This update for openssl-3 fixes the following issues: CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

This update for sudo fixes the following issues: NOTE: This update has been retracted, as some logic was not changed correctly. CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).

This update for timezone fixes the following issues: Update to version 2024a Kazakhstan unifies on UTC+5 Palestine springs forward a week later than previously predicted in 2024 and 2025 Asia/HoChiMinh's 1955-07-01 transition occurred at 01:00 not 00:00 From 1947 through 1949, Toronto's transitions occurred at 02:00 not 00:00 In 1911 Miquelon adopted standard time on June 15, not May 15 The FROM and TO columns of Rule lines can no longer be "minimum" localtime no longer mishandle some timestamps strftime %s now uses tmgmtoff if available Ittoqqortoormiit, Greenland changes time zones on 2024-03-31 Vostok, Antarctica changed time zones on 2023-12-18 Casey, Antarctica changed time zones five times since 2020 Code and data fixes for Palestine timestamps starting in 2072 A new data file zonenow.tab for timestamps starting now Much of Greenland changed its standard time from -03 to -02 on 2023-03-25 localtime.c no longer mishandles TZif files that contain a single transition into a DST regime tzselect no longer creates temporary files tzselect no longer mishandles the following: Spaces and most other special characters in BUGEMAIL, PACKAGE, TZDIR, and VERSION. TZ strings when using mawk 1.4.3, which mishandles regular expressions of the form /X{2,}/ ISO 6709 coordinates when using an awk that lacks the GNU extension of newlines in -v option-arguments Non UTF-8 locales when using an iconv command that lacks the GNU //TRANSLIT extension zic no longer mishandles data for Palestine after the year 2075

This update for sudo fixes the following issues: CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).

This update for giflib fixes the following issues: Update to version 5.2.2 Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)

138 Documentation for obsolete utilities still installed

139: Typo in "LZW image data" page ("1102 = 410")

140: Typo in "LZW image data" page ("LWZ")

141: Typo in "Bits and bytes" page ("filed")

Note as already fixed SF issue #143: cannot compile under mingw

144: giflib-5.2.1 cannot be build on windows and other platforms using c89

145: Remove manual pages installation for binaries that are not installed too

146: [PATCH] Limit installed man pages to binaries, move giflib to section 7

147 [PATCH] Fixes to doc/whatsinagif/ content

148: heap Out of Bound Read in gif2rgb.c:298 DumpScreen2RGB

Declared no-info on SF issue #150: There is a denial of service vulnerability in GIFLIB 5.2.1 Declared Won't-fix on SF issue 149: Out of source builds no longer possible

151: A heap-buffer-overflow in gif2rgb.c:294:45

152: Fix some typos on the html documentation and man pages

153: Fix segmentation faults due to non correct checking for args

154: Recover the giffilter manual page

155: Add gifsponge docs

157: An OutofMemory-Exception or Memory Leak in gif2rgb

158: There is a null pointer problem in gif2rgb

159 A heap-buffer-overflow in GIFLIB5.2.1 DumpScreen2RGB() in gif2rgb.c:298:45

163: detected memory leaks in openbsdreallocarray giflib/openbsd-reallocarray.c

164: detected memory leaks in GifMakeMapObject giflib/gifalloc.c

166: a read zero page leads segment fault in getarg.c and memory leaks in gif2rgb.c and gifmalloc.c

167: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function at Line 321 of gif2rgb.c

This update for cmake fixes the following issue: Detect PSP interpreter (jsc#PED-68)

This update for wpasupplicant fixes the following issues: CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).

This update for libssh fixes the following issues: Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)

This update for sendmail fixes the following issues: CVE-2023-51765: Fixed new SMTP smuggling attack. (bsc#1218351)

This update of bluez fixes the following issue: The bluez-deprecated package is shipped again, as it contains some tools still in common use. (bsc#1217251)

This update for libindicator7, libdbusmenu-gtk4 fixes the following issues: Add missing packages to Package Hub 15 SP5 (bsc#1219244, jsc#MSC-751)

This update for nftables fixes the following issues: Enable python311 module (bsc#1219253).

This update for gcc7 fixes the following issues: Add support for -fmin-function-alignment. [bsc#1214934] Use %{targetcpu} to determine host and build.

This update for gcc12 fixes the following issues: CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).

