September 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2023:3826-1: moderate: Security update for mutt
by maintenance＠opensuse.org 27 Sep '23

27 Sep '23

# Security update for mutt Announcement ID: SUSE-SU-2023:3826-1 Rating: moderate References: * #1215189 * #1215191 Cross-References: * CVE-2023-4874 * CVE-2023-4875 CVSS scores: * CVE-2023-4874 ( SUSE ): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2023-4874 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-4875 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-4875 ( NVD ): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for mutt fixes the following issues: * CVE-2023-4874: Fixed NULL pointer dereference when composing an email (bsc#1215189). * CVE-2023-4875: Fixed NULL pointer dereference when receiving an email (bsc#1215191). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3826=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3826=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3826=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3826=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3826=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-3826=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3826=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * mutt-debugsource-1.10.1-150000.3.26.1 * mutt-1.10.1-150000.3.26.1 * mutt-debuginfo-1.10.1-150000.3.26.1 * openSUSE Leap 15.4 (noarch) * mutt-doc-1.10.1-150000.3.26.1 * mutt-lang-1.10.1-150000.3.26.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * mutt-debugsource-1.10.1-150000.3.26.1 * mutt-1.10.1-150000.3.26.1 * mutt-debuginfo-1.10.1-150000.3.26.1 * openSUSE Leap 15.5 (noarch) * mutt-doc-1.10.1-150000.3.26.1 * mutt-lang-1.10.1-150000.3.26.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * mutt-debugsource-1.10.1-150000.3.26.1 * mutt-1.10.1-150000.3.26.1 * mutt-debuginfo-1.10.1-150000.3.26.1 * Basesystem Module 15-SP4 (noarch) * mutt-doc-1.10.1-150000.3.26.1 * mutt-lang-1.10.1-150000.3.26.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * mutt-debugsource-1.10.1-150000.3.26.1 * mutt-1.10.1-150000.3.26.1 * mutt-debuginfo-1.10.1-150000.3.26.1 * Basesystem Module 15-SP5 (noarch) * mutt-doc-1.10.1-150000.3.26.1 * mutt-lang-1.10.1-150000.3.26.1 * SUSE Manager Proxy 4.2 (x86_64) * mutt-debugsource-1.10.1-150000.3.26.1 * mutt-1.10.1-150000.3.26.1 * mutt-debuginfo-1.10.1-150000.3.26.1 * SUSE Manager Proxy 4.2 (noarch) * mutt-doc-1.10.1-150000.3.26.1 * mutt-lang-1.10.1-150000.3.26.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * mutt-debugsource-1.10.1-150000.3.26.1 * mutt-1.10.1-150000.3.26.1 * mutt-debuginfo-1.10.1-150000.3.26.1 * SUSE Manager Retail Branch Server 4.2 (noarch) * mutt-doc-1.10.1-150000.3.26.1 * mutt-lang-1.10.1-150000.3.26.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * mutt-debugsource-1.10.1-150000.3.26.1 * mutt-1.10.1-150000.3.26.1 * mutt-debuginfo-1.10.1-150000.3.26.1 * SUSE Manager Server 4.2 (noarch) * mutt-doc-1.10.1-150000.3.26.1 * mutt-lang-1.10.1-150000.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4874.html * https://www.suse.com/security/cve/CVE-2023-4875.html * https://bugzilla.suse.com/show_bug.cgi?id=1215189 * https://bugzilla.suse.com/show_bug.cgi?id=1215191

1 0

SUSE-SU-2023:3827-1: moderate: Security update for python-brotlipy
by maintenance＠opensuse.org 27 Sep '23

27 Sep '23

# Security update for python-brotlipy Announcement ID: SUSE-SU-2023:3827-1 Rating: moderate References: * #1175825 Cross-References: * CVE-2020-8927 CVSS scores: * CVE-2020-8927 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2020-8927 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-brotlipy fixes the following issues: * CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2023-3827=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-3827=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2023-3827=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3827=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3827=1 ## Package List: * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * python-brotlipy-debugsource-0.7.0-150300.3.3.1 * python-brotlipy-debuginfo-0.7.0-150300.3.3.1 * python3-brotlipy-debuginfo-0.7.0-150300.3.3.1 * python3-brotlipy-0.7.0-150300.3.3.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python-brotlipy-debugsource-0.7.0-150300.3.3.1 * python-brotlipy-debuginfo-0.7.0-150300.3.3.1 * python3-brotlipy-debuginfo-0.7.0-150300.3.3.1 * python3-brotlipy-0.7.0-150300.3.3.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python-brotlipy-debugsource-0.7.0-150300.3.3.1 * python-brotlipy-debuginfo-0.7.0-150300.3.3.1 * python3-brotlipy-debuginfo-0.7.0-150300.3.3.1 * python3-brotlipy-0.7.0-150300.3.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python-brotlipy-debugsource-0.7.0-150300.3.3.1 * python-brotlipy-debuginfo-0.7.0-150300.3.3.1 * python3-brotlipy-debuginfo-0.7.0-150300.3.3.1 * python3-brotlipy-0.7.0-150300.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-brotlipy-debugsource-0.7.0-150300.3.3.1 * python-brotlipy-debuginfo-0.7.0-150300.3.3.1 * python3-brotlipy-debuginfo-0.7.0-150300.3.3.1 * python3-brotlipy-0.7.0-150300.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2020-8927.html * https://bugzilla.suse.com/show_bug.cgi?id=1175825

