This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR (bsc#1215245). CVE-2023-4863: Fixed heap buffer overflow in libwebp (MFSA 2023-40) (bsc#1215231). The following non-security bug was fixed: Fix i586 build by reducing debug info to -g1 (bsc#1210168).

This update for webkit2gtk3 fixes the following issues: CVE-2023-42890: Fixed processing malicious web content may lead to arbitrary code execution (bsc#1218033). CVE-2023-42883: Fixed processing a malicious image may lead to a denial-of-service (bsc#1218032). CVE-2023-41074: Fixed use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (bsc#1215870). CVE-2023-39928: Fixed use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (bsc#1215868). CVE-2023-40451, CVE-2023-41074: Update to version 2.42.4 (bsc#1215868).

This update for wireshark fixes the following issues: Updated to Wireshark 3.6.20:

CVE-2024-0208: Fixed a crash in the GVCP dissector (bsc#1218504).

CVE-2024-0209: Fixed a crash in the IEEE 1609.2 dissector (bsc#1218505).

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BDADDR of the peer device to complete pairing without knowledge of the PIN (bsc#1179610 bsc#1215237). CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bsc#1202095). CVE-2023-51779: Fixed a use-after-free because of a btsockioctl race condition in btsockrecvmsg (bsc#1218559). CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250). CVE-2023-6606: Fixed an out-of-bounds read vulnerability in smbCalcSize in fs/smb/client/netmisc.c that could allow a local attacker to crash the system or leak internal kernel information (bsc#1217947). CVE-2023-6610: Fixed an out-of-bounds read vulnerability in smb2dumpdetail in fs/smb/client/smb2ops.c that could allow a local attacker to crash the system or leak internal kernel information (bsc#1217946). CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258). CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253). The following non-security bugs were fixed: doc/README.SUSE: Add how to update the config for module signing (jsc#PED-5021) doc/README.SUSE: Remove how to build modules using kernel-source (jsc#PED-5021) doc/README.SUSE: Simplify the list of references (jsc#PED-5021)

This update for bluez fixes the following issues: CVE-2021-41229: Fix leaking buffers stored in cstates cache (bsc#1192760). CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300). CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access Profile implementation (bsc#1218301).

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.7.0 ESR (MFSA 2024-02) (bsc#1218955): CVE-2024-0741: Out of bounds write in ANGLE CVE-2024-0742: Failure to update user input timestamp CVE-2024-0746: Crash when listing printers on Linux CVE-2024-0747: Bypass of Content Security Policy when directive unsafe-inline was set CVE-2024-0749: Phishing site popup could show local origin in address bar CVE-2024-0750: Potential permissions request bypass via clickjacking CVE-2024-0751: Privilege escalation through devtools CVE-2024-0753: HSTS policy on subdomain could bypass policy of upper domain CVE-2024-0755: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7

This update for runc fixes the following issues: Update to runc v1.1.11: CVE-2024-21626: Fixed container breakout. (bsc#1218894)

This update for java-11-openjdk fixes the following issues: Updated to version 11.0.22 (January 2024 CPU): CVE-2024-20918: Fixed an out of bounds access in the Hotspot JVM due to a missing bounds check (bsc#1218907). CVE-2024-20919: Fixed a sandbox bypass in the Hotspot JVM class file verifier (bsc#1218903). CVE-2024-20921: Fixed an incorrect optimization in the Hotspot JVM that could lead to corruption of JVM memory (bsc#1218905). CVE-2024-20926: Fixed arbitrary Java code execution in Nashorn (bsc#1218906). CVE-2024-20945: Fixed a potential private key leak through debug logs (bsc#1218909). CVE-2024-20952: Fixed an RSA padding issue and timing side-channel attack against TLS (bsc#1218911). Find the full release notes at: https://mail.openjdk.org/pipermail/jdk-updates-dev/2024-January/029215.html

This update for libsolv, libzypp fixes the following issues: build for multiple python versions [jsc#PED-6218] applydeltaprm: Create target directory if it does not exist (bsc#1219442) Fix problems with EINTR in ExternalDataSource::getline (bsc#1215698) CheckAccessDeleted: fix runningincontainer detection (bsc#1218782) Detect CURLOPTREDIRPROTOCOLSSTR availability at runtime (bsc#1218831)

This update for salt fixes the following issues: Security issues fixed: CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430) CVE-2024-22232: Prevent directory traversal attacks in the master's servefile method (bsc#1219431) Bugs fixed: Ensure that pillar refresh loads beacons from pillar without restart Fix the aptpkg.py unit test failure Prefer unittest.mock to python-mock in test suite Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649) Revert changes to set Salt configured user early in the stack (bsc#1216284) Align behavior of some modules when using salt-call via symlink (bsc#1215963) Fix gitfs "env" and improve cache cleaning (bsc#1193948) Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed

This update for openssl-100 fixes the following issues: CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).

This update for c-ares fixes the following issues: Update to version 1.19.1: CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604) CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605) CVE-2023-31130: Buffer Underwrite in aresinetnetpton() (bsc#1211606) CVE-2023-31124: AutoTools does not set CARESRANDOMFILE during cross compilation (bsc#1211607) Fix uninitialized memory warning in test aresgetaddrinfo() should allow a port of 0 Fix memory leak in aressend() on error Fix comment style in aresdata.h Fix typo in aresinitoptions.3 Sync axpthread.m4 with upstream Sync axcxxcompilestdcxx11.m4 with upstream to fix uclibc support

This update for openssl-11 fixes the following issues: CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).

