This update for cpio fixes the following issues: CVE-2023-7207: Fixed path traversal vulnerability (bsc#1218571, bsc#1219238)

This update for wpasupplicant fixes the following issues: CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).

This update for timezone fixes the following issues: Update to version 2024a Kazakhstan unifies on UTC+5 Palestine springs forward a week later than previously predicted in 2024 and 2025 Asia/HoChiMinh's 1955-07-01 transition occurred at 01:00 not 00:00 From 1947 through 1949, Toronto's transitions occurred at 02:00 not 00:00 In 1911 Miquelon adopted standard time on June 15, not May 15 The FROM and TO columns of Rule lines can no longer be "minimum" localtime no longer mishandle some timestamps strftime %s now uses tmgmtoff if available Ittoqqortoormiit, Greenland changes time zones on 2024-03-31 Vostok, Antarctica changed time zones on 2023-12-18 Casey, Antarctica changed time zones five times since 2020 Code and data fixes for Palestine timestamps starting in 2072 A new data file zonenow.tab for timestamps starting now Much of Greenland changed its standard time from -03 to -02 on 2023-03-25 localtime.c no longer mishandles TZif files that contain a single transition into a DST regime tzselect no longer creates temporary files tzselect no longer mishandles the following: Spaces and most other special characters in BUGEMAIL, PACKAGE, TZDIR, and VERSION. TZ strings when using mawk 1.4.3, which mishandles regular expressions of the form /X{2,}/ ISO 6709 coordinates when using an awk that lacks the GNU extension of newlines in -v option-arguments Non UTF-8 locales when using an iconv command that lacks the GNU //TRANSLIT extension zic no longer mishandles data for Palestine after the year 2075

This update for libindicator7, libdbusmenu-gtk4 fixes the following issues: Add missing packages to Package Hub 15 SP5 (bsc#1219244, jsc#MSC-751)

This update for glib2 fixes the following issues: CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files (bsc#1183533).

This update for openssh fixes the following issues: CVE-2023-51385: Limit the use of shell metacharacters in host- and user names to avoid command injection. (bsc#1218215)

This update for tiff fixes the following issues: CVE-2023-52356: Fixed segfault in TIFFReadRGBATileExt() (bsc#1219213).

This update for docker fixes the following issues: Vendor latest buildkit v0.11 including bugfixes for the following: CVE-2024-23653: BuildKit API doesn't validate entitlement on container creation (bsc#1219438). CVE-2024-23652: Fixed arbitrary deletion of files (bsc#1219268). CVE-2024-23651: Fixed race condition in mount (bsc#1219267).

This update for python3 fixes the following issues: CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).

This update for mozilla-nss fixes the following issues: Update to NSS 3.90.2: CVE-2023-5388: Fixed timing attack against RSA decryption in TLS (bsc#1216198)

This update for suseconnect-ng fixes the following issues: Allow SUSEConnect on read write transactional systems (bsc#1219425)

This update for libssh fixes the following issues: Update to version 0.9.8 (jsc#PED-7719): Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209) Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126) Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186) Allow @ in usernames when parsing from URI composes Update to version 0.9.7: Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm guessing (bsc#1211188) Fix CVE-2023-2283: a possible authorization bypass in pkiverifydatasignature under low-memory conditions (bsc#1211190) Fix several memory leaks in GSSAPI handling code Update to version 0.9.6 (bsc#1189608, CVE-2021-3634): https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6 Update to 0.9.5 (bsc#1174713, CVE-2020-16135): CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232) Improve handling of library initialization (T222) Fix parsing of subsecond times in SFTP (T219) Make the documentation reproducible Remove deprecated API usage in OpenSSL Fix regression of sshchannelpolltimeout() returning SSHAGAIN Define version in one place (T226) Prevent invalid free when using different C runtimes than OpenSSL (T229) Compatibility improvements to testsuite Update to version 0.9.4 https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/ Fix possible Denial of Service attack when using AES-CTR-ciphers CVE-2020-1730 (bsc#1168699) Update to version 0.9.3 Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095) SSH-01-003 Client: Missing NULL check leads to crash in erroneous state SSH-01-006 General: Various unchecked Null-derefs cause DOS SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys SSH-01-010 SSH: Deprecated hash function in fingerprinting SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access SSH-01-001 State Machine: Initial machine states should be set explicitly SSH-01-002 Kex: Differently bound macros used to iterate same array SSH-01-005 Code-Quality: Integer sign confusion during assignments SSH-01-008 SCP: Protocol Injection via unescaped File Names SSH-01-009 SSH: Update documentation which RFCs are implemented SSH-01-012 PKI: Information leak via uninitialized stack buffer Update to version 0.9.2 Fixed libssh-config.cmake Fixed issues with rsa algorithm negotiation (T191) Fixed detection of OpenSSL ed25519 support (T197) Update to version 0.9.1 Added support for Ed25519 via OpenSSL Added support for X25519 via OpenSSL Added support for localuser in Match keyword Fixed Match keyword to be case sensitive Fixed compilation with LibreSSL Fixed error report of channel open (T75) Fixed sftp documentation (T137) Fixed knownhosts parsing (T156) Fixed build issue with MinGW (T157) Fixed build with gcc 9 (T164) Fixed deprecation issues (T165)

