January 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:0227-1: moderate: Recommended update for maven-parent
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for maven-parent Announcement ID: SUSE-RU-2024:0227-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 An update that can now be installed. ## Description: This update for maven-parent fixes the following issues: * Upgraded Apache Maven parent POM to version 40: * Besides maven-parent, it provides now also the following pom artifacts: * doxia-tools * maven-extensions * maven-plugins * maven-shared-components * maven-skins ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-227=1 ## Package List: * openSUSE Leap 15.5 (noarch) * maven-parent-40-150200.3.5.1

1 0

SUSE-SU-2024:0229-1: important: Security update for MozillaFirefox
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Security update for MozillaFirefox Announcement ID: SUSE-SU-2024:0229-1 Rating: important References: * bsc#1218955 Cross-References: * CVE-2024-0741 * CVE-2024-0742 * CVE-2024-0746 * CVE-2024-0747 * CVE-2024-0749 * CVE-2024-0750 * CVE-2024-0751 * CVE-2024-0753 * CVE-2024-0755 CVSS scores: Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.7.0 ESR (MFSA2024-02) (bsc#1218955): * CVE-2024-0741: Out of bounds write in ANGLE * CVE-2024-0742: Failure to update user input timestamp * CVE-2024-0746: Crash when listing printers on Linux * CVE-2024-0747: Bypass of Content Security Policy when directive unsafe- inline was set * CVE-2024-0749: Phishing site popup could show local origin in address bar * CVE-2024-0750: Potential permissions request bypass via clickjacking * CVE-2024-0751: Privilege escalation through devtools * CVE-2024-0753: HSTS policy on subdomain could bypass policy of upper domain * CVE-2024-0755: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-229=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-229=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-229=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-229=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-229=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-229=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-229=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-229=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-229=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-229=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-229=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-229=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-229=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-229=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * MozillaFirefox-branding-upstream-115.7.0-150200.152.123.1 * openSUSE Leap 15.5 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * Desktop Applications Module 15-SP5 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Enterprise Storage 7.1 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0741.html * https://www.suse.com/security/cve/CVE-2024-0742.html * https://www.suse.com/security/cve/CVE-2024-0746.html * https://www.suse.com/security/cve/CVE-2024-0747.html * https://www.suse.com/security/cve/CVE-2024-0749.html * https://www.suse.com/security/cve/CVE-2024-0750.html * https://www.suse.com/security/cve/CVE-2024-0751.html * https://www.suse.com/security/cve/CVE-2024-0753.html * https://www.suse.com/security/cve/CVE-2024-0755.html * https://bugzilla.suse.com/show_bug.cgi?id=1218955

1 0

SUSE-RU-2024:0230-1: moderate: Recommended update for adcli
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for adcli Announcement ID: SUSE-RU-2024:0230-1 Rating: moderate References: * bsc#1214076 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for adcli fixes the following issues: * Populate Samba's secrets database using offline domain join (bsc#1214076) * Write SID before secret to Samba's db (bsc#1214076) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-230=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-230=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-230=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-230=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-230=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-230=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-230=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-230=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-230=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-230=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-230=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-230=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Manager Proxy 4.3 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214076

1 0

SUSE-RU-2024:0233-1: moderate: Recommended update for suse-module-tools
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for suse-module-tools Announcement ID: SUSE-RU-2024:0233-1 Rating: moderate References: * bsc#1217775 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for suse-module-tools fixes the following issues: * Update to version 15.4.19 * Add symlink /boot/.vmlinuz.hmac (bsc#1217775) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-233=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-233=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-233=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-233=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-233=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-233=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-233=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-233=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-233=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-233=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-233=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-233=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-233=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-233=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-233=1 ## Package List: * SUSE Manager Retail Branch Server 4.3 (x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * suse-module-tools-legacy-15.4.19-150400.3.17.1 * suse-module-tools-15.4.19-150400.3.17.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Manager Proxy 4.3 (x86_64) * suse-module-tools-15.4.19-150400.3.17.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217775

