-150400.4.37.1 * php8-pgsql-debuginfo-8.0.30-150400.4.37.1 * php8-ctype-8.0.30-150400.4.37.1 * php8-pdo-debuginfo-8.0.30-150400.4.37.1 * php8-embed-debuginfo-8.0.30-150400.4.37.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3823.html * https://www.suse.com/security/cve/CVE-2023-3824.html * https://bugzilla.suse.com/show_bug.cgi?id=1214103 * https://bugzilla.suse.com/show_bug.cgi?id=1214106

1 0

SUSE-SU-2023:3529-1: important: Security update for busybox
by maintenance＠opensuse.org 05 Sep '23

05 Sep '23

# Security update for busybox Announcement ID: SUSE-SU-2023:3529-1 Rating: important References: * #1214538 Cross-References: * CVE-2022-48174 CVSS scores: * CVE-2022-48174 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-48174 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2022-48174: Fixed stack overflow vulnerability. (bsc#1214538) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3529=1 openSUSE-SLE-15.4-2023-3529=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3529=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3529=1 ## Package List: * openSUSE Leap 15.4 (noarch) * busybox-adduser-1.35.0-150400.4.5.1 * busybox-xz-1.35.0-150400.4.5.1 * busybox-vi-1.35.0-150400.4.5.1 * busybox-less-1.35.0-150400.4.5.1 * busybox-misc-1.35.0-150400.4.5.1 * busybox-whois-1.35.0-150400.4.5.1 * busybox-net-tools-1.35.0-150400.4.5.1 * busybox-which-1.35.0-150400.4.5.1 * busybox-sed-1.35.0-150400.4.5.1 * busybox-bzip2-1.35.0-150400.4.5.1 * busybox-tar-1.35.0-150400.4.5.1 * busybox-cpio-1.35.0-150400.4.5.1 * busybox-telnet-1.35.0-150400.4.5.1 * busybox-syslogd-1.35.0-150400.4.5.1 * busybox-unzip-1.35.0-150400.4.5.1 * busybox-psmisc-1.35.0-150400.4.5.1 * busybox-procps-1.35.0-150400.4.5.1 * busybox-ed-1.35.0-150400.4.5.1 * busybox-traceroute-1.35.0-150400.4.5.1 * busybox-dos2unix-1.35.0-150400.4.5.1 * busybox-hostname-1.35.0-150400.4.5.1 * busybox-sendmail-1.35.0-150400.4.5.1 * busybox-sysvinit-tools-1.35.0-150400.4.5.1 * busybox-man-1.35.0-150400.4.5.1 * busybox-findutils-1.35.0-150400.4.5.1 * busybox-bind-utils-1.35.0-150400.4.5.1 * busybox-netcat-1.35.0-150400.4.5.1 * busybox-tunctl-1.35.0-150400.4.5.1 * busybox-patch-1.35.0-150400.4.5.1 * busybox-sh-1.35.0-150400.4.5.1 * busybox-links-1.35.0-150400.4.5.1 * busybox-coreutils-1.35.0-150400.4.5.1 * busybox-bc-1.35.0-150400.4.5.1 * busybox-grep-1.35.0-150400.4.5.1 * busybox-gzip-1.35.0-150400.4.5.1 * busybox-sharutils-1.35.0-150400.4.5.1 * busybox-util-linux-1.35.0-150400.4.5.1 * busybox-iproute2-1.35.0-150400.4.5.1 * busybox-attr-1.35.0-150400.4.5.1 * busybox-wget-1.35.0-150400.4.5.1 * busybox-policycoreutils-1.35.0-150400.4.5.1 * busybox-selinux-tools-1.35.0-150400.4.5.1 * busybox-time-1.35.0-150400.4.5.1 * busybox-vlan-1.35.0-150400.4.5.1 * busybox-tftp-1.35.0-150400.4.5.1 * busybox-kmod-1.35.0-150400.4.5.1 * busybox-diffutils-1.35.0-150400.4.5.1 * busybox-gawk-1.35.0-150400.4.5.1 * busybox-kbd-1.35.0-150400.4.5.1 * busybox-iputils-1.35.0-150400.4.5.1 * busybox-ncurses-utils-1.35.0-150400.4.5.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * busybox-static-1.35.0-150400.3.11.1 * busybox-testsuite-1.35.0-150400.3.11.1 * busybox-1.35.0-150400.3.11.1 * openSUSE Leap 15.4 (aarch64 x86_64 i586) * busybox-warewulf3-1.35.0-150400.3.11.1 * openSUSE Leap 15.5 (noarch) * busybox-adduser-1.35.0-150400.4.5.1 * busybox-xz-1.35.0-150400.4.5.1 * busybox-vi-1.35.0-150400.4.5.1 * busybox-less-1.35.0-150400.4.5.1 * busybox-misc-1.35.0-150400.4.5.1 * busybox-whois-1.35.0-150400.4.5.1 * busybox-net-tools-1.35.0-150400.4.5.1 * busybox-which-1.35.0-150400.4.5.1 * busybox-sed-1.35.0-150400.4.5.1 * busybox-bzip2-1.35.0-150400.4.5.1 * busybox-tar-1.35.0-150400.4.5.1 * busybox-cpio-1.35.0-150400.4.5.1 * busybox-telnet-1.35.0-150400.4.5.1 * busybox-syslogd-1.35.0-150400.4.5.1 * busybox-unzip-1.35.0-150400.4.5.1 * busybox-psmisc-1.35.0-150400.4.5.1 * busybox-procps-1.35.0-150400.4.5.1 * busybox-ed-1.35.0-150400.4.5.1 * busybox-traceroute-1.35.0-150400.4.5.1 * busybox-dos2unix-1.35.0-150400.4.5.1 * busybox-hostname-1.35.0-150400.4.5.1 * busybox-sendmail-1.35.0-150400.4.5.1 * busybox-sysvinit-tools-1.35.0-150400.4.5.1 * busybox-man-1.35.0-150400.4.5.1 * busybox-findutils-1.35.0-150400.4.5.1 * busybox-bind-utils-1.35.0-150400.4.5.1 * busybox-netcat-1.35.0-150400.4.5.1 * busybox-tunctl-1.35.0-150400.4.5.1 * busybox-patch-1.35.0-150400.4.5.1 * busybox-sh-1.35.0-150400.4.5.1 * busybox-links-1.35.0-150400.4.5.1 * busybox-coreutils-1.35.0-150400.4.5.1 * busybox-bc-1.35.0-150400.4.5.1 * busybox-grep-1.35.0-150400.4.5.1 * busybox-gzip-1.35.0-150400.4.5.1 * busybox-sharutils-1.35.0-150400.4.5.1 * busybox-util-linux-1.35.0-150400.4.5.1 * busybox-iproute2-1.35.0-150400.4.5.1 * busybox-attr-1.35.0-150400.4.5.1 * busybox-wget-1.35.0-150400.4.5.1 * busybox-policycoreutils-1.35.0-150400.4.5.1 * busybox-selinux-tools-1.35.0-150400.4.5.1 * busybox-time-1.35.0-150400.4.5.1 * busybox-vlan-1.35.0-150400.4.5.1 * busybox-tftp-1.35.0-150400.4.5.1 * busybox-kmod-1.35.0-150400.4.5.1 * busybox-diffutils-1.35.0-150400.4.5.1 * busybox-gawk-1.35.0-150400.4.5.1 * busybox-kbd-1.35.0-150400.4.5.1 * busybox-iputils-1.35.0-150400.4.5.1 * busybox-ncurses-utils-1.35.0-150400.4.5.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x) * busybox-static-1.35.0-150400.3.11.1 * busybox-1.35.0-150400.3.11.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48174.html * https://bugzilla.suse.com/show_bug.cgi?id=1214538

