- openSUSE Security Announce

SUSE-SU-2024:3980-1: moderate: Security update for xen
by OPENSUSE-SECURITY-UPDATES 12 Nov '24

12 Nov '24

# Security update for xen Announcement ID: SUSE-SU-2024:3980-1 Release Date: 2024-11-12T16:14:14Z Rating: moderate References: * bsc#1027519 * bsc#1230366 * bsc#1232542 * bsc#1232622 * bsc#1232624 Cross-References: * CVE-2024-45817 * CVE-2024-45818 * CVE-2024-45819 CVSS scores: * CVE-2024-45817 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-45817 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45818 ( SUSE ): 8.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2024-45818 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2024-45819 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N * CVE-2024-45819 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities and has two security fixes can now be installed. ## Description: This update for xen fixes the following issues: Security issues fixed: * CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling (bsc#1232622) * CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables (bsc#1232624) * CVE-2024-45817: xen: x86: Deadlock in vlapic_error() (bsc#1230366) Non-security issues fixed: * Removed usage of net-tools-deprecated from supportconfig plugin (bsc#1232542) * Upstream bug fixes (bsc#1027519) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3980=1 openSUSE-SLE-15.5-2024-3980=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3980=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3980=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3980=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-3980=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64 i586) * xen-tools-domU-4.17.5_06-150500.3.42.1 * xen-tools-domU-debuginfo-4.17.5_06-150500.3.42.1 * xen-devel-4.17.5_06-150500.3.42.1 * xen-debugsource-4.17.5_06-150500.3.42.1 * xen-libs-4.17.5_06-150500.3.42.1 * xen-libs-debuginfo-4.17.5_06-150500.3.42.1 * openSUSE Leap 15.5 (x86_64) * xen-libs-32bit-4.17.5_06-150500.3.42.1 * xen-libs-32bit-debuginfo-4.17.5_06-150500.3.42.1 * openSUSE Leap 15.5 (aarch64 x86_64) * xen-tools-debuginfo-4.17.5_06-150500.3.42.1 * xen-4.17.5_06-150500.3.42.1 * xen-doc-html-4.17.5_06-150500.3.42.1 * xen-tools-4.17.5_06-150500.3.42.1 * openSUSE Leap 15.5 (noarch) * xen-tools-xendomains-wait-disk-4.17.5_06-150500.3.42.1 * openSUSE Leap 15.5 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.17.5_06-150500.3.42.1 * xen-libs-64bit-4.17.5_06-150500.3.42.1 * openSUSE Leap Micro 5.5 (x86_64) * xen-debugsource-4.17.5_06-150500.3.42.1 * xen-libs-4.17.5_06-150500.3.42.1 * xen-libs-debuginfo-4.17.5_06-150500.3.42.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * xen-debugsource-4.17.5_06-150500.3.42.1 * xen-libs-4.17.5_06-150500.3.42.1 * xen-libs-debuginfo-4.17.5_06-150500.3.42.1 * Basesystem Module 15-SP5 (x86_64) * xen-tools-domU-4.17.5_06-150500.3.42.1 * xen-libs-4.17.5_06-150500.3.42.1 * xen-debugsource-4.17.5_06-150500.3.42.1 * xen-tools-domU-debuginfo-4.17.5_06-150500.3.42.1 * xen-libs-debuginfo-4.17.5_06-150500.3.42.1 * Server Applications Module 15-SP5 (x86_64) * xen-4.17.5_06-150500.3.42.1 * xen-tools-debuginfo-4.17.5_06-150500.3.42.1 * xen-devel-4.17.5_06-150500.3.42.1 * xen-debugsource-4.17.5_06-150500.3.42.1 * xen-tools-4.17.5_06-150500.3.42.1 * Server Applications Module 15-SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.5_06-150500.3.42.1 ## References: * https://www.suse.com/security/cve/CVE-2024-45817.html * https://www.suse.com/security/cve/CVE-2024-45818.html * https://www.suse.com/security/cve/CVE-2024-45819.html * https://bugzilla.suse.com/show_bug.cgi?id=1027519 * https://bugzilla.suse.com/show_bug.cgi?id=1230366 * https://bugzilla.suse.com/show_bug.cgi?id=1232542 * https://bugzilla.suse.com/show_bug.cgi?id=1232622 * https://bugzilla.suse.com/show_bug.cgi?id=1232624

1 0

openSUSE-SU-2024:0366-1: moderate: Security update for python-PyPDF2
by opensuse-security＠opensuse.org 12 Nov '24

12 Nov '24

openSUSE Security Update: Security update for python-PyPDF2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0366-1 Rating: moderate References: #1198588 Cross-References: CVE-2022-24859 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-PyPDF2 fixes the following issues: - CVE-2022-24859: Fixed infinite loop vulnerability (boo#1198588) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-366=1 Package List: - openSUSE Backports SLE-15-SP6 (noarch): python3-PyPDF2-1.26.0-bp156.4.3.1 References: https://www.suse.com/security/cve/CVE-2022-24859.html https://bugzilla.suse.com/1198588

1 0

openSUSE-SU-2024:14483-1: moderate: MozillaFirefox-132.0.1-1.1 on GA media
by meissner＠suse.com 12 Nov '24

12 Nov '24

# MozillaFirefox-132.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14483-1 Rating: moderate Cross-References: * CVE-2024-10458 * CVE-2024-10459 * CVE-2024-10460 * CVE-2024-10461 * CVE-2024-10462 * CVE-2024-10463 * CVE-2024-10464 * CVE-2024-10465 * CVE-2024-10466 * CVE-2024-10467 * CVE-2024-10468 CVSS scores: * CVE-2024-10458 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2024-10458 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-10459 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-10459 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-10460 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-10460 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-10461 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-10461 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N * CVE-2024-10462 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-10462 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-10463 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-10463 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-10464 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-10464 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-10465 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2024-10465 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-10466 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-10466 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-10467 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-10467 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-10468 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2024-10468 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves 11 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the MozillaFirefox-132.0.1-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * MozillaFirefox 132.0.1-1.1 * MozillaFirefox-branding-upstream 132.0.1-1.1 * MozillaFirefox-devel 132.0.1-1.1 * MozillaFirefox-translations-common 132.0.1-1.1 * MozillaFirefox-translations-other 132.0.1-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-10458.html * https://www.suse.com/security/cve/CVE-2024-10459.html * https://www.suse.com/security/cve/CVE-2024-10460.html * https://www.suse.com/security/cve/CVE-2024-10461.html * https://www.suse.com/security/cve/CVE-2024-10462.html * https://www.suse.com/security/cve/CVE-2024-10463.html * https://www.suse.com/security/cve/CVE-2024-10464.html * https://www.suse.com/security/cve/CVE-2024-10465.html * https://www.suse.com/security/cve/CVE-2024-10466.html * https://www.suse.com/security/cve/CVE-2024-10467.html * https://www.suse.com/security/cve/CVE-2024-10468.html

1 0

SUSE-SU-2024:3977-1: important: Security update for xen
by OPENSUSE-SECURITY-UPDATES 12 Nov '24