1 0

SUSE-RU-2024:0234-1: moderate: Recommended update for sssd
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for sssd Announcement ID: SUSE-RU-2024:0234-1 Rating: moderate References: * bsc#1218537 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for sssd fixes the following issues: * Update shadowLastChanged attribute during LDAP password change (bsc#1218537) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-234=1 openSUSE-SLE-15.5-2024-234=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-234=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-234=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libipa_hbac-devel-2.5.2-150500.10.14.1 * sssd-2.5.2-150500.10.14.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-2.5.2-150500.10.14.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-kcm-2.5.2-150500.10.14.1 * libsss_nss_idmap0-2.5.2-150500.10.14.1 * libsss_simpleifp-devel-2.5.2-150500.10.14.1 * libnfsidmap-sss-debuginfo-2.5.2-150500.10.14.1 * sssd-common-debuginfo-2.5.2-150500.10.14.1 * sssd-proxy-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-2.5.2-150500.10.14.1 * libsss_idmap-devel-2.5.2-150500.10.14.1 * python3-sss_nss_idmap-2.5.2-150500.10.14.1 * sssd-dbus-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-2.5.2-150500.10.14.1 * libipa_hbac0-2.5.2-150500.10.14.1 * python3-sss-murmur-debuginfo-2.5.2-150500.10.14.1 * libsss_idmap0-2.5.2-150500.10.14.1 * python3-ipa_hbac-debuginfo-2.5.2-150500.10.14.1 * sssd-kcm-debuginfo-2.5.2-150500.10.14.1 * python3-ipa_hbac-2.5.2-150500.10.14.1 * sssd-tools-2.5.2-150500.10.14.1 * libnfsidmap-sss-2.5.2-150500.10.14.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-debuginfo-2.5.2-150500.10.14.1 * libsss_certmap-devel-2.5.2-150500.10.14.1 * sssd-krb5-common-2.5.2-150500.10.14.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-debugsource-2.5.2-150500.10.14.1 * sssd-proxy-2.5.2-150500.10.14.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.14.1 * sssd-common-2.5.2-150500.10.14.1 * sssd-ad-debuginfo-2.5.2-150500.10.14.1 * sssd-tools-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.14.1 * sssd-dbus-2.5.2-150500.10.14.1 * libsss_certmap0-2.5.2-150500.10.14.1 * python3-sss_nss_idmap-debuginfo-2.5.2-150500.10.14.1 * sssd-ad-2.5.2-150500.10.14.1 * sssd-krb5-2.5.2-150500.10.14.1 * sssd-winbind-idmap-2.5.2-150500.10.14.1 * python3-sss-murmur-2.5.2-150500.10.14.1 * libsss_nss_idmap-devel-2.5.2-150500.10.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-2.5.2-150500.10.14.1 * sssd-krb5-debuginfo-2.5.2-150500.10.14.1 * openSUSE Leap 15.5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.14.1 * sssd-common-32bit-debuginfo-2.5.2-150500.10.14.1 * openSUSE Leap 15.5 (aarch64_ilp32) * sssd-common-64bit-debuginfo-2.5.2-150500.10.14.1 * sssd-common-64bit-2.5.2-150500.10.14.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sssd-2.5.2-150500.10.14.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-debuginfo-2.5.2-150500.10.14.1 * sssd-krb5-common-2.5.2-150500.10.14.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.14.1 * libsss_certmap0-2.5.2-150500.10.14.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-debugsource-2.5.2-150500.10.14.1 * sssd-ldap-2.5.2-150500.10.14.1 * libsss_nss_idmap0-2.5.2-150500.10.14.1 * libsss_idmap0-2.5.2-150500.10.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-common-debuginfo-2.5.2-150500.10.14.1 * sssd-common-2.5.2-150500.10.14.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libipa_hbac-devel-2.5.2-150500.10.14.1 * sssd-2.5.2-150500.10.14.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-2.5.2-150500.10.14.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-kcm-2.5.2-150500.10.14.1 * libsss_nss_idmap0-2.5.2-150500.10.14.1 * libsss_simpleifp-devel-2.5.2-150500.10.14.1 * sssd-common-debuginfo-2.5.2-150500.10.14.1 * sssd-proxy-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-2.5.2-150500.10.14.1 * libsss_idmap-devel-2.5.2-150500.10.14.1 * sssd-dbus-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-2.5.2-150500.10.14.1 * libipa_hbac0-2.5.2-150500.10.14.1 * libsss_idmap0-2.5.2-150500.10.14.1 * sssd-kcm-debuginfo-2.5.2-150500.10.14.1 * sssd-tools-2.5.2-150500.10.14.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-debuginfo-2.5.2-150500.10.14.1 * libsss_certmap-devel-2.5.2-150500.10.14.1 * sssd-krb5-common-2.5.2-150500.10.14.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-debugsource-2.5.2-150500.10.14.1 * sssd-proxy-2.5.2-150500.10.14.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.14.1 * sssd-common-2.5.2-150500.10.14.1 * sssd-ad-debuginfo-2.5.2-150500.10.14.1 * sssd-tools-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.14.1 * sssd-dbus-2.5.2-150500.10.14.1 * libsss_certmap0-2.5.2-150500.10.14.1 * sssd-ad-2.5.2-150500.10.14.1 * sssd-winbind-idmap-2.5.2-150500.10.14.1 * sssd-krb5-2.5.2-150500.10.14.1 * libsss_nss_idmap-devel-2.5.2-150500.10.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-2.5.2-150500.10.14.1 * sssd-krb5-debuginfo-2.5.2-150500.10.14.1 * Basesystem Module 15-SP5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.14.1 * sssd-common-32bit-debuginfo-2.5.2-150500.10.14.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218537

1 0

SUSE-RU-2024:0218-1: moderate: Recommended update for yast2-samba-client
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for yast2-samba-client Announcement ID: SUSE-RU-2024:0218-1 Rating: moderate References: * bsc#1197936 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for yast2-samba-client fixes the following issues: - Fixed an issue when untranslated text appears in Windows Domain Membership Expert settings dialog. (bsc#1197936) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-218=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-218=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-218=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-218=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-218=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-218=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-218=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-218=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-218=1 ## Package List: * openSUSE Leap 15.4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Manager Proxy 4.3 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Manager Server 4.3 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1197936

1 0

openSUSE-SU-2024:0033-1: important: Security update for opera
by opensuse-security＠opensuse.org 24 Jan '24

24 Jan '24

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0033-1 Rating: important References: Cross-References: CVE-2024-0517 CVE-2024-0518 CVE-2024-0519 CVSS scores: CVE-2024-0517 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-0518 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-0519 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for opera fixes the following issues: Update to 106.0.4998.52 * CHR-9580 Update Chromium on desktop-stable-120-4998 to 120.0.6099.234 * DNA-113175 Can not merge folders on start page * DNA-113341 Implement 'special' menus * DNA-113811 Removing icons in sidepanel heading * DNA-114059 [Move to context menu] Workspaces icons always displayed in 1 line * DNA-114361 "Move to workspace" submenu shows icons vertically * The update to chromium 120.0.6099.234 fixes following issues: CVE-2024-0517, CVE-2024-0518, CVE-2024-0519 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2024-33=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-106.0.4998.52-lp155.3.33.1 References: https://www.suse.com/security/cve/CVE-2024-0517.html https://www.suse.com/security/cve/CVE-2024-0518.html https://www.suse.com/security/cve/CVE-2024-0519.html

1 0

SUSE-RU-2024:0220-1: moderate: Recommended update for yast2-pkg-bindings
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for yast2-pkg-bindings Announcement ID: SUSE-RU-2024:0220-1 Rating: moderate References: * bsc#1218399 * bsc#1218977 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for yast2-pkg-bindings fixes the following issues: * Fixed repository and service probing with libzypp 7.31.26 and newer, fixes broken repository handling (bsc#1218977, bsc#1218399) * 4.5.3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-220=1 openSUSE-SLE-15.5-2024-220=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-220=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-220=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-220=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-220=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-220=1 ## Package List: * openSUSE Leap 15.5 (noarch) * yast2-pkg-bindings-devel-doc-4.5.3-150500.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * yast2-pkg-bindings-debuginfo-4.5.3-150500.3.3.1 * yast2-pkg-bindings-debugsource-4.5.3-150500.3.3.1 * yast2-pkg-bindings-4.5.3-150500.3.3.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * yast2-pkg-bindings-4.5.3-150500.3.3.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * yast2-pkg-bindings-4.5.3-150500.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * yast2-pkg-bindings-4.5.3-150500.3.3.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * yast2-pkg-bindings-4.5.3-150500.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * yast2-pkg-bindings-debuginfo-4.5.3-150500.3.3.1 * yast2-pkg-bindings-debugsource-4.5.3-150500.3.3.1 * yast2-pkg-bindings-4.5.3-150500.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218399 * https://bugzilla.suse.com/show_bug.cgi?id=1218977

