October 2024 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2024:0338-1: moderate: Security update for hostapd
by opensuse-security＠opensuse.org 27 Oct '24

27 Oct '24

openSUSE Security Update: Security update for hostapd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0338-1 Rating: moderate References: #1150934 Cross-References: CVE-2023-52424 CVSS scores: CVE-2023-52424 (SUSE): 5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hostapd fixes the following issues: hostapd was updated to 2024-07-20 / v2.11 * Wi-Fi Easy Connect - add support for DPP release 3 - allow Configurator parameters to be provided during config exchange * HE/IEEE 802.11ax/Wi-Fi 6 - various fixes * EHT/IEEE 802.11be/Wi-Fi 7 - add preliminary support * SAE: add support for fetching the password from a RADIUS server * support OpenSSL 3.0 API changes * support background radar detection and CAC with some additional drivers * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3) * EAP-SIM/AKA: support IMSI privacy * improve 4-way handshake operations - use Secure=1 in message 3 during PTK rekeying * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases to avoid interoperability issues * support new SAE AKM suites with variable length keys * support new AKM for 802.1X/EAP with SHA384 * extend PASN support for secure ranging * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP) - this is based on additional details being added in the IEEE 802.11 standard - the new implementation is not backwards compatible * improved ACS to cover additional channel types/bandwidths * extended Multiple BSSID support * fix beacon protection with FT protocol (incorrect BIGTK was provided) * support unsynchronized service discovery (USD) * add preliminary support for RADIUS/TLS * add support for explicit SSID protection in 4-way handshake (a mitigation for CVE-2023-52424; disabled by default for now, can be enabled with ssid_protection=1) * fix SAE H2E rejected groups validation to avoid downgrade attacks * use stricter validation for some RADIUS messages * a large number of other fixes, cleanup, and extensions Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-338=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): hostapd-2.11-bp156.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-52424.html https://bugzilla.suse.com/1150934

1 0

SUSE-SU-2024:3752-1: important: Security update for webkit2gtk3
by OPENSUSE-UPDATES 24 Oct '24

