January 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:0238-1: moderate: Security update for cpio
by OPENSUSE-UPDATES 26 Jan '24

26 Jan '24

# Security update for cpio Announcement ID: SUSE-SU-2024:0238-1 Rating: moderate References: * bsc#1218571 Cross-References: * CVE-2023-7207 CVSS scores: * CVE-2023-7207 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cpio fixes the following issues: * CVE-2023-7207: Fixed a path traversal issue that could lead to an arbitrary file write during archive extraction (bsc#1218571). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-238=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-238=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-238=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-238=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-238=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-238=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-238=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-238=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-238=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-238=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * cpio-mt-debuginfo-2.13-150400.3.3.1 * cpio-mt-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * cpio-debugsource-2.13-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * cpio-lang-2.13-150400.3.3.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cpio-mt-debuginfo-2.13-150400.3.3.1 * cpio-mt-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * cpio-debugsource-2.13-150400.3.3.1 * openSUSE Leap 15.5 (noarch) * cpio-lang-2.13-150400.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cpio-mt-debuginfo-2.13-150400.3.3.1 * cpio-mt-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * cpio-debugsource-2.13-150400.3.3.1 * Basesystem Module 15-SP5 (noarch) * cpio-lang-2.13-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-7207.html * https://bugzilla.suse.com/show_bug.cgi?id=1218571

1 0

openSUSE-RU-2024:0034-1: moderate: Recommended update for rspamd
by maintenance＠opensuse.org 25 Jan '24

25 Jan '24

openSUSE Recommended Update: Recommended update for rspamd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0034-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rspamd fixes the following issues: Update to 3.8.0 - [WebUI] Update map editor by @moisseev in #4668 - [Minor] Make Robot Framework loop unfunny by @fatalbanana in #4672 - [Project] Support of JSON logging by @vstakhov in #4674 - [Minor] Add missing include for gcc 14 by @arkamar in #4675 - [Minor] Add rule for messages missing both X-Mailer and User-Agent header by @twesterhever in #4682 - [Minor] Treat *.zpaq attachments as archives and harmful by @twesterhever in #4680 - [Enhancement] Add composite rule for suspicious URLs in suspicious messages by @twesterhever in #4681 - [Minor] Improve FREEMAIL_AFF capture rates by @twesterhever in #4683 - [Fix] rbl: unbreak exclude_local by @fatalbanana in #4678 - [Minor] force_actions: set a group for symbols by @fatalbanana in #4685 - [Minor] doxydown: fix elements containing few spaces by @fatalbanana in #4687 - [Fix] known_senders: fix config handling by @fatalbanana in #4693 - [Feature] Reiterate on gtube patterns by @vstakhov in #4691 - [Minor] Try improve test stability by @fatalbanana in #4695 - [Feature] Support ping command