November 2024 - openSUSE Security Announce

SUSE-SU-2024:4053-1: important: Security update for ucode-intel
by OPENSUSE-SECURITY-UPDATES 26 Nov '24

26 Nov '24

# Security update for ucode-intel Announcement ID: SUSE-SU-2024:4053-1 Release Date: 2024-11-26T03:37:12Z Rating: important References: * bsc#1233313 Cross-References: * CVE-2024-21820 * CVE-2024-21853 * CVE-2024-23918 * CVE-2024-23984 * CVE-2024-24968 CVSS scores: * CVE-2024-21820 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N * CVE-2024-21820 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N * CVE-2024-21820 ( NVD ): 8.5 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-21820 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N * CVE-2024-21853 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-21853 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-21853 ( NVD ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-21853 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23918 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2024-23918 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2024-23918 ( NVD ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-23918 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2024-23984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2024-23984 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2024-23984 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-23984 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2024-24968 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-24968 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2024-24968 ( NVD ): 5.6 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-24968 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves five vulnerabilities can now be installed. ## Description: This update for ucode-intel fixes the following issues: * Intel CPU Microcode was updated to the 20241112 release (bsc#1233313) * CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access. * CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access. * CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access. * CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access. * CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access. * Update for functional issues. New Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000036 | 00000037 | Core Gen12 | ADL | H0 | 06-97-05/07 | 00000036 | 00000037 | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000434 | 00000435 | Core Gen12 | ADL | R0 | 06-9a-04/80 | 00000434 | 00000435 | Core Gen12 | EMR-SP | A0 | 06-cf-01/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | EMR-SP | A1 | 06-cf-02/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | MTL | C0 | 06-aa-04/e6 | 0000001f | 00000020 | Core™ Ultra Processor | RPL-H/P/PX 6+8 | J0 | 06-ba-02/e0 | 00004122 | 00004123 | Core Gen13 | RPL-HX/S | C0 | 06-bf-02/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-S | H0 | 06-bf-05/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-U 2+8 | Q0 | 06-ba-03/e0 | 00004122 | 00004123 | Core Gen13 | SPR-SP | E3 | 06-8f-06/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E4/S2 | 06-8f-07/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 New Disclosures Updated in Prior Releases: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ICL-D | B0 | 06-6c-01/10 | 010002b0 | N/A | Xeon D-17xx/D-18xx, D-27xx/D-28xx | ICX-SP | Dx/M1 | 06-6a-06/87 | 0d0003e7 | N/A | Xeon Scalable Gen3 * Intel CPU Microcode was updated to the 20241029 release Update for functional issues. Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | RPL-E/HX/S | B0 | 06-b7-01/32 | 00000129 | 0000012b | Core Gen13/Gen14 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-4053=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4053=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4053=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4053=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4053=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4053=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4053=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-4053=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4053=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4053=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-4053=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-4053=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4053=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4053=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4053=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-4053=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-4053=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4053=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-4053=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-4053=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4053=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4053=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-4053=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-4053=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-4053=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-4053=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-4053=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-4053=1 ## Package List: * openSUSE Leap Micro 5.5 (x86_64) * ucode-intel-20241112-150200.50.1 * openSUSE Leap 15.5 (x86_64) * ucode-intel-20241112-150200.50.1 * openSUSE Leap 15.6 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * ucode-intel-20241112-150200.50.1 * Basesystem Module 15-SP5 (x86_64) * ucode-intel-20241112-150200.50.1 * Basesystem Module 15-SP6 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Manager Proxy 4.3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Manager Server 4.3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Enterprise Storage 7.1 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * ucode-intel-20241112-150200.50.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21820.html * https://www.suse.com/security/cve/CVE-2024-21853.html * https://www.suse.com/security/cve/CVE-2024-23918.html * https://www.suse.com/security/cve/CVE-2024-23984.html * https://www.suse.com/security/cve/CVE-2024-24968.html * https://bugzilla.suse.com/show_bug.cgi?id=1233313

1 0

SUSE-SU-2024:4054-1: moderate: Security update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop
by OPENSUSE-SECURITY-UPDATES 26 Nov '24