Fixed knownhosts directory creation (T166)

Split out configuration to separate package to not mess up the library packaging and coinstallation Update to verion 0.9.0 Added support for AES-GCM Added improved rekeying support Added performance improvements Disabled blowfish support by default Fixed several ssh config parsing issues Added support for DH Group Exchange KEX Added support for Encrypt-then-MAC mode Added support for parsing server side configuration file Added support for ECDSA/Ed25519 certificates Added FIPS 140-2 compatibility Improved knownhosts parsing Improved documentation

Improved OpenSSL API usage for KEX, DH, and signatures

Add libssh client and server config files

This update for salt fixes the following issues: Security issues fixed: CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430) CVE-2024-22232: Prevent directory traversal attacks in the master's servefile method (bsc#1219431) Bugs fixed: Ensure that pillar refresh loads beacons from pillar without restart Fix the aptpkg.py unit test failure Prefer unittest.mock to python-mock in test suite Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649) Revert changes to set Salt configured user early in the stack (bsc#1216284) Align behavior of some modules when using salt-call via symlink (bsc#1215963) Fix gitfs "env" and improve cache cleaning (bsc#1193948) Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed

The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-1086: Fixed a use-after-free vulnerability inside the nftables component that could have been exploited to achieve local privilege escalation (bsc#1219434). CVE-2023-51780: Fixed a use-after-free in dovccioctl in net/atm/ioctl.c, because of a vccrecvmsg race condition (bsc#1218730). CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836). CVE-2021-33631: Fixed an integer overflow in ext4writeinlinedataend() (bsc#1219412). CVE-2023-6535: Fixed a NULL pointer dereference in nvmettcpexecuterequest (bsc#1217988). CVE-2023-6536: Fixed a NULL pointer dereference in nvmetreqcomplete (bsc#1217989). CVE-2023-6356: Fixed a NULL pointer dereference in nvmettcpbuildpduiovec (bsc#1217987). CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702). CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215275). CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drmatomic.c (bsc#1219120). CVE-2024-0775: Fixed use-after-free in ext4remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053). CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receiveencryptedstandard in fs/smb/client/smb2ops.c (bsc#1218832). CVE-2023-6915: Fixed a NULL pointer dereference problem in idafree in lib/idr.c (bsc#1218804). CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nftables family (pf) values within nftablesnewtable function (bsc#1218752). CVE-2023-51782: Fixed use-after-free in roseioctl in net/rose/afrose.c because of a roseaccept race condition (bsc#1218757). The following non-security bugs were fixed: Limit kernel-source build to architectures for which the kernel binary is built (bsc#1108281). x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).

This update for libsolv, libzypp fixes the following issues: build for multiple python versions [jsc#PED-6218] applydeltaprm: Create target directory if it does not exist (bsc#1219442) Fix problems with EINTR in ExternalDataSource::getline (bsc#1215698) CheckAccessDeleted: fix runningincontainer detection (bsc#1218782) Detect CURLOPTREDIRPROTOCOLSSTR availability at runtime (bsc#1218831)

This update for python-kiwi fixes the following issues: Fix overwrite of kiwioemunattended: ensure that the overwrite happens in the early initialize method which provides the environment for all code running in the dracut module

Allow install disk overwrite from cmdline (jsc#PED-7180): add rd.kiwi.oem.installdevice=DEVICE, which configures the disk device that should be used in an OEM installation

This update for runc fixes the following issues: Update to runc v1.1.12 (bsc#1218894) The following CVE was already fixed with the previous release. CVE-2024-21626: Fixed container breakout.

This update for libxml2 fixes the following issues: CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).

