January 2024 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2024:0036-1: moderate: Security update for tinyssh
by opensuse-security＠opensuse.org 31 Jan '24

31 Jan '24

openSUSE Security Update: Security update for tinyssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0036-1 Rating: moderate References: #1218197 Cross-References: CVE-2023-48795 CVSS scores: CVE-2023-48795 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2023-48795 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tinyssh fixes the following issues: tinyssh was updated to 20240101 (boo#1218197, CVE-2023-48795): * fixed channel_forkpty() race condition between close(slave) in parent process and login_tty(slave) in child process * fixed behavior when using terminal mode and stdin redirected to /dev/null 'ssh -tt -n' * added an 'strict-key' key exchange kex-strict- s-v00(a)openssh.com (Mitigates CVE-2023-48795 "Terrapin attack") Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-36=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): tinyssh-20240101-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-48795.html https://bugzilla.suse.com/1218197

1 0

openSUSE-SU-2024:0037-1: moderate: Security update for mbedtls
by opensuse-security＠opensuse.org 31 Jan '24

31 Jan '24

openSUSE Security Update: Security update for mbedtls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0037-1 Rating: moderate References: #1219336 Cross-References: CVE-2024-23170 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mbedtls fixes the following issues: - Update to version 2.28.7: - Resolves CVE-2024-23170 boo#1219336 - Update to 2.28.6: Changes: * Mbed TLS is now released under a dual Apache-2.0 OR GPL-2.0-or-later license. Users may choose which license they take the code under. - Update to 2.28.5: Features: * The documentation of mbedtls_ecp_group now describes the optimized representation of A for some curves. Fixes gh#Mbed-TLS/mbedtls#8045. Security: * Developers using mbedtls_pkcs5_pbes2() or mbedtls_pkcs12_pbe() should review the size of the output buffer passed to this function, and note that the output after decryption may include CBC padding. Consider moving to the new functions mbedtls_pkcs5_pbes2_ext() or mbedtls_pkcs12_pbe_ext() which checks for overflow of the output buffer and reports the actual length of the output. * Improve padding calculations in CBC decryption, NIST key unwrapping and RSA OAEP decryption. With the previous implementation, some compilers (notably recent versions of Clang and IAR) could produce non-constant time code, which could allow a padding oracle attack if the attacker has access to precise timing measurements. * Fix a buffer overread when parsing short TLS application data records in ARC4 or null-cipher cipher suites. Credit to OSS-Fuzz. Bugfix: * Fix x509 certificate generation to conform to RFC 5480 / RFC 5758 when using ECC key. The certificate was rejected by some crypto frameworks. Fixes gh#Mbed-TLS/mbedtls#2924. * Fix some cases where mbedtls_mpi_mod_exp, RSA key construction or ECDSA signature can silently return an incorrect result in low memory conditions. * Fix IAR compiler warnings. Fixes gh#Mbed-TLS/mbedtls#7873, gh#Mbed-TLS/mbedtls#4300. * Fix an issue when parsing an otherName subject alternative name into a mbedtls_x509_san_other_name struct. The type-id of the otherName was not copied to the struct. This meant that the struct had incomplete information about the otherName SAN and contained uninitialized memory. * Fix the detection of HardwareModuleName otherName SANs. These were being detected by comparing the wrong field and the check was erroneously inverted. * Fix an error when MBEDTLS_ECDSA_SIGN_ALT is defined but not MBEDTLS_ECDSA_VERIFY_ALT, causing ecdsa verify to fail. Fixes gh#Mbed-TLS/mbedtls#7498. Functions in the ssl_cache module now return a negative MBEDTLS_ERR_xxx error code on failure. Before, they returned 1 to indicate failure in some cases involving a missing entry or a full cache. Changes: * In configurations with ARIA or Camellia but not AES, the value of MBEDTLS_CIPHER_BLKSIZE_MAX was 8, rather than 16 as the name might suggest. This did not affect any library code, because this macro was only used in relation with CMAC which does not support these ciphers. Its value is now 16 if ARIA or Camellia are present. This may affect application code that uses this macro. - Update to 2.28.4: Features: * Allow MBEDTLS_CONFIG_FILE and MBEDTLS_USER_CONFIG_FILE to be set by setting the CMake variable of the same name at configuration time. Bugfix: * Fix crypt_and_hash decryption fail when used with a stream cipher mode of operation, due to the input not being a multiple of the block size. Resolves #7417. * Fix a bug where mbedtls_x509_string_to_names() would return success when given a invalid name string, if it did not contain '=' or ','. * Fix missing PSA initialization in sample programs when MBEDTLS_USE_PSA_CRYPTO is enabled. * Fix clang and armclang compilation error when targeting certain Arm M-class CPUs (Cortex-M0, Cortex-M0+, Cortex-M1, Cortex-M23, SecurCore SC000). Fixes #1077. * Fixed an issue that caused compile errors when using CMake and the IAR toolchain. * Fix the build with MBEDTLS_PSA_INJECT_ENTROPY. Fixes #7516. * Fix builds on Windows with clang. * Fix compilation warnings in aes.c for certain combinations of configuration options. * Fix a compilation error on some platforms when including mbedtls/ssl.h with all TLS support disabled. Fixes #6628. Changes: * Update test data to avoid failures of unit tests after 2023-08-07, and update expiring certififcates in the certs - Update to 2.28.3: Features: * Use HOSTCC (if it is set) when compiling C code during generation of the configuration-independent files. This allows them to be generated when CC is set for cross compilation. * AES-NI is now supported with Visual Studio. * AES-NI is now supported in 32-bit builds, or when MBEDTLS_HAVE_ASM is disabled, when compiling with GCC or Clang or a compatible compiler for a target CPU that supports the requisite instructions (for example gcc -m32 -msse2 -maes -mpclmul). (Generic x86 builds with GCC-like compilers still require MBEDTLS_HAVE_ASM and a 64-bit target.) Security: * MBEDTLS_AESNI_C, which is enabled by default, was silently ignored on builds that couldn't compile the GCC-style assembly implementation (most notably builds with Visual Studio), leaving them vulnerable to timing side-channel attacks. There is now an intrinsics-based AES-NI implementation as a fallback for when the assembly one cannot be used. Bugfix: * Fix a build issue on Windows where the source and build directory could not be on different drives (#5751). * Fix possible integer overflow in mbedtls_timing_hardclock(), which could cause a crash for certain platforms & compiler options. * Fix IAR compiler warnings. Fixes #6924. * Fix a bug in the build where directory names containing spaces were causing generate_errors.pl to error out resulting in a build failure. Fixes issue #6879. * Fix compile error where MBEDTLS_RSA_C and MBEDTLS_X509_CRT_WRITE_C are defined, but MBEDTLS_PK_RSA_ALT_SUPPORT is not defined. Fixes #3174. * Fix a build issue when defining MBEDTLS_TIMING_ALT and MBEDTLS_SELF_TEST. The library would not link if the user didn't provide an external self-test function. The self-test is now provided regardless of the choice of internal/alternative timing implementation. Fixes #6923. * mbedtls_x509write_crt_set_serial() now explicitly rejects serial numbers whose binary representation is longer than 20 bytes. This was already forbidden by the standard (RFC5280 - section 4.1.2.2) and now it's being enforced also at code level. * Fix potential undefined behavior in mbedtls_mpi_sub_abs(). Reported by Pascal Cuoq using TrustInSoft Analyzer in #6701; observed independently by Aaron Ucko under Valgrind. * Fix behavior of certain sample programs which could, when run with no arguments, access uninitialized memory in some cases. Fixes #6700 (which was found by TrustInSoft Analyzer during REDOCS'22) and #1120. * Fix build errors in test programs when MBEDTLS_CERTS_C is disabled. Fixes #6243. * Fix parsing of X.509 SubjectAlternativeName extension. Previously, malformed alternative name components were not caught during initial certificate parsing, but only on subsequent calls to mbedtls_x509_parse_subject_alt_name(). Fixes #2838. * Fix bug in conversion from OID to string in mbedtls_oid_get_numeric_string(). OIDs such as 2.40.0.25 are now printed correctly. * Reject OIDs with overlong-encoded subidentifiers when converting them to a string. * Reject OIDs with subidentifier values exceeding UINT_MAX. Such subidentifiers can be valid, but Mbed TLS cannot currently handle them. * Reject OIDs that have unterminated subidentifiers, or (equivalently) have the most-significant bit set in their last byte. * Silence a warning about an unused local variable in bignum.c on some architectures. Fixes #7166. * Silence warnings from clang -Wdocumentation about empty \retval descriptions, which started appearing with Clang 15. Fixes #6960. * Fix undefined behavior in mbedtls_ssl_read() and mbedtls_ssl_write() if len argument is 0 and buffer is NULL. Changes: * The C code follows a new coding style. This is transparent for users but affects contributors and maintainers of local patches. For more information, see https://mbed-tls.readthedocs.io/en/latest/kb/how-to/rewrite-branch-for-codi ng-style/ * Changed the default MBEDTLS_ECP_WINDOW_SIZE from 6 to 2. As tested in issue 6790, the correlation between this define and RSA decryption performance has changed lately due to security fixes. To fix the performance degradation when using default values the window was reduced from 6 to 2, a value that gives the best or close to best results when tested on Cortex-M4 and Intel i7. - Setup the mbedtls-2 package - Build AVX2 enabled hwcaps library for x86_64-v3 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-37=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libmbedcrypto7-2.28.7-bp155.2.3.1 libmbedtls14-2.28.7-bp155.2.3.1 libmbedx509-1-2.28.7-bp155.2.3.1 mbedtls-devel-2.28.7-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): libmbedcrypto7-64bit-2.28.7-bp155.2.3.1 libmbedtls14-64bit-2.28.7-bp155.2.3.1 libmbedx509-1-64bit-2.28.7-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (x86_64): libmbedcrypto7-32bit-2.28.7-bp155.2.3.1 libmbedtls14-32bit-2.28.7-bp155.2.3.1 libmbedx509-1-32bit-2.28.7-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-23170.html https://bugzilla.suse.com/1219336

1 0

openSUSE-RU-2024:0035-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 31 Jan '24

31 Jan '24

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0035-1 Rating: moderate References: #1219232 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fwts fixes the following issues: - Only build on supported architectures (boo#1219232) Update to version 23.11.00: * snapcraft: add source type for repo * snapcraft: update the source repo for snap build * lib: fwts_version.h - update to V23.11.00 * debian: update changelog * fwts-test: add regression tests for iBFT * acpi: ibft: add tests for iBFT table * auto-packager: mkpackage.sh: add noble * lib: framework: fix the unclear error message of the results log * auto-packager: update the fwts git repo * fwts-test: add regression tests for RAS2 * acpi: ras2: add test for ACPI RAS2 table * acpi/wmi: Add WMI GUID for the wmi-bmof driver * fwts-test: sync up with the klog message update * fwts-test: sync up the SPTT typo fix * klog.json: Add some missing power kernel messages to klog database * klog.json: Add some missing battery kernel messages to klog database * klog.json: Add some missing bus kernel messages to klog database * klog.json: Add some missing nsaccess kernel messages to klog database * klog.json: Add some missing exutils kernel messages to klog database * klog.json: Add some missing hwregs kernel messages to klog database * klog.json: Add some missing tbfadt kernel messages to klog database * klog.json: Add some missing exfield kernel messages to klog database * klog.json: Add some missing rslist kernel messages to klog database * klog.json: Add some missing evmisc kernel messages to klog database * klog.json: Add some missing exmisc kernel messages to klog database * klog.json: Add some missing efi64 kernel messages to klog database * klog.json: Add some missing exresolv kernel messages to klog database * acpi: aspt: fix typo of SPTT * README: modify the fwts git repository * klog.json: Add some missinig processor_perflib kernel messages to klog database * klog.json: Add some missing apmt kernel messages to klog database * klog.json: Add some missing hest kernel messages to klog database * lib: fwts_acpi_table: fix fwts_acpi_reserved_zero_array with the input string * klog.json: Add some missing erst kernel messages to klog database * klog.json: Add some missing bert kernel messages to klog database * klog.json: Add some missing einj kernel messages to klog database * fwts-test: sync up with Recognize Pluton TPM patch * acpi: Recognize Pluton TPM * lib: fwts_version.h - update to V23.09.00 * debian: update changelog * klog.json: Add some missing ACPI PCI IRQ kernel messages to klog database * tpmevlog: Correct boundary checking for PCR4 event check * acpi: ivrs: fix the tests stuck at validate IVRS table * klog.json: Add some missing dma kernel messages to klog database * klog.json: Add some missing amba kernel messages to klog database * klog.json: Add some missing sleep kernel messages to klog database * klog.json: Add some missing ACPI NFIT kernel messages to klog database * klog.json: Add some missing processor idle kernel messages to klog database * klog.json: Add some missing ACPI memory hotplug kernel messages to klog database * kernelscan: modify some pathes of the scan files * acpi: madt: add more interrupt controller structure types defined in ACPI 6.5 * uefi: esrt: fix the last_attempt_status wrongly interpretation of value * acpi: fadt: remove the tests for expecting smi_cmd is zero * fwts-test: sync up with iort test to version E.e * acpi: iort: update IORT table to specification version E.e * lib: fwts_acpi_object_eval.: fix build fail for ppc64el on mantic * auto-packager: mkpackage.sh: remove kinetic * acpi: s3: build fail for unexpected format of argument types for i386 * fwts-test: sync up with the dumping s3-dump-wakeup-src option * snapcraft: add snap build for riscv64 * s3: add dumping the all devices and signed wakeup sources * s3: add checking the device signed wakeup events * dmicheck: update supported DMI version to 3.7 * Upgrade the max value for "Processor Upgrade" to 0x50 * fwts-test: sync up the spcr test updating to revision 4 * acpi: spcr: update the spcr tests to lastest revision 4 * fwts-test: sync up with the phat dumping vendor data modification * acpi: phat: modify the dumping vendor data format * klog.json: Add and modify some more e820 kernel messages to klog database * fwts-test: sync up with phat fix the device path for the health data record * acpi: phat: fix the device path for the health data record * uefi: esrtdump: update the LastAttemptStatus values to UEFI spec 2.10 * acpi: update fadt and madt revisions to ACPI 6.5 * fwts-test: sync up with update supported port types * fwts-test: sync up with klog.json ix spelling mistakes found using codespell * acpi/scpr: spcr->interrupt_type == 0 is valid * acpi/spcr: Update supported port types * src/*: Fix various spelling mistakes in source code * data/klog.json: Fix spelling mistakes found using codespell Update to version 23.07.00: * lib: fwts_version.h - update to V23.07.00 * debian: update changelog * debian: fix lintian errors and warnings * debian: fix debuild fail for the not installed files * debian: update compat level and standards version * ACPICA: Update to version 20230628 * fwts_acpica: Remove unused variable "context" * acpi/wmi: Fix bug when counting WMI methods * acpi/wmi: Check if the mandatory block query method exists * acpi/wmi: Add WMI GUID for the dell-wmi-ddv driver * Increase number of max semaphores to fix OOM crashes on some systems * lib: fwts_acpi_object_eval: sync up the AML exceptions from ACPICA * uefi: esrt: update the LastAttemptStatus values to UEFI spec 2.10 * acpi: mpam: fix build fail on bionic * fwts-test: sync up with test with resource specific data * acpi: mpam: test with resource specific data for interconnect location type * fwts-test: sync up with adding the mpam tests * acpi: mpam: add test for ACPI MPAM table * fwts-test: sync up aest modify the dumping raw data * acpi: aest: modify the dumping raw data without noisy info * lib: fwts_dump_data: add library function for dumping all raw data with prefix * lib: fwts_dump_data: add function for simply dump raw data * auto-packager: mkpackage.sh: remove the control hook * lib: make the return types consistent * debian: control: modify newer dkms dependency * debian: control: update uploader * lib: fwts_oops: fix the WARN_ON warnings in kernel not found * cppcheck: fix the cppcheck source link error * fwts-test: sync up the removing ARM specific for ebbr * lib: framework: remvoe ARM specific for ebbr Update to version 23.05.00: * lib: fwts_version.h - update to V23.05.00 * debian: update changelog * auto-packager: mkpackage.sh remove the dh-dkms dependency * debian: control: add build depend dh-dkms * auto-packager: mkpackage.sh: add mantic * fwts_framwork: add ebbr test for RISC-V * s3: fix the display time of resume for Timekeeping suspended string missing * lib: fwts_framework: add EBBR to category * acpi: button: remove check fixed hardware & control method power buttons * fwts-test: add regression tests for IVRS * acpi: ivrs: add tests for ACPI IVRS table * acpi: cedt: remove unused code * dmicheck: add more checks for invalid serial number string * ACPICA: Update to version 20230331 * dmicheck: extent the dmi_patterns for the default serial number string Update to version 23.03.00: * lib: fwts_version.h - update to V23.03.00 * debian: update changelog * auto-packager: mkpackage: add build depend dh-dkms for lunar * dmicheck: fix the print format * dmicheck: update for supporting DMI version to 3.6 * dmicheck: update the device type field for type 41 * dmicheck: update the interface field for type 21 * dmicheck: add some bit 0 reserved checks for type 17 * dmicheck: modify the memory type range check for type 17 * dmicheck: add bit 0 reserved check of the processor characteristics for type 4 * dmicheck: add status check for type 4 * dmicheck: add processor family check for type 4 * dmicheck: fix the extended bios ROM size bit check of type 0 * dmicheck: fix the wrong slot height value range * dmicheck: fix the length check error for type 9 * debian: update copyright * acpi: method: NIH method output buffer should be 4 bytes * ebbr: add some tests to ebbr option * sbbr: add esrt and uefibootpath tests to sbbr option * Add support for 64 bit LoongArch compilation * libfwtsiasl: fix undefined symbols in shared library Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-35=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 x86_64): fwts-23.11.00-bp155.2.3.1 References: https://bugzilla.suse.com/1219232

1 0

SUSE-SU-2024:0283-1: important: Security update for slurm_22_05
by OPENSUSE-UPDATES 31 Jan '24