24 Oct '24

# Security update for webkit2gtk3 Announcement ID: SUSE-SU-2024:3752-1 Release Date: 2024-10-24T03:33:57Z Rating: important References: * bsc#1231039 Cross-References: * CVE-2024-23206 * CVE-2024-23213 * CVE-2024-23222 * CVE-2024-23271 * CVE-2024-27808 * CVE-2024-27820 * CVE-2024-27833 * CVE-2024-27834 * CVE-2024-27838 * CVE-2024-27851 * CVE-2024-40866 * CVE-2024-44187 * CVE-2024-4558 CVSS scores: * CVE-2024-23206 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-23206 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-23213 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23213 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23222 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23222 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23271 ( SUSE ): 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2024-27808 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27808 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27820 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27820 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27833 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27833 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27834 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27838 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-27838 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-27851 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27851 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-40866 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-40866 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-44187 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-44187 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 (bsc#1231039). * CVE-2024-40866 * CVE-2024-44187 Already fixed in version 2.44.3: * CVE-2024-27838 * CVE-2024-27851 Already fixed in version 2.44.2: * CVE-2024-27834 * CVE-2024-27808 * CVE-2024-27820 * CVE-2024-27833 Already fixed in version 2.44.1: * CVE-2024-23222 * CVE-2024-23206 * CVE-2024-23213 * CVE-2024-23271 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3752=1 openSUSE-SLE-15.6-2024-3752=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3752=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3752=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3752=1 ## Package List: * openSUSE Leap 15.6 (noarch) * WebKitGTK-6.0-lang-2.46.0-150600.12.12.1 * WebKitGTK-4.1-lang-2.46.0-150600.12.12.1 * WebKitGTK-4.0-lang-2.46.0-150600.12.12.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * webkit-jsc-6.0-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-devel-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-minibrowser-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk4-minibrowser-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.0-150600.12.12.1 * webkit2gtk4-debugsource-2.46.0-150600.12.12.1 * webkit-jsc-4-2.46.0-150600.12.12.1 * libwebkitgtk-6_0-4-debuginfo-2.46.0-150600.12.12.1 * webkit-jsc-6.0-2.46.0-150600.12.12.1 * webkit2gtk-4_0-injected-bundles-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-2.46.0-150600.12.12.1 * webkit2gtk4-minibrowser-debuginfo-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-2.46.0-150600.12.12.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-6_0-1-2.46.0-150600.12.12.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-6_0-2.46.0-150600.12.12.1 * webkitgtk-6_0-injected-bundles-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150600.12.12.1 * webkit2gtk3-debugsource-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2-4_1-2.46.0-150600.12.12.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * webkit-jsc-4-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-minibrowser-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2-4_0-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk-4_1-injected-bundles-2.46.0-150600.12.12.1 * webkit2gtk3-devel-2.46.0-150600.12.12.1 * webkit2gtk4-devel-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-4_1-2.46.0-150600.12.12.1 * webkit2gtk3-minibrowser-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk3-minibrowser-2.46.0-150600.12.12.1 * webkit-jsc-4.1-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-debugsource-2.46.0-150600.12.12.1 * libwebkitgtk-6_0-4-2.46.0-150600.12.12.1 * typelib-1_0-WebKit-6_0-2.46.0-150600.12.12.1 * webkit-jsc-4.1-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.46.0-150600.12.12.1 * openSUSE Leap 15.6 (x86_64) * libwebkit2gtk-4_1-0-32bit-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-32bit-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-32bit-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-32bit-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.46.0-150600.12.12.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libjavascriptcoregtk-4_0-18-64bit-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-64bit-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-64bit-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-64bit-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.46.0-150600.12.12.1 * Basesystem Module 15-SP6 (noarch) * WebKitGTK-6.0-lang-2.46.0-150600.12.12.1 * WebKitGTK-4.0-lang-2.46.0-150600.12.12.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * webkit2gtk-4_0-injected-bundles-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2-4_0-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-devel-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150600.12.12.1 * libwebkitgtk-6_0-4-2.46.0-150600.12.12.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-6_0-1-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-debugsource-2.46.0-150600.12.12.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.0-150600.12.12.1 * libwebkitgtk-6_0-4-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk4-debugsource-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150600.12.12.1 * webkitgtk-6_0-injected-bundles-2.46.0-150600.12.12.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150600.12.12.1 * Desktop Applications Module 15-SP6 (noarch) * WebKitGTK-4.1-lang-2.46.0-150600.12.12.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-devel-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-2.46.0-150600.12.12.1 * webkit2gtk3-debugsource-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2-4_1-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk-4_1-injected-bundles-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-4_1-2.46.0-150600.12.12.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * webkit2gtk4-devel-2.46.0-150600.12.12.1 * webkit2gtk4-debugsource-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-6_0-2.46.0-150600.12.12.1 * typelib-1_0-WebKit-6_0-2.46.0-150600.12.12.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.46.0-150600.12.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-23206.html * https://www.suse.com/security/cve/CVE-2024-23213.html * https://www.suse.com/security/cve/CVE-2024-23222.html * https://www.suse.com/security/cve/CVE-2024-23271.html * https://www.suse.com/security/cve/CVE-2024-27808.html * https://www.suse.com/security/cve/CVE-2024-27820.html * https://www.suse.com/security/cve/CVE-2024-27833.html * https://www.suse.com/security/cve/CVE-2024-27834.html * https://www.suse.com/security/cve/CVE-2024-27838.html * https://www.suse.com/security/cve/CVE-2024-27851.html * https://www.suse.com/security/cve/CVE-2024-40866.html * https://www.suse.com/security/cve/CVE-2024-44187.html * https://www.suse.com/security/cve/CVE-2024-4558.html * https://bugzilla.suse.com/show_bug.cgi?id=1231039

1 0

SUSE-SU-2024:3753-1: moderate: Security update for podman
by OPENSUSE-UPDATES 24 Oct '24

24 Oct '24

# Security update for podman Announcement ID: SUSE-SU-2024:3753-1 Release Date: 2024-10-24T03:34:23Z Rating: moderate References: * bsc#1231698 Cross-References: * CVE-2024-9676 CVSS scores: * CVE-2024-9676 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-9676 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-9676 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for podman fixes the following issues: * CVE-2024-9676: Fixed symlink traversal vulnerability in the containers/storage library that could cause Denial of Service (DoS) (bsc#1231698) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3753=1 openSUSE-SLE-15.5-2024-3753=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3753=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3753=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3753=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-3753=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-3753=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * openSUSE Leap 15.5 (noarch) * podman-docker-4.9.5-150500.3.28.1 * openSUSE Leap Micro 5.5 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * openSUSE Leap Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.28.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * openSUSE Leap 15.6 (noarch) * podman-docker-4.9.5-150500.3.28.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.28.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * Containers Module 15-SP5 (noarch) * podman-docker-4.9.5-150500.3.28.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * Containers Module 15-SP6 (noarch) * podman-docker-4.9.5-150500.3.28.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9676.html * https://bugzilla.suse.com/show_bug.cgi?id=1231698