1 0

openSUSE-RU-2024:0032-1: moderate: Recommended update for kanidm
by maintenance＠opensuse.org 24 Jan '24

24 Jan '24

openSUSE Recommended Update: Recommended update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0032-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kanidm fixes the following issues: kanidm is shipped in version 1.1.0~rc15~git2.74f5c0f. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-32=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.1.0~rc15~git2.74f5c0f-bp155.2.1 kanidm-clients-1.1.0~rc15~git2.74f5c0f-bp155.2.1 kanidm-docs-1.1.0~rc15~git2.74f5c0f-bp155.2.1 kanidm-server-1.1.0~rc15~git2.74f5c0f-bp155.2.1 kanidm-unixd-clients-1.1.0~rc15~git2.74f5c0f-bp155.2.1 References:

1 0

openSUSE-SU-2024:0031-1: important: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 24 Jan '24

24 Jan '24

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0031-1 Rating: important References: #1218360 #1218366 #1218378 #1218379 #1218380 #1218381 Cross-References: CVE-2023-49084 CVE-2023-49085 CVE-2023-49086 CVE-2023-49088 CVE-2023-50250 CVE-2023-51448 CVSS scores: CVE-2023-49084 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-49085 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-49086 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2023-49088 (NVD) : 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVE-2023-50250 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2023-51448 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for cacti, cacti-spine fixes the following issues: cacti-spine 1.2.26: * Fix: Errors when uptime OID is not present * Fix: MySQL reconnect option is depreciated * Fix: Spine does not check a host with no poller items * Fix: Poller may report the wrong number of devices polled * Feature: Allow users to override the threads setting at the command line * Feature: Allow spine to run in ping-only mode cacti 1.2.26: * CVE-2023-50250: XSS vulnerability when importing a template file (boo#1218380) * CVE-2023-49084: RCE vulnerability when managing links (boo#1218360) * CVE-2023-49085: SQL Injection vulnerability when managing poller devices (boo#1218378) * CVE-2023-49086: XSS vulnerability when adding new devices (boo#1218366) * CVE-2023-49088: XSS vulnerability when viewing data sources in debug mode (boo#1218379) * CVE-2023-51448: SQL Injection vulnerability when managing SNMP Notification Receivers (boo#1218381) * When viewing data sources, an undefined variable error may be seen * Improvements for Poller Last Run Date * Attempting to edit a Data Query that does not exist throws warnings and not an GUI error * Improve PHP 8.1 support when adding devices * Viewing Data Query Cache can cause errors to be logged * Preserve option is not properly honoured when removing devices at command line * Infinite recursion is possible during a database failure * Monitoring Host CPU's does not always work on Windows endpoints * Multi select drop down list box not rendered correctly in Chrome and Edge * Selective Plugin Debugging may not always work as intended * During upgrades, Plugins may be falsely reported as incompatible * Plugin management at command line does not work with multiple plugins * Improve PHP 8.1 support for incrementing only numbers * Allow the renaming of guest and template accounts * DS Stats issues warnings when the RRDfile has not been initialized * When upgrading, missing data source profile can cause errors to be logged * When deleting a single Data Source, purge historical debug data * Improvements to form element warnings * Some interface aliases do not appear correctly * Aggregate graph does not show other percentiles * Settings table updates for large values reverted by database repair * When obtaining graph records, error messages may be recorded * Unable to change a device's community at command line * Increase timeout for RRDChecker * When viewing a graph, option to edit template may lead to incorrect URL * When upgrading, failures may occur due to missing color table keys * On installation, allow a more appropriate template to be used as the default * When data input parameters are allowed to be null, allow null * CSV Exports may not always output data correctly * When debugging a graph, long CDEF's can cause undesirable scrolling * Secondary LDAP server not evaluated when the first one has failed * When adding a device, using the bulk walk option can make version information appear * When parsing a Data Query resource, an error can be reported if no direction is specified * Database reconnection can cause errors to be reported incorrectly * fix returned value if $sau is empty * Add Aruba switch, Aruba controller and HPE iLO templates * Add OSCX 6x00 templates Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-31=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2024-31=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): cacti-spine-1.2.26-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): cacti-1.2.26-bp155.2.6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.26-32.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.26-38.1 References: https://www.suse.com/security/cve/CVE-2023-49084.html https://www.suse.com/security/cve/CVE-2023-49085.html https://www.suse.com/security/cve/CVE-2023-49086.html https://www.suse.com/security/cve/CVE-2023-49088.html https://www.suse.com/security/cve/CVE-2023-50250.html https://www.suse.com/security/cve/CVE-2023-51448.html https://bugzilla.suse.com/1218360 https://bugzilla.suse.com/1218366 https://bugzilla.suse.com/1218378 https://bugzilla.suse.com/1218379 https://bugzilla.suse.com/1218380 https://bugzilla.suse.com/1218381

1 0

openSUSE-SU-2024:0031-1: important: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 24 Jan '24