31 Jan '24

# Security update for slurm_22_05 Announcement ID: SUSE-SU-2024:0283-1 Rating: important References: * bsc#1216869 * bsc#1217711 * bsc#1218046 * bsc#1218050 * bsc#1218051 * bsc#1218053 Cross-References: * CVE-2023-49933 * CVE-2023-49936 * CVE-2023-49937 * CVE-2023-49938 CVSS scores: * CVE-2023-49933 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49933 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49936 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49936 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-49937 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49937 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49938 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49938 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 An update that solves four vulnerabilities and has two security fixes can now be installed. ## Description: This update for slurm_22_05 fixes the following issues: Update to slurm 22.05.11: Security fixes: * CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046) * CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050) * CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051) * CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053) Other fixes: * Add missing service file for slurmrestd (bsc#1217711). * Fix slurm upgrading to incompatible versions (bsc#1216869). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-283=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-283=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-283=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-283=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-283=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * slurm_22_05-pam_slurm-22.05.11-150300.7.9.1 * slurm_22_05-pam_slurm-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-slurmdbd-22.05.11-150300.7.9.1 * slurm_22_05-torque-22.05.11-150300.7.9.1 * slurm_22_05-devel-22.05.11-150300.7.9.1 * slurm_22_05-slurmdbd-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-munge-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-torque-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-debugsource-22.05.11-150300.7.9.1 * slurm_22_05-rest-22.05.11-150300.7.9.1 * slurm_22_05-hdf5-22.05.11-150300.7.9.1 * slurm_22_05-sjstat-22.05.11-150300.7.9.1 * perl-slurm_22_05-22.05.11-150300.7.9.1 * libpmi0_22_05-22.05.11-150300.7.9.1 * perl-slurm_22_05-debuginfo-22.05.11-150300.7.9.1 * libnss_slurm2_22_05-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sql-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-cray-22.05.11-150300.7.9.1 * slurm_22_05-lua-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sql-22.05.11-150300.7.9.1 * slurm_22_05-seff-22.05.11-150300.7.9.1 * slurm_22_05-lua-22.05.11-150300.7.9.1 * slurm_22_05-cray-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-22.05.11-150300.7.9.1 * slurm_22_05-auth-none-22.05.11-150300.7.9.1 * slurm_22_05-plugins-debuginfo-22.05.11-150300.7.9.1 * libslurm38-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-rest-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sview-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-auth-none-debuginfo-22.05.11-150300.7.9.1 * libslurm38-22.05.11-150300.7.9.1 * slurm_22_05-munge-22.05.11-150300.7.9.1 * slurm_22_05-sview-22.05.11-150300.7.9.1 * slurm_22_05-plugins-22.05.11-150300.7.9.1 * slurm_22_05-openlava-22.05.11-150300.7.9.1 * libnss_slurm2_22_05-22.05.11-150300.7.9.1 * slurm_22_05-hdf5-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-node-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-node-22.05.11-150300.7.9.1 * slurm_22_05-testsuite-22.05.11-150300.7.9.1 * libpmi0_22_05-debuginfo-22.05.11-150300.7.9.1 * openSUSE Leap 15.3 (noarch) * slurm_22_05-config-man-22.05.11-150300.7.9.1 * slurm_22_05-config-22.05.11-150300.7.9.1 * slurm_22_05-webdoc-22.05.11-150300.7.9.1 * slurm_22_05-doc-22.05.11-150300.7.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * slurm_22_05-pam_slurm-22.05.11-150300.7.9.1 * slurm_22_05-pam_slurm-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-slurmdbd-22.05.11-150300.7.9.1 * slurm_22_05-torque-22.05.11-150300.7.9.1 * slurm_22_05-devel-22.05.11-150300.7.9.1 * slurm_22_05-slurmdbd-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-munge-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-torque-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-debugsource-22.05.11-150300.7.9.1 * slurm_22_05-rest-22.05.11-150300.7.9.1 * slurm_22_05-hdf5-22.05.11-150300.7.9.1 * slurm_22_05-sjstat-22.05.11-150300.7.9.1 * perl-slurm_22_05-22.05.11-150300.7.9.1 * libpmi0_22_05-22.05.11-150300.7.9.1 * perl-slurm_22_05-debuginfo-22.05.11-150300.7.9.1 * libnss_slurm2_22_05-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sql-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-cray-22.05.11-150300.7.9.1 * slurm_22_05-lua-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sql-22.05.11-150300.7.9.1 * slurm_22_05-seff-22.05.11-150300.7.9.1 * slurm_22_05-lua-22.05.11-150300.7.9.1 * slurm_22_05-cray-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-22.05.11-150300.7.9.1 * slurm_22_05-auth-none-22.05.11-150300.7.9.1 * slurm_22_05-plugins-debuginfo-22.05.11-150300.7.9.1 * libslurm38-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-rest-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sview-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-auth-none-debuginfo-22.05.11-150300.7.9.1 * libslurm38-22.05.11-150300.7.9.1 * slurm_22_05-munge-22.05.11-150300.7.9.1 * slurm_22_05-sview-22.05.11-150300.7.9.1 * slurm_22_05-plugins-22.05.11-150300.7.9.1 * slurm_22_05-openlava-22.05.11-150300.7.9.1 * libnss_slurm2_22_05-22.05.11-150300.7.9.1 * slurm_22_05-hdf5-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-node-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-node-22.05.11-150300.7.9.1 * slurm_22_05-testsuite-22.05.11-150300.7.9.1 * libpmi0_22_05-debuginfo-22.05.11-150300.7.9.1 * openSUSE Leap 15.5 (noarch) * slurm_22_05-config-man-22.05.11-150300.7.9.1 * slurm_22_05-config-22.05.11-150300.7.9.1 * slurm_22_05-webdoc-22.05.11-150300.7.9.1 * slurm_22_05-doc-22.05.11-150300.7.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * slurm_22_05-pam_slurm-22.05.11-150300.7.9.1 * slurm_22_05-pam_slurm-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-slurmdbd-22.05.11-150300.7.9.1 * slurm_22_05-torque-22.05.11-150300.7.9.1 * slurm_22_05-devel-22.05.11-150300.7.9.1 * slurm_22_05-slurmdbd-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-munge-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-torque-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-debugsource-22.05.11-150300.7.9.1 * slurm_22_05-rest-22.05.11-150300.7.9.1 * perl-slurm_22_05-22.05.11-150300.7.9.1 * libpmi0_22_05-22.05.11-150300.7.9.1 * perl-slurm_22_05-debuginfo-22.05.11-150300.7.9.1 * libnss_slurm2_22_05-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sql-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-lua-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sql-22.05.11-150300.7.9.1 * slurm_22_05-lua-22.05.11-150300.7.9.1 * slurm_22_05-22.05.11-150300.7.9.1 * slurm_22_05-auth-none-22.05.11-150300.7.9.1 * slurm_22_05-plugins-debuginfo-22.05.11-150300.7.9.1 * libslurm38-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-rest-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sview-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-auth-none-debuginfo-22.05.11-150300.7.9.1 * libslurm38-22.05.11-150300.7.9.1 * slurm_22_05-munge-22.05.11-150300.7.9.1 * slurm_22_05-sview-22.05.11-150300.7.9.1 * slurm_22_05-plugins-22.05.11-150300.7.9.1 * libnss_slurm2_22_05-22.05.11-150300.7.9.1 * slurm_22_05-node-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-node-22.05.11-150300.7.9.1 * libpmi0_22_05-debuginfo-22.05.11-150300.7.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * slurm_22_05-config-man-22.05.11-150300.7.9.1 * slurm_22_05-config-22.05.11-150300.7.9.1 * slurm_22_05-webdoc-22.05.11-150300.7.9.1 * slurm_22_05-doc-22.05.11-150300.7.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * slurm_22_05-pam_slurm-22.05.11-150300.7.9.1 * slurm_22_05-pam_slurm-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-slurmdbd-22.05.11-150300.7.9.1 * slurm_22_05-torque-22.05.11-150300.7.9.1 * slurm_22_05-devel-22.05.11-150300.7.9.1 * slurm_22_05-slurmdbd-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-munge-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-torque-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-debugsource-22.05.11-150300.7.9.1 * slurm_22_05-rest-22.05.11-150300.7.9.1 * perl-slurm_22_05-22.05.11-150300.7.9.1 * libpmi0_22_05-22.05.11-150300.7.9.1 * perl-slurm_22_05-debuginfo-22.05.11-150300.7.9.1 * libnss_slurm2_22_05-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sql-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-cray-22.05.11-150300.7.9.1 * slurm_22_05-lua-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sql-22.05.11-150300.7.9.1 * slurm_22_05-lua-22.05.11-150300.7.9.1 * slurm_22_05-cray-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-22.05.11-150300.7.9.1 * slurm_22_05-auth-none-22.05.11-150300.7.9.1 * slurm_22_05-plugins-debuginfo-22.05.11-150300.7.9.1 * libslurm38-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-rest-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sview-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-auth-none-debuginfo-22.05.11-150300.7.9.1 * libslurm38-22.05.11-150300.7.9.1 * slurm_22_05-munge-22.05.11-150300.7.9.1 * slurm_22_05-sview-22.05.11-150300.7.9.1 * slurm_22_05-plugins-22.05.11-150300.7.9.1 * libnss_slurm2_22_05-22.05.11-150300.7.9.1 * slurm_22_05-node-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-node-22.05.11-150300.7.9.1 * libpmi0_22_05-debuginfo-22.05.11-150300.7.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * slurm_22_05-config-man-22.05.11-150300.7.9.1 * slurm_22_05-config-22.05.11-150300.7.9.1 * slurm_22_05-webdoc-22.05.11-150300.7.9.1 * slurm_22_05-doc-22.05.11-150300.7.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * slurm_22_05-pam_slurm-22.05.11-150300.7.9.1 * slurm_22_05-pam_slurm-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-slurmdbd-22.05.11-150300.7.9.1 * slurm_22_05-torque-22.05.11-150300.7.9.1 * slurm_22_05-devel-22.05.11-150300.7.9.1 * slurm_22_05-slurmdbd-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-munge-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-torque-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-debugsource-22.05.11-150300.7.9.1 * slurm_22_05-rest-22.05.11-150300.7.9.1 * perl-slurm_22_05-22.05.11-150300.7.9.1 * libpmi0_22_05-22.05.11-150300.7.9.1 * perl-slurm_22_05-debuginfo-22.05.11-150300.7.9.1 * libnss_slurm2_22_05-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sql-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-cray-22.05.11-150300.7.9.1 * slurm_22_05-lua-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sql-22.05.11-150300.7.9.1 * slurm_22_05-lua-22.05.11-150300.7.9.1 * slurm_22_05-cray-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-22.05.11-150300.7.9.1 * slurm_22_05-auth-none-22.05.11-150300.7.9.1 * slurm_22_05-plugins-debuginfo-22.05.11-150300.7.9.1 * libslurm38-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-rest-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-sview-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-auth-none-debuginfo-22.05.11-150300.7.9.1 * libslurm38-22.05.11-150300.7.9.1 * slurm_22_05-munge-22.05.11-150300.7.9.1 * slurm_22_05-sview-22.05.11-150300.7.9.1 * slurm_22_05-plugins-22.05.11-150300.7.9.1 * libnss_slurm2_22_05-22.05.11-150300.7.9.1 * slurm_22_05-node-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-debuginfo-22.05.11-150300.7.9.1 * slurm_22_05-node-22.05.11-150300.7.9.1 * libpmi0_22_05-debuginfo-22.05.11-150300.7.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * slurm_22_05-config-man-22.05.11-150300.7.9.1 * slurm_22_05-config-22.05.11-150300.7.9.1 * slurm_22_05-webdoc-22.05.11-150300.7.9.1 * slurm_22_05-doc-22.05.11-150300.7.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-49933.html * https://www.suse.com/security/cve/CVE-2023-49936.html * https://www.suse.com/security/cve/CVE-2023-49937.html * https://www.suse.com/security/cve/CVE-2023-49938.html * https://bugzilla.suse.com/show_bug.cgi?id=1216869 * https://bugzilla.suse.com/show_bug.cgi?id=1217711 * https://bugzilla.suse.com/show_bug.cgi?id=1218046 * https://bugzilla.suse.com/show_bug.cgi?id=1218050 * https://bugzilla.suse.com/show_bug.cgi?id=1218051 * https://bugzilla.suse.com/show_bug.cgi?id=1218053

1 0

SUSE-SU-2024:0284-1: important: Security update for slurm
by OPENSUSE-UPDATES 31 Jan '24

31 Jan '24

# Security update for slurm Announcement ID: SUSE-SU-2024:0284-1 Rating: important References: * bsc#1216869 * bsc#1217711 * bsc#1218046 * bsc#1218049 * bsc#1218050 * bsc#1218051 * bsc#1218053 Cross-References: * CVE-2023-49933 * CVE-2023-49935 * CVE-2023-49936 * CVE-2023-49937 * CVE-2023-49938 CVSS scores: * CVE-2023-49933 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49933 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49935 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49935 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49936 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49936 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-49937 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49937 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49938 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49938 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves five vulnerabilities and has two security fixes can now be installed. ## Description: This update for slurm fixes the following issues: Update to slurm 23.02.6: Security fixes: * CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046) * CVE-2023-49935: Prevent message hash bypass in slurmd which can allow an attacker to reuse root-level MUNGE tokens and escalate permissions. (bsc#1218049) * CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050) * CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051) * CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053) Other fixes: * Add missing service file for slurmrestd (bsc#1217711). * Fix slurm upgrading to incompatible versions (bsc#1216869). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2024-284=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-284=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-284=1 openSUSE-SLE-15.5-2024-284=1 ## Package List: * HPC Module 15-SP5 (aarch64 x86_64) * slurm-sql-debuginfo-23.02.7-150500.5.15.1 * slurm-munge-23.02.7-150500.5.15.1 * slurm-cray-23.02.7-150500.5.15.1 * slurm-pam_slurm-debuginfo-23.02.7-150500.5.15.1 * slurm-slurmdbd-debuginfo-23.02.7-150500.5.15.1 * slurm-rest-23.02.7-150500.5.15.1 * slurm-torque-debuginfo-23.02.7-150500.5.15.1 * slurm-plugin-ext-sensors-rrd-23.02.7-150500.5.15.1 * perl-slurm-debuginfo-23.02.7-150500.5.15.1 * slurm-auth-none-23.02.7-150500.5.15.1 * slurm-plugin-ext-sensors-rrd-debuginfo-23.02.7-150500.5.15.1 * slurm-sview-23.02.7-150500.5.15.1 * slurm-debuginfo-23.02.7-150500.5.15.1 * slurm-23.02.7-150500.5.15.1 * slurm-node-23.02.7-150500.5.15.1 * slurm-devel-23.02.7-150500.5.15.1 * slurm-plugins-debuginfo-23.02.7-150500.5.15.1 * slurm-torque-23.02.7-150500.5.15.1 * libpmi0-23.02.7-150500.5.15.1 * libpmi0-debuginfo-23.02.7-150500.5.15.1 * slurm-auth-none-debuginfo-23.02.7-150500.5.15.1 * slurm-sql-23.02.7-150500.5.15.1 * libnss_slurm2-23.02.7-150500.5.15.1 * libnss_slurm2-debuginfo-23.02.7-150500.5.15.1 * slurm-cray-debuginfo-23.02.7-150500.5.15.1 * slurm-rest-debuginfo-23.02.7-150500.5.15.1 * slurm-sview-debuginfo-23.02.7-150500.5.15.1 * perl-slurm-23.02.7-150500.5.15.1 * slurm-pam_slurm-23.02.7-150500.5.15.1 * slurm-debugsource-23.02.7-150500.5.15.1 * slurm-lua-23.02.7-150500.5.15.1 * libslurm39-debuginfo-23.02.7-150500.5.15.1 * libslurm39-23.02.7-150500.5.15.1 * slurm-munge-debuginfo-23.02.7-150500.5.15.1 * slurm-node-debuginfo-23.02.7-150500.5.15.1 * slurm-plugins-23.02.7-150500.5.15.1 * slurm-slurmdbd-23.02.7-150500.5.15.1 * slurm-lua-debuginfo-23.02.7-150500.5.15.1 * HPC Module 15-SP5 (noarch) * slurm-config-man-23.02.7-150500.5.15.1 * slurm-doc-23.02.7-150500.5.15.1 * slurm-config-23.02.7-150500.5.15.1 * slurm-webdoc-23.02.7-150500.5.15.1 * SUSE Package Hub 15 15-SP5 (ppc64le s390x) * slurm-sql-debuginfo-23.02.7-150500.5.15.1 * slurm-munge-23.02.7-150500.5.15.1 * slurm-cray-23.02.7-150500.5.15.1 * slurm-pam_slurm-debuginfo-23.02.7-150500.5.15.1 * slurm-slurmdbd-debuginfo-23.02.7-150500.5.15.1 * slurm-rest-23.02.7-150500.5.15.1 * slurm-hdf5-23.02.7-150500.5.15.1 * slurm-torque-debuginfo-23.02.7-150500.5.15.1 * perl-slurm-debuginfo-23.02.7-150500.5.15.1 * slurm-auth-none-23.02.7-150500.5.15.1 * slurm-sview-23.02.7-150500.5.15.1 * slurm-debuginfo-23.02.7-150500.5.15.1 * slurm-23.02.7-150500.5.15.1 * slurm-node-23.02.7-150500.5.15.1 * slurm-devel-23.02.7-150500.5.15.1 * slurm-plugins-debuginfo-23.02.7-150500.5.15.1 * slurm-torque-23.02.7-150500.5.15.1 * libpmi0-23.02.7-150500.5.15.1 * libpmi0-debuginfo-23.02.7-150500.5.15.1 * slurm-auth-none-debuginfo-23.02.7-150500.5.15.1 * slurm-sql-23.02.7-150500.5.15.1 * libnss_slurm2-23.02.7-150500.5.15.1 * libnss_slurm2-debuginfo-23.02.7-150500.5.15.1 * slurm-cray-debuginfo-23.02.7-150500.5.15.1 * slurm-rest-debuginfo-23.02.7-150500.5.15.1 * slurm-sview-debuginfo-23.02.7-150500.5.15.1 * perl-slurm-23.02.7-150500.5.15.1 * slurm-pam_slurm-23.02.7-150500.5.15.1 * slurm-debugsource-23.02.7-150500.5.15.1 * slurm-lua-23.02.7-150500.5.15.1 * slurm-munge-debuginfo-23.02.7-150500.5.15.1 * slurm-hdf5-debuginfo-23.02.7-150500.5.15.1 * slurm-node-debuginfo-23.02.7-150500.5.15.1 * slurm-plugins-23.02.7-150500.5.15.1 * slurm-slurmdbd-23.02.7-150500.5.15.1 * slurm-lua-debuginfo-23.02.7-150500.5.15.1 * SUSE Package Hub 15 15-SP5 (noarch) * slurm-seff-23.02.7-150500.5.15.1 * slurm-openlava-23.02.7-150500.5.15.1 * slurm-doc-23.02.7-150500.5.15.1 * slurm-config-23.02.7-150500.5.15.1 * slurm-webdoc-23.02.7-150500.5.15.1 * slurm-config-man-23.02.7-150500.5.15.1 * slurm-sjstat-23.02.7-150500.5.15.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * slurm-sql-debuginfo-23.02.7-150500.5.15.1 * slurm-munge-23.02.7-150500.5.15.1 * slurm-cray-23.02.7-150500.5.15.1 * slurm-pam_slurm-debuginfo-23.02.7-150500.5.15.1 * slurm-slurmdbd-debuginfo-23.02.7-150500.5.15.1 * slurm-rest-23.02.7-150500.5.15.1 * slurm-hdf5-23.02.7-150500.5.15.1 * slurm-torque-debuginfo-23.02.7-150500.5.15.1 * slurm-plugin-ext-sensors-rrd-23.02.7-150500.5.15.1 * perl-slurm-debuginfo-23.02.7-150500.5.15.1 * slurm-auth-none-23.02.7-150500.5.15.1 * slurm-plugin-ext-sensors-rrd-debuginfo-23.02.7-150500.5.15.1 * slurm-sview-23.02.7-150500.5.15.1 * slurm-debuginfo-23.02.7-150500.5.15.1 * slurm-23.02.7-150500.5.15.1 * slurm-node-23.02.7-150500.5.15.1 * slurm-devel-23.02.7-150500.5.15.1 * slurm-plugins-debuginfo-23.02.7-150500.5.15.1 * slurm-torque-23.02.7-150500.5.15.1 * libpmi0-23.02.7-150500.5.15.1 * libpmi0-debuginfo-23.02.7-150500.5.15.1 * slurm-auth-none-debuginfo-23.02.7-150500.5.15.1 * slurm-sql-23.02.7-150500.5.15.1 * libnss_slurm2-23.02.7-150500.5.15.1 * libnss_slurm2-debuginfo-23.02.7-150500.5.15.1 * slurm-cray-debuginfo-23.02.7-150500.5.15.1 * slurm-rest-debuginfo-23.02.7-150500.5.15.1 * slurm-sview-debuginfo-23.02.7-150500.5.15.1 * perl-slurm-23.02.7-150500.5.15.1 * slurm-testsuite-23.02.7-150500.5.15.1 * slurm-pam_slurm-23.02.7-150500.5.15.1 * slurm-debugsource-23.02.7-150500.5.15.1 * slurm-lua-23.02.7-150500.5.15.1 * libslurm39-debuginfo-23.02.7-150500.5.15.1 * libslurm39-23.02.7-150500.5.15.1 * slurm-munge-debuginfo-23.02.7-150500.5.15.1 * slurm-hdf5-debuginfo-23.02.7-150500.5.15.1 * slurm-node-debuginfo-23.02.7-150500.5.15.1 * slurm-plugins-23.02.7-150500.5.15.1 * slurm-slurmdbd-23.02.7-150500.5.15.1 * slurm-lua-debuginfo-23.02.7-150500.5.15.1 * openSUSE Leap 15.5 (noarch) * slurm-seff-23.02.7-150500.5.15.1 * slurm-openlava-23.02.7-150500.5.15.1 * slurm-doc-23.02.7-150500.5.15.1 * slurm-config-23.02.7-150500.5.15.1 * slurm-webdoc-23.02.7-150500.5.15.1 * slurm-config-man-23.02.7-150500.5.15.1 * slurm-sjstat-23.02.7-150500.5.15.1 ## References: * https://www.suse.com/security/cve/CVE-2023-49933.html * https://www.suse.com/security/cve/CVE-2023-49935.html * https://www.suse.com/security/cve/CVE-2023-49936.html * https://www.suse.com/security/cve/CVE-2023-49937.html * https://www.suse.com/security/cve/CVE-2023-49938.html * https://bugzilla.suse.com/show_bug.cgi?id=1216869 * https://bugzilla.suse.com/show_bug.cgi?id=1217711 * https://bugzilla.suse.com/show_bug.cgi?id=1218046 * https://bugzilla.suse.com/show_bug.cgi?id=1218049 * https://bugzilla.suse.com/show_bug.cgi?id=1218050 * https://bugzilla.suse.com/show_bug.cgi?id=1218051 * https://bugzilla.suse.com/show_bug.cgi?id=1218053

1 0

SUSE-RU-2024:0285-1: moderate: Recommended update for libxkbcommon
by OPENSUSE-UPDATES 31 Jan '24

