May 2024 - openSUSE Security Announce - openSUSE Mailing Lists

openSUSE-SU-2024:0138-1: moderate: Security update for qt6-networkauth
by opensuse-security＠opensuse.org 24 May '24

24 May '24

openSUSE Security Update: Security update for qt6-networkauth ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0138-1 Rating: moderate References: #1224782 Cross-References: CVE-2024-36048 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for qt6-networkauth fixes the following issues: - CVE-2024-36048: Fixed data race and poor seeding in generateRandomString() (boo#1224782). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-138=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libQt6NetworkAuth6-6.4.2-bp155.2.3.1 qt6-networkauth-devel-6.4.2-bp155.2.3.1 qt6-networkauth-docs-html-6.4.2-bp155.2.3.1 qt6-networkauth-docs-qch-6.4.2-bp155.2.3.1 qt6-networkauth-examples-6.4.2-bp155.2.3.1 qt6-networkauth-private-devel-6.4.2-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-36048.html https://bugzilla.suse.com/1224782

1 0

SUSE-SU-2024:1777-1: moderate: Security update for postgresql15
by OPENSUSE-SECURITY-UPDATES 24 May '24

24 May '24

# Security update for postgresql15 Announcement ID: SUSE-SU-2024:1777-1 Rating: moderate References: * bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317 CVSS scores: * CVE-2024-4317 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for postgresql15 fixes the following issues: PostgreSQL upgrade to version 15.7 (bsc#1224051): * CVE-2024-4317: Fixed visibility restriction of pg_stats_ext and pg_stats_ext_exprs entries to the table owner (bsc#1224038). Bug fixes: * Fix incompatibility with LLVM 18. * Prepare for PostgreSQL 17. * Make sure all compilation and doc generation happens in %build. * Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work. * Remove constraints file because improved memory usage for s390x * Use %patch -P N instead of deprecated %patchN. Release notes: * https://www.postgresql.org/docs/release/15.7/ ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1777=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1777=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1777=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * postgresql15-plpython-15.7-150200.5.27.1 * postgresql15-server-devel-15.7-150200.5.27.1 * postgresql15-llvmjit-debuginfo-15.7-150200.5.27.1 * postgresql15-devel-15.7-150200.5.27.1 * postgresql15-contrib-15.7-150200.5.27.1 * postgresql15-pltcl-15.7-150200.5.27.1 * postgresql15-pltcl-debuginfo-15.7-150200.5.27.1 * postgresql15-debuginfo-15.7-150200.5.27.1 * postgresql15-devel-debuginfo-15.7-150200.5.27.1 * postgresql15-plperl-debuginfo-15.7-150200.5.27.1 * postgresql15-plperl-15.7-150200.5.27.1 * postgresql15-server-15.7-150200.5.27.1 * postgresql15-plpython-debuginfo-15.7-150200.5.27.1 * postgresql15-llvmjit-15.7-150200.5.27.1 * postgresql15-contrib-debuginfo-15.7-150200.5.27.1 * postgresql15-15.7-150200.5.27.1 * postgresql15-llvmjit-devel-15.7-150200.5.27.1 * postgresql15-server-debuginfo-15.7-150200.5.27.1 * postgresql15-debugsource-15.7-150200.5.27.1 * postgresql15-test-15.7-150200.5.27.1 * postgresql15-server-devel-debuginfo-15.7-150200.5.27.1 * openSUSE Leap 15.5 (noarch) * postgresql15-docs-15.7-150200.5.27.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * postgresql15-15.7-150200.5.27.1 * postgresql15-debuginfo-15.7-150200.5.27.1 * postgresql15-debugsource-15.7-150200.5.27.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * postgresql15-plperl-debuginfo-15.7-150200.5.27.1 * postgresql15-pltcl-15.7-150200.5.27.1 * postgresql15-pltcl-debuginfo-15.7-150200.5.27.1 * postgresql15-devel-15.7-150200.5.27.1 * postgresql15-plperl-15.7-150200.5.27.1 * postgresql15-plpython-15.7-150200.5.27.1 * postgresql15-server-devel-15.7-150200.5.27.1 * postgresql15-server-15.7-150200.5.27.1 * postgresql15-plpython-debuginfo-15.7-150200.5.27.1 * postgresql15-debuginfo-15.7-150200.5.27.1 * postgresql15-contrib-debuginfo-15.7-150200.5.27.1 * postgresql15-debugsource-15.7-150200.5.27.1 * postgresql15-devel-debuginfo-15.7-150200.5.27.1 * postgresql15-contrib-15.7-150200.5.27.1 * postgresql15-server-debuginfo-15.7-150200.5.27.1 * postgresql15-server-devel-debuginfo-15.7-150200.5.27.1 * Server Applications Module 15-SP5 (noarch) * postgresql15-docs-15.7-150200.5.27.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4317.html * https://bugzilla.suse.com/show_bug.cgi?id=1224038 * https://bugzilla.suse.com/show_bug.cgi?id=1224051

