March 2024 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2024:0097-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 31 Mar '24

31 Mar '24

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0097-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: Update to version 1.0.23 + Bugfixes: + Fixed possible duplication of song entries after organizing (#1341). + Fixed possible crash when connecting devices (#1313). + Fixed playlist sorting of original year (#1349). + Enhancements: + Treat all stream errors as non-fatal (#1347). + Require KDSingleApplication 1.1.0. + Fix logging of restored unavailable songs. - Add BuildRequires for KDSingleApplication-qt6 with Tumbleweed. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-97=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): strawberry-1.0.23-bp155.2.9.1 References:

1 0

openSUSE-RU-2024:0096-1: moderate: Recommended update for pgbadger
by maintenance＠opensuse.org 31 Mar '24

31 Mar '24

openSUSE Recommended Update: Recommended update for pgbadger ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0096-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for pgbadger fixes the following issues: - update to 12.4 This is a maintenance release of pgBadger that fixes issues reported by users since last release. * Fix pgbouncer report with version 1.21. Thanks to Ales Zeleny for the patch. * Prevent parallelism perl file to be higher than the number of files. Thanks to maliangzhu for the report. * Fix regression test broken since v12.3. Thanks to ieshin for the report. * Fix cases where LOG entries where counted as ERROR log level entries. Thanks to Matti Linnanvuori for the report. - update to 12.3 This is a maintenance release of pgBadger that fixes issues reported by users since last release. It also adds some new features: * Add option --include-pid to only report events related to a session pid (%p). Can be used multiple time. Thanks to Henrietta Dombrovskaya for the feature request. * Add option --include-session to only report events related to the session id (%c). Can be used multiple time. Thanks to Henrietta Dombrovskaya for the feature request. * Add option --dump-raw-csv to only parse the log and dump the information into CSV format. No further processing is done, no report is generated. Thanks to Henrietta Dombrovskaya for the feature request. Here is the complete list of changes and acknowledgments: * Update pgFormatter to version 5.5 * Fix end date of parsing with jsonlog format. Thanks to jw1u1 for the report. * Fix typo in "Sessions per application". Thanks to fairyfar for the patch. * Fix "INSERT/UPDATE/DELETE Traffic" chart bug. Thanks to fairyfar for the patch. * Fix parsing of orphan lines with bind queries. Thanks to youxq for the report. * Fix Analyze per table report with new PG versions. Thanks to Jean-Christophe Arnu for the patch. * Fix syslog entry parser when the syslog timestamp contains milliseconds. Thanks to Pavel Rabel for the report. - add systemd timer examples: beside the existing cron job example, this allows people to get an idea how to automate the generation of reports - introduce local cron macro: only recommend cron on older distributions and leave the cron example file where it was historically (but place it into the examples folder on newer distributions). - Package rename: provide and obsolete the old PgBadger package - update to 12.2 https://github.com/darold/pgbadger/releases/tag/v12.2 - update to 12.1 https://github.com/darold/pgbadger/releases/tag/v12.1 - update to 12.0 https://github.com/darold/pgbadger/releases/tag/v12.0 - update to 11.8 https://github.com/darold/pgbadger/releases/tag/v11.8 - update to 11.7 https://github.com/darold/pgbadger/releases/tag/v11.7 - update to 11.6 https://github.com/darold/pgbadger/releases/tag/v11.5 https://github.com/darold/pgbadger/releases/tag/v11.6 - update to 11.4 https://github.com/darold/pgbadger/releases/tag/v11.2 https://github.com/darold/pgbadger/releases/tag/v11.3 https://github.com/darold/pgbadger/releases/tag/v11.4 - update to 11.1 - please refer to /usr/share/doc/packages/pgbadger/ChangeLog for a complete list of changes. The following is just an excerpt - This new release breaks backward compatibility with old binary or JSON files. This also mean that incremental mode will not be able to read old binary file. If you want to update pgBadger and keep you old reports take care to upgrade at start of a new week otherwise weekly report will be broken. pgBadger will print a warning and just skip the old binary file. - From 9.0: This major release of pgBadger is a port to bootstrap 3 and a version upgrade of all resources files (CSS and Javascript). There's also some bugs fixes and features enhancements. - Add support of pgbouncer syslog log file format. - Add support to all auto_explain format (text, xml, json and yaml). - Add support to %q placeholder in log_line_prefix. - Add jsonlog format of Michael Paquier extension, with -f jsonlog pgbadger will be able to parse the log. - Add report of checkpoint distance and estimate. - Add support of AWS Redshift keywords to SQL code beautifier. - Add autodetection of log format in remote mode to allow remote parsing of pgbouncer log file together with PostgreSQL log file. - Replace the SQL formatter/beautify with v3.0 of pgFormatter. - Add report of error class distribution when SQLState is available in the log_line_prefix (see %e placeholder). - Update SQL Beautifier to pgFormatter v1.6 code. - Improve error message normalization. - Add --normalized-only option to generate a text file containing all normalized queries found in a log with count. - Allow %c (session id) to replace %p (pid) as unique session id. - Add waiting for lock messages to event reports. - Add --start-monday option to start calendar weeks in Monday instead of default to Sunday. - Add report of top N queries that consume the most time in the prepare or parse stage. - Add report of top N queries that consume the most time in the bind