December 2024 - openSUSE Security Announce

openSUSE-SU-2024:14603-1: moderate: govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media
by meissner＠suse.com 20 Dec '24

20 Dec '24

# govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media Announcement ID: openSUSE-SU-2024:14603-1 Rating: moderate Cross-References: * CVE-2024-12289 * CVE-2024-28053 * CVE-2024-45338 * CVE-2024-48872 * CVE-2024-54083 * CVE-2024-54682 * CVE-2024-55885 * CVE-2024-55949 Affected Products: * openSUSE Tumbleweed An update that solves 8 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the govulncheck-vulndb-0.0.20241218T202206-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * govulncheck-vulndb 0.0.20241218T202206-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12289.html * https://www.suse.com/security/cve/CVE-2024-28053.html * https://www.suse.com/security/cve/CVE-2024-45338.html * https://www.suse.com/security/cve/CVE-2024-48872.html * https://www.suse.com/security/cve/CVE-2024-54083.html * https://www.suse.com/security/cve/CVE-2024-54682.html * https://www.suse.com/security/cve/CVE-2024-55885.html * https://www.suse.com/security/cve/CVE-2024-55949.html

1 0

SUSE-SU-2024:4396-1: moderate: Security update for python-aiohttp
by OPENSUSE-SECURITY-UPDATES 20 Dec '24

20 Dec '24

# Security update for python-aiohttp Announcement ID: SUSE-SU-2024:4396-1 Release Date: 2024-12-20T12:02:05Z Rating: moderate References: * bsc#1223098 Cross-References: * CVE-2024-27306 CVSS scores: * CVE-2024-27306 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.5 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-aiohttp fixes the following issues: * CVE-2024-27306: filenames and paths not escaped when generating index pages for static file handling. (bsc#1223098) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-4396=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-4396=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-4396=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-4396=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4396=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-4396=1 ## Package List: * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python-aiohttp-doc-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 * Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python-aiohttp-doc-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2024-27306.html * https://bugzilla.suse.com/show_bug.cgi?id=1223098

1 0

SUSE-SU-2024:4400-1: moderate: Security update for grpc
by OPENSUSE-SECURITY-UPDATES 20 Dec '24

20 Dec '24

# Security update for grpc Announcement ID: SUSE-SU-2024:4400-1 Release Date: 2024-12-20T15:27:39Z Rating: moderate References: * bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407 * CVE-2024-7246 CVSS scores: * CVE-2024-11407 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-11407 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H * CVE-2024-11407 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-7246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L * CVE-2024-7246 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for grpc fixes the following issues: * CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) * CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4400=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-4400=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * grpc-devel-debuginfo-1.60.0-150400.8.8.1 * upb-devel-1.60.0-150400.8.8.1 * grpc-devel-1.60.0-150400.8.8.1 * libgrpc1_60-debuginfo-1.60.0-150400.8.8.1 * libgrpc37-1.60.0-150400.8.8.1 * libupb37-1.60.0-150400.8.8.1 * libgrpc++1_60-1.60.0-150400.8.8.1 * grpc-debugsource-1.60.0-150400.8.8.1 * grpc-debuginfo-1.60.0-150400.8.8.1 * libupb37-debuginfo-1.60.0-150400.8.8.1 * libgrpc1_60-1.60.0-150400.8.8.1 * libgrpc37-debuginfo-1.60.0-150400.8.8.1 * libgrpc++1_60-debuginfo-1.60.0-150400.8.8.1 * openSUSE Leap 15.4 (noarch) * grpc-source-1.60.0-150400.8.8.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * grpc-debugsource-1.60.0-150400.8.8.1 * grpc-debuginfo-1.60.0-150400.8.8.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11407.html * https://www.suse.com/security/cve/CVE-2024-7246.html * https://bugzilla.suse.com/show_bug.cgi?id=1228919 * https://bugzilla.suse.com/show_bug.cgi?id=1233821

1 0

SUSE-SU-2024:4401-1: moderate: Security update for grpc
by OPENSUSE-SECURITY-UPDATES 20 Dec '24

