This update for glib2 fixes the following issues: CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files (bsc#1183533).

This update for gcc12 fixes the following issues: CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).

This update for poppler fixes the following issues: CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).

This update for rabbitmq-c fixes the following issues: CVE-2023-35789: Fixed insecure credentials submission (bsc#1212499).

This update for bind fixes the following issues: CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm (bsc#1212544).

This update for openssl-100 fixes the following issues: CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534).

This update for suseconnect-ng fixes the following issues: Allow SUSEConnect on read write transactional systems (bsc#1219425)

This update for hdf5 fixes the following issues: Updated to version 1.10.11 Changed the error handling for a not found path in the find plugin process. Fixed CVE-2018-11202, a malformed file could result in chunk index memory leaks. Fixed a file space allocation bug in the parallel library for chunked datasets. Fixed an assertion failure in Parallel HDF5 when a file can't be created due to an invalid library version bounds setting. Fixed an assertion in a previous fix for CVE-2016-4332. Fixed segfault on file close in h5debug which fails with a core dump on a file that has an illegal file size in its cache image. Fixes HDFFV-11052, CVE-2020-10812. Fixed memory leaks that could occur when reading a dataset from a malformed file. Fixed a bug in H5Ocopy that could generate invalid HDF5 files Fixed potential heap buffer overflow in decoding of link info message. Fixed potential buffer overrun issues in some object header decode routines. Fixed a heap buffer overflow that occurs when reading from a dataset with a compact layout within a malformed HDF5 file. Fixed CVE-2019-8396, malformed HDF5 files where content does not match expected size. Fixed memory leak when running h5dump with proof of vulnerability file. Added option --no-compact-subset to h5diff. Fixes since 1.10.10: Fixed a memory corruption when reading from dataset using a hyperslab selection in file dataspace and a point selection memory dataspace. Fix CVE-2021-37501 Fixed an issue with variable length attributes. Fixed an issue with hyperslab selections where an incorrect combined selection was produced. Fixed an issue with attribute type conversion with compound datatypes. Modified H5Fstartswmrwrite() to preserve DAPL properties. Converted an assertion on (possibly corrupt) file contents to a normal error check. Fixed memory leak with variable-length fill value in H5Ofillconvert(). Fix h5repack to only print output when verbose option is selected. Fixes since 1.10.9: Several improvements to parallel compression feature, including: Improved support for collective I/O (for both writes and reads). Reduction of copying of application data buffers passed to H5Dwrite. Addition of support for incremental file space allocation for filtered datasets created in parallel. Addition of support for HDF5's "don't filter partial edge chunks" flag Addition of proper support for HDF5 fill values with the feature. Addition of 'H5HAVEPARALLELFILTEREDWRITES' macro to H5pubconf.h so HDF5 applications can determine at compile-time whether the feature is available. Addition of simple examples

h5repack added an optional verbose value for reporting R/W timing. Fixed a metadata cache bug when resizing a pinned/protected cache entry. Fixed a problem with the H5VERSRELEASE check in the H5checkversion function. Unified handling of collective metadata reads to correctly fix old bugs. Fixed several potential MPI deadlocks in library failure conditions. Fixed an issue with collective metadata reads being permanently disabled after a dataset chunk lookup operation.

This update for perl fixes the following issues: CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).

This update for suseconnect-ng contains the following fix: Update to version 1.6.0: Disable EULA display for addons. (bsc#1218649 and bsc#1217961)