1 0

SUSE-SU-2024:1770-1: important: Security update for MozillaFirefox
by OPENSUSE-SECURITY-UPDATES 23 May '24

23 May '24

# Security update for MozillaFirefox Announcement ID: SUSE-SU-2024:1770-1 Rating: important References: * bsc#1222535 * bsc#1224056 Cross-References: * CVE-2024-2609 * CVE-2024-3302 * CVE-2024-3852 * CVE-2024-3854 * CVE-2024-3857 * CVE-2024-3859 * CVE-2024-3861 * CVE-2024-3863 * CVE-2024-3864 * CVE-2024-4367 * CVE-2024-4767 * CVE-2024-4768 * CVE-2024-4769 * CVE-2024-4770 * CVE-2024-4777 CVSS scores: * CVE-2024-2609 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-3302 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-3852 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-3854 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-3857 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-3859 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-3861 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-3863 ( SUSE ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2024-3864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-4367 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-4767 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-4768 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-4769 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-4770 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-4777 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 15 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to version 115.11.0 ESR (bsc#1224056): * CVE-2024-4367: Arbitrary JavaScript execution in PDF.js * CVE-2024-4767: IndexedDB files retained in private browsing mode * CVE-2024-4768: Potential permissions request bypass via clickjacking * CVE-2024-4769: Cross-origin responses could be distinguished between script and non-script content-types * CVE-2024-4770: Use-after-free could occur when printing to PDF * CVE-2024-4777: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1770=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1770=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-1770=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-1770=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1770=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1770=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1770=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1770=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1770=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1770=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1770=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1770=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1770=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1770=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1770=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1770=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-branding-upstream-115.11.0-150200.152.137.2 * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * openSUSE Leap 15.5 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-branding-upstream-115.11.0-150200.152.137.2 * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * openSUSE Leap 15.6 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * Desktop Applications Module 15-SP5 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * Desktop Applications Module 15-SP6 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * MozillaFirefox-translations-other-115.11.0-150200.152.137.2 * MozillaFirefox-115.11.0-150200.152.137.2 * MozillaFirefox-debuginfo-115.11.0-150200.152.137.2 * MozillaFirefox-translations-common-115.11.0-150200.152.137.2 * MozillaFirefox-debugsource-115.11.0-150200.152.137.2 * SUSE Enterprise Storage 7.1 (noarch) * MozillaFirefox-devel-115.11.0-150200.152.137.2 ## References: * https://www.suse.com/security/cve/CVE-2024-2609.html * https://www.suse.com/security/cve/CVE-2024-3302.html * https://www.suse.com/security/cve/CVE-2024-3852.html * https://www.suse.com/security/cve/CVE-2024-3854.html * https://www.suse.com/security/cve/CVE-2024-3857.html * https://www.suse.com/security/cve/CVE-2024-3859.html * https://www.suse.com/security/cve/CVE-2024-3861.html * https://www.suse.com/security/cve/CVE-2024-3863.html * https://www.suse.com/security/cve/CVE-2024-3864.html * https://www.suse.com/security/cve/CVE-2024-4367.html * https://www.suse.com/security/cve/CVE-2024-4767.html * https://www.suse.com/security/cve/CVE-2024-4768.html * https://www.suse.com/security/cve/CVE-2024-4769.html * https://www.suse.com/security/cve/CVE-2024-4770.html * https://www.suse.com/security/cve/CVE-2024-4777.html * https://bugzilla.suse.com/show_bug.cgi?id=1222535 * https://bugzilla.suse.com/show_bug.cgi?id=1224056

1 0

SUSE-SU-2024:1767-1: important: Security update for python-sqlparse
by OPENSUSE-SECURITY-UPDATES 23 May '24