stage. - Add report of timing for prepare/bind/execute queries parts. Reported in a new "Duration" tab in Global Stats report. This also fix previous report of "Total query duration" that was only reporting execute total duration. - Add support to RDS and CloudWatch log format, they are detected automatically. You can use -f rds if pgbadger is not able to auto-detect the log format. - Add new configuration option --month-report to be able to build monthly incremental reports. - Add top bind queries that generate the more temporary files. Require log_connection and log_disconnection be activated. - Add --exclude-client command line option to be able to exclude log entries for the specified client ip. Can be used multiple time. - Add -H, --html-dir option to be able to set a different path where HTML report must be written in incremental mode. Binary files stay on directory defined with -O, --outdir option. - Add -E | --explode option to explode the main report into one report per database. Global information not related to a database are added to the postgres database report. - Add per database report to incremental mode. In this mode there will be a sub directory per database with dedicated incremental reports. - Add support to Heroku's PostgreSQL logplex format. - update to 8.1 - Fix one case where pid file remain after dying. - Add requirement of log_error_verbosity = default to documentation. - Report message "LOG: using stale statistics instead of current ones because stats collector is not responding" in events view. - Remove obsolete days when we are in binary mode with --noreport - Fix wrong report of statements responsible of temporary files. Thanks to Luan Nicolini Marcondes for the report. This patch also exclude line with log level LOCATION to be parsed. - Fix limit on number of sample at report generation and remove pending LAST_PARSED.tmp file. - Update load_stat() function and global variables to support pgbouncer statistics. Update version to 2.0. - Handle more kind or query types. Thanks to julien Rouhaud for the patch. - Fix pgbouncer log parser to handle message: FATAL: the database system is shutting down - Fix whitespace placed in between the E and the quote character. Thanks to clijunky for the report. - Fix a major issue introduced with support to pgbouncer that prevent parsing of compressed PostgreSQL log files. Thanks to Levente Birta for the report. - update to 7.1: + This new release fixes some issues and adds a new report: ++ Distribution of sessions per application + It also adds Json operators to SQL Beautifier. + this release also adds some more useful reports and features, please check the changes file in /usr/share/doc/packages/pgbadger/ChangeLog for details - update to 6.2 + This is a maintenance release to fix a regression in SQL traffic graphs and fix some other minor issues. + The release also add a new option -D or --dns-resolv to map client ip addresses to FQDN without having log_hostname enabled on the postgresql's configuration + Do not display queries in Slowest individual, Time consuming and Normalized slowest queries reports when there is no duration in log file. Display NO DATASET instead. + Fix min/max queries in SQL traffic that was based on duration instead of query count. + Fix wrong unit to Synced files in Checkpoints files report. Thanks to Levente Birta for the report. + Enable allow_loose_quotes in Text::CSV_XS call to fix CSV parsing error when fields have quote inside an unquoted field. Thanks to Josh Berkus for the report. +- Add -D | --dns-resolv command line option to replace ip addresses by their DNS name. Be warned that this can slow down pgBagder a lot. Thanks to Jiri Hlinka for the feature request. - update to 5.0: + This new major release adds some new features like incremental mode and SQL queries times histogram. There is also a hourly graphic representation of the count and average duration of top normalized queries. + there are many more changes, please refer to /usr/share/doc/packages/pgbadger/ChangeLog for details - update to 3.3: * adds four more useful reports about queries that generate locks and temporary files * new report about restartpoint on slaves and several * adds escaping of HTML code inside queries * adds Min/Max reports with Average duration in all queries reports * many bug fixes - update to 3.1: !! UPGRADE: if you are running pgbadger by cron take care if you !! were using one of the following option: --enable-log_min_duration !! and --enable-log_duration, they have been removed and pgbadger !! will refuse to start + This new major release adds parallel log processing by using as many cores as wanted to parse log files, the performances gain is directly related to the number of cores specified. There's also new reports about autovacuum/autoanalyze informations and many bugs have been fixed. + Please read the full Changelog at: /usr/share/doc/packages/pgbadger/ChangeLog - update to 2.3 * Clarify misleading statement about log_duration: log_duration may be turned on depending on desired information. Only log_statement must not be on. Thanks to Matt Romaine for the patch. * Fix --dbname and --dbuser not working with csvlog format. Thanks to Luke Cyca for the report. * Fix issue in SQL formatting that prevent left back indentation when major keywords were found. Thanks to Kevin Brannen for the report. * Display 3 decimals in time report so that ms can be seen. Thanks to Adam Schroder for the request. * Force the parser to not insert a new line after the SET keyword when the query begin with it. This is to preserve the single line with queries like SET client_encoding TO "utf8"; * Add better SQL formatting of update queries by adding a new line after the SET keyword. Thanks to pilat66 for the report. * Update copyright and documentation. * See ChangeLog - initial version 2.2-1 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-96=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): pgbadger-12.4-bp155.2.2 References:

1 0

openSUSE-SU-2024:0095-1: moderate: Security update for kanidm
by opensuse-security＠opensuse.org 30 Mar '24

30 Mar '24

openSUSE Security Update: Security update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0095-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for kanidm fixes the following issues: Update to version 1.1.0~rc16~git6.e51d0de: * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686) * return consent map to service account (#2604) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-95=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.1.0~rc16~git6.e51d0de-bp155.14.1 kanidm-clients-1.1.0~rc16~git6.e51d0de-bp155.14.1 kanidm-docs-1.1.0~rc16~git6.e51d0de-bp155.14.1 kanidm-server-1.1.0~rc16~git6.e51d0de-bp155.14.1 kanidm-unixd-clients-1.1.0~rc16~git6.e51d0de-bp155.14.1 References:

1 0

openSUSE-RU-2024:0094-1: moderate: Recommended update for gcalcli
by maintenance＠opensuse.org 29 Mar '24

29 Mar '24

openSUSE Recommended Update: Recommended update for gcalcli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0094-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gcalcli fixes the following issues: - Introducing version 4.3.0+git14.3e616f7 to Leap. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-94=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): gcalcli-4.3.0+git14.3e616f7-bp155.2.1 References:

1 0

SUSE-SU-2024:1063-1: important: Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4)
by OPENSUSE-UPDATES 29 Mar '24