1 0

SUSE-SU-2023:3828-1: important: Security update for python3
by maintenance＠opensuse.org 27 Sep '23

27 Sep '23

# Security update for python3 Announcement ID: SUSE-SU-2023:3828-1 Rating: important References: * #1214692 Cross-References: * CVE-2023-40217 CVSS scores: * CVE-2023-40217 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2023-40217 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python3 fixes the following issues: * CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3828=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3828=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3828=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3828=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3828=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3828=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3828=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3828=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-3828=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-3828=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-3828=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-3828=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-3828=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-3828=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3828=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-3828=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3828=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-3828=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-3828=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-3828=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python3-3.6.15-150300.10.51.1 * python3-doc-devhelp-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-tools-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-testsuite-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-testsuite-debuginfo-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-doc-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * openSUSE Leap 15.4 (x86_64) * libpython3_6m1_0-32bit-3.6.15-150300.10.51.1 * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.51.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-3.6.15-150300.10.51.1 * python3-doc-devhelp-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-tools-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-testsuite-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-testsuite-debuginfo-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-doc-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * openSUSE Leap 15.5 (x86_64) * libpython3_6m1_0-32bit-3.6.15-150300.10.51.1 * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.51.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-tools-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-tools-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-tools-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-tools-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-tools-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-tools-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Manager Proxy 4.2 (x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-curses-debuginfo-3.6.15-150300.10.51.1 * python3-tk-debuginfo-3.6.15-150300.10.51.1 * python3-idle-3.6.15-150300.10.51.1 * python3-curses-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-dbm-debuginfo-3.6.15-150300.10.51.1 * python3-devel-3.6.15-150300.10.51.1 * python3-devel-debuginfo-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * python3-tk-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-tools-3.6.15-150300.10.51.1 * python3-dbm-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * python3-3.6.15-150300.10.51.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1 * python3-base-3.6.15-150300.10.51.1 * python3-debugsource-3.6.15-150300.10.51.1 * python3-core-debugsource-3.6.15-150300.10.51.1 * python3-debuginfo-3.6.15-150300.10.51.1 * libpython3_6m1_0-3.6.15-150300.10.51.1 * python3-base-debuginfo-3.6.15-150300.10.51.1 ## References: * https://www.suse.com/security/cve/CVE-2023-40217.html * https://bugzilla.suse.com/show_bug.cgi?id=1214692

1 0

SUSE-SU-2023:3829-1: critical: Security update for libwebp
by maintenance＠opensuse.org 27 Sep '23

