April 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:1471-1: moderate: Recommended update for libzypp
by OPENSUSE-UPDATES 30 Apr '24

30 Apr '24

# Recommended update for libzypp Announcement ID: SUSE-RU-2024:1471-1 Rating: moderate References: * bsc#1223094 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for libzypp fixes the following issues: * Don't try to refresh volatile media as long as raw metadata are present (bsc#1223094) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1471=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1471=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1471=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1471=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-1471=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-1471=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1471=1 SUSE- SLE-INSTALLER-15-SP4-2024-1471=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-1471=1 SUSE-SLE-Product- SLES_SAP-15-SP4-2024-1471=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-1471=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1471=1 SUSE-SLE-INSTALLER-15-SP4-2024-1471=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1471=1 SUSE- SLE-INSTALLER-15-SP4-2024-1471=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-1471=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-1471=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-1471=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-1471=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1471=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1471=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1471=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1471=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1471=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1471=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1471=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1471=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1471=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1471=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-devel-doc-17.32.5-150400.3.64.1 * libzypp-devel-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-devel-doc-17.32.5-150400.3.64.1 * libzypp-devel-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libzypp-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libzypp-17.32.5-150400.3.64.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-devel-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-devel-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libzypp-17.32.5-150400.3.64.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-devel-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Manager Proxy 4.3 (x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-devel-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libzypp-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libzypp-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libzypp-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libzypp-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-devel-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-devel-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-devel-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-devel-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libzypp-debugsource-17.32.5-150400.3.64.1 * libzypp-17.32.5-150400.3.64.1 * libzypp-devel-17.32.5-150400.3.64.1 * libzypp-debuginfo-17.32.5-150400.3.64.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223094

1 0

SUSE-RU-2024:1473-1: important: Recommended update for cups-filters
by OPENSUSE-UPDATES 30 Apr '24

30 Apr '24

# Recommended update for cups-filters Announcement ID: SUSE-RU-2024:1473-1 Rating: important References: * bsc#1173345 * bsc#1211401 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for cups-filters fixes the following issues: * Fix printing only one copy of a postscript file instead of multiple (bsc#1211401, bsc#1173345) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1473=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1473=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1473=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1473=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1473=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1473=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1473=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1473=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1473=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1473=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1473=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1473=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1473=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1473=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1473=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1473=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1473=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Manager Proxy 4.3 (x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * cups-filters-devel-1.25.0-150200.3.9.1 * cups-filters-debugsource-1.25.0-150200.3.9.1 * cups-filters-1.25.0-150200.3.9.1 * cups-filters-debuginfo-1.25.0-150200.3.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1173345 * https://bugzilla.suse.com/show_bug.cgi?id=1211401

1 0

SUSE-SU-2024:1470-1: important: Security update for ffmpeg-4
by OPENSUSE-UPDATES 29 Apr '24