29 Mar '24

# Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:1063-1 Rating: important References: * bsc#1216898 * bsc#1218487 * bsc#1218610 Cross-References: * CVE-2023-46813 * CVE-2023-51779 * CVE-2023-6531 CVSS scores: * CVE-2023-46813 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-46813 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51779 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_88 fixes several issues. The following security issues were fixed: * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487). * CVE-2023-46813: Fixed a local privilege escalation with user-space programs that have access to MMIO regions (bsc#1216898). * CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218610). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1064=1 SUSE-2024-1065=1 SUSE-2024-1066=1 SUSE-2024-1067=1 SUSE-2024-1068=1 SUSE-2024-1069=1 SUSE-2024-1071=1 SUSE-2024-1070=1 SUSE-2024-1063=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-1064=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-1065=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-1066=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-1067=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-1068=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-1069=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-1071=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-1070=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-1063=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_10-debugsource-12-150400.2.3 * kernel-livepatch-5_14_21-150400_24_74-default-8-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_18-debugsource-6-150400.2.2 * kernel-livepatch-5_14_21-150400_24_60-default-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_63-default-debuginfo-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_81-default-7-150400.2.3 * kernel-livepatch-5_14_21-150400_24_88-default-6-150400.2.2 * kernel-livepatch-SLE15-SP4_Update_16-debugsource-7-150400.2.3 * kernel-livepatch-5_14_21-150400_24_69-default-8-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_12-debugsource-11-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-9-150400.2.3 * kernel-livepatch-5_14_21-150400_24_92-default-5-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_11-debugsource-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_60-default-debuginfo-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_74-default-debuginfo-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_55-default-12-150400.2.3 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-9-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_14-debugsource-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_81-default-debuginfo-7-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-5-150400.2.3 * kernel-livepatch-5_14_21-150400_24_69-default-debuginfo-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-5-150400.2.3 * kernel-livepatch-5_14_21-150400_24_63-default-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_66-default-9-150400.2.3 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-6-150400.2.2 * kernel-livepatch-SLE15-SP4_Update_15-debugsource-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_55-default-debuginfo-12-150400.2.3 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_10-debugsource-12-150400.2.3 * kernel-livepatch-5_14_21-150400_24_74-default-8-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_18-debugsource-6-150400.2.2 * kernel-livepatch-5_14_21-150400_24_60-default-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_63-default-debuginfo-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_81-default-7-150400.2.3 * kernel-livepatch-5_14_21-150400_24_88-default-6-150400.2.2 * kernel-livepatch-SLE15-SP4_Update_16-debugsource-7-150400.2.3 * kernel-livepatch-5_14_21-150400_24_69-default-8-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_12-debugsource-11-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-9-150400.2.3 * kernel-livepatch-5_14_21-150400_24_92-default-5-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_11-debugsource-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_60-default-debuginfo-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_74-default-debuginfo-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_55-default-12-150400.2.3 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-9-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_14-debugsource-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_81-default-debuginfo-7-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-5-150400.2.3 * kernel-livepatch-5_14_21-150400_24_69-default-debuginfo-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-5-150400.2.3 * kernel-livepatch-5_14_21-150400_24_63-default-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_66-default-9-150400.2.3 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-6-150400.2.2 * kernel-livepatch-SLE15-SP4_Update_15-debugsource-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_55-default-debuginfo-12-150400.2.3 ## References: * https://www.suse.com/security/cve/CVE-2023-46813.html * https://www.suse.com/security/cve/CVE-2023-51779.html * https://www.suse.com/security/cve/CVE-2023-6531.html * https://bugzilla.suse.com/show_bug.cgi?id=1216898 * https://bugzilla.suse.com/show_bug.cgi?id=1218487 * https://bugzilla.suse.com/show_bug.cgi?id=1218610

1 0

SUSE-SU-2024:1072-1: important: Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)
by OPENSUSE-UPDATES 29 Mar '24