in fuzzy storage by @vstakhov in #4694 - [Test] Set umask where it's useful by @fatalbanana in #4699 - [Minor] Remove obsolete code by @moisseev in #4700 - [WebUI] Load modules dynamically by @moisseev in #4705 - Add support for loongarch by @wuruilong01 in #4704 - [Test] Try correct settings test by @fatalbanana in #4706 - [Minor] Get rid of 'var' declarations by @moisseev in #4707 - [Test] Fix dummy http server on python 3.6 by @fatalbanana in #4710 - [Test] Skip miltertest tests if it is not installed by @fatalbanana in #4709 - [Test] Restore stylistic rules check by @moisseev in #4711 - [Minor] Re-sign YAML by @fatalbanana in #4713 - [Minor] Use consistent object key/value spacing by @moisseev in #4712 - Fix fuzzy stat by @vstakhov in #4714 - [Minor] Convert callbacks to arrow functions by @moisseev in #4715 - Fix issues with the raw header on header insertion/modification by @vstakhov in #4716 - [Fix] dkim_signing: siging_table: lowercase before lookup by @fatalbanana in #4717 - [Minor] Replace Dockerfile with advertisement for image by @fatalbanana in #4721 - [WebUI] Refine symbols score input boxes by @moisseev in #4723 - [Test] Remove default ESLint Stylistic rule by @moisseev in #4724 - [Test] Exercise rspamadm lua logger in functional tests by @fatalbanana in #4728 - [Test] Use npm ls to show versions by @moisseev in #4725 - [Test] Unbreak ESLint by @moisseev in #4730 - [Test] Test systemd logging by @fatalbanana in #4733 - [CritFix] - Fix reported length of logging structure by @AdamMajer in #4732 - [Test] Remove deprecated Stylelint rule by @moisseev in #4735 - Migrate bayes redis backend to Lua scripts by @vstakhov in #4718 - [Minor] Have bayes use global redis settings by @fatalbanana in #4739 - [Feature] rbl: support disabling or replacing url_whitelist per RBL by @fatalbanana in #4742 - [Minor] rbl: try harder to identify lua patterns by @fatalbanana in #4743 - [Minor] rbl: revisit previous change by @fatalbanana in #4747 - [WebUI] Symbols: replace individual save buttons by @moisseev in #4748 - [WebUI] Send only altered symbols in save requests by @moisseev in #4749 - [Minor] docs: rspamd_html: fix some copypasta by @fatalbanana in #4750 - [Minor] ratelimit: make per-bucket symbol behave like global symbol by @fatalbanana in #4755 - [Minor] Log a debug message when ratelimit skipped by @moisseev in #4757 - [WebUI] Show pass-through module in scan result by @moisseev in #4758 - [Minor] debian: add missing stuff to rspamd-asan package by @fatalbanana in #4761 - [Minor] Fix typo in hfilter map by @moisseev in #4759 - [Minor] Move common stuff to separate files by @moisseev in #4762 - Fix an overzealous s/NULL/nullptr/g by @jvoisin in #4764 - [WebUI] Show message size in IEC (base 1024) units by @moisseev in #4765 - [WebUI] Normalize IPv4 for column sorting by @moisseev in #4766 - [Test] Some more tests for logging by @fatalbanana in #4767 - [Feature] Support suppressing DMARC reporting for particular recipients by @fatalbanana in #4772 - [Test] Fix tests on Robot Framework 7.0 by @fatalbanana in #4775 - Rewrite redis_cache logic in statistics by @vstakhov in #4774 - [Fix] multimap: rawtext: use decoded parts by @fatalbanana in #4781 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-34=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): rspamd-3.8.0-bp155.2.12.1 References:

1 0

SUSE-RU-2024:0235-1: moderate: Recommended update for yast2-pkg-bindings
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for yast2-pkg-bindings Announcement ID: SUSE-RU-2024:0235-1 Rating: moderate References: * bsc#1218399 * bsc#1218977 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for yast2-pkg-bindings fixes the following issues: * Fixed repository and service probing with libzypp 7.31.26 and newer, fixes broken repository handling (bsc#1218977, bsc#1218399) * 4.4.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-235=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-235=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-235=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-235=1 SUSE- SLE-INSTALLER-15-SP4-2024-235=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-235=1 SUSE-SLE- INSTALLER-15-SP4-2024-235=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-235=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-235=1 SUSE-SLE-INSTALLER-15-SP4-2024-235=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-235=1 SUSE-SLE- INSTALLER-15-SP4-2024-235=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-235=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-235=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-235=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-235=1 ## Package List: * openSUSE Leap 15.4 (noarch) * yast2-pkg-bindings-devel-doc-4.4.7-150400.3.9.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Manager Proxy 4.3 (x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218399 * https://bugzilla.suse.com/show_bug.cgi?id=1218977

1 0

SUSE-SU-2024:0224-1: important: Security update for apache-parent, apache-sshd
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Security update for apache-parent, apache-sshd Announcement ID: SUSE-SU-2024:0224-1 Rating: important References: * bsc#1205463 * bsc#1218189 Cross-References: * CVE-2022-45047 * CVE-2023-48795 CVSS scores: * CVE-2022-45047 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-48795 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-48795 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for apache-parent, apache-sshd fixes the following issues: apache-parent was updated from version 28 to 31: * Version 31: * New Features: * Added maven-checkstyle-plugin to pluginManagement * Improvements: * Set minimalMavenBuildVersion to 3.6.3 - the minimum used by plugins * Using an SPDX identifier as the license name is recommended by Maven * Use properties to define the versions of plugins * Bugs fixed: * Updated documentation for previous changes apache-sshd was updated from version 2.7.0 to 2.12.0: * Security issues fixed: * CVE-2023-48795: Implemented OpenSSH "strict key exchange" protocol in apache-sshd version 2.12.0 (bsc#1218189) * CVE-2022-45047: Java unsafe deserialization vulnerability fixed in apache- sshd version 2.9.2 (bsc#1205463) * Other changes in version 2.12.0: * Bugs fixed: * SCP client fails silently when error signalled due to missing file or lacking permissions * Ignore unknown key types from agent or in OpenSSH host keys extension * New Features: * Support GIT protocol-v2 * Other changes in version 2.11.0: * Bugs fixed: * Added configurable timeout(s) to DefaultSftpClient * Compare file keys in ModifiableFileWatcher. * Fixed channel pool in SftpFileSystem. * Use correct default OpenOptions in SftpFileSystemProvider.newFileChannel(). * Use correct lock modes for SFTP FileChannel.lock(). * ScpClient: support issuing commands to a server that uses a non-UTF-8 locale. * SftpInputStreamAsync: fix reporting EOF on zero-length reads. * Work-around a bug in WS_FTP <= 12.9 SFTP clients. * (Regression in 2.10.0) SFTP performance fix: override FilterOutputStream.write(byte[], int, int). * Fixed a race condition to ensure SSH_MSG_CHANNEL_EOF is always sent before SSH_MSG_CHANNEL_CLOSE. * Fixed error handling while flushing queued packets at end of KEX. * Fixed wrong log level on closing an Nio2Session. * Fixed detection of Android O/S from system properties. * Consider all applicable host keys from the known_hosts files. * SftpFileSystem: do not close user session. * ChannelAsyncOutputStream: remove write future when done. * SSHD-1332 (Regression in 2.10.0) Resolve ~ in IdentityFile file names in HostConfigEntry. * New Features: * Use KeepAliveHandler global request instance in client as well * Publish snapshot maven artifacts to the Apache Snapshots maven repository. * Bundle sshd-contrib has support classes for the HAProxy protocol V2. * Other changes in version 2.10.0: * Bugs fixed: * Connection attempt not canceled when a connection timeout occurs * Possible OOM in ChannelPipedInputStream * SftpRemotePathChannel.transferFrom(...) ignores position argument * Rooted file system can leak informations * Failed to establish an SSH connection because the server identifier exceeds the int range * Improvements: * Password in clear in SSHD server's logs * Other changes in version 2.9.2: * Bugs fixed: * SFTP worker threads got stuck while processing PUT methods against one