29 Apr '24

# Security update for ffmpeg-4 Announcement ID: SUSE-SU-2024:1470-1 Rating: important References: * bsc#1223070 * bsc#1223235 * bsc#1223272 Cross-References: * CVE-2023-49502 * CVE-2023-51793 * CVE-2024-31578 CVSS scores: * CVE-2023-49502 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-51793 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-31578 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for ffmpeg-4 fixes the following issues: * CVE-2024-31578: Fixed heap use-after-free via av_hwframe_ctx_init() when vulkan_frames init failed (bsc#1223070) * CVE-2023-49502: Fixed heap buffer overflow via the ff_bwdif_filter_intra_c function in libavfilter/bwdifdsp.c (bsc#1223235) * CVE-2023-51793: Fixed heap buffer overflow in the image_copy_plane function in libavutil/imgutils.c (bsc#1223272) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1470=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1470=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1470=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1470=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1470=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1470=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1470=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1470=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1470=1 ## Package List: * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * ffmpeg-4-debugsource-4.4-150400.3.24.1 * ffmpeg-4-debuginfo-4.4-150400.3.24.1 * libswresample3_9-4.4-150400.3.24.1 * libavutil56_70-4.4-150400.3.24.1 * libswscale5_9-4.4-150400.3.24.1 * libavformat58_76-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-4.4-150400.3.24.1 * libswscale5_9-debuginfo-4.4-150400.3.24.1 * libswresample3_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-4.4-150400.3.24.1 * libavutil56_70-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-debuginfo-4.4-150400.3.24.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * ffmpeg-4-libavutil-devel-4.4-150400.3.24.1 * libswresample3_9-4.4-150400.3.24.1 * libpostproc55_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-debuginfo-4.4-150400.3.24.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.24.1 * libavutil56_70-debuginfo-4.4-150400.3.24.1 * libswscale5_9-4.4-150400.3.24.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.24.1 * ffmpeg-4-private-devel-4.4-150400.3.24.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.24.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.24.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.24.1 * libavdevice58_13-4.4-150400.3.24.1 * libswscale5_9-debuginfo-4.4-150400.3.24.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.24.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.24.1 * ffmpeg-4-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-4.4-150400.3.24.1 * libavfilter7_110-debuginfo-4.4-150400.3.24.1 * ffmpeg-4-4.4-150400.3.24.1 * libavdevice58_13-debuginfo-4.4-150400.3.24.1 * libavformat58_76-4.4-150400.3.24.1 * libavresample4_0-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-debuginfo-4.4-150400.3.24.1 * libswresample3_9-debuginfo-4.4-150400.3.24.1 * ffmpeg-4-debugsource-4.4-150400.3.24.1 * libavresample4_0-4.4-150400.3.24.1 * libavutil56_70-4.4-150400.3.24.1 * libavfilter7_110-4.4-150400.3.24.1 * libpostproc55_9-4.4-150400.3.24.1 * ffmpeg-4-libpostproc-devel-4.4-150400.3.24.1 * openSUSE Leap 15.4 (x86_64) * libavcodec58_134-32bit-4.4-150400.3.24.1 * libavdevice58_13-32bit-4.4-150400.3.24.1 * libavutil56_70-32bit-4.4-150400.3.24.1 * libswscale5_9-32bit-4.4-150400.3.24.1 * libswscale5_9-32bit-debuginfo-4.4-150400.3.24.1 * libavfilter7_110-32bit-debuginfo-4.4-150400.3.24.1 * libavformat58_76-32bit-debuginfo-4.4-150400.3.24.1 * libpostproc55_9-32bit-4.4-150400.3.24.1 * libavfilter7_110-32bit-4.4-150400.3.24.1 * libavutil56_70-32bit-debuginfo-4.4-150400.3.24.1 * libpostproc55_9-32bit-debuginfo-4.4-150400.3.24.1 * libavdevice58_13-32bit-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-32bit-debuginfo-4.4-150400.3.24.1 * libavformat58_76-32bit-4.4-150400.3.24.1 * libavresample4_0-32bit-debuginfo-4.4-150400.3.24.1 * libswresample3_9-32bit-debuginfo-4.4-150400.3.24.1 * libswresample3_9-32bit-4.4-150400.3.24.1 * libavresample4_0-32bit-4.4-150400.3.24.