This update for glib2 fixes the following issues: CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files (bsc#1183533).

This update for poppler fixes the following issues: CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).

This update for rabbitmq-c fixes the following issues: CVE-2023-35789: Fixed insecure credentials submission (bsc#1212499).

This update for bind fixes the following issues: CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm (bsc#1212544).

This update for perl fixes the following issues: CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).

This update for ceph fixes the following issues: Fix FTBFS on gcc 13 (bsc#1201088) Fix FTBFS on s390x (bsc#1211090) ceph-volume: Fix regression in activate (bsc#1210243, bsc#1210314) cephadm: Fix NFS haproxy failover if active node disappears (bsc#1209621) cephadm: Mount host /etc/hosts for daemon containers in podman deployments (bsc#1210719) cmake: Patch boost source to support python 3.11 (bsc#1210944) mgr: Don't dump global config holding gil (bsc#1199880) mgr/cephadm: Fix handling of mgr upgrades with 3 or more mgrs (bsc#1210153) mgr/dashboard: allow to pass controls on iscsi disk create (bsc#1208820) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode' (bsc#1210784)

This update for avahi fixes the following issues: CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419). CVE-2023-38470: Fixed that each label is at least one byte long (bsc#1215947).

This update for patterns-server-enterprise fixes the following issue: [aarch64] install system with all patterns, nothing provides 'sapconf' when installing 'sapserver'. (bsc#1214811)

This update for psmisc fixes the following issues: Fix version number when building the package

This update for squashfs fixes the following issues: CVE-2015-4645,CVE-2015-4646: Multiple buffer overflows fixed in squashfs-tools (bsc#935380) CVE-2021-40153: Fixed an issue where an attacker might have been able to write a file outside of destination (bsc#1189936) CVE-2021-41072: Fixed an issue where an attacker might have been able to write a file outside the destination directory via a symlink (bsc#1190531). update to 4.6.1: Race condition which can cause corruption of the "fragment table" fixed. This is a regression introduced in August 2022, and it has been seen when tailend packing is used (-tailends option). Fix build failure when the tools are being built without extended attribute (XATTRs) support. Fix XATTR error message when an unrecognised prefix is found Fix incorrect free of pointer when an unrecognised XATTR prefix is found. Major improvements in extended attribute handling, pseudo file handling, and miscellaneous new options and improvements Extended attribute handling improved in Mksquashfs and Sqfstar New Pseudo file xattr definition to add extended attributes to files. New xattrs-add Action to add extended attributes to files Extended attribute handling improved in Unsquashfs Other major improvements Unsquashfs can now output Pseudo files to standard out. Mksquashfs can now input Pseudo files from standard in. Squashfs filesystems can now be converted (different block size compression etc) without unpacking to an intermediate filesystem or mounting, by piping the output of Unsquashfs to Mksquashfs. Pseudo files are now supported by Sqfstar. "Non-anchored" excludes are now supported by Unsquashfs. update to 4.5.1 (bsc#1190531, CVE-2021-41072): This release adds Manpages for Mksquashfs(1), Unsquashfs(1), Sqfstar(1) and Sqfscat(1). The -help text output from the utilities has been improved and extended as well (but the Manpages are now more comprehensive). CVE-2021-41072 which is a writing outside of destination exploit, has been fixed. The number of hard-links in the filesystem is now also displayed by Mksquashfs in the output summary. The number of hard-links written by Unsquashfs is now also displayed in the output summary. Unsquashfs will now write to a pre-existing destination directory, rather than aborting. Unsquashfs now allows "." to used as the destination, to extract to the current directory. The Unsquashfs progress bar now tracks empty files and hardlinks, in addition to data blocks. -no-hardlinks option has been implemented for Sqfstar. More sanity checking for "corrupted" filesystems, including checks for multiply linked directories and directory loops. Options that may cause filesystems to be unmountable have been moved into a new "experts" category in the Mksquashfs help text (and Manpage). Maximum cpiostyle filename limited to PATHMAX. This prevents attempts to overflow the stack, or cause system calls to fail with a too long pathname. Don't always use "max open file limit" when calculating length of queues, as a very large file limit can cause Unsquashfs to abort. Instead use the smaller of max open file limit and cache size. Fix Mksquashfs silently ignoring Pseudo file definitions when appending. Don't abort if no XATTR support has been built in, and there's XATTRs in the filesystem. This is a regression introduced in 2019 in Version 4.4. Fix duplicate check when the last file block is sparse. update to 4.5: Mksquashfs now supports "Actions". New sqfstar command which will create a Squashfs image from a tar archive. Tar style handling of source pathnames in Mksquashfs. Cpio style handling of source pathnames in Mksquashfs. New option to throttle the amount of CPU and I/O. Mksquashfs now allows no source directory to be specified. New Pseudo file "R" definition which allows a Regular file o be created with data stored within the Pseudo file. Symbolic links are now followed in extract files Unsquashfs now supports "exclude" files. Max depth traversal option added. Unsquashfs can now output a "Pseudo file" representing the input Squashfs filesystem. New -one-file-system option in Mksquashfs. New -no-hardlinks option in Mksquashfs. Exit code in Unsquashfs changed to distinguish between non-fatal errors (exit 2), and fatal errors (exit 1). Xattr id count added in Unsquashfs "-stat" output. Unsquashfs "write outside directory" exploit fixed. Error handling in Unsquashfs writer thread fixed. Fix failure to truncate destination if appending aborted. Prevent Mksquashfs reading the destination file.