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unixstreamreadgeneric()on the socket that the SKB is queued on (bsc#1218447). CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). CVE-2023-51779: Fixed a use-after-free because of a btsockioctl race condition in btsockrecvmsg (bsc#1218559). CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bsc#1179610 bsc#1215237). CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947). CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOCSETCONF ioctl that could lead to local privilege escalation (bsc#1218335). CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218258). CVE-2023-6932: Fixed a use-after-free issue when receiving an IGMP query packet due to reference count mismanagement (bsc#1218253). CVE-2023-6622: Fixed a null pointer dereference vulnerability in nftdynsetinit() that could allow a local attacker with CAPNETADMIN user privilege to trigger a denial of service (bsc#1217938). CVE-2023-6121: Fixed an information leak via dmesg when receiving a crafted packet in the NVMe-oF/TCP subsystem (bsc#1217250). The following non-security bugs were fixed: Reviewed and added more information to README.SUSE (jsc#PED-5021). Enabled multibuild for kernel packages (JSC-SLE#5501, boo#1211226, bsc#1218184). Drop drm/bridge lt9611uxc patches that have been reverted on stable trees KVM: s390/mm: Properly reset no-dat (bsc#1218056). KVM: s390: vsie: fix wrong VIR 37 when MSO is used (bsc#1217933). KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322). NFS: Fix ODIRECT locking issues (bsc#1211162). NFS: Fix a few more clearbit() instances that need release semantics (bsc#1211162). NFS: Fix a potential data corruption (bsc#1211162). NFS: Fix a use after free in nfsdirectjoingroup() (bsc#1211162). NFS: Fix error handling for ODIRECT write scheduling (bsc#1211162). NFS: More ODIRECT accounting fixes for error paths (bsc#1211162). NFS: More fixes for nfsdirectwriterescheduleio() (bsc#1211162). NFS: Use the correct commit info in nfsjoinpagegroup() (bsc#1211162). NLM: Defend against filelock changes after vfstestlock() (bsc#1217692). Updated SPI patches for NVIDIA Grace enablement (bsc#1212584 jsc#PED-3459) block: fix revalidate performance regression (bsc#1216057). bpf: Adjust insufficient default bpfjitlimit (bsc#1218234). ceph: fix incorrect revoked caps assert in cephfillfilesize() (bsc#1217980). ceph: fix type promotion bug on 32bit systems (bsc#1217982). clocksource: Add a Kconfig option for WATCHDOGMAXSKEW (bsc#1215885 bsc#1217217). clocksource: Enable TSC watchdog checking of HPET and PMTMR only when requested (bsc#1215885 bsc#1217217). clocksource: Handle negative skews in "skew is too large" messages (bsc#1215885 bsc#1217217). clocksource: Improve "skew is too large" messages (bsc#1215885 bsc#1217217). clocksource: Improve read-back-delay message (bsc#1215885 bsc#1217217). clocksource: Loosen clocksource watchdog constraints (bsc#1215885 bsc#1217217). clocksource: Print clocksource name when clocksource is tested unstable (bsc#1215885 bsc#1217217). clocksource: Verify HPET and PMTMR when TSC unverified (bsc#1215885 bsc#1217217). dmblkioctl: implement path failover for SGIO (bsc#1183045, bsc#1216776). fuse: dax: set fc->dax to NULL in fusedaxconnfree() (bsc#1218659). libceph: use kernelconnect() (bsc#1217981). mm: kmem: drop GFPNOFAIL when allocating objcg vectors (bsc#1218515). net/smc: Fix pos miscalculation in statistics (bsc#1218139). net/tg3: fix race condition in tg3resettask() (bsc#1217801). nfs: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162). remove unnecessary WARNONONCE() (bsc#1214823 bsc#1218569). s390/vx: fix save/restore of fpu kernel context (bsc#1218357). scsi: lpfc: use unsigned type for numsge (bsc#1214747). swiotlb: fix a braino in the alignment check fix (bsc#1216559). swiotlb: fix slot alignment checks (bsc#1216559). tracing: Disable preemption when using the filter buffer (bsc#1217036). tracing: Fix a possible race when disabling buffered events (bsc#1217036). tracing: Fix a warning when allocating buffered events fails (bsc#1217036). tracing: Fix incomplete locking when disabling buffered events (bsc#1217036). tracing: Fix warning in tracebufferedeventdisable() (bsc#1217036). tracing: Use thiscpuread() in traceeventbufferlockreserver() (bsc#1217036). uapi: propagate structgroup() attributes to the container union (jsc#SLE-18978). vsprintf/kallsyms: Prevent invalid data when printing symbol (bsc#1217602). x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285). x86/platform/uv: Use alternate source for socket to node data (bsc#1215696 bsc#1217790). x86/tsc: Add option to force frequency recalibration with HW timer (bsc#1215885 bsc#1217217). x86/tsc: Be consistent about usetscdelay() (bsc#1215885 bsc#1217217). x86/tsc: Extend watchdog check exemption to 4-Sockets platform (bsc#1215885 bsc#1217217).

This update for suseconnect-ng fixes the following issues: Update to version 1.5.0 Configure docker credentials for registry authentication Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364) Add --json output option

This update for cloud-init contains the following fixes: Move fdupes call back to %install.(bsc#1214169)

Update to version 23.3. (bsc#1216011)