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libavformat58_76-64bit-4.4-150400.3.24.1 * libavcodec58_134-64bit-4.4-150400.3.24.1 * libavdevice58_13-64bit-4.4-150400.3.24.1 * libavdevice58_13-64bit-debuginfo-4.4-150400.3.24.1 * libswscale5_9-64bit-debuginfo-4.4-150400.3.24.1 * libavformat58_76-64bit-debuginfo-4.4-150400.3.24.1 * libavfilter7_110-64bit-4.4-150400.3.24.1 * libavutil56_70-64bit-debuginfo-4.4-150400.3.24.1 * libswscale5_9-64bit-4.4-150400.3.24.1 * libswresample3_9-64bit-4.4-150400.3.24.1 * libavfilter7_110-64bit-debuginfo-4.4-150400.3.24.1 * libavresample4_0-64bit-4.4-150400.3.24.1 * libavutil56_70-64bit-4.4-150400.3.24.1 * libavcodec58_134-64bit-debuginfo-4.4-150400.3.24.1 * libpostproc55_9-64bit-4.4-150400.3.24.1 * libpostproc55_9-64bit-debuginfo-4.4-150400.3.24.1 * libswresample3_9-64bit-debuginfo-4.4-150400.3.24.1 * libavresample4_0-64bit-debuginfo-4.4-150400.3.24.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ffmpeg-4-libavutil-devel-4.4-150400.3.24.1 * libswresample3_9-4.4-150400.3.24.1 * libpostproc55_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-debuginfo-4.4-150400.3.24.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.24.1 * libavutil56_70-debuginfo-4.4-150400.3.24.1 * libswscale5_9-4.4-150400.3.24.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.24.1 * ffmpeg-4-private-devel-4.4-150400.3.24.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.24.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.24.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.24.1 * libavdevice58_13-4.4-150400.3.24.1 * libswscale5_9-debuginfo-4.4-150400.3.24.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.24.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.24.1 * ffmpeg-4-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-4.4-150400.3.24.1 * libavfilter7_110-debuginfo-4.4-150400.3.24.1 * libavformat58_76-4.4-150400.3.24.1 * ffmpeg-4-4.4-150400.3.24.1 * libavdevice58_13-debuginfo-4.4-150400.3.24.1 * libavresample4_0-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-debuginfo-4.4-150400.3.24.1 * libswresample3_9-debuginfo-4.4-150400.3.24.1 * ffmpeg-4-debugsource-4.4-150400.3.24.1 * libavresample4_0-4.4-150400.3.24.1 * libavutil56_70-4.4-150400.3.24.1 * libavfilter7_110-4.4-150400.3.24.1 * libpostproc55_9-4.4-150400.3.24.1 * ffmpeg-4-libpostproc-devel-4.4-150400.3.24.1 * openSUSE Leap 15.5 (x86_64) * libavcodec58_134-32bit-4.4-150400.3.24.1 * libavdevice58_13-32bit-4.4-150400.3.24.1 * libavutil56_70-32bit-4.4-150400.3.24.1 * libswscale5_9-32bit-4.4-150400.3.24.1 * libswscale5_9-32bit-debuginfo-4.4-150400.3.24.1 * libavfilter7_110-32bit-debuginfo-4.4-150400.3.24.1 * libavformat58_76-32bit-debuginfo-4.4-150400.3.24.1 * libpostproc55_9-32bit-4.4-150400.3.24.1 * libavfilter7_110-32bit-4.4-150400.3.24.1 * libavutil56_70-32bit-debuginfo-4.4-150400.3.24.1 * libpostproc55_9-32bit-debuginfo-4.4-150400.3.24.1 * libavdevice58_13-32bit-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-32bit-debuginfo-4.4-150400.3.24.1 * libavformat58_76-32bit-4.4-150400.3.24.1 * libavresample4_0-32bit-debuginfo-4.4-150400.3.24.1 * libswresample3_9-32bit-debuginfo-4.4-150400.3.24.1 * libswresample3_9-32bit-4.4-150400.3.24.1 * libavresample4_0-32bit-4.4-150400.3.24.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * ffmpeg-4-libavutil-devel-4.4-150400.3.24.1 * libswresample3_9-4.4-150400.3.24.1 * libpostproc55_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-debuginfo-4.4-150400.3.24.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.24.1 * libavutil56_70-debuginfo-4.4-150400.3.24.1 * libswscale5_9-4.4-150400.3.24.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.24.1 * ffmpeg-4-private-devel-4.4-150400.3.24.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.24.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.24.