This update for perl fixes the following issues: CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).

This update for aaabase fixes the following issues: Set JAVAHOME correctly (bsc#1107342, bsc#1215434)

This update for runc fixes the following issues: Update to runc v1.1.11: CVE-2024-21626: Fixed container breakout. (bsc#1218894)

This update for containerd fixes the following issues: Fix permissions of address file (bsc#1217952) Update to version 1.7.10

This update for suse-module-tools fixes the following issues: Update to version 15.3.18 Add symlink /boot/.vmlinuz.hmac (bsc#1217775)

This update for suseconnect-ng contains the following fix: Update to version 1.6.0: Disable EULA display for addons. (bsc#1218649 and bsc#1217961)

This update for util-linux fixes the following issues: Instead of explicitly truncating clocks.txt file, pad with whitespaces in the end of file. This is done to improve performance of libuuid on xfs. (bsc#1207987)

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BDADDR of the peer device to complete pairing without knowledge of the PIN (bsc#1179610 bsc#1215237). CVE-2023-51779: Fixed a use-after-free because of a btsockioctl race condition in btsockrecvmsg (bsc#1218559). CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250). CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947). CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258). CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253). The following non-security bugs were fixed: clocksource: Avoid accidental unstable marking of clocksources (bsc#1218105). clocksource: Suspend the watchdog temporarily when high read latency detected (bsc#1218105). doc/README.SUSE: Add how to update the config for module signing (jsc#PED-5021) doc/README.SUSE: Remove how to build modules using kernel-source (jsc#PED-5021) doc/README.SUSE: Simplify the list of references (jsc#PED-5021). efi/mokvar: Reserve the table only if it is in boot services data (bsc#1215375). iouring: fix 32-bit compatability with sendmsg/recvmsg (bsc#1217709).

This update for pam fixes the following issues: CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475). Check localtimer() return value to fix crashing (bsc#1217000)

This update for suseconnect-ng fixes the following issues: Update to version 1.5.0 Configure docker credentials for registry authentication Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364) Add --json output option Added EULA display for addons (bsc#1170267) Fix zypper argument for auto-agreeing licenses (bsc#1214781) Enable building on SLE12 SP5 (jsc#PED-3179) Fixed provides to work with yast2-registration on SLE15 SP4 (bsc#1212799) Keep keepalive timer states when replacing SUSEConnect (bsc#1211588) Make keepalive on SUMA systems exit without error (bsc#1207876) Add deactivate API to ruby bindings (bsc#1202705) Don't write systemtoken to service credentials files Allow non-root users to use --version Fix keepalive feature notice during installation Fix requires for all rhel clone distributions like alma, rocky... Fix System-Token support in ruby binding (bsc#1203341) Respect the PROXYENABLED environment variable Use system-wide proxy settings (bsc#1200994) Add timer for SUSEConnect --keepalive (bsc#1196076) Print nested zypper errors (bsc#1200803) Fix migration json error with SMT (bsc#1198625) Allow reloading CA certs pool (bsc#1195220) Fix product tree traversal (bsc#1197398) Revert "Remove self from LDPRELOAD (bsc#1196326)" Remove self from LDPRELOAD (bsc#1196326) Delegate free() calls back to Go (bsc#1195729) Workaround system cert reloading after import (bsc#1195220)

This update for tar fixes the following issues: CVE-2023-39804: Fixed extension attributes in PAX archives incorrect hanling (bsc#1217969).

This update for python-kiwi fixes the following issues: Add partx to module-setup of kiwi-lib (bsc#1216465)

Change partprobe fallback to partx (bsc#1216465): Informing the kernel about a new partition geometry can be done in a busy state and is also effective for new devices and new mounts based on the new geometry. busy state mounts of course will not see it until swap of the busy state but a complete refuse of operation like it happens with blockdev is imho not required. Just as partprobe, partx is less restrictive on the busy state. That's why this commit changes the partprobe fallback to use partx instead of blockdev

Create live persistent storage without busy state (bsc#1216465): With the former logic the live ISO was already mounted when an eventual persistent storage partition was created. This leads to an issue on re-reading the partition table, not for all but several tools. This commit changes the order of tasks such that the setup of the persistent write storage is performed prior mounting the live ISO. In addition to this change an alternative method using blockdev to re-read the partition was added in case partprobe is not present. This also allows to get rid of the parted dependency which provides partprobe

Add alternative re-reading of the partition table (bsc#1216465):