23 May '24

# Security update for python-sqlparse Announcement ID: SUSE-SU-2024:1767-1 Rating: important References: * bsc#1223603 Cross-References: * CVE-2024-4340 CVSS scores: * CVE-2024-4340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-sqlparse fixes the following issues: * CVE-2024-4340: Catch RecursionError to avoid a denial of service. (bsc#1223603) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1767=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1767=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1767=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1767=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-sqlparse-0.4.4-150400.6.7.1 * openSUSE Leap 15.5 (noarch) * python311-sqlparse-0.4.4-150400.6.7.1 * Public Cloud Module 15-SP4 (noarch) * python311-sqlparse-0.4.4-150400.6.7.1 * Public Cloud Module 15-SP5 (noarch) * python311-sqlparse-0.4.4-150400.6.7.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4340.html * https://bugzilla.suse.com/show_bug.cgi?id=1223603

1 0

SUSE-SU-2024:1768-1: moderate: Security update for postgresql14
by OPENSUSE-SECURITY-UPDATES 23 May '24

23 May '24

# Security update for postgresql14 Announcement ID: SUSE-SU-2024:1768-1 Rating: moderate References: * bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317 CVSS scores: * CVE-2024-4317 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Legacy Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for postgresql14 fixes the following issues: PostgreSQL upgrade to version 14.12 (bsc#1224051): * CVE-2024-4317: Fixed visibility restriction of pg_stats_ext and pg_stats_ext_exprs entries to the table owner (bsc#1224038). Bug fixes: * Fix incompatibility with LLVM 18. * Prepare for PostgreSQL 17. * Make sure all compilation and doc generation happens in %build. * Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work. * Remove constraints file because improved memory usage for s390x * Use %patch -P N instead of deprecated %patchN. Release notes: * https://www.postgresql.org/docs/release/14.12/ ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1768=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-1768=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1768=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * postgresql14-plperl-14.12-150200.5.44.1 * postgresql14-plpython-debuginfo-14.12-150200.5.44.1 * postgresql14-plpython-14.12-150200.5.44.1 * postgresql14-contrib-14.12-150200.5.44.1 * postgresql14-debugsource-14.12-150200.5.44.1 * postgresql14-test-14.12-150200.5.44.1 * postgresql14-llvmjit-debuginfo-14.12-150200.5.44.1 * postgresql14-server-14.12-150200.5.44.1 * postgresql14-contrib-debuginfo-14.12-150200.5.44.1 * postgresql14-pltcl-debuginfo-14.12-150200.5.44.1 * postgresql14-llvmjit-14.12-150200.5.44.1 * postgresql14-debuginfo-14.12-150200.5.44.1 * postgresql14-llvmjit-devel-14.12-150200.5.44.1 * postgresql14-devel-14.12-150200.5.44.1 * postgresql14-pltcl-14.12-150200.5.44.1 * postgresql14-14.12-150200.5.44.1 * postgresql14-server-devel-14.12-150200.5.44.1 * postgresql14-devel-debuginfo-14.12-150200.5.44.1 * postgresql14-server-devel-debuginfo-14.12-150200.5.44.1 * postgresql14-server-debuginfo-14.12-150200.5.44.1 * postgresql14-plperl-debuginfo-14.12-150200.5.44.1 * openSUSE Leap 15.5 (noarch) * postgresql14-docs-14.12-150200.5.44.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * postgresql14-plperl-14.12-150200.5.44.1 * postgresql14-devel-debuginfo-14.12-150200.5.44.1 * postgresql14-plperl-debuginfo-14.12-150200.5.44.1 * postgresql14-plpython-debuginfo-14.12-150200.5.44.1 * postgresql14-pltcl-debuginfo-14.12-150200.5.44.1 * postgresql14-llvmjit-14.12-150200.5.44.1 * postgresql14-debuginfo-14.12-150200.5.44.1 * postgresql14-contrib-14.12-150200.5.44.1 * postgresql14-14.12-150200.5.44.1 * postgresql14-plpython-14.12-150200.5.44.1 * postgresql14-server-14.12-150200.5.44.1 * postgresql14-debugsource-14.12-150200.5.44.1 * postgresql14-llvmjit-devel-14.12-150200.5.44.1 * postgresql14-server-devel-debuginfo-14.12-150200.5.44.1 * postgresql14-server-devel-14.12-150200.5.44.1 * postgresql14-server-debuginfo-14.12-150200.5.44.1 * postgresql14-devel-14.12-150200.5.44.1 * postgresql14-llvmjit-debuginfo-14.12-150200.5.44.1 * postgresql14-contrib-debuginfo-14.12-150200.5.44.1 * postgresql14-pltcl-14.12-150200.5.44.1 * Legacy Module 15-SP5 (noarch) * postgresql14-docs-14.12-150200.5.44.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * postgresql14-llvmjit-14.12-150200.5.44.1 * postgresql14-debuginfo-14.12-150200.5.44.1 * postgresql14-debugsource-14.12-150200.5.44.1 * postgresql14-test-14.12-150200.5.44.1 * postgresql14-llvmjit-debuginfo-14.12-150200.5.44.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4317.html * https://bugzilla.suse.com/show_bug.cgi?id=1224038 * https://bugzilla.suse.com/show_bug.cgi?id=1224051