26 Nov '24

# Security update for javapackages-tools, xmlgraphics-batik, xmlgraphics- commons, xmlgraphics-fop Announcement ID: SUSE-SU-2024:4054-1 Release Date: 2024-11-26T05:06:51Z Rating: moderate References: * bsc#1231347 * bsc#1231428 Cross-References: * CVE-2024-28168 CVSS scores: * CVE-2024-28168 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-28168 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L * CVE-2024-28168 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop fixes the following issues: xmlgraphics-fop was updated from version 2.8 to 2.10: * Security issues fixed: * CVE-2024-28168: Fixed improper restriction of XML External Entity (XXE) reference (bsc#1231428) * Upstream changes and bugs fixed: * Version 2.10: * footnote-body ignores rl-tb writing mode * SVG tspan content is displayed out of place * Added new schema to handle pdf/a and pdfa/ua * Correct fop version at runtime * NoSuchElementException when using font with no family name * Resolve classpath for binary distribution * Switch to spotbugs * Set an automatic module name * Rename packages to avoid conflicts with modules * Resize table only for multicolumn page * Missing jars in servlet * Optimise performance of PNG with alpha using raw loader * basic-link not navigating to corresponding footnote * Added option to sign PDF * Added secure processing for XSL input * Allow sections which need security permissions to be run when AllPermission denied in caller code * Remove unused PDFStructElem * Remove space generated by fo:wrapper * Reset content length for table changing ipd * Added alt text to PDF signature * Allow change of resource level for SVG in AFP * Exclude shape not in clipping path for AFP * Only support 1 column for redo of layout without page pos only * Switch to Jakarta servlet API * NPE when list item is split alongside an ipd change * Added mandatory MODCA triplet to AFP * Redo layout for multipage columns * Added image mask option for AFP * Skip written block ipds inside float * Allow curly braces for src url * Missing content for last page with change ipd * Added warning when different pdf languages are used * Only restart line manager when there is a linebreak for blocklayout * Version 2.9: * Values in PDF Number Trees must be indirect references * Do not delete files on syntax errors using command line * Surrogate pair edge-case causes Exception * Reset character spacing * SVG text containing certain glyphs isn't rendered * Remove duplicate classes from maven classpath * Allow use of page position only on redo of layout * Failure to render multi-block itemBody alongside float * Update to PDFBox 2.0.27 * NPE if link destination is missing with accessibility * Make property cache thread safe * Font size was rounded to 0 for AFP TTF * Cannot process a SVG using mvn jars * Remove serializer jar * Allow creating a PDF 2.0 document * Text missing after page break inside table inline * IllegalArgumentException for list in a table * Table width may be too wide when layout width changes * NPE when using broken link and PDF 1.5 * Allow XMP at PDF page level * Symbol font was not being mapped to unicode * Correct font differences table for Chrome * Link against Java 8 API * Added support for font-selection-strategy=character-by-character * Merge form fields in external PDFs * Fixed test for Java 11 xmlgraphics-batik was updated from version 1.17 to 1.18: * PNG transcoder references nonexistent class * Set offset to 0 if missing in stop tag * Validate throws NPE * Fixed missing arabic characters * Animated rotate tranform ignores y-origin at exactly 270 degrees * Set an automatic module name * Ignore inkscape properties * Switch to spotbugs * Allow source and target resolution configuration xmlgraphics-commons was updated from version 2.8 to 2.10: * Fixed test for Java 11 * Allow XMP at PDF page level * Allow source resolution configuration * Added new schema to handle pdf/a and pdfa/ua * Set an automatic module name * Switch to spotbugs * Do not use a singleton for ImageImplRegistry javapackages-tools was updated from version 6.3.0 to 6.3.4: * Version 6.3.4: * A corner case when which is not present * Remove dependency on which * Simplify after the which -> type -p change * jpackage_script: Remove pointless assignment when %java_home is unset * Don't export JAVA_HOME (bsc#1231347) * Version 6.3.2: * Search for JAVACMD under JAVA_HOME only if it's set * Obsolete set_jvm and set_jvm_dirs functions * Drop unneeded _set_java_home function * Remove JAVA_HOME check from check_java_env function * Bump codecov/codecov-action from 2.0.2 to 4.6.0 * Bump actions/setup-python from 4 to 5 * Bump actions/checkout from 2 to 4 * Added custom dependabot config * Remove the test for JAVA_HOME and error if it is not set * java-functions: Remove unneeded local variables * Fixed build status shield * Version 6.3.1: * Allow missing components with abs2rel * Fixed tests with python 3.4 * Sync spec file from Fedora * Drop default JRE/JDK * Fixed the use of java-functions in scripts * Test that we don't bomb on <relativePath/> * Test variable expansion in artifactId * Interpolate properties also in the current artifact * Rewrite abs2rel in shell * Use asciidoctor instead of asciidoc * Fixed incompatibility with RPM 4.20 * Reproducible exclusions order in maven metadata * Do not bomb on <relativePath/> construct * Make maven_depmap order of aliases reproducible ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4054=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4054=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4054=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4054=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-4054=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-4054=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4054=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-4054=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-4054=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4054=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4054=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4054=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-4054=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-4054=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4054=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-4054=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-4054=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4054=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4054=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-4054=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-4054=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-4054=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * openSUSE Leap 15.5 (noarch) * xmlgraphics-batik-svgpp-1.18-150200.4.10.2 * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * xmlgraphics-batik-javadoc-1.18-150200.4.10.2 * xmlgraphics-batik-ttf2svg-1.18-150200.4.10.2 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-batik-squiggle-1.18-150200.4.10.2 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-javadoc-2.10-150200.3.10.2 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-rasterizer-1.18-150200.4.10.2 * xmlgraphics-batik-css-1.18-150200.4.10.2 * xmlgraphics-batik-demo-1.18-150200.4.10.2 * xmlgraphics-batik-slideshow-1.18-150200.4.10.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * openSUSE Leap 15.6 (noarch) * xmlgraphics-batik-svgpp-1.18-150200.4.10.2 * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * xmlgraphics-batik-javadoc-1.18-150200.4.10.2 * xmlgraphics-batik-ttf2svg-1.18-150200.4.10.2 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-batik-squiggle-1.18-150200.4.10.2 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-javadoc-2.10-150200.3.10.2 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-rasterizer-1.18-150200.4.10.2 * xmlgraphics-batik-css-1.18-150200.4.10.2 * xmlgraphics-batik-demo-1.18-150200.4.10.2 * xmlgraphics-batik-slideshow-1.18-150200.4.10.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * Basesystem Module 15-SP5 (noarch) * python3-javapackages-6.3.4-150200.3.15.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * Basesystem Module 15-SP6 (noarch) * python3-javapackages-6.3.4-150200.3.15.1 * Development Tools Module 15-SP5 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * Development Tools Module 15-SP6 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * javapackages-local-6.3.4-150200.3.15.1 * SUSE Package Hub 15 15-SP6 (noarch) * xmlgraphics-batik-css-1.18-150200.4.10.2 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Manager Proxy 4.3 (x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Manager Proxy 4.3 (noarch) * python3-javapackages-6.3.4-150200.3.15.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * python3-javapackages-6.3.4-150200.3.15.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Manager Server 4.3 (noarch) * python3-javapackages-6.3.4-150200.3.15.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Enterprise Storage 7.1 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 ## References: * https://www.suse.com/security/cve/CVE-2024-28168.html * https://bugzilla.suse.com/show_bug.cgi?id=1231347 * https://bugzilla.suse.com/show_bug.cgi?id=1231428