12 Nov '24

# Security update for xen Announcement ID: SUSE-SU-2024:3977-1 Release Date: 2024-11-12T12:19:03Z Rating: important References: * bsc#1232542 * bsc#1232622 * bsc#1232624 Cross-References: * CVE-2024-45818 * CVE-2024-45819 CVSS scores: * CVE-2024-45818 ( SUSE ): 8.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2024-45818 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2024-45819 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N * CVE-2024-45819 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2024-45818: Fixed deadlock in x86 HVM standard VGA handling (XSA-463) (bsc#1232622). * CVE-2024-45819: Fixed libxl data leaks to PVH guests via ACPI tables (XSA-464) (bsc#1232624). Bug fixes: * Remove usage of net-tools-deprecated from supportconfig plugin (bsc#1232542). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3977=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3977=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3977=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3977=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3977=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-3977=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3977=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3977=1 ## Package List: * openSUSE Leap 15.3 (aarch64 x86_64 i586) * xen-debugsource-4.14.6_22-150300.3.84.1 * xen-devel-4.14.6_22-150300.3.84.1 * xen-tools-domU-4.14.6_22-150300.3.84.1 * xen-libs-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-4.14.6_22-150300.3.84.1 * xen-tools-domU-debuginfo-4.14.6_22-150300.3.84.1 * openSUSE Leap 15.3 (x86_64) * xen-libs-32bit-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-32bit-4.14.6_22-150300.3.84.1 * openSUSE Leap 15.3 (aarch64 x86_64) * xen-doc-html-4.14.6_22-150300.3.84.1 * xen-tools-4.14.6_22-150300.3.84.1 * xen-4.14.6_22-150300.3.84.1 * xen-tools-debuginfo-4.14.6_22-150300.3.84.1 * openSUSE Leap 15.3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_22-150300.3.84.1 * openSUSE Leap 15.3 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-64bit-4.14.6_22-150300.3.84.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * xen-4.14.6_22-150300.3.84.1 * xen-debugsource-4.14.6_22-150300.3.84.1 * xen-devel-4.14.6_22-150300.3.84.1 * xen-tools-domU-4.14.6_22-150300.3.84.1 * xen-tools-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-4.14.6_22-150300.3.84.1 * xen-tools-4.14.6_22-150300.3.84.1 * xen-tools-domU-debuginfo-4.14.6_22-150300.3.84.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_22-150300.3.84.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * xen-4.14.6_22-150300.3.84.1 * xen-debugsource-4.14.6_22-150300.3.84.1 * xen-devel-4.14.6_22-150300.3.84.1 * xen-tools-domU-4.14.6_22-150300.3.84.1 * xen-tools-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-4.14.6_22-150300.3.84.1 * xen-tools-4.14.6_22-150300.3.84.1 * xen-tools-domU-debuginfo-4.14.6_22-150300.3.84.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_22-150300.3.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * xen-4.14.6_22-150300.3.84.1 * xen-debugsource-4.14.6_22-150300.3.84.1 * xen-devel-4.14.6_22-150300.3.84.1 * xen-tools-domU-4.14.6_22-150300.3.84.1 * xen-tools-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-4.14.6_22-150300.3.84.1 * xen-tools-4.14.6_22-150300.3.84.1 * xen-tools-domU-debuginfo-4.14.6_22-150300.3.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_22-150300.3.84.1 * SUSE Enterprise Storage 7.1 (x86_64) * xen-4.14.6_22-150300.3.84.1 * xen-debugsource-4.14.6_22-150300.3.84.1 * xen-devel-4.14.6_22-150300.3.84.1 * xen-tools-domU-4.14.6_22-150300.3.84.1 * xen-tools-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-4.14.6_22-150300.3.84.1 * xen-tools-4.14.6_22-150300.3.84.1 * xen-tools-domU-debuginfo-4.14.6_22-150300.3.84.1 * SUSE Enterprise Storage 7.1 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_22-150300.3.84.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * xen-debugsource-4.14.6_22-150300.3.84.1 * xen-libs-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-4.14.6_22-150300.3.84.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * xen-debugsource-4.14.6_22-150300.3.84.1 * xen-libs-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-4.14.6_22-150300.3.84.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * xen-debugsource-4.14.6_22-150300.3.84.1 * xen-libs-debuginfo-4.14.6_22-150300.3.84.1 * xen-libs-4.14.6_22-150300.3.84.1 ## References: * https://www.suse.com/security/cve/CVE-2024-45818.html * https://www.suse.com/security/cve/CVE-2024-45819.html * https://bugzilla.suse.com/show_bug.cgi?id=1232542 * https://bugzilla.suse.com/show_bug.cgi?id=1232622 * https://bugzilla.suse.com/show_bug.cgi?id=1232624

1 0

SUSE-SU-2024:3961-1: important: Security update for apache2
by OPENSUSE-SECURITY-UPDATES 11 Nov '24