1 0

openSUSE-SU-2024:0137-1: important: Security update for chromium
by opensuse-security＠opensuse.org 23 May '24

23 May '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0137-1 Rating: important References: #1224818 Cross-References: CVE-2024-5157 CVE-2024-5158 CVE-2024-5159 CVE-2024-5160 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium 125.0.6422.76 (boo#1224818) * CVE-2024-5157: Use after free in Scheduling * CVE-2024-5158: Type Confusion in V8 * CVE-2024-5159: Heap buffer overflow in ANGLE * CVE-2024-5160: Heap buffer overflow in Dawn * Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-137=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-125.0.6422.76-bp155.2.85.2 chromium-125.0.6422.76-bp155.2.85.2 References: https://www.suse.com/security/cve/CVE-2024-5157.html https://www.suse.com/security/cve/CVE-2024-5158.html https://www.suse.com/security/cve/CVE-2024-5159.html https://www.suse.com/security/cve/CVE-2024-5160.html https://bugzilla.suse.com/1224818

1 0

SUSE-SU-2024:1762-1: important: Security update for perl
by OPENSUSE-SECURITY-UPDATES 22 May '24

22 May '24

# Security update for perl Announcement ID: SUSE-SU-2024:1762-1 Rating: important References: * bsc#1082216 * bsc#1082233 * bsc#1213638 Cross-References: * CVE-2018-6798 * CVE-2018-6913 CVSS scores: * CVE-2018-6798 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2018-6913 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2018-6913 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for perl fixes the following issues: Security issues fixed: * CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216) * CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233) Non-security issue fixed: * make Net::FTP work with TLS 1.3 (bsc#1213638) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1762=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1762=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1762=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1762=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1762=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1762=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1762=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1762=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1762=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1762=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1762=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1762=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1762=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1762=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1762=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1762=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1762=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1762=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1762=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1762=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1762=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1762=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-1762=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1762=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1762=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1762=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1762=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1762=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1762=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1762=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1762=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Manager Proxy 4.3 (x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Manager Server 4.3 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Enterprise Storage 7.1 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Enterprise Storage 7.1 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap 15.3 (x86_64) * perl-base-32bit-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-5.26.1-150300.17.17.1 * perl-32bit-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap 15.3 (noarch) * perl-doc-5.26.1-150300.17.17.1 * openSUSE Leap 15.3 (aarch64_ilp32) * perl-core-DB_File-64bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-64bit-debuginfo-5.26.1-150300.17.17.1 * perl-64bit-5.26.1-150300.17.17.1 * perl-64bit-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-64bit-5.26.1-150300.17.17.1 * perl-base-64bit-5.26.1-150300.17.17.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap 15.5 (x86_64) * perl-base-32bit-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-5.26.1-150300.17.17.1 * perl-32bit-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap 15.5 (noarch) * perl-doc-5.26.1-150300.17.17.1 * openSUSE Leap 15.6 (x86_64) * perl-base-32bit-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-5.26.1-150300.17.17.1 * perl-32bit-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap 15.6 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * Basesystem Module 15-SP5 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * Basesystem Module 15-SP6 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * Development Tools Module 15-SP5 (noarch) * perl-doc-5.26.1-150300.17.17.1 * Development Tools Module 15-SP6 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Package Hub 15 15-SP5 (x86_64) * perl-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Package Hub 15 15-SP6 (x86_64) * perl-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 ## References: * https://www.suse.com/security/cve/CVE-2018-6798.html * https://www.suse.com/security/cve/CVE-2018-6913.html * https://bugzilla.suse.com/show_bug.cgi?id=1082216 * https://bugzilla.suse.com/show_bug.cgi?id=1082233 * https://bugzilla.suse.com/show_bug.cgi?id=1213638