1 0

openSUSE-SU-2024:14523-1: moderate: libblkid-devel-2.40.2-2.1 on GA media
by meissner＠suse.com 25 Nov '24

25 Nov '24

# libblkid-devel-2.40.2-2.1 on GA media Announcement ID: openSUSE-SU-2024:14523-1 Rating: moderate Cross-References: * CVE-2024-28085 CVSS scores: * CVE-2024-28085 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the libblkid-devel-2.40.2-2.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * libblkid-devel 2.40.2-2.1 * libblkid-devel-32bit 2.40.2-2.1 * libblkid-devel-static 2.40.2-2.1 * libblkid1 2.40.2-2.1 * libblkid1-32bit 2.40.2-2.1 * libfdisk-devel 2.40.2-2.1 * libfdisk-devel-32bit 2.40.2-2.1 * libfdisk-devel-static 2.40.2-2.1 * libfdisk1 2.40.2-2.1 * libfdisk1-32bit 2.40.2-2.1 * libmount-devel 2.40.2-2.1 * libmount-devel-32bit 2.40.2-2.1 * libmount-devel-static 2.40.2-2.1 * libmount1 2.40.2-2.1 * libmount1-32bit 2.40.2-2.1 * libsmartcols-devel 2.40.2-2.1 * libsmartcols-devel-32bit 2.40.2-2.1 * libsmartcols-devel-static 2.40.2-2.1 * libsmartcols1 2.40.2-2.1 * libsmartcols1-32bit 2.40.2-2.1 * libuuid-devel 2.40.2-2.1 * libuuid-devel-32bit 2.40.2-2.1 * libuuid-devel-static 2.40.2-2.1 * libuuid1 2.40.2-2.1 * libuuid1-32bit 2.40.2-2.1 * util-linux 2.40.2-2.1 * util-linux-lang 2.40.2-2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-28085.html