27 Sep '23

# Security update for libwebp Announcement ID: SUSE-SU-2023:3829-1 Rating: critical References: * #1215231 Cross-References: * CVE-2023-4863 CVSS scores: * CVE-2023-4863 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4863 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE CaaS Platform 4.0 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP4 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libwebp fixes the following issues: * CVE-2023-4863: Fixed heap buffer overflow (bsc#1215231). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3829=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-3829=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-3829=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3829=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3829=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3829=1 * SUSE Linux Enterprise Workstation Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-3829=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-3829=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libwebpdecoder2-debuginfo-0.5.0-150000.3.14.1 * libwebpdecoder2-0.5.0-150000.3.14.1 * libwebpmux2-0.5.0-150000.3.14.1 * libwebpextras0-0.5.0-150000.3.14.1 * libwebp6-0.5.0-150000.3.14.1 * libwebpmux2-debuginfo-0.5.0-150000.3.14.1 * libwebp6-debuginfo-0.5.0-150000.3.14.1 * libwebpextras0-debuginfo-0.5.0-150000.3.14.1 * openSUSE Leap 15.4 (x86_64) * libwebp6-32bit-0.5.0-150000.3.14.1 * libwebpextras0-32bit-0.5.0-150000.3.14.1 * libwebpdecoder2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebp6-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpextras0-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpdecoder2-32bit-0.5.0-150000.3.14.1 * libwebpmux2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpmux2-32bit-0.5.0-150000.3.14.1 * SUSE Package Hub 15 15-SP4 (x86_64) * libwebp6-32bit-0.5.0-150000.3.14.1 * libwebp-debugsource-0.5.0-150000.3.14.1 * libwebp6-32bit-debuginfo-0.5.0-150000.3.14.1 * SUSE Package Hub 15 15-SP5 (x86_64) * libwebp6-32bit-0.5.0-150000.3.14.1 * libwebp6-32bit-debuginfo-0.5.0-150000.3.14.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * libwebpdecoder2-debuginfo-0.5.0-150000.3.14.1 * libwebpdecoder2-0.5.0-150000.3.14.1 * libwebp6-debuginfo-0.5.0-150000.3.14.1 * libwebpmux2-0.5.0-150000.3.14.1 * libwebpextras0-0.5.0-150000.3.14.1 * libwebp6-0.5.0-150000.3.14.1 * libwebpmux2-debuginfo-0.5.0-150000.3.14.1 * libwebp-debugsource-0.5.0-150000.3.14.1 * libwebpdemux2-0.5.0-150000.3.14.1 * libwebpdemux2-debuginfo-0.5.0-150000.3.14.1 * libwebp-devel-0.5.0-150000.3.14.1 * libwebpextras0-debuginfo-0.5.0-150000.3.14.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libwebp6-32bit-0.5.0-150000.3.14.1 * libwebpdemux2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpextras0-32bit-0.5.0-150000.3.14.1 * libwebpdecoder2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpdemux2-32bit-0.5.0-150000.3.14.1 * libwebp6-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpextras0-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpdecoder2-32bit-0.5.0-150000.3.14.1 * libwebpmux2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpmux2-32bit-0.5.0-150000.3.14.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * libwebpdecoder2-debuginfo-0.5.0-150000.3.14.1 * libwebpdecoder2-0.5.0-150000.3.14.1 * libwebp6-debuginfo-0.5.0-150000.3.14.1 * libwebpmux2-0.5.0-150000.3.14.1 * libwebpextras0-0.5.0-150000.3.14.1 * libwebp6-0.5.0-150000.3.14.1 * libwebpmux2-debuginfo-0.5.0-150000.3.14.1 * libwebp-debugsource-0.5.0-150000.3.14.1 * libwebpdemux2-0.5.0-150000.3.14.1 * libwebpdemux2-debuginfo-0.5.0-150000.3.14.1 * libwebp-devel-0.5.0-150000.3.14.1 * libwebpextras0-debuginfo-0.5.0-150000.3.14.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libwebp6-32bit-0.5.0-150000.3.14.1 * libwebpdemux2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpextras0-32bit-0.5.0-150000.3.14.1 * libwebpdecoder2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpdemux2-32bit-0.5.0-150000.3.14.1 * libwebp6-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpextras0-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpdecoder2-32bit-0.5.0-150000.3.14.1 * libwebpmux2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpmux2-32bit-0.5.0-150000.3.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * libwebpdecoder2-debuginfo-0.5.0-150000.3.14.1 * libwebpdecoder2-0.5.0-150000.3.14.1 * libwebp6-debuginfo-0.5.0-150000.3.14.1 * libwebpmux2-0.5.0-150000.3.14.1 * libwebpextras0-0.5.0-150000.3.14.1 * libwebp6-0.5.0-150000.3.14.1 * libwebpmux2-debuginfo-0.5.0-150000.3.14.1 * libwebp-debugsource-0.5.0-150000.3.14.1 * libwebpdemux2-0.5.0-150000.3.14.1 * libwebpdemux2-debuginfo-0.5.0-150000.3.14.1 * libwebp-devel-0.5.0-150000.3.14.1 * libwebpextras0-debuginfo-0.5.0-150000.3.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libwebp6-32bit-0.5.0-150000.3.14.1 * libwebpdemux2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpextras0-32bit-0.5.0-150000.3.14.1 * libwebpdecoder2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpdemux2-32bit-0.5.0-150000.3.14.1 * libwebp6-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpextras0-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpdecoder2-32bit-0.5.0-150000.3.14.1 * libwebpmux2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpmux2-32bit-0.5.0-150000.3.14.1 * SUSE Linux Enterprise Workstation Extension 15 SP4 (x86_64) * libwebp6-debuginfo-0.5.0-150000.3.14.1 * libwebp6-0.5.0-150000.3.14.1 * libwebp-debugsource-0.5.0-150000.3.14.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * libwebp6-debuginfo-0.5.0-150000.3.14.1 * libwebp6-0.5.0-150000.3.14.1 * libwebp-debugsource-0.5.0-150000.3.14.1 * SUSE CaaS Platform 4.0 (x86_64) * libwebp6-32bit-0.5.0-150000.3.14.1 * libwebp6-0.5.0-150000.3.14.1 * libwebp6-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebp-debugsource-0.5.0-150000.3.14.1 * libwebpdecoder2-32bit-0.5.0-150000.3.14.1 * libwebpextras0-debuginfo-0.5.0-150000.3.14.1 * libwebpextras0-32bit-0.5.0-150000.3.14.1 * libwebp-devel-0.5.0-150000.3.14.1 * libwebpmux2-debuginfo-0.5.0-150000.3.14.1 * libwebpdemux2-debuginfo-0.5.0-150000.3.14.1 * libwebpdecoder2-debuginfo-0.5.0-150000.3.14.1 * libwebpdemux2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpdecoder2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpdemux2-32bit-0.5.0-150000.3.14.1 * libwebpmux2-0.5.0-150000.3.14.1 * libwebpextras0-0.5.0-150000.3.14.1 * libwebpextras0-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpmux2-32bit-debuginfo-0.5.0-150000.3.14.1 * libwebpdecoder2-0.5.0-150000.3.14.1 * libwebpdemux2-0.5.0-150000.3.14.1 * libwebp6-debuginfo-0.5.0-150000.3.14.1 * libwebpmux2-32bit-0.5.0-150000.3.14.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4863.html * https://bugzilla.suse.com/show_bug.cgi?id=1215231