31 Jan '24

# Recommended update for libxkbcommon Announcement ID: SUSE-RU-2024:0285-1 Rating: moderate References: * bsc#1218639 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update for libxkbcommon fixes the following issues: * enable 32bit libxkbregistry0 and libxkbregistry0-devel for use by Wine. (bsc#1218639) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-285=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-285=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-285=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-285=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-285=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-285=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-285=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-285=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-285=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-285=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-285=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-285=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libxkbregistry0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-tools-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-x11-0-1.3.0-150400.3.5.1 * libxkbcommon-devel-1.3.0-150400.3.5.1 * libxkbcommon-debugsource-1.3.0-150400.3.5.1 * libxkbregistry0-1.3.0-150400.3.5.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-x11-devel-1.3.0-150400.3.5.1 * libxkbcommon0-1.3.0-150400.3.5.1 * libxkbregistry-devel-1.3.0-150400.3.5.1 * libxkbcommon-tools-1.3.0-150400.3.5.1 * openSUSE Leap 15.4 (x86_64) * libxkbcommon-x11-devel-32bit-1.3.0-150400.3.5.1 * libxkbregistry0-32bit-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-devel-32bit-1.3.0-150400.3.5.1 * libxkbregistry0-32bit-1.3.0-150400.3.5.1 * libxkbcommon0-32bit-1.3.0-150400.3.5.1 * libxkbcommon-x11-0-32bit-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-32bit-debuginfo-1.3.0-150400.3.5.1 * libxkbregistry-devel-32bit-1.3.0-150400.3.5.1 * libxkbcommon-x11-0-32bit-1.3.0-150400.3.5.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libxkbcommon-x11-0-64bit-1.3.0-150400.3.5.1 * libxkbregistry0-64bit-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-64bit-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-x11-0-64bit-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-x11-devel-64bit-1.3.0-150400.3.5.1 * libxkbcommon-devel-64bit-1.3.0-150400.3.5.1 * libxkbregistry-devel-64bit-1.3.0-150400.3.5.1 * libxkbregistry0-64bit-1.3.0-150400.3.5.1 * libxkbcommon0-64bit-1.3.0-150400.3.5.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.5.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-1.3.0-150400.3.5.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.5.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-1.3.0-150400.3.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libxkbregistry0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-tools-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-x11-0-1.3.0-150400.3.5.1 * libxkbcommon-devel-1.3.0-150400.3.5.1 * libxkbcommon-debugsource-1.3.0-150400.3.5.1 * libxkbregistry0-1.3.0-150400.3.5.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-x11-devel-1.3.0-150400.3.5.1 * libxkbcommon0-1.3.0-150400.3.5.1 * libxkbregistry-devel-1.3.0-150400.3.5.1 * libxkbcommon-tools-1.3.0-150400.3.5.1 * openSUSE Leap 15.5 (x86_64) * libxkbcommon-x11-devel-32bit-1.3.0-150400.3.5.1 * libxkbregistry0-32bit-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-devel-32bit-1.3.0-150400.3.5.1 * libxkbregistry0-32bit-1.3.0-150400.3.5.1 * libxkbcommon0-32bit-1.3.0-150400.3.5.1 * libxkbcommon-x11-0-32bit-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-32bit-debuginfo-1.3.0-150400.3.5.1 * libxkbregistry-devel-32bit-1.3.0-150400.3.5.1 * libxkbcommon-x11-0-32bit-1.3.0-150400.3.5.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.5.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-1.3.0-150400.3.5.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.5.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-1.3.0-150400.3.5.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.5.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-1.3.0-150400.3.5.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.5.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-1.3.0-150400.3.5.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.5.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon0-1.3.0-150400.3.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libxkbcommon0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-x11-0-1.3.0-150400.3.5.1 * libxkbcommon-devel-1.3.0-150400.3.5.1 * libxkbcommon-debugsource-1.3.0-150400.3.5.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.5.1 * libxkbcommon-x11-devel-1.3.0-150400.3.5.1 * libxkbcommon0-1.3.0-150400.3.5.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.5.1 * libxkbregistry0-debuginfo-1.3.0-150400.3.5.1 * libxkbregistry0-1.3.0-150400.3.5.1 * libxkbregistry-devel-1.3.0-150400.3.5.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * libxkbregistry0-1.3.0-150400.3.5.1 * libxkbregistry-devel-1.3.0-150400.3.5.1 * SUSE Package Hub 15 15-SP5 (x86_64) * libxkbregistry-devel-32bit-1.3.0-150400.3.5.1 * libxkbregistry0-32bit-debuginfo-1.3.0-150400.3.5.1 * libxkbregistry0-32bit-1.3.0-150400.3.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218639

1 0

SUSE-SU-2024:0288-1: important: Security update for slurm_20_11
by OPENSUSE-UPDATES 31 Jan '24

31 Jan '24

# Security update for slurm_20_11 Announcement ID: SUSE-SU-2024:0288-1 Rating: important References: * bsc#1216207 * bsc#1216869 * bsc#1217711 * bsc#1218046 * bsc#1218050 * bsc#1218051 * bsc#1218053 Cross-References: * CVE-2023-41914 * CVE-2023-49933 * CVE-2023-49936 * CVE-2023-49937 * CVE-2023-49938 CVSS scores: * CVE-2023-41914 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-41914 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49933 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49933 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49936 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49936 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-49937 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49937 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49938 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49938 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 An update that solves five vulnerabilities and has two security fixes can now be installed. ## Description: This update for slurm_20_11 fixes the following issues: Security fixes: * CVE-2023-41914: Prevent filesystem race conditions that could let an attacker take control of an arbitrary file, or remove entire directories' contents. (bsc#1216207) * CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046) * CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050) * CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051) * CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053) Other fixes: * Add missing service file for slurmrestd (bsc#1217711). * Fix slurm upgrading to incompatible versions (bsc#1216869). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-288=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-288=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * perl-slurm_20_11-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-munge-20.11.9-150200.6.16.1 * slurm_20_11-debugsource-20.11.9-150200.6.16.1 * slurm_20_11-lua-20.11.9-150200.6.16.1 * slurm_20_11-plugins-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-webdoc-20.11.9-150200.6.16.1 * slurm_20_11-config-man-20.11.9-150200.6.16.1 * slurm_20_11-openlava-20.11.9-150200.6.16.1 * slurm_20_11-sql-20.11.9-150200.6.16.1 * slurm_20_11-20.11.9-150200.6.16.1 * libpmi0_20_11-20.11.9-150200.6.16.1 * slurm_20_11-sjstat-20.11.9-150200.6.16.1 * slurm_20_11-sql-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-munge-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-seff-20.11.9-150200.6.16.1 * slurm_20_11-auth-none-20.11.9-150200.6.16.1 * slurm_20_11-cray-20.11.9-150200.6.16.1 * slurm_20_11-slurmdbd-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-plugins-20.11.9-150200.6.16.1 * slurm_20_11-rest-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-node-20.11.9-150200.6.16.1 * slurm_20_11-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-doc-20.11.9-150200.6.16.1 * slurm_20_11-hdf5-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-pam_slurm-20.11.9-150200.6.16.1 * slurm_20_11-slurmdbd-20.11.9-150200.6.16.1 * slurm_20_11-torque-20.11.9-150200.6.16.1 * perl-slurm_20_11-20.11.9-150200.6.16.1 * libnss_slurm2_20_11-debuginfo-20.11.9-150200.6.16.1 * libnss_slurm2_20_11-20.11.9-150200.6.16.1 * slurm_20_11-auth-none-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-cray-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-sview-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-node-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-torque-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-devel-20.11.9-150200.6.16.1 * slurm_20_11-pam_slurm-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-hdf5-20.11.9-150200.6.16.1 * slurm_20_11-lua-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-rest-20.11.9-150200.6.16.1 * slurm_20_11-sview-20.11.9-150200.6.16.1 * libpmi0_20_11-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-config-20.11.9-150200.6.16.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * slurm_20_11-munge-20.11.9-150200.6.16.1 * libslurm36-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-lua-20.11.9-150200.6.16.1 * slurm_20_11-webdoc-20.11.9-150200.6.16.1 * libslurm36-20.11.9-150200.6.16.1 * slurm_20_11-config-man-20.11.9-150200.6.16.1 * slurm_20_11-sql-20.11.9-150200.6.16.1 * slurm_20_11-20.11.9-150200.6.16.1 * libpmi0_20_11-20.11.9-150200.6.16.1 * slurm_20_11-auth-none-20.11.9-150200.6.16.1 * slurm_20_11-plugins-20.11.9-150200.6.16.1 * slurm_20_11-node-20.11.9-150200.6.16.1 * slurm_20_11-doc-20.11.9-150200.6.16.1 * slurm_20_11-pam_slurm-20.11.9-150200.6.16.1 * slurm_20_11-slurmdbd-20.11.9-150200.6.16.1 * slurm_20_11-torque-20.11.9-150200.6.16.1 * perl-slurm_20_11-20.11.9-150200.6.16.1 * libnss_slurm2_20_11-20.11.9-150200.6.16.1 * slurm_20_11-devel-20.11.9-150200.6.16.1 * slurm_20_11-sview-20.11.9-150200.6.16.1 * slurm_20_11-config-20.11.9-150200.6.16.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41914.html * https://www.suse.com/security/cve/CVE-2023-49933.html * https://www.suse.com/security/cve/CVE-2023-49936.html * https://www.suse.com/security/cve/CVE-2023-49937.html * https://www.suse.com/security/cve/CVE-2023-49938.html * https://bugzilla.suse.com/show_bug.cgi?id=1216207 * https://bugzilla.suse.com/show_bug.cgi?id=1216869 * https://bugzilla.suse.com/show_bug.cgi?id=1217711 * https://bugzilla.suse.com/show_bug.cgi?id=1218046 * https://bugzilla.suse.com/show_bug.cgi?id=1218050 * https://bugzilla.suse.com/show_bug.cgi?id=1218051 * https://bugzilla.suse.com/show_bug.cgi?id=1218053

1 0

SUSE-RU-2024:0262-1: moderate: Recommended update for jna
by OPENSUSE-UPDATES 31 Jan '24

31 Jan '24

# Recommended update for jna Announcement ID: SUSE-RU-2024:0262-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that can now be installed. ## Description: This update for jna fixes the following issues: * Update to upstream version 5.13.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-262=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-262=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * jna-5.13.0-150200.3.7.1 * jna-debugsource-5.13.0-150200.3.7.1 * jna-debuginfo-5.13.0-150200.3.7.1 * openSUSE Leap 15.5 (noarch) * jna-javadoc-5.13.0-150200.3.7.1 * jna-contrib-5.13.0-150200.3.7.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * jna-5.13.0-150200.3.7.1 * jna-debugsource-5.13.0-150200.3.7.1 * jna-debuginfo-5.13.0-150200.3.7.1

1 0

SUSE-SU-2024:0278-1: important: Security update for slurm_20_02
by OPENSUSE-UPDATES 31 Jan '24

31 Jan '24

# Security update for slurm_20_02 Announcement ID: SUSE-SU-2024:0278-1 Rating: important References: * bsc#1216869 * bsc#1218046 * bsc#1218050 * bsc#1218051 * bsc#1218053 Cross-References: * CVE-2023-49933 * CVE-2023-49936 * CVE-2023-49937 * CVE-2023-49938 CVSS scores: * CVE-2023-49933 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49933 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49936 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49936 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-49937 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49937 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49938 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49938 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N Affected Products: * openSUSE Leap 15.5 An update that solves four vulnerabilities and has one security fix can now be installed. ## Description: This update for slurm_20_02 fixes the following issues: Security fixes: * CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046) * CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050) * CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051) * CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053) Other fixes: * Fix slurm upgrading to incompatible versions (bsc#1216869). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-278=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * slurm_20_02-node-20.02.7-150100.3.30.1 * libpmi0_20_02-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-munge-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-slurmdbd-20.02.7-150100.3.30.1 * slurm_20_02-lua-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-auth-none-20.02.7-150100.3.30.1 * slurm_20_02-sjstat-20.02.7-150100.3.30.1 * slurm_20_02-config-20.02.7-150100.3.30.1 * slurm_20_02-node-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-pam_slurm-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-cray-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-debugsource-20.02.7-150100.3.30.1 * slurm_20_02-testsuite-20.02.7-150100.3.30.1 * slurm_20_02-hdf5-20.02.7-150100.3.30.1 * slurm_20_02-sview-20.02.7-150100.3.30.1 * slurm_20_02-seff-20.02.7-150100.3.30.1 * perl-slurm_20_02-20.02.7-150100.3.30.1 * slurm_20_02-pam_slurm-20.02.7-150100.3.30.1 * slurm_20_02-sview-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-sql-20.02.7-150100.3.30.1 * slurm_20_02-slurmdbd-debuginfo-20.02.7-150100.3.30.1 * libpmi0_20_02-20.02.7-150100.3.30.1 * slurm_20_02-torque-20.02.7-150100.3.30.1 * perl-slurm_20_02-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-lua-20.02.7-150100.3.30.1 * slurm_20_02-devel-20.02.7-150100.3.30.1 * slurm_20_02-munge-20.02.7-150100.3.30.1 * slurm_20_02-plugins-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-20.02.7-150100.3.30.1 * slurm_20_02-cray-20.02.7-150100.3.30.1 * slurm_20_02-auth-none-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-rest-20.02.7-150100.3.30.1 * slurm_20_02-webdoc-20.02.7-150100.3.30.1 * libnss_slurm2_20_02-20.02.7-150100.3.30.1 * slurm_20_02-openlava-20.02.7-150100.3.30.1 * slurm_20_02-torque-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-config-man-20.02.7-150100.3.30.1 * slurm_20_02-doc-20.02.7-150100.3.30.1 * slurm_20_02-plugins-20.02.7-150100.3.30.1 * libnss_slurm2_20_02-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-sql-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-rest-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-debuginfo-20.02.7-150100.3.30.1 * slurm_20_02-hdf5-debuginfo-20.02.7-150100.3.30.1 ## References: * https://www.suse.com/security/cve/CVE-2023-49933.html * https://www.suse.com/security/cve/CVE-2023-49936.html * https://www.suse.com/security/cve/CVE-2023-49937.html * https://www.suse.com/security/cve/CVE-2023-49938.html * https://bugzilla.suse.com/show_bug.cgi?id=1216869 * https://bugzilla.suse.com/show_bug.cgi?id=1218046 * https://bugzilla.suse.com/show_bug.cgi?id=1218050 * https://bugzilla.suse.com/show_bug.cgi?id=1218051 * https://bugzilla.suse.com/show_bug.cgi?id=1218053

1 0

SUSE-SU-2024:0279-1: important: Security update for slurm
by OPENSUSE-UPDATES 31 Jan '24

31 Jan '24

# Security update for slurm Announcement ID: SUSE-SU-2024:0279-1 Rating: important References: * bsc#1216207 * bsc#1216869 * bsc#1217711 * bsc#1218046 * bsc#1218050 * bsc#1218051 * bsc#1218053 Cross-References: * CVE-2023-41914 * CVE-2023-49933 * CVE-2023-49936 * CVE-2023-49937 * CVE-2023-49938 CVSS scores: * CVE-2023-41914 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-41914 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49933 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49933 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49936 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49936 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-49937 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49937 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49938 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49938 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 An update that solves five vulnerabilities and has two security fixes can now be installed. ## Description: This update for slurm fixes the following issues: Security fixes: * CVE-2023-41914: Prevent filesystem race conditions that could let an attacker take control of an arbitrary file, or remove entire directories' contents. (bsc#1216207) * CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046) * CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050) * CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051) * CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053) Other fixes: * Add missing service file for slurmrestd (bsc#1217711). * Fix slurm upgrading to incompatible versions (bsc#1216869). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-279=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-279=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le x86_64) * slurm-debugsource-20.11.9-150300.4.12.1 * slurm-sql-debuginfo-20.11.9-150300.4.12.1 * slurm-config-man-20.11.9-150300.4.12.1 * slurm-sql-20.11.9-150300.4.12.1 * slurm-node-20.11.9-150300.4.12.1 * slurm-lua-20.11.9-150300.4.12.1 * slurm-torque-20.11.9-150300.4.12.1 * libnss_slurm2-debuginfo-20.11.9-150300.4.12.1 * slurm-doc-20.11.9-150300.4.12.1 * slurm-munge-debuginfo-20.11.9-150300.4.12.1 * libpmi0-20.11.9-150300.4.12.1 * slurm-slurmdbd-debuginfo-20.11.9-150300.4.12.1 * slurm-hdf5-20.11.9-150300.4.12.1 * slurm-devel-20.11.9-150300.4.12.1 * slurm-rest-20.11.9-150300.4.12.1 * slurm-hdf5-debuginfo-20.11.9-150300.4.12.1 * slurm-pam_slurm-debuginfo-20.11.9-150300.4.12.1 * slurm-rest-debuginfo-20.11.9-150300.4.12.1 * slurm-cray-20.11.9-150300.4.12.1 * slurm-seff-20.11.9-150300.4.12.1 * slurm-sview-debuginfo-20.11.9-150300.4.12.1 * slurm-plugins-20.11.9-150300.4.12.1 * perl-slurm-debuginfo-20.11.9-150300.4.12.1 * slurm-20.11.9-150300.4.12.1 * slurm-config-20.11.9-150300.4.12.1 * slurm-openlava-20.11.9-150300.4.12.1 * slurm-pam_slurm-20.11.9-150300.4.12.1 * slurm-auth-none-20.11.9-150300.4.12.1 * slurm-munge-20.11.9-150300.4.12.1 * slurm-webdoc-20.11.9-150300.4.12.1 * slurm-debuginfo-20.11.9-150300.4.12.1 * slurm-sjstat-20.11.9-150300.4.12.1 * slurm-lua-debuginfo-20.11.9-150300.4.12.1 * slurm-plugins-debuginfo-20.11.9-150300.4.12.1 * slurm-cray-debuginfo-20.11.9-150300.4.12.1 * slurm-node-debuginfo-20.11.9-150300.4.12.1 * libslurm36-debuginfo-20.11.9-150300.4.12.1 * slurm-sview-20.11.9-150300.4.12.1 * perl-slurm-20.11.9-150300.4.12.1 * libslurm36-20.11.9-150300.4.12.1 * libpmi0-debuginfo-20.11.9-150300.4.12.1 * slurm-testsuite-20.11.9-150300.4.12.1 * slurm-torque-debuginfo-20.11.9-150300.4.12.1 * slurm-auth-none-debuginfo-20.11.9-150300.4.12.1 * libnss_slurm2-20.11.9-150300.4.12.1 * slurm-slurmdbd-20.11.9-150300.4.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * slurm-debugsource-20.11.9-150300.4.12.1 * slurm-sql-debuginfo-20.11.9-150300.4.12.1 * slurm-config-man-20.11.9-150300.4.12.1 * slurm-sql-20.11.9-150300.4.12.1 * slurm-node-20.11.9-150300.4.12.1 * slurm-lua-20.11.9-150300.4.12.1 * slurm-torque-20.11.9-150300.4.12.1 * libnss_slurm2-debuginfo-20.11.9-150300.4.12.1 * slurm-doc-20.11.9-150300.4.12.1 * slurm-munge-debuginfo-20.11.9-150300.4.12.1 * libpmi0-20.11.9-150300.4.12.1 * slurm-slurmdbd-debuginfo-20.11.9-150300.4.12.1 * slurm-rest-20.11.9-150300.4.12.1 * slurm-devel-20.11.9-150300.4.12.1 * slurm-pam_slurm-debuginfo-20.11.9-150300.4.12.1 * slurm-rest-debuginfo-20.11.9-150300.4.12.1 * slurm-sview-debuginfo-20.11.9-150300.4.12.1 * slurm-plugins-20.11.9-150300.4.12.1 * perl-slurm-debuginfo-20.11.9-150300.4.12.1 * slurm-20.11.9-150300.4.12.1 * slurm-config-20.11.9-150300.4.12.1 * slurm-pam_slurm-20.11.9-150300.4.12.1 * slurm-auth-none-20.11.9-150300.4.12.1 * slurm-munge-20.11.9-150300.4.12.1 * slurm-webdoc-20.11.9-150300.4.12.1 * slurm-debuginfo-20.11.9-150300.4.12.1 * slurm-lua-debuginfo-20.11.9-150300.4.12.1 * slurm-plugins-debuginfo-20.11.9-150300.4.12.1 * slurm-node-debuginfo-20.11.9-150300.4.12.1 * slurm-sview-20.11.9-150300.4.12.1 * libslurm36-debuginfo-20.11.9-150300.4.12.1 * perl-slurm-20.11.9-150300.4.12.1 * libslurm36-20.11.9-150300.4.12.1 * libpmi0-debuginfo-20.11.9-150300.4.12.1 * slurm-torque-debuginfo-20.11.9-150300.4.12.1 * slurm-auth-none-debuginfo-20.11.9-150300.4.12.1 * libnss_slurm2-20.11.9-150300.4.12.1 * slurm-slurmdbd-20.11.9-150300.4.12.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41914.html * https://www.suse.com/security/cve/CVE-2023-49933.html * https://www.suse.com/security/cve/CVE-2023-49936.html * https://www.suse.com/security/cve/CVE-2023-49937.html * https://www.suse.com/security/cve/CVE-2023-49938.html * https://bugzilla.suse.com/show_bug.cgi?id=1216207 * https://bugzilla.suse.com/show_bug.cgi?id=1216869 * https://bugzilla.suse.com/show_bug.cgi?id=1217711 * https://bugzilla.suse.com/show_bug.cgi?id=1218046 * https://bugzilla.suse.com/show_bug.cgi?id=1218050 * https://bugzilla.suse.com/show_bug.cgi?id=1218051 * https://bugzilla.suse.com/show_bug.cgi?id=1218053

1 0

SUSE-SU-2024:0280-1: important: Security update for slurm_23_02
by OPENSUSE-UPDATES 31 Jan '24