1 0

openSUSE-SU-2024:14522-1: moderate: traefik-3.2.1-1.1 on GA media
by meissner＠suse.com 25 Nov '24

25 Nov '24

# traefik-3.2.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14522-1 Rating: moderate Cross-References: * CVE-2024-51744 CVSS scores: * CVE-2024-51744 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2024-51744 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the traefik-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * traefik 3.2.1-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-51744.html

1 0

openSUSE-SU-2024:14519-1: moderate: govulncheck-vulndb-0.0.20241121T195252-1.1 on GA media
by meissner＠suse.com 25 Nov '24

25 Nov '24

# govulncheck-vulndb-0.0.20241121T195252-1.1 on GA media Announcement ID: openSUSE-SU-2024:14519-1 Rating: moderate Cross-References: * CVE-2024-52280 * CVE-2024-52282 * CVE-2024-52309 Affected Products: * openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the govulncheck-vulndb-0.0.20241121T195252-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * govulncheck-vulndb 0.0.20241121T195252-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-52280.html * https://www.suse.com/security/cve/CVE-2024-52282.html * https://www.suse.com/security/cve/CVE-2024-52309.html

1 0

openSUSE-SU-2024:14520-1: moderate: opentofu-1.8.6-1.1 on GA media
by meissner＠suse.com 25 Nov '24

25 Nov '24

# opentofu-1.8.6-1.1 on GA media Announcement ID: openSUSE-SU-2024:14520-1 Rating: moderate Cross-References: * CVE-2024-34156 CVSS scores: * CVE-2024-34156 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the opentofu-1.8.6-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * opentofu 1.8.6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-34156.html

1 0

openSUSE-SU-2024:14521-1: moderate: php8-8.3.14-1.1 on GA media
by meissner＠suse.com 25 Nov '24

25 Nov '24

# php8-8.3.14-1.1 on GA media Announcement ID: openSUSE-SU-2024:14521-1 Rating: moderate Cross-References: * CVE-2024-11233 * CVE-2024-11234 * CVE-2024-11236 * CVE-2024-8929 * CVE-2024-8932 CVSS scores: * CVE-2024-11233 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2024-11233 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-11234 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-11234 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-11236 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2024-11236 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-8929 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-8932 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * openSUSE Tumbleweed An update that solves 5 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the php8-8.3.14-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * php8 8.3.14-1.1 * php8-bcmath 8.3.14-1.1 * php8-bz2 8.3.14-1.1 * php8-calendar 8.3.14-1.1 * php8-cli 8.3.14-1.1 * php8-ctype 8.3.14-1.1 * php8-curl 8.3.14-1.1 * php8-dba 8.3.14-1.1 * php8-devel 8.3.14-1.1 * php8-dom 8.3.14-1.1 * php8-enchant 8.3.14-1.1 * php8-exif 8.3.14-1.1 * php8-ffi 8.3.14-1.1 * php8-fileinfo 8.3.14-1.1 * php8-ftp 8.3.14-1.1 * php8-gd 8.3.14-1.1 * php8-gettext 8.3.14-1.1 * php8-gmp 8.3.14-1.1 * php8-iconv 8.3.14-1.1 * php8-intl 8.3.14-1.1 * php8-ldap 8.3.14-1.1 * php8-mbstring 8.3.14-1.1 * php8-mysql 8.3.14-1.1 * php8-odbc 8.3.14-1.1 * php8-opcache 8.3.14-1.1 * php8-openssl 8.3.14-1.1 * php8-pcntl 8.3.14-1.1 * php8-pdo 8.3.14-1.1 * php8-pgsql 8.3.14-1.1 * php8-phar 8.3.14-1.1 * php8-posix 8.3.14-1.1 * php8-readline 8.3.14-1.1 * php8-shmop 8.3.14-1.1 * php8-snmp 8.3.14-1.1 * php8-soap 8.3.14-1.1 * php8-sockets 8.3.14-1.1 * php8-sodium 8.3.14-1.1 * php8-sqlite 8.3.14-1.1 * php8-sysvmsg 8.3.14-1.1 * php8-sysvsem 8.3.14-1.1 * php8-sysvshm 8.3.14-1.1 * php8-tidy 8.3.14-1.1 * php8-tokenizer 8.3.14-1.1 * php8-xmlreader 8.3.14-1.1 * php8-xmlwriter 8.3.14-1.1 * php8-xsl 8.3.14-1.1 * php8-zip 8.3.14-1.1 * php8-zlib 8.3.14-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11233.html * https://www.suse.com/security/cve/CVE-2024-11234.html * https://www.suse.com/security/cve/CVE-2024-11236.html * https://www.suse.com/security/cve/CVE-2024-8929.html * https://www.suse.com/security/cve/CVE-2024-8932.html

