This update for crmsh fixes the following issues: Update to version 4.5.1+20240220.de17a142 Fix escape special characters in pattern (bsc#1220022)

This update for openssl-3 fixes the following issues: CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

This update for jetty-minimal fixes the following issues: CVE-2024-22201: Fixed denial-of-service via HTTP/2 connection leak (bsc#1220437).

This update for suse-migration-services fixes the following issues: Update to version: 2.0.39 Update dependencies to use suseconnect-ng rather than the legacy SUSEConnect (bsc#1219004)

This update for xmlgraphics-batik fixes the following issues: CVE-2022-41704: Fixed information disclosure vulnerability in Apache Batik (bsc#1204704). CVE-2022-42890: Fixed information disclosure vulnerability in Apache Batik (bsc#1204709). CVE-2022-44730: Fixed Server-Side Request Forgery. CVE-2022-44729: Fixed Server-Side Request Forgery. Upgrade to version 1.17.

This update for google-oauth-java-client fixes the following issues: CVE-2021-22573: Fixed token signature not verified (bsc#1199188).

This update for timezone fixes the following issues: Update to version 2024a Kazakhstan unifies on UTC+5 Palestine springs forward a week later than previously predicted in 2024 and 2025 Asia/HoChiMinh's 1955-07-01 transition occurred at 01:00 not 00:00 From 1947 through 1949, Toronto's transitions occurred at 02:00 not 00:00 In 1911 Miquelon adopted standard time on June 15, not May 15 The FROM and TO columns of Rule lines can no longer be "minimum" localtime no longer mishandle some timestamps strftime %s now uses tmgmtoff if available Ittoqqortoormiit, Greenland changes time zones on 2024-03-31 Vostok, Antarctica changed time zones on 2023-12-18 Casey, Antarctica changed time zones five times since 2020 Code and data fixes for Palestine timestamps starting in 2072 A new data file zonenow.tab for timestamps starting now Much of Greenland changed its standard time from -03 to -02 on 2023-03-25 localtime.c no longer mishandles TZif files that contain a single transition into a DST regime tzselect no longer creates temporary files tzselect no longer mishandles the following: Spaces and most other special characters in BUGEMAIL, PACKAGE, TZDIR, and VERSION. TZ strings when using mawk 1.4.3, which mishandles regular expressions of the form /X{2,}/ ISO 6709 coordinates when using an awk that lacks the GNU extension of newlines in -v option-arguments Non UTF-8 locales when using an iconv command that lacks the GNU //TRANSLIT extension zic no longer mishandles data for Palestine after the year 2075

This update for cloud-netconfig fixes the following issues: Add Provides/Obsoletes for dropped cloud-netconfig-nm Install dispatcher script into /etc/NetworkManager/dispatcher.d on older distributions

Add BuildReqires: NetworkManager to avoid owning dispatcher.d parent directory

Update to version 1.11:

Revert address metadata lookup in GCE to local lookup (bsc#1219454) Fix hang on warning log messages Check whether getting IPv4 addresses from metadata failed and abort if true Only delete policy rules if they exist Skip adding/removing IPv4 ranges if metdata lookup failed Improve error handling and logging in Azure Set SCRIPTDIR when installing netconfig wrapper

This update for postgresql-jdbc fixes the following issues: CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644).

This update for cloud-regionsrv-client contains the following fixes: Update to version 10.1.7 (bsc#1220164, bsc#1220165) Fix the failover path to a new target update server. At present a new server is not found since credential validation fails. We targeted the server detected in down condition to verify the credentials instead of the replacement server.

This update for sendmail fixes the following issues: CVE-2023-51765: Fixed new SMTP smuggling attack. (bsc#1218351)

This update of bluez fixes the following issue: The bluez-deprecated package is shipped again, as it contains some tools still in common use. (bsc#1217251)

This update for system-user-prometheus contains the following fixes: Added system-user-prometheus to Package Hub SLE-15-SP5 to resolve dependency issue with prometheus (bsc#1218252)

This update for openvswitch3 fixes the following issues: CVE-2023-3966: Fixed invalid memory access in Geneve with HW offload (bsc#1219465).

