This update for python310 fixes the following issues: CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666).

This update for python311 fixes the following issues: CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). CVE-2022-25236: Fixed an expat vulnerability by supporting expat >= 2.4.4 (bsc#1212015).

This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Update to 550.54.14 Added vGPU Host and vGPU Guest support. For vGPU Host, please refer to the README.vgpu packaged in the vGPU Host Package for more details. Security issues fixed: CVE-2024-0074: A user could trigger a NULL ptr dereference. CVE-2024-0075: A user could overwrite the end of a buffer, leading to crashes or code execution.

CVE-2022-42265: A unprivileged user could trigger an integer overflow which could lead to crashes or code execution.

create /run/udev/staticnode-tags/uaccess/nvidia${devid} symlinks also during modprobing the nvidia module; this changes the issue of not having access to /dev/nvidia${devid}, when gfxcard has been replaced by a different gfx card after installing the driver

provide nvidia-open-driver-G06-kmp (jsc#PED-7117)

this makes it easy to replace the package from nVidia's CUDA repository with this presigned package

This update for libssh fixes the following issues: Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)

This update for glib2 fixes the following issues: CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files (bsc#1183533).

This update for gcc12 fixes the following issues: CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).

This update for samba fixes the following issues: CVE-2022-2127: Fixed issue where lmresplen was not checked properly in winbinddpamauthcrapsend (bsc#1213174). CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability (bsc#1213173). CVE-2023-34967: Fixed samba spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability (bsc#1213172). CVE-2023-34968: Fixed spotlight server-side Share Path Disclosure (bsc#1213171). Bugfixes: Fixed trust relationship failure (bsc#1213384).

This update for python311 fixes the following issues: python was updated to version 3.11.4: CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). CVE-2007-4559: Fixed python tarfile module directory traversal (bsc#1203750). Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no outfile was specified. Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler. Bugfixes: trace.main now uses io.opencode() for files to be executed instead of raw open().

This update for gnutls fixes the following issues: CVE-2024-0567: Fixed an incorrect rejection of certificate chains with distributed trust (bsc#1218862). CVE-2024-0553: Fixed a timing attack against the RSA-PSK key exchange, which could lead to the leakage of sensitive data (bsc#1218865).

This update for poppler fixes the following issues: CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).

This update for openssl-100 fixes the following issues: CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534).

This update for libxml2 fixes the following issues: CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).

This update for rpm fixes the following issues: backport lua support for rpm.execute to ease migrating from SLE Micro 5.5 to 6.0 (bsc#1216752)

This update for python310 fixes the following issues: CVE-2023-27043: Fixed incorrectly parser of e-mail addresses which contain a special character (bsc#1210638).

This update for mozilla-nss fixes the following issues: Update to NSS 3.90.2: CVE-2023-5388: Fixed timing attack against RSA decryption in TLS (bsc#1216198)

This update for libaom fixes the following issues: CVE-2023-6879: Fixed a heap buffer overflow when increasing the video frame resolution (bsc#1218429).

This update for openssl-3 fixes the following issues: CVE-2023-6129: Fixed vector register clobbering on PowerPC. (bsc#1218690) CVE-2023-6237: Fixed excessive time spent checking invalid RSA public keys. (bsc#1218810) CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

This update for libavif fixes the following issues: CVE-2023-6704: Fixed use after free by not storing colorproperties until alpha item is found (bsc#1218303).

This update for perl fixes the following issues: CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).

This update for libxkbcommon fixes the following issues: enable 32bit libxkbregistry0 and libxkbregistry0-devel for use by Wine. (bsc#1218639)

This update for xen fixes the following issues: CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts (XSA-449) (bsc#1218851)

This update for util-linux fixes the following issues: Fix performance degradation (bsc#1207987)

This update for sssd fixes the following issues: Only send cldap-ping to our local domain; (bsc#1217319); (gh#SSSD/sssd#5822); Do not write kdc info file for GC lookup; (bsc#1217319); (gh#SSSD/sssd#5956); sssd Unable to obtain cached rules filling up sssdsudo.log; (bsc#1216907);

This update for bluez fixes the following issues: CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300). CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access Profile implementation (bsc#1218301).

This update for systemd fixes the following issues: resolved: actually check authenticated flag of SOA transaction core/mount: Make device deps from /proc/self/mountinfo and .mount unit file exclusive core: Add trace logging to mountadddevicedependencies() core/mount: Remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460) core/mount: Set Mount.fromprocselfmountinfo flag before adding default dependencies core: wrap some long comment utmp-wtmp: Handle EINTR gracefully when waiting to write to tty utmp-wtmp: Fix error in case isatty() fails homed: Handle EINTR gracefully when waiting for device node resolved: Handle EINTR returned from fdwaitforevent() better sd-netlink: Handle EINTR from poll() gracefully, as success varlink: Handle EINTR gracefully when waiting for EIO via ppoll() stdio-bridge: Don't be bothered with EINTR sd-bus: Handle EINTR return from buspoll() (bsc#1215241) core: Replace slice dependencies as they get added (bsc#1214668)

This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Changes in nvidia-open-driver-G06-signed: Update to 545.29.06

no longer try to overwrite NVregOpenRmEnableUnsupportedGpus driver NVregOpenRmEnableUnsupportedGpus driver option setting (disable it), Changes in kernel-firmware-nvidia-gspx-G06: update firmware to version 545.29.06

This update for libcryptopp fixes the following issues: CVE-2023-50981: Fixed a potential denial of service issue via crafted DER public key data (bsc#1218222).

This update for libssh fixes the following issues: Security fixes: CVE-2023-6004: Fixed command injection using proxycommand (bsc#1218209) CVE-2023-48795: Fixed potential downgrade attack using strict kex (bsc#1218126) CVE-2023-6918: Fixed missing checks for return values of MD functions (bsc#1218186) CVE-2023-1667: Fixed NULL dereference during rekeying with algorithm guessing (bsc#1211188) CVE-2023-2283: Fixed possible authorization bypass in pkiverifydatasignature under low-memory conditions (bsc#1211190) Other fixes: Update to version 0.9.8

Allow @ in usernames when parsing from URI composes

Update to version 0.9.7

Fix several memory leaks in GSSAPI handling code

This update for gstreamer-plugins-bad fixes the following issues: ZDI-CAN-22300: Fixed a buffer overflow in the AV1 video plugin (bsc#1218534).

This update for gegl and its dependencies fixes the following issues: gegl: Allow building against a newer libraw (0.21) (jsc#PED-6351) celt, fdk-aac-free, ffmpeg-4, ilmbase, ldacBT, lensfun, libass, libbluray, libbs2b, libcdio-paranoia, libcdio, libdc1394, libgsm, libmfx, libopenmpt, libraw1394, libraw, libspiro, libva, libvdpau, lilv, metis, openexr, pipewire, pulseaudio, rtkit, SDL2, serd, sord, sratom, suitesparse, webrtc-audio-processing, wireplumber: Deliver missing direct and indirect dependencies of gegl to SUSE Package Hub 15 SP{4,5} for aarch64, ppc64le, s390x and x8664 There are NO code changes