specific SFTP server * Use the maximum packet size of the communication partner * ExplicitPortForwardingTracker does not unbind auto-allocated one * Default SshClient FD leak because Selector not closed * Reading again from exhausted ChannelExec#getInvertedOut() throws IOException instead of returning -1 * Keeping error streams and input streams separate after ChannelExec#setRedirectErrorStream(true) is called * Nio2Session.shutdownOutput() should wait for writes in progress * Test: * Research intermittent failure in unit tests using various I/O service factories * Other changes in version 2.9.1: * Bugs fixed: * ClientSession.auth().verify() is terminated with timeout * 2.9.0 release broken on Java 8 * Infinite loop in org.apache.sshd.sftp.client.impl.SftpInputStreamAsync#doRead * Deadlock during session exit * Race condition is logged in ChannelAsyncOutputStream * Other changes in version 2.9.0: * Bugs fixed: * Deadlock on disconnection at the end of key-exchange * Remote port forwarding mode does not handle EOF properly * Public key authentication: wrong signature algorithm used (ed25519 key with ssh-rsa signature) * Client fails window adjust above Integer.MAX_VALUE * class loader fails to load org.apache.sshd.common.cipher.BaseGCMCipher * Shell is not getting closed if the command has already closed the OutputStream it is using. * Sometimes async write listener is not called * Unhandled SSH_MSG_CHANNEL_WINDOW_ADJUST leeds to SocketTimeoutException * different host key algorithm used on rekey than used for the initial connection * OpenSSH certificate is not properly encoded when critical options are included * TCP/IP remote port forwarding with wildcard IP addresses doesn't work with OpenSSH * UserAuthPublicKey: uses ssh-rsa signatures for RSA keys from an agent * New Features: * Added support for Argon2 encrypted PUTTY key files * Added support for merged inverted output and error streams of remote process * Improvements: * Added support for "limits(a)openssh.com" SFTP extension * Support host-based pubkey authentication in the client * Send environment variable and open subsystem at the same time for SSH session * Other changes in version 2.8.0: * Bugs fixed: * Fixed wrong server key algorithm choice * Expiration of OpenSshCertificates needs to compare timestamps as unsigned long * SFTP Get downloads empty file from servers which supports EOF indication after data * skip() doesn't work properly in SftpInputStreamAsync * OpenMode and CopyMode is not honored as expected in version > 4 of SFTP api * SftpTransferTest sometimes hangs (failure during rekeying) * Race condition in KEX * Fix the ciphers supported documentation * Update tarLongFileMode to use POSIX * WinsCP transfer failure to Apache SSHD Server * Pubkey auth: keys from ssh-agent are used even if HostConfigEntry.isIdentitiesOnly() is true * Support RSA SHA2 signatures via SSH agent * NOTICE: wrong copyright year range * Wrong creationTime in writeAttrs for SFTP * sshd-netty logs all traffic on INFO level * New Features: * Add support for chacha20-poly1305(a)openssh.com * Parsing of ~/.ssh/config Host patterns fails with extra whitespace * Support generating OpenSSH client certificates * Improvements: * Add support for curve25519-sha256(a)libssh.org key exchange * OpenSSH certificates: check certificate type * OpenSSHCertificatesTest: certificates expire in 2030 * Display IdleTimeOut in more user-friendly format * sendChunkIfRemoteWindowIsSmallerThanPacketSize flag in ChannelAsyncOutputStream constructor configurable from outside using variable/config file * Intercepting the server exception message from server in SSHD client * Implement RFC 8332 server-sig-algs on the server * Slow performance listing huge number of files on Apache SSHD server * SFTP: too many LSTAT calls * Support key constraints when adding a key to an SSH agent * Add SFTP server side file custom attributes hook ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-224=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-224=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-224=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-224=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-224=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-224=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-224=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-224=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-224=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-224=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-224=1 ## Package List: * openSUSE Leap 15.5 (noarch) * apache-parent-31-150200.3.12.1 * apache-sshd-javadoc-2.12.0-150200.5.8.1 * apache-sshd-2.12.0-150200.5.8.1 * Development Tools Module 15-SP5 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Enterprise Storage 7.1 (noarch) * apache-sshd-2.12.0-150200.5.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-45047.html * https://www.suse.com/security/cve/CVE-2023-48795.html * https://bugzilla.suse.com/show_bug.cgi?id=1205463 * https://bugzilla.suse.com/show_bug.cgi?id=1218189