1 0

SUSE-SU-2024:3754-1: moderate: Security update for buildah
by OPENSUSE-UPDATES 24 Oct '24

24 Oct '24

# Security update for buildah Announcement ID: SUSE-SU-2024:3754-1 Release Date: 2024-10-24T03:34:40Z Rating: moderate References: * bsc#1231698 Cross-References: * CVE-2024-9676 CVSS scores: * CVE-2024-9676 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-9676 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-9676 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for buildah fixes the following issues: * CVE-2024-9676: Fixed symlink traversal vulnerability in the containers/storage library that could cause Denial of Service (DoS) (bsc#1231698) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3754=1 openSUSE-SLE-15.5-2024-3754=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3754=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-3754=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-3754=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * buildah-1.35.4-150500.3.19.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.19.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.19.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.19.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9676.html * https://bugzilla.suse.com/show_bug.cgi?id=1231698

1 0

SUSE-SU-2024:3755-1: important: Security update for go1.21-openssl
by OPENSUSE-UPDATES 24 Oct '24

24 Oct '24

# Security update for go1.21-openssl Announcement ID: SUSE-SU-2024:3755-1 Release Date: 2024-10-24T07:54:09Z Rating: important References: * bsc#1212475 * bsc#1219988 * bsc#1220999 * bsc#1221000 * bsc#1221001 * bsc#1221002 * bsc#1221003 * bsc#1221400 * bsc#1224017 * bsc#1225973 * bsc#1225974 * bsc#1227314 * jsc#PED-1962 * jsc#SLE-18320 Cross-References: * CVE-2023-45288 * CVE-2023-45289 * CVE-2023-45290 * CVE-2024-24783 * CVE-2024-24784 * CVE-2024-24785 * CVE-2024-24787 * CVE-2024-24789 * CVE-2024-24790 * CVE-2024-24791 CVSS scores: * CVE-2023-45288 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-45289 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-45290 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24783 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24784 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24785 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24787 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-24789 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24789 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24790 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L * CVE-2024-24790 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-24791 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 10 vulnerabilities, contains two features and has two security fixes can now be installed. ## Description: This update for go1.21-openssl fixes the following issues: * CVE-2024-24791: Fixed denial of service due to improper 100-continue handling (bsc#1227314) * CVE-2024-24789: Fixed mishandling of corrupt central directory record in archive/zip (bsc#1225973) * CVE-2024-24790: Fixed unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip (bsc#1225974) * CVE-2024-24787: Fixed arbitrary code execution during build on darwin in cmd/go (bsc#1224017) * CVE-2023-45288: Fixed denial of service due to close connections when receiving too many headers in net/http and x/net/http2 (bsc#1221400) * CVE-2023-45289: Fixed incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http and net/http/cookiejar (bsc#1221000) * CVE-2023-45290: Fixed memory exhaustion in Request.ParseMultipartForm in net/http (bsc#1221001) * CVE-2024-24783: Fixed denial of service on certificates with an unknown public key algorithm in crypto/x509 (bsc#1220999) * CVE-2024-24784: Fixed comments in display names are incorrectly handled in net/mail (bsc#1221002) * CVE-2024-24785: Fixed errors returned from MarshalJSON methods may break template escaping in html/template (bsc#1221003) Other fixes: \- Update to version 1.21.13.1 cut from the go1.21-fips-release (jsc#SLE-18320) \- Update to version 1.21.13 (bsc#1212475) \- Remove subpackage go1.x-openssl-libstd for compiled shared object libstd.so. (jsc#PED-1962) \- Ensure VERSION file is present in GOROOT as required by go tool dist and go tool distpack (bsc#1219988) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3755=1 SUSE-2024-3755=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3755=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * go1.21-openssl-1.21.13.1-150600.16.3.1 * go1.21-openssl-doc-1.21.13.1-150600.16.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * go1.21-openssl-race-1.21.13.1-150600.16.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * go1.21-openssl-1.21.13.1-150600.16.3.1 * go1.21-openssl-race-1.21.13.1-150600.16.3.1 * go1.21-openssl-doc-1.21.13.1-150600.16.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45288.html * https://www.suse.com/security/cve/CVE-2023-45289.html * https://www.suse.com/security/cve/CVE-2023-45290.html * https://www.suse.com/security/cve/CVE-2024-24783.html * https://www.suse.com/security/cve/CVE-2024-24784.html * https://www.suse.com/security/cve/CVE-2024-24785.html * https://www.suse.com/security/cve/CVE-2024-24787.html * https://www.suse.com/security/cve/CVE-2024-24789.html * https://www.suse.com/security/cve/CVE-2024-24790.html * https://www.suse.com/security/cve/CVE-2024-24791.html * https://bugzilla.suse.com/show_bug.cgi?id=1212475 * https://bugzilla.suse.com/show_bug.cgi?id=1219988 * https://bugzilla.suse.com/show_bug.cgi?id=1220999 * https://bugzilla.suse.com/show_bug.cgi?id=1221000 * https://bugzilla.suse.com/show_bug.cgi?id=1221001 * https://bugzilla.suse.com/show_bug.cgi?id=1221002 * https://bugzilla.suse.com/show_bug.cgi?id=1221003 * https://bugzilla.suse.com/show_bug.cgi?id=1221400 * https://bugzilla.suse.com/show_bug.cgi?id=1224017 * https://bugzilla.suse.com/show_bug.cgi?id=1225973 * https://bugzilla.suse.com/show_bug.cgi?id=1225974 * https://bugzilla.suse.com/show_bug.cgi?id=1227314 * https://jira.suse.com/browse/PED-1962 * https://jira.suse.com/browse/SLE-18320