(bsc#1215794) (bsc#1215740) (bsc#1216007) Bump pycloudlib to 1!5.1.0 for ec2 mantic daily image support (#4390) Fix cckeyboard in mantic (LP: #2030788) ec2: initialize getinstanceuserdata return value to bytes (#4387) [Noah Meyerhans] ccusersgroups: Add doas/opendoas support (#4363) [dermotbradley] Fix pip-managed ansible status: treat SubState=running and MainPID=0 as service exited azure/imds: increase read-timeout to 30s (#4372) [Chris Patterson] collect-logs fix memory usage (SC-1590) (#4289) [Alec Warren] (LP: #1980150) ccmounts: Use fallocate to create swapfile on btrfs (#4369) Undocument nocloud-net (#4318) feat(akamai): add akamai to settings.py and apport.py (#4370) read-version: fallback to getversion when git describe fails (#4366) apt: fix cloud-init status --wait blocking on systemd v 253 (#4364) integration tests: Pass username to pycloudlib (#4324) Bump pycloudlib to 1!5.1.0 (#4353) cloud.cfg.tmpl: reorganise, minimise/reduce duplication (#4272) [dermotbradley] analyze: fix (unexpected) timestamp parsing (#4347) [Mina Galić] ccgrowpart: fix tests to run on FreeBSD (#4351) [Mina Galić] subp: Fix spurious test failure on FreeBSD (#4355) [Mina Galić] cmd/clean: fix tests on non-Linux platforms (#4352) [Mina Galić] util: Fix getprocppid() on non-Linux systems (#4348) [Mina Galić] ccwireguard: make tests pass on FreeBSD (#4346) [Mina Galić] unittests: fix breakage in testreadcfgpathsfetchescacheddatasource (#4328) [Ani Sinha] Fix testtools.py collection (#4315) cckeyboard: add Alpine support (#4278) [dermotbradley] Flake8 fixes (#4340) [Robert Schweikert] ccmounts: Fix swapfile not working on btrfs (#4319) [王煎饼] (LP: #1884127) ds-identify/CloudStack: $DSMAYBE if vm running on vmware/xen (#4281) [Wei Zhou] ec2: Support double encoded userdata (#4275) [Noah Meyerhans] ccmounts: xfs is a Linux only FS (#4334) [Mina Galić] tests/net: fix TestGetInterfaces' mock coverage for getmaster (#4336) [Chris Patterson] change openEuler to openeuler and fix some bugs in openEuler (#4317) [sxt1001] Replace flake8 with ruff (#4314) NM renderer: set default IPv6 addr-gen-mode for all interfaces to eui64 (#4291) [Ani Sinha] ccsshimportid: add Alpine support and add doas support (#4277) [dermotbradley] sudoers not idempotent (SC-1589) (#4296) [Alec Warren] (LP: #1998539) Added support for Akamai Connected Cloud (formerly Linode) (#4167) [Will Smith] Fix reference before assignment (#4292) Overhaul module reference page (#4237) [Sally] replaced spaces with commas for setting passenv (#4269) [Alec Warren] DS VMware: modify a few log level (#4284) [PengpengSun] tools/read-version refactors and unit tests (#4268) Ensure getfeatures() grabs all features (#4285) Don't always require passlib dependency (#4274) tests: avoid leaks into host system checking of ovs-vsctl cmd (#4275) Fix NoCloud kernel commandline key parsing (#4273) testing: Clear all LRU caches after each test (#4249) Remove the crypt dependency (#2139) [Gonéri Le Bouder] logging: keep current file mode of log file if its stricter than the new mode (#4250) [Ani Sinha] Remove default membership in redundant groups (#4258) [Dave Jones] (LP: #1923363) doc: improve datasourcecreation.rst (#4262) Remove duplicate Integration testing button (#4261) [Rishita Shaw] tools/read-version: fix the tool so that it can handle version parsing errors (#4234) [Ani Sinha] net/dhcp: add udhcpc support (#4190) [Jean-François Roche] DS VMware: add i386 arch dir to deployPkg plugin search path [PengpengSun] LXD moved from linuxcontainers.org to Canonical [Simon Deziel] ccmounts.py: Add note about issue with creating mounts inside mounts (#4232) [dermotbradley] lxd: install lxd from snap, not deb if absent in image landscape: use landscape-config to write configuration Add deprecation log during init of DataSourceDigitalOcean (#4194) [tyb-truth] doc: fix typo on apt.primary.arches (#4238) [Dan Bungert] Inspect systemd state for cloud-init status (#4230) instance-data: add system-info and features to combined-cloud-config (#4224) systemd: Block login until config stage completes (#2111) (LP: #2013403) tests: proposed should invoke apt-get install -t=<release>-proposed (#4235) cloud.cfg.tmpl: reinstate cacerts entry (#4236) [dermotbradley] Remove feature flag override ability (#4228) tests: drop stray unrelated file presence test (#4227) Update LXD URL (#4223) [Sally] schema: add network v1 schema definition and validation functions tests: daily PPA for devel series is version 99.daily update tests to match (#4225) instance-data: write /run/cloud-init/combined-cloud-config.json mount parse: Fix matching non-existent directories (#4222) [Mina Galić] Specify build-system for pep517 (#4218) Fix network v2 metric rendering (#4220) Migrate content out of FAQ page (SD-1187) (#4205) [Sally] setup: fix generation of init templates (#4209) [Mina Galić] docs: Correct some bootcmd example wording fix changelog tests: reboot client to assert x-shellscript-per-boot is triggered nocloud: parsecmdline no longer detects nocloud-net datasource (#4204) (LP: 4203, #2025180) Add docstring and typing to mergemanydict (#4200) BSD: add dsidentify to early startup scripts (#4182) [Mina Galić] handler: report errors on skipped merged cloud-config.txt parts (LP: #1999952) Add cloud-init summit writeups (#4179) [Sally] tests: Update testcleanlog for oci (#4187) gce: improve ephemeral fallback NIC selection (CPC-2578) (#4163) tests: pin pytest 7.3.1 to avoid adverse testpaths behavior (#4184) Ephemeral Networking for FreeBSD (#2165) [Mina Galić] Clarify directory syntax for nocloud local filesystem. (#4178) Set default renderer as sysconfig for centos/rhel (#4165) [Ani Sinha] Test static routes and netplan 0.106 FreeBSD fix parsing of mount and mount options (#2146) [Mina Galić] test: add tracking bug id (#4164) tests: can't match MAC for LXD container veth due to netplan 0.106 (#4162) Add kaiwalyakoparkar as a contributor (#4156) [Kaiwalya Koparkar] BSD: remove datasourcelist from cloud.cfg template (#4159) [Mina Galić] launching salt-minion in masterless mode (#4110) [Denis Halturin] tools: fix run-container builds for rockylinux/8 git hash mismatch (#4161) fix doc lint: spellchecker tripped up (#4160) [Mina Galić] Support Ephemeral Networking for BSD (#2127) Added / fixed support for static routes on OpenBSD and FreeBSD (#2157) [Kadir Mueller] ccrsyslog: Refactor for better multi-platform support (#4119) [Mina Galić] (LP: #1798055) tests: fix testlp1835584 (#4154) cloud.cfg mod names: docs and rename saltminion and setpassword (#4153) vultr: remove checkroute check (#2151) [Jonas Chevalier] Update SECURITY.md (#4150) [Indrranil Pawar] Update CONTRIBUTING.rst (#4149) [Indrranil Pawar] Update .github-cla-signers (#4151) [Indrranil Pawar] Standardise module names in cloud.cfg.tmpl to only use underscore (#4128) [dermotbradley] Modify PR template so autoclose works From 23.2.2 Fix NoCloud kernel commandline key parsing (#4273) (Fixes: #4271) (LP: #2028562) Fix reference before assignment (#4292) (Fixes: #4288) (LP: #2028784) From 23.2.1 nocloud: Fix parsecmdline detection of nocloud-net datasource (#4204) (Fixes: 4203) (LP: #2025180) From 23.2 BSD: simplify finding MBR partitions by removing duplicate code [Mina Galić] tests: bump pycloudlib version for mantic builds network-manager: Set higher autoconnect priority for nm keyfiles (#3671) [Ani Sinha] alpine.py: change the locale file used (#4139) [dermotbradley] ccntp: Sync up with current FreeBSD ntp.conf (#4122) [Mina Galić] config: drop refreshrmcandinterface as RHEL 7 no longer supported [Robert Schweikert] docs: Add feedback button to docs net/sysconfig: enable sysconfig renderer if network manager has ifcfg-rh plugin (#4132) [Ani Sinha] For Alpine use os-release PRETTYNAME (#4138) [dermotbradley] networkmanager: add a method for ipv6 static IP configuration (#4127) [Ani Sinha] correct misnamed template file host.mariner.tmpl (#4124) [dermotbradley] nm: generate ipv6 stateful dhcp config at par with sysconfig (#4115) [Ani Sinha] Add templates for GitHub Issues Add 'peers' and 'allow' directives in ccntp (#3124) [Jacob Salmela] FreeBSD: Fix user account locking (#4114) [Mina Galić] (GH: #1854594) FreeBSD: add ResizeGrowFS class to ccgrowpart (#2334) [Mina Galić] Update tests in Azure TestCanDevBeReformatted class (#2771) [Ksenija Stanojevic] Replace Launchpad references with GitHub Issues Fix KeyError in iproute pformat (#3287) [Dmitry Zykov] schema: readcfgpaths call init.fetch to lookup /v/l/c/instance azure/errors: introduce reportable errors for imds (#3647) [Chris Patterson] FreeBSD (and friends): better identify MBR slices (#2168) [Mina Galić] (LP: #2016350) azure/errors: add host reporting for dhcp errors (#2167) [Chris Patterson] net: purge blacklistdrivers across net and azure (#2160) [Chris Patterson] net: refactor hyper-v VF filtering and apply to getinterfaces() (#2153) [Chris Patterson] tests: avoid leaks to underlying filesystem for /etc/cloud/clean.d (#2251) net: refactor findcandidatenicsonlinux() to use getinterfaces() (#2159) [Chris Patterson] resolvconf: Allow > 3 nameservers (#2152) [Major Hayden] Remove mount NTFS error message (#2134) [Ksenija Stanojevic] integration tests: fix image specification parsing (#2166) ci: add hypothesis scheduled GH check (#2149) Move supported distros list to docs (#2162) Fix logger, use instance rather than module function (#2163) README: Point to Github Actions build status (#2158) Revert "fix linux-specific code on bsd (#2143)" (#2161) Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled (#2142) [Ani Sinha] (LP: 2017761) Add documentation label automatically (#2156) sources/azure: report success to host and introduce kvp module (#2141) [Chris Patterson] setup.py: use pkg-config for udev/rules path (#2137) [dankm] openstack/static: honor the DNS servers associated with a network (#2138) [Gonéri Le Bouder] fix linux-specific code on bsd (#2143) cli: schema validation of jinja template user-data (SC-1385) (#2132) (LP: #1881925) gce: activate network discovery on every boot (#2128) tests: update integration test to assert 640 across reboots (#2145) Make user/vendor data sensitive and remove log permissions (#2144) (LP: #2013967) Update kernel command line docs (SC-1457) (#2133) docs: update network configuration path links (#2140) [d1r3ct0r] sources/azure: report failures to host via kvp (#2136) [Chris Patterson] net: Document use of ip route append to add routes (#2130) dhcp: Add missing mocks (#2135) azure/imds: retry fetching metadata up to 300 seconds (#2121) [Chris Patterson] [1/2] DHCP: Refactor dhcp client code (#2122) azure/errors: treat tracebackbase64 as string (#2131) [Chris Patterson] azure/errors: introduce reportable errors (#2129) [Chris Patterson] users: schema permit empty list to indicate create no users azure: introduce identity module (#2116) [Chris