11 Nov '24

# Security update for apache2 Announcement ID: SUSE-SU-2024:3961-1 Release Date: 2024-11-09T16:37:56Z Rating: important References: * bsc#1216423 Cross-References: * CVE-2023-45802 CVSS scores: * CVE-2023-45802 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-45802 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for apache2 fixes the following issues: * CVE-2023-45802: HTTP/2 stream memory not reclaimed right away on RST (bsc#1216423). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3961=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3961=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3961=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3961=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-3961=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-3961=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3961=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3961=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3961=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3961=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3961=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3961=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3961=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3961=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * apache2-devel-2.4.51-150400.6.40.1 * apache2-utils-debuginfo-2.4.51-150400.6.40.1 * apache2-example-pages-2.4.51-150400.6.40.1 * apache2-worker-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-2.4.51-150400.6.40.1 * apache2-utils-2.4.51-150400.6.40.1 * apache2-event-2.4.51-150400.6.40.1 * apache2-prefork-2.4.51-150400.6.40.1 * apache2-event-debuginfo-2.4.51-150400.6.40.1 * apache2-worker-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * apache2-prefork-debuginfo-2.4.51-150400.6.40.1 * openSUSE Leap 15.4 (noarch) * apache2-doc-2.4.51-150400.6.40.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-devel-2.4.51-150400.6.40.1 * apache2-utils-debuginfo-2.4.51-150400.6.40.1 * apache2-example-pages-2.4.51-150400.6.40.1 * apache2-worker-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-2.4.51-150400.6.40.1 * apache2-utils-2.4.51-150400.6.40.1 * apache2-event-2.4.51-150400.6.40.1 * apache2-prefork-2.4.51-150400.6.40.1 * apache2-event-debuginfo-2.4.51-150400.6.40.1 * apache2-worker-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * apache2-prefork-debuginfo-2.4.51-150400.6.40.1 * openSUSE Leap 15.5 (noarch) * apache2-doc-2.4.51-150400.6.40.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-utils-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-2.4.51-150400.6.40.1 * apache2-utils-2.4.51-150400.6.40.1 * apache2-prefork-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * apache2-prefork-debuginfo-2.4.51-150400.6.40.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-event-debuginfo-2.4.51-150400.6.40.1 * apache2-event-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-devel-2.4.51-150400.6.40.1 * apache2-worker-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-worker-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * Server Applications Module 15-SP5 (noarch) * apache2-doc-2.4.51-150400.6.40.1 * Server Applications Module 15-SP6 (noarch) * apache2-doc-2.4.51-150400.6.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * apache2-devel-2.4.51-150400.6.40.1 * apache2-utils-debuginfo-2.4.51-150400.6.40.1 * apache2-worker-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-2.4.51-150400.6.40.1 * apache2-utils-2.4.51-150400.6.40.1 * apache2-prefork-2.4.51-150400.6.40.1 * apache2-worker-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * apache2-prefork-debuginfo-2.4.51-150400.6.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * apache2-devel-2.4.51-150400.6.40.1 * apache2-utils-debuginfo-2.4.51-150400.6.40.1 * apache2-worker-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-2.4.51-150400.6.40.1 * apache2-utils-2.4.51-150400.6.40.1 * apache2-prefork-2.4.51-150400.6.40.1 * apache2-worker-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * apache2-prefork-debuginfo-2.4.51-150400.6.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.40.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * apache2-utils-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-2.4.51-150400.6.40.1 * apache2-utils-2.4.51-150400.6.40.1 * apache2-prefork-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * apache2-prefork-debuginfo-2.4.51-150400.6.40.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-devel-2.4.51-150400.6.40.1 * apache2-utils-debuginfo-2.4.51-150400.6.40.1 * apache2-worker-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-2.4.51-150400.6.40.1 * apache2-utils-2.4.51-150400.6.40.1 * apache2-prefork-2.4.51-150400.6.40.1 * apache2-worker-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * apache2-prefork-debuginfo-2.4.51-150400.6.40.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * apache2-doc-2.4.51-150400.6.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * apache2-devel-2.4.51-150400.6.40.1 * apache2-utils-debuginfo-2.4.51-150400.6.40.1 * apache2-worker-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-2.4.51-150400.6.40.1 * apache2-utils-2.4.51-150400.6.40.1 * apache2-prefork-2.4.51-150400.6.40.1 * apache2-worker-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * apache2-prefork-debuginfo-2.4.51-150400.6.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.40.1 * SUSE Manager Proxy 4.3 (x86_64) * apache2-devel-2.4.51-150400.6.40.1 * apache2-utils-debuginfo-2.4.51-150400.6.40.1 * apache2-worker-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-2.4.51-150400.6.40.1 * apache2-utils-2.4.51-150400.6.40.1 * apache2-prefork-2.4.51-150400.6.40.1 * apache2-worker-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * apache2-prefork-debuginfo-2.4.51-150400.6.40.1 * SUSE Manager Proxy 4.3 (noarch) * apache2-doc-2.4.51-150400.6.40.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * apache2-devel-2.4.51-150400.6.40.1 * apache2-utils-debuginfo-2.4.51-150400.6.40.1 * apache2-worker-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-2.4.51-150400.6.40.1 * apache2-utils-2.4.51-150400.6.40.1 * apache2-prefork-2.4.51-150400.6.40.1 * apache2-worker-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * apache2-prefork-debuginfo-2.4.51-150400.6.40.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * apache2-doc-2.4.51-150400.6.40.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * apache2-devel-2.4.51-150400.6.40.1 * apache2-utils-debuginfo-2.4.51-150400.6.40.1 * apache2-worker-debuginfo-2.4.51-150400.6.40.1 * apache2-debugsource-2.4.51-150400.6.40.1 * apache2-2.4.51-150400.6.40.1 * apache2-utils-2.4.51-150400.6.40.1 * apache2-prefork-2.4.51-150400.6.40.1 * apache2-worker-2.4.51-150400.6.40.1 * apache2-debuginfo-2.4.51-150400.6.40.1 * apache2-prefork-debuginfo-2.4.51-150400.6.40.1 * SUSE Manager Server 4.3 (noarch) * apache2-doc-2.4.51-150400.6.40.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45802.html * https://bugzilla.suse.com/show_bug.cgi?id=1216423

1 0

SUSE-SU-2024:3963-1: moderate: Security update for java-17-openjdk
by OPENSUSE-SECURITY-UPDATES 11 Nov '24