31 Jan '24

# Security update for slurm_23_02 Announcement ID: SUSE-SU-2024:0280-1 Rating: important References: * bsc#1216869 * bsc#1217711 * bsc#1218046 * bsc#1218049 * bsc#1218050 * bsc#1218051 * bsc#1218053 Cross-References: * CVE-2023-49933 * CVE-2023-49935 * CVE-2023-49936 * CVE-2023-49937 * CVE-2023-49938 CVSS scores: * CVE-2023-49933 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49933 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49935 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49935 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49936 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49936 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-49937 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49937 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49938 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49938 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 An update that solves five vulnerabilities and has two security fixes can now be installed. ## Description: This update for slurm_23_02 fixes the following issues: Update to slurm 23.02.6: Security fixes: * CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046) * CVE-2023-49935: Prevent message hash bypass in slurmd which can allow an attacker to reuse root-level MUNGE tokens and escalate permissions. (bsc#1218049) * CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050) * CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051) * CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053) Other fixes: * Add missing service file for slurmrestd (bsc#1217711). * Fix slurm upgrading to incompatible versions (bsc#1216869). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-280=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-280=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-280=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-280=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * slurm_23_02-slurmdbd-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugins-23.02.7-150300.7.17.1 * slurm_23_02-torque-23.02.7-150300.7.17.1 * libnss_slurm2_23_02-23.02.7-150300.7.17.1 * slurm_23_02-sview-23.02.7-150300.7.17.1 * slurm_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-auth-none-23.02.7-150300.7.17.1 * slurm_23_02-23.02.7-150300.7.17.1 * slurm_23_02-rest-23.02.7-150300.7.17.1 * slurm_23_02-plugin-ext-sensors-rrd-23.02.7-150300.7.17.1 * slurm_23_02-pam_slurm-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-lua-23.02.7-150300.7.17.1 * perl-slurm_23_02-23.02.7-150300.7.17.1 * slurm_23_02-munge-debuginfo-23.02.7-150300.7.17.1 * libslurm39-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-debugsource-23.02.7-150300.7.17.1 * slurm_23_02-sview-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-devel-23.02.7-150300.7.17.1 * slurm_23_02-pam_slurm-23.02.7-150300.7.17.1 * slurm_23_02-rest-debuginfo-23.02.7-150300.7.17.1 * perl-slurm_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-sql-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-munge-23.02.7-150300.7.17.1 * slurm_23_02-node-23.02.7-150300.7.17.1 * libslurm39-23.02.7-150300.7.17.1 * slurm_23_02-cray-23.02.7-150300.7.17.1 * slurm_23_02-node-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-slurmdbd-23.02.7-150300.7.17.1 * slurm_23_02-torque-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-lua-debuginfo-23.02.7-150300.7.17.1 * libpmi0_23_02-23.02.7-150300.7.17.1 * libnss_slurm2_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-cray-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-sql-23.02.7-150300.7.17.1 * slurm_23_02-auth-none-debuginfo-23.02.7-150300.7.17.1 * libpmi0_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugins-debuginfo-23.02.7-150300.7.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * slurm_23_02-doc-23.02.7-150300.7.17.1 * slurm_23_02-config-23.02.7-150300.7.17.1 * slurm_23_02-webdoc-23.02.7-150300.7.17.1 * slurm_23_02-config-man-23.02.7-150300.7.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * slurm_23_02-slurmdbd-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugins-23.02.7-150300.7.17.1 * slurm_23_02-torque-23.02.7-150300.7.17.1 * libnss_slurm2_23_02-23.02.7-150300.7.17.1 * slurm_23_02-sview-23.02.7-150300.7.17.1 * slurm_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-auth-none-23.02.7-150300.7.17.1 * slurm_23_02-23.02.7-150300.7.17.1 * slurm_23_02-rest-23.02.7-150300.7.17.1 * slurm_23_02-plugin-ext-sensors-rrd-23.02.7-150300.7.17.1 * slurm_23_02-pam_slurm-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-lua-23.02.7-150300.7.17.1 * perl-slurm_23_02-23.02.7-150300.7.17.1 * slurm_23_02-munge-debuginfo-23.02.7-150300.7.17.1 * libslurm39-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-debugsource-23.02.7-150300.7.17.1 * slurm_23_02-sview-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-devel-23.02.7-150300.7.17.1 * slurm_23_02-pam_slurm-23.02.7-150300.7.17.1 * slurm_23_02-rest-debuginfo-23.02.7-150300.7.17.1 * perl-slurm_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-sql-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-munge-23.02.7-150300.7.17.1 * slurm_23_02-node-23.02.7-150300.7.17.1 * libslurm39-23.02.7-150300.7.17.1 * slurm_23_02-cray-23.02.7-150300.7.17.1 * slurm_23_02-node-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-slurmdbd-23.02.7-150300.7.17.1 * slurm_23_02-torque-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-lua-debuginfo-23.02.7-150300.7.17.1 * libpmi0_23_02-23.02.7-150300.7.17.1 * libnss_slurm2_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-cray-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-sql-23.02.7-150300.7.17.1 * slurm_23_02-auth-none-debuginfo-23.02.7-150300.7.17.1 * libpmi0_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugins-debuginfo-23.02.7-150300.7.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * slurm_23_02-doc-23.02.7-150300.7.17.1 * slurm_23_02-config-23.02.7-150300.7.17.1 * slurm_23_02-webdoc-23.02.7-150300.7.17.1 * slurm_23_02-config-man-23.02.7-150300.7.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * slurm_23_02-slurmdbd-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugins-23.02.7-150300.7.17.1 * slurm_23_02-torque-23.02.7-150300.7.17.1 * libnss_slurm2_23_02-23.02.7-150300.7.17.1 * slurm_23_02-sview-23.02.7-150300.7.17.1 * slurm_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-auth-none-23.02.7-150300.7.17.1 * slurm_23_02-23.02.7-150300.7.17.1 * slurm_23_02-rest-23.02.7-150300.7.17.1 * slurm_23_02-plugin-ext-sensors-rrd-23.02.7-150300.7.17.1 * slurm_23_02-pam_slurm-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-lua-23.02.7-150300.7.17.1 * perl-slurm_23_02-23.02.7-150300.7.17.1 * slurm_23_02-munge-debuginfo-23.02.7-150300.7.17.1 * libslurm39-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-debugsource-23.02.7-150300.7.17.1 * slurm_23_02-sview-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-devel-23.02.7-150300.7.17.1 * slurm_23_02-pam_slurm-23.02.7-150300.7.17.1 * slurm_23_02-rest-debuginfo-23.02.7-150300.7.17.1 * perl-slurm_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-sql-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-munge-23.02.7-150300.7.17.1 * slurm_23_02-node-23.02.7-150300.7.17.1 * libslurm39-23.02.7-150300.7.17.1 * slurm_23_02-cray-23.02.7-150300.7.17.1 * slurm_23_02-node-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-slurmdbd-23.02.7-150300.7.17.1 * slurm_23_02-torque-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-lua-debuginfo-23.02.7-150300.7.17.1 * libpmi0_23_02-23.02.7-150300.7.17.1 * libnss_slurm2_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-cray-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-sql-23.02.7-150300.7.17.1 * slurm_23_02-auth-none-debuginfo-23.02.7-150300.7.17.1 * libpmi0_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugins-debuginfo-23.02.7-150300.7.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * slurm_23_02-doc-23.02.7-150300.7.17.1 * slurm_23_02-config-23.02.7-150300.7.17.1 * slurm_23_02-webdoc-23.02.7-150300.7.17.1 * slurm_23_02-config-man-23.02.7-150300.7.17.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * slurm_23_02-slurmdbd-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugins-23.02.7-150300.7.17.1 * slurm_23_02-hdf5-23.02.7-150300.7.17.1 * slurm_23_02-torque-23.02.7-150300.7.17.1 * libnss_slurm2_23_02-23.02.7-150300.7.17.1 * slurm_23_02-sview-23.02.7-150300.7.17.1 * slurm_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-auth-none-23.02.7-150300.7.17.1 * slurm_23_02-23.02.7-150300.7.17.1 * slurm_23_02-rest-23.02.7-150300.7.17.1 * slurm_23_02-plugin-ext-sensors-rrd-23.02.7-150300.7.17.1 * slurm_23_02-pam_slurm-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-lua-23.02.7-150300.7.17.1 * perl-slurm_23_02-23.02.7-150300.7.17.1 * slurm_23_02-munge-debuginfo-23.02.7-150300.7.17.1 * libslurm39-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-hdf5-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-debugsource-23.02.7-150300.7.17.1 * slurm_23_02-sview-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-devel-23.02.7-150300.7.17.1 * slurm_23_02-pam_slurm-23.02.7-150300.7.17.1 * slurm_23_02-rest-debuginfo-23.02.7-150300.7.17.1 * perl-slurm_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-sql-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-munge-23.02.7-150300.7.17.1 * slurm_23_02-node-23.02.7-150300.7.17.1 * libslurm39-23.02.7-150300.7.17.1 * slurm_23_02-cray-23.02.7-150300.7.17.1 * slurm_23_02-node-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-slurmdbd-23.02.7-150300.7.17.1 * slurm_23_02-testsuite-23.02.7-150300.7.17.1 * slurm_23_02-lua-debuginfo-23.02.7-150300.7.17.1 * libpmi0_23_02-23.02.7-150300.7.17.1 * slurm_23_02-torque-debuginfo-23.02.7-150300.7.17.1 * libnss_slurm2_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-cray-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-sql-23.02.7-150300.7.17.1 * slurm_23_02-auth-none-debuginfo-23.02.7-150300.7.17.1 * libpmi0_23_02-debuginfo-23.02.7-150300.7.17.1 * slurm_23_02-plugins-debuginfo-23.02.7-150300.7.17.1 * openSUSE Leap 15.3 (noarch) * slurm_23_02-config-23.02.7-150300.7.17.1 * slurm_23_02-seff-23.02.7-150300.7.17.1 * slurm_23_02-sjstat-23.02.7-150300.7.17.1 * slurm_23_02-openlava-23.02.7-150300.7.17.1 * slurm_23_02-webdoc-23.02.7-150300.7.17.1 * slurm_23_02-config-man-23.02.7-150300.7.17.1 * slurm_23_02-doc-23.02.7-150300.7.17.1 ## References: * https://www.suse.com/security/cve/CVE-2023-49933.html * https://www.suse.com/security/cve/CVE-2023-49935.html * https://www.suse.com/security/cve/CVE-2023-49936.html * https://www.suse.com/security/cve/CVE-2023-49937.html * https://www.suse.com/security/cve/CVE-2023-49938.html * https://bugzilla.suse.com/show_bug.cgi?id=1216869 * https://bugzilla.suse.com/show_bug.cgi?id=1217711 * https://bugzilla.suse.com/show_bug.cgi?id=1218046 * https://bugzilla.suse.com/show_bug.cgi?id=1218049 * https://bugzilla.suse.com/show_bug.cgi?id=1218050 * https://bugzilla.suse.com/show_bug.cgi?id=1218051 * https://bugzilla.suse.com/show_bug.cgi?id=1218053

1 0

SUSE-SU-2024:0268-1: moderate: Security update for xen
by OPENSUSE-UPDATES 30 Jan '24

30 Jan '24

# Security update for xen Announcement ID: SUSE-SU-2024:0268-1 Rating: moderate References: * bsc#1218851 Cross-References: * CVE-2023-46839 CVSS scores: * CVE-2023-46839 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts (XSA-449) (bsc#1218851) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-268=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-268=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-268=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-268=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-268=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-268=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-268=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-268=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-268=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-268=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-268=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-268=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-268=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-268=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-268=1 ## Package List: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * xen-4.16.5_12-150400.4.46.1 * xen-tools-4.16.5_12-150400.4.46.1 * xen-tools-debuginfo-4.16.5_12-150400.4.46.1 * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-tools-domU-debuginfo-4.16.5_12-150400.4.46.1 * xen-devel-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * xen-tools-domU-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * xen-4.16.5_12-150400.4.46.1 * xen-tools-4.16.5_12-150400.4.46.1 * xen-tools-debuginfo-4.16.5_12-150400.4.46.1 * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-tools-domU-debuginfo-4.16.5_12-150400.4.46.1 * xen-devel-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * xen-tools-domU-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-tools-domU-debuginfo-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * xen-tools-domU-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * xen-4.16.5_12-150400.4.46.1 * xen-tools-4.16.5_12-150400.4.46.1 * xen-tools-debuginfo-4.16.5_12-150400.4.46.1 * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-tools-domU-debuginfo-4.16.5_12-150400.4.46.1 * xen-devel-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * xen-tools-domU-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * xen-4.16.5_12-150400.4.46.1 * xen-tools-4.16.5_12-150400.4.46.1 * xen-tools-debuginfo-4.16.5_12-150400.4.46.1 * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-tools-domU-debuginfo-4.16.5_12-150400.4.46.1 * xen-devel-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * xen-tools-domU-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_12-150400.4.46.1 * SUSE Manager Proxy 4.3 (x86_64) * xen-4.16.5_12-150400.4.46.1 * xen-tools-4.16.5_12-150400.4.46.1 * xen-tools-debuginfo-4.16.5_12-150400.4.46.1 * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-tools-domU-debuginfo-4.16.5_12-150400.4.46.1 * xen-devel-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * xen-tools-domU-4.16.5_12-150400.4.46.1 * SUSE Manager Proxy 4.3 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_12-150400.4.46.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * xen-4.16.5_12-150400.4.46.1 * xen-tools-4.16.5_12-150400.4.46.1 * xen-tools-debuginfo-4.16.5_12-150400.4.46.1 * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-tools-domU-debuginfo-4.16.5_12-150400.4.46.1 * xen-devel-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * xen-tools-domU-4.16.5_12-150400.4.46.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_12-150400.4.46.1 * SUSE Manager Server 4.3 (x86_64) * xen-4.16.5_12-150400.4.46.1 * xen-tools-4.16.5_12-150400.4.46.1 * xen-tools-debuginfo-4.16.5_12-150400.4.46.1 * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-tools-domU-debuginfo-4.16.5_12-150400.4.46.1 * xen-devel-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * xen-tools-domU-4.16.5_12-150400.4.46.1 * SUSE Manager Server 4.3 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_12-150400.4.46.1 * openSUSE Leap 15.4 (aarch64 x86_64 i586) * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-tools-domU-debuginfo-4.16.5_12-150400.4.46.1 * xen-devel-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * xen-tools-domU-4.16.5_12-150400.4.46.1 * openSUSE Leap 15.4 (x86_64) * xen-libs-32bit-4.16.5_12-150400.4.46.1 * xen-libs-32bit-debuginfo-4.16.5_12-150400.4.46.1 * openSUSE Leap 15.4 (aarch64 x86_64) * xen-4.16.5_12-150400.4.46.1 * xen-tools-4.16.5_12-150400.4.46.1 * xen-tools-debuginfo-4.16.5_12-150400.4.46.1 * xen-doc-html-4.16.5_12-150400.4.46.1 * openSUSE Leap 15.4 (noarch) * xen-tools-xendomains-wait-disk-4.16.5_12-150400.4.46.1 * openSUSE Leap 15.4 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.16.5_12-150400.4.46.1 * xen-libs-64bit-4.16.5_12-150400.4.46.1 * openSUSE Leap Micro 5.3 (x86_64) * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * openSUSE Leap Micro 5.4 (x86_64) * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * xen-debugsource-4.16.5_12-150400.4.46.1 * xen-libs-4.16.5_12-150400.4.46.1 * xen-libs-debuginfo-4.16.5_12-150400.4.46.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46839.html * https://bugzilla.suse.com/show_bug.cgi?id=1218851

1 0

SUSE-RU-2024:0261-1: moderate: Recommended update for conmon
by OPENSUSE-UPDATES 30 Jan '24

30 Jan '24

# Recommended update for conmon Announcement ID: SUSE-RU-2024:0261-1 Rating: moderate References: * bsc#1215806 * bsc#1217773 Affected Products: * Containers Module 15-SP4 * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for conmon fixes the following issues: * New upstream release 2.1.10 Bug fixes: * Fix incorrect free in conn_sock * logging: Respect log-size-max immediately after open * Add patch for fixing regression in v2.1.9 (https://github.com/containers/conmon/issues/475 and https://github.com/containers/conmon/issues/477) * New upstream release 2.1.9 ### Bug fixes * fix some issues flagged by SAST scan * src: fix write after end of buffer * src: open all files with O_CLOEXEC * oom-score: restore oom score before running exit command ### Features * Forward more messages on the sd-notify socket * logging: -l passthrough accepts TTYs * [bsc#1215806] * Update to version 2.1.8: * stdio: ignore EIO for terminals (bsc#1217773) * ensure console socket buffers are properly sized * conmon: drop return after pexit() * ctrl: make accept4 failures fatal * logging: avoid opening /dev/null for each write * oom: restore old OOM score * Use default umask 0022 * cli: log parsing errors to stderr * Changes to build conmon for riscv64 * Changes to build conmon for ppc64le * Fix close_other_fds on FreeBSD ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-261=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-261=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-261=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-261=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-261=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2024-261=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-261=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-261=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-261=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-261=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-261=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-261=1 ## Package List: * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 * Containers Module 15-SP4 (aarch64 ppc64le s390x) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * conmon-2.1.10-150400.3.17.1 * conmon-debuginfo-2.1.10-150400.3.17.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215806 * https://bugzilla.suse.com/show_bug.cgi?id=1217773

1 0

SUSE-RU-2024:0259-1: moderate: Recommended update for pacemaker
by OPENSUSE-UPDATES 29 Jan '24

29 Jan '24

# Recommended update for pacemaker Announcement ID: SUSE-RU-2024:0259-1 Rating: moderate References: * bsc#1155290 * bsc#1173668 * bsc#1215446 * bsc#1218312 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has four fixes can now be installed. ## Description: This update for pacemaker fixes the following issues: * libcrmcommon: wait for reply from appropriate controller commands (bsc#1218312, rh#2225631, rh#2221084) * attrd: don't start a new election when receiving a client update (bsc#1215446) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-259=1 openSUSE-SLE-15.5-2024-259=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-259=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * pacemaker-remote-debuginfo-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-cli-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-cli-debuginfo-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-remote-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-debuginfo-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-libs-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-devel-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-debugsource-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-libs-debuginfo-2.1.5+20221208.a3f44794f-150500.6.8.1 * openSUSE Leap 15.5 (noarch) * pacemaker-cts-2.1.5+20221208.a3f44794f-150500.6.8.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * pacemaker-remote-debuginfo-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-cli-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-cli-debuginfo-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-remote-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-debuginfo-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-libs-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-devel-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-debugsource-2.1.5+20221208.a3f44794f-150500.6.8.1 * pacemaker-libs-debuginfo-2.1.5+20221208.a3f44794f-150500.6.8.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (noarch) * pacemaker-cts-2.1.5+20221208.a3f44794f-150500.6.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1155290 * https://bugzilla.suse.com/show_bug.cgi?id=1173668 * https://bugzilla.suse.com/show_bug.cgi?id=1215446 * https://bugzilla.suse.com/show_bug.cgi?id=1218312

1 0

SUSE-RU-2024:0254-1: moderate: Recommended update for containerd
by OPENSUSE-UPDATES 26 Jan '24

26 Jan '24

# Recommended update for containerd Announcement ID: SUSE-RU-2024:0254-1 Rating: moderate References: * bsc#1217952 Affected Products: * Containers Module 15-SP4 * Containers Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for containerd fixes the following issues: * Fix permissions of address file (bsc#1217952) * Update to version 1.7.10 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-254=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-254=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-254=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-254=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-254=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-254=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-254=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-254=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2024-254=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-254=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-254=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-254=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-254=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * containerd-1.7.10-150000.106.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * containerd-1.7.10-150000.106.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * containerd-ctr-1.7.10-150000.106.1 * containerd-1.7.10-150000.106.1 * containerd-devel-1.7.10-150000.106.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * containerd-1.7.10-150000.106.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * containerd-1.7.10-150000.106.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * containerd-1.7.10-150000.106.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * containerd-1.7.10-150000.106.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * containerd-1.7.10-150000.106.1 * Containers Module 15-SP4 (aarch64 ppc64le s390x) * containerd-ctr-1.7.10-150000.106.1 * containerd-1.7.10-150000.106.1 * containerd-devel-1.7.10-150000.106.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * containerd-ctr-1.7.10-150000.106.1 * containerd-1.7.10-150000.106.1 * containerd-devel-1.7.10-150000.106.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * containerd-1.7.10-150000.106.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * containerd-1.7.10-150000.106.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * containerd-1.7.10-150000.106.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217952

1 0

SUSE-RU-2024:0243-1: moderate: Recommended update for util-linux
by OPENSUSE-UPDATES 26 Jan '24