This update for samba fixes the following issues: samba was updated to version 4.17.9: CVE-2022-2127: Fixed issue where lmresplen was not checked properly in winbinddpamauthcrapsend (bsc#1213174). CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability (bsc#1213173). CVE-2023-34967: Fixed samba spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability (bsc#1213172). CVE-2023-34968: Fixed spotlight server-side Share Path Disclosure (bsc#1213171). CVE-2023-3347: Fixed issue where SMB2 packet signing not enforced (bsc#1213170). CVE-2020-25720: Fixed issue where creating child permission allowed full write to all attributes (bsc#1213386). Bugfixes: Fixed trust relationship failure (bsc#1213384). Backported --pidl-developer fixes. Fixed smbdscavenger crash when service smbd is stopped. Fixed issue where vfsfruit might cause a failing open for delete. Fixed named crashes on DLZ zone update. Fixed issue where winbind recurses into itself via rpcdlsad. Fixed clilist looping 100% CPU against pre-lanman2 servers. Fixed smbclient leaks fds with showacls. Fixed aes256 smb3 encryption algorithms not allowed in smb3sidparse(). Fixed winbindd getting stuck on NTSTATUSRPCSECPKGERROR. Fixed smbget memory leak if failed to download files recursively. Fixed log flood: smbdcalculateaccessmaskfsp: Access denied: message level should be lower. Fixed floating point exception (FPE) via clipullsend at source3/libsmb/clireadwrite.c. Fixed testtstreammoretcpusertimeoutspin fails intermittently on Rackspace GitLab runners. Reduce flapping of ridalloc test. Fixed unreliable largeldap test. Fixed filename parser not checking veto files smb.conf parameter. Fixed mdssvc may crash when initializing. Fixed broken large directory optimization for non-lcomp path elements Fixed streamsdepot failing to create streams. Fixed shadowcopy2 and streamsdepot issues. Fixed wbinfo -u fails on ad dc with >1000 users. Fixed winbindd idmap child contacting the domain controller without a need. Fixed idmapautorid may fail to map sids of trusted domains for the first time. Fixed idmaphash doesn't use IDTYPEBOTH for reverse mappings. Fixed net ads search -P doesn't work against servers in other domains. Fixed DS ACEs might be inherited to unrelated object classes. Fixed temporary smbXsrvtconglobal.tdb can't be parsed. Fixed setting veto files = /./ breaking listing directories (bsc#1212375). Fixed dsgetdcname assuming local system uses IPv4.

This update for duktape fixes the following issues: Ship libduktape206-32bit: needed by libproxy since version 0.5.

This update for gnutls fixes the following issues: CVE-2024-0567: Fixed an incorrect rejection of certificate chains with distributed trust (bsc#1218862). CVE-2024-0553: Fixed a timing attack against the RSA-PSK key exchange, which could lead to the leakage of sensitive data (bsc#1218865).

This update for poppler fixes the following issues: CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).

This update for libqt5-qtbase fixes the following issues: CVE-2023-32763: Fixed an overflow in QTextLayout (bsc#1211798).

This update for bind fixes the following issues: CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm (bsc#1212544).

This update for rpm fixes the following issues: backport lua support for rpm.execute to ease migrating from SLE Micro 5.5 to 6.0 (bsc#1216752)

This update for grub2 fixes the following issues: Fix PowerPC grub slow loading time (bsc#1217102)

This update for python-pycryptodome fixes the following issues: CVE-2023-52323: Fixed side-channel leakage in RSA decryption by using constant-time (faster) padding decoding for OAEP (bsc#1218564).

This update for openssh fixes the following issues: CVE-2023-51385: Limit the use of shell metacharacters in host- and user names to avoid command injection. (bsc#1218215)

This update for mozilla-nss fixes the following issues: Update to NSS 3.90.2: CVE-2023-5388: Fixed timing attack against RSA decryption in TLS (bsc#1216198)

This update for tiff fixes the following issues: CVE-2023-52356: Fixed segfault in TIFFReadRGBATileExt() (bsc#1219213).

This update for kdump fixes the following issues: dracut: always create fstab, even if empty (bsc#1218494) fix NOSPLIT option Honor the KDUMPVERBOSE setting in kdump-save

This update for python3 fixes the following issues: CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).

This update for bind fixes the following issues: Update to release 9.16.48: CVE-2023-50387: Fixed a denial-of-service caused by DNS messages containing a lot of DNSSEC signatures (bsc#1219823). CVE-2023-50868: Fixed a denial-of-service caused by NSEC3 closest encloser proof (bsc#1219826). CVE-2023-4408: Fixed a denial-of-service caused by DNS messages with many different names (bsc#1219851). CVE-2023-5517: Fixed a possible crash when nxdomain-redirect was enabled (bsc#1219852). CVE-2023-5679: Fixed a possible crash when bad interaction between DNS64 and serve-stale, when both of these features are enabled (bsc#1219853). CVE-2023-6516: Fixed excessive memory consumption when continuously trigger the cache database maintenance (bsc#1219854).

This update for openblas contains the following fixes: Added libopenblaspthreads0 to Package Hub SLE-15-SP5 for architecture s390 (no source changes) (bsc#1217608)