1 0

SUSE-SU-2024:4050-1: critical: Security update for MozillaThunderbird
by OPENSUSE-SECURITY-UPDATES 25 Nov '24

25 Nov '24

# Security update for MozillaThunderbird Announcement ID: SUSE-SU-2024:4050-1 Release Date: 2024-11-25T15:37:50Z Rating: critical References: * bsc#1231879 * bsc#1233355 Cross-References: * CVE-2024-10458 * CVE-2024-10459 * CVE-2024-10460 * CVE-2024-10461 * CVE-2024-10462 * CVE-2024-10463 * CVE-2024-10464 * CVE-2024-10465 * CVE-2024-10466 * CVE-2024-10467 * CVE-2024-11159 CVSS scores: * CVE-2024-10458 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-10458 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2024-10458 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-10458 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-10459 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-10459 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-10459 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-10459 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-10460 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-10460 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-10460 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-10460 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-10461 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N * CVE-2024-10461 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-10461 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-10461 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-10462 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-10462 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-10462 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-10462 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-10463 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-10463 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-10463 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-10463 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-10464 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-10464 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-10464 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-10464 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-10465 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-10465 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2024-10465 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-10465 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-10466 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-10466 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-10466 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-10466 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-10467 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-10467 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-10467 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-10467 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-11159 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-11159 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-11159 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for MozillaThunderbird fixes the following issues: * Mozilla Thunderbird 128.4.3 * fixed: Folder corruption could cause Thunderbird to freeze and become unusable * fixed: Message corruption could be propagated when reading mbox * fixed: Folder compaction was not abandoned on shutdown * fixed: Folder compaction did not clean up on failure * fixed: Collapsed NNTP thread incorrectly indicated there were unread messages * fixed: Navigating to next unread message did not wait for all messages to be loaded * fixed: Applying column view to folder and children could break if folder error occurred * fixed: Remote content notifications were broken with encrypted messages * fixed: Updating criteria of a saved search resulted in poor search performance * fixed: Drop-downs may not work in some places * fixed: Security fixes MFSA 2024-61 (bsc#1233355) * CVE-2024-11159 Potential disclosure of plaintext in OpenPGP encrypted message * Mozilla Thunderbird 128.4.2 * changed: Increased the auto-compaction threshold to reduce frequency of compaction * fixed: New profile creation caused console errors * fixed: Repair folder could result in older messages showing wrong date and time * fixed: Recently deleted messages could become undeleted if message compaction failed * fixed: Visual and UX improvements * fixed: Clicking on an HTML button could cause Thunderbird to freeze * fixed: Messages could not be selected for dragging * fixed: Could not open attached file in a MIME encrypted message * fixed: Account creation "Setup Documentation" link was broken * fixed: Unable to generate QR codes when exporting to mobile in some cases * fixed: Operating system reauthentication was missing when exporting QR codes for mobile * fixed: Could not drag all-day events from one day to another in week view * Mozilla Thunderbird 128.4.1 * new: Add the 20 year donation appeal * Mozilla Thunderbird 128.4 * new: Export Thunderbird account settings to Thunderbird Mobile via QRCode * fixed: Unable to send an unencrypted response to an OpenPGP encrypted message * fixed: Thunderbird update did not update language pack version until another restart * fixed: Security fixes MFSA 2024-58 (bsc#1231879) * CVE-2024-10458 Permission leak via embed or object elements * CVE-2024-10459 Use-after-free in layout with accessibility * CVE-2024-10460 Confusing display of origin for external protocol handler prompt * CVE-2024-10461 XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response * CVE-2024-10462 Origin of permission prompt could be spoofed by long URL * CVE-2024-10463 Cross origin video frame leak * CVE-2024-10464 History interface could have been used to cause a Denial of Service condition in the browser * CVE-2024-10465 Clipboard "paste" button persisted across tabs * CVE-2024-10466 DOM push subscription message could hang Firefox * CVE-2024-10467 Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4050=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4050=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-4050=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4050=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4050=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-4050=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-4050=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-debuginfo-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-other-128.4.3-150200.8.188.1 * MozillaThunderbird-debugsource-128.4.3-150200.8.188.1 * MozillaThunderbird-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-common-128.4.3-150200.8.188.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-debuginfo-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-other-128.4.3-150200.8.188.1 * MozillaThunderbird-debugsource-128.4.3-150200.8.188.1 * MozillaThunderbird-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-common-128.4.3-150200.8.188.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * MozillaThunderbird-debuginfo-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-other-128.4.3-150200.8.188.1 * MozillaThunderbird-debugsource-128.4.3-150200.8.188.1 * MozillaThunderbird-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-common-128.4.3-150200.8.188.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x) * MozillaThunderbird-debuginfo-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-other-128.4.3-150200.8.188.1 * MozillaThunderbird-debugsource-128.4.3-150200.8.188.1 * MozillaThunderbird-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-common-128.4.3-150200.8.188.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * MozillaThunderbird-debuginfo-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-other-128.4.3-150200.8.188.1 * MozillaThunderbird-debugsource-128.4.3-150200.8.188.1 * MozillaThunderbird-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-common-128.4.3-150200.8.188.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * MozillaThunderbird-debuginfo-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-other-128.4.3-150200.8.188.1 * MozillaThunderbird-debugsource-128.4.3-150200.8.188.1 * MozillaThunderbird-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-common-128.4.3-150200.8.188.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * MozillaThunderbird-debuginfo-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-other-128.4.3-150200.8.188.1 * MozillaThunderbird-debugsource-128.4.3-150200.8.188.1 * MozillaThunderbird-128.4.3-150200.8.188.1 * MozillaThunderbird-translations-common-128.4.3-150200.8.188.1 ## References: * https://www.suse.com/security/cve/CVE-2024-10458.html * https://www.suse.com/security/cve/CVE-2024-10459.html * https://www.suse.com/security/cve/CVE-2024-10460.html * https://www.suse.com/security/cve/CVE-2024-10461.html * https://www.suse.com/security/cve/CVE-2024-10462.html * https://www.suse.com/security/cve/CVE-2024-10463.html * https://www.suse.com/security/cve/CVE-2024-10464.html * https://www.suse.com/security/cve/CVE-2024-10465.html * https://www.suse.com/security/cve/CVE-2024-10466.html * https://www.suse.com/security/cve/CVE-2024-10467.html * https://www.suse.com/security/cve/CVE-2024-11159.html * https://bugzilla.suse.com/show_bug.cgi?id=1231879 * https://bugzilla.suse.com/show_bug.cgi?id=1233355

