This update for libwebp fixes the following issues: CVE-2023-4863: Fixed heap buffer overflow (bsc#1215231).

This update for erlang fixes the following issues: Updated to version 23.3.4.19 (jsc#PED-6209): CVE-2022-37026: Complete a previous insufficient fix for an authentication bypass (bsc#1205318).

This update for perl fixes the following issues: CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).

This update for rabbitmq-c fixes the following issues: CVE-2023-35789: Fixed insecure credentials submission (bsc#1212499).

This update for bind fixes the following issues: CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm (bsc#1212544).

This update for php7 fixes the following issues: CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. (bsc#1214106) CVE-2023-3824: Fixed a buffer overflow in phardirread(). (bsc#1214103)

This update for c-ares fixes the following issues: Update to version 1.19.1: CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604) CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605) CVE-2023-31130: Buffer Underwrite in aresinetnetpton() (bsc#1211606) CVE-2023-31124: AutoTools does not set CARESRANDOMFILE during cross compilation (bsc#1211607) Fix uninitialized memory warning in test aresgetaddrinfo() should allow a port of 0 Fix memory leak in aressend() on error Fix comment style in aresdata.h Fix typo in aresinitoptions.3 Sync axpthread.m4 with upstream Sync axcxxcompilestdcxx11.m4 with upstream to fix uclibc support

This update for dracut fixes the following issues: Exit if resolving executable dependencies fails (bsc#1214081)

This update for libssh2org fixes the following issues: CVE-2020-22218: Fixed a bug in libssh2packetadd() which allows to access out of bounds memory. (bsc#1214527)

This update of geoipupdate fixes the following issues: rebuild the package with the go 1.21 security release (bsc#1212475).

This update of skopeo fixes the following issues: rebuild the package with the go 1.21 security release (bsc#1212475).

This update for nodejs18 fixes the following issues: Update to version 18.18.2 CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) CVE-2023-45143: Fixed a cookie leakage in undici. (bsc#1216205) CVE-2023-38552: Fixed an integrity checks according to policies that could be circumvented. (bsc#1216272) CVE-2023-39333: Fixed a code injection via WebAssembly export names. (bsc#1216273)

This update for java-11-openjdk fixes the following issues: Fix a regression where the validation would reject valid zip64 (zip with 64-bit offset extensions)

This update for libxml2 fixes the following issues: CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).

This update for python39 fixes the following issues: Update to 3.9.18:

CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692). The following non-security bugs were fixed: making marshalling of set and frozenset deterministic (bsc#1211765). stabilizing FLAGREF usage (required for reproduceability (bsc#1213463).

This update for frr fixes the following issues: CVE-2023-38802: Fixed bad length handling when processing BGP attributes. (bsc#1213284) CVE-2023-41358: Fixed a possible crash when processing NLRIs with an attribute length of zero. (bsc#1214735) CVE-2023-41909: Fixed NULL pointer dereference due to processing in bgpnlriparseflowspec (bsc#1215065).

This update for Golang Prometheus fixes the following issues: golang-github-prometheus-alertmanager: CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880) There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version. golang-github-prometheus-nodeexporter: CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880) There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.

This update for python fixes the following issues: CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).

This update for bind fixes the following issues: Security fixes: CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472). Other fixes: Add dnstap support (jsc#PED-4853, jsc#PED-4852, bsc#1213748)

This update for vim fixes the following issues: Security fixes: CVE-2023-4733: Fixed use-after-free in function buflistaltfpos (bsc#1215004). CVE-2023-4734: Fixed segmentation fault in function ffullcommand (bsc#1214925). CVE-2023-4735: Fixed out of bounds write in ops.c (bsc#1214924). CVE-2023-4738: Fixed heap buffer overflow in vimregsubboth (bsc#1214922). CVE-2023-4752: Fixed heap use-after-free in function inscomplgetexp (bsc#1215006). CVE-2023-4781: Fixed heap buffer overflow in function vimregsubboth (bsc#1215033). Other fixes: Update to version 9.0 with patch level 1894, for the complete list of changes see https://github.com/vim/vim/compare/v9.0.1443...v9.0.1894 Use app icons generated from vimlogo.eps in the source tarball; add higher resolution icons of sizes 128x128, 256x256, and 512x512 as png sources

This update for libvpx fixes the following issues: CVE-2023-5217: Fixed a heap buffer overflow (bsc#1215778).

This update for ghostscript fixes the following issues: CVE-2023-43115: Fixed remote code execution via crafted PostScript documents in gdevijs.c (bsc#1215466).

This update for nghttp2 fixes the following issues: CVE-2023-35945: Fixed memory leak when PUSHPROMISE or HEADERS frame cannot be sent (bsc#1215713).

This update for poppler fixes the following issues: CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422). CVE-2020-36024: Fixed NULL Pointer Deference in FoFiType1C:convertToType1 (bsc#1214257). CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622). CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621). CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).

This update for openssl-11 fixes the following issues: CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).

This update for python-gevent fixes the following issues: CVE-2023-41419: Fixed a http request smuggling (bsc#1215469).

This update for samba fixes the following issues: CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904) CVE-2023-42669: Fixed a bug in "rpcecho" development server which allows Denial of Service via sleep() call on AD DC. (bso#1215905) CVE-2023-4154: Fixed a bug in dirsync which allows SYSTEM access with only "GUIDDRSGETCHANGES" right. (bsc#1215908)

This update for opensc fixes the following issues: CVE-2023-40660: Fixed a PIN bypass that could be triggered when cards tracked their own login state (bsc#1215762). CVE-2023-40661: Fixed several memory safety issues that could happen during the card enrollment process using pkcs15-init (bsc#1215761).

This update for glibc fixes the following issues: Security issue fixed: CVE-2023-4813: Fixed a potential use-after-free in gaihinet() (bsc#1215286, BZ #28931) Also a regression from a previous update was fixed: elf: Align argument of munmap to page size (bsc#1215891, BZ #28676)

This update for grub2 fixes the following issues: CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935) CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. (bsc#1215936)