This update for poppler fixes the following issues: CVE-2019-9545: Fixed an uncontrolled recursion issue that could cause a crash (bsc#1128114). CVE-2022-37052: Fixed a crash that could be triggered when opening a crafted file (bsc#1214726). CVE-2020-36023: Fixed a stack bugger overflow in FoFiType1C:cvtGlyph (bsc#1214256).

This update for libteam fixes the following issues: Document ARP Ping linkwatch.vlanid option in teamd.conf man page (bsc#1215527)

This update for unar fixes the following issue: use pkgconfig(icu-uc) for current libicu

This update for libzypp, zypper fixes the following issues: Preliminary disable 'rpm --runposttrans' usage for chrooted systems (bsc#1216091) Fix comment typo on zypp.conf (bsc#1215979) Attempt to delay %transfiletrigger(postun|in) execution if rpm supports it (bsc#1041742) Make sure the old target is deleted before a new one is created (bsc#1203760) Return 104 also if info suggests near matches Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422) commit: Insert a headline to separate output of different rpm scripts (bsc#1041742)

This update for screen fixes the following issue: screen is shipped to SUSE Linux Enterprise Micro 5.3, 5.4 and 5.5.

This update for rsyslog fixes the following issue: fix rsyslog crash in imrelp (bsc#1210286)

This update for libjansson ships the missing 32bit library to the Basesystem module of 15 SP5.

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113). (bsc#1215278) CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. (bsc#1215278)

This update for xterm fixes the following issues: CVE-2023-40359: Fixed reporting characterset names in ReGiS graphics mode. (bsc#1214282)

This update for apache2 fixes the following issues: CVE-2023-31122: Fixed an out of bounds read in modmacro (bsc#1216424). Non-security fixes: Fixed the content type handling in modproxyhttp2 (bsc#1214357). Fixed a floating point exception crash (bsc#1207399).

This update for clamav fixes the following issues: Updated to version 0.103.11:

CVE-2023-40477: Updated libclamunrar dependency to version 6.2.12 (bsc#1216625).

This update for redis fixes the following issues: CVE-2023-45145: Fixed a potential permission bypass due to a race condition during UNIX socket creation (bsc#1216376).

This update for webkit2gtk3 fixes the following issues: CVE-2023-41993: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215661). CVE-2023-39928: Fixed a use-after-free that could be exploited to execute arbitrary code when visiting a malicious webpage (bsc#1215868). CVE-2023-41074: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215870). Non-security fixes: Fixed missing package dependencies (bsc#1215072).