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.24.1 * libavdevice58_13-4.4-150400.3.24.1 * libswscale5_9-debuginfo-4.4-150400.3.24.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.24.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.24.1 * ffmpeg-4-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-4.4-150400.3.24.1 * libavfilter7_110-debuginfo-4.4-150400.3.24.1 * libavformat58_76-4.4-150400.3.24.1 * ffmpeg-4-4.4-150400.3.24.1 * libavdevice58_13-debuginfo-4.4-150400.3.24.1 * libavresample4_0-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-debuginfo-4.4-150400.3.24.1 * libswresample3_9-debuginfo-4.4-150400.3.24.1 * ffmpeg-4-debugsource-4.4-150400.3.24.1 * libavresample4_0-4.4-150400.3.24.1 * libavutil56_70-4.4-150400.3.24.1 * libavfilter7_110-4.4-150400.3.24.1 * libpostproc55_9-4.4-150400.3.24.1 * ffmpeg-4-libpostproc-devel-4.4-150400.3.24.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * ffmpeg-4-debugsource-4.4-150400.3.24.1 * ffmpeg-4-debuginfo-4.4-150400.3.24.1 * libswresample3_9-4.4-150400.3.24.1 * libavutil56_70-4.4-150400.3.24.1 * libpostproc55_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-debuginfo-4.4-150400.3.24.1 * libpostproc55_9-4.4-150400.3.24.1 * libavcodec58_134-4.4-150400.3.24.1 * libswresample3_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-4.4-150400.3.24.1 * libavutil56_70-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-debuginfo-4.4-150400.3.24.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * ffmpeg-4-debugsource-4.4-150400.3.24.1 * ffmpeg-4-debuginfo-4.4-150400.3.24.1 * libswresample3_9-4.4-150400.3.24.1 * libavutil56_70-4.4-150400.3.24.1 * libpostproc55_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-debuginfo-4.4-150400.3.24.1 * libpostproc55_9-4.4-150400.3.24.1 * libavcodec58_134-4.4-150400.3.24.1 * libswresample3_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-4.4-150400.3.24.1 * libavutil56_70-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-debuginfo-4.4-150400.3.24.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * ffmpeg-4-debugsource-4.4-150400.3.24.1 * ffmpeg-4-debuginfo-4.4-150400.3.24.1 * libswresample3_9-4.4-150400.3.24.1 * libavutil56_70-4.4-150400.3.24.1 * libswscale5_9-4.4-150400.3.24.1 * libpostproc55_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-debuginfo-4.4-150400.3.24.1 * libpostproc55_9-4.4-150400.3.24.1 * libavcodec58_134-4.4-150400.3.24.1 * libswscale5_9-debuginfo-4.4-150400.3.24.1 * libswresample3_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-4.4-150400.3.24.1 * libavutil56_70-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-debuginfo-4.4-150400.3.24.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * ffmpeg-4-debugsource-4.4-150400.3.24.1 * ffmpeg-4-debuginfo-4.4-150400.3.24.1 * libswresample3_9-4.4-150400.3.24.1 * libavutil56_70-4.4-150400.3.24.1 * libpostproc55_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-debuginfo-4.4-150400.3.24.1 * libpostproc55_9-4.4-150400.3.24.1 * libavcodec58_134-4.4-150400.3.24.1 * libswresample3_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-4.4-150400.3.24.1 * libavutil56_70-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-debuginfo-4.4-150400.3.24.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * ffmpeg-4-debugsource-4.4-150400.3.24.1 * ffmpeg-4-debuginfo-4.4-150400.3.24.1 * libswresample3_9-4.4-150400.3.24.1 * libavutil56_70-4.4-150400.3.24.1 * libpostproc55_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-debuginfo-4.4-150400.3.24.1 * libpostproc55_9-4.4-150400.3.24.1 * libavcodec58_134-4.4-150400.3.24.1 * libswresample3_9-debuginfo-4.4-150400.3.24.1 * libavformat58_76-4.4-150400.3.24.1 * libavutil56_70-debuginfo-4.4-150400.3.24.1 * libavcodec58_134-debuginfo-4.4-150400.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2023-49502.html * https://www.suse.com/security/cve/CVE-2023-51793.html * https://www.suse.com/security/cve/CVE-2024-31578.html * https://bugzilla.suse.com/show_bug.cgi?id=1223070 * https://bugzilla.suse.com/show_bug.cgi?id=1223235 * https://bugzilla.suse.com/show_bug.cgi?id=1223272