20 Dec '24

# Security update for grpc Announcement ID: SUSE-SU-2024:4401-1 Release Date: 2024-12-20T15:28:10Z Rating: moderate References: * bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407 * CVE-2024-7246 CVSS scores: * CVE-2024-11407 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-11407 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H * CVE-2024-11407 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-7246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L * CVE-2024-7246 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for grpc fixes the following issues: * CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) * CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4401=1 openSUSE-SLE-15.6-2024-4401=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4401=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libgrpc37-debuginfo-1.60.0-150600.15.3.1 * grpc-debugsource-1.60.0-150600.15.3.1 * libgrpc++1_60-debuginfo-1.60.0-150600.15.3.1 * libgrpc1_60-debuginfo-1.60.0-150600.15.3.1 * grpc-devel-1.60.0-150600.15.3.1 * libgrpc37-1.60.0-150600.15.3.1 * libupb37-debuginfo-1.60.0-150600.15.3.1 * grpc-debuginfo-1.60.0-150600.15.3.1 * grpc-devel-debuginfo-1.60.0-150600.15.3.1 * libgrpc1_60-1.60.0-150600.15.3.1 * libupb37-1.60.0-150600.15.3.1 * upb-devel-1.60.0-150600.15.3.1 * libgrpc++1_60-1.60.0-150600.15.3.1 * openSUSE Leap 15.6 (noarch) * grpc-source-1.60.0-150600.15.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libgrpc37-debuginfo-1.60.0-150600.15.3.1 * grpc-debugsource-1.60.0-150600.15.3.1 * libgrpc++1_60-debuginfo-1.60.0-150600.15.3.1 * libgrpc1_60-debuginfo-1.60.0-150600.15.3.1 * grpc-devel-1.60.0-150600.15.3.1 * libgrpc37-1.60.0-150600.15.3.1 * libupb37-debuginfo-1.60.0-150600.15.3.1 * grpc-debuginfo-1.60.0-150600.15.3.1 * grpc-devel-debuginfo-1.60.0-150600.15.3.1 * libgrpc1_60-1.60.0-150600.15.3.1 * libupb37-1.60.0-150600.15.3.1 * libgrpc++1_60-1.60.0-150600.15.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11407.html * https://www.suse.com/security/cve/CVE-2024-7246.html * https://bugzilla.suse.com/show_bug.cgi?id=1228919 * https://bugzilla.suse.com/show_bug.cgi?id=1233821

1 0

SUSE-SU-2024:4390-1: moderate: Security update for haproxy
by OPENSUSE-SECURITY-UPDATES 20 Dec '24

20 Dec '24

# Security update for haproxy Announcement ID: SUSE-SU-2024:4390-1 Release Date: 2024-12-20T09:06:35Z Rating: moderate References: * bsc#1233973 Cross-References: * CVE-2024-53008 CVSS scores: * CVE-2024-53008 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-53008 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-53008 ( NVD ): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for haproxy fixes the following issues: * CVE-2024-53008: Fixed HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server (bsc#1233973) Other fixes: * Update to version 2.8.11 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4390=1 openSUSE-SLE-15.6-2024-4390=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2024-4390=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * haproxy-debugsource-2.8.11+git0.01c1056a4-150600.3.3.1 * haproxy-2.8.11+git0.01c1056a4-150600.3.3.1 * haproxy-debuginfo-2.8.11+git0.01c1056a4-150600.3.3.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * haproxy-debugsource-2.8.11+git0.01c1056a4-150600.3.3.1 * haproxy-2.8.11+git0.01c1056a4-150600.3.3.1 * haproxy-debuginfo-2.8.11+git0.01c1056a4-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-53008.html * https://bugzilla.suse.com/show_bug.cgi?id=1233973

1 0

SUSE-SU-2024:4392-1: important: Security update for emacs
by OPENSUSE-SECURITY-UPDATES 20 Dec '24

20 Dec '24

# Security update for emacs Announcement ID: SUSE-SU-2024:4392-1 Release Date: 2024-12-20T10:20:29Z Rating: important References: * bsc#1233894 Cross-References: * CVE-2024-53920 CVSS scores: * CVE-2024-53920 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53920 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-53920 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for emacs fixes the following issues: * CVE-2024-53920: Fixed arbitrary code execution via Lisp macro expansion (bsc#1233894) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4392=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4392=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4392=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4392=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4392=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-4392=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-4392=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4392=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4392=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4392=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4392=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4392=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4392=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-4392=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-4392=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * openSUSE Leap 15.4 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * openSUSE Leap 15.5 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * openSUSE Leap 15.6 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * Basesystem Module 15-SP5 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * Basesystem Module 15-SP6 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS (x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Manager Proxy 4.3 (x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Manager Proxy 4.3 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Manager Retail Branch Server 4.3 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Manager Server 4.3 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 ## References: * https://www.suse.com/security/cve/CVE-2024-53920.html * https://bugzilla.suse.com/show_bug.cgi?id=1233894

1 0

SUSE-SU-2024:4393-1: moderate: Security update for python-grpcio
by OPENSUSE-SECURITY-UPDATES 20 Dec '24

