openSUSE: 2024:0224-1 Important: Apache Update for Security Issues

opensuse

January 25, 2024

This update for apache-parent, apache-sshd fixes the following issues: apache-parent was updated from version 28 to 31:

Description

This update for apache-parent, apache-sshd fixes the following issues:

apache-parent was updated from version 28 to 31:

* Version 31:

* New Features:

* Added maven-checkstyle-plugin to pluginManagement

* Improvements:

* Set minimalMavenBuildVersion to 3.6.3 - the minimum used by plugins

* Using an SPDX identifier as the license name is recommended by Maven

* Use properties to define the versions of plugins

* Bugs fixed:

* Updated documentation for previous changes

apache-sshd was updated from version 2.7.0 to 2.12.0:

* Security issues fixed:

* CVE-2023-48795: Implemented OpenSSH "strict key exchange" protocol in

apache-sshd version 2.12.0 (bsc#1218189)

* CVE-2022-45047: Java unsafe deserialization vulnerability fixed in apache-

sshd version 2.9.2 (bsc#1205463)

* Other changes in version 2.12.0:

* Bugs fixed:

* SCP client fails silently when error signalled due to missing file or lacking permissions

* Ignore unknown key types...

Read the Full Advisory

Topics Covered

security advisory update apache important java openSUSE deserialization

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.5

zypper in -t patch openSUSE-SLE-15.5-2024-224=1

* Development Tools Module 15-SP5

zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-224=1

* SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2

zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-224=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3

zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-224=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-224=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-224=1

* SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4

zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-224=1

* SUSE Linux...

Read the Full Advisory