1 0

SUSE-RU-2024:1467-1: moderate: Recommended update for tracker
by OPENSUSE-UPDATES 29 Apr '24

29 Apr '24

# Recommended update for tracker Announcement ID: SUSE-RU-2024:1467-1 Rating: moderate References: * bsc#1222949 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for tracker fixes the following issue: * Initialize FTS tokenizer earlier to fix regressions with sqlite (bsc#1222949) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1467=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1467=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1467=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1467=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1467=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-1467=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1467=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1467=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1467=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1467=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1467=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1467=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1467=1 ## Package List: * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-debuginfo-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-3.2.1-150400.3.6.2 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * tracker-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * tracker-debuginfo-3.2.1-150400.3.6.2 * SUSE Linux Enterprise Workstation Extension 15 SP5 (noarch) * tracker-lang-3.2.1-150400.3.6.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * tracker-data-files-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-debuginfo-3.2.1-150400.3.6.2 * tracker-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-3.2.1-150400.3.6.2 * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-devel-3.2.1-150400.3.6.2 * typelib-1_0-Tracker-3_0-3.2.1-150400.3.6.2 * openSUSE Leap 15.4 (noarch) * tracker-lang-3.2.1-150400.3.6.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * tracker-data-files-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-debuginfo-3.2.1-150400.3.6.2 * tracker-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-3.2.1-150400.3.6.2 * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-devel-3.2.1-150400.3.6.2 * typelib-1_0-Tracker-3_0-3.2.1-150400.3.6.2 * openSUSE Leap 15.5 (noarch) * tracker-lang-3.2.1-150400.3.6.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-debuginfo-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-3.2.1-150400.3.6.2 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * tracker-data-files-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-devel-3.2.1-150400.3.6.2 * typelib-1_0-Tracker-3_0-3.2.1-150400.3.6.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * tracker-data-files-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-debuginfo-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-3.2.1-150400.3.6.2 * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-devel-3.2.1-150400.3.6.2 * typelib-1_0-Tracker-3_0-3.2.1-150400.3.6.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * tracker-data-files-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-debuginfo-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-3.2.1-150400.3.6.2 * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-devel-3.2.1-150400.3.6.2 * typelib-1_0-Tracker-3_0-3.2.1-150400.3.6.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * tracker-data-files-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-debuginfo-3.2.1-150400.3.6.2 * tracker-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-3.2.1-150400.3.6.2 * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-devel-3.2.1-150400.3.6.2 * typelib-1_0-Tracker-3_0-3.2.1-150400.3.6.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * tracker-lang-3.2.1-150400.3.6.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * tracker-data-files-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-debuginfo-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-3.2.1-150400.3.6.2 * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-devel-3.2.1-150400.3.6.2 * typelib-1_0-Tracker-3_0-3.2.1-150400.3.6.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * tracker-data-files-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-debuginfo-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-3.2.1-150400.3.6.2 * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-devel-3.2.1-150400.3.6.2 * typelib-1_0-Tracker-3_0-3.2.1-150400.3.6.2 * SUSE Manager Proxy 4.3 (x86_64) * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-debuginfo-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-3.2.1-150400.3.6.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * tracker-debuginfo-3.2.1-150400.3.6.2 * tracker-debugsource-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-debuginfo-3.2.1-150400.3.6.2 * libtracker-sparql-3_0-0-3.2.1-150400.3.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222949

1 0

openSUSE-SU-2024:0114-1: important: Security update for pdns-recursor
by opensuse-security＠opensuse.org 29 Apr '24

29 Apr '24

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0114-1 Rating: important References: #1223262 Cross-References: CVE-2024-25583 CVSS scores: CVE-2024-25583 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pdns-recursor fixes the following issues: - update to 4.8.8: * fixes a case when a crafted responses can lead to a denial of service in Recursor if recursive forwarding is configured (boo#1223262, CVE-2024-25583) - changes in 4.8.7: * If serving stale, wipe CNAME records from cache when we get a NODATA negative response for them * Fix the zoneToCache regression introduced by last security update Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-114=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): pdns-recursor-4.8.8-bp155.2.6.1 References: https://www.suse.com/security/cve/CVE-2024-25583.html https://bugzilla.suse.com/1223262

1 0

SUSE-RU-2024:1458-1: moderate: Recommended update for vim
by OPENSUSE-UPDATES 29 Apr '24