29 Mar '24

# Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:1072-1 Rating: important References: * bsc#1218487 * bsc#1218610 Cross-References: * CVE-2023-51779 * CVE-2023-6531 CVSS scores: * CVE-2023-51779 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_100 fixes several issues. The following security issues were fixed: * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487). * CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218610). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1072=1 SUSE-2024-1073=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-1072=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-1073=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_20-debugsource-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_97-default-4-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_100-default-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-4-150400.2.3 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_20-debugsource-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_97-default-4-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_100-default-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-4-150400.2.3 ## References: * https://www.suse.com/security/cve/CVE-2023-51779.html * https://www.suse.com/security/cve/CVE-2023-6531.html * https://bugzilla.suse.com/show_bug.cgi?id=1218487 * https://bugzilla.suse.com/show_bug.cgi?id=1218610

1 0

openSUSE-SU-2024:0093-1: important: Security update for minidlna
by opensuse-security＠opensuse.org 29 Mar '24

29 Mar '24

openSUSE Security Update: Security update for minidlna ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0093-1 Rating: important References: #1222007 Cross-References: CVE-2023-33476 CVSS scores: CVE-2023-33476 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for minidlna fixes the following issues: Update to 1.3.3 (boo#1222007): - Fixed HTTP chunk length parsing. (CVE-2023-33476) - Improved Dutch and Swedish translations. - Fixed directory symlink deletion handling. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-93=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): minidlna-1.3.3-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-33476.html https://bugzilla.suse.com/1222007

1 0

SUSE-SU-2024:1054-1: important: Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
by OPENSUSE-UPDATES 28 Mar '24

28 Mar '24

# Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:1054-1 Rating: important References: * bsc#1218487 Cross-References: * CVE-2023-6531 CVSS scores: * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_150 fixes one issue. The following security issue was fixed: * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-1054=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1056=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-1056=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150200_24_175-default-debuginfo-4-150200.2.3 * kernel-livepatch-SLE15-SP2_Update_44-debugsource-4-150200.2.3 * kernel-livepatch-5_3_18-150200_24_175-default-4-150200.2.3 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_41-debugsource-3-150300.2.3 * kernel-livepatch-5_3_18-150300_59_150-default-debuginfo-3-150300.2.3 * kernel-livepatch-5_3_18-150300_59_150-default-3-150300.2.3 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_150-preempt-debuginfo-3-150300.2.3 * kernel-livepatch-5_3_18-150300_59_150-preempt-3-150300.2.3 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_150-default-3-150300.2.3 ## References: * https://www.suse.com/security/cve/CVE-2023-6531.html * https://bugzilla.suse.com/show_bug.cgi?id=1218487

1 0

SUSE-RU-2024:1055-1: important: Recommended update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)
by OPENSUSE-UPDATES 28 Mar '24

28 Mar '24

# Recommended update for the Linux Kernel (Live Patch 9 for SLE 15 SP5) Announcement ID: SUSE-RU-2024:1055-1 Rating: important References: * bsc#1219157 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_44 fixes one issue. The following bugs were fixed: * Recommended fix for IO lock-ups on HBA355i with SLES 15SP5. (bsc#1219157) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1055=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-1055=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_44-default-3-150500.2.2 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-3-150500.2.2 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-3-150500.2.2 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_44-default-3-150500.2.2 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-3-150500.2.2 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-3-150500.2.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219157

1 0

openSUSE-RU-2024:0085-1: moderate: Recommended update for phoronix-test-suite
by maintenance＠opensuse.org 22 Mar '24

22 Mar '24

openSUSE Recommended Update: Recommended update for phoronix-test-suite ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0085-1 Rating: moderate References: #1215534 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for phoronix-test-suite fixes the following issues: - Require php8 when building (boo#1215534) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-85=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): phoronix-test-suite-10.8.4-bp155.3.3.1 References: https://bugzilla.suse.com/1215534

1 0