24 Jan '24

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0031-1 Rating: important References: #1218360 #1218366 #1218378 #1218379 #1218380 #1218381 Cross-References: CVE-2023-49084 CVE-2023-49085 CVE-2023-49086 CVE-2023-49088 CVE-2023-50250 CVE-2023-51448 CVSS scores: CVE-2023-49084 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-49085 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-49086 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2023-49088 (NVD) : 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVE-2023-50250 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2023-51448 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for cacti, cacti-spine fixes the following issues: cacti-spine 1.2.26: * Fix: Errors when uptime OID is not present * Fix: MySQL reconnect option is depreciated * Fix: Spine does not check a host with no poller items * Fix: Poller may report the wrong number of devices polled * Feature: Allow users to override the threads setting at the command line * Feature: Allow spine to run in ping-only mode cacti 1.2.26: * CVE-2023-50250: XSS vulnerability when importing a template file (boo#1218380) * CVE-2023-49084: RCE vulnerability when managing links (boo#1218360) * CVE-2023-49085: SQL Injection vulnerability when managing poller devices (boo#1218378) * CVE-2023-49086: XSS vulnerability when adding new devices (boo#1218366) * CVE-2023-49088: XSS vulnerability when viewing data sources in debug mode (boo#1218379) * CVE-2023-51448: SQL Injection vulnerability when managing SNMP Notification Receivers (boo#1218381) * When viewing data sources, an undefined variable error may be seen * Improvements for Poller Last Run Date * Attempting to edit a Data Query that does not exist throws warnings and not an GUI error * Improve PHP 8.1 support when adding devices * Viewing Data Query Cache can cause errors to be logged * Preserve option is not properly honoured when removing devices at command line * Infinite recursion is possible during a database failure * Monitoring Host CPU's does not always work on Windows endpoints * Multi select drop down list box not rendered correctly in Chrome and Edge * Selective Plugin Debugging may not always work as intended * During upgrades, Plugins may be falsely reported as incompatible * Plugin management at command line does not work with multiple plugins * Improve PHP 8.1 support for incrementing only numbers * Allow the renaming of guest and template accounts * DS Stats issues warnings when the RRDfile has not been initialized * When upgrading, missing data source profile can cause errors to be logged * When deleting a single Data Source, purge historical debug data * Improvements to form element warnings * Some interface aliases do not appear correctly * Aggregate graph does not show other percentiles * Settings table updates for large values reverted by database repair * When obtaining graph records, error messages may be recorded * Unable to change a device's community at command line * Increase timeout for RRDChecker * When viewing a graph, option to edit template may lead to incorrect URL * When upgrading, failures may occur due to missing color table keys * On installation, allow a more appropriate template to be used as the default * When data input parameters are allowed to be null, allow null * CSV Exports may not always output data correctly * When debugging a graph, long CDEF's can cause undesirable scrolling * Secondary LDAP server not evaluated when the first one has failed * When adding a device, using the bulk walk option can make version information appear * When parsing a Data Query resource, an error can be reported if no direction is specified * Database reconnection can cause errors to be reported incorrectly * fix returned value if $sau is empty * Add Aruba switch, Aruba controller and HPE iLO templates * Add OSCX 6x00 templates Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2024-31=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.26-32.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.26-38.1 References: https://www.suse.com/security/cve/CVE-2023-49084.html https://www.suse.com/security/cve/CVE-2023-49085.html https://www.suse.com/security/cve/CVE-2023-49086.html https://www.suse.com/security/cve/CVE-2023-49088.html https://www.suse.com/security/cve/CVE-2023-50250.html https://www.suse.com/security/cve/CVE-2023-51448.html https://bugzilla.suse.com/1218360 https://bugzilla.suse.com/1218366 https://bugzilla.suse.com/1218378 https://bugzilla.suse.com/1218379 https://bugzilla.suse.com/1218380 https://bugzilla.suse.com/1218381

1 0

SUSE-SU-2024:0204-1: important: Security update for bluez
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Security update for bluez Announcement ID: SUSE-SU-2024:0204-1 Rating: important References: * bsc#1218300 * bsc#1218301 Cross-References: * CVE-2023-50229 * CVE-2023-50230 CVSS scores: * CVE-2023-50229 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-50230 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300). * CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access Profile implementation (bsc#1218301). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-204=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-204=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-204=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-204=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-204=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-204=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-204=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-204=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-204=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-204=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-204=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-204=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-204=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-204=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-204=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libbluetooth3-5.62-150400.4.19.1 * bluez-test-debuginfo-5.62-150400.4.19.1 * bluez-cups-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-cups-debuginfo-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-test-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * openSUSE Leap 15.4 (noarch) * bluez-auto-enable-devices-5.62-150400.4.19.1 * openSUSE Leap 15.4 (x86_64) * libbluetooth3-32bit-debuginfo-5.62-150400.4.19.1 * bluez-devel-32bit-5.62-150400.4.19.1 * libbluetooth3-32bit-5.62-150400.4.19.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libbluetooth3-64bit-debuginfo-5.62-150400.4.19.1 * bluez-devel-64bit-5.62-150400.4.19.1 * libbluetooth3-64bit-5.62-150400.4.19.1 * openSUSE Leap Micro 5.3 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-cups-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-cups-debuginfo-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Manager Proxy 4.3 (x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50229.html * https://www.suse.com/security/cve/CVE-2023-50230.html * https://bugzilla.suse.com/show_bug.cgi?id=1218300 * https://bugzilla.suse.com/show_bug.cgi?id=1218301

1 0

SUSE-SU-2024:0208-1: moderate: Security update for tomcat10
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Security update for tomcat10 Announcement ID: SUSE-SU-2024:0208-1 Rating: moderate References: * bsc#1217649 Cross-References: * CVE-2023-46589 CVSS scores: * CVE-2023-46589 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-46589 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * Web and Scripting Module 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for tomcat10 fixes the following issues: Updated to Tomcat 10.1.18 * CVE-2023-46589: Fixed HTTP request smuggling due to incorrect headers parsing (bsc#1217649) Find the full release notes at: https://tomcat.apache.org/tomcat-9.0-doc/changelog.html ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-208=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-208=1 ## Package List: * openSUSE Leap 15.5 (noarch) * tomcat10-el-5_0-api-10.1.18-150200.5.8.1 * tomcat10-jsp-3_1-api-10.1.18-150200.5.8.1 * tomcat10-servlet-6_0-api-10.1.18-150200.5.8.1 * tomcat10-embed-10.1.18-150200.5.8.1 * tomcat10-admin-webapps-10.1.18-150200.5.8.1 * tomcat10-docs-webapp-10.1.18-150200.5.8.1 * tomcat10-10.1.18-150200.5.8.1 * tomcat10-jsvc-10.1.18-150200.5.8.1 * tomcat10-lib-10.1.18-150200.5.8.1 * tomcat10-webapps-10.1.18-150200.5.8.1 * Web and Scripting Module 15-SP5 (noarch) * tomcat10-el-5_0-api-10.1.18-150200.5.8.1 * tomcat10-jsp-3_1-api-10.1.18-150200.5.8.1 * tomcat10-servlet-6_0-api-10.1.18-150200.5.8.1 * tomcat10-admin-webapps-10.1.18-150200.5.8.1 * tomcat10-10.1.18-150200.5.8.1 * tomcat10-lib-10.1.18-150200.5.8.1 * tomcat10-webapps-10.1.18-150200.5.8.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46589.html * https://bugzilla.suse.com/show_bug.cgi?id=1217649