1 0

SUSE-SU-2023:3830-1: moderate: Security update for xrdp
by maintenance＠opensuse.org 27 Sep '23

27 Sep '23

# Security update for xrdp Announcement ID: SUSE-SU-2023:3830-1 Rating: moderate References: * #1214805 Cross-References: * CVE-2023-40184 CVSS scores: * CVE-2023-40184 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2023-40184 ( NVD ): 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for xrdp fixes the following issues: * CVE-2023-40184: Fixed restriction bypass via improper session handling (bsc#1214805). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3830=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3830=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3830=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3830=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3830=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-3830=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3830=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * xrdp-debugsource-0.9.13.1-150200.4.24.1 * libpainter0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-devel-0.9.13.1-150200.4.24.1 * libpainter0-0.9.13.1-150200.4.24.1 * librfxencode0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-0.9.13.1-150200.4.24.1 * librfxencode0-0.9.13.1-150200.4.24.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * xrdp-debugsource-0.9.13.1-150200.4.24.1 * libpainter0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-devel-0.9.13.1-150200.4.24.1 * libpainter0-0.9.13.1-150200.4.24.1 * librfxencode0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-0.9.13.1-150200.4.24.1 * librfxencode0-0.9.13.1-150200.4.24.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * xrdp-debugsource-0.9.13.1-150200.4.24.1 * libpainter0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-devel-0.9.13.1-150200.4.24.1 * libpainter0-0.9.13.1-150200.4.24.1 * librfxencode0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-0.9.13.1-150200.4.24.1 * librfxencode0-0.9.13.1-150200.4.24.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * xrdp-debugsource-0.9.13.1-150200.4.24.1 * libpainter0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-devel-0.9.13.1-150200.4.24.1 * libpainter0-0.9.13.1-150200.4.24.1 * librfxencode0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-0.9.13.1-150200.4.24.1 * librfxencode0-0.9.13.1-150200.4.24.1 * SUSE Manager Proxy 4.2 (x86_64) * xrdp-debugsource-0.9.13.1-150200.4.24.1 * libpainter0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-devel-0.9.13.1-150200.4.24.1 * libpainter0-0.9.13.1-150200.4.24.1 * librfxencode0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-0.9.13.1-150200.4.24.1 * librfxencode0-0.9.13.1-150200.4.24.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * xrdp-debugsource-0.9.13.1-150200.4.24.1 * libpainter0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-devel-0.9.13.1-150200.4.24.1 * libpainter0-0.9.13.1-150200.4.24.1 * librfxencode0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-0.9.13.1-150200.4.24.1 * librfxencode0-0.9.13.1-150200.4.24.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * xrdp-debugsource-0.9.13.1-150200.4.24.1 * libpainter0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-devel-0.9.13.1-150200.4.24.1 * libpainter0-0.9.13.1-150200.4.24.1 * librfxencode0-debuginfo-0.9.13.1-150200.4.24.1 * xrdp-0.9.13.1-150200.4.24.1 * librfxencode0-0.9.13.1-150200.4.24.1 ## References: * https://www.suse.com/security/cve/CVE-2023-40184.html * https://bugzilla.suse.com/show_bug.cgi?id=1214805

1 0

SUSE-SU-2023:3831-1: important: Security update for xen
by maintenance＠opensuse.org 27 Sep '23