This update for xorg-x11-server fixes the following issues: CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261). CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133). CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).

This update for libsndfile fixes the following issues: CVE-2022-33065: Fixed an integer overflow that could cause memory safety issues when reading a MAT4 file (bsc#1213451).

This Update for libtirpc to 1.3.4, fixing the following issues: Update to 1.3.4 (bsc#1199467) binddynport.c honor iplocalreservedports replaces: binddynport-honor-iplocalreservedports.patch gss-api: expose gss major/minor error in authgssrefresh() rpcbclnt.c: Eliminate double frees in deletecache() rpcbclnt.c: memory leak in destroyaddr portmapper: allow TCP-only portmapper getnetconfigent: avoid potential DoS issue by removing unnecessary sleep clntraw.c: fix a possible null pointer dereference bindresvport.c: fix a potential resource leakage Update to 1.3.3: Fix DoS vulnerability in libtirpc replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch rpcdtablesize: use portable system call libtirpc: Fix use-after-free accessing the error number Fix potential memory leak of parms.raddr replaces 0001-fix-parms.raddr-memory-leak.patch rpcbclnt.c add mechanism to try v2 protocol first preplaces: 0001-rpcbclnt.c-config-to-try-protocolversion-2-first.patch Eliminate deadlocks in connects with an MT environment clntdgfreeres() uncleared set active state may deadlock thread safe clnt destruction SUNRPC: mutexed access blacklistread state variable SUNRPC: MT-safe overhaul of address cache management in rpcbclnt.c Update to 1.3.2: Replace the final SunRPC licenses with BSD licenses blacklist: Add a few more well known ports libtirpc: disallow calling authrefresh from clntcall with RPCSECGSS Update to 1.3.1: Remove AUTHDES interfaces from authdes.h The unsupported AUTHDES authentication has be compiled out since commit d918e41d889 (Wed Oct 9 2019) replaced by API routines that return errors. svcdg: Free xpnetid during destroy Fix memory management issues of fd locks libtirpc: replace array with list for per-fd locks svcvcdodestroy: fix double free of xpltaddr.buf rpcdtbsize: rlimcur instead of rlimmax pkg-config: use the correct replacements for libdir/includedir

This update for icu732 fixes the following issues: Update to release 73.2

CLDR extends the support for “short” Chinese sort orders to cover some additional, required characters for Level 2. This is carried over into ICU collation.

ICU has a modified character conversion table, mapping some GB18030 characters to Unicode characters that were encoded after GB18030-2005.

fixes builds where UCHARTYPE is re-defined such as libqt5-qtwebengine

Update to release 73.1

Improved Japanese and Korean short-text line breaking

Reduction of C++ memory use in date formatting

Update to release 72.1

Support for Unicode 15, including new characters, scripts, emoji, and corresponding API constants.

Support for CLDR 42 locale data with various additions and corrections.

Shift to tzdb 2022e. Pre-1970 data for a number of timezones has been removed.

bump library packagename to libicu71 to match the version.

update to 71.1:

updates to CLDR 41 locale data with various additions and corrections.

phrase-based line breaking for Japanese. Existing line breaking methods follow standards and conventions for body text but do not work well for short Japanese text, such as in titles and headings. This new feature is optimized for these use cases. support for Hindi written in Latin letters (hiLatn). The CLDR data for this increasingly popular locale has been significantly revised and expanded. Note that based on user expectations, hiLatn incorporates a large amount of English, and can also be referred to as “Hinglish”.

time zone data updated to version 2022a. Note that pre-1970 data for a number of time zones has been removed, as has been the case in the upstream tzdata release since 2021b.