1 0

openSUSE-SU-2024:0135-1: moderate: Security update for gitui
by opensuse-security＠opensuse.org 22 May '24

22 May '24

openSUSE Security Update: Security update for gitui ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0135-1 Rating: moderate References: #1218264 Cross-References: CVE-2023-48795 CVSS scores: CVE-2023-48795 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2023-48795 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gitui fixes the following issues: - update to version 0.26.2: * respect configuration for remote when fetching (also applies to pulling) * add : character to sign-off trailer to comply with Conventional Commits standard * support overriding build_date for reproducible builds - update vendored dependencies for CVE-2023-48795 (boo#1218264) - Update to version 0.26.1: Added: * sign commits using openpgp * support ssh commit signing (when user.signingKey and gpg.format = ssh of gitconfig are set; ssh-agent isn't yet supported) * provide nightly builds (see NIGHTLIES.md) * more version info in gitui -V and help popup (including git hash) * support core.commitChar filtering * allow reset in branch popup * respect configuration for remote when pushing Changed: * Make info and error message popups scrollable * clarify x86_64 linux binary in artifact names: gitui-linux-x86_64.tar.gz (formerly known as musl) Fixes: * add syntax highlighting support for more file types, e.g. Typescript, TOML, etc. - Update to version 0.25.1: Added: * support for new-line in text-input (e.g. commit message editor) * add syntax highlighting for blame view * allow aborting pending commit log search * theme.ron now supports customizing line break symbol * add confirmation for dialog for undo commit * support prepare-commit-msg hook * new style block_title_focused to allow customizing title text of focused frame/block * allow fetch command in both tabs of branchlist popup * check branch name validity while typing Changed: * do not allow tagging when tag.gpgsign enabled until gpg-signing is supported Fixes: * bump yanked dependency bumpalo to fix build from source * pin ratatui version to fix building without locked cargo install gitui * stash window empty after file history popup closes * allow push to empty remote * better diagnostics for theme file loading * fix ordering of commits in diff view - Update to version 0.24.3: * log: fix major lag when going beyond last search hit * parallelise log search - performance gain ~100% * search message body/summary separately * fix commit log not updating after branch switch * fix stashlist not updating after pop/drop * fix commit log corruption when tabbing in/out while parsing log * fix performance problem in big repo with a lot of incoming commits * fix error switching to a branch with '/' in the name * search commits by message, author or files in diff * support 'n'/'p' key to move to the next/prev hunk in diff component * simplify theme overrides * support for sign-off of commits * switched from textwrap to bwrap for text wrapping * more logging diagnostics when a repo cannot be * added to anaconda * visualize empty line substituted with content in diff better * checkout branch works with non-empty status report * jump to commit by SHA * fix commit dialog char count for multibyte characters * fix wrong hit highlighting in fuzzy find popup * fix symlink support for configuration files * fix expansion of ~ in commit.template * fix hunk (un)staging/reset for # of context lines != 3 * fix delay when opening external editor - Update to version 0.23.0 - Breaking Change * focus_XYZ key bindings are merged into the move_XYZ set, so only one way to bind arrow-like keys from now on - Added * allow reset (soft,mixed,hard) from commit log * support reword of commit from log * fuzzy find branch * list changes in commit message inside external editor * allow detaching HEAD and checking out specific commit from log view * add no-verify option on commits to not run hooks * allow fetch on status tab * allow copy file path on revision files and status tree * print message of where log will be written if -l is set * show remote branches in log - Fixes * fixed side effect of crossterm 0.26 on windows that caused double input of all keys * commit msg history ordered the wrong way * improve help documentation for amend cmd * lag issue when showing files tab * fix key binding shown in bottom bar for stash_open * --bugreport does not require param * edit-file command shown on commits msg * crash on branches popup in small terminal * edit command duplication * syntax errors in key_bindings.ron will be logged * Fix UI freeze when copying with xclip installed on Linux * Fix UI freeze when copying with wl-copy installed on Linux * commit hooks report "command not found" on Windows with wsl2 installed * crashes on entering submodules * fix race issue: revlog messages sometimes appear empty * default to tick-based updates * add support for options handling in log and stashes views - Changed * minimum supported rust version bumped to 1.65 (thank you time crate) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-135=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): gitui-0.26.2-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-48795.html https://bugzilla.suse.com/1218264

1 0

SUSE-SU-2024:1698-1: moderate: Security update for python310
by OPENSUSE-SECURITY-UPDATES 20 May '24