27 Sep '23

# Security update for xen Announcement ID: SUSE-SU-2023:3831-1 Rating: important References: * #1215145 * #1215474 Cross-References: * CVE-2023-20588 * CVE-2023-34322 CVSS scores: * CVE-2023-20588 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2023-20588 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-34322 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). * CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3831=1 SUSE-2023-3831=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3831=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-3831=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * xen-tools-debuginfo-4.17.2_04-150500.3.9.1 * xen-4.17.2_04-150500.3.9.1 * xen-doc-html-4.17.2_04-150500.3.9.1 * xen-tools-4.17.2_04-150500.3.9.1 * openSUSE Leap 15.5 (aarch64 x86_64 i586) * xen-tools-domU-debuginfo-4.17.2_04-150500.3.9.1 * xen-devel-4.17.2_04-150500.3.9.1 * xen-libs-4.17.2_04-150500.3.9.1 * xen-tools-domU-4.17.2_04-150500.3.9.1 * xen-debugsource-4.17.2_04-150500.3.9.1 * xen-libs-debuginfo-4.17.2_04-150500.3.9.1 * openSUSE Leap 15.5 (x86_64) * xen-libs-32bit-4.17.2_04-150500.3.9.1 * xen-libs-32bit-debuginfo-4.17.2_04-150500.3.9.1 * openSUSE Leap 15.5 (noarch) * xen-tools-xendomains-wait-disk-4.17.2_04-150500.3.9.1 * openSUSE Leap 15.5 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.17.2_04-150500.3.9.1 * xen-libs-64bit-4.17.2_04-150500.3.9.1 * Basesystem Module 15-SP5 (x86_64) * xen-tools-domU-debuginfo-4.17.2_04-150500.3.9.1 * xen-libs-4.17.2_04-150500.3.9.1 * xen-tools-domU-4.17.2_04-150500.3.9.1 * xen-debugsource-4.17.2_04-150500.3.9.1 * xen-libs-debuginfo-4.17.2_04-150500.3.9.1 * Server Applications Module 15-SP5 (x86_64) * xen-tools-4.17.2_04-150500.3.9.1 * xen-devel-4.17.2_04-150500.3.9.1 * xen-debugsource-4.17.2_04-150500.3.9.1 * xen-tools-debuginfo-4.17.2_04-150500.3.9.1 * xen-4.17.2_04-150500.3.9.1 * Server Applications Module 15-SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.2_04-150500.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-20588.html * https://www.suse.com/security/cve/CVE-2023-34322.html * https://bugzilla.suse.com/show_bug.cgi?id=1215145 * https://bugzilla.suse.com/show_bug.cgi?id=1215474

1 0

SUSE-SU-2023:3832-1: important: Security update for xen
by maintenance＠opensuse.org 27 Sep '23

27 Sep '23

# Security update for xen Announcement ID: SUSE-SU-2023:3832-1 Rating: important References: * #1215145 * #1215474 Cross-References: * CVE-2023-20588 * CVE-2023-34322 CVSS scores: * CVE-2023-20588 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2023-20588 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-34322 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * Server Applications Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). * CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3832=1 openSUSE-SLE-15.4-2023-3832=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3832=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3832=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3832=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3832=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3832=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-3832=1 ## Package List: * openSUSE Leap 15.4 (aarch64 x86_64 i586) * xen-libs-4.16.5_04-150400.4.34.1 * xen-devel-4.16.5_04-150400.4.34.1 * xen-tools-domU-debuginfo-4.16.5_04-150400.4.34.1 * xen-debugsource-4.16.5_04-150400.4.34.1 * xen-tools-domU-4.16.5_04-150400.4.34.1 * xen-libs-debuginfo-4.16.5_04-150400.4.34.1 * openSUSE Leap 15.4 (x86_64) * xen-libs-32bit-4.16.5_04-150400.4.34.1 * xen-libs-32bit-debuginfo-4.16.5_04-150400.4.34.1 * openSUSE Leap 15.4 (aarch64 x86_64) * xen-tools-4.16.5_04-150400.4.34.1 * xen-tools-debuginfo-4.16.5_04-150400.4.34.1 * xen-4.16.5_04-150400.4.34.1 * xen-doc-html-4.16.5_04-150400.4.34.1 * openSUSE Leap 15.4 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_04-150400.4.34.1 * openSUSE Leap 15.4 (aarch64_ilp32) * xen-libs-64bit-4.16.5_04-150400.4.34.1 * xen-libs-64bit-debuginfo-4.16.5_04-150400.4.34.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * xen-libs-4.16.5_04-150400.4.34.1 * xen-debugsource-4.16.5_04-150400.4.34.1 * xen-libs-debuginfo-4.16.5_04-150400.4.34.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * xen-libs-4.16.5_04-150400.4.34.1 * xen-debugsource-4.16.5_04-150400.4.34.1 * xen-libs-debuginfo-4.16.5_04-150400.4.34.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * xen-libs-4.16.5_04-150400.4.34.1 * xen-debugsource-4.16.5_04-150400.4.34.1 * xen-libs-debuginfo-4.16.5_04-150400.4.34.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * xen-libs-4.16.5_04-150400.4.34.1 * xen-debugsource-4.16.5_04-150400.4.34.1 * xen-libs-debuginfo-4.16.5_04-150400.4.34.1 * Basesystem Module 15-SP4 (x86_64) * xen-libs-4.16.5_04-150400.4.34.1 * xen-debugsource-4.16.5_04-150400.4.34.1 * xen-libs-debuginfo-4.16.5_04-150400.4.34.1 * xen-tools-domU-4.16.5_04-150400.4.34.1 * xen-tools-domU-debuginfo-4.16.5_04-150400.4.34.1 * Server Applications Module 15-SP4 (x86_64) * xen-devel-4.16.5_04-150400.4.34.1 * xen-tools-debuginfo-4.16.5_04-150400.4.34.1 * xen-debugsource-4.16.5_04-150400.4.34.1 * xen-4.16.5_04-150400.4.34.1 * xen-tools-4.16.5_04-150400.4.34.1 * Server Applications Module 15-SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_04-150400.4.34.1 ## References: * https://www.suse.com/security/cve/CVE-2023-20588.html * https://www.suse.com/security/cve/CVE-2023-34322.html * https://bugzilla.suse.com/show_bug.cgi?id=1215145 * https://bugzilla.suse.com/show_bug.cgi?id=1215474