11 Nov '24

# Security update for java-17-openjdk Announcement ID: SUSE-SU-2024:3963-1 Release Date: 2024-11-09T16:39:43Z Rating: moderate References: * bsc#1231702 * bsc#1231711 * bsc#1231716 * bsc#1231719 Cross-References: * CVE-2024-21208 * CVE-2024-21210 * CVE-2024-21217 * CVE-2024-21235 CVSS scores: * CVE-2024-21208 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-21208 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21208 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21210 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-21210 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-21210 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-21217 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-21217 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21217 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21235 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-21235 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-21235 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Legacy Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for java-17-openjdk fixes the following issues: * Update to upstream tag jdk-17.0.13+11 (October 2024 CPU) * Security fixes * JDK-8307383: Enhance DTLS connections * JDK-8290367, JDK-8332643: Update default value and extend the scope of com.sun.jndi.ldap.object.trustSerialData system property * JDK-8328286, CVE-2024-21208, bsc#1231702: Enhance HTTP client * JDK-8328544, CVE-2024-21210, bsc#1231711: Improve handling of vectorization * JDK-8328726: Better Kerberos support * JDK-8331446, CVE-2024-21217, bsc#1231716: Improve deserialization support * JDK-8332644, CVE-2024-21235, bsc#1231719: Improve graph optimizations * JDK-8335713: Enhance vectorization analysis * Other changes * JDK-7022325: TEST_BUG: test/java/util/zip/ZipFile/ /ReadLongZipFileName.java leaks files if it fails * JDK-7026262: HttpServer: improve handling of finished HTTP exchanges * JDK-7124313: [macosx] Swing Popups should overlap taskbar * JDK-8005885: enhance PrintCodeCache to print more data * JDK-8051959: Add thread and timestamp options to java.security.debug system property * JDK-8170817: G1: Returning MinTLABSize from unsafe_max_tlab_alloc causes TLAB flapping * JDK-8183227: read/write APIs in class os shall return ssize_t * JDK-8193547: Regression automated test '/open/test/jdk/java/ /awt/Toolkit/DesktopProperties/rfe4758438.java' fails * JDK-8222884: ConcurrentClassDescLookup.java times out intermittently * JDK-8233725: ProcessTools.startProcess() has output issues when using an OutputAnalyzer at the same time * JDK-8238169: BasicDirectoryModel getDirectories and DoChangeContents.run can deadlock * JDK-8241550: [macOS] SSLSocketImpl/ReuseAddr.java failed due to "BindException: Address already in use" * JDK-8255898: Test java/awt/FileDialog/FilenameFilterTest/ /FilenameFilterTest.java fails on Mac OS * JDK-8256291: RunThese30M fails "assert(_class_unload ? true : ((((JfrTraceIdBits::load(class_loader_klass)) & ((1 << 4) << 8)) != 0))) failed: invariant" * JDK-8257540: javax/swing/JFileChooser/8041694/bug8041694.java failed with "RuntimeException: The selected directory name is not the expected 'd ' but 'D '." * JDK-8259866: two java.util tests failed with "IOException: There is not enough space on the disk" * JDK-8260633: [macos] java/awt/dnd/MouseEventAfterStartDragTest/ /MouseEventAfterStartDragTest.html test failed * JDK-8261433: Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit * JDK-8263031: HttpClient throws Exception if it receives a Push Promise that is too large * JDK-8265919: RunThese30M fails "assert((!(((((JfrTraceIdBits::load(value)) & ((1 << 4) << 8)) != 0))))) failed: invariant" * JDK-8269428: java/util/concurrent/ConcurrentHashMap/ /ToArray.java timed out * JDK-8269657: Test java/nio/channels/DatagramChannel/ /Loopback.java failed: Unexpected message * JDK-8272232: javax/swing/JTable/4275046/bug4275046.java failed with "Expected value in the cell: 'rededited' but found 'redEDITED'." * JDK-8272558: IR Test Framework README misses some flags * JDK-8272777: Clean up remaining AccessController warnings in test library * JDK-8273216: JCMD does not work across container boundaries with Podman * JDK-8273430: Suspicious duplicate condition in java.util.regex.Grapheme#isExcludedSpacingMark * JDK-8273541: Cleaner Thread creates with normal priority instead of MAX_PRIORITY - 2 * JDK-8275851: Deproblemlist open/test/jdk/javax/swing/ /JComponent/6683775/bug6683775.java * JDK-8276660: Scalability bottleneck in java.security.Provider.getService() * JDK-8277042: add test for 8276036 to compiler/codecache * JDK-8279068: IGV: Update to work with JDK 16 and 17 * JDK-8279164: Disable TLS_ECDH_* cipher suites * JDK-8279222: Incorrect legacyMap.get in java.security.Provider after JDK-8276660 * JDK-8279337: The MToolkit is still referenced in a few places * JDK-8279641: Create manual JTReg tests for Swing accessibility * JDK-8279878: java/awt/font/JNICheck/JNICheck.sh test fails on Ubuntu 21.10 * JDK-8280034: ProblemList jdk/jfr/api/consumer/recordingstream/ /TestOnEvent.java on linux-x64 * JDK-8280392: java/awt/Focus/NonFocusableWindowTest/ /NonfocusableOwnerTest.java failed with "RuntimeException: Test failed." * JDK-8280970: Cleanup dead code in java.security.Provider * JDK-8280982: [Wayland] [XWayland] java.awt.Robot taking screenshots * JDK-8280988: [XWayland] Click on title to request focus test failures * JDK-8280990: [XWayland] XTest emulated mouse click does not bring window to front * JDK-8280993: [XWayland] Popup is not closed on click outside of area controlled by XWayland * JDK-8280994: [XWayland] Drag and Drop does not work in java -> wayland app direction * JDK-8281944: JavaDoc throws java.lang.IllegalStateException: ERRONEOUS * JDK-8282354: Remove dependancy of TestHttpServer, HttpTransaction, HttpCallback from open/test/jdk/ tests * JDK-8282526: Default icon is not painted properly * JDK-8283728: jdk.hotspot.agent: Wrong location for RISCV64ThreadContext.java * JDK-8284316: Support accessibility ManualTestFrame.java for non SwingSet tests * JDK-8284585: PushPromiseContinuation test fails intermittently in timeout * JDK-8285497: Add system property for Java SE specification maintenance version * JDK-8288568: Reduce runtime of java.security microbenchmarks * JDK-8289182: NMT: MemTracker::baseline should return void * JDK-8290966: G1: Record number of PLAB filled and number of direct allocations * JDK-8291760: PipelineLeaksFD.java still fails: More or fewer pipes than expected * JDK-8292044: HttpClient doesn't handle 102 or 103 properly * JDK-8292739: Invalid legacy entries may be returned by Provider.getServices() call * JDK-8292948: JEditorPane ignores font-size styles in external linked css-file * JDK-8293862: javax/swing/JFileChooser/8046391/bug8046391.java failed with 'Cannot invoke "java.awt.Image.getWidth(java.awt.image.ImageObserver)" because "retVal" is null' * JDK-8293872: Make runtime/Thread/ThreadCountLimit.java more robust * JDK-8294148: Support JSplitPane for instructions and test UI * JDK-8294691: dynamicArchive/RelativePath.java is running other test case * JDK-8294994: Update Jarsigner and Keytool i18n tests to validate i18n compliance * JDK-8295111: dpkg appears to have problems resolving symbolically linked native libraries * JDK-8296410: HttpClient throws java.io.IOException: no statuscode in response for HTTP2 * JDK-8296812: sprintf is deprecated in Xcode 14 * JDK-8297878: KEM: Implementation * JDK-8298381: Improve handling of session tickets for multiple