This update of cni-plugins fixes the following issues: rebuild the package with the go 1.19 security release (bsc#1200441).

This update of cni fixes the following issues: rebuild the package with the go 1.19 security release (bsc#1200441).

This update for glib2 fixes the following issues: CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files. (bsc#1183533) CVE-2023-32665: Fixed GVariant deserialisation which does not match spec for non-normal data. (bsc#1211945) CVE-2023-32643: Fixed a heap-buffer-overflow in gvariantserialisedgetchild(). (bsc#1211946) CVE-2023-29499: Fixed GVariant offset table entry size which is not checked in isnormal(). (bsc#1211947) CVE-2023-32636: Fixed a wrong timeout in fuzzvarianttext(). (bsc#1211948) CVE-2023-32611: Fixed an issue where gvariantbyteswap() can take a long time with some non-normal inputs. (bsc#1211951)

This update of container-suseconnect fixes the following issues: rebuild the package with the go 1.21 security release (bsc#1212475).

This update for libssh2org fixes the following issues: CVE-2020-22218: Fixed a bug in libssh2packetadd() which allows to access out of bounds memory. (bsc#1214527)

This update of geoipupdate fixes the following issues: rebuild the package with the go 1.21 security release (bsc#1212475).

This update for MozillaFirefox fixes the following issues: Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606). CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688) CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback (bmo#1846689) CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694) CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397) CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884) CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007) CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079) CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046) CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758) CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874) CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030) CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529) CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).

This update for java-11-openjdk fixes the following issues: Fix a regression where the validation would reject valid zip64 (zip with 64-bit offset extensions)

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517). CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAPNETADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). CVE-2023-3863: Fixed a use-after-free flaw was found in nfcllcpfindlocal that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). CVE-2023-4128: Fixed a use-after-free flaw in net/sched/clsfw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a local user to crash the system, causing a denial of service condition (bsc#1213969). CVE-2023-4134: Fixed use-after-free in cyttsp4watchdogwork() (bsc#1213971). CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348). CVE-2023-4387: Fixed use-after-free flaw in vmxnet3rqallocrxbuf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3rqcleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). The following non-security bugs were fixed: kabi/severities: Ignore newly added SRSO mitigation functions x86/cpu/kvm: Provide UNTRAINRETVM (git-fixes). x86/cpu: Cleanup the untrain mess (git-fixes). x86/cpu: Fix x86returnthunk symbol type (git-fixes). x86/cpu: Fix up srsosaferet() and x86returnthunk() (git-fixes). x86/cpu: Rename original retbleed methods (git-fixes). x86/cpu: Rename srso(.)alias to srsoalias\1 (git-fixes). x86/retpoline,kprobes: Fix position of thunk sections with CONFIGLTOCLANG (git-fixes). x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes). x86/retpoline: Do not clobber RFLAGS during srsosaferet() (git-fixes). x86/speculation: Add cpushowgds() prototype (git-fixes). x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes). x86/srso: Correct the mitigation status when SMT is disabled (git-fixes). x86/srso: Disable the mitigation on unaffected configurations (git-fixes). x86/srso: Explain the untraining sequences a bit more (git-fixes). x86/srso: Fix build breakage with the LLVM linker (git-fixes). x86: Move gdsucodemitigated() declaration to header (git-fixes).

This update for libxml2 fixes the following issues: CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).

This update for cups fixes the following issues: CVE-2023-4504: Fixed heap overflow in OpenPrinting CUPS Postscript Parsing (bsc#1215204). CVE-2023-32360: Fixed Information leak through Cups-Get-Document operation (bsc#1214254).

This update of skopeo fixes the following issues: rebuild the package with the go 1.21 security release (bsc#1212475).

This update for indent fixes the following issues: Fixed multiple memory safety issues (bsc#1209718).

This update for gstreamer-plugins-bad fixes the following issues: CVE-2023-37329: Fixed a heap overwrite in PGS subtitle overlay decoder (bsc#1213126).

This update for gstreamer-plugins-base fixes the following issues: CVE-2023-37327: Fixed FLAC file parsing integer overflow (bsc#1213128). CVE-2023-37328: Fixed PGS file parsing heap-based buffer overflow (bsc#1213131). CVE-2021-3522: Fixed frame size check and potential invalid reads (bsc#1185448).

This update for qemu fixes the following issues: CVE-2022-26354: Fixed a memory leak due to a missing virtqueue detach on error. (bsc#1198712) CVE-2021-3929: Fixed an use-after-free in nvme DMA reentrancy issue. (bsc#1193880) CVE-2023-0330: Fixed a stack overflow due to a DMA reentrancy issue. (bsc#1207205) CVE-2020-13754: Fixed a DoS due to an OOB access during mmio operations. (bsc#1172382) CVE-2023-3354: Fixed a remote unauthenticated DoS due to an improper I/O watch removal in VNC TLS handshake. (bsc#1212850) CVE-2023-3180: Fixed a heap buffer overflow in virtiocryptosymophelper(). (bsc#1213925) CVE-2023-2861: Fixed improper access control on special files in 9pfs (bsc#1212968). CVE-2022-1050: Fixed use-after-free issue in pvrdmaexeccmd() (bsc#1197653). CVE-2021-3750: Fixed DMA reentrancy issue leads to use-after-free in hcd-ehci (bsc#1190011). The following non-security bug was fixed: Prepare for binutils update to 2.41 update (bsc#1215311).

This update for Golang Prometheus fixes the following issues: golang-github-prometheus-alertmanager: CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880) There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version. golang-github-prometheus-nodeexporter: CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880) There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.