1 0

SUSE-SU-2024:0212-1: moderate: Security update for xwayland
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Security update for xwayland Announcement ID: SUSE-SU-2024:0212-1 Rating: moderate References: * bsc#1218845 * bsc#1218846 Cross-References: * CVE-2024-0408 * CVE-2024-0409 CVSS scores: * CVE-2024-0408 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2024-0409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2024-0408: Fixed SELinux unlabeled GLX PBuffer. (bsc#1218845) * CVE-2024-0409: Fixed SELinux context corruption. (bsc#1218846) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-212=1 openSUSE-SLE-15.5-2024-212=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-212=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * xwayland-devel-22.1.5-150500.7.17.1 * xwayland-22.1.5-150500.7.17.1 * xwayland-debuginfo-22.1.5-150500.7.17.1 * xwayland-debugsource-22.1.5-150500.7.17.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * xwayland-22.1.5-150500.7.17.1 * xwayland-debuginfo-22.1.5-150500.7.17.1 * xwayland-debugsource-22.1.5-150500.7.17.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0408.html * https://www.suse.com/security/cve/CVE-2024-0409.html * https://bugzilla.suse.com/show_bug.cgi?id=1218845 * https://bugzilla.suse.com/show_bug.cgi?id=1218846

1 0

SUSE-RU-2024:0213-1: moderate: Recommended update for ghostscript
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for ghostscript Announcement ID: SUSE-RU-2024:0213-1 Rating: moderate References: * bsc#1191841 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for ghostscript fixes the following issues: * Fix memory corruption while providing PDF with non-ASCII characters as input (bsc#1191841) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-213=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-213=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.180.1 * ghostscript-x11-debuginfo-9.52-150000.180.1 * ghostscript-x11-9.52-150000.180.1 * ghostscript-debuginfo-9.52-150000.180.1 * ghostscript-devel-9.52-150000.180.1 * ghostscript-9.52-150000.180.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.180.1 * ghostscript-x11-debuginfo-9.52-150000.180.1 * ghostscript-x11-9.52-150000.180.1 * ghostscript-debuginfo-9.52-150000.180.1 * ghostscript-devel-9.52-150000.180.1 * ghostscript-9.52-150000.180.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1191841