1 0

SUSE-SU-2023:3833-1: moderate: Security update for exempi
by maintenance＠opensuse.org 27 Sep '23

27 Sep '23

# Security update for exempi Announcement ID: SUSE-SU-2023:3833-1 Rating: moderate References: * #1214486 Cross-References: * CVE-2020-18651 CVSS scores: * CVE-2020-18651 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2020-18651 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP4 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for exempi fixes the following issues: * CVE-2020-18651: Fixed a buffer overflow in ID3 support (bsc#1214486). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3833=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3833=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-3833=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-3833=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libexempi-devel-2.4.5-150000.3.9.1 * libexempi3-debuginfo-2.4.5-150000.3.9.1 * exempi-tools-debuginfo-2.4.5-150000.3.9.1 * exempi-debugsource-2.4.5-150000.3.9.1 * exempi-tools-2.4.5-150000.3.9.1 * libexempi3-2.4.5-150000.3.9.1 * openSUSE Leap 15.4 (x86_64) * libexempi3-32bit-2.4.5-150000.3.9.1 * libexempi3-32bit-debuginfo-2.4.5-150000.3.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libexempi-devel-2.4.5-150000.3.9.1 * libexempi3-debuginfo-2.4.5-150000.3.9.1 * exempi-tools-debuginfo-2.4.5-150000.3.9.1 * exempi-debugsource-2.4.5-150000.3.9.1 * exempi-tools-2.4.5-150000.3.9.1 * libexempi3-2.4.5-150000.3.9.1 * openSUSE Leap 15.5 (x86_64) * libexempi3-32bit-2.4.5-150000.3.9.1 * libexempi3-32bit-debuginfo-2.4.5-150000.3.9.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libexempi-devel-2.4.5-150000.3.9.1 * exempi-debugsource-2.4.5-150000.3.9.1 * libexempi3-2.4.5-150000.3.9.1 * libexempi3-debuginfo-2.4.5-150000.3.9.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libexempi-devel-2.4.5-150000.3.9.1 * exempi-debugsource-2.4.5-150000.3.9.1 * libexempi3-2.4.5-150000.3.9.1 * libexempi3-debuginfo-2.4.5-150000.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2020-18651.html * https://bugzilla.suse.com/show_bug.cgi?id=1214486

1 0

SUSE-SU-2023:3835-1: important: Securitys update for open-vm-tools
by maintenance＠opensuse.org 27 Sep '23