20 Dec '24

# Security update for python-grpcio Announcement ID: SUSE-SU-2024:4393-1 Release Date: 2024-12-20T10:24:11Z Rating: moderate References: * bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407 * CVE-2024-7246 CVSS scores: * CVE-2024-11407 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-11407 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H * CVE-2024-11407 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-7246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L * CVE-2024-7246 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.6 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-grpcio fixes the following issues: * CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) * CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4393=1 openSUSE-SLE-15.6-2024-4393=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-4393=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python311-grpcio-1.60.1-150600.16.8.1 * python311-grpcio-debuginfo-1.60.1-150600.16.8.1 * python-grpcio-debugsource-1.60.1-150600.16.8.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-grpcio-1.60.1-150600.16.8.1 * python311-grpcio-debuginfo-1.60.1-150600.16.8.1 * python-grpcio-debugsource-1.60.1-150600.16.8.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11407.html * https://www.suse.com/security/cve/CVE-2024-7246.html * https://bugzilla.suse.com/show_bug.cgi?id=1228919 * https://bugzilla.suse.com/show_bug.cgi?id=1233821

1 0

SUSE-SU-2024:4386-1: moderate: Security update for avahi
by OPENSUSE-SECURITY-UPDATES 19 Dec '24

19 Dec '24

# Security update for avahi Announcement ID: SUSE-SU-2024:4386-1 Release Date: 2024-12-19T14:04:42Z Rating: moderate References: * bsc#1226586 * bsc#1233420 Cross-References: * CVE-2024-52616 CVSS scores: * CVE-2024-52616 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-52616 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-52616 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for avahi fixes the following issues: * CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420) Other fixes: \- no longer supply bogus services to callbacks (bsc#1226586). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4386=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-4386=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4386=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4386=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4386=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4386=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4386=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-4386=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4386=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-4386=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-4386=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-utils-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * libhowl0-0.8-150400.7.20.1 * avahi-utils-gtk-debuginfo-0.8-150400.7.20.1 * avahi-autoipd-debuginfo-0.8-150400.7.20.1 * libavahi-gobject-devel-0.8-150400.7.20.1 * avahi-qt5-debugsource-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libdns_sd-debuginfo-0.8-150400.7.20.1 * libavahi-glib-devel-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-debuginfo-0.8-150400.7.20.1 * libdns_sd-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-0.8-150400.7.20.1 * libhowl0-debuginfo-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-0.8-150400.7.20.1 * libavahi-qt5-devel-0.8-150400.7.20.1 * libavahi-gobject0-debuginfo-0.8-150400.7.20.1 * libavahi-libevent1-0.8-150400.7.20.1 * libavahi-devel-0.8-150400.7.20.1 * avahi-utils-debuginfo-0.8-150400.7.20.1 * libavahi-gobject0-0.8-150400.7.20.1 * avahi-autoipd-0.8-150400.7.20.1 * avahi-compat-howl-devel-0.8-150400.7.20.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.20.1 * avahi-utils-gtk-0.8-150400.7.20.1 * avahi-glib2-debugsource-0.8-150400.7.20.1 * python3-avahi-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * python3-avahi-gtk-0.8-150400.7.20.1 * libavahi-qt5-1-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-libevent1-debuginfo-0.8-150400.7.20.1 * libavahi-qt5-1-debuginfo-0.8-150400.7.20.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * openSUSE Leap 15.4 (x86_64) * libavahi-glib1-32bit-0.8-150400.7.20.1 * libdns_sd-32bit-0.8-150400.7.20.1 * libavahi-glib1-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.20.1 * avahi-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-common3-32bit-0.8-150400.7.20.1 * libavahi-client3-32bit-0.8-150400.7.20.1 * libdns_sd-32bit-debuginfo-0.8-150400.7.20.1 * openSUSE Leap 15.4 (noarch) * avahi-lang-0.8-150400.7.20.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libavahi-common3-64bit-debuginfo-0.8-150400.7.20.1 * libavahi-client3-64bit-0.8-150400.7.20.1 * libavahi-client3-64bit-debuginfo-0.8-150400.7.20.1 * libdns_sd-64bit-0.8-150400.7.20.1 * libavahi-common3-64bit-0.8-150400.7.20.1 * libavahi-glib1-64bit-debuginfo-0.8-150400.7.20.1 * libdns_sd-64bit-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-64bit-0.8-150400.7.20.1 * avahi-64bit-debuginfo-0.8-150400.7.20.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-utils-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-utils-gtk-debuginfo-0.8-150400.7.20.1 * libhowl0-0.8-150400.7.20.1 * avahi-autoipd-debuginfo-0.8-150400.7.20.1 * avahi-qt5-debugsource-0.8-150400.7.20.1 * libavahi-gobject-devel-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-glib-devel-0.8-150400.7.20.1 * libdns_sd-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-debuginfo-0.8-150400.7.20.1 * libdns_sd-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-0.8-150400.7.20.1 * libhowl0-debuginfo-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-0.8-150400.7.20.1 * libavahi-qt5-devel-0.8-150400.7.20.1 * libavahi-gobject0-debuginfo-0.8-150400.7.20.1 * libavahi-libevent1-0.8-150400.7.20.1 * libavahi-devel-0.8-150400.7.20.1 * avahi-utils-debuginfo-0.8-150400.7.20.1 * libavahi-gobject0-0.8-150400.7.20.1 * avahi-autoipd-0.8-150400.7.20.1 * avahi-compat-howl-devel-0.8-150400.7.20.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.20.1 * avahi-utils-gtk-0.8-150400.7.20.1 * avahi-glib2-debugsource-0.8-150400.7.20.1 * python3-avahi-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * python3-avahi-gtk-0.8-150400.7.20.1 * libavahi-qt5-1-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-libevent1-debuginfo-0.8-150400.7.20.1 * libavahi-qt5-1-debuginfo-0.8-150400.7.20.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * openSUSE Leap 15.5 (x86_64) * libavahi-glib1-32bit-0.8-150400.7.20.1 * libdns_sd-32bit-0.8-150400.7.20.1 * libavahi-glib1-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.20.1 * avahi-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-common3-32bit-0.8-150400.7.20.1 * libavahi-client3-32bit-0.8-150400.7.20.1 * libdns_sd-32bit-debuginfo-0.8-150400.7.20.1 * openSUSE Leap 15.5 (noarch) * avahi-lang-0.8-150400.7.20.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-utils-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * libhowl0-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-glib-devel-0.8-150400.7.20.1 * libdns_sd-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-debuginfo-0.8-150400.7.20.1 * libdns_sd-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-0.8-150400.7.20.1 * libhowl0-debuginfo-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-0.8-150400.7.20.1 * libavahi-gobject0-debuginfo-0.8-150400.7.20.1 * libavahi-libevent1-0.8-150400.7.20.1 * libavahi-devel-0.8-150400.7.20.1 * avahi-utils-debuginfo-0.8-150400.7.20.1 * libavahi-gobject0-0.8-150400.7.20.1 * avahi-compat-howl-devel-0.8-150400.7.20.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.20.1 * avahi-glib2-debugsource-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-libevent1-debuginfo-0.8-150400.7.20.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * Basesystem Module 15-SP5 (noarch) * avahi-lang-0.8-150400.7.20.1 * Basesystem Module 15-SP5 (x86_64) * libavahi-common3-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.20.1 * avahi-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-common3-32bit-0.8-150400.7.20.1 * libavahi-client3-32bit-0.8-150400.7.20.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * avahi-debuginfo-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * avahi-utils-gtk-debuginfo-0.8-150400.7.20.1 * avahi-autoipd-debuginfo-0.8-150400.7.20.1 * avahi-autoipd-0.8-150400.7.20.1 * libavahi-gobject-devel-0.8-150400.7.20.1 * avahi-utils-gtk-0.8-150400.7.20.1 * avahi-glib2-debugsource-0.8-150400.7.20.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-avahi-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 ## References: * https://www.suse.com/security/cve/CVE-2024-52616.html * https://bugzilla.suse.com/show_bug.cgi?id=1226586 * https://bugzilla.suse.com/show_bug.cgi?id=1233420

