March 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:0844-1: moderate: Recommended update for raspberrypi-firmware-dt
by OPENSUSE-UPDATES 12 Mar '24

12 Mar '24

# Recommended update for raspberrypi-firmware-dt Announcement ID: SUSE-RU-2024:0844-1 Rating: moderate References: * bsc#1219094 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for raspberrypi-firmware-dt fixes the following issue: * Extend "ARM: dts: bcm27xx: Use better name for spidev" patch coverage. Change compatible "spidev" to "rohm,dh2228fv" in overlay files too. (bsc#1219094) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-844=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-844=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-844=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-844=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-844=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-844=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-844=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-844=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-844=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-844=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-844=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-844=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-844=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * Basesystem Module 15-SP5 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * openSUSE Leap 15.4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * openSUSE Leap Micro 5.3 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * openSUSE Leap Micro 5.4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * openSUSE Leap 15.5 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219094

1 0

SUSE-RU-2024:0845-1: moderate: Recommended update for release-notes-sles
by OPENSUSE-UPDATES 12 Mar '24

12 Mar '24

# Recommended update for release-notes-sles Announcement ID: SUSE-RU-2024:0845-1 Rating: moderate References: * bsc#1201266 * bsc#1210490 * bsc#1215156 * bsc#1216929 * bsc#933411 * jsc#TEAM-1245 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has five fixes can now be installed. ## Description: This update for release-notes-sles fixes the following issues: * Added note about sched parameter deprecation (bsc#1216929) * Added note about set-hostname deprecation (bsc#1215156) * Added note about Xen Dom0 suspend/resume (bsc#1210490) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-845=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-845=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 15 SP4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Linux Enterprise Server 15 SP4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Manager Server 4.3 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Linux Enterprise Desktop 15 SP4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Manager Retail Branch Server 4.3 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Manager Proxy 4.3 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * openSUSE Leap 15.4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1201266 * https://bugzilla.suse.com/show_bug.cgi?id=1210490 * https://bugzilla.suse.com/show_bug.cgi?id=1215156 * https://bugzilla.suse.com/show_bug.cgi?id=1216929 * https://bugzilla.suse.com/show_bug.cgi?id=933411 * https://jira.suse.com/browse/TEAM-1245

1 0

openSUSE-SU-2024:0080-1: important: Security update for python-Django1
by opensuse-security＠opensuse.org 11 Mar '24

11 Mar '24

openSUSE Security Update: Security update for python-Django1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0080-1 Rating: important References: #1220358 Cross-References: CVE-2024-27351 CVSS scores: CVE-2024-27351 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Django1 fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words() (boo#1220358). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-80=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-Django1-1.11.29-bp155.4.9.1 References: https://www.suse.com/security/cve/CVE-2024-27351.html https://bugzilla.suse.com/1220358

1 0

openSUSE-RU-2024:0079-1: moderate: Recommended update for virtme
by maintenance＠opensuse.org 11 Mar '24

11 Mar '24

openSUSE Recommended Update: Recommended update for virtme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0079-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for virtme fixes the following issues: Update to 1.22: * Fix potential sudo errors (in openSUSE, Fedora, CachyOS) * Propagate /proc/sys/fs/nr_open from host to guest * More robust parsing of upstream kernel versions * Small command help improvements Update to 1.21: * When running in script mode do not hang in case of kernel panic, but return the special error code 255 (this allows to automate catching kernel panics) * Redirect kernel log to stderr on the host when running in interactive mode: this allows to easily save the kernel log to a file (or pipe it to another tool), simply by runing a vng -vr 2>/tmp/kernel.log * vng --dump can now generate a memory dump compatible with drgn * It is now possible to use virtiofsd with a btrfs root filesystem on the host (e.g., default openSUSE setup) * It is not possible to to use the microvm architecture with kernels that don't have built-in virtio-pci / virtio-mmio (e.g., stock openSUSE Tumbleweed kernel) Update to 1.20: * The return code of a command executed in the vng guest is now transparently channeled to the host: this, together with stdin/stdout/stderr redirection, gives the complete illusion to run the command in the guest as if it was executed on the host and it can help to easily integrate vng with other CI tools/scripts * NUMA support: it is now possible to create multiple NUMA nodes, and assign CPUs to them, inside a vng guest, using the --numa option. * new --quiet option to override --verbose * new --disable-kvm option to explicitly disable hardware virtualization (KVM) * lockdep is now disabled by default during the kernel build Update to 1.19: * The most noticeable change is definitely the support for running virtme-ng inside Docker containers. This opens the possibility for many other projects to use virtme-ng to potentially pick any arbitrary kernel to run their tests inside their Docker instances. * The other interesting change (this one only for Ubuntu users) is the --root-release argument (used together with --root) that allows bootstrapping a rootfs from scratch, selecting a specific Ubuntu release. The rootfs will be created from the latest Ubuntu cloud image of the target release. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-79=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): virtme-1.22-bp155.5.8.1 References:

1 0

openSUSE-RU-2024:0078-1: moderate: Recommended update for chromium
by maintenance＠opensuse.org 11 Mar '24

11 Mar '24

openSUSE Recommended Update: Recommended update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0078-1 Rating: moderate References: #1219070 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chromium fixes the following issues: - Disable codec checker this will always fail (boo#1219070) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-78=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-120.0.6099.224-bp155.2.70.1 chromium-120.0.6099.224-bp155.2.70.1 References: https://bugzilla.suse.com/1219070

1 0

openSUSE-SU-2024:0077-1: important: Security update for python-Django
by opensuse-security＠opensuse.org 11 Mar '24

11 Mar '24

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0077-1 Rating: important References: #1220358 Cross-References: CVE-2024-27351 CVSS scores: CVE-2024-27351 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Django fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words() (boo#1220358). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-77=1 Package List: References: https://www.suse.com/security/cve/CVE-2024-27351.html https://bugzilla.suse.com/1220358

1 0

SUSE-SU-2024:0831-1: moderate: Security update for openssl-1_0_0
by OPENSUSE-UPDATES 11 Mar '24

11 Mar '24

# Security update for openssl-1_0_0 Announcement ID: SUSE-SU-2024:0831-1 Rating: moderate References: * bsc#1219243 Cross-References: * CVE-2024-0727 CVSS scores: * CVE-2024-0727 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2024-0727 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Legacy Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_0_0 fixes the following issues: * CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-831=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-831=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-831=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-831=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-831=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-831=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-831=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-831=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-831=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-831=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-831=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-831=1 ## Package List: * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * libopenssl1_0_0-steam-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-cavs-1.0.2p-150000.3.91.1 * openssl-1_0_0-cavs-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * libopenssl1_0_0-steam-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * openSUSE Leap 15.5 (x86_64) * libopenssl1_0_0-32bit-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-32bit-1.0.2p-150000.3.91.1 * libopenssl1_0_0-steam-32bit-1.0.2p-150000.3.91.1 * libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-32bit-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-32bit-1.0.2p-150000.3.91.1 * openSUSE Leap 15.5 (noarch) * openssl-1_0_0-doc-1.0.2p-150000.3.91.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0727.html * https://bugzilla.suse.com/show_bug.cgi?id=1219243

1 0

SUSE-RU-2024:0827-1: moderate: Recommended update for tomcat
by OPENSUSE-UPDATES 11 Mar '24

11 Mar '24

# Recommended update for tomcat Announcement ID: SUSE-RU-2024:0827-1 Rating: moderate References: * bsc#1219530 Affected Products: * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Server 4.3 * Web and Scripting Module 15-SP5 An update that has one fix can now be installed. ## Description: This update for tomcat fixes the following issues: * Added dependencies on tomcat `user` and `group`, required by RPM 4.19 (bsc#1219530) * Link ecj.jar into the install instead of copying it ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-827=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-827=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-827=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-827=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-827=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-827=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-827=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-827=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-827=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-827=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-827=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-827=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-827=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-827=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Manager Server 4.3 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Enterprise Storage 7.1 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * openSUSE Leap 15.5 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-embed-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-javadoc-9.0.85-150200.60.1 * tomcat-jsvc-9.0.85-150200.60.1 * tomcat-docs-webapp-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * Web and Scripting Module 15-SP5 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219530

1 0

openSUSE-RU-2024:0076-1: moderate: Recommended update for asar
by maintenance＠opensuse.org 10 Mar '24

10 Mar '24

openSUSE Recommended Update: Recommended update for asar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0076-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for asar fixes the following issues: New upstream version 3.2.9 * fix symlink pointing error in filesystem.insertLink New upstream version 3.2.8 * better error message when extracting a file that doesn't exist in the archive Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-76=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): asar-3.2.9-bp155.2.8.1 References:

1 0

openSUSE-RU-2024:0075-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 08 Mar '24

08 Mar '24

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0075-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fwts fixes the following issues: Update to version 24.01.00: * acpi: sbbr: check the existence of SPCR console devices * acpi: dbg2: update the subtype RISC-V SBI console for DBG2 * acpi: ras2: stop for loop when list exceeds the table * framework: fix memory leaks caused by fwts_log_get_filenames * acpi: s3: fix potential memory leaks on fwts_get() calls * acpi: s3: enable debug messages on S0ix failure for Intel platforms * lib: fwts_version.h - update to V24.01.00 * debian: update changelog * Update copyright year to 2024 * fwts-test: add regression tests for SKVL Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-75=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 x86_64): fwts-24.01.00-bp155.2.6.1 References:

1 0