29 Apr '24

# Recommended update for vim Announcement ID: SUSE-RU-2024:1458-1 Rating: moderate References: * bsc#1220763 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for vim fixes the following issues: * Fix segmentation fault after updating to version 9.1.0111-150500.20.9.1 (bsc#1220763) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1458=1 SUSE-2024-1458=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1458=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1458=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-1458=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * vim-9.1.0330-150500.20.12.1 * vim-small-debuginfo-9.1.0330-150500.20.12.1 * vim-debuginfo-9.1.0330-150500.20.12.1 * gvim-9.1.0330-150500.20.12.1 * vim-small-9.1.0330-150500.20.12.1 * vim-debugsource-9.1.0330-150500.20.12.1 * gvim-debuginfo-9.1.0330-150500.20.12.1 * openSUSE Leap 15.5 (noarch) * vim-data-common-9.1.0330-150500.20.12.1 * vim-data-9.1.0330-150500.20.12.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * vim-data-common-9.1.0330-150500.20.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * vim-small-9.1.0330-150500.20.12.1 * vim-debugsource-9.1.0330-150500.20.12.1 * vim-debuginfo-9.1.0330-150500.20.12.1 * vim-small-debuginfo-9.1.0330-150500.20.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * vim-9.1.0330-150500.20.12.1 * vim-small-debuginfo-9.1.0330-150500.20.12.1 * vim-debuginfo-9.1.0330-150500.20.12.1 * vim-small-9.1.0330-150500.20.12.1 * vim-debugsource-9.1.0330-150500.20.12.1 * Basesystem Module 15-SP5 (noarch) * vim-data-common-9.1.0330-150500.20.12.1 * vim-data-9.1.0330-150500.20.12.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gvim-9.1.0330-150500.20.12.1 * vim-debugsource-9.1.0330-150500.20.12.1 * gvim-debuginfo-9.1.0330-150500.20.12.1 * vim-debuginfo-9.1.0330-150500.20.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220763

1 0

SUSE-RU-2024:1459-1: moderate: Recommended update for vim
by OPENSUSE-UPDATES 29 Apr '24

29 Apr '24

# Recommended update for vim Announcement ID: SUSE-RU-2024:1459-1 Rating: moderate References: * bsc#1220763 Affected Products: * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that has one fix can now be installed. ## Description: This update for vim fixes the following issues: * Fix segmentation fault after updating to version 9.1.0111-150500.20.9.1 (bsc#1220763) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1459=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1459=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1459=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1459=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1459=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1459=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1459=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1459=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1459=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * vim-data-common-9.1.0330-150000.5.63.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * vim-debugsource-9.1.0330-150000.5.63.1 * vim-small-debuginfo-9.1.0330-150000.5.63.1 * vim-small-9.1.0330-150000.5.63.1 * vim-debuginfo-9.1.0330-150000.5.63.1 * openSUSE Leap Micro 5.4 (noarch) * vim-data-common-9.1.0330-150000.5.63.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * vim-debugsource-9.1.0330-150000.5.63.1 * vim-small-debuginfo-9.1.0330-150000.5.63.1 * vim-small-9.1.0330-150000.5.63.1 * vim-debuginfo-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * vim-data-common-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * vim-debugsource-9.1.0330-150000.5.63.1 * vim-small-debuginfo-9.1.0330-150000.5.63.1 * vim-small-9.1.0330-150000.5.63.1 * vim-debuginfo-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * vim-data-common-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * vim-debugsource-9.1.0330-150000.5.63.1 * vim-small-debuginfo-9.1.0330-150000.5.63.1 * vim-small-9.1.0330-150000.5.63.1 * vim-debuginfo-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * vim-data-common-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * vim-debugsource-9.1.0330-150000.5.63.1 * vim-small-debuginfo-9.1.0330-150000.5.63.1 * vim-small-9.1.0330-150000.5.63.1 * vim-debuginfo-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * vim-data-common-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * vim-debugsource-9.1.0330-150000.5.63.1 * vim-small-debuginfo-9.1.0330-150000.5.63.1 * vim-small-9.1.0330-150000.5.63.1 * vim-debuginfo-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * vim-data-common-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * vim-debugsource-9.1.0330-150000.5.63.1 * vim-small-debuginfo-9.1.0330-150000.5.63.1 * vim-small-9.1.0330-150000.5.63.1 * vim-debuginfo-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * vim-data-common-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * vim-debugsource-9.1.0330-150000.5.63.1 * vim-small-debuginfo-9.1.0330-150000.5.63.1 * vim-small-9.1.0330-150000.5.63.1 * vim-debuginfo-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * vim-data-common-9.1.0330-150000.5.63.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * vim-debugsource-9.1.0330-150000.5.63.1 * vim-small-debuginfo-9.1.0330-150000.5.63.1 * vim-small-9.1.0330-150000.5.63.1 * vim-debuginfo-9.1.0330-150000.5.63.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220763