26 Jan '24

# Recommended update for util-linux Announcement ID: SUSE-RU-2024:0243-1 Rating: moderate References: * bsc#1207987 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for util-linux fixes the following issues: * Fix performance degradation (bsc#1207987) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-243=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-243=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-243=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-243=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-243=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-243=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-243=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-243=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-243=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-243=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-243=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-243=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-243=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-243=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-243=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libsmartcols1-2.37.2-150400.8.23.1 * python3-libmount-2.37.2-150400.8.23.1 * libfdisk-devel-static-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libblkid-devel-static-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * python3-libmount-debuginfo-2.37.2-150400.8.23.1 * python3-libmount-debugsource-2.37.2-150400.8.23.1 * libfdisk-devel-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * libmount-devel-static-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * libsmartcols-devel-2.37.2-150400.8.23.1 * libuuid-devel-2.37.2-150400.8.23.1 * libsmartcols-devel-static-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libmount-devel-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libuuid-devel-static-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * uuidd-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * libblkid-devel-2.37.2-150400.8.23.1 * uuidd-2.37.2-150400.8.23.1 * openSUSE Leap 15.4 (x86_64) * libuuid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libblkid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libmount1-32bit-2.37.2-150400.8.23.1 * libfdisk1-32bit-2.37.2-150400.8.23.1 * libfdisk-devel-32bit-2.37.2-150400.8.23.1 * libsmartcols-devel-32bit-2.37.2-150400.8.23.1 * libfdisk1-32bit-debuginfo-2.37.2-150400.8.23.1 * libuuid-devel-32bit-2.37.2-150400.8.23.1 * libblkid-devel-32bit-2.37.2-150400.8.23.1 * libuuid1-32bit-2.37.2-150400.8.23.1 * libblkid1-32bit-2.37.2-150400.8.23.1 * libsmartcols1-32bit-2.37.2-150400.8.23.1 * libsmartcols1-32bit-debuginfo-2.37.2-150400.8.23.1 * libmount-devel-32bit-2.37.2-150400.8.23.1 * libmount1-32bit-debuginfo-2.37.2-150400.8.23.1 * openSUSE Leap 15.4 (noarch) * util-linux-lang-2.37.2-150400.8.23.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libuuid1-64bit-2.37.2-150400.8.23.1 * libsmartcols1-64bit-2.37.2-150400.8.23.1 * libmount1-64bit-debuginfo-2.37.2-150400.8.23.1 * libmount1-64bit-2.37.2-150400.8.23.1 * libblkid-devel-64bit-2.37.2-150400.8.23.1 * libsmartcols1-64bit-debuginfo-2.37.2-150400.8.23.1 * libuuid1-64bit-debuginfo-2.37.2-150400.8.23.1 * libblkid1-64bit-2.37.2-150400.8.23.1 * libmount-devel-64bit-2.37.2-150400.8.23.1 * libfdisk1-64bit-debuginfo-2.37.2-150400.8.23.1 * libsmartcols-devel-64bit-2.37.2-150400.8.23.1 * libuuid-devel-64bit-2.37.2-150400.8.23.1 * libblkid1-64bit-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-64bit-2.37.2-150400.8.23.1 * libfdisk-devel-64bit-2.37.2-150400.8.23.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * libsmartcols1-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * libsmartcols1-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * libsmartcols1-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * libsmartcols1-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * libsmartcols1-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * libsmartcols1-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libsmartcols1-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libblkid-devel-static-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * libfdisk-devel-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * libsmartcols-devel-2.37.2-150400.8.23.1 * libuuid-devel-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libmount-devel-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libuuid-devel-static-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * uuidd-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * libblkid-devel-2.37.2-150400.8.23.1 * uuidd-2.37.2-150400.8.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * util-linux-lang-2.37.2-150400.8.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libblkid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libmount1-32bit-2.37.2-150400.8.23.1 * libblkid1-32bit-2.37.2-150400.8.23.1 * libuuid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libuuid1-32bit-2.37.2-150400.8.23.1 * libmount1-32bit-debuginfo-2.37.2-150400.8.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libsmartcols1-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libblkid-devel-static-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * libfdisk-devel-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * libsmartcols-devel-2.37.2-150400.8.23.1 * libuuid-devel-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libmount-devel-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libuuid-devel-static-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * uuidd-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * libblkid-devel-2.37.2-150400.8.23.1 * uuidd-2.37.2-150400.8.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * util-linux-lang-2.37.2-150400.8.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libblkid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libmount1-32bit-2.37.2-150400.8.23.1 * libblkid1-32bit-2.37.2-150400.8.23.1 * libuuid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libuuid1-32bit-2.37.2-150400.8.23.1 * libmount1-32bit-debuginfo-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libsmartcols1-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libblkid-devel-static-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * libuuid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libuuid1-32bit-2.37.2-150400.8.23.1 * libfdisk-devel-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * libsmartcols-devel-2.37.2-150400.8.23.1 * libuuid-devel-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libmount-devel-2.37.2-150400.8.23.1 * libmount1-32bit-debuginfo-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libblkid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libmount1-32bit-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libuuid-devel-static-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * libblkid1-32bit-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * libblkid-devel-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * util-linux-lang-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libsmartcols1-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libblkid-devel-static-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * libfdisk-devel-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * libsmartcols-devel-2.37.2-150400.8.23.1 * libuuid-devel-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libmount-devel-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libuuid-devel-static-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * uuidd-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * libblkid-devel-2.37.2-150400.8.23.1 * uuidd-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * util-linux-lang-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libblkid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libmount1-32bit-2.37.2-150400.8.23.1 * libblkid1-32bit-2.37.2-150400.8.23.1 * libuuid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libuuid1-32bit-2.37.2-150400.8.23.1 * libmount1-32bit-debuginfo-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libsmartcols1-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libblkid-devel-static-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * libfdisk-devel-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * libsmartcols-devel-2.37.2-150400.8.23.1 * libuuid-devel-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libmount-devel-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libuuid-devel-static-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * uuidd-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * libblkid-devel-2.37.2-150400.8.23.1 * uuidd-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * util-linux-lang-2.37.2-150400.8.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libblkid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libmount1-32bit-2.37.2-150400.8.23.1 * libblkid1-32bit-2.37.2-150400.8.23.1 * libuuid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libuuid1-32bit-2.37.2-150400.8.23.1 * libmount1-32bit-debuginfo-2.37.2-150400.8.23.1 * SUSE Manager Proxy 4.3 (x86_64) * libsmartcols1-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libblkid-devel-static-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * libuuid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libuuid1-32bit-2.37.2-150400.8.23.1 * libfdisk-devel-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * libsmartcols-devel-2.37.2-150400.8.23.1 * libuuid-devel-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libmount-devel-2.37.2-150400.8.23.1 * libmount1-32bit-debuginfo-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libblkid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libmount1-32bit-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libuuid-devel-static-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * libblkid1-32bit-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * uuidd-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * libblkid-devel-2.37.2-150400.8.23.1 * uuidd-2.37.2-150400.8.23.1 * SUSE Manager Proxy 4.3 (noarch) * util-linux-lang-2.37.2-150400.8.23.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libsmartcols1-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libblkid-devel-static-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * libuuid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libuuid1-32bit-2.37.2-150400.8.23.1 * libfdisk-devel-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * libsmartcols-devel-2.37.2-150400.8.23.1 * libuuid-devel-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libmount-devel-2.37.2-150400.8.23.1 * libmount1-32bit-debuginfo-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libblkid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libmount1-32bit-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libuuid-devel-static-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * libblkid1-32bit-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * uuidd-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * libblkid-devel-2.37.2-150400.8.23.1 * uuidd-2.37.2-150400.8.23.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * util-linux-lang-2.37.2-150400.8.23.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libsmartcols1-2.37.2-150400.8.23.1 * libfdisk1-2.37.2-150400.8.23.1 * util-linux-systemd-2.37.2-150400.8.23.1 * libblkid-devel-static-2.37.2-150400.8.23.1 * libuuid1-2.37.2-150400.8.23.1 * libfdisk-devel-2.37.2-150400.8.23.1 * libblkid1-2.37.2-150400.8.23.1 * util-linux-systemd-debugsource-2.37.2-150400.8.23.1 * libsmartcols-devel-2.37.2-150400.8.23.1 * libuuid-devel-2.37.2-150400.8.23.1 * util-linux-2.37.2-150400.8.23.1 * libmount-devel-2.37.2-150400.8.23.1 * util-linux-debugsource-2.37.2-150400.8.23.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.23.1 * libmount1-2.37.2-150400.8.23.1 * libmount1-debuginfo-2.37.2-150400.8.23.1 * libsmartcols1-debuginfo-2.37.2-150400.8.23.1 * libuuid-devel-static-2.37.2-150400.8.23.1 * libblkid1-debuginfo-2.37.2-150400.8.23.1 * util-linux-debuginfo-2.37.2-150400.8.23.1 * uuidd-debuginfo-2.37.2-150400.8.23.1 * libfdisk1-debuginfo-2.37.2-150400.8.23.1 * libuuid1-debuginfo-2.37.2-150400.8.23.1 * libblkid-devel-2.37.2-150400.8.23.1 * uuidd-2.37.2-150400.8.23.1 * SUSE Manager Server 4.3 (noarch) * util-linux-lang-2.37.2-150400.8.23.1 * SUSE Manager Server 4.3 (x86_64) * libblkid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libmount1-32bit-2.37.2-150400.8.23.1 * libblkid1-32bit-2.37.2-150400.8.23.1 * libuuid1-32bit-debuginfo-2.37.2-150400.8.23.1 * libuuid1-32bit-2.37.2-150400.8.23.1 * libmount1-32bit-debuginfo-2.37.2-150400.8.23.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1207987

1 0

SUSE-RU-2024:0246-1: moderate: Recommended update for libvisio
by OPENSUSE-UPDATES 26 Jan '24

26 Jan '24

# Recommended update for libvisio Announcement ID: SUSE-RU-2024:0246-1 Rating: moderate References: * jsc#PED-6193 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that contains one feature can now be installed. ## Description: This update for libvisio fixes the following issue: * rebuild against current ICU 73. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-246=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-246=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-246=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libvisio-debuginfo-0.1.6-150200.8.3.1 * libvisio-tools-0.1.6-150200.8.3.1 * libvisio-tools-debuginfo-0.1.6-150200.8.3.1 * libvisio-debugsource-0.1.6-150200.8.3.1 * libvisio-0_1-1-debuginfo-0.1.6-150200.8.3.1 * libvisio-0_1-1-0.1.6-150200.8.3.1 * libvisio-devel-0.1.6-150200.8.3.1 * openSUSE Leap 15.5 (noarch) * libvisio-devel-doc-0.1.6-150200.8.3.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * libvisio-debuginfo-0.1.6-150200.8.3.1 * libvisio-tools-0.1.6-150200.8.3.1 * libvisio-tools-debuginfo-0.1.6-150200.8.3.1 * libvisio-debugsource-0.1.6-150200.8.3.1 * libvisio-0_1-1-debuginfo-0.1.6-150200.8.3.1 * libvisio-0_1-1-0.1.6-150200.8.3.1 * libvisio-devel-0.1.6-150200.8.3.1 * SUSE Package Hub 15 15-SP5 (noarch) * libvisio-devel-doc-0.1.6-150200.8.3.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * libvisio-debuginfo-0.1.6-150200.8.3.1 * libvisio-debugsource-0.1.6-150200.8.3.1 * libvisio-0_1-1-debuginfo-0.1.6-150200.8.3.1 * libvisio-0_1-1-0.1.6-150200.8.3.1 * libvisio-devel-0.1.6-150200.8.3.1 ## References: * https://jira.suse.com/browse/PED-6193

1 0

SUSE-SU-2024:0250-1: important: Security update for sevctl
by OPENSUSE-UPDATES 26 Jan '24

26 Jan '24

# Security update for sevctl Announcement ID: SUSE-SU-2024:0250-1 Rating: important References: * bsc#1218499 * bsc#1218502 * jsc#PED-4981 Cross-References: * CVE-2023-50711 CVSS scores: * CVE-2023-50711 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L * CVE-2023-50711 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability, contains one feature and has one security fix can now be installed. ## Description: This update for sevctl fixes the following issues: * CVE-2023-50711: Fixed out of bounds memory accesses in vmm-sys-util (bsc#1218502, bsc#1218499) Non-security fixes: * Updated to version 0.4.3 (jsc#PED-4981) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-250=1 openSUSE-SLE-15.5-2024-250=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-250=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * sevctl-debuginfo-0.4.3-150500.3.3.1 * sevctl-debugsource-0.4.3-150500.3.3.1 * sevctl-0.4.3-150500.3.3.1 * Server Applications Module 15-SP5 (x86_64) * sevctl-debuginfo-0.4.3-150500.3.3.1 * sevctl-debugsource-0.4.3-150500.3.3.1 * sevctl-0.4.3-150500.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50711.html * https://bugzilla.suse.com/show_bug.cgi?id=1218499 * https://bugzilla.suse.com/show_bug.cgi?id=1218502 * https://jira.suse.com/browse/PED-4981

1 0

SUSE-SU-2024:0252-1: moderate: Security update for xorg-x11-server
by OPENSUSE-UPDATES 26 Jan '24

26 Jan '24

# Security update for xorg-x11-server Announcement ID: SUSE-SU-2024:0252-1 Rating: moderate References: * bsc#1218845 * bsc#1218846 Cross-References: * CVE-2024-0408 * CVE-2024-0409 CVSS scores: * CVE-2024-0408 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2024-0409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2024-0408: Fixed SELinux unlabeled GLX PBuffer. (bsc#1218845) * CVE-2024-0409: Fixed SELinux context corruption. (bsc#1218846) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-252=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-252=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-252=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-252=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-252=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-252=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-252=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-252=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-252=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * xorg-x11-server-source-1.20.3-150400.38.43.1 * xorg-x11-server-1.20.3-150400.38.43.1 * xorg-x11-server-sdk-1.20.3-150400.38.43.1 * xorg-x11-server-debugsource-1.20.3-150400.38.43.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.43.1 * xorg-x11-server-extra-1.20.3-150400.38.43.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * xorg-x11-server-1.20.3-150400.38.43.1 * xorg-x11-server-sdk-1.20.3-150400.38.43.1 * xorg-x11-server-debugsource-1.20.3-150400.38.43.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.43.1 * xorg-x11-server-extra-1.20.3-150400.38.43.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * xorg-x11-server-1.20.3-150400.38.43.1 * xorg-x11-server-sdk-1.20.3-150400.38.43.1 * xorg-x11-server-debugsource-1.20.3-150400.38.43.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.43.1 * xorg-x11-server-extra-1.20.3-150400.38.43.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.43.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * xorg-x11-server-1.20.3-150400.38.43.1 * xorg-x11-server-sdk-1.20.3-150400.38.43.1 * xorg-x11-server-debugsource-1.20.3-150400.38.43.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.43.1 * xorg-x11-server-extra-1.20.3-150400.38.43.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.43.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-1.20.3-150400.38.43.1 * xorg-x11-server-sdk-1.20.3-150400.38.43.1 * xorg-x11-server-debugsource-1.20.3-150400.38.43.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.43.1 * xorg-x11-server-extra-1.20.3-150400.38.43.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * xorg-x11-server-1.20.3-150400.38.43.1 * xorg-x11-server-sdk-1.20.3-150400.38.43.1 * xorg-x11-server-debugsource-1.20.3-150400.38.43.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.43.1 * xorg-x11-server-extra-1.20.3-150400.38.43.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.43.1 * SUSE Manager Proxy 4.3 (x86_64) * xorg-x11-server-1.20.3-150400.38.43.1 * xorg-x11-server-debugsource-1.20.3-150400.38.43.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.43.1 * xorg-x11-server-extra-1.20.3-150400.38.43.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.43.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * xorg-x11-server-1.20.3-150400.38.43.1 * xorg-x11-server-debugsource-1.20.3-150400.38.43.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.43.1 * xorg-x11-server-extra-1.20.3-150400.38.43.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.43.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * xorg-x11-server-1.20.3-150400.38.43.1 * xorg-x11-server-debugsource-1.20.3-150400.38.43.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.43.1 * xorg-x11-server-extra-1.20.3-150400.38.43.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.43.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0408.html * https://www.suse.com/security/cve/CVE-2024-0409.html * https://bugzilla.suse.com/show_bug.cgi?id=1218845 * https://bugzilla.suse.com/show_bug.cgi?id=1218846

1 0

SUSE-RU-2024:0237-1: moderate: Recommended update for powerpc-utils
by OPENSUSE-UPDATES 26 Jan '24

26 Jan '24

# Recommended update for powerpc-utils Announcement ID: SUSE-RU-2024:0237-1 Rating: moderate References: * bsc#1217925 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for powerpc-utils fixes the following issues: * Fix support for nvme devices with nsid greater than 10 (bsc#1217925) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-237=1 openSUSE-SLE-15.5-2024-237=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-237=1 ## Package List: * openSUSE Leap 15.5 (ppc64le) * powerpc-utils-1.3.11-150500.3.9.1 * powerpc-utils-debugsource-1.3.11-150500.3.9.1 * powerpc-utils-debuginfo-1.3.11-150500.3.9.1 * Basesystem Module 15-SP5 (ppc64le) * powerpc-utils-1.3.11-150500.3.9.1 * powerpc-utils-debugsource-1.3.11-150500.3.9.1 * powerpc-utils-debuginfo-1.3.11-150500.3.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217925

1 0

SUSE-SU-2024:0238-1: moderate: Security update for cpio
by OPENSUSE-UPDATES 26 Jan '24

26 Jan '24

# Security update for cpio Announcement ID: SUSE-SU-2024:0238-1 Rating: moderate References: * bsc#1218571 Cross-References: * CVE-2023-7207 CVSS scores: * CVE-2023-7207 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cpio fixes the following issues: * CVE-2023-7207: Fixed a path traversal issue that could lead to an arbitrary file write during archive extraction (bsc#1218571). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-238=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-238=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-238=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-238=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-238=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-238=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-238=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-238=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-238=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-238=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * cpio-mt-debuginfo-2.13-150400.3.3.1 * cpio-mt-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * cpio-debugsource-2.13-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * cpio-lang-2.13-150400.3.3.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cpio-mt-debuginfo-2.13-150400.3.3.1 * cpio-mt-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * cpio-debugsource-2.13-150400.3.3.1 * openSUSE Leap 15.5 (noarch) * cpio-lang-2.13-150400.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * cpio-debugsource-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cpio-mt-debuginfo-2.13-150400.3.3.1 * cpio-mt-2.13-150400.3.3.1 * cpio-debuginfo-2.13-150400.3.3.1 * cpio-2.13-150400.3.3.1 * cpio-debugsource-2.13-150400.3.3.1 * Basesystem Module 15-SP5 (noarch) * cpio-lang-2.13-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-7207.html * https://bugzilla.suse.com/show_bug.cgi?id=1218571

1 0

openSUSE-RU-2024:0034-1: moderate: Recommended update for rspamd
by maintenance＠opensuse.org 25 Jan '24

25 Jan '24

openSUSE Recommended Update: Recommended update for rspamd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0034-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rspamd fixes the following issues: Update to 3.8.0 - [WebUI] Update map editor by @moisseev in #4668 - [Minor] Make Robot Framework loop unfunny by @fatalbanana in #4672 - [Project] Support of JSON logging by @vstakhov in #4674 - [Minor] Add missing include for gcc 14 by @arkamar in #4675 - [Minor] Add rule for messages missing both X-Mailer and User-Agent header by @twesterhever in #4682 - [Minor] Treat *.zpaq attachments as archives and harmful by @twesterhever in #4680 - [Enhancement] Add composite rule for suspicious URLs in suspicious messages by @twesterhever in #4681 - [Minor] Improve FREEMAIL_AFF capture rates by @twesterhever in #4683 - [Fix] rbl: unbreak exclude_local by @fatalbanana in #4678 - [Minor] force_actions: set a group for symbols by @fatalbanana in #4685 - [Minor] doxydown: fix elements containing few spaces by @fatalbanana in #4687 - [Fix] known_senders: fix config handling by @fatalbanana in #4693 - [Feature] Reiterate on gtube patterns by @vstakhov in #4691 - [Minor] Try improve test stability by @fatalbanana in #4695 - [Feature] Support ping command in fuzzy storage by @vstakhov in #4694 - [Test] Set umask where it's useful by @fatalbanana in #4699 - [Minor] Remove obsolete code by @moisseev in #4700 - [WebUI] Load modules dynamically by @moisseev in #4705 - Add support for loongarch by @wuruilong01 in #4704 - [Test] Try correct settings test by @fatalbanana in #4706 - [Minor] Get rid of 'var' declarations by @moisseev in #4707 - [Test] Fix dummy http server on python 3.6 by @fatalbanana in #4710 - [Test] Skip miltertest tests if it is not installed by @fatalbanana in #4709 - [Test] Restore stylistic rules check by @moisseev in #4711 - [Minor] Re-sign YAML by @fatalbanana in #4713 - [Minor] Use consistent object key/value spacing by @moisseev in #4712 - Fix fuzzy stat by @vstakhov in #4714 - [Minor] Convert callbacks to arrow functions by @moisseev in #4715 - Fix issues with the raw header on header insertion/modification by @vstakhov in #4716 - [Fix] dkim_signing: siging_table: lowercase before lookup by @fatalbanana in #4717 - [Minor] Replace Dockerfile with advertisement for image by @fatalbanana in #4721 - [WebUI] Refine symbols score input boxes by @moisseev in #4723 - [Test] Remove default ESLint Stylistic rule by @moisseev in #4724 - [Test] Exercise rspamadm lua logger in functional tests by @fatalbanana in #4728 - [Test] Use npm ls to show versions by @moisseev in #4725 - [Test] Unbreak ESLint by @moisseev in #4730 - [Test] Test systemd logging by @fatalbanana in #4733 - [CritFix] - Fix reported length of logging structure by @AdamMajer in #4732 - [Test] Remove deprecated Stylelint rule by @moisseev in #4735 - Migrate bayes redis backend to Lua scripts by @vstakhov in #4718 - [Minor] Have bayes use global redis settings by @fatalbanana in #4739 - [Feature] rbl: support disabling or replacing url_whitelist per RBL by @fatalbanana in #4742 - [Minor] rbl: try harder to identify lua patterns by @fatalbanana in #4743 - [Minor] rbl: revisit previous change by @fatalbanana in #4747 - [WebUI] Symbols: replace individual save buttons by @moisseev in #4748 - [WebUI] Send only altered symbols in save requests by @moisseev in #4749 - [Minor] docs: rspamd_html: fix some copypasta by @fatalbanana in #4750 - [Minor] ratelimit: make per-bucket symbol behave like global symbol by @fatalbanana in #4755 - [Minor] Log a debug message when ratelimit skipped by @moisseev in #4757 - [WebUI] Show pass-through module in scan result by @moisseev in #4758 - [Minor] debian: add missing stuff to rspamd-asan package by @fatalbanana in #4761 - [Minor] Fix typo in hfilter map by @moisseev in #4759 - [Minor] Move common stuff to separate files by @moisseev in #4762 - Fix an overzealous s/NULL/nullptr/g by @jvoisin in #4764 - [WebUI] Show message size in IEC (base 1024) units by @moisseev in #4765 - [WebUI] Normalize IPv4 for column sorting by @moisseev in #4766 - [Test] Some more tests for logging by @fatalbanana in #4767 - [Feature] Support suppressing DMARC reporting for particular recipients by @fatalbanana in #4772 - [Test] Fix tests on Robot Framework 7.0 by @fatalbanana in #4775 - Rewrite redis_cache logic in statistics by @vstakhov in #4774 - [Fix] multimap: rawtext: use decoded parts by @fatalbanana in #4781 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-34=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): rspamd-3.8.0-bp155.2.12.1 References:

1 0

SUSE-RU-2024:0235-1: moderate: Recommended update for yast2-pkg-bindings
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for yast2-pkg-bindings Announcement ID: SUSE-RU-2024:0235-1 Rating: moderate References: * bsc#1218399 * bsc#1218977 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for yast2-pkg-bindings fixes the following issues: * Fixed repository and service probing with libzypp 7.31.26 and newer, fixes broken repository handling (bsc#1218977, bsc#1218399) * 4.4.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-235=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-235=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-235=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-235=1 SUSE- SLE-INSTALLER-15-SP4-2024-235=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-235=1 SUSE-SLE- INSTALLER-15-SP4-2024-235=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-235=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-235=1 SUSE-SLE-INSTALLER-15-SP4-2024-235=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-235=1 SUSE-SLE- INSTALLER-15-SP4-2024-235=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-235=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-235=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-235=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-235=1 ## Package List: * openSUSE Leap 15.4 (noarch) * yast2-pkg-bindings-devel-doc-4.4.7-150400.3.9.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Manager Proxy 4.3 (x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * yast2-pkg-bindings-debuginfo-4.4.7-150400.3.9.1 * yast2-pkg-bindings-debugsource-4.4.7-150400.3.9.1 * yast2-pkg-bindings-4.4.7-150400.3.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218399 * https://bugzilla.suse.com/show_bug.cgi?id=1218977

1 0

SUSE-SU-2024:0224-1: important: Security update for apache-parent, apache-sshd
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Security update for apache-parent, apache-sshd Announcement ID: SUSE-SU-2024:0224-1 Rating: important References: * bsc#1205463 * bsc#1218189 Cross-References: * CVE-2022-45047 * CVE-2023-48795 CVSS scores: * CVE-2022-45047 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-48795 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-48795 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for apache-parent, apache-sshd fixes the following issues: apache-parent was updated from version 28 to 31: * Version 31: * New Features: * Added maven-checkstyle-plugin to pluginManagement * Improvements: * Set minimalMavenBuildVersion to 3.6.3 - the minimum used by plugins * Using an SPDX identifier as the license name is recommended by Maven * Use properties to define the versions of plugins * Bugs fixed: * Updated documentation for previous changes apache-sshd was updated from version 2.7.0 to 2.12.0: * Security issues fixed: * CVE-2023-48795: Implemented OpenSSH "strict key exchange" protocol in apache-sshd version 2.12.0 (bsc#1218189) * CVE-2022-45047: Java unsafe deserialization vulnerability fixed in apache- sshd version 2.9.2 (bsc#1205463) * Other changes in version 2.12.0: * Bugs fixed: * SCP client fails silently when error signalled due to missing file or lacking permissions * Ignore unknown key types from agent or in OpenSSH host keys extension * New Features: * Support GIT protocol-v2 * Other changes in version 2.11.0: * Bugs fixed: * Added configurable timeout(s) to DefaultSftpClient * Compare file keys in ModifiableFileWatcher. * Fixed channel pool in SftpFileSystem. * Use correct default OpenOptions in SftpFileSystemProvider.newFileChannel(). * Use correct lock modes for SFTP FileChannel.lock(). * ScpClient: support issuing commands to a server that uses a non-UTF-8 locale. * SftpInputStreamAsync: fix reporting EOF on zero-length reads. * Work-around a bug in WS_FTP <= 12.9 SFTP clients. * (Regression in 2.10.0) SFTP performance fix: override FilterOutputStream.write(byte[], int, int). * Fixed a race condition to ensure SSH_MSG_CHANNEL_EOF is always sent before SSH_MSG_CHANNEL_CLOSE. * Fixed error handling while flushing queued packets at end of KEX. * Fixed wrong log level on closing an Nio2Session. * Fixed detection of Android O/S from system properties. * Consider all applicable host keys from the known_hosts files. * SftpFileSystem: do not close user session. * ChannelAsyncOutputStream: remove write future when done. * SSHD-1332 (Regression in 2.10.0) Resolve ~ in IdentityFile file names in HostConfigEntry. * New Features: * Use KeepAliveHandler global request instance in client as well * Publish snapshot maven artifacts to the Apache Snapshots maven repository. * Bundle sshd-contrib has support classes for the HAProxy protocol V2. * Other changes in version 2.10.0: * Bugs fixed: * Connection attempt not canceled when a connection timeout occurs * Possible OOM in ChannelPipedInputStream * SftpRemotePathChannel.transferFrom(...) ignores position argument * Rooted file system can leak informations * Failed to establish an SSH connection because the server identifier exceeds the int range * Improvements: * Password in clear in SSHD server's logs * Other changes in version 2.9.2: * Bugs fixed: * SFTP worker threads got stuck while processing PUT methods against one specific SFTP server * Use the maximum packet size of the communication partner * ExplicitPortForwardingTracker does not unbind auto-allocated one * Default SshClient FD leak because Selector not closed * Reading again from exhausted ChannelExec#getInvertedOut() throws IOException instead of returning -1 * Keeping error streams and input streams separate after ChannelExec#setRedirectErrorStream(true) is called * Nio2Session.shutdownOutput() should wait for writes in progress * Test: * Research intermittent failure in unit tests using various I/O service factories * Other changes in version 2.9.1: * Bugs fixed: * ClientSession.auth().verify() is terminated with timeout * 2.9.0 release broken on Java 8 * Infinite loop in org.apache.sshd.sftp.client.impl.SftpInputStreamAsync#doRead * Deadlock during session exit * Race condition is logged in ChannelAsyncOutputStream * Other changes in version 2.9.0: * Bugs fixed: * Deadlock on disconnection at the end of key-exchange * Remote port forwarding mode does not handle EOF properly * Public key authentication: wrong signature algorithm used (ed25519 key with ssh-rsa signature) * Client fails window adjust above Integer.MAX_VALUE * class loader fails to load org.apache.sshd.common.cipher.BaseGCMCipher * Shell is not getting closed if the command has already closed the OutputStream it is using. * Sometimes async write listener is not called * Unhandled SSH_MSG_CHANNEL_WINDOW_ADJUST leeds to SocketTimeoutException * different host key algorithm used on rekey than used for the initial connection * OpenSSH certificate is not properly encoded when critical options are included * TCP/IP remote port forwarding with wildcard IP addresses doesn't work with OpenSSH * UserAuthPublicKey: uses ssh-rsa signatures for RSA keys from an agent * New Features: * Added support for Argon2 encrypted PUTTY key files * Added support for merged inverted output and error streams of remote process * Improvements: * Added support for "limits(a)openssh.com" SFTP extension * Support host-based pubkey authentication in the client * Send environment variable and open subsystem at the same time for SSH session * Other changes in version 2.8.0: * Bugs fixed: * Fixed wrong server key algorithm choice * Expiration of OpenSshCertificates needs to compare timestamps as unsigned long * SFTP Get downloads empty file from servers which supports EOF indication after data * skip() doesn't work properly in SftpInputStreamAsync * OpenMode and CopyMode is not honored as expected in version > 4 of SFTP api * SftpTransferTest sometimes hangs (failure during rekeying) * Race condition in KEX * Fix the ciphers supported documentation * Update tarLongFileMode to use POSIX * WinsCP transfer failure to Apache SSHD Server * Pubkey auth: keys from ssh-agent are used even if HostConfigEntry.isIdentitiesOnly() is true * Support RSA SHA2 signatures via SSH agent * NOTICE: wrong copyright year range * Wrong creationTime in writeAttrs for SFTP * sshd-netty logs all traffic on INFO level * New Features: * Add support for chacha20-poly1305(a)openssh.com * Parsing of ~/.ssh/config Host patterns fails with extra whitespace * Support generating OpenSSH client certificates * Improvements: * Add support for curve25519-sha256(a)libssh.org key exchange * OpenSSH certificates: check certificate type * OpenSSHCertificatesTest: certificates expire in 2030 * Display IdleTimeOut in more user-friendly format * sendChunkIfRemoteWindowIsSmallerThanPacketSize flag in ChannelAsyncOutputStream constructor configurable from outside using variable/config file * Intercepting the server exception message from server in SSHD client * Implement RFC 8332 server-sig-algs on the server * Slow performance listing huge number of files on Apache SSHD server * SFTP: too many LSTAT calls * Support key constraints when adding a key to an SSH agent * Add SFTP server side file custom attributes hook ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-224=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-224=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-224=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-224=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-224=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-224=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-224=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-224=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-224=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-224=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-224=1 ## Package List: * openSUSE Leap 15.5 (noarch) * apache-parent-31-150200.3.12.1 * apache-sshd-javadoc-2.12.0-150200.5.8.1 * apache-sshd-2.12.0-150200.5.8.1 * Development Tools Module 15-SP5 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * apache-sshd-2.12.0-150200.5.8.1 * SUSE Enterprise Storage 7.1 (noarch) * apache-sshd-2.12.0-150200.5.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-45047.html * https://www.suse.com/security/cve/CVE-2023-48795.html * https://bugzilla.suse.com/show_bug.cgi?id=1205463 * https://bugzilla.suse.com/show_bug.cgi?id=1218189

1 0

SUSE-RU-2024:0225-1: moderate: Recommended update for ant and and-contrib
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for ant and and-contrib Announcement ID: SUSE-RU-2024:0225-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for ant and ant-contrib fixes the following issues: ant: * ant was updated from version 1.10.13 to 1.10.14: * Changes that could break older environments: * Resource#compareTo now invokes getName rather than toString as the later may be costly (for example in the case of a StringResource). * When using Java 18 or higher, Ant will no longer use Java SecurityManager because it has been deprecated for removal and by default is disallowed to be set at runtime https://openjdk.org/jeps/411. This will mean that the "<permissions>" type is no longer functional when using Java 18 or higher. Furthermore, when using Java 18 or higher, if the build executes tasks that call "java.lang.System.exit()" and if those tasks aren't running in a forked VM of their own, then such tasks will now kill the entire Ant build process. It is recommended that such tasks be updated to launch in a forked VM so that the System.exit() call will not impact the JVM in which Ant process runs. * Fixed bugs: * Log only the stylesheet name in the xslt task. * junitlauncher task's "test" and "listener" elements which take a "outputDir" property were incorrectly resolving the outputDir against the current working directory instead of the project's basedir. * regexmapper would, in some cases, incorrectly consume backslash characters from the "to" attribute, resulting in missing backslashes in the output. * <fixcrlf>, <replace> and <replaceregexp> now try to preserve the file permissions of the files they modify. * junitlauncher task would fail if a forked test timed out even if haltOnFailure was set to false. * Fixed a bug in org.apache.tools.zip.ZipOutputStream where, even when "zip64Mode" is set to "always", ZipOutputStream may not create a CEN extra field data for the entry. * legacy-xml listener of junitlauncher task wouldn't report certain failures involving junit jupiter dynamic tests. * allow.class which was introduced in Ant 1.10.13 release, has been removed from this 1.10.14 release. This class was introduced in context of the SecurityManager changes in Ant 1.10.13, which have now been reverted in Ant 1.10.14, since they caused several regressions. * Other changes: * <fork> element of the junitlauncher task now has a new optional "java" attribute which can be used to point to a different Java installation for runnning the forked tests. * Made sure <echoproperties> sorts the echoed properties on JDK9+ as well. * org.apache.tools.ant.taskdefs.Recorder class now introduces a setLogLevel(LogLevel level) method. * The <fork> element of junitlaunchertask now allows a "forkMode" attribute. forkMode=perTestClass can now be used to launch each test class in a separate forked JVM. ant-contrib: * Package was rebuilt against ant version 1.10.14 to prevent installation issues (no source changes) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-225=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-225=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-225=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-225=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-225=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-225=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-225=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-225=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-225=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-225=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-225=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-225=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-225=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-225=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Enterprise Storage 7.1 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * openSUSE Leap 15.5 (noarch) * ant-contrib-manual-1.0b3-150200.11.12.2 * ant-junit-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-contrib-javadoc-1.0b3-150200.11.12.2 * ant-javamail-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-apache-xalan2-1.10.14-150200.4.18.2 * ant-commons-net-1.10.14-150200.4.18.2 * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-jsch-1.10.14-150200.4.18.2 * ant-testutil-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-xz-1.10.14-150200.4.18.2 * ant-imageio-1.10.14-150200.4.18.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-junit5-1.10.14-150200.4.18.2 * Development Tools Module 15-SP5 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * ant-contrib-1.0b3-150200.11.12.2 * ant-apache-oro-1.10.14-150200.4.18.2 * ant-apache-log4j-1.10.14-150200.4.18.2 * ant-apache-bsf-1.10.14-150200.4.18.2 * ant-apache-resolver-1.10.14-150200.4.18.2 * ant-jakartamail-1.10.14-150200.4.18.2 * ant-junit-1.10.14-150200.4.18.2 * ant-commons-logging-1.10.14-150200.4.18.2 * ant-1.10.14-150200.4.18.2 * ant-jdepend-1.10.14-150200.4.18.2 * ant-manual-1.10.14-150200.4.18.2 * ant-apache-bcel-1.10.14-150200.4.18.2 * ant-apache-regexp-1.10.14-150200.4.18.2 * ant-swing-1.10.14-150200.4.18.2 * ant-antlr-1.10.14-150200.4.18.2 * ant-scripts-1.10.14-150200.4.18.2 * ant-jmf-1.10.14-150200.4.18.2 * ant-javamail-1.10.14-150200.4.18.2

1 0

SUSE-RU-2024:0227-1: moderate: Recommended update for maven-parent
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for maven-parent Announcement ID: SUSE-RU-2024:0227-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 An update that can now be installed. ## Description: This update for maven-parent fixes the following issues: * Upgraded Apache Maven parent POM to version 40: * Besides maven-parent, it provides now also the following pom artifacts: * doxia-tools * maven-extensions * maven-plugins * maven-shared-components * maven-skins ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-227=1 ## Package List: * openSUSE Leap 15.5 (noarch) * maven-parent-40-150200.3.5.1

1 0

SUSE-SU-2024:0229-1: important: Security update for MozillaFirefox
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Security update for MozillaFirefox Announcement ID: SUSE-SU-2024:0229-1 Rating: important References: * bsc#1218955 Cross-References: * CVE-2024-0741 * CVE-2024-0742 * CVE-2024-0746 * CVE-2024-0747 * CVE-2024-0749 * CVE-2024-0750 * CVE-2024-0751 * CVE-2024-0753 * CVE-2024-0755 CVSS scores: Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.7.0 ESR (MFSA2024-02) (bsc#1218955): * CVE-2024-0741: Out of bounds write in ANGLE * CVE-2024-0742: Failure to update user input timestamp * CVE-2024-0746: Crash when listing printers on Linux * CVE-2024-0747: Bypass of Content Security Policy when directive unsafe- inline was set * CVE-2024-0749: Phishing site popup could show local origin in address bar * CVE-2024-0750: Potential permissions request bypass via clickjacking * CVE-2024-0751: Privilege escalation through devtools * CVE-2024-0753: HSTS policy on subdomain could bypass policy of upper domain * CVE-2024-0755: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-229=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-229=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-229=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-229=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-229=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-229=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-229=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-229=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-229=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-229=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-229=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-229=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-229=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-229=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * MozillaFirefox-branding-upstream-115.7.0-150200.152.123.1 * openSUSE Leap 15.5 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * Desktop Applications Module 15-SP5 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * MozillaFirefox-115.7.0-150200.152.123.1 * MozillaFirefox-debugsource-115.7.0-150200.152.123.1 * MozillaFirefox-debuginfo-115.7.0-150200.152.123.1 * MozillaFirefox-translations-other-115.7.0-150200.152.123.1 * MozillaFirefox-translations-common-115.7.0-150200.152.123.1 * SUSE Enterprise Storage 7.1 (noarch) * MozillaFirefox-devel-115.7.0-150200.152.123.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0741.html * https://www.suse.com/security/cve/CVE-2024-0742.html * https://www.suse.com/security/cve/CVE-2024-0746.html * https://www.suse.com/security/cve/CVE-2024-0747.html * https://www.suse.com/security/cve/CVE-2024-0749.html * https://www.suse.com/security/cve/CVE-2024-0750.html * https://www.suse.com/security/cve/CVE-2024-0751.html * https://www.suse.com/security/cve/CVE-2024-0753.html * https://www.suse.com/security/cve/CVE-2024-0755.html * https://bugzilla.suse.com/show_bug.cgi?id=1218955

1 0

SUSE-RU-2024:0230-1: moderate: Recommended update for adcli
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for adcli Announcement ID: SUSE-RU-2024:0230-1 Rating: moderate References: * bsc#1214076 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for adcli fixes the following issues: * Populate Samba's secrets database using offline domain join (bsc#1214076) * Write SID before secret to Samba's db (bsc#1214076) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-230=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-230=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-230=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-230=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-230=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-230=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-230=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-230=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-230=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-230=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-230=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-230=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Manager Proxy 4.3 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * adcli-0.8.2-150400.17.6.1 * adcli-debugsource-0.8.2-150400.17.6.1 * adcli-doc-0.8.2-150400.17.6.1 * adcli-debuginfo-0.8.2-150400.17.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214076

1 0

SUSE-RU-2024:0233-1: moderate: Recommended update for suse-module-tools
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for suse-module-tools Announcement ID: SUSE-RU-2024:0233-1 Rating: moderate References: * bsc#1217775 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for suse-module-tools fixes the following issues: * Update to version 15.4.19 * Add symlink /boot/.vmlinuz.hmac (bsc#1217775) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-233=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-233=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-233=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-233=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-233=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-233=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-233=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-233=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-233=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-233=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-233=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-233=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-233=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-233=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-233=1 ## Package List: * SUSE Manager Retail Branch Server 4.3 (x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * suse-module-tools-legacy-15.4.19-150400.3.17.1 * suse-module-tools-15.4.19-150400.3.17.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * suse-module-tools-15.4.19-150400.3.17.1 * SUSE Manager Proxy 4.3 (x86_64) * suse-module-tools-15.4.19-150400.3.17.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217775

1 0

SUSE-RU-2024:0234-1: moderate: Recommended update for sssd
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for sssd Announcement ID: SUSE-RU-2024:0234-1 Rating: moderate References: * bsc#1218537 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for sssd fixes the following issues: * Update shadowLastChanged attribute during LDAP password change (bsc#1218537) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-234=1 openSUSE-SLE-15.5-2024-234=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-234=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-234=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libipa_hbac-devel-2.5.2-150500.10.14.1 * sssd-2.5.2-150500.10.14.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-2.5.2-150500.10.14.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-kcm-2.5.2-150500.10.14.1 * libsss_nss_idmap0-2.5.2-150500.10.14.1 * libsss_simpleifp-devel-2.5.2-150500.10.14.1 * libnfsidmap-sss-debuginfo-2.5.2-150500.10.14.1 * sssd-common-debuginfo-2.5.2-150500.10.14.1 * sssd-proxy-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-2.5.2-150500.10.14.1 * libsss_idmap-devel-2.5.2-150500.10.14.1 * python3-sss_nss_idmap-2.5.2-150500.10.14.1 * sssd-dbus-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-2.5.2-150500.10.14.1 * libipa_hbac0-2.5.2-150500.10.14.1 * python3-sss-murmur-debuginfo-2.5.2-150500.10.14.1 * libsss_idmap0-2.5.2-150500.10.14.1 * python3-ipa_hbac-debuginfo-2.5.2-150500.10.14.1 * sssd-kcm-debuginfo-2.5.2-150500.10.14.1 * python3-ipa_hbac-2.5.2-150500.10.14.1 * sssd-tools-2.5.2-150500.10.14.1 * libnfsidmap-sss-2.5.2-150500.10.14.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-debuginfo-2.5.2-150500.10.14.1 * libsss_certmap-devel-2.5.2-150500.10.14.1 * sssd-krb5-common-2.5.2-150500.10.14.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-debugsource-2.5.2-150500.10.14.1 * sssd-proxy-2.5.2-150500.10.14.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.14.1 * sssd-common-2.5.2-150500.10.14.1 * sssd-ad-debuginfo-2.5.2-150500.10.14.1 * sssd-tools-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.14.1 * sssd-dbus-2.5.2-150500.10.14.1 * libsss_certmap0-2.5.2-150500.10.14.1 * python3-sss_nss_idmap-debuginfo-2.5.2-150500.10.14.1 * sssd-ad-2.5.2-150500.10.14.1 * sssd-krb5-2.5.2-150500.10.14.1 * sssd-winbind-idmap-2.5.2-150500.10.14.1 * python3-sss-murmur-2.5.2-150500.10.14.1 * libsss_nss_idmap-devel-2.5.2-150500.10.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-2.5.2-150500.10.14.1 * sssd-krb5-debuginfo-2.5.2-150500.10.14.1 * openSUSE Leap 15.5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.14.1 * sssd-common-32bit-debuginfo-2.5.2-150500.10.14.1 * openSUSE Leap 15.5 (aarch64_ilp32) * sssd-common-64bit-debuginfo-2.5.2-150500.10.14.1 * sssd-common-64bit-2.5.2-150500.10.14.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sssd-2.5.2-150500.10.14.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-debuginfo-2.5.2-150500.10.14.1 * sssd-krb5-common-2.5.2-150500.10.14.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.14.1 * libsss_certmap0-2.5.2-150500.10.14.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-debugsource-2.5.2-150500.10.14.1 * sssd-ldap-2.5.2-150500.10.14.1 * libsss_nss_idmap0-2.5.2-150500.10.14.1 * libsss_idmap0-2.5.2-150500.10.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-common-debuginfo-2.5.2-150500.10.14.1 * sssd-common-2.5.2-150500.10.14.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libipa_hbac-devel-2.5.2-150500.10.14.1 * sssd-2.5.2-150500.10.14.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-2.5.2-150500.10.14.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-kcm-2.5.2-150500.10.14.1 * libsss_nss_idmap0-2.5.2-150500.10.14.1 * libsss_simpleifp-devel-2.5.2-150500.10.14.1 * sssd-common-debuginfo-2.5.2-150500.10.14.1 * sssd-proxy-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-2.5.2-150500.10.14.1 * libsss_idmap-devel-2.5.2-150500.10.14.1 * sssd-dbus-debuginfo-2.5.2-150500.10.14.1 * sssd-ldap-2.5.2-150500.10.14.1 * libipa_hbac0-2.5.2-150500.10.14.1 * libsss_idmap0-2.5.2-150500.10.14.1 * sssd-kcm-debuginfo-2.5.2-150500.10.14.1 * sssd-tools-2.5.2-150500.10.14.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.14.1 * sssd-ipa-debuginfo-2.5.2-150500.10.14.1 * libsss_certmap-devel-2.5.2-150500.10.14.1 * sssd-krb5-common-2.5.2-150500.10.14.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.14.1 * sssd-debugsource-2.5.2-150500.10.14.1 * sssd-proxy-2.5.2-150500.10.14.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.14.1 * sssd-common-2.5.2-150500.10.14.1 * sssd-ad-debuginfo-2.5.2-150500.10.14.1 * sssd-tools-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.14.1 * sssd-dbus-2.5.2-150500.10.14.1 * libsss_certmap0-2.5.2-150500.10.14.1 * sssd-ad-2.5.2-150500.10.14.1 * sssd-winbind-idmap-2.5.2-150500.10.14.1 * sssd-krb5-2.5.2-150500.10.14.1 * libsss_nss_idmap-devel-2.5.2-150500.10.14.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.14.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.14.1 * python3-sssd-config-2.5.2-150500.10.14.1 * sssd-krb5-debuginfo-2.5.2-150500.10.14.1 * Basesystem Module 15-SP5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.14.1 * sssd-common-32bit-debuginfo-2.5.2-150500.10.14.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218537