27 Sep '23

# Securitys update for open-vm-tools Announcement ID: SUSE-SU-2023:3835-1 Rating: important References: * #1205927 * #1214850 * PED-1344 Cross-References: * CVE-2023-20900 CVSS scores: * CVE-2023-20900 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-20900 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP4 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability, contains one feature and has one security fix can now be installed. ## Description: This update for open-vm-tools fixes the following issues: Update to 12.3.0 (build 22234872) (bsc#1214850) * There are no new features in the open-vm-tools 12.3.0 release. This is primarily a maintenance release that addresses a few critical problems, including: * This release integrates CVE-2023-20900 without the need for a patch. For more information on this vulnerability and its impact on VMware products, see https://www.vmware.com/security/advisories/VMSA-2023-0019.html. * A tools.conf configuration setting is available to temporaily direct Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior of ignoring file systems already frozen. * Building of the VMware Guest Authentication Service (VGAuth) using "xml- security-c" and "xerces-c" is being deprecated. * A number of Coverity reported issues have been addressed. * A number of GitHub issues and pull requests have been handled. Please see the Resolves Issues section of the Release Notes. * For issues resolved in this release, see the Resolved Issues section of the Release Notes. * For complete details, see: https://github.com/vmware/open-vm- tools/releases/tag/stable-12.3.0 * Release Notes are available at https://github.com/vmware/open-vm- tools/blob/stable-12.3.0/ReleaseNotes.md * The granular changes that have gone into the 12.3.0 release are in the ChangeLog at https://github.com/vmware/open-vm- tools/blob/stable-12.3.0/open-vm-tools/ChangeLog * Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests * jsc#PED-1344 - reinable building containerinfo plugin for SLES 15 SP4. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3835=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3835=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3835=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3835=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3835=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3835=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3835=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3835=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-3835=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-3835=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-3835=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-3835=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-3835=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-3835=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3835=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-3835=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3835=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-3835=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-3835=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-3835=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-3835=1 ## Package List: * openSUSE Leap 15.4 (aarch64 x86_64) * open-vm-tools-desktop-12.3.0-150300.37.1 * open-vm-tools-containerinfo-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-containerinfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-desktop-debuginfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools-devel-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * openSUSE Leap 15.4 (x86_64) * open-vm-tools-salt-minion-12.3.0-150300.37.1 * openSUSE Leap 15.5 (aarch64 x86_64) * open-vm-tools-desktop-12.3.0-150300.37.1 * open-vm-tools-containerinfo-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-containerinfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-desktop-debuginfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools-devel-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * openSUSE Leap 15.5 (x86_64) * open-vm-tools-salt-minion-12.3.0-150300.37.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * Basesystem Module 15-SP4 (aarch64 x86_64) * open-vm-tools-containerinfo-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-containerinfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools-devel-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * Basesystem Module 15-SP4 (x86_64) * open-vm-tools-salt-minion-12.3.0-150300.37.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * open-vm-tools-containerinfo-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-containerinfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * Basesystem Module 15-SP5 (x86_64) * libvmtools-devel-12.3.0-150300.37.1 * open-vm-tools-salt-minion-12.3.0-150300.37.1 * Desktop Applications Module 15-SP4 (aarch64 x86_64) * open-vm-tools-desktop-12.3.0-150300.37.1 * open-vm-tools-desktop-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * Desktop Applications Module 15-SP5 (aarch64 x86_64) * open-vm-tools-desktop-12.3.0-150300.37.1 * open-vm-tools-desktop-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * open-vm-tools-desktop-12.3.0-150300.37.1 * open-vm-tools-containerinfo-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-containerinfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-desktop-debuginfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools-devel-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-salt-minion-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * open-vm-tools-desktop-12.3.0-150300.37.1 * open-vm-tools-containerinfo-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-containerinfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-desktop-debuginfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools-devel-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * open-vm-tools-desktop-12.3.0-150300.37.1 * open-vm-tools-containerinfo-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-containerinfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-desktop-debuginfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools-devel-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-salt-minion-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * open-vm-tools-desktop-12.3.0-150300.37.1 * open-vm-tools-containerinfo-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-containerinfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-desktop-debuginfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools-devel-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Manager Proxy 4.2 (x86_64) * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools-devel-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools-devel-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Manager Server 4.2 (x86_64) * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools-devel-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Enterprise Storage 7.1 (x86_64) * open-vm-tools-desktop-12.3.0-150300.37.1 * open-vm-tools-containerinfo-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-containerinfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * open-vm-tools-desktop-debuginfo-12.3.0-150300.37.1 * open-vm-tools-sdmp-12.3.0-150300.37.1 * libvmtools-devel-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-salt-minion-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * open-vm-tools-debuginfo-12.3.0-150300.37.1 * open-vm-tools-debugsource-12.3.0-150300.37.1 * libvmtools0-12.3.0-150300.37.1 * open-vm-tools-12.3.0-150300.37.1 * libvmtools0-debuginfo-12.3.0-150300.37.1 ## References: * https://www.suse.com/security/cve/CVE-2023-20900.html * https://bugzilla.suse.com/show_bug.cgi?id=1205927 * https://bugzilla.suse.com/show_bug.cgi?id=1214850 * https://jira.suse.com/browse/PED-1344