1 0

SUSE-RU-2024:0214-1: moderate: Recommended update for systemd
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for systemd Announcement ID: SUSE-RU-2024:0214-1 Rating: moderate References: * bsc#1214668 * bsc#1215241 * bsc#1217460 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that has three fixes can now be installed. ## Description: This update for systemd fixes the following issues: * resolved: actually check authenticated flag of SOA transaction * core/mount: Make device deps from /proc/self/mountinfo and .mount unit file exclusive * core: Add trace logging to mount_add_device_dependencies() * core/mount: Remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460) * core/mount: Set Mount.from_proc_self_mountinfo flag before adding default dependencies * core: wrap some long comment * utmp-wtmp: Handle EINTR gracefully when waiting to write to tty * utmp-wtmp: Fix error in case isatty() fails * homed: Handle EINTR gracefully when waiting for device node * resolved: Handle EINTR returned from fd_wait_for_event() better * sd-netlink: Handle EINTR from poll() gracefully, as success * varlink: Handle EINTR gracefully when waiting for EIO via ppoll() * stdio-bridge: Don't be bothered with EINTR * sd-bus: Handle EINTR return from bus_poll() (bsc#1215241) * core: Replace slice dependencies as they get added (bsc#1214668) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-214=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-214=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-214=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-214=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-214=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-214=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-214=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-214=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-214=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-214=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-214=1 ## Package List: * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * systemd-network-debuginfo-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-network-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * nss-systemd-249.17-150400.8.40.1 * libsystemd0-mini-249.17-150400.8.40.1 * systemd-mini-sysvinit-249.17-150400.8.40.1 * nss-myhostname-debuginfo-249.17-150400.8.40.1 * libudev-mini1-debuginfo-249.17-150400.8.40.1 * systemd-mini-devel-249.17-150400.8.40.1 * systemd-coredump-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-network-debuginfo-249.17-150400.8.40.1 * systemd-portable-249.17-150400.8.40.1 * systemd-mini-container-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-experimental-debuginfo-249.17-150400.8.40.1 * systemd-network-249.17-150400.8.40.1 * systemd-mini-doc-249.17-150400.8.40.1 * nss-systemd-debuginfo-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-mini-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-coredump-debuginfo-249.17-150400.8.40.1 * udev-249.17-150400.8.40.1 * systemd-doc-249.17-150400.8.40.1 * libudev-mini1-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * nss-myhostname-249.17-150400.8.40.1 * systemd-devel-249.17-150400.8.40.1 * udev-mini-debuginfo-249.17-150400.8.40.1 * systemd-testsuite-249.17-150400.8.40.1 * systemd-experimental-249.17-150400.8.40.1 * systemd-mini-debuginfo-249.17-150400.8.40.1 * systemd-testsuite-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * systemd-mini-249.17-150400.8.40.1 * udev-mini-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * systemd-portable-debuginfo-249.17-150400.8.40.1 * systemd-mini-container-debuginfo-249.17-150400.8.40.1 * systemd-mini-debugsource-249.17-150400.8.40.1 * openSUSE Leap 15.4 (x86_64) * nss-myhostname-32bit-debuginfo-249.17-150400.8.40.1 * nss-myhostname-32bit-249.17-150400.8.40.1 * libudev1-32bit-249.17-150400.8.40.1 * systemd-32bit-249.17-150400.8.40.1 * libsystemd0-32bit-249.17-150400.8.40.1 * systemd-32bit-debuginfo-249.17-150400.8.40.1 * libsystemd0-32bit-debuginfo-249.17-150400.8.40.1 * libudev1-32bit-debuginfo-249.17-150400.8.40.1 * openSUSE Leap 15.4 (noarch) * systemd-lang-249.17-150400.8.40.1 * openSUSE Leap 15.4 (aarch64_ilp32) * nss-myhostname-64bit-249.17-150400.8.40.1 * libudev1-64bit-249.17-150400.8.40.1 * nss-myhostname-64bit-debuginfo-249.17-150400.8.40.1 * libudev1-64bit-debuginfo-249.17-150400.8.40.1 * libsystemd0-64bit-249.17-150400.8.40.1 * libsystemd0-64bit-debuginfo-249.17-150400.8.40.1 * systemd-64bit-249.17-150400.8.40.1 * systemd-64bit-debuginfo-249.17-150400.8.40.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * nss-systemd-249.17-150400.8.40.1 * nss-myhostname-debuginfo-249.17-150400.8.40.1 * systemd-coredump-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-network-debuginfo-249.17-150400.8.40.1 * systemd-portable-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-experimental-debuginfo-249.17-150400.8.40.1 * systemd-network-249.17-150400.8.40.1 * nss-systemd-debuginfo-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-coredump-debuginfo-249.17-150400.8.40.1 * udev-249.17-150400.8.40.1 * systemd-doc-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * nss-myhostname-249.17-150400.8.40.1 * systemd-devel-249.17-150400.8.40.1 * systemd-testsuite-249.17-150400.8.40.1 * systemd-experimental-249.17-150400.8.40.1 * systemd-testsuite-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * systemd-portable-debuginfo-249.17-150400.8.40.1 * openSUSE Leap 15.5 (x86_64) * nss-myhostname-32bit-debuginfo-249.17-150400.8.40.1 * nss-myhostname-32bit-249.17-150400.8.40.1 * libudev1-32bit-249.17-150400.8.40.1 * systemd-32bit-249.17-150400.8.40.1 * libsystemd0-32bit-249.17-150400.8.40.1 * systemd-32bit-debuginfo-249.17-150400.8.40.1 * libsystemd0-32bit-debuginfo-249.17-150400.8.40.1 * libudev1-32bit-debuginfo-249.17-150400.8.40.1 * openSUSE Leap 15.5 (noarch) * systemd-lang-249.17-150400.8.40.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-doc-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-coredump-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-devel-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-coredump-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * Basesystem Module 15-SP5 (noarch) * systemd-lang-249.17-150400.8.40.1 * Basesystem Module 15-SP5 (x86_64) * libudev1-32bit-249.17-150400.8.40.1 * systemd-32bit-249.17-150400.8.40.1 * libsystemd0-32bit-249.17-150400.8.40.1 * systemd-32bit-debuginfo-249.17-150400.8.40.1 * libsystemd0-32bit-debuginfo-249.17-150400.8.40.1 * libudev1-32bit-debuginfo-249.17-150400.8.40.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214668 * https://bugzilla.suse.com/show_bug.cgi?id=1215241 * https://bugzilla.suse.com/show_bug.cgi?id=1217460

1 0

SUSE-RU-2024:0215-1: important: Recommended update for crmsh
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for crmsh Announcement ID: SUSE-RU-2024:0215-1 Rating: important References: * bsc#1208991 * bsc#1213889 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for crmsh fixes the following issues: * log: Redirect debug messages into stderr (bsc#1208991) * ui_cluster: Improve the process of 'crm cluster stop' (bsc#1213889) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-215=1 openSUSE-SLE-15.4-2024-215=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-215=1 ## Package List: * openSUSE Leap 15.4 (noarch) * crmsh-scripts-4.4.2+20231212.3f8e3587-150400.3.31.1 * crmsh-test-4.4.2+20231212.3f8e3587-150400.3.31.1 * crmsh-4.4.2+20231212.3f8e3587-150400.3.31.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (noarch) * crmsh-scripts-4.4.2+20231212.3f8e3587-150400.3.31.1 * crmsh-4.4.2+20231212.3f8e3587-150400.3.31.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1208991 * https://bugzilla.suse.com/show_bug.cgi?id=1213889

1 0

SUSE-RU-2024:0216-1: moderate: Recommended update for qt6-qt5compat, qt6-shadertools
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for qt6-qt5compat, qt6-shadertools Announcement ID: SUSE-RU-2024:0216-1 Rating: moderate References: * bsc#1218979 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This recommended update for qt6-qt5compat, qt6-shadertools fixes the following issues: * Add missing dependencies of qt6-creator to Package Hub for SLE-15 SP5 (bsc#1218979) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-216=1 openSUSE-SLE-15.5-2024-216=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-216=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * qt6-qt5compat-debuginfo-6.4.2-150500.3.3.2 * qt6-qt5compat-debugsource-6.4.2-150500.3.3.2 * libQt6ShaderTools6-6.4.2-150500.3.2.1 * qt6-shadertools-6.4.2-150500.3.2.1 * qt6-shadertools-docs-qch-6.4.2-150500.3.2.1 * qt6-qt5compat-imports-6.4.2-150500.3.3.2 * qt6-qt5compat-docs-html-6.4.2-150500.3.3.1 * qt6-shadertools-debuginfo-6.4.2-150500.3.2.1 * qt6-qt5compat-devel-6.4.2-150500.3.3.2 * qt6-qt5compat-imports-debuginfo-6.4.2-150500.3.3.2 * libQt6Core5Compat6-6.4.2-150500.3.3.2 * qt6-shadertools-debugsource-6.4.2-150500.3.2.1 * libQt6ShaderTools6-debuginfo-6.4.2-150500.3.2.1 * qt6-qt5compat-private-devel-6.4.2-150500.3.3.2 * qt6-shadertools-private-devel-6.4.2-150500.3.2.1 * qt6-shadertools-devel-6.4.2-150500.3.2.1 * libQt6Core5Compat6-debuginfo-6.4.2-150500.3.3.2 * qt6-qt5compat-docs-qch-6.4.2-150500.3.3.1 * qt6-shadertools-docs-html-6.4.2-150500.3.2.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libQt6Core5Compat6-6.4.2-150500.3.3.2 * libQt6ShaderTools6-6.4.2-150500.3.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218979