This update for pesign fixes the following issue: Fix errors when installing pesign alone (bsc#1219198)

This update for nodejs18 fixes the following issues: Update to 18.19.1: (security updates) CVE-2024-21892: Code injection and privilege escalation through Linux capabilities (bsc#1219992). CVE-2024-22019: http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (bsc#1219993). CVE-2023-46809: Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) (bsc#1219997). CVE-2024-22025: Denial of Service by resource exhaustion in fetch() brotli decoding (bsc#1220014). CVE-2024-24758: undici version 5.28.3 (bsc#1220017). CVE-2024-24806: libuv version 1.48.0 (bsc#1219724). Update to LTS version 18.19.0 deps: npm updates to 10.x esm: Leverage loaders when resolving subsequent loaders import.meta.resolve unflagged --experimental-default-type flag to flip module defaults

This update for libindicator7, libdbusmenu-gtk4 fixes the following issues: Add missing packages to Package Hub 15 SP5 (bsc#1219244, jsc#MSC-751)

This update for SAPHanaSR fixes the following issues: SAPHanaSR was updated to version 0.162.3: Fixed the hexdump log for empty node states Catch monitor calls for non-cloned resources and report them as unsupported instead of 'command not found' (bsc#1218333) Fixed the scope of variable 'site' to be global (bsc#1219194) susChkSrv.py - relocate function logTimestamp() Updated man pages: SAPHanaSR.7 ocfsuseSAPHana.7 SAPHanaSRmaintenanceexamples.7 SAPHanaSR.py.7 SAPHanaSR-showAttr.8

This update for SAPHanaSR-angi fixes the following issues: SAPHanaSR-angi was updated from version 1.001.5 to 1.2.3: Version 1.2.3: SAPHanaSR-angi is currently still in status of 'technical preview' SAPHanaFilesystem RA is still in POC status Added parameter 'ONFAILACTION' to SAPHanaFilesystem RA (POC) Improved the usage of SAP virtual hostnames If the susHanaSR.py hook has successfully reported a SR event to the cluster a still existing fall-back state file will be removed to prevent an override of an already reported SR state. (bsc#1215693) Improved supportability by providing the current process ID of the RA, which is logged in the RA outputs, to HANA tracefiles too. This allows a mapping of the SAP related command invocations from the RA and the HANA executions which might have a delay in between. (bsc#1214613) Avoid explicid and implicid usage of /tmp filesystem to keep the SAPHanaSR resource agents working even in situations with /tmp filesystem full. (bsc#1210728) SAPHanaController: change default stop timeout from 3600 to 600 SAPHanaController: change default promote timeout from 3600 to 900 Fixed typo in example srHook/global.inisusHanaSR Fixed missing trace section in example srHook/global.inisusChkSrv

Updated man pages: SAPHanaSR-angi.7 SAPHanaSR.7 SAPHanaSR-ScaleOut.7 SAPHanaSRbasiccluster.7 SAPHanaSR-ScaleOutbasiccluster.7 SAPHanaSRmaintenanceexamples.7 ocfsuseSAPHana.7 ocfsuseSAPHanaController.7 ocfsuseSAPHanaTopology.7 ocfsuseSAPHanaFilesystem.7 susChkSrv.py.7 susHanaSR.py.7 susTkOver.py.7 SAPHanaSR-showAttr.8

Version 1.2.0:

Added SAPHanaFilesystem RA as a POC

This update for suse-build-key fixes the following issues: Switch container key to be default RSA 4096bit. (jsc#PED-2777) run import script also in %posttrans section, but only when libzypp is not active. bsc#1219189 bsc#1219123

This update for nftables fixes the following issues: Enable python311 module (bsc#1219253).

This update for gcc7 fixes the following issues: Add support for -fmin-function-alignment. [bsc#1214934] Use %{targetcpu} to determine host and build.