1 0

SUSE-RU-2024:0225-1: moderate: Recommended update for ant and and-contrib
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for ant and and-contrib Announcement ID: SUSE-RU-2024:0225-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for ant and ant-contrib fixes the following issues: ant: * ant was updated from version 1.10.13 to 1.10.14: * Changes that could break older environments: * Resource#compareTo now invokes getName rather than toString as the later may be costly (for example in the case of a StringResource). * When using Java 18 or higher, Ant will no longer use Java SecurityManager because it has been deprecated for removal and by default is disallowed to be set at runtime https://openjdk.org/jeps/411. This will mean that the "<permissions>" type is no longer functional when using Java 18 or higher. Furthermore, when using Java 18 or higher, if the build executes tasks that call "java.lang.System.exit()" and if those tasks aren't running in a forked VM of their own, then such tasks will now kill the entire Ant build process. It is recommended that such tasks be updated to launch in a forked VM so that the System.exit() call will not impact the JVM in which Ant process runs. * Fixed bugs: * Log only the stylesheet name in the xslt task. * junitlauncher task's "test" and "listener" elements which take a "outputDir" property were incorrectly resolving the outputDir against the current working directory instead of the project's basedir. * regexmapper would, in some cases, incorrectly consume backslash characters from the "to" attribute, resulting in missing backslashes in the output. * <fixcrlf>, <replace> and <replaceregexp> now try to preserve the file permissions of the files they modify. * junitlauncher task would fail if a forked test timed out even if haltOnFailure was set to false. * Fixed a bug in org.apache.tools.zip.ZipOutputStream where, even when "zip64Mode" is set to "always", ZipOutputStream may not create a CEN extra field data for the entry. * legacy-xml listener of junitlauncher task wouldn't report certain failures involving junit jupiter dynamic tests. * allow.class which was introduced in Ant 1.10.13 release, has been removed from this 1.10.14 release. This class was introduced in context of the SecurityManager changes in Ant 1.10.13, which have now been reverted in Ant 1.10.14, since they caused several regressions. * Other changes: * <fork> element of the junitlauncher task now has a new optional "java" attribute which can be used to point to a different Java installation for runnning the forked tests. * Made sure <echoproperties> sorts the echoed properties on JDK9+ as well. * org.apache.tools.ant.taskdefs.Recorder class now introduces a setLogLevel(LogLevel level) method. * The <fork> element of junitlaunchertask now allows a "forkMode" attribute. forkMode=perTestClass can now be used to launch each test class in a separate forked JVM. ant-contrib: * Package was rebuilt against ant version 1.10.14 to prevent installation issues (no source changes) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-225=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-225=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-225=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-225=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-225=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-225=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-225=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-225=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-225=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-225=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-225=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-225=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-225=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-225=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Enterprise Storage 7.1 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * openSUSE Leap 15.5 (noarch) * ant-contrib-manual-1.0b3-150200.11.12.2 * ant-junit-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-contrib-javadoc-1.0b3-150200.11.12.2 * ant-javamail-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-apache-xalan2-1.10.14-150200.4.18.2 * ant-commons-net-1.10.14-150200.4.18.2 * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-jsch-1.10.14-150200.4.18.2 * ant-testutil-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-xz-1.10.14-150200.4.18.2 * ant-imageio-1.10.14-150200.4.18.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-junit5-1.10.14-150200.4.18.2 * Development Tools Module 15-SP5 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2

1 0

SUSE-RU-2024:0227-1: moderate: Recommended update for maven-parent
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for maven-parent Announcement ID: SUSE-RU-2024:0227-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 An update that can now be installed. ## Description: This update for maven-parent fixes the following issues: * Upgraded Apache Maven parent POM to version 40: * Besides maven-parent, it provides now also the following pom artifacts: * doxia-tools * maven-extensions * maven-plugins * maven-shared-components * maven-skins ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-227=1 ## Package List: * openSUSE Leap 15.5 (noarch) * maven-parent-40-150200.3.5.1