20 May '24

# Security update for python310 Announcement ID: SUSE-SU-2024:1698-1 Rating: moderate References: * bsc#1219559 Cross-References: * CVE-2023-52425 CVSS scores: * CVE-2023-52425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 An update that solves one vulnerability can now be installed. ## Description: This update for python310 fixes the following issues: * CVE-2023-52425: Fixed using the system libexpat (bsc#1219559). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1698=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1698=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1698=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python310-doc-3.10.14-150400.4.48.1 * python310-base-3.10.14-150400.4.48.1 * libpython3_10-1_0-3.10.14-150400.4.48.1 * python310-3.10.14-150400.4.48.1 * python310-testsuite-3.10.14-150400.4.48.1 * python310-curses-3.10.14-150400.4.48.1 * python310-tk-3.10.14-150400.4.48.1 * python310-doc-devhelp-3.10.14-150400.4.48.1 * python310-idle-3.10.14-150400.4.48.1 * python310-debuginfo-3.10.14-150400.4.48.1 * python310-curses-debuginfo-3.10.14-150400.4.48.1 * python310-dbm-debuginfo-3.10.14-150400.4.48.1 * python310-debugsource-3.10.14-150400.4.48.1 * python310-devel-3.10.14-150400.4.48.1 * python310-base-debuginfo-3.10.14-150400.4.48.1 * python310-testsuite-debuginfo-3.10.14-150400.4.48.1 * python310-tools-3.10.14-150400.4.48.1 * python310-tk-debuginfo-3.10.14-150400.4.48.1 * python310-core-debugsource-3.10.14-150400.4.48.1 * python310-dbm-3.10.14-150400.4.48.1 * libpython3_10-1_0-debuginfo-3.10.14-150400.4.48.1 * openSUSE Leap 15.4 (x86_64) * libpython3_10-1_0-32bit-3.10.14-150400.4.48.1 * python310-32bit-3.10.14-150400.4.48.1 * python310-base-32bit-debuginfo-3.10.14-150400.4.48.1 * python310-32bit-debuginfo-3.10.14-150400.4.48.1 * python310-base-32bit-3.10.14-150400.4.48.1 * libpython3_10-1_0-32bit-debuginfo-3.10.14-150400.4.48.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_10-1_0-64bit-3.10.14-150400.4.48.1 * libpython3_10-1_0-64bit-debuginfo-3.10.14-150400.4.48.1 * python310-64bit-debuginfo-3.10.14-150400.4.48.1 * python310-base-64bit-3.10.14-150400.4.48.1 * python310-base-64bit-debuginfo-3.10.14-150400.4.48.1 * python310-64bit-3.10.14-150400.4.48.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python310-doc-3.10.14-150400.4.48.1 * python310-base-3.10.14-150400.4.48.1 * libpython3_10-1_0-3.10.14-150400.4.48.1 * python310-3.10.14-150400.4.48.1 * python310-testsuite-3.10.14-150400.4.48.1 * python310-curses-3.10.14-150400.4.48.1 * python310-tk-3.10.14-150400.4.48.1 * python310-doc-devhelp-3.10.14-150400.4.48.1 * python310-idle-3.10.14-150400.4.48.1 * python310-debuginfo-3.10.14-150400.4.48.1 * python310-curses-debuginfo-3.10.14-150400.4.48.1 * python310-dbm-debuginfo-3.10.14-150400.4.48.1 * python310-debugsource-3.10.14-150400.4.48.1 * python310-devel-3.10.14-150400.4.48.1 * python310-base-debuginfo-3.10.14-150400.4.48.1 * python310-testsuite-debuginfo-3.10.14-150400.4.48.1 * python310-tools-3.10.14-150400.4.48.1 * python310-tk-debuginfo-3.10.14-150400.4.48.1 * python310-core-debugsource-3.10.14-150400.4.48.1 * python310-dbm-3.10.14-150400.4.48.1 * libpython3_10-1_0-debuginfo-3.10.14-150400.4.48.1 * openSUSE Leap 15.5 (x86_64) * python310-32bit-3.10.14-150400.4.48.1 * libpython3_10-1_0-32bit-3.10.14-150400.4.48.1 * python310-base-32bit-debuginfo-3.10.14-150400.4.48.1 * python310-32bit-debuginfo-3.10.14-150400.4.48.1 * python310-base-32bit-3.10.14-150400.4.48.1 * libpython3_10-1_0-32bit-debuginfo-3.10.14-150400.4.48.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python310-doc-3.10.14-150400.4.48.1 * python310-base-3.10.14-150400.4.48.1 * libpython3_10-1_0-3.10.14-150400.4.48.1 * python310-3.10.14-150400.4.48.1 * python310-testsuite-3.10.14-150400.4.48.1 * python310-curses-3.10.14-150400.4.48.1 * python310-tk-3.10.14-150400.4.48.1 * python310-doc-devhelp-3.10.14-150400.4.48.1 * python310-idle-3.10.14-150400.4.48.1 * python310-debuginfo-3.10.14-150400.4.48.1 * python310-curses-debuginfo-3.10.14-150400.4.48.1 * python310-dbm-debuginfo-3.10.14-150400.4.48.1 * python310-debugsource-3.10.14-150400.4.48.1 * python310-devel-3.10.14-150400.4.48.1 * python310-base-debuginfo-3.10.14-150400.4.48.1 * python310-testsuite-debuginfo-3.10.14-150400.4.48.1 * python310-tools-3.10.14-150400.4.48.1 * python310-tk-debuginfo-3.10.14-150400.4.48.1 * python310-core-debugsource-3.10.14-150400.4.48.1 * python310-dbm-3.10.14-150400.4.48.1 * libpython3_10-1_0-debuginfo-3.10.14-150400.4.48.1 * openSUSE Leap 15.6 (x86_64) * python310-32bit-3.10.14-150400.4.48.1 * libpython3_10-1_0-32bit-3.10.14-150400.4.48.1 * python310-base-32bit-debuginfo-3.10.14-150400.4.48.1 * python310-32bit-debuginfo-3.10.14-150400.4.48.1 * python310-base-32bit-3.10.14-150400.4.48.1 * libpython3_10-1_0-32bit-debuginfo-3.10.14-150400.4.48.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52425.html * https://bugzilla.suse.com/show_bug.cgi?id=1219559