Patterson] Standardize disabling cloud-init on non-systemd (#2112) Update .github-cla-signers (#2126) [Rob Tongue] NoCloud: Use seedfrom protocol to determine mode (#2107) rhel: Remove sysvinit files. (#2114) tox.ini: set -vvvv --showlocals for pytest (#2104) [Chris Patterson] Fix NoCloud kernel commandline semi-colon args run-container: make the container/VM timeout configurable (#2118) [Paride Legovini] suse: Remove sysvinit files. (#2115) test: Backport assertcallcount for old requests (#2119) Add "licebmi" as contributor (#2113) [Mark Martinez] Adapt DataSourceScaleway to upcoming IPv6 support (#2033) [Louis Bouchard] rhel: make sure previous-hostname file ends with a new line (#2108) [Ani Sinha] Adding contributors for DataSourceAkamai (#2110) [acourdavAkamai] Cleanup ephemeral IP routes on exception (#2100) [sxt1001] commit 09a64badfb3f51b1b391fa29be19962381a4bbeb [sxt1001] (LP: #2011291) Standardize kernel commandline user interface (#2093) config/ccresizefs: fix doresize arguments (#2106) [Chris Patterson] Fix testdhclientexitswitherror (#2105) net/dhcp: catch dhclient failures and raise NoDHCPLeaseError (#2083) [Chris Patterson] sources/azure: move pps handling out of pollimds() (#2075) [Chris Patterson] tests: bump pycloudlib version (#2102) schema: do not manipulate draft4 metaschema for jsonschema 2.6.0 (#2098) sources/azure/imds: don't count timeout errors as connection errors (#2074) [Chris Patterson] Fix Python 3.12 unit test failures (#2099) integration tests: Refactor instance checking (#1989) ci: migrate remaining jobs from travis to gh (#2085) missing ending quote in instancedata docs(#2094) [Hong L] refactor: stop passing log instances to cc handlers (#2016) [d1r3ct0r] tests/vmware: fix testnodataaccessmethod failure (#2092) [Chris Patterson] Don't change permissions of netrules target (#2076) (LP: #2011783) tests/sources: patch util.getcmdline() for datasource tests (#2091) [Chris Patterson] macs: ignore duplicate MAC for devs with driver driver qmiwwan (#2090) (LP: #2008888) Fedora: Enable CA handling (#2086) [František Zatloukal] Send dhcp-client-identifier for InfiniBand ports (#2043) [Waleed Mousa] ccansible: complete the examples and doc (#2082) [Yves] bddeb: for dev package, derive debhelper-compat from host system apport: only prompt for cloudname when instance-data.json is absent datasource: Optimize datasource detection, fix bugs (#2060) Handle non existent ca-cert-config situation (#2073) [Shreenidhi Shedi] sources/azure: add networking check for all source PPS (#2061) [Chris Patterson] do not attempt dns resolution on ip addresses (#2040) chore: fix style tip (#2071) Fix metadata IP in instancedata.rst (#2063) [Brian Haley] util: Pass deprecation schedule in deprecatecall() (#2064) config: Update grub-dpkg docs (#2058) docs: Cosmetic improvements and styling (#2057) [s-makin] ccgrubdpkg: Added UEFI support (#2029) [Alexander Birkner] tests: Write to /var/spool/rsyslog to adhere to apparmor profile (#2059) oracle-ds: prefer systemcfg over ds network config source (#1998) (LP: #1956788) Remove dead code (#2038) source: Force OpenStack when it is only option (#2045) (LP: #2008727) ccubuntuadvantage: improve UA logs discovery sources/azure: fix regressions in IMDS behavior (#2041) [Chris Patterson] tests: fix testschema (#2042) dhcp: Cleanup unused kwarg (#2037) sources/vmware/imc: fix-missing-catch-few-negtive-scenarios (#2027) [PengpengSun] dhclienthook: remove vestigal dhclienthook command (#2015) log: Add standardized deprecation tooling (SC-1312) (#2026) Enable SUSE based distros for ca handling (#2036) [Robert Schweikert] From 23.1.2