1 0

SUSE-RU-2024:1460-1: moderate: Recommended update for csp-billing-adapter-local
by OPENSUSE-UPDATES 29 Apr '24

29 Apr '24

# Recommended update for csp-billing-adapter-local Announcement ID: SUSE-RU-2024:1460-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that can now be installed. ## Description: This update for csp-billing-adapter-local fixes the following issues: * Update to version 0.5.1 * Cast file path to a string for usage ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1460=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1460=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1460=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python3-csp-billing-adapter-local-0.5.1-150400.9.14.1 * Public Cloud Module 15-SP4 (noarch) * python3-csp-billing-adapter-local-0.5.1-150400.9.14.1 * Public Cloud Module 15-SP5 (noarch) * python3-csp-billing-adapter-local-0.5.1-150400.9.14.1

1 0

SUSE-SU-2024:1453-1: important: Security update for frr
by OPENSUSE-UPDATES 26 Apr '24

26 Apr '24

# Security update for frr Announcement ID: SUSE-SU-2024:1453-1 Rating: important References: * bsc#1220548 * bsc#1222518 Cross-References: * CVE-2024-27913 * CVE-2024-31948 CVSS scores: * CVE-2024-27913 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-31948 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for frr fixes the following issues: * CVE-2024-27913: Fixed a denial of service issue via a malformed OSPF LSA packet (bsc#1220548). * CVE-2024-31948: Fixed denial of service due to malformed Prefix SID attribute in BGP Update packet (bsc#1222518). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1453=1 openSUSE-SLE-15.5-2024-1453=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1453=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libfrrfpm_pb0-debuginfo-8.4-150500.4.20.1 * libfrr0-8.4-150500.4.20.1 * frr-8.4-150500.4.20.1 * libfrrzmq0-debuginfo-8.4-150500.4.20.1 * libfrrsnmp0-debuginfo-8.4-150500.4.20.1 * libmlag_pb0-8.4-150500.4.20.1 * libmlag_pb0-debuginfo-8.4-150500.4.20.1 * libfrr_pb0-debuginfo-8.4-150500.4.20.1 * libfrrfpm_pb0-8.4-150500.4.20.1 * libfrrzmq0-8.4-150500.4.20.1 * libfrr0-debuginfo-8.4-150500.4.20.1 * frr-debugsource-8.4-150500.4.20.1 * libfrrcares0-debuginfo-8.4-150500.4.20.1 * frr-devel-8.4-150500.4.20.1 * libfrrospfapiclient0-8.4-150500.4.20.1 * libfrrcares0-8.4-150500.4.20.1 * libfrrospfapiclient0-debuginfo-8.4-150500.4.20.1 * libfrr_pb0-8.4-150500.4.20.1 * libfrrsnmp0-8.4-150500.4.20.1 * frr-debuginfo-8.4-150500.4.20.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libfrrfpm_pb0-debuginfo-8.4-150500.4.20.1 * libfrr0-8.4-150500.4.20.1 * frr-8.4-150500.4.20.1 * libfrrzmq0-debuginfo-8.4-150500.4.20.1 * libfrrsnmp0-debuginfo-8.4-150500.4.20.1 * libmlag_pb0-8.4-150500.4.20.1 * libmlag_pb0-debuginfo-8.4-150500.4.20.1 * libfrr_pb0-debuginfo-8.4-150500.4.20.1 * libfrrfpm_pb0-8.4-150500.4.20.1 * libfrrzmq0-8.4-150500.4.20.1 * libfrr0-debuginfo-8.4-150500.4.20.1 * frr-debugsource-8.4-150500.4.20.1 * libfrrcares0-debuginfo-8.4-150500.4.20.1 * frr-devel-8.4-150500.4.20.1 * libfrrospfapiclient0-8.4-150500.4.20.1 * libfrrcares0-8.4-150500.4.20.1 * libfrrospfapiclient0-debuginfo-8.4-150500.4.20.1 * libfrr_pb0-8.4-150500.4.20.1 * libfrrsnmp0-8.4-150500.4.20.1 * frr-debuginfo-8.4-150500.4.20.1 ## References: * https://www.suse.com/security/cve/CVE-2024-27913.html * https://www.suse.com/security/cve/CVE-2024-31948.html * https://bugzilla.suse.com/show_bug.cgi?id=1220548 * https://bugzilla.suse.com/show_bug.cgi?id=1222518