1 0

SUSE-SU-2024:1704-1: low: Security update for cairo
by OPENSUSE-SECURITY-UPDATES 20 May '24

20 May '24

# Security update for cairo Announcement ID: SUSE-SU-2024:1704-1 Rating: low References: * bsc#1122321 Cross-References: * CVE-2019-6462 CVSS scores: * CVE-2019-6462 ( SUSE ): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2019-6462 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2019-6462 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cairo fixes the following issues: * CVE-2019-6462: Fixed a potentially infinite loop (bsc#1122321). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1704=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1704=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1704=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1704=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1704=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1704=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1704=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1704=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1704=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1704=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-1704=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libcairo-script-interpreter2-debuginfo-1.16.0-150400.11.3.1 * cairo-devel-1.16.0-150400.11.3.1 * libcairo2-debuginfo-1.16.0-150400.11.3.1 * cairo-debugsource-1.16.0-150400.11.3.1 * libcairo2-1.16.0-150400.11.3.1 * libcairo-gobject2-1.16.0-150400.11.3.1 * libcairo-script-interpreter2-1.16.0-150400.11.3.1 * cairo-tools-1.16.0-150400.11.3.1 * libcairo-gobject2-debuginfo-1.16.0-150400.11.3.1 * cairo-tools-debuginfo-1.16.0-150400.11.3.1 * openSUSE Leap 15.4 (x86_64) * libcairo-gobject2-32bit-debuginfo-1.16.0-150400.11.3.1 * libcairo2-32bit-debuginfo-1.16.0-150400.11.3.1 * libcairo-script-interpreter2-32bit-1.16.0-150400.11.3.1 * libcairo-gobject2-32bit-1.16.0-150400.11.3.1 * libcairo2-32bit-1.16.0-150400.11.3.1 * cairo-devel-32bit-1.16.0-150400.11.3.1 * libcairo-script-interpreter2-32bit-debuginfo-1.16.0-150400.11.3.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libcairo-gobject2-64bit-debuginfo-1.16.0-150400.11.3.1 * libcairo-gobject2-64bit-1.16.0-150400.11.3.1 * libcairo2-64bit-1.16.0-150400.11.3.1 * libcairo2-64bit-debuginfo-1.16.0-150400.11.3.1 * libcairo-script-interpreter2-64bit-debuginfo-1.16.0-150400.11.3.1 * libcairo-script-interpreter2-64bit-1.16.0-150400.11.3.1 * cairo-devel-64bit-1.16.0-150400.11.3.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libcairo2-debuginfo-1.16.0-150400.11.3.1 * libcairo2-1.16.0-150400.11.3.1 * libcairo-gobject2-1.16.0-150400.11.3.1 * libcairo-gobject2-debuginfo-1.16.0-150400.11.3.1 * cairo-debugsource-1.16.0-150400.11.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libcairo2-debuginfo-1.16.0-150400.11.3.1 * libcairo2-1.16.0-150400.11.3.1 * libcairo-gobject2-1.16.0-150400.11.3.1 * libcairo-gobject2-debuginfo-1.16.0-150400.11.3.1 * cairo-debugsource-1.16.0-150400.11.