1 0

SUSE-RU-2024:0202-1: important: Recommended update for gssproxy
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for gssproxy Announcement ID: SUSE-RU-2024:0202-1 Rating: important References: * bsc#1218313 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for gssproxy fixes the following issues: * Require a libverto backend module (bsc#1218313) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-202=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-202=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-202=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libverto-libev1-debuginfo-0.2.6-150000.5.2.1 * libverto-glib1-debuginfo-0.2.6-150000.5.2.1 * libverto-libev-debugsource-0.2.6-150000.5.2.1 * libverto-tevent-devel-0.2.6-150000.5.2.1 * libverto-tevent1-debuginfo-0.2.6-150000.5.2.1 * gssproxy-debugsource-0.8.2-150100.3.12.1 * libverto-libev1-0.2.6-150000.5.2.1 * libev-debugsource-4.24-150000.4.2.1 * libverto-tevent-debugsource-0.2.6-150000.5.2.1 * libverto-libev-devel-0.2.6-150000.5.2.1 * gssproxy-0.8.2-150100.3.12.1 * libverto-glib-devel-0.2.6-150000.5.2.1 * libev-devel-4.24-150000.4.2.1 * libverto-glib1-0.2.6-150000.5.2.1 * libverto-tevent1-0.2.6-150000.5.2.1 * libev4-4.24-150000.4.2.1 * gssproxy-debuginfo-0.8.2-150100.3.12.1 * libverto-glib-debugsource-0.2.6-150000.5.2.1 * libev4-debuginfo-4.24-150000.4.2.1 * openSUSE Leap 15.5 (x86_64) * libev4-32bit-debuginfo-4.24-150000.4.2.1 * libverto-tevent1-32bit-debuginfo-0.2.6-150000.5.2.1 * libverto-glib1-32bit-0.2.6-150000.5.2.1 * libev4-32bit-4.24-150000.4.2.1 * libverto-libev1-32bit-debuginfo-0.2.6-150000.5.2.1 * libverto-libev1-32bit-0.2.6-150000.5.2.1 * libverto-glib1-32bit-debuginfo-0.2.6-150000.5.2.1 * libverto-tevent1-32bit-0.2.6-150000.5.2.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gssproxy-debugsource-0.8.2-150100.3.12.1 * libverto-libev1-0.2.6-150000.5.2.1 * gssproxy-0.8.2-150100.3.12.1 * libev4-4.24-150000.4.2.1 * gssproxy-debuginfo-0.8.2-150100.3.12.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libverto-libev1-debuginfo-0.2.6-150000.5.2.1 * libverto-libev-debugsource-0.2.6-150000.5.2.1 * libverto-libev1-0.2.6-150000.5.2.1 * libev-debugsource-4.24-150000.4.2.1 * libev-devel-4.24-150000.4.2.1 * libev4-4.24-150000.4.2.1 * libev4-debuginfo-4.24-150000.4.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218313

1 0

SUSE-RU-2024:0201-1: moderate: Recommended update for ecj
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for ecj Announcement ID: SUSE-RU-2024:0201-1 Rating: moderate References: * jsc#PED-2979 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for ecj fixes the following issues: * Upgradeded ecj to eclipse version 4.23, to be compatible with Java 17 tomcat webapps (jsc#PED-2979) * Use the bundled javax17api.jar stubs, but don't distribute them ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-201=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-201=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-201=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2024-201=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-201=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2024-201=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-201=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-201=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2024-201=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-201=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-201=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-201=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Enterprise Storage 7.1 (noarch) * ecj-4.23-150200.3.9.1 * openSUSE Leap 15.4 (noarch) * ecj-4.23-150200.3.9.1 * openSUSE Leap 15.5 (noarch) * ecj-4.23-150200.3.9.1 * Basesystem Module 15-SP4 (noarch) * ecj-4.23-150200.3.9.1 * Basesystem Module 15-SP5 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * ecj-4.23-150200.3.9.1 ## References: * https://jira.suse.com/browse/PED-2979

1 0

SUSE-SU-2024:0185-1: important: Security update for python-Pillow
by OPENSUSE-UPDATES 23 Jan '24

23 Jan '24

# Security update for python-Pillow Announcement ID: SUSE-SU-2024:0185-1 Rating: important References: * bsc#1219048 Cross-References: * CVE-2023-50447 CVSS scores: * CVE-2023-50447 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 An update that solves one vulnerability can now be installed. ## Description: This update for python-Pillow fixes the following issues: * CVE-2023-50447: Fixed arbitrary code execution via the environment parameter. (bsc#1219048) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-185=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-185=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python-Pillow-debuginfo-7.2.0-150300.3.6.1 * python3-Pillow-tk-debuginfo-7.2.0-150300.3.6.1 * python3-Pillow-tk-7.2.0-150300.3.6.1 * python3-Pillow-7.2.0-150300.3.6.1 * python-Pillow-debugsource-7.2.0-150300.3.6.1 * python3-Pillow-debuginfo-7.2.0-150300.3.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-Pillow-debuginfo-7.2.0-150300.3.6.1 * python3-Pillow-tk-debuginfo-7.2.0-150300.3.6.1 * python3-Pillow-tk-7.2.0-150300.3.6.1 * python3-Pillow-7.2.0-150300.3.6.1 * python-Pillow-debugsource-7.2.0-150300.3.6.1 * python3-Pillow-debuginfo-7.2.0-150300.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50447.html * https://bugzilla.suse.com/show_bug.cgi?id=1219048