1 0

openSUSE-SU-2024:14602-1: moderate: tailscale-1.78.3-2.1 on GA media
by meissner＠suse.com 19 Dec '24

19 Dec '24

# tailscale-1.78.3-2.1 on GA media Announcement ID: openSUSE-SU-2024:14602-1 Rating: moderate Cross-References: * CVE-2024-45337 CVSS scores: * CVE-2024-45337 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the tailscale-1.78.3-2.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * tailscale 1.78.3-2.1 * tailscale-bash-completion 1.78.3-2.1 * tailscale-fish-completion 1.78.3-2.1 * tailscale-zsh-completion 1.78.3-2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-45337.html

1 0

openSUSE-SU-2024:14600-1: moderate: libmozjs-128-0-128.5.1-3.1 on GA media
by meissner＠suse.com 19 Dec '24

19 Dec '24

# libmozjs-128-0-128.5.1-3.1 on GA media Announcement ID: openSUSE-SU-2024:14600-1 Rating: moderate Cross-References: * CVE-2024-11403 * CVE-2024-11498 CVSS scores: * CVE-2024-11403 ( SUSE ): 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2024-11498 ( SUSE ): 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the libmozjs-128-0-128.5.1-3.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * libmozjs-128-0 128.5.1-3.1 * mozjs128 128.5.1-3.1 * mozjs128-devel 128.5.1-3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11403.html * https://www.suse.com/security/cve/CVE-2024-11498.html

1 0