ICU-21793 Fix ucptrietest golden diff [bsc#1192935]

Update to release 70.1:

Unicode 14 (new characters, scripts, emoji, and API constants)

CLDR 40 (many additions and corrections) Fixes for measurement unit formatting

Can now be built with up to C++20 compilers

ICU-21613 Fix undefined behaviour in ComplexUnitsConverter::applyRounder

Update to release 69.1

CLDR 39

For Norwegian, "no" is back to being the canonical code, with "nb" treated as equivalent. This aligns handling of Norwegian with other macro language codes. Binary prefixes in measurement units (KiB, MiB, etc.)

Time zone offsets from local time: New APIs BasicTimeZone::getOffsetFromLocal() (C++) and ucalgetTimeZoneOffsetFromLocal()

Backport ICU-21366 (bsc#1182645)

Update to release 68.2

Fix memory problem in FormattedStringBuilder

Fix assertion when setKeywordValue w/ long value. Fix UBSan breakage on 8bit of rbbi fix int32t overflow in listFormat Fix memory handling in MemoryPool::operator=()

Fix memory leak in AliasReplacer

Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361 Update to release 68.1: CLDR 38 Measurement unit preferences PluralRules selection for ranges of numbers Locale ID canonicalization now conforms to the CLDR spec including edge cases DateIntervalFormat supports output options such as capitalization Measurement units are normalized in skeleton string output

Time zone data (tzdata) version 2020d

Add the provides for libicu to Make .Net core can install successfully. (bsc#1167603, bsc#1161007) Update to version 67.1: Unicode 13 (ICU-20893, same as in ICU 66)

Total of 5930 new characters 4 new scripts 55 new emoji characters, plus additional new sequences New CJK extension, first characters in plane 3: U+30000..U+3134A

CLDR 37

New language at Modern coverage: Nigerian Pidgin New languages at Basic coverage: Fulah (Adlam), Maithili, Manipuri, Santali, Sindhi (Devanagari), Sundanese Region containment: EU no longer includes GB Unicode 13 root collation data and Chinese data for collation and transliteration DateTimePatternGenerator now obeys the "hc" preference in the locale identifier (ICU-20442) Various other improvements for ECMA-402 conformance Number skeletons have a new "concise" form that can be used in MessageFormat strings (ICU-20418) Currency formatting options for formal and other currency display name variants (ICU-20854) ListFormatter: new public API to select the style & type (ICU-12863) ListFormatter now selects the proper “and”/“or” form for Spanish & Hebrew (ICU-21016) Locale ID canonicalization upgraded to implement the complete CLDR spec (ICU-20834, ICU-20272) LocaleMatcher: New option to ignore one-way matches (ICU-20936), and other tweaks to the code (ICU-20916, ICU-20917) and data (from CLDR) acceptLanguage() reimplemented via LocaleMatcher (ICU-20700) Data build tool: tzdbNames.res moved from the "zonetree" category to the "zonesupplemental" category (ICU-21073) Fixed uses of u8"literals" broken by the C++20 introduction of the incompatible char8t type (ICU-20972), and added a few API overloads to reduce the need for reinterpretcast (ICU-20984). Support for manipulating CLDR 37 unit identifiers in MeasureUnit. Fix potential integer overflow in UnicodeString:doAppend (bsc#1166844, CVE-2020-10531). Update to version 66.1: Unicode 13 support Fix uses of u8"literals" broken by C++20 introduction of incompatible char8t type. (ICU-20972)

use LocalMemory for cmd to prevent use after free (bsc#1193951 CVE-2020-21913).

Remove /usr/lib(64)/icu/current [bsc#1158955]. Update to release 65.1 (jsc#SLE-11118): Updated to CLDR 36 locale data with many additions and corrections, and some new measurement units. The Java LocaleMatcher API is improved, and ported to C++.

This update for pciutils fixes the following issues: Buffer overflow error that would cause lspci to crash on systems with complex topologies (bsc#1215265)

This update for perl-Bootloader fixes the following issues: bootloaderentry script can have an optional 'force-default' argument (bsc#1215064)

This update for zchunk fixes the following issues: CVE-2023-46228: Fixed a handle overflow errors in malformed zchunk files. (bsc#1216268)