1 0

SUSE-RU-2024:0187-1: moderate: Recommended update for python-chardet
by OPENSUSE-UPDATES 23 Jan '24

23 Jan '24

# Recommended update for python-chardet Announcement ID: SUSE-RU-2024:0187-1 Rating: moderate References: * bsc#1218765 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for python-chardet fixes the following issues: * Fix update-alternative in %postun (bsc#1218765) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-187=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-187=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-187=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-187=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-187=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-187=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-187=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-187=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-187=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-187=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-187=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-187=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * openSUSE Leap Micro 5.4 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * openSUSE Leap 15.5 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * Basesystem Module 15-SP5 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * python3-chardet-3.0.4-150000.5.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218765

1 0

SUSE-RU-2024:0188-1: critical: Recommended update for suseconnect-ng
by OPENSUSE-UPDATES 23 Jan '24

23 Jan '24

# Recommended update for suseconnect-ng Announcement ID: SUSE-RU-2024:0188-1 Rating: critical References: * bsc#1217961 * bsc#1218649 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for suseconnect-ng contains the following fix: * Update to version 1.6.0: * Disable EULA display for addons. (bsc#1218649 and bsc#1217961) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-188=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-188=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-188=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-188=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-188=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-188=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-188=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-188=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-188=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-188=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-188=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-188=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-188=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-188=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-188=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-debuginfo-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-debuginfo-1.6.0~git0.31371c8-150400.3.22.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-debuginfo-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-debuginfo-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-debuginfo-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Manager Proxy 4.3 (x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217961 * https://bugzilla.suse.com/show_bug.cgi?id=1218649

1 0

SUSE-FU-2024:0178-1: moderate: Feature update for tomcat10, jakarta-servlet, apache-commons-jexl
by OPENSUSE-UPDATES 23 Jan '24

23 Jan '24

# Feature update for tomcat10, jakarta-servlet, apache-commons-jexl Announcement ID: SUSE-FU-2024:0178-1 Rating: moderate References: * jsc#PED-6178 * jsc#PED-6477 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 * Web and Scripting Module 15-SP5 An update that contains two features can now be installed. ## Description: This update for tomcat10, jakarta-servlet and apache-commons-jexl fixes the following issues: tomcat10: * New package implementation of Tomcat 10.1.14 (jsc#PED-6178, jsc#PED-6377) apache-commons-jexl: * Included in SUSE Linux Enterprise 15 Service Pack 5 Web Scripting Module, as new package dependency to tomcat10 (no source changes) jakarta-servlet: * Included in SUSE Linux Enterprise 15 Service Pack 5 Web Scripting Module, as new package dependency to tomcat10 (no source changes) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-178=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-178=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-178=1 ## Package List: * openSUSE Leap 15.5 (noarch) * jakarta-servlet-5.0.0-150200.5.5.1 * tomcat10-admin-webapps-10.1.14-150200.5.5.1 * tomcat10-embed-10.1.14-150200.5.5.1 * tomcat10-el-5_0-api-10.1.14-150200.5.5.1 * tomcat10-webapps-10.1.14-150200.5.5.1 * tomcat10-servlet-6_0-api-10.1.14-150200.5.5.1 * apache-commons-jexl-2.1.1-150200.3.8.1 * jakarta-servlet-javadoc-5.0.0-150200.5.5.1 * tomcat10-docs-webapp-10.1.14-150200.5.5.1 * tomcat10-jsvc-10.1.14-150200.5.5.1 * tomcat10-jsp-3_1-api-10.1.14-150200.5.5.1 * tomcat10-10.1.14-150200.5.5.1 * apache-commons-jexl-javadoc-2.1.1-150200.3.8.1 * tomcat10-lib-10.1.14-150200.5.5.1 * SUSE Manager Server 4.3 Module 4.3 (noarch) * apache-commons-jexl-2.1.1-150200.3.8.1 * Web and Scripting Module 15-SP5 (noarch) * tomcat10-admin-webapps-10.1.14-150200.5.5.1 * jakarta-servlet-5.0.0-150200.5.5.1 * tomcat10-webapps-10.1.14-150200.5.5.1 * tomcat10-el-5_0-api-10.1.14-150200.5.5.1 * tomcat10-servlet-6_0-api-10.1.14-150200.5.5.1 * apache-commons-jexl-2.1.1-150200.3.8.1 * tomcat10-jsp-3_1-api-10.1.14-150200.5.5.1 * tomcat10-10.1.14-150200.5.5.1 * tomcat10-lib-10.1.14-150200.5.5.1 ## References: * https://jira.suse.com/browse/PED-6178 * https://jira.suse.com/browse/PED-6477

1 0

SUSE-SU-2024:0182-1: important: Security update for bluez
by OPENSUSE-UPDATES 23 Jan '24

23 Jan '24

# Security update for bluez Announcement ID: SUSE-SU-2024:0182-1 Rating: important References: * bsc#1218300 * bsc#1218301 Cross-References: * CVE-2023-50229 * CVE-2023-50230 CVSS scores: * CVE-2023-50229 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-50230 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300). * CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access Profile implementation (bsc#1218301). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-182=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-182=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-182=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-182=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-182=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * bluez-cups-5.55-150300.3.28.1 * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-cups-debuginfo-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-test-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-test-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * openSUSE Leap 15.3 (noarch) * bluez-auto-enable-devices-5.55-150300.3.28.1 * openSUSE Leap 15.3 (x86_64) * libbluetooth3-32bit-debuginfo-5.55-150300.3.28.1 * libbluetooth3-32bit-5.55-150300.3.28.1 * bluez-devel-32bit-5.55-150300.3.28.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libbluetooth3-64bit-5.55-150300.3.28.1 * libbluetooth3-64bit-debuginfo-5.55-150300.3.28.1 * bluez-devel-64bit-5.55-150300.3.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50229.html * https://www.suse.com/security/cve/CVE-2023-50230.html * https://bugzilla.suse.com/show_bug.cgi?id=1218300 * https://bugzilla.suse.com/show_bug.cgi?id=1218301

1 0