SSLContexts * JDK-8298596: vmTestbase/nsk/sysdict/vm/stress/chain/chain008/ /chain008.java fails with "NoClassDefFoundError: Could not initialize class java.util.concurrent.ThreadLocalRandom" * JDK-8298809: Clean up vm/compiler/InterfaceCalls JMH * JDK-8299058: AssertionError in sun.net.httpserver.ServerImpl when connection is idle * JDK-8299254: Support dealing with standard assert macro * JDK-8299378: sprintf is deprecated in Xcode 14 * JDK-8299395: Remove metaprogramming/removeCV.hpp * JDK-8299396: Remove metaprogramming/removeExtent.hpp * JDK-8299397: Remove metaprogramming/isFloatingPoint.hpp * JDK-8299398: Remove metaprogramming/isConst.hpp * JDK-8299399: Remove metaprogramming/isArray.hpp * JDK-8299402: Remove metaprogramming/isVolatile.hpp * JDK-8299479: Remove metaprogramming/decay.hpp * JDK-8299481: Remove metaprogramming/removePointer.hpp * JDK-8299482: Remove metaprogramming/isIntegral.hpp * JDK-8299487: Test java/net/httpclient/whitebox/ /SSLTubeTestDriver.java timed out * JDK-8299635: Hotspot update for deprecated sprintf in Xcode 14 * JDK-8299779: Test tools/jpackage/share/jdk/jpackage/tests/ /MainClassTest.java timed out * JDK-8299813: java/nio/channels/DatagramChannel/Disconnect.java fails with jtreg test timeout due to lost datagram * JDK-8299971: Remove metaprogramming/conditional.hpp * JDK-8299972: Remove metaprogramming/removeReference.hpp * JDK-8300169: Build failure with clang-15 * JDK-8300260: Remove metaprogramming/isSame.hpp * JDK-8300264: Remove metaprogramming/isPointer.hpp * JDK-8300265: Remove metaprogramming/isSigned.hpp * JDK-8300806: Update googletest to v1.13.0 * JDK-8300910: Remove metaprogramming/integralConstant.hpp * JDK-8301132: Test update for deprecated sprintf in Xcode 14 * JDK-8301200: Don't scale timeout stress with timeout factor * JDK-8301274: update for deprecated sprintf for security components * JDK-8301279: update for deprecated sprintf for management components * JDK-8301686: TLS 1.3 handshake fails if server_name doesn't match resuming session * JDK-8301704: Shorten the number of GCs in UnloadingTest.java to verify a class loader not being unloaded * JDK-8302495: update for deprecated sprintf for java.desktop * JDK-8302800: Augment NaN handling tests of FDLIBM methods * JDK-8303216: Prefer ArrayList to LinkedList in sun.net.httpserver.ServerImpl * JDK-8303466: C2: failed: malformed control flow. Limit type made precise with MaxL/MinL * JDK-8303527: update for deprecated sprintf for jdk.hotspot.agent * JDK-8303617: update for deprecated sprintf for jdk.jdwp.agent * JDK-8303830: update for deprecated sprintf for jdk.accessibility * JDK-8303891: Speed up Zip64SizeTest using a small ZIP64 file * JDK-8303920: Avoid calling out to python in DataDescriptorSignatureMissing test * JDK-8303942: os::write should write completely * JDK-8303965: java.net.http.HttpClient should reset the stream if response headers contain malformed header fields * JDK-8304375: jdk/jfr/api/consumer/filestream/TestOrdered.java failed with "Expected at least some events to be out of order! Reuse = false" * JDK-8304962: sun/net/www/http/KeepAliveCache/B5045306.java: java.lang.RuntimeException: Failed: Initial Keep Alive Connection is not being reused * JDK-8304963: HttpServer closes connection after processing HEAD after JDK-7026262 * JDK-8305072: Win32ShellFolder2.compareTo is inconsistent * JDK-8305079: Remove finalize() from compiler/c2/Test719030 * JDK-8305081: Remove finalize() from test/hotspot/jtreg/compiler/runtime/Test8168712 * JDK-8305825: getBounds API returns wrong value resulting in multiple Regression Test Failures on Ubuntu 23.04 * JDK-8305959: x86: Improve itable_stub * JDK-8306583: Add JVM crash check in CDSTestUtils.executeAndLog * JDK-8306929: Avoid CleanClassLoaderDataMetaspaces safepoints when previous versions are shared * JDK-8306946: jdk/test/lib/process/ /ProcessToolsStartProcessTest.java fails with "wrong number of lines in OutputAnalyzer output" * JDK-8307091: A few client tests intermittently throw ConcurrentModificationException * JDK-8307193: Several Swing jtreg tests use class.forName on L&F classes * JDK-8307352: AARCH64: Improve itable_stub * JDK-8307448: Test RedefineSharedClassJFR fail due to wrong assumption * JDK-8307779: Relax the java.awt.Robot specification * JDK-8307848: update for deprecated sprintf for jdk.attach * JDK-8307850: update for deprecated sprintf for jdk.jdi * JDK-8308022: update for deprecated sprintf for java.base * JDK-8308144: Uncontrolled memory consumption in SSLFlowDelegate.Reader * JDK-8308184: Launching java with large number of jars in classpath with java.protocol.handler.pkgs system property set can lead to StackOverflowError * JDK-8308801: update for deprecated sprintf for libnet in java.base * JDK-8308891: TestCDSVMCrash.java needs @requires vm.cds * JDK-8309241: ClassForNameLeak fails intermittently as the class loader hasn't been unloaded * JDK-8309621: [XWayland][Screencast] screen capture failure with sun.java2d.uiScale other than 1 * JDK-8309703: AIX build fails after JDK-8280982 * JDK-8309756: Occasional crashes with pipewire screen capture on Wayland * JDK-8309934: Update GitHub Actions to use JDK 17 for building jtreg * JDK-8310070: Test: javax/net/ssl/DTLS/DTLSWontNegotiateV10.java timed out * JDK-8310108: Skip ReplaceCriticalClassesForSubgraphs when EnableJVMCI is specified * JDK-8310201: Reduce verbose locale output in -XshowSettings launcher option * JDK-8310334: [XWayland][Screencast] screen capture error message in debug * JDK-8310628: GcInfoBuilder.c missing JNI Exception checks * JDK-8310683: Refactor StandardCharset/standard.java to use JUnit * JDK-8311208: Improve CDS Support * JDK-8311666: Disabled tests in test/jdk/sun/java2d/marlin * JDK-8312049: runtime/logging/ClassLoadUnloadTest can be improved * JDK-8312140: jdk/jshell tests failed with JDI socket timeouts * JDK-8312229: Crash involving yield, switch and anonymous classes * JDK-8313256: Exclude failing multicast tests on AIX * JDK-8313394: Array Elements in OldObjectSample event has the incorrect description * JDK-8313674: (fc) java/nio/channels/FileChannel/ /BlockDeviceSize.java should test for more block devices * JDK-8313697: [XWayland][Screencast] consequent getPixelColor calls are slow * JDK-8313873: java/nio/channels/DatagramChannel/ /SendReceiveMaxSize.java fails on AIX due to small default RCVBUF size and different IPv6 Header interpretation * JDK-8313901: [TESTBUG] test/hotspot/jtreg/compiler/codecache/ /CodeCacheFullCountTest.java fails with java.lang.VirtualMachineError * JDK-8314476: TestJstatdPortAndServer.java failed with "java.rmi.NoSuchObjectException: no such object in table" * JDK-8314614: jdk/jshell/ImportTest.java failed with "InternalError: Failed remote listen" * JDK-8314837: 5 compiled/codecache tests ignore VM flags * JDK-8315024: Vector API FP reduction tests should not test for exact equality * JDK-8315362: NMT: summary diff reports threads count incorrectly * JDK-8315422: getSoTimeout() would be in try block in SSLSocketImpl * JDK-8315437: Enable parallelism in vmTestbase/nsk/monitoring/stress/classload tests * JDK-8315442: Enable parallelism in vmTestbase/nsk/monitoring/stress/thread tests * JDK-8315559: Delay TempSymbol cleanup to avoid symbol table churn * JDK-8315576: compiler/codecache/CodeCacheFullCountTest.java fails after JDK-8314837 * JDK-8315651: Stop hiding AIX specific multicast socket errors via NetworkConfiguration (aix) * JDK-8315684: Parallelize sun/security/util/math/TestIntegerModuloP.java * JDK-8315774: Enable parallelism in