1 0

SUSE-RU-2023:3530-1: critical: Recommended update for SAPHanaSR-ScaleOut
by maintenance＠opensuse.org 05 Sep '23

05 Sep '23

# Recommended update for SAPHanaSR-ScaleOut Announcement ID: SUSE-RU-2023:3530-1 Rating: critical References: * #1210728 * #1214613 * PED-1739 * PED-2608 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SAP Applications Module 15-SP2 * SAP Applications Module 15-SP1 * SAP Applications Module 15-SP3 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains two features and has two fixes can now be installed. ## Description: This update for SAPHanaSR-ScaleOut fixes the following issues: * Version bump to 0.185.1 * Improve supportability by providing the current process ID of the RA, which is logged in the RA outputs, to HANA tracefiles too. This allows a mapping of the SAP related command invocations from the RA and the HANA executions which might have a delay in between. (bsc#1214613) * Fixed an issue when stopping SAPHanaController retuns exit code 0 but it is failing due to /tmp is full. (bsc#1210728) * Add improvements from SAP to the RA scripts. (jsc#PED-1739, jsc#PED-2608) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3530=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3530=1 * SAP Applications Module 15-SP1 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP1-2023-3530=1 * SAP Applications Module 15-SP2 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2023-3530=1 * SAP Applications Module 15-SP3 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2023-3530=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2023-3530=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2023-3530=1 ## Package List: * openSUSE Leap 15.4 (noarch) * SAPHanaSR-ScaleOut-doc-0.185.1-150000.39.1 * SAPHanaSR-ScaleOut-0.185.1-150000.39.1 * openSUSE Leap 15.5 (noarch) * SAPHanaSR-ScaleOut-doc-0.185.1-150000.39.1 * SAPHanaSR-ScaleOut-0.185.1-150000.39.1 * SAP Applications Module 15-SP1 (noarch) * SAPHanaSR-ScaleOut-doc-0.185.1-150000.39.1 * SAPHanaSR-ScaleOut-0.185.1-150000.39.1 * SAP Applications Module 15-SP2 (noarch) * SAPHanaSR-ScaleOut-doc-0.185.1-150000.39.1 * SAPHanaSR-ScaleOut-0.185.1-150000.39.1 * SAP Applications Module 15-SP3 (noarch) * SAPHanaSR-ScaleOut-doc-0.185.1-150000.39.1 * SAPHanaSR-ScaleOut-0.185.1-150000.39.1 * SAP Applications Module 15-SP4 (noarch) * SAPHanaSR-ScaleOut-doc-0.185.1-150000.39.1 * SAPHanaSR-ScaleOut-0.185.1-150000.39.1 * SAP Applications Module 15-SP5 (noarch) * SAPHanaSR-ScaleOut-doc-0.185.1-150000.39.1 * SAPHanaSR-ScaleOut-0.185.1-150000.39.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1210728 * https://bugzilla.suse.com/show_bug.cgi?id=1214613 * https://jira.suse.com/browse/PED-1739 * https://jira.suse.com/browse/PED-2608

1 0

SUSE-SU-2023:3531-1: important: Security update for buildah
by maintenance＠opensuse.org 05 Sep '23

05 Sep '23

# Security update for buildah Announcement ID: SUSE-SU-2023:3531-1 Rating: important References: * #1212475 Affected Products: * Containers Module 15-SP4 * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one security fix can now be installed. ## Description: This update of buildah fixes the following issues: * rebuild the package with the go 1.21 security release (bsc#1212475). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3531=1 SUSE-2023-3531=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-3531=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * buildah-1.29.1-150400.3.20.1 * Containers Module 15-SP4 (aarch64 ppc64le s390x) * buildah-1.29.1-150400.3.20.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212475

1 0