1 0

SUSE-SU-2024:3748-1: moderate: Security update for cargo-c
by OPENSUSE-UPDATES 23 Oct '24

23 Oct '24

# Security update for cargo-c Announcement ID: SUSE-SU-2024:3748-1 Release Date: 2024-10-23T11:33:38Z Rating: moderate References: * bsc#1230683 Cross-References: * CVE-2024-45405 CVSS scores: * CVE-2024-45405 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-45405 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability can now be installed. ## Description: This update for cargo-c fixes the following issues: Security fixes: * CVE-2024-45405: Fixed gix-path improper path resolution (bsc#1230683) Other fixes: * Update to version 0.10.3~git0.ee7d7ef: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3748=1 openSUSE-SLE-15.6-2024-3748=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * cargo-c-debuginfo-0.10.3~git0.ee7d7ef-150600.3.3.1 * cargo-c-0.10.3~git0.ee7d7ef-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-45405.html * https://bugzilla.suse.com/show_bug.cgi?id=1230683

1 0

SUSE-RU-2024:3743-1: moderate: Recommended update for pcp
by OPENSUSE-UPDATES 22 Oct '24

22 Oct '24

# Recommended update for pcp Announcement ID: SUSE-RU-2024:3743-1 Release Date: 2024-10-22T12:09:55Z Rating: moderate References: * bsc#1231345 Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for pcp fixes the following issues: * Reintroduce libuv support for SLE >= 15 (bsc#1231345). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3743=1 openSUSE-SLE-15.6-2024-3743=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3743=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * pcp-pmda-lustrecomm-6.2.0-150600.3.9.1 * perl-PCP-PMDA-6.2.0-150600.3.9.1 * pcp-pmda-nvidia-gpu-debuginfo-6.2.0-150600.3.9.1 * pcp-gui-6.2.0-150600.3.9.1 * pcp-pmda-cifs-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-apache-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-hacluster-debuginfo-6.2.0-150600.3.9.1 * python3-pcp-6.2.0-150600.3.9.1 * pcp-pmda-mounts-6.2.0-150600.3.9.1 * pcp-pmda-logger-6.2.0-150600.3.9.1 * pcp-6.2.0-150600.3.9.1 * libpcp_import1-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-shping-6.2.0-150600.3.9.1 * python3-pcp-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-trace-debuginfo-6.2.0-150600.3.9.1 * libpcp3-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-docker-6.2.0-150600.3.9.1 * pcp-pmda-mailq-6.2.0-150600.3.9.1 * pcp-pmda-smart-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-dm-6.2.0-150600.3.9.1 * pcp-pmda-roomtemp-6.2.0-150600.3.9.1 * libpcp_gui2-6.2.0-150600.3.9.1 * pcp-import-collectl2pcp-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-systemd-debuginfo-6.2.0-150600.3.9.1 * pcp-testsuite-debuginfo-6.2.0-150600.3.9.1 * libpcp_mmv1-6.2.0-150600.3.9.1 * libpcp_mmv1-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-weblog-6.2.0-150600.3.9.1 * perl-PCP-LogImport-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-bash-6.2.0-150600.3.9.1 * libpcp3-6.2.0-150600.3.9.1 * libpcp-devel-6.2.0-150600.3.9.1 * pcp-pmda-bash-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-cisco-6.2.0-150600.3.9.1 * pcp-pmda-smart-6.2.0-150600.3.9.1 * libpcp_web1-6.2.0-150600.3.9.1 * pcp-devel-6.2.0-150600.3.9.1 * pcp-debugsource-6.2.0-150600.3.9.1 * pcp-pmda-sendmail-6.2.0-150600.3.9.1 * pcp-pmda-trace-6.2.0-150600.3.9.1 * perl-PCP-LogImport-6.2.0-150600.3.9.1 * perl-PCP-LogSummary-6.2.0-150600.3.9.1 * perl-PCP-MMV-debuginfo-6.2.0-150600.3.9.1 * perl-PCP-MMV-6.2.0-150600.3.9.1 * pcp-pmda-gfs2-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-summary-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-roomtemp-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-lustrecomm-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-sockets-6.2.0-150600.3.9.1 * libpcp_trace2-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-bind2-6.2.0-150600.3.9.1 * pcp-pmda-docker-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-logger-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-summary-6.2.0-150600.3.9.1 * pcp-pmda-zimbra-debuginfo-6.2.0-150600.3.9.1 * pcp-gui-debuginfo-6.2.0-150600.3.9.1 * libpcp_gui2-debuginfo-6.2.0-150600.3.9.1 * pcp-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-shping-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-systemd-6.2.0-150600.3.9.1 * pcp-pmda-mounts-debuginfo-6.2.0-150600.3.9.1 * libpcp_web1-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-weblog-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-gfs2-6.2.0-150600.3.9.1 * pcp-system-tools-6.2.0-150600.3.9.1 * pcp-pmda-hacluster-6.2.0-150600.3.9.1 * pcp-pmda-sendmail-debuginfo-6.2.0-150600.3.9.1 * pcp-devel-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-mailq-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-nvidia-gpu-6.2.0-150600.3.9.1 * pcp-import-collectl2pcp-6.2.0-150600.3.9.1 * pcp-pmda-cifs-6.2.0-150600.3.9.1 * pcp-pmda-sockets-debuginfo-6.2.0-150600.3.9.1 * libpcp_import1-6.2.0-150600.3.9.1 * pcp-pmda-apache-6.2.0-150600.3.9.1 * pcp-system-tools-debuginfo-6.2.0-150600.3.9.1 * libpcp_trace2-6.2.0-150600.3.9.1 * pcp-testsuite-6.2.0-150600.3.9.1 * pcp-pmda-dm-debuginfo-6.2.0-150600.3.9.1 * perl-PCP-PMDA-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-cisco-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-zimbra-6.2.0-150600.3.9.1 * openSUSE Leap 15.6 (noarch) * pcp-pmda-mic-6.2.0-150600.3.9.1 * pcp-pmda-news-6.2.0-150600.3.9.1 * pcp-pmda-haproxy-6.2.0-150600.3.9.1 * pcp-pmda-pdns-6.2.0-150600.3.9.1 * pcp-export-pcp2spark-6.2.0-150600.3.9.1 * pcp-pmda-samba-6.2.0-150600.3.9.1 * pcp-pmda-nginx-6.2.0-150600.3.9.1 * pcp-pmda-ds389log-6.2.0-150600.3.9.1 * pcp-import-ganglia2pcp-6.2.0-150600.3.9.1 * pcp-pmda-slurm-6.2.0-150600.3.9.1 * pcp-pmda-memcache-6.2.0-150600.3.9.1 * pcp-pmda-openmetrics-6.2.0-150600.3.9.1 * pcp-pmda-lmsensors-6.2.0-150600.3.9.1 * pcp-pmda-oracle-6.2.0-150600.3.9.1 * pcp-pmda-nfsclient-6.2.0-150600.3.9.1 * pcp-pmda-gpsd-6.2.0-150600.3.9.1 * pcp-pmda-mysql-6.2.0-150600.3.9.1 * pcp-pmda-snmp-6.2.0-150600.3.9.1 * pcp-export-pcp2influxdb-6.2.0-150600.3.9.1 * pcp-zeroconf-6.2.0-150600.3.9.1 * pcp-export-pcp2zabbix-6.2.0-150600.3.9.1 * pcp-export-pcp2graphite-6.2.0-150600.3.9.1 * pcp-pmda-rabbitmq-6.2.0-150600.3.9.1 * pcp-pmda-dbping-6.2.0-150600.3.9.1 * pcp-export-pcp2json-6.2.0-150600.3.9.1 * pcp-export-pcp2elasticsearch-6.2.0-150600.3.9.1 * pcp-pmda-named-6.2.0-150600.3.9.1 * pcp-pmda-unbound-6.2.0-150600.3.9.1 * pcp-pmda-json-6.2.0-150600.3.9.1 * pcp-pmda-gpfs-6.2.0-150600.3.9.1 * pcp-pmda-openvswitch-6.2.0-150600.3.9.1 * pcp-pmda-bonding-6.2.0-150600.3.9.1 * pcp-doc-6.2.0-150600.3.9.1 * pcp-pmda-activemq-6.2.0-150600.3.9.1 * pcp-pmda-netfilter-6.2.0-150600.3.9.1 * pcp-import-iostat2pcp-6.2.0-150600.3.9.1 * pcp-pmda-zswap-6.2.0-150600.3.9.1 * pcp-import-sar2pcp-6.2.0-150600.3.9.1 * pcp-pmda-netcheck-6.2.0-150600.3.9.1 * pcp-pmda-lustre-6.2.0-150600.3.9.1 * pcp-import-mrtg2pcp-6.2.0-150600.3.9.1 * pcp-conf-6.2.0-150600.3.9.1 * pcp-pmda-gluster-6.2.0-150600.3.9.1 * pcp-export-pcp2xml-6.2.0-150600.3.9.1 * pcp-pmda-rsyslog-6.2.0-150600.3.9.1 * pcp-pmda-postfix-6.2.0-150600.3.9.1 * pcp-pmda-elasticsearch-6.2.0-150600.3.9.1 * pcp-pmda-nutcracker-6.2.0-150600.3.9.1 * pcp-pmda-ds389-6.2.0-150600.3.9.1 * pcp-pmda-redis-6.2.0-150600.3.9.1 * openSUSE Leap 15.6 (aarch64 ppc64le x86_64 i586) * pcp-pmda-infiniband-6.2.0-150600.3.9.1 * pcp-pmda-perfevent-6.2.0-150600.3.9.1 * pcp-pmda-infiniband-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-perfevent-debuginfo-6.2.0-150600.3.9.1 * openSUSE Leap 15.6 (x86_64) * pcp-pmda-resctrl-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-resctrl-6.2.0-150600.3.9.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * perl-PCP-PMDA-6.2.0-150600.3.9.1 * python3-pcp-6.2.0-150600.3.9.1 * pcp-6.2.0-150600.3.9.1 * libpcp_import1-debuginfo-6.2.0-150600.3.9.1 * python3-pcp-debuginfo-6.2.0-150600.3.9.1 * libpcp3-debuginfo-6.2.0-150600.3.9.1 * libpcp_gui2-6.2.0-150600.3.9.1 * libpcp_mmv1-6.2.0-150600.3.9.1 * libpcp_mmv1-debuginfo-6.2.0-150600.3.9.1 * perl-PCP-LogImport-debuginfo-6.2.0-150600.3.9.1 * libpcp3-6.2.0-150600.3.9.1 * libpcp-devel-6.2.0-150600.3.9.1 * perl-PCP-LogImport-6.2.0-150600.3.9.1 * libpcp_web1-6.2.0-150600.3.9.1 * pcp-devel-6.2.0-150600.3.9.1 * pcp-debugsource-6.2.0-150600.3.9.1 * perl-PCP-LogSummary-6.2.0-150600.3.9.1 * perl-PCP-MMV-debuginfo-6.2.0-150600.3.9.1 * perl-PCP-MMV-6.2.0-150600.3.9.1 * libpcp_trace2-debuginfo-6.2.0-150600.3.9.1 * libpcp_gui2-debuginfo-6.2.0-150600.3.9.1 * pcp-debuginfo-6.2.0-150600.3.9.1 * pcp-system-tools-6.2.0-150600.3.9.1 * libpcp_web1-debuginfo-6.2.0-150600.3.9.1 * pcp-devel-debuginfo-6.2.0-150600.3.9.1 * libpcp_import1-6.2.0-150600.3.9.1 * pcp-system-tools-debuginfo-6.2.0-150600.3.9.1 * libpcp_trace2-6.2.0-150600.3.9.1 * perl-PCP-PMDA-debuginfo-6.2.0-150600.3.9.1 * Development Tools Module 15-SP6 (noarch) * pcp-import-iostat2pcp-6.2.0-150600.3.9.1 * pcp-import-sar2pcp-6.2.0-150600.3.9.1 * pcp-import-mrtg2pcp-6.2.0-150600.3.9.1 * pcp-conf-6.2.0-150600.3.9.1 * pcp-doc-6.2.0-150600.3.9.1 * Development Tools Module 15-SP6 (ppc64le) * pcp-pmda-perfevent-6.2.0-150600.3.9.1 * pcp-pmda-perfevent-debuginfo-6.2.0-150600.3.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231345