1 0

openSUSE-SU-2024:0378-1: important: Security update for chromium
by opensuse-security＠opensuse.org 25 Nov '24

25 Nov '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0378-1 Rating: important References: #1233534 Cross-References: CVE-2024-11395 CVSS scores: CVE-2024-11395 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: - Chromium 131.0.6778.85 (stable released 2024-11-19) (boo#1233534) * CVE-2024-11395: Type Confusion in V8 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-378=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 x86_64): chromedriver-131.0.6778.85-bp156.2.56.1 chromium-131.0.6778.85-bp156.2.56.1 References: https://www.suse.com/security/cve/CVE-2024-11395.html https://bugzilla.suse.com/1233534

1 0

openSUSE-SU-2024:0377-1: important: Security update for chromium
by opensuse-security＠opensuse.org 25 Nov '24

25 Nov '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0377-1 Rating: important References: #1233534 Cross-References: CVE-2024-11395 CVSS scores: CVE-2024-11395 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: - Chromium 131.0.6778.85 (stable released 2024-11-19) (boo#1233534) * CVE-2024-11395: Type Confusion in V8 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-377=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-131.0.6778.85-bp155.2.144.1 chromium-131.0.6778.85-bp155.2.144.1 References: https://www.suse.com/security/cve/CVE-2024-11395.html https://bugzilla.suse.com/1233534

1 0