1 0

SUSE-RU-2024:0218-1: moderate: Recommended update for yast2-samba-client
by OPENSUSE-UPDATES 25 Jan '24

25 Jan '24

# Recommended update for yast2-samba-client Announcement ID: SUSE-RU-2024:0218-1 Rating: moderate References: * bsc#1197936 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for yast2-samba-client fixes the following issues: - Fixed an issue when untranslated text appears in Windows Domain Membership Expert settings dialog. (bsc#1197936) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-218=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-218=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-218=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-218=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-218=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-218=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-218=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-218=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-218=1 ## Package List: * openSUSE Leap 15.4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Manager Proxy 4.3 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 * SUSE Manager Server 4.3 (noarch) * yast2-samba-client-4.4.4-150400.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1197936

1 0

openSUSE-SU-2024:0033-1: important: Security update for opera
by opensuse-security＠opensuse.org 24 Jan '24

24 Jan '24

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0033-1 Rating: important References: Cross-References: CVE-2024-0517 CVE-2024-0518 CVE-2024-0519 CVSS scores: CVE-2024-0517 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-0518 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-0519 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for opera fixes the following issues: Update to 106.0.4998.52 * CHR-9580 Update Chromium on desktop-stable-120-4998 to 120.0.6099.234 * DNA-113175 Can not merge folders on start page * DNA-113341 Implement 'special' menus * DNA-113811 Removing icons in sidepanel heading * DNA-114059 [Move to context menu] Workspaces icons always displayed in 1 line * DNA-114361 "Move to workspace" submenu shows icons vertically * The update to chromium 120.0.6099.234 fixes following issues: CVE-2024-0517, CVE-2024-0518, CVE-2024-0519 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2024-33=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-106.0.4998.52-lp155.3.33.1 References: https://www.suse.com/security/cve/CVE-2024-0517.html https://www.suse.com/security/cve/CVE-2024-0518.html https://www.suse.com/security/cve/CVE-2024-0519.html

1 0

SUSE-RU-2024:0220-1: moderate: Recommended update for yast2-pkg-bindings
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for yast2-pkg-bindings Announcement ID: SUSE-RU-2024:0220-1 Rating: moderate References: * bsc#1218399 * bsc#1218977 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for yast2-pkg-bindings fixes the following issues: * Fixed repository and service probing with libzypp 7.31.26 and newer, fixes broken repository handling (bsc#1218977, bsc#1218399) * 4.5.3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-220=1 openSUSE-SLE-15.5-2024-220=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-220=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-220=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-220=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-220=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-220=1 ## Package List: * openSUSE Leap 15.5 (noarch) * yast2-pkg-bindings-devel-doc-4.5.3-150500.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * yast2-pkg-bindings-debuginfo-4.5.3-150500.3.3.1 * yast2-pkg-bindings-debugsource-4.5.3-150500.3.3.1 * yast2-pkg-bindings-4.5.3-150500.3.3.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * yast2-pkg-bindings-4.5.3-150500.3.3.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * yast2-pkg-bindings-4.5.3-150500.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * yast2-pkg-bindings-4.5.3-150500.3.3.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * yast2-pkg-bindings-4.5.3-150500.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * yast2-pkg-bindings-debuginfo-4.5.3-150500.3.3.1 * yast2-pkg-bindings-debugsource-4.5.3-150500.3.3.1 * yast2-pkg-bindings-4.5.3-150500.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218399 * https://bugzilla.suse.com/show_bug.cgi?id=1218977

1 0

openSUSE-RU-2024:0032-1: moderate: Recommended update for kanidm
by maintenance＠opensuse.org 24 Jan '24

24 Jan '24

openSUSE Recommended Update: Recommended update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0032-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kanidm fixes the following issues: kanidm is shipped in version 1.1.0~rc15~git2.74f5c0f. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-32=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.1.0~rc15~git2.74f5c0f-bp155.2.1 kanidm-clients-1.1.0~rc15~git2.74f5c0f-bp155.2.1 kanidm-docs-1.1.0~rc15~git2.74f5c0f-bp155.2.1 kanidm-server-1.1.0~rc15~git2.74f5c0f-bp155.2.1 kanidm-unixd-clients-1.1.0~rc15~git2.74f5c0f-bp155.2.1 References:

1 0

openSUSE-SU-2024:0031-1: important: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 24 Jan '24

24 Jan '24

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0031-1 Rating: important References: #1218360 #1218366 #1218378 #1218379 #1218380 #1218381 Cross-References: CVE-2023-49084 CVE-2023-49085 CVE-2023-49086 CVE-2023-49088 CVE-2023-50250 CVE-2023-51448 CVSS scores: CVE-2023-49084 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-49085 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-49086 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2023-49088 (NVD) : 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVE-2023-50250 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2023-51448 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for cacti, cacti-spine fixes the following issues: cacti-spine 1.2.26: * Fix: Errors when uptime OID is not present * Fix: MySQL reconnect option is depreciated * Fix: Spine does not check a host with no poller items * Fix: Poller may report the wrong number of devices polled * Feature: Allow users to override the threads setting at the command line * Feature: Allow spine to run in ping-only mode cacti 1.2.26: * CVE-2023-50250: XSS vulnerability when importing a template file (boo#1218380) * CVE-2023-49084: RCE vulnerability when managing links (boo#1218360) * CVE-2023-49085: SQL Injection vulnerability when managing poller devices (boo#1218378) * CVE-2023-49086: XSS vulnerability when adding new devices (boo#1218366) * CVE-2023-49088: XSS vulnerability when viewing data sources in debug mode (boo#1218379) * CVE-2023-51448: SQL Injection vulnerability when managing SNMP Notification Receivers (boo#1218381) * When viewing data sources, an undefined variable error may be seen * Improvements for Poller Last Run Date * Attempting to edit a Data Query that does not exist throws warnings and not an GUI error * Improve PHP 8.1 support when adding devices * Viewing Data Query Cache can cause errors to be logged * Preserve option is not properly honoured when removing devices at command line * Infinite recursion is possible during a database failure * Monitoring Host CPU's does not always work on Windows endpoints * Multi select drop down list box not rendered correctly in Chrome and Edge * Selective Plugin Debugging may not always work as intended * During upgrades, Plugins may be falsely reported as incompatible * Plugin management at command line does not work with multiple plugins * Improve PHP 8.1 support for incrementing only numbers * Allow the renaming of guest and template accounts * DS Stats issues warnings when the RRDfile has not been initialized * When upgrading, missing data source profile can cause errors to be logged * When deleting a single Data Source, purge historical debug data * Improvements to form element warnings * Some interface aliases do not appear correctly * Aggregate graph does not show other percentiles * Settings table updates for large values reverted by database repair * When obtaining graph records, error messages may be recorded * Unable to change a device's community at command line * Increase timeout for RRDChecker * When viewing a graph, option to edit template may lead to incorrect URL * When upgrading, failures may occur due to missing color table keys * On installation, allow a more appropriate template to be used as the default * When data input parameters are allowed to be null, allow null * CSV Exports may not always output data correctly * When debugging a graph, long CDEF's can cause undesirable scrolling * Secondary LDAP server not evaluated when the first one has failed * When adding a device, using the bulk walk option can make version information appear * When parsing a Data Query resource, an error can be reported if no direction is specified * Database reconnection can cause errors to be reported incorrectly * fix returned value if $sau is empty * Add Aruba switch, Aruba controller and HPE iLO templates * Add OSCX 6x00 templates Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-31=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2024-31=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): cacti-spine-1.2.26-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): cacti-1.2.26-bp155.2.6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.26-32.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.26-38.1 References: https://www.suse.com/security/cve/CVE-2023-49084.html https://www.suse.com/security/cve/CVE-2023-49085.html https://www.suse.com/security/cve/CVE-2023-49086.html https://www.suse.com/security/cve/CVE-2023-49088.html https://www.suse.com/security/cve/CVE-2023-50250.html https://www.suse.com/security/cve/CVE-2023-51448.html https://bugzilla.suse.com/1218360 https://bugzilla.suse.com/1218366 https://bugzilla.suse.com/1218378 https://bugzilla.suse.com/1218379 https://bugzilla.suse.com/1218380 https://bugzilla.suse.com/1218381

1 0

openSUSE-SU-2024:0031-1: important: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 24 Jan '24

24 Jan '24

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0031-1 Rating: important References: #1218360 #1218366 #1218378 #1218379 #1218380 #1218381 Cross-References: CVE-2023-49084 CVE-2023-49085 CVE-2023-49086 CVE-2023-49088 CVE-2023-50250 CVE-2023-51448 CVSS scores: CVE-2023-49084 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-49085 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-49086 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2023-49088 (NVD) : 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVE-2023-50250 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2023-51448 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for cacti, cacti-spine fixes the following issues: cacti-spine 1.2.26: * Fix: Errors when uptime OID is not present * Fix: MySQL reconnect option is depreciated * Fix: Spine does not check a host with no poller items * Fix: Poller may report the wrong number of devices polled * Feature: Allow users to override the threads setting at the command line * Feature: Allow spine to run in ping-only mode cacti 1.2.26: * CVE-2023-50250: XSS vulnerability when importing a template file (boo#1218380) * CVE-2023-49084: RCE vulnerability when managing links (boo#1218360) * CVE-2023-49085: SQL Injection vulnerability when managing poller devices (boo#1218378) * CVE-2023-49086: XSS vulnerability when adding new devices (boo#1218366) * CVE-2023-49088: XSS vulnerability when viewing data sources in debug mode (boo#1218379) * CVE-2023-51448: SQL Injection vulnerability when managing SNMP Notification Receivers (boo#1218381) * When viewing data sources, an undefined variable error may be seen * Improvements for Poller Last Run Date * Attempting to edit a Data Query that does not exist throws warnings and not an GUI error * Improve PHP 8.1 support when adding devices * Viewing Data Query Cache can cause errors to be logged * Preserve option is not properly honoured when removing devices at command line * Infinite recursion is possible during a database failure * Monitoring Host CPU's does not always work on Windows endpoints * Multi select drop down list box not rendered correctly in Chrome and Edge * Selective Plugin Debugging may not always work as intended * During upgrades, Plugins may be falsely reported as incompatible * Plugin management at command line does not work with multiple plugins * Improve PHP 8.1 support for incrementing only numbers * Allow the renaming of guest and template accounts * DS Stats issues warnings when the RRDfile has not been initialized * When upgrading, missing data source profile can cause errors to be logged * When deleting a single Data Source, purge historical debug data * Improvements to form element warnings * Some interface aliases do not appear correctly * Aggregate graph does not show other percentiles * Settings table updates for large values reverted by database repair * When obtaining graph records, error messages may be recorded * Unable to change a device's community at command line * Increase timeout for RRDChecker * When viewing a graph, option to edit template may lead to incorrect URL * When upgrading, failures may occur due to missing color table keys * On installation, allow a more appropriate template to be used as the default * When data input parameters are allowed to be null, allow null * CSV Exports may not always output data correctly * When debugging a graph, long CDEF's can cause undesirable scrolling * Secondary LDAP server not evaluated when the first one has failed * When adding a device, using the bulk walk option can make version information appear * When parsing a Data Query resource, an error can be reported if no direction is specified * Database reconnection can cause errors to be reported incorrectly * fix returned value if $sau is empty * Add Aruba switch, Aruba controller and HPE iLO templates * Add OSCX 6x00 templates Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2024-31=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.26-32.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.26-38.1 References: https://www.suse.com/security/cve/CVE-2023-49084.html https://www.suse.com/security/cve/CVE-2023-49085.html https://www.suse.com/security/cve/CVE-2023-49086.html https://www.suse.com/security/cve/CVE-2023-49088.html https://www.suse.com/security/cve/CVE-2023-50250.html https://www.suse.com/security/cve/CVE-2023-51448.html https://bugzilla.suse.com/1218360 https://bugzilla.suse.com/1218366 https://bugzilla.suse.com/1218378 https://bugzilla.suse.com/1218379 https://bugzilla.suse.com/1218380 https://bugzilla.suse.com/1218381

1 0

SUSE-SU-2024:0204-1: important: Security update for bluez
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Security update for bluez Announcement ID: SUSE-SU-2024:0204-1 Rating: important References: * bsc#1218300 * bsc#1218301 Cross-References: * CVE-2023-50229 * CVE-2023-50230 CVSS scores: * CVE-2023-50229 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-50230 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300). * CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access Profile implementation (bsc#1218301). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-204=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-204=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-204=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-204=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-204=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-204=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-204=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-204=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-204=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-204=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-204=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-204=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-204=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-204=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-204=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libbluetooth3-5.62-150400.4.19.1 * bluez-test-debuginfo-5.62-150400.4.19.1 * bluez-cups-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-cups-debuginfo-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-test-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * openSUSE Leap 15.4 (noarch) * bluez-auto-enable-devices-5.62-150400.4.19.1 * openSUSE Leap 15.4 (x86_64) * libbluetooth3-32bit-debuginfo-5.62-150400.4.19.1 * bluez-devel-32bit-5.62-150400.4.19.1 * libbluetooth3-32bit-5.62-150400.4.19.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libbluetooth3-64bit-debuginfo-5.62-150400.4.19.1 * bluez-devel-64bit-5.62-150400.4.19.1 * libbluetooth3-64bit-5.62-150400.4.19.1 * openSUSE Leap Micro 5.3 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-cups-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-cups-debuginfo-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-devel-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Manager Proxy 4.3 (x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libbluetooth3-5.62-150400.4.19.1 * bluez-deprecated-5.62-150400.4.19.1 * bluez-debuginfo-5.62-150400.4.19.1 * bluez-debugsource-5.62-150400.4.19.1 * libbluetooth3-debuginfo-5.62-150400.4.19.1 * bluez-deprecated-debuginfo-5.62-150400.4.19.1 * bluez-5.62-150400.4.19.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50229.html * https://www.suse.com/security/cve/CVE-2023-50230.html * https://bugzilla.suse.com/show_bug.cgi?id=1218300 * https://bugzilla.suse.com/show_bug.cgi?id=1218301

1 0

SUSE-SU-2024:0208-1: moderate: Security update for tomcat10
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Security update for tomcat10 Announcement ID: SUSE-SU-2024:0208-1 Rating: moderate References: * bsc#1217649 Cross-References: * CVE-2023-46589 CVSS scores: * CVE-2023-46589 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-46589 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * Web and Scripting Module 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for tomcat10 fixes the following issues: Updated to Tomcat 10.1.18 * CVE-2023-46589: Fixed HTTP request smuggling due to incorrect headers parsing (bsc#1217649) Find the full release notes at: https://tomcat.apache.org/tomcat-9.0-doc/changelog.html ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-208=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-208=1 ## Package List: * openSUSE Leap 15.5 (noarch) * tomcat10-el-5_0-api-10.1.18-150200.5.8.1 * tomcat10-jsp-3_1-api-10.1.18-150200.5.8.1 * tomcat10-servlet-6_0-api-10.1.18-150200.5.8.1 * tomcat10-embed-10.1.18-150200.5.8.1 * tomcat10-admin-webapps-10.1.18-150200.5.8.1 * tomcat10-docs-webapp-10.1.18-150200.5.8.1 * tomcat10-10.1.18-150200.5.8.1 * tomcat10-jsvc-10.1.18-150200.5.8.1 * tomcat10-lib-10.1.18-150200.5.8.1 * tomcat10-webapps-10.1.18-150200.5.8.1 * Web and Scripting Module 15-SP5 (noarch) * tomcat10-el-5_0-api-10.1.18-150200.5.8.1 * tomcat10-jsp-3_1-api-10.1.18-150200.5.8.1 * tomcat10-servlet-6_0-api-10.1.18-150200.5.8.1 * tomcat10-admin-webapps-10.1.18-150200.5.8.1 * tomcat10-10.1.18-150200.5.8.1 * tomcat10-lib-10.1.18-150200.5.8.1 * tomcat10-webapps-10.1.18-150200.5.8.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46589.html * https://bugzilla.suse.com/show_bug.cgi?id=1217649

1 0

SUSE-SU-2024:0212-1: moderate: Security update for xwayland
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Security update for xwayland Announcement ID: SUSE-SU-2024:0212-1 Rating: moderate References: * bsc#1218845 * bsc#1218846 Cross-References: * CVE-2024-0408 * CVE-2024-0409 CVSS scores: * CVE-2024-0408 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2024-0409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2024-0408: Fixed SELinux unlabeled GLX PBuffer. (bsc#1218845) * CVE-2024-0409: Fixed SELinux context corruption. (bsc#1218846) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-212=1 openSUSE-SLE-15.5-2024-212=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-212=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * xwayland-devel-22.1.5-150500.7.17.1 * xwayland-22.1.5-150500.7.17.1 * xwayland-debuginfo-22.1.5-150500.7.17.1 * xwayland-debugsource-22.1.5-150500.7.17.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * xwayland-22.1.5-150500.7.17.1 * xwayland-debuginfo-22.1.5-150500.7.17.1 * xwayland-debugsource-22.1.5-150500.7.17.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0408.html * https://www.suse.com/security/cve/CVE-2024-0409.html * https://bugzilla.suse.com/show_bug.cgi?id=1218845 * https://bugzilla.suse.com/show_bug.cgi?id=1218846

1 0

SUSE-RU-2024:0213-1: moderate: Recommended update for ghostscript
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for ghostscript Announcement ID: SUSE-RU-2024:0213-1 Rating: moderate References: * bsc#1191841 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for ghostscript fixes the following issues: * Fix memory corruption while providing PDF with non-ASCII characters as input (bsc#1191841) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-213=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-213=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.180.1 * ghostscript-x11-debuginfo-9.52-150000.180.1 * ghostscript-x11-9.52-150000.180.1 * ghostscript-debuginfo-9.52-150000.180.1 * ghostscript-devel-9.52-150000.180.1 * ghostscript-9.52-150000.180.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.180.1 * ghostscript-x11-debuginfo-9.52-150000.180.1 * ghostscript-x11-9.52-150000.180.1 * ghostscript-debuginfo-9.52-150000.180.1 * ghostscript-devel-9.52-150000.180.1 * ghostscript-9.52-150000.180.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1191841