1 0

SUSE-SU-2024:3745-1: important: Security update for protobuf
by OPENSUSE-UPDATES 22 Oct '24

22 Oct '24

# Security update for protobuf Announcement ID: SUSE-SU-2024:3745-1 Release Date: 2024-10-22T13:39:53Z Rating: important References: * bsc#1230778 Cross-References: * CVE-2024-7254 CVSS scores: * CVE-2024-7254 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-7254 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for protobuf fixes the following issues: * CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3745=1 SUSE-2024-3745=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3745=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3745=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3745=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-3745=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * protobuf-debugsource-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-25.1-150600.16.7.1 * libprotoc25_1_0-debuginfo-25.1-150600.16.7.1 * protobuf-devel-25.1-150600.16.7.1 * libprotobuf25_1_0-25.1-150600.16.7.1 * python311-protobuf-4.25.1-150600.16.7.1 * protobuf-java-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150600.16.7.1 * protobuf-devel-debuginfo-25.1-150600.16.7.1 * libprotoc25_1_0-25.1-150600.16.7.1 * libprotobuf25_1_0-debuginfo-25.1-150600.16.7.1 * openSUSE Leap 15.6 (x86_64) * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-32bit-25.1-150600.16.7.1 * libprotobuf25_1_0-32bit-debuginfo-25.1-150600.16.7.1 * libprotoc25_1_0-32bit-25.1-150600.16.7.1 * libprotoc25_1_0-32bit-debuginfo-25.1-150600.16.7.1 * libprotobuf25_1_0-32bit-25.1-150600.16.7.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150600.16.7.1 * libprotobuf25_1_0-64bit-25.1-150600.16.7.1 * libprotoc25_1_0-64bit-debuginfo-25.1-150600.16.7.1 * libprotoc25_1_0-64bit-25.1-150600.16.7.1 * libprotobuf25_1_0-64bit-debuginfo-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-64bit-25.1-150600.16.7.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-25.1-150600.16.7.1 * libprotoc25_1_0-debuginfo-25.1-150600.16.7.1 * libprotobuf25_1_0-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150600.16.7.1 * libprotoc25_1_0-25.1-150600.16.7.1 * libprotobuf25_1_0-debuginfo-25.1-150600.16.7.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150600.16.7.1 * protobuf-devel-debuginfo-25.1-150600.16.7.1 * protobuf-devel-25.1-150600.16.7.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150600.16.7.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-protobuf-4.25.1-150600.16.7.1 ## References: * https://www.suse.com/security/cve/CVE-2024-7254.html * https://bugzilla.suse.com/show_bug.cgi?id=1230778

1 0

SUSE-SU-2024:3746-1: important: Security update for protobuf
by OPENSUSE-UPDATES 22 Oct '24