1 0

SUSE-SU-2024:0229-1: important: Security update for MozillaFirefox
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Security update for MozillaFirefox Announcement ID: SUSE-SU-2024:0229-1 Rating: important References: * bsc#1218955 Cross-References: * CVE-2024-0741 * CVE-2024-0742 * CVE-2024-0746 * CVE-2024-0747 * CVE-2024-0749 * CVE-2024-0750 * CVE-2024-0751 * CVE-2024-0753 * CVE-2024-0755 CVSS scores: Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.7.0 ESR (MFSA2024-02) (bsc#1218955): * CVE-2024-0741: Out of bounds write in ANGLE * CVE-2024-0742: Failure to update user input timestamp * CVE-2024-0746: Crash when listing printers on Linux * CVE-2024-0747: Bypass of Content Security Policy when directive unsafe- inline was set * CVE-2024-0749: Phishing site popup could show local origin in address bar * CVE-2024-0750: Potential permissions request bypass via clickjacking * CVE-2024-0751: Privilege escalation through devtools * CVE-2024-0753: HSTS policy on subdomain could bypass policy of upper domain * CVE-2024-0755: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-229=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-229=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-229=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-229=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-229=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-229=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-229=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-229=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-229=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-229=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-229=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-229=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-229=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-229=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * MozillaFirefox-branding-upstream-115.7.0-150200.152.123.1 * openSUSE Leap 15.5 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * Desktop Applications Module 15-SP5 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Enterprise Storage 7.1 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0741.html * https://www.suse.com/security/cve/CVE-2024-0742.html * https://www.suse.com/security/cve/CVE-2024-0746.html * https://www.suse.com/security/cve/CVE-2024-0747.html * https://www.suse.com/security/cve/CVE-2024-0749.html * https://www.suse.com/security/cve/CVE-2024-0750.html * https://www.suse.com/security/cve/CVE-2024-0751.html * https://www.suse.com/security/cve/CVE-2024-0753.html * https://www.suse.com/security/cve/CVE-2024-0755.html * https://bugzilla.suse.com/show_bug.cgi?id=1218955

1 0

SUSE-RU-2024:0230-1: moderate: Recommended update for adcli
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for adcli Announcement ID: SUSE-RU-2024:0230-1 Rating: moderate References: * bsc#1214076 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for adcli fixes the following issues: * Populate Samba's secrets database using offline domain join (bsc#1214076) * Write SID before secret to Samba's db (bsc#1214076) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-230=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-230=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-230=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-230=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-230=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-230=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-230=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-230=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-230=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-230=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-230=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-230=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Manager Proxy 4.3 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214076

1 0

SUSE-RU-2024:0233-1: moderate: Recommended update for suse-module-tools
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for suse-module-tools Announcement ID: SUSE-RU-2024:0233-1 Rating: moderate References: * bsc#1217775 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for suse-module-tools fixes the following issues: * Update to version 15.4.19 * Add symlink /boot/.vmlinuz.hmac (bsc#1217775) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-233=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-233=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-233=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-233=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-233=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-233=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-233=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-233=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-233=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-233=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-233=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-233=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-233=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-233=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-233=1 ## Package List: * SUSE Manager Retail Branch Server 4.3 (x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * suse-module-tools-legacy-15.4.19-150400.3.17.1 * suse-module-tools-15.4.19-150400.3.17.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Manager Proxy 4.3 (x86_64) * suse-module-tools-15.4.19-150400.3.17.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217775