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libcairo-script-interpreter2-debuginfo-1.16.0-150400.11.3.1 * cairo-devel-1.16.0-150400.11.3.1 * libcairo2-debuginfo-1.16.0-150400.11.3.1 * cairo-debugsource-1.16.0-150400.11.3.1 * libcairo2-1.16.0-150400.11.3.1 * libcairo-gobject2-1.16.0-150400.11.3.1 * libcairo-script-interpreter2-1.16.0-150400.11.3.1 * cairo-tools-1.16.0-150400.11.3.1 * libcairo-gobject2-debuginfo-1.16.0-150400.11.3.1 * cairo-tools-debuginfo-1.16.0-150400.11.3.1 * openSUSE Leap 15.5 (x86_64) * libcairo-gobject2-32bit-debuginfo-1.16.0-150400.11.3.1 * libcairo2-32bit-debuginfo-1.16.0-150400.11.3.1 * libcairo-script-interpreter2-32bit-1.16.0-150400.11.3.1 * libcairo-gobject2-32bit-1.16.0-150400.11.3.1 * libcairo2-32bit-1.16.0-150400.11.3.1 * cairo-devel-32bit-1.16.0-150400.11.3.1 * libcairo-script-interpreter2-32bit-debuginfo-1.16.0-150400.11.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libcairo2-debuginfo-1.16.0-150400.11.3.1 * libcairo2-1.16.0-150400.11.3.1 * libcairo-gobject2-1.16.0-150400.11.3.1 * libcairo-gobject2-debuginfo-1.16.0-150400.11.3.1 * cairo-debugsource-1.16.0-150400.11.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libcairo2-debuginfo-1.16.0-150400.11.3.1 * libcairo2-1.16.0-150400.11.3.1 * libcairo-gobject2-1.16.0-150400.11.3.1 * libcairo-gobject2-debuginfo-1.16.0-150400.11.3.1 * cairo-debugsource-1.16.0-150400.11.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libcairo2-debuginfo-1.16.0-150400.11.3.1 * libcairo2-1.16.0-150400.11.3.1 * libcairo-gobject2-1.16.0-150400.11.3.1 * libcairo-gobject2-debuginfo-1.16.0-150400.11.3.1 * cairo-debugsource-1.16.0-150400.11.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libcairo2-debuginfo-1.16.0-150400.11.3.1 * libcairo2-1.16.0-150400.11.3.1 * libcairo-gobject2-1.16.0-150400.11.3.1 * libcairo-gobject2-debuginfo-1.16.0-150400.11.3.1 * cairo-debugsource-1.16.0-150400.11.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libcairo2-debuginfo-1.16.0-150400.11.3.1 * libcairo2-1.16.0-150400.11.3.1 * libcairo-gobject2-1.16.0-150400.11.3.1 * libcairo-gobject2-debuginfo-1.16.0-150400.11.3.1 * cairo-debugsource-1.16.0-150400.11.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libcairo-script-interpreter2-debuginfo-1.16.0-150400.11.3.1 * cairo-devel-1.16.0-150400.11.3.1 * libcairo2-debuginfo-1.16.0-150400.11.3.1 * libcairo2-1.16.0-150400.11.3.1 * libcairo-gobject2-1.16.0-150400.11.3.1 * libcairo-script-interpreter2-1.16.0-150400.11.3.1 * libcairo-gobject2-debuginfo-1.16.0-150400.11.3.1 * cairo-debugsource-1.16.0-150400.11.3.1 * Desktop Applications Module 15-SP5 (x86_64) * libcairo2-32bit-1.16.0-150400.11.3.1 * libcairo2-32bit-debuginfo-1.16.0-150400.11.3.1 ## References: * https://www.suse.com/security/cve/CVE-2019-6462.html * https://bugzilla.suse.com/show_bug.cgi?id=1122321

1 0