1 0

SUSE-RU-2024:0214-1: moderate: Recommended update for systemd
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for systemd Announcement ID: SUSE-RU-2024:0214-1 Rating: moderate References: * bsc#1214668 * bsc#1215241 * bsc#1217460 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that has three fixes can now be installed. ## Description: This update for systemd fixes the following issues: * resolved: actually check authenticated flag of SOA transaction * core/mount: Make device deps from /proc/self/mountinfo and .mount unit file exclusive * core: Add trace logging to mount_add_device_dependencies() * core/mount: Remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460) * core/mount: Set Mount.from_proc_self_mountinfo flag before adding default dependencies * core: wrap some long comment * utmp-wtmp: Handle EINTR gracefully when waiting to write to tty * utmp-wtmp: Fix error in case isatty() fails * homed: Handle EINTR gracefully when waiting for device node * resolved: Handle EINTR returned from fd_wait_for_event() better * sd-netlink: Handle EINTR from poll() gracefully, as success * varlink: Handle EINTR gracefully when waiting for EIO via ppoll() * stdio-bridge: Don't be bothered with EINTR * sd-bus: Handle EINTR return from bus_poll() (bsc#1215241) * core: Replace slice dependencies as they get added (bsc#1214668) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-214=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-214=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-214=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-214=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-214=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-214=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-214=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-214=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-214=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-214=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-214=1 ## Package List: * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * systemd-network-debuginfo-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-network-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * nss-systemd-249.17-150400.8.40.1 * libsystemd0-mini-249.17-150400.8.40.1 * systemd-mini-sysvinit-249.17-150400.8.40.1 * nss-myhostname-debuginfo-249.17-150400.8.40.1 * libudev-mini1-debuginfo-249.17-150400.8.40.1 * systemd-mini-devel-249.17-150400.8.40.1 * systemd-coredump-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-network-debuginfo-249.17-150400.8.40.1 * systemd-portable-249.17-150400.8.40.1 * systemd-mini-container-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-experimental-debuginfo-249.17-150400.8.40.1 * systemd-network-249.17-150400.8.40.1 * systemd-mini-doc-249.17-150400.8.40.1 * nss-systemd-debuginfo-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-mini-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-coredump-debuginfo-249.17-150400.8.40.1 * udev-249.17-150400.8.40.1 * systemd-doc-249.17-150400.8.40.1 * libudev-mini1-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * nss-myhostname-249.17-150400.8.40.1 * systemd-devel-249.17-150400.8.40.1 * udev-mini-debuginfo-249.17-150400.8.40.1 * systemd-testsuite-249.17-150400.8.40.1 * systemd-experimental-249.17-150400.8.40.1 * systemd-mini-debuginfo-249.17-150400.8.40.1 * systemd-testsuite-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * systemd-mini-249.17-150400.8.40.1 * udev-mini-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * systemd-portable-debuginfo-249.17-150400.8.40.1 * systemd-mini-container-debuginfo-249.17-150400.8.40.1 * systemd-mini-debugsource-249.17-150400.8.40.1 * openSUSE Leap 15.4 (x86_64) * nss-myhostname-32bit-debuginfo-249.17-150400.8.40.1 * nss-myhostname-32bit-249.17-150400.8.40.1 * libudev1-32bit-249.17-150400.8.40.1 * systemd-32bit-249.17-150400.8.40.1 * libsystemd0-32bit-249.17-150400.8.40.1 * systemd-32bit-debuginfo-249.17-150400.8.40.1 * libsystemd0-32bit-debuginfo-249.17-150400.8.40.1 * libudev1-32bit-debuginfo-249.17-150400.8.40.1 * openSUSE Leap 15.4 (noarch) * systemd-lang-249.17-150400.8.40.1 * openSUSE Leap 15.4 (aarch64_ilp32) * nss-myhostname-64bit-249.17-150400.8.40.1 * libudev1-64bit-249.17-150400.8.40.1 * nss-myhostname-64bit-debuginfo-249.17-150400.8.40.1 * libudev1-64bit-debuginfo-249.17-150400.8.40.1 * libsystemd0-64bit-249.17-150400.8.40.1 * libsystemd0-64bit-debuginfo-249.17-150400.8.40.1 * systemd-64bit-249.17-150400.8.40.1 * systemd-64bit-debuginfo-249.17-150400.8.40.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * nss-systemd-249.17-150400.8.40.1 * nss-myhostname-debuginfo-249.17-150400.8.40.1 * systemd-coredump-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-network-debuginfo-249.17-150400.8.40.1 * systemd-portable-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-experimental-debuginfo-249.17-150400.8.40.1 * systemd-network-249.17-150400.8.40.1 * nss-systemd-debuginfo-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-coredump-debuginfo-249.17-150400.8.40.1 * udev-249.17-150400.8.40.1 * systemd-doc-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * nss-myhostname-249.17-150400.8.40.1 * systemd-devel-249.17-150400.8.40.1 * systemd-testsuite-249.17-150400.8.40.1 * systemd-experimental-249.17-150400.8.40.1 * systemd-testsuite-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * systemd-portable-debuginfo-249.17-150400.8.40.1 * openSUSE Leap 15.5 (x86_64) * nss-myhostname-32bit-debuginfo-249.17-150400.8.40.1 * nss-myhostname-32bit-249.17-150400.8.40.1 * libudev1-32bit-249.17-150400.8.40.1 * systemd-32bit-249.17-150400.8.40.1 * libsystemd0-32bit-249.17-150400.8.40.1 * systemd-32bit-debuginfo-249.17-150400.8.40.1 * libsystemd0-32bit-debuginfo-249.17-150400.8.40.1 * libudev1-32bit-debuginfo-249.17-150400.8.40.1 * openSUSE Leap 15.5 (noarch) * systemd-lang-249.17-150400.8.40.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * systemd-journal-remote-debuginfo-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-journal-remote-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * udev-249.17-150400.8.40.1 * libudev1-249.17-150400.8.40.1 * systemd-doc-249.17-150400.8.40.1 * systemd-debuginfo-249.17-150400.8.40.1 * systemd-249.17-150400.8.40.1 * libudev1-debuginfo-249.17-150400.8.40.1 * systemd-coredump-249.17-150400.8.40.1 * systemd-debugsource-249.17-150400.8.40.1 * udev-debuginfo-249.17-150400.8.40.1 * systemd-devel-249.17-150400.8.40.1 * systemd-container-debuginfo-249.17-150400.8.40.1 * libsystemd0-debuginfo-249.17-150400.8.40.1 * systemd-coredump-debuginfo-249.17-150400.8.40.1 * systemd-container-249.17-150400.8.40.1 * systemd-sysvinit-249.17-150400.8.40.1 * libsystemd0-249.17-150400.8.40.1 * Basesystem Module 15-SP5 (noarch) * systemd-lang-249.17-150400.8.40.1 * Basesystem Module 15-SP5 (x86_64) * libudev1-32bit-249.17-150400.8.40.1 * systemd-32bit-249.17-150400.8.40.1 * libsystemd0-32bit-249.17-150400.8.40.1 * systemd-32bit-debuginfo-249.17-150400.8.40.1 * libsystemd0-32bit-debuginfo-249.17-150400.8.40.1 * libudev1-32bit-debuginfo-249.17-150400.8.40.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214668 * https://bugzilla.suse.com/show_bug.cgi?id=1215241 * https://bugzilla.suse.com/show_bug.cgi?id=1217460

1 0

SUSE-RU-2024:0215-1: important: Recommended update for crmsh
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for crmsh Announcement ID: SUSE-RU-2024:0215-1 Rating: important References: * bsc#1208991 * bsc#1213889 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for crmsh fixes the following issues: * log: Redirect debug messages into stderr (bsc#1208991) * ui_cluster: Improve the process of 'crm cluster stop' (bsc#1213889) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-215=1 openSUSE-SLE-15.4-2024-215=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-215=1 ## Package List: * openSUSE Leap 15.4 (noarch) * crmsh-scripts-4.4.2+20231212.3f8e3587-150400.3.31.1 * crmsh-test-4.4.2+20231212.3f8e3587-150400.3.31.1 * crmsh-4.4.2+20231212.3f8e3587-150400.3.31.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (noarch) * crmsh-scripts-4.4.2+20231212.3f8e3587-150400.3.31.1 * crmsh-4.4.2+20231212.3f8e3587-150400.3.31.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1208991 * https://bugzilla.suse.com/show_bug.cgi?id=1213889

1 0

SUSE-RU-2024:0216-1: moderate: Recommended update for qt6-qt5compat, qt6-shadertools
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for qt6-qt5compat, qt6-shadertools Announcement ID: SUSE-RU-2024:0216-1 Rating: moderate References: * bsc#1218979 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This recommended update for qt6-qt5compat, qt6-shadertools fixes the following issues: * Add missing dependencies of qt6-creator to Package Hub for SLE-15 SP5 (bsc#1218979) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-216=1 openSUSE-SLE-15.5-2024-216=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-216=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * qt6-qt5compat-debuginfo-6.4.2-150500.3.3.2 * qt6-qt5compat-debugsource-6.4.2-150500.3.3.2 * libQt6ShaderTools6-6.4.2-150500.3.2.1 * qt6-shadertools-6.4.2-150500.3.2.1 * qt6-shadertools-docs-qch-6.4.2-150500.3.2.1 * qt6-qt5compat-imports-6.4.2-150500.3.3.2 * qt6-qt5compat-docs-html-6.4.2-150500.3.3.1 * qt6-shadertools-debuginfo-6.4.2-150500.3.2.1 * qt6-qt5compat-devel-6.4.2-150500.3.3.2 * qt6-qt5compat-imports-debuginfo-6.4.2-150500.3.3.2 * libQt6Core5Compat6-6.4.2-150500.3.3.2 * qt6-shadertools-debugsource-6.4.2-150500.3.2.1 * libQt6ShaderTools6-debuginfo-6.4.2-150500.3.2.1 * qt6-qt5compat-private-devel-6.4.2-150500.3.3.2 * qt6-shadertools-private-devel-6.4.2-150500.3.2.1 * qt6-shadertools-devel-6.4.2-150500.3.2.1 * libQt6Core5Compat6-debuginfo-6.4.2-150500.3.3.2 * qt6-qt5compat-docs-qch-6.4.2-150500.3.3.1 * qt6-shadertools-docs-html-6.4.2-150500.3.2.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libQt6Core5Compat6-6.4.2-150500.3.3.2 * libQt6ShaderTools6-6.4.2-150500.3.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218979

1 0

SUSE-RU-2024:0202-1: important: Recommended update for gssproxy
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for gssproxy Announcement ID: SUSE-RU-2024:0202-1 Rating: important References: * bsc#1218313 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for gssproxy fixes the following issues: * Require a libverto backend module (bsc#1218313) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-202=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-202=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-202=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libverto-libev1-debuginfo-0.2.6-150000.5.2.1 * libverto-glib1-debuginfo-0.2.6-150000.5.2.1 * libverto-libev-debugsource-0.2.6-150000.5.2.1 * libverto-tevent-devel-0.2.6-150000.5.2.1 * libverto-tevent1-debuginfo-0.2.6-150000.5.2.1 * gssproxy-debugsource-0.8.2-150100.3.12.1 * libverto-libev1-0.2.6-150000.5.2.1 * libev-debugsource-4.24-150000.4.2.1 * libverto-tevent-debugsource-0.2.6-150000.5.2.1 * libverto-libev-devel-0.2.6-150000.5.2.1 * gssproxy-0.8.2-150100.3.12.1 * libverto-glib-devel-0.2.6-150000.5.2.1 * libev-devel-4.24-150000.4.2.1 * libverto-glib1-0.2.6-150000.5.2.1 * libverto-tevent1-0.2.6-150000.5.2.1 * libev4-4.24-150000.4.2.1 * gssproxy-debuginfo-0.8.2-150100.3.12.1 * libverto-glib-debugsource-0.2.6-150000.5.2.1 * libev4-debuginfo-4.24-150000.4.2.1 * openSUSE Leap 15.5 (x86_64) * libev4-32bit-debuginfo-4.24-150000.4.2.1 * libverto-tevent1-32bit-debuginfo-0.2.6-150000.5.2.1 * libverto-glib1-32bit-0.2.6-150000.5.2.1 * libev4-32bit-4.24-150000.4.2.1 * libverto-libev1-32bit-debuginfo-0.2.6-150000.5.2.1 * libverto-libev1-32bit-0.2.6-150000.5.2.1 * libverto-glib1-32bit-debuginfo-0.2.6-150000.5.2.1 * libverto-tevent1-32bit-0.2.6-150000.5.2.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gssproxy-debugsource-0.8.2-150100.3.12.1 * libverto-libev1-0.2.6-150000.5.2.1 * gssproxy-0.8.2-150100.3.12.1 * libev4-4.24-150000.4.2.1 * gssproxy-debuginfo-0.8.2-150100.3.12.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libverto-libev1-debuginfo-0.2.6-150000.5.2.1 * libverto-libev-debugsource-0.2.6-150000.5.2.1 * libverto-libev1-0.2.6-150000.5.2.1 * libev-debugsource-4.24-150000.4.2.1 * libev-devel-4.24-150000.4.2.1 * libev4-4.24-150000.4.2.1 * libev4-debuginfo-4.24-150000.4.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218313

1 0

SUSE-RU-2024:0201-1: moderate: Recommended update for ecj
by OPENSUSE-UPDATES 24 Jan '24

24 Jan '24

# Recommended update for ecj Announcement ID: SUSE-RU-2024:0201-1 Rating: moderate References: * jsc#PED-2979 Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for ecj fixes the following issues: * Upgradeded ecj to eclipse version 4.23, to be compatible with Java 17 tomcat webapps (jsc#PED-2979) * Use the bundled javax17api.jar stubs, but don't distribute them ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-201=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-201=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-201=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2024-201=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-201=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2024-201=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-201=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-201=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2024-201=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-201=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-201=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-201=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Enterprise Storage 7.1 (noarch) * ecj-4.23-150200.3.9.1 * openSUSE Leap 15.4 (noarch) * ecj-4.23-150200.3.9.1 * openSUSE Leap 15.5 (noarch) * ecj-4.23-150200.3.9.1 * Basesystem Module 15-SP4 (noarch) * ecj-4.23-150200.3.9.1 * Basesystem Module 15-SP5 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * ecj-4.23-150200.3.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * ecj-4.23-150200.3.9.1 ## References: * https://jira.suse.com/browse/PED-2979

1 0

SUSE-SU-2024:0185-1: important: Security update for python-Pillow
by OPENSUSE-UPDATES 23 Jan '24

23 Jan '24

# Security update for python-Pillow Announcement ID: SUSE-SU-2024:0185-1 Rating: important References: * bsc#1219048 Cross-References: * CVE-2023-50447 CVSS scores: * CVE-2023-50447 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 An update that solves one vulnerability can now be installed. ## Description: This update for python-Pillow fixes the following issues: * CVE-2023-50447: Fixed arbitrary code execution via the environment parameter. (bsc#1219048) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-185=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-185=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python-Pillow-debuginfo-7.2.0-150300.3.6.1 * python3-Pillow-tk-debuginfo-7.2.0-150300.3.6.1 * python3-Pillow-tk-7.2.0-150300.3.6.1 * python3-Pillow-7.2.0-150300.3.6.1 * python-Pillow-debugsource-7.2.0-150300.3.6.1 * python3-Pillow-debuginfo-7.2.0-150300.3.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-Pillow-debuginfo-7.2.0-150300.3.6.1 * python3-Pillow-tk-debuginfo-7.2.0-150300.3.6.1 * python3-Pillow-tk-7.2.0-150300.3.6.1 * python3-Pillow-7.2.0-150300.3.6.1 * python-Pillow-debugsource-7.2.0-150300.3.6.1 * python3-Pillow-debuginfo-7.2.0-150300.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50447.html * https://bugzilla.suse.com/show_bug.cgi?id=1219048

1 0

SUSE-RU-2024:0187-1: moderate: Recommended update for python-chardet
by OPENSUSE-UPDATES 23 Jan '24

23 Jan '24

# Recommended update for python-chardet Announcement ID: SUSE-RU-2024:0187-1 Rating: moderate References: * bsc#1218765 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for python-chardet fixes the following issues: * Fix update-alternative in %postun (bsc#1218765) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-187=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-187=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-187=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-187=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-187=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-187=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-187=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-187=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-187=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-187=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-187=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-187=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * openSUSE Leap Micro 5.4 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * openSUSE Leap 15.5 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * Basesystem Module 15-SP5 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * python3-chardet-3.0.4-150000.5.3.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * python3-chardet-3.0.4-150000.5.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218765

1 0

SUSE-RU-2024:0188-1: critical: Recommended update for suseconnect-ng
by OPENSUSE-UPDATES 23 Jan '24

23 Jan '24

# Recommended update for suseconnect-ng Announcement ID: SUSE-RU-2024:0188-1 Rating: critical References: * bsc#1217961 * bsc#1218649 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for suseconnect-ng contains the following fix: * Update to version 1.6.0: * Disable EULA display for addons. (bsc#1218649 and bsc#1217961) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-188=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-188=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-188=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-188=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-188=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-188=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-188=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-188=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-188=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-188=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-188=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-188=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-188=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-188=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-188=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-debuginfo-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-debuginfo-1.6.0~git0.31371c8-150400.3.22.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-debuginfo-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-debuginfo-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-debuginfo-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Manager Proxy 4.3 (x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.6.0~git0.31371c8-150400.3.22.1 * suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1 * libsuseconnect-1.6.0~git0.31371c8-150400.3.22.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217961 * https://bugzilla.suse.com/show_bug.cgi?id=1218649

1 0

SUSE-FU-2024:0178-1: moderate: Feature update for tomcat10, jakarta-servlet, apache-commons-jexl
by OPENSUSE-UPDATES 23 Jan '24

23 Jan '24

# Feature update for tomcat10, jakarta-servlet, apache-commons-jexl Announcement ID: SUSE-FU-2024:0178-1 Rating: moderate References: * jsc#PED-6178 * jsc#PED-6477 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 * Web and Scripting Module 15-SP5 An update that contains two features can now be installed. ## Description: This update for tomcat10, jakarta-servlet and apache-commons-jexl fixes the following issues: tomcat10: * New package implementation of Tomcat 10.1.14 (jsc#PED-6178, jsc#PED-6377) apache-commons-jexl: * Included in SUSE Linux Enterprise 15 Service Pack 5 Web Scripting Module, as new package dependency to tomcat10 (no source changes) jakarta-servlet: * Included in SUSE Linux Enterprise 15 Service Pack 5 Web Scripting Module, as new package dependency to tomcat10 (no source changes) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-178=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-178=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-178=1 ## Package List: * openSUSE Leap 15.5 (noarch) * jakarta-servlet-5.0.0-150200.5.5.1 * tomcat10-admin-webapps-10.1.14-150200.5.5.1 * tomcat10-embed-10.1.14-150200.5.5.1 * tomcat10-el-5_0-api-10.1.14-150200.5.5.1 * tomcat10-webapps-10.1.14-150200.5.5.1 * tomcat10-servlet-6_0-api-10.1.14-150200.5.5.1 * apache-commons-jexl-2.1.1-150200.3.8.1 * jakarta-servlet-javadoc-5.0.0-150200.5.5.1 * tomcat10-docs-webapp-10.1.14-150200.5.5.1 * tomcat10-jsvc-10.1.14-150200.5.5.1 * tomcat10-jsp-3_1-api-10.1.14-150200.5.5.1 * tomcat10-10.1.14-150200.5.5.1 * apache-commons-jexl-javadoc-2.1.1-150200.3.8.1 * tomcat10-lib-10.1.14-150200.5.5.1 * SUSE Manager Server 4.3 Module 4.3 (noarch) * apache-commons-jexl-2.1.1-150200.3.8.1 * Web and Scripting Module 15-SP5 (noarch) * tomcat10-admin-webapps-10.1.14-150200.5.5.1 * jakarta-servlet-5.0.0-150200.5.5.1 * tomcat10-webapps-10.1.14-150200.5.5.1 * tomcat10-el-5_0-api-10.1.14-150200.5.5.1 * tomcat10-servlet-6_0-api-10.1.14-150200.5.5.1 * apache-commons-jexl-2.1.1-150200.3.8.1 * tomcat10-jsp-3_1-api-10.1.14-150200.5.5.1 * tomcat10-10.1.14-150200.5.5.1 * tomcat10-lib-10.1.14-150200.5.5.1 ## References: * https://jira.suse.com/browse/PED-6178 * https://jira.suse.com/browse/PED-6477

1 0

SUSE-SU-2024:0182-1: important: Security update for bluez
by OPENSUSE-UPDATES 23 Jan '24

23 Jan '24

# Security update for bluez Announcement ID: SUSE-SU-2024:0182-1 Rating: important References: * bsc#1218300 * bsc#1218301 Cross-References: * CVE-2023-50229 * CVE-2023-50230 CVSS scores: * CVE-2023-50229 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-50230 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300). * CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access Profile implementation (bsc#1218301). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-182=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-182=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-182=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-182=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-182=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * bluez-cups-5.55-150300.3.28.1 * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-cups-debuginfo-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-test-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-test-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * openSUSE Leap 15.3 (noarch) * bluez-auto-enable-devices-5.55-150300.3.28.1 * openSUSE Leap 15.3 (x86_64) * libbluetooth3-32bit-debuginfo-5.55-150300.3.28.1 * libbluetooth3-32bit-5.55-150300.3.28.1 * bluez-devel-32bit-5.55-150300.3.28.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libbluetooth3-64bit-5.55-150300.3.28.1 * libbluetooth3-64bit-debuginfo-5.55-150300.3.28.1 * bluez-devel-64bit-5.55-150300.3.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libbluetooth3-5.55-150300.3.28.1 * bluez-devel-5.55-150300.3.28.1 * bluez-deprecated-5.55-150300.3.28.1 * bluez-deprecated-debuginfo-5.55-150300.3.28.1 * libbluetooth3-debuginfo-5.55-150300.3.28.1 * bluez-debuginfo-5.55-150300.3.28.1 * bluez-5.55-150300.3.28.1 * bluez-debugsource-5.55-150300.3.28.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50229.html * https://www.suse.com/security/cve/CVE-2023-50230.html * https://bugzilla.suse.com/show_bug.cgi?id=1218300 * https://bugzilla.suse.com/show_bug.cgi?id=1218301

1 0