Make user/vendor data sensitive and remove log permissions (LP: #2013967) (CVE-2023-1786)

Remove six dependency (bsc#1198269)

Update to version 22.4 (bsc#1201010)

This update for rubygem-actionpack-51 fixes the following issues: CVE-2020-8166: Fixed ability to forge per-form CSRF tokens given a global CSRF (bsc#1172182).

This update for gegl and its dependencies fixes the following issues: gegl: Allow building against a newer libraw (0.21) (jsc#PED-6351) celt, fdk-aac-free, ffmpeg-4, ilmbase, ldacBT, lensfun, libass, libbluray, libbs2b, libcdio-paranoia, libcdio, libdc1394, libgsm, libmfx, libopenmpt, libraw1394, libraw, libspiro, libva, libvdpau, lilv, metis, openexr, pipewire, pulseaudio, rtkit, SDL2, serd, sord, sratom, suitesparse, webrtc-audio-processing, wireplumber: Deliver missing direct and indirect dependencies of gegl to SUSE Package Hub 15 SP{4,5} for aarch64, ppc64le, s390x and x8664 There are NO code changes

This update for Java fixes the following issues: apache-commons-daemon was updated from version 1.3.2 to 1.3.4: Version 1.3.4: Procrun: Configured stack size now applies to the main thread when running in JVM mode. Fixes DAEMON-451. Procrun: If the specified log directory does not exist, attempt to create any missing parent directories, as well as the specified directory, when the service starts. Fixes DAEMON-452. Procrun: Allow Windows service dependencies to be managed by Procrun or by 'sc config ...'. Fixes DAEMON-458. jsvc: Fix DaemonController.reload() only working the first time it is called. Fixes DAEMON-459. Thanks to Klaus Malorny. jsvc: Remove incorrent definition 'supportedos' which defined in psupport.m4 file to fix jsvc build error on riscv64. Version 1.3.3: Procrun: ensure all child processes are cleaned up if the service does not stop cleanly. Procrun: Fix creation of duplicate ACL entries on some Windows platforms. Updates: Bump actions/cache from 3.0.8 to 3.0.11. Bump actions/checkout from 3.0.2 to 3.1.0. Bump actions/setup-java from 3.5.1 to 3.6.0. Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0. aqute-bnd was updated from version 5.2.0 to 6.3.1: For the full list of changes please consult the following: https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1 https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0 https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0 https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0 https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0 https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0 tomcat-jakartaee-migration: New package implementation of tomcat-jakartaee-migration at version 1.0.7 libtcnative-1-0 was updated from version 1.2.22 to 1.2.38: Changes of version 1.2.22 to 1.2.38: Align default pass phrase prompt with HTTPd. Fix memory leak in SNI processing. Update the recommended minimum version of OpenSSL to 1.1.1v. Update the recommended minimum version of APR to 1.7.4. Document the TLS rengotiation behaviour. Add HOWTO-RELEASE.txt that describes the release process. Refactor library initialization so it is compatible with Tomcat 10.1.x onwards where a number of Java classes have been removed. Map the OpenSSL 3.x FIPS behaviour to the OpenSSL 1.x API to allow clients to determine if the FIPS provider is being used when Tomcat Native is compiled against OpenSSL 3.x. Fix crash when attempting to read TLS session ID after a handshake failure. Enable downloaddeps.sh to be called from any directory. Fix release script so it works with the current git layout. Correct previous fix that enabled building to continue with OpenSSL 3.x. Remove remaining reference to pkg-config which is no longer included in the Tomcat Native distribution. Additional changes required to provided support for using OpenSSL Engines that use proprietary key formats. Correct handling of WINVER in make file to use correct constant for Windows 7. Add constants for Windows 8, Windows 8.1 and Windows 10. Rename WINNT to WIN2k as it is used for Windows 2000 upwards, not Windows NT upwards. Add a patch for APR that fixes an issue where some Windows systems in some configurations would only listen on IPv6 addresses on dual stack systems even though configured to listen on both IPv6 and IPv4 addresses. Correct a regression in the fix for 65181 that prevented an error message from being displayed if an invalid key file was provided and no OpenSSL Engine was configured. Improve support for using OpenSSL Engines that use proprietary key formats. Enable building to continue against OpenSSL 3.x and 1.1.1. Incomplete name mangling fix for C++ compilers in tcnapi.h. Improve OS-specific header include for native thread id. Disable keylog callback support for LibreSSL. Add support for SSLContext.addChainCertificateRaw() with LibreSSL 2.9.1 and up. Add support for HP-UX's lwpself() in our sslthreadid(void). Remove default option passed for rpath to linker on HP-UX. Add an option to allow the OCSP responder check to be bypassed. Note that if OCSP is enabled, a missing responder is now treated as an error. Fix compilation with LibreSSL. libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support. Correct configure message for OpenSSL libdir. Clean up install target. configure output for OpenSSL wrong/incomplete sometimes. Drop obsolete build time workarounds for HP-UX. Add support for FreeBSD's pthreadgetthreadidnp() in our sslthreadid(void). Introduce tcngetthreadid(void) to reduce code duplication. Fix linking against OpenSSL in non-standard locations on FreeBSD.

This update for ceph fixes the following issues: Fix FTBFS on gcc 13 (bsc#1201088) Fix FTBFS on s390x (bsc#1211090) ceph-volume: Fix regression in activate (bsc#1210243, bsc#1210314) cephadm: Fix NFS haproxy failover if active node disappears (bsc#1209621) cephadm: Mount host /etc/hosts for daemon containers in podman deployments (bsc#1210719) cmake: Patch boost source to support python 3.11 (bsc#1210944) mgr: Don't dump global config holding gil (bsc#1199880) mgr/cephadm: Fix handling of mgr upgrades with 3 or more mgrs (bsc#1210153) mgr/dashboard: allow to pass controls on iscsi disk create (bsc#1208820) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode' (bsc#1210784)

This update for hawk2 fixes the following issues: Fixed HttpOnly secure flag by default (bsc#1216508). Fixed CSRF in errorscontroller.rb protection (bsc#1216571). Update to version 2.6.4+git.1702030539.5fb7d91b: Fix mime type issue in MS windows (bsc#1215438) Parametrize CORS Access-Control-Allow-Origin header (bsc#1213454) Tests: upgrate tests for ruby3.2 (tumbleweed) (bsc#1215976) Upgrade for ruby3.2 (tumbleweed) (bsc#1215976) Forbid special symbols in the category (bsc#1206217) Fix the sass-rails version on ~5.0 (bsc#1208533) Don't delete the private key if the public key is missing (bsc#1207930) make-sle155-compatible.patch . No bsc, it's for backwards compatibility.

This update for tar fixes the following issues: CVE-2023-39804: Fixed extension attributes in PAX archives incorrect hanling (bsc#1217969).

