Bug 1217270

Summary:	Please port CVE-2023-33204 fix to Leap 15.4
Product:	[openSUSE] openSUSE Distribution	Reporter:	Simon Logan <simonalogan>
Component:	Security	Assignee:	Security Team bot <security-team>
Status:	RESOLVED DUPLICATE	QA Contact:	E-mail List <qa-bugs>
Severity:	Normal
Priority:	P5 - None
Version:	Leap 15.4
Target Milestone:	---
Hardware:	Other
OS:	openSUSE Leap 15.4
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Simon Logan 2023-11-16 20:10:57 UTC

User-Agent:       Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Build Identifier: 

The existing fix for CVE-2023-33204 is in Tumbleweed. See https://bugzilla.suse.com/show_bug.cgi?id=1211507

David Anes asked me to raise a separate bug to have the fix ported to Leap 15.4 (I need it for x86_64).

Reproducible: Didn't try

Comment 1 Marcus Meissner 2023-11-17 08:17:02 UTC

dup of bug 1211507

there is no seperate delivery for Leap 15.4 and we have decided not to fix in on SLE15 as its a 32bit only problem.

is there specific need to have it fixed on leap even tough it is not affecting it?

*** This bug has been marked as a duplicate of bug 1211507 ***

Comment 2 Simon Logan 2023-11-17 08:38:45 UTC

Hi Marcus, no need for a 32 bit fix. I hadn't noticed it was 32 bit only, sorry for the noise.

Simon