vmTestbase/gc/g1/unloading tests * JDK-8315804: Open source several Swing JTabbedPane JTextArea JTextField tests * JDK-8315936: Parallelize gc/stress/TestStressG1Humongous.java test * JDK-8315965: Open source various AWT applet tests * JDK-8316104: Open source several Swing SplitPane and RadioButton related tests * JDK-8316193: jdk/jfr/event/oldobject/TestListenerLeak.java java.lang.Exception: Could not find leak * JDK-8316211: Open source several manual applet tests * JDK-8316240: Open source several add/remove MenuBar manual tests * JDK-8316285: Opensource JButton manual tests * JDK-8316306: Open source and convert manual Swing test * JDK-8316328: Test jdk/jfr/event/oldobject/ /TestSanityDefault.java times out for some heap sizes * JDK-8316387: Exclude more failing multicast tests on AIX after JDK-8315651 * JDK-8316389: Open source few AWT applet tests * JDK-8316468: os::write incorrectly handles partial write * JDK-8316973: GC: Make TestDisableDefaultGC use createTestJvm * JDK-8317112: Add screenshot for Frame/DefaultSizeTest.java * JDK-8317228: GC: Make TestXXXHeapSizeFlags use createTestJvm * JDK-8317288: [macos] java/awt/Window/Grab/GrabTest.java: Press on the outside area didn't cause ungrab * JDK-8317316: G1: Make TestG1PercentageOptions use createTestJvm * JDK-8317343: GC: Make TestHeapFreeRatio use createTestJvm * JDK-8317358: G1: Make TestMaxNewSize use createTestJvm * JDK-8317360: Missing null checks in JfrCheckpointManager and JfrStringPool initialization routines * JDK-8317372: Refactor some NumberFormat tests to use JUnit * JDK-8317635: Improve GetClassFields test to verify correctness of field order * JDK-8317831: compiler/codecache/CheckLargePages.java fails on OL 8.8 with unexpected memory string * JDK-8318039: GHA: Bump macOS and Xcode versions * JDK-8318089: Class space not marked as such with NMT when CDS is off * JDK-8318474: Fix memory reporter for thread_count * JDK-8318479: [jmh] the test security.CacheBench failed for multiple threads run * JDK-8318605: Enable parallelism in vmTestbase/nsk/stress/stack tests * JDK-8318696: Do not use LFS64 symbols on Linux * JDK-8318986: Improve GenericWaitBarrier performance * JDK-8319103: Popups that request focus are not shown on Linux with Wayland * JDK-8319197: Exclude hb-subset and hb-style from compilation * JDK-8319406: x86: Shorter movptr(reg, imm) for 32-bit immediates * JDK-8319713: Parallel: Remove PSAdaptiveSizePolicy::should_full_GC * JDK-8320079: The ArabicBox.java test has no control buttons * JDK-8320379: C2: Sort spilling/unspilling sequence for better ld/st merging into ldp/stp on AArch64 * JDK-8320602: Lock contention in SchemaDVFactory.getInstance() * JDK-8320608: Many jtreg printing tests are missing the @printer keyword * JDK-8320655: awt screencast robot spin and sync issues with native libpipewire api * JDK-8320692: Null icon returned for .exe without custom icon * JDK-8320945: problemlist tests failing on latest Windows 11 update * JDK-8321025: Enable Neoverse N1 optimizations for Neoverse V2 * JDK-8321176: [Screencast] make a second attempt on screencast failure * JDK-8321220: JFR: RecordedClass reports incorrect modifiers * JDK-8322008: Exclude some CDS tests from running with -Xshare:off * JDK-8322330: JavadocHelperTest.java OOMEs with Parallel GC and ZGC * JDK-8322726: C2: Unloaded signature class kills argument value * JDK-8322971: KEM.getInstance() should check if a 3rd-party security provider is signed * JDK-8323122: AArch64: Increase itable stub size estimate * JDK-8323584: AArch64: Unnecessary ResourceMark in NativeCall::set_destination_mt_safe * JDK-8323670: A few client tests intermittently throw ConcurrentModificationException * JDK-8323801: <s> tag doesn't strikethrough the text * JDK-8324577: [REDO] - [IMPROVE] OPEN_MAX is no longer the max limit on macOS >= 10.6 for RLIMIT_NOFILE * JDK-8324646: Avoid Class.forName in SecureRandom constructor * JDK-8324648: Avoid NoSuchMethodError when instantiating NativePRNG * JDK-8324668: JDWP process management needs more efficient file descriptor handling * JDK-8324753: [AIX] adjust os_posix after JDK-8318696 * JDK-8324755: Enable parallelism in vmTestbase/gc/gctests/LargeObjects tests * JDK-8324933: ConcurrentHashTable::statistics_calculate synchronization is expensive * JDK-8325022: Incorrect error message on client authentication * JDK-8325179: Race in BasicDirectoryModel.validateFileCache * JDK-8325194: GHA: Add macOS M1 testing * JDK-8325384: sun/security/ssl/SSLSessionImpl/ /ResumptionUpdateBoundValues.java failing intermittently when main thread is a virtual thread * JDK-8325444: GHA: JDK-8325194 causes a regression * JDK-8325567: jspawnhelper without args fails with segfault * JDK-8325620: HTMLReader uses ConvertAction instead of specified CharacterAction for , , * JDK-8325621: Improve jspawnhelper version checks * JDK-8325754: Dead AbstractQueuedSynchronizer$ConditionNodes survive minor garbage collections * JDK-8326106: Write and clear stack trace table outside of safepoint * JDK-8326332: Unclosed inline tags cause misalignment in summary tables * JDK-8326446: The User and System of jdk.CPULoad on Apple M1 are inaccurate * JDK-8326734: text-decoration applied to lost when mixed with or <s> * JDK-8327007: javax/swing/JSpinner/8008657/bug8008657.java fails * JDK-8327137: Add test for ConcurrentModificationException in BasicDirectoryModel * JDK-8327312: [17u] Problem list ReflectionCallerCacheTest.java due to 8324978 * JDK-8327424: ProblemList serviceability/sa/TestJmapCore.java on all platforms with ZGC * JDK-8327650: Test java/nio/channels/DatagramChannel/ /StressNativeSignal.java timed out * JDK-8327787: Convert javax/swing/border/Test4129681.java applet test to main * JDK-8327840: Automate javax/swing/border/Test4129681.java * JDK-8328011: Convert java/awt/Frame/GetBoundsResizeTest/ /GetBoundsResizeTest.java applet test to main * JDK-8328075: Shenandoah: Avoid forwarding when objects don't move in full-GC * JDK-8328110: Allow simultaneous use of PassFailJFrame with split UI and additional windows * JDK-8328115: Convert java/awt/font/TextLayout/ /TestJustification.html applet test to main * JDK-8328158: Convert java/awt/Choice/NonFocusablePopupMenuTest to automatic main test * JDK-8328218: Delete test java/awt/Window/FindOwner/FindOwner.html * JDK-8328234: Remove unused nativeUtils files * JDK-8328238: Convert few closed manual applet tests to main * JDK-8328269: NonFocusablePopupMenuTest.java should be marked as headful * JDK-8328273: sun/management/jmxremote/bootstrap/ /RmiRegistrySslTest.java failed with java.rmi.server.ExportException: Port already in use * JDK-8328560: java/awt/event/MouseEvent/ClickDuringKeypress/ /ClickDuringKeypress.java imports Applet * JDK-8328561: test java/awt/Robot/ManualInstructions/ /ManualInstructions.java isn't used * JDK-8328642: Convert applet test MouseDraggedOutCauseScrollingTest.html to main * JDK-8328647: TestGarbageCollectorMXBean.java fails with C1-only and -Xcomp * JDK-8328896: Fontmetrics for large Fonts has zero width * JDK-8328953: JEditorPane.read throws ChangedCharSetException * JDK-8328999: Update GIFlib to 5.2.2 * JDK-8329004: Update Libpng to 1.6.43 * JDK-8329103: assert(!thread->in_asgct()) failed during multi-mode profiling * JDK-8329109: Threads::print_on() tries to print CPU time for terminated GC threads * JDK-8329126: No native wrappers generated anymore with -XX:-TieredCompilation after JDK-8251462 * JDK-8329134: Reconsider TLAB zapping * JDK-8329510: Update ProblemList for JFileChooser/8194044/FileSystemRootTest.java * JDK-8329559: Test