This update for python-instance-billing-flavor-check fixes the following issues: Run the command as sudo only (bsc#1217696, bsc#1217695) Handle exception for Python 3.4

This update for python-kiwi fixes the following issues: Add partx to module-setup of kiwi-lib (bsc#1216465)

Change partprobe fallback to partx (bsc#1216465): Informing the kernel about a new partition geometry can be done in a busy state and is also effective for new devices and new mounts based on the new geometry. busy state mounts of course will not see it until swap of the busy state but a complete refuse of operation like it happens with blockdev is imho not required. Just as partprobe, partx is less restrictive on the busy state. That's why this commit changes the partprobe fallback to use partx instead of blockdev

Create live persistent storage without busy state (bsc#1216465): With the former logic the live ISO was already mounted when an eventual persistent storage partition was created. This leads to an issue on re-reading the partition table, not for all but several tools. This commit changes the order of tasks such that the setup of the persistent write storage is performed prior mounting the live ISO. In addition to this change an alternative method using blockdev to re-read the partition was added in case partprobe is not present. This also allows to get rid of the parted dependency which provides partprobe

Add alternative re-reading of the partition table (bsc#1216465):

This update for libxcrypt fixes the following issues: fix variable name for datamember [bsc#1215496] added patches fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2

This update for raptor fixes the following issues: rebuild to use ICU 73 (jsc#PED-6193)

This update for net-snmp fixes the following issues: Update to net-snmp-5.9.4 (bsc#1214364). libsnmp:

Remove the SNMPSWIPEMEM() macro Remove this macro since it is not used in the Net-SNMP code base. DISPLAY-HINT fixes Miscellanious improvements to the transports Handle multiple oldEngineID configuration lines fixes for DNS names longer than 63 characters

agent:

Added a ignoremount configuration option for the HOST-MIB disallow SETs with a NULL varbind fix the --enable-minimalist build

apps:

snmpset: allow SET with NULL varbind for testing snmptrapd: improved MySQL logging code

general:

configure: Remove -Wno-deprecated as it is no longer needed miscellanious ther bug fixes, build fixes and cleanups

Re-add support for hostname netgroups that was removed accidentally and previously added with FATE#316305 (bsc#1207697). '@hostgroup' can be specified for multiple hosts

Hardening systemd services setting "ProtectHome=true" caused home directory size and allocation to be listed incorrectly (bsc#1206044).

This update for gnustep-base fixes the following issues: Build against ICU 73.

This update for libqxp fixes the following issue: rebuild against ICU 73.

This update for libe-book fixes the following issues: Rebuild against current ICU (jsc#PED-6193)

This update for polkit fixes the following issues: Change permissions for rules folders (bsc#1209282)

This update for procps fixes the following issues: Update procps to 3.3.17 (jsc#PED-3244 jsc#PED-6369)

For support up to 2048 CPU as well (bsc#1185417)

Allow -´ as leading character to ignore possible errors on systctl entries (bsc#1209122) Get the first CPU summary correct (bsc#1121753) Enable pidof for SLE-15 as this is provided by sysvinit-tools Use a check on syscall NRpidfdopen to decide if the pwait tool and its manual page will be build Do not truncate output of w with option -n Prefer logind over utmp (jsc#PED-3144) Don't install translated man pages for non-installed binaries (uptime, kill). Fix directory for Ukrainian man pages translations.

Move localized man pages to lang package.

Update to procps-ng-3.3.17

library: Incremented to 8:3:0 (no removals or additions, internal changes only)

all: properly handle utf8 cmdline translations kill: Pass int to signalled process pgrep: Pass int to signalled process pgrep: Check sanity of SGARGMAX pgrep: Add older than selection pidof: Quiet mode pidof: show worker threads ps.1: Mention stime alias ps: check also match on truncated 16 char comm names ps: Add exe output option ps: A lot more sorting available pwait: New command waits for a process sysctl: Match systemd directory order sysctl: Document directory order top: ensure config file backward compatibility top: add command line 'e' for symmetry with 'E' top: add '4' toggle for two abreast cpu display top: add '!' toggle for combining multiple cpus top: fix potential SEGV involving -p switch vmstat: Wide mode gives wider proc columns watch: Add environment variable for interval watch: Add no linewrap option watch: Support more colors

free,uptime,slabtop: complain about extra ops

Package translations in procps-lang.

Fix pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.

Enable pidof by default

Update to procps-ng-3.3.16

library: Increment to 8:2:0 No removals or functions Internal changes only, so revision is incremented. Previous version should have been 8:1:0 not 8:0:1

docs: Use correct symbols for -h option in free.1

docs: ps.1 now warns about command name length docs: install translated man pages pgrep: Match on runstate snice: Fix matching on pid top: can now exploit 256-color terminals top: preserves 'other filters' in configuration file top: can now collapse/expand forest view children top: parent %CPU time includes collapsed children top: improve xterm support for vim navigation keys top: avoid segmentation fault at program termination "ps -C" does not allow anymore an argument longer than 15 characters (bsc#1158830)

This update for postfix fixes the following issues: CVE-2023-51764: Fixed SMTP smuggling attack (bsc#1218304).