1 0

SUSE-SU-2023:3839-1: important: Security update for quagga
by maintenance＠opensuse.org 27 Sep '23

27 Sep '23

# Security update for quagga Announcement ID: SUSE-SU-2023:3839-1 Rating: important References: * #1213284 * #1214735 Cross-References: * CVE-2023-38802 * CVE-2023-41358 CVSS scores: * CVE-2023-38802 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38802 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-41358 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-41358 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP4 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for quagga fixes the following issues: * CVE-2023-38802: Fixed bad length handling in BGP attribute handling (bsc#1213284). * CVE-2023-41358: Fixed possible crash when processing NLRIs if the attribute length is zero (bsc#1214735). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3839=1 openSUSE-SLE-15.4-2023-3839=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3839=1 * Server Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-3839=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-3839=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * quagga-debugsource-1.1.1-150400.12.5.1 * libzebra1-debuginfo-1.1.1-150400.12.5.1 * quagga-debuginfo-1.1.1-150400.12.5.1 * libospfapiclient0-debuginfo-1.1.1-150400.12.5.1 * libospf0-1.1.1-150400.12.5.1 * quagga-devel-1.1.1-150400.12.5.1 * libquagga_pb0-1.1.1-150400.12.5.1 * quagga-1.1.1-150400.12.5.1 * libfpm_pb0-1.1.1-150400.12.5.1 * libfpm_pb0-debuginfo-1.1.1-150400.12.5.1 * libzebra1-1.1.1-150400.12.5.1 * libquagga_pb0-debuginfo-1.1.1-150400.12.5.1 * libospf0-debuginfo-1.1.1-150400.12.5.1 * libospfapiclient0-1.1.1-150400.12.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * quagga-debugsource-1.1.1-150400.12.5.1 * libzebra1-debuginfo-1.1.1-150400.12.5.1 * quagga-debuginfo-1.1.1-150400.12.5.1 * libospfapiclient0-debuginfo-1.1.1-150400.12.5.1 * libospf0-1.1.1-150400.12.5.1 * quagga-devel-1.1.1-150400.12.5.1 * libquagga_pb0-1.1.1-150400.12.5.1 * quagga-1.1.1-150400.12.5.1 * libfpm_pb0-1.1.1-150400.12.5.1 * libfpm_pb0-debuginfo-1.1.1-150400.12.5.1 * libzebra1-1.1.1-150400.12.5.1 * libquagga_pb0-debuginfo-1.1.1-150400.12.5.1 * libospf0-debuginfo-1.1.1-150400.12.5.1 * libospfapiclient0-1.1.1-150400.12.5.1 * Server Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * quagga-debugsource-1.1.1-150400.12.5.1 * libzebra1-debuginfo-1.1.1-150400.12.5.1 * quagga-debuginfo-1.1.1-150400.12.5.1 * libospfapiclient0-debuginfo-1.1.1-150400.12.5.1 * libospf0-1.1.1-150400.12.5.1 * quagga-devel-1.1.1-150400.12.5.1 * libquagga_pb0-1.1.1-150400.12.5.1 * quagga-1.1.1-150400.12.5.1 * libfpm_pb0-1.1.1-150400.12.5.1 * libfpm_pb0-debuginfo-1.1.1-150400.12.5.1 * libzebra1-1.1.1-150400.12.5.1 * libquagga_pb0-debuginfo-1.1.1-150400.12.5.1 * libospf0-debuginfo-1.1.1-150400.12.5.1 * libospfapiclient0-1.1.1-150400.12.5.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * quagga-debugsource-1.1.1-150400.12.5.1 * libzebra1-debuginfo-1.1.1-150400.12.5.1 * quagga-debuginfo-1.1.1-150400.12.5.1 * libospfapiclient0-debuginfo-1.1.1-150400.12.5.1 * libospf0-1.1.1-150400.12.5.1 * quagga-devel-1.1.1-150400.12.5.1 * libquagga_pb0-1.1.1-150400.12.5.1 * quagga-1.1.1-150400.12.5.1 * libfpm_pb0-1.1.1-150400.12.5.1 * libfpm_pb0-debuginfo-1.1.1-150400.12.5.1 * libzebra1-1.1.1-150400.12.5.1 * libquagga_pb0-debuginfo-1.1.1-150400.12.5.1 * libospf0-debuginfo-1.1.1-150400.12.5.1 * libospfapiclient0-1.1.1-150400.12.5.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38802.html * https://www.suse.com/security/cve/CVE-2023-41358.html * https://bugzilla.suse.com/show_bug.cgi?id=1213284 * https://bugzilla.suse.com/show_bug.cgi?id=1214735

1 0