javax/swing/JFrame/bug4419914.java failed because The End and Start buttons are not placed correctly and Tab focus does not move as expected * JDK-8329605: hs errfile generic events - move memory protections and nmethod flushes to separate sections * JDK-8329663: hs_err file event log entry for thread adding/removing should print current thread * JDK-8329667: [macos] Issue with JTree related fix for JDK-8317771 * JDK-8329995: Restricted access to `/proc` can cause JFR initialization to crash * JDK-8330063: Upgrade jQuery to 3.7.1 * JDK-8330524: Linux ppc64le compile warning with clang in os_linux_ppc.cpp * JDK-8330611: AES-CTR vector intrinsic may read out of bounds (x86_64, AVX-512) * JDK-8330615: avoid signed integer overflows in zip_util.c readCen / hashN * JDK-8331011: [XWayland] TokenStorage fails under Security Manager * JDK-8331063: Some HttpClient tests don't report leaks * JDK-8331077: nroff man page update for jar tool * JDK-8331164: createJMHBundle.sh download jars fail when url needed to be redirected * JDK-8331265: Bump update version for OpenJDK: jdk-17.0.13 * JDK-8331331: :tier1 target explanation in doc/testing.md is incorrect * JDK-8331466: Problemlist serviceability/dcmd/gc/ /RunFinalizationTest.java on generic-all * JDK-8331605: jdk/test/lib/TestMutuallyExclusivePlatformPredicates.java test failure * JDK-8331746: Create a test to verify that the cmm id is not ignored * JDK-8331798: Remove unused arg of checkErgonomics() in TestMaxHeapSizeTools.java * JDK-8331885: C2: meet between unloaded and speculative types is not symmetric * JDK-8332008: Enable issuestitle check * JDK-8332113: Update nsk.share.Log to be always verbose * JDK-8332174: Remove 2 (unpaired) RLO Unicode characters in ff_Adlm.xml * JDK-8332248: (fc) java/nio/channels/FileChannel/ /BlockDeviceSize.java failed with RuntimeException * JDK-8332424: Update IANA Language Subtag Registry to Version 2024-05-16 * JDK-8332524: Instead of printing "TLSv1.3," it is showing "TLS13" * JDK-8332898: failure_handler: log directory of commands * JDK-8332936: Test vmTestbase/metaspace/gc/watermark_70_80/ /TestDescription.java fails with no GC's recorded * JDK-8333270: HandlersOnComplexResetUpdate and HandlersOnComplexUpdate tests fail with "Unexpected reference" if timeoutFactor is less than 1/3 * JDK-8333353: Delete extra empty line in CodeBlob.java * JDK-8333398: Uncomment the commented test in test/jdk/java/ /util/jar/JarFile/mrjar/MultiReleaseJarAPI.java * JDK-8333477: Delete extra empty spaces in Makefiles * JDK-8333698: [17u] TestJstatdRmiPort fails after JDK-8333667 * JDK-8333716: Shenandoah: Check for disarmed method before taking the nmethod lock * JDK-8333724: Problem list security/infra/java/security/cert/ /CertPathValidator/certification/CAInterop.java #teliasonerarootcav1 * JDK-8333804: java/net/httpclient/ForbiddenHeadTest.java threw an exception with 0 failures * JDK-8334166: Enable binary check * JDK-8334297: (so) java/nio/channels/SocketChannel/OpenLeak.java should not depend on SecurityManager * JDK-8334332: TestIOException.java fails if run by root * JDK-8334333: MissingResourceCauseTestRun.java fails if run by root * JDK-8334335: [TESTBUG] Backport of 8279164 to 11u & 17u includes elements of JDK-8163327 * JDK-8334339: Test java/nio/file/attribute/ /BasicFileAttributeView/CreationTime.java fails on alinux3 * JDK-8334418: Update IANA Language Subtag Registry to Version 2024-06-14 * JDK-8334482: Shenandoah: Deadlock when safepoint is pending during nmethods iteration * JDK-8334600: TEST java/net/MulticastSocket/IPMulticastIF.java fails on linux-aarch64 * JDK-8334653: ISO 4217 Amendment 177 Update * JDK-8334769: Shenandoah: Move CodeCache_lock close to its use in ShenandoahConcurrentNMethodIterator * JDK-8335536: Fix assertion failure in IdealGraphPrinter when append is true * JDK-8335775: Remove extraneous 's' in comment of rawmonitor.cpp test file * JDK-8335808: update for deprecated sprintf for jfrTypeSetUtils * JDK-8335918: update for deprecated sprintf for jvmti * JDK-8335967: "text-decoration: none" does not work with "A" HTML tags * JDK-8336301: test/jdk/java/nio/channels/ /AsyncCloseAndInterrupt.java leaves around a FIFO file upon test completion * JDK-8336928: GHA: Bundle artifacts removal broken * JDK-8337038: Test java/nio/file/attribute/ /BasicFileAttributeView/CreationTime.java shoud set as /native * JDK-8337283: configure.log is truncated when build dir is on different filesystem * JDK-8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs * JDK-8337669: [17u] Backport of JDK-8284047 missed to delete a file * JDK-8338139: {ClassLoading,Memory}MXBean::isVerbose methods are inconsistent with their setVerbose methods * JDK-8338696: (fs) BasicFileAttributes.creationTime() falls back to epoch if birth time is unavailable (Linux) * JDK-8339869: [21u] Test CreationTime.java fails with UnsatisfiedLinkError after 8334339 * JDK-8341057: Add 2 SSL.com TLS roots * JDK-8341059: Change Entrust TLS distrust date to November 12, 2024 * JDK-8341673: [17u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.13 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3963=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3963=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3963=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3963=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3963=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3963=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3963=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3963=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3963=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3963=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-3963=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3963=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3963=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3963=1 ## Package List: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * SUSE Manager Proxy 4.3 (x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-jmods-17.0.13.0-150400.3.48.2 * java-17-openjdk-src-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * openSUSE Leap 15.4 (noarch) * java-17-openjdk-javadoc-17.0.13.0-150400.3.48.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-jmods-17.0.13.0-150400.3.48.2 * java-17-openjdk-src-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * openSUSE Leap 15.5 (noarch) * java-17-openjdk-javadoc-17.0.13.0-150400.3.48.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-jmods-17.0.13.0-150400.3.48.2 * java-17-openjdk-src-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * openSUSE Leap 15.6 (noarch) * java-17-openjdk-javadoc-17.0.13.0-150400.3.48.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * java-17-openjdk-headless-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-debugsource-17.0.13.0-150400.3.48.2 * java-17-openjdk-devel-17.0.13.0-150400.3.48.2 * java-17-openjdk-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-headless-debuginfo-17.0.13.0-150400.3.48.2 * java-17-openjdk-demo-17.0.13.0-150400.3.48.2 * java-17-openjdk-17.0.13.0-150400.3.48.2 ## References: * https://www.suse.com/security/cve/CVE-2024-21208.html * https://www.suse.com/security/cve/CVE-2024-21210.html * https://www.suse.com/security/cve/CVE-2024-21217.html * https://www.suse.com/security/cve/CVE-2024-21235.html * https://bugzilla.suse.com/show_bug.cgi?id=1231702 * https://bugzilla.suse.com/show_bug.cgi?id=1231711 * https://bugzilla.suse.com/show_bug.cgi?id=1231716 * https://bugzilla.suse.com/show_bug.cgi?id=1231719