1 0

SUSE-RU-2024:0234-1: moderate: Recommended update for sssd
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for sssd Announcement ID: SUSE-RU-2024:0234-1 Rating: moderate References: * bsc#1218537 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for sssd fixes the following issues: * Update shadowLastChanged attribute during LDAP password change (bsc#1218537) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-234=1 openSUSE-SLE-15.5-2024-234=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-234=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-234=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libipa_hbac-devel-2.5.2-150500.10.14.1 * sssd-2.5.2-150500.10.14.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-2.5.2-150500.10.14.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-kcm-2.5.2-150500.10.14.1 * libsss_nss_idmap0-2.5.2-150500.10.14.1 * libsss_simpleifp-devel-2.5.2-150500.10.14.1 * libnfsidmap-sss-debuginfo-2.5.2-150500.10.14.1 * sssd-common-debuginfo-2.5.2-150500.10.14.1 * sssd-proxy-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-2.5.2-150500.10.14.1 * libsss_idmap-devel-2.5.2-150500.10.14.1 * python3-sss_nss_idmap-2.5.2-150500.10.14.1 * sssd-dbus-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-2.5.2-150500.10.14.1 * libipa_hbac0-2.5.2-150500.10.14.1 * python3-sss-murmur-debuginfo-2.5.2-150500.10.14.1 * libsss_idmap0-2.5.2-150500.10.14.1 * python3-ipa_hbac-debuginfo-2.5.2-150500.10.14.1 * sssd-kcm-debuginfo-2.5.2-150500.10.14.1 * python3-ipa_hbac-2.5.2-150500.10.14.1 * sssd-tools-2.5.2-150500.10.14.1 * libnfsidmap-sss-2.5.2-150500.10.14.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-debuginfo-2.5.2-150500.10.14.1 * libsss_certmap-devel-2.5.2-150500.10.14.1 * sssd-krb5-common-2.5.2-150500.10.14.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-debugsource-2.5.2-150500.10.14.1 * sssd-proxy-2.5.2-150500.10.14.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.14.1 * sssd-common-2.5.2-150500.10.14.1 * sssd-ad-debuginfo-2.5.2-150500.10.14.1 * sssd-tools-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.14.1 * sssd-dbus-2.5.2-150500.10.14.1 * libsss_certmap0-2.5.2-150500.10.14.1 * python3-sss_nss_idmap-debuginfo-2.5.2-150500.10.14.1 * sssd-ad-2.5.2-150500.10.14.1 * sssd-krb5-2.5.2-150500.10.14.1 * sssd-winbind-idmap-2.5.2-150500.10.14.1 * python3-sss-murmur-2.5.2-150500.10.14.1 * libsss_nss_idmap-devel-2.5.2-150500.10.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-2.5.2-150500.10.14.1 * sssd-krb5-debuginfo-2.5.2-150500.10.14.1 * openSUSE Leap 15.5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.14.1 * sssd-common-32bit-debuginfo-2.5.2-150500.10.14.1 * openSUSE Leap 15.5 (aarch64_ilp32) * sssd-common-64bit-debuginfo-2.5.2-150500.10.14.1 * sssd-common-64bit-2.5.2-150500.10.14.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sssd-2.5.2-150500.10.14.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-debuginfo-2.5.2-150500.10.14.1 * sssd-krb5-common-2.5.2-150500.10.14.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.14.1 * libsss_certmap0-2.5.2-150500.10.14.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-debugsource-2.5.2-150500.10.14.1 * sssd-ldap-2.5.2-150500.10.14.1 * libsss_nss_idmap0-2.5.2-150500.10.14.1 * libsss_idmap0-2.5.2-150500.10.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-common-debuginfo-2.5.2-150500.10.14.1 * sssd-common-2.5.2-150500.10.14.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libipa_hbac-devel-2.5.2-150500.10.14.1 * sssd-2.5.2-150500.10.14.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-2.5.2-150500.10.14.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-kcm-2.5.2-150500.10.14.1 * libsss_nss_idmap0-2.5.2-150500.10.14.1 * libsss_simpleifp-devel-2.5.2-150500.10.14.1 * sssd-common-debuginfo-2.5.2-150500.10.14.1 * sssd-proxy-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-2.5.2-150500.10.14.1 * libsss_idmap-devel-2.5.2-150500.10.14.1 * sssd-dbus-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-2.5.2-150500.10.14.1 * libipa_hbac0-2.5.2-150500.10.14.1 * libsss_idmap0-2.5.2-150500.10.14.1 * sssd-kcm-debuginfo-2.5.2-150500.10.14.1 * sssd-tools-2.5.2-150500.10.14.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-debuginfo-2.5.2-150500.10.14.1 * libsss_certmap-devel-2.5.2-150500.10.14.1 * sssd-krb5-common-2.5.2-150500.10.14.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-debugsource-2.5.2-150500.10.14.1 * sssd-proxy-2.5.2-150500.10.14.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.14.1 * sssd-common-2.5.2-150500.10.14.1 * sssd-ad-debuginfo-2.5.2-150500.10.14.1 * sssd-tools-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.14.1 * sssd-dbus-2.5.2-150500.10.14.1 * libsss_certmap0-2.5.2-150500.10.14.1 * sssd-ad-2.5.2-150500.10.14.1 * sssd-winbind-idmap-2.5.2-150500.10.14.1 * sssd-krb5-2.5.2-150500.10.14.1 * libsss_nss_idmap-devel-2.5.2-150500.10.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-2.5.2-150500.10.14.1 * sssd-krb5-debuginfo-2.5.2-150500.10.14.1 * Basesystem Module 15-SP5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.14.1 * sssd-common-32bit-debuginfo-2.5.2-150500.10.14.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218537

1 0