1 0

SUSE-SU-2024:1447-1: moderate: Security update for openCryptoki
by OPENSUSE-UPDATES 26 Apr '24

26 Apr '24

# Security update for openCryptoki Announcement ID: SUSE-SU-2024:1447-1 Rating: moderate References: * bsc#1219217 * jsc#PED-3360 * jsc#PED-3361 Cross-References: * CVE-2024-0914 CVSS scores: * CVE-2024-0914 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-0914 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and contains two features can now be installed. ## Description: This update for openCryptoki fixes the following issues: Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361) * EP11: Add support for FIPS-session mode * CVE-2024-0914: Updates to harden against RSA timing attacks (bsc#1219217) * Bug fixes * provide user(pkcs11) and group(pkcs11) Upgrade to version 3.22 (jsc#PED-3361) * CCA: Add support for the AES-XTS key type using CPACF protected keys * p11sak: Add support for managing certificate objects * p11sak: Add support for public sessions (no-login option) * p11sak: Add support for logging in as SO (security Officer) * p11sak: Add support for importing/exporting Edwards and Montgomery keys * p11sak: Add support for importing of RSA-PSS keys and certificates * CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different Update to version 3.21 (jsc#PED-3360, jsc#PED-3361) * EP11 and CCA: Support concurrent HSM master key changes * CCA: protected-key option * pkcsslotd: no longer run as root user and further hardening * p11sak: Add support for additional key types (DH, DSA, generic secret) * p11sak: Allow wildcards in label filter * p11sak: Allow to specify hex value for CKA_ID attribute * p11sak: Support sorting when listing keys * p11sak: New commands: set-key-attr, copy-key to modify and copy keys * p11sak: New commands: import-key, export-key to import and export keys * Remove support for --disable-locks (transactional memory) * Updates to harden against RSA timing attacks * Bug fixes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1447=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1447=1 openSUSE-SLE-15.5-2024-1447=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1447=1 ## Package List: * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openCryptoki-debuginfo-3.23.0-150500.3.3.13 * openCryptoki-debugsource-3.23.0-150500.3.3.13 * openCryptoki-3.23.0-150500.3.3.13 * Server Applications Module 15-SP5 (ppc64le s390x) * openCryptoki-64bit-debuginfo-3.23.0-150500.3.3.13 * openCryptoki-64bit-3.23.0-150500.3.3.13 * Server Applications Module 15-SP5 (ppc64le s390x x86_64) * openCryptoki-devel-3.23.0-150500.3.3.13 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * openCryptoki-devel-debuginfo-3.23.0-150500.3.3.13 * openCryptoki-devel-3.23.0-150500.3.3.13 * openCryptoki-debugsource-3.23.0-150500.3.3.13 * openCryptoki-3.23.0-150500.3.3.13 * openCryptoki-debuginfo-3.23.0-150500.3.3.13 * openSUSE Leap 15.5 (i586) * openCryptoki-32bit-debuginfo-3.23.0-150500.3.3.13 * openCryptoki-32bit-3.23.0-150500.3.3.13 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * openCryptoki-64bit-debuginfo-3.23.0-150500.3.3.13 * openCryptoki-64bit-3.23.0-150500.3.3.13 * SUSE Linux Enterprise Micro 5.5 (s390x) * openCryptoki-debuginfo-3.23.0-150500.3.3.13 * openCryptoki-debugsource-3.23.0-150500.3.3.13 * openCryptoki-3.23.0-150500.3.3.13 ## References: * https://www.suse.com/security/cve/CVE-2024-0914.html * https://bugzilla.suse.com/show_bug.cgi?id=1219217 * https://jira.suse.com/browse/PED-3360 * https://jira.suse.com/browse/PED-3361

1 0