1 0

SUSE-SU-2024:3964-1: moderate: Security update for python-wxPython
by OPENSUSE-SECURITY-UPDATES 11 Nov '24

11 Nov '24

# Security update for python-wxPython Announcement ID: SUSE-SU-2024:3964-1 Release Date: 2024-11-09T16:39:54Z Rating: moderate References: * bsc#1228252 * bsc#1232590 Cross-References: * CVE-2024-50602 CVSS scores: * CVE-2024-50602 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-50602 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-50602 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python-wxPython fixes the following issues: Security issue fixed: * CVE-2024-50602: Fixed a denial of service in the vendored libexpat's XML_ResumeParser function (bsc#1232590). Non-security issues fixed: * rebuilt for python 3.11 (bsc#1228252). * add repack script, do not include packaging/ dir in sources * Reduce complexity by not rewriting subpackages at all. * Appease factory-auto bot about package src name. * Add additional patches fixing the situation with Python 3.10 compatibility. * Split out the TW python3 flavors into multibuild using the python_subpackage_only mechanism: Multiple python3 flavors sequentially require too much space and time in one build. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3964=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3964=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-wxPython-debugsource-4.1.1-150400.3.8.1 * python311-wxPython-lang-4.1.1-150400.3.8.1 * python311-wxPython-debuginfo-4.1.1-150400.3.8.1 * python311-wxPython-4.1.1-150400.3.8.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python311-wxPython-debugsource-4.1.1-150400.3.8.1 * python311-wxPython-lang-4.1.1-150400.3.8.1 * python311-wxPython-debuginfo-4.1.1-150400.3.8.1 * python311-wxPython-4.1.1-150400.3.8.1 ## References: * https://www.suse.com/security/cve/CVE-2024-50602.html * https://bugzilla.suse.com/show_bug.cgi?id=1228252 * https://bugzilla.suse.com/show_bug.cgi?id=1232590

1 0

openSUSE-SU-2024:14481-1: moderate: coredns-1.11.3+git129.387f34d-1.1 on GA media
by meissner＠suse.com 10 Nov '24

10 Nov '24

# coredns-1.11.3+git129.387f34d-1.1 on GA media Announcement ID: openSUSE-SU-2024:14481-1 Rating: moderate Cross-References: * CVE-2024-51744 CVSS scores: * CVE-2024-51744 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2024-51744 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the coredns-1.11.3+git129.387f34d-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * coredns 1.11.3+git129.387f34d-1.1 * coredns-extras 1.11.3+git129.387f34d-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-51744.html

1 0

openSUSE-SU-2024:14482-1: moderate: govulncheck-vulndb-0.0.20241108T172500-1.1 on GA media
by meissner＠suse.com 10 Nov '24

10 Nov '24

# govulncheck-vulndb-0.0.20241108T172500-1.1 on GA media Announcement ID: openSUSE-SU-2024:14482-1 Rating: moderate Cross-References: * CVE-2024-10975 * CVE-2024-45794 Affected Products: * openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the govulncheck-vulndb-0.0.20241108T172500-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * govulncheck-vulndb 0.0.20241108T172500-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-10975.html * https://www.suse.com/security/cve/CVE-2024-45794.html

1 0

openSUSE-SU-2024:0364-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 10 Nov '24

10 Nov '24

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0364-1 Rating: important References: #1231225 #1231735 #1231736 #1231737 #1231738 Cross-References: CVE-2024-21248 CVE-2024-21259 CVE-2024-21263 CVE-2024-21273 Affected Products: openSUSE Backports SLE-15-SP6 openSUSE Leap 15.6 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for virtualbox fixes the following issues: Update to release 7.1.4: * NAT: Fixed DHCP problems with certain guests when domain is empty * VMSVGA: Improved flickering, black screen and other screen update issues with recent Linux kernels * Linux Guest Additions: Introduce initial support for kernel 6.12 * EFI: Added missing LsiLogic MPT SCSI driver again to fix booting from devices attached to this device if the EFI firmware is used (7.1.0 regression) * EFI: Restored broken network boot support (7.1.0 regression) * Adressed CVE-2024-21248 [boo#1231735], CVE-2024-21273 [boo#1231736], CVE-2024-21259 [boo#1231737], CVE-2024-21263 [boo#1231738] - Make the Extension Pack work with our compiler flags and RT_NOEXCEPT choices. [boo#1231225] Update to release 7.1: * The GUI now offers a selection between Basic and Experienced user level with reduced or full UI functionality. * VRDE: If user does not set up TLS with custom certificates, enable it with self-signed certificate, including issuing a new one before the old one expires * NAT: New engine with IPv6 support. * Linux host and guest: Added Wayland support for Clipboard sharing. - Changed license from Gpl-2.0 to Gpl-3.0 Version bump to VirtualBox 7.0.20 (released July 16 2024 by Oracle)) This is a maintenance release. The following items were fixed and/or added: - TPM: Fixed errors appearing the event viewer with Windows guests - macOS Hosts: Fixed passing USB devices to the VM (bug #21218) - Audio: Fixed recording with HDA emulation after newer Windows 10 / 11 guests got rebooted - USB: Fixed a deadlock in OHCI triggered when saving the current state of a VM or taking a snapshot (bug #22059) - Linux Guest and Host: Introduced initial support for OpenSuse 15.6 kernel - Linux Guest and Host: Introduced initial support for RHEL 9.5 kernel (bug #22099) - Guest Additions: Shared Clipboard: Fixed issue when extra new lines were pasted when copying text between Win and X11 (bug #21716) - UEFI Secure Boot: Add new Microsoft certificates to list for new VMs Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6: zypper in -t patch openSUSE-2024-364=1 - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-364=1 Package List: - openSUSE Leap 15.6 (x86_64): python3-virtualbox-7.1.4-lp156.2.4.1 python3-virtualbox-debuginfo-7.1.4-lp156.2.4.1 virtualbox-7.1.4-lp156.2.4.1 virtualbox-debuginfo-7.1.4-lp156.2.4.1 virtualbox-debugsource-7.1.4-lp156.2.4.1 virtualbox-devel-7.1.4-lp156.2.4.1 virtualbox-guest-tools-7.1.4-lp156.2.4.1 virtualbox-guest-tools-debuginfo-7.1.4-lp156.2.4.1 virtualbox-kmp-debugsource-7.1.4-lp156.2.4.1 virtualbox-kmp-default-7.1.4_k6.4.0_150600.23.25-lp156.2.4.1 virtualbox-kmp-default-debuginfo-7.1.4_k6.4.0_150600.23.25-lp156.2.4.1 virtualbox-qt-7.1.4-lp156.2.4.1 virtualbox-qt-debuginfo-7.1.4-lp156.2.4.1 virtualbox-vnc-7.1.4-lp156.2.4.1 virtualbox-websrv-7.1.4-lp156.2.4.1 virtualbox-websrv-debuginfo-7.1.4-lp156.2.4.1 - openSUSE Leap 15.6 (noarch): virtualbox-guest-desktop-icons-7.1.4-lp156.2.4.1 virtualbox-guest-source-7.1.4-lp156.2.4.1 virtualbox-host-source-7.1.4-lp156.2.4.1 - openSUSE Backports SLE-15-SP6 (aarch64 ppc64le x86_64): kbuild-0.1.9998+svn3613-bp156.2.3.1 kbuild-debuginfo-0.1.9998+svn3613-bp156.2.3.1 kbuild-debugsource-0.1.9998+svn3613-bp156.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-21248.html https://www.suse.com/security/cve/CVE-2024-21259.html https://www.suse.com/security/cve/CVE-2024-21263.html https://www.suse.com/security/cve/CVE-2024-21273.html https://bugzilla.suse.com/1231225 https://bugzilla.suse.com/1231735 https://bugzilla.suse.com/1231736 https://bugzilla.suse.com/1231737 https://bugzilla.suse.com/1231738

1 0