22 Oct '24

# Security update for protobuf Announcement ID: SUSE-SU-2024:3746-1 Release Date: 2024-10-22T13:40:56Z Rating: important References: * bsc#1230778 Cross-References: * CVE-2024-7254 CVSS scores: * CVE-2024-7254 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-7254 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for protobuf fixes the following issues: * CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3746=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3746=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3746=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3746=1 SUSE- SLE-INSTALLER-15-SP4-2024-3746=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3746=1 SUSE-SLE- INSTALLER-15-SP4-2024-3746=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3746=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3746=1 SUSE-SLE-INSTALLER-15-SP4-2024-3746=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3746=1 SUSE-SLE-Product-SUSE- Manager-Proxy-4.3-2024-3746=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3746=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3746=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3746=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3746=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-3746=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3746=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3746=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3746=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3746=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * protobuf-java-25.1-150400.9.10.1 * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * python311-protobuf-4.25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * openSUSE Leap 15.4 (x86_64) * libprotobuf-lite25_1_0-32bit-25.1-150400.9.10.1 * libprotoc25_1_0-32bit-25.1-150400.9.10.1 * libprotoc25_1_0-32bit-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-32bit-25.1-150400.9.10.1 * libprotobuf25_1_0-32bit-debuginfo-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150400.9.10.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libprotobuf25_1_0-64bit-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-64bit-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-64bit-debuginfo-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-64bit-25.1-150400.9.10.1 * libprotobuf25_1_0-64bit-25.1-150400.9.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Manager Proxy 4.3 (x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-protobuf-4.25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 ## References: * https://www.suse.com/security/cve/CVE-2024-7254.html * https://bugzilla.suse.com/show_bug.cgi?id=1230778

1 0

SUSE-SU-2024:3747-1: important: Security update for protobuf
by OPENSUSE-UPDATES 22 Oct '24

22 Oct '24

# Security update for protobuf Announcement ID: SUSE-SU-2024:3747-1 Release Date: 2024-10-22T13:42:06Z Rating: important References: * bsc#1230778 Cross-References: * CVE-2024-7254 CVSS scores: * CVE-2024-7254 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-7254 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * Public Cloud Module 15-SP5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for protobuf fixes the following issues: * CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3747=1 openSUSE-SLE-15.5-2024-3747=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3747=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3747=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3747=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3747=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3747=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3747=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3747=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3747=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3747=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-3747=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-3747=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libprotobuf25_1_0-25.1-150500.12.5.1 * libprotoc25_1_0-debuginfo-25.1-150500.12.5.1 * python311-protobuf-4.25.1-150500.12.5.1 * libprotobuf25_1_0-debuginfo-25.1-150500.12.5.1 * protobuf-devel-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * protobuf-debugsource-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.5.1 * libprotoc25_1_0-25.1-150500.12.5.1 * protobuf-devel-25.1-150500.12.5.1 * protobuf-java-25.1-150500.12.5.1 * openSUSE Leap 15.5 (x86_64) * libprotoc25_1_0-32bit-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150500.12.5.1 * libprotobuf25_1_0-32bit-25.1-150500.12.5.1 * libprotobuf25_1_0-32bit-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-32bit-25.1-150500.12.5.1 * libprotoc25_1_0-32bit-debuginfo-25.1-150500.12.5.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libprotoc25_1_0-64bit-debuginfo-25.1-150500.12.5.1 * libprotobuf25_1_0-64bit-25.1-150500.12.5.1 * libprotoc25_1_0-64bit-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150500.12.5.1 * libprotobuf25_1_0-64bit-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-64bit-25.1-150500.12.5.1 * openSUSE Leap Micro 5.5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * protobuf-debugsource-25.1-150500.12.5.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libprotobuf25_1_0-25.1-150500.12.5.1 * libprotoc25_1_0-debuginfo-25.1-150500.12.5.1 * libprotobuf25_1_0-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * protobuf-debugsource-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.5.1 * libprotoc25_1_0-25.1-150500.12.5.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libprotoc25_1_0-debuginfo-25.1-150500.12.5.1 * protobuf-devel-debuginfo-25.1-150500.12.5.1 * protobuf-debugsource-25.1-150500.12.5.1 * libprotoc25_1_0-25.1-150500.12.5.1 * protobuf-devel-25.1-150500.12.5.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.5.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libprotoc25_1_0-debuginfo-25.1-150500.12.5.1 * protobuf-debugsource-25.1-150500.12.5.1 * libprotoc25_1_0-25.1-150500.12.5.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-protobuf-4.25.1-150500.12.5.1 ## References: * https://www.suse.com/security/cve/CVE-2024-7254.html * https://bugzilla.suse.com/show_bug.cgi?id=1230778

1 0