This update for nodejs20 fixes the following issues: Update to 20.11.1: (security updates) CVE-2024-21892: Code injection and privilege escalation through Linux capabilities (bsc#1219992). CVE-2024-22019: http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (bsc#1219993). CVE-2024-21896: Path traversal by monkey-patching Buffer internals (bsc#1219994).j CVE-2024-22017: setuid() does not drop all privileges due to iouring (bsc#1219995). CVE-2023-46809: Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) (bsc#1219997). CVE-2024-21891: Multiple permission model bypasses due to improper path traversal sequence sanitization (bsc#1219998). CVE-2024-21890: Improper handling of wildcards in --allow-fs-read and --allow-fs-write (bsc#1219999). CVE-2024-22025: Denial of Service by resource exhaustion in fetch() brotli decoding (bsc#1220014). CVE-2024-24758: undici version 5.28.3 (bsc#1220017). CVE-2024-24806: libuv version 1.48.0 (bsc#1219724). Update to 20.11.0: esm: add import.meta.dirname and import.meta.filename fs: add c++ fast path for writeFileSync utf8 module: remove useCustomLoadersIfPresent flag module: bootstrap module loaders in shadow realm src: add --disable-warning option src: create per isolate proxy env template src: make process binding data weak stream: use Array for Readable buffer stream: optimize creation testrunner: adds built in lcov reporter testrunner: add Date to the supported mock APIs testrunner, cli: add --test-timeout flag Update to 20.10.0: --experimental-default-type flag to flip module defaults The new flag --experimental-detect-module can be used to automatically run ES modules when their syntax can be detected. Added flush option in file system functions for fs.writeFile functions Added experimental WebSocket client vm: fix V8 compilation cache support for vm.Script. This fixes performance regression since v16.x when support for importModuleDynamically was added to vm.Script

This update for samba fixes the following issues: samba was updated to version 4.17.9: CVE-2022-2127: Fixed issue where lmresplen was not checked properly in winbinddpamauthcrapsend (bsc#1213174). CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability (bsc#1213173). CVE-2023-34967: Fixed samba spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability (bsc#1213172). CVE-2023-34968: Fixed spotlight server-side Share Path Disclosure (bsc#1213171). CVE-2023-3347: Fixed issue where SMB2 packet signing not enforced (bsc#1213170). CVE-2020-25720: Fixed issue where creating child permission allowed full write to all attributes (bsc#1213386). Bugfixes: Fixed trust relationship failure (bsc#1213384). Backported --pidl-developer fixes. Fixed smbdscavenger crash when service smbd is stopped. Fixed issue where vfsfruit might cause a failing open for delete. Fixed named crashes on DLZ zone update. Fixed issue where winbind recurses into itself via rpcdlsad. Fixed clilist looping 100% CPU against pre-lanman2 servers. Fixed smbclient leaks fds with showacls. Fixed aes256 smb3 encryption algorithms not allowed in smb3sidparse(). Fixed winbindd getting stuck on NTSTATUSRPCSECPKGERROR. Fixed smbget memory leak if failed to download files recursively. Fixed log flood: smbdcalculateaccessmaskfsp: Access denied: message level should be lower. Fixed floating point exception (FPE) via clipullsend at source3/libsmb/clireadwrite.c. Fixed testtstreammoretcpusertimeoutspin fails intermittently on Rackspace GitLab runners. Reduce flapping of ridalloc test. Fixed unreliable largeldap test. Fixed filename parser not checking veto files smb.conf parameter. Fixed mdssvc may crash when initializing. Fixed broken large directory optimization for non-lcomp path elements Fixed streamsdepot failing to create streams. Fixed shadowcopy2 and streamsdepot issues. Fixed wbinfo -u fails on ad dc with >1000 users. Fixed winbindd idmap child contacting the domain controller without a need. Fixed idmapautorid may fail to map sids of trusted domains for the first time. Fixed idmaphash doesn't use IDTYPEBOTH for reverse mappings. Fixed net ads search -P doesn't work against servers in other domains. Fixed DS ACEs might be inherited to unrelated object classes. Fixed temporary smbXsrvtconglobal.tdb can't be parsed. Fixed setting veto files = /./ breaking listing directories (bsc#1212375). Fixed dsgetdcname assuming local system uses IPv4.

This update for cloud-netconfig fixes the following issues: Drop cloud-netconfig-nm sub package and include NM dispatcher script in main packages (bsc#1219007) Drop package dependency on sysconfig-netconfig Improve log level handling Support IPv6 IMDS endpoint in EC2 (bsc#1218069)

This update for texlive-specs-a fixes the following issues: Replace arara.jar in arara.tar.xz with a updated log4j to silent some simple screening tools reporting vulnerable log4j version even if even log4j is not used that way (bsc#1218601)

This update for postgresql fixes the following issues: Require fillup package to properly create the config file (bsc#1219340)

This update for libqt5-qtbase fixes the following issues: CVE-2023-32763: Fixed an overflow in QTextLayout (bsc#1211798).

This update for python-pip fixes the following issues: Removed .exe files from the RPM package, to prevent issues with security scanners (bsc#1212015).

This update for openssl-100 fixes the following issues: CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534).