November 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:4078-1: important: Security update for glib2
by OPENSUSE-UPDATES 27 Nov '24

27 Nov '24

# Security update for glib2 Announcement ID: SUSE-SU-2024:4078-1 Release Date: 2024-11-27T12:53:48Z Rating: important References: * bsc#1233282 Cross-References: * CVE-2024-52533 CVSS scores: * CVE-2024-52533 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-52533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H * CVE-2024-52533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for glib2 fixes the following issues: * CVE-2024-52533: Fixed a single byte buffer overflow (bsc#1233282). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4078=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-4078=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4078=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4078=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4078=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4078=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4078=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-4078=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4078=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4078=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4078=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4078=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4078=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4078=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4078=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-4078=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-4078=1 ## Package List: * openSUSE Leap 15.4 (noarch) * glib2-lang-2.70.5-150400.3.17.1 * gio-branding-upstream-2.70.5-150400.3.17.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * glib2-devel-debuginfo-2.70.5-150400.3.17.1 * glib2-tests-devel-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-2.70.5-150400.3.17.1 * glib2-doc-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * glib2-devel-2.70.5-150400.3.17.1 * glib2-tests-devel-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * glib2-devel-static-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * openSUSE Leap 15.4 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-32bit-2.70.5-150400.3.17.1 * glib2-devel-32bit-2.70.5-150400.3.17.1 * glib2-devel-32bit-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * glib2-tools-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * glib2-tools-32bit-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgmodule-2_0-0-64bit-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-64bit-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-64bit-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-64bit-2.70.5-150400.3.17.1 * libgio-2_0-0-64bit-debuginfo-2.70.5-150400.3.17.1 * glib2-devel-64bit-2.70.5-150400.3.17.1 * glib2-devel-64bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-64bit-2.70.5-150400.3.17.1 * libgobject-2_0-0-64bit-2.70.5-150400.3.17.1 * glib2-tools-64bit-debuginfo-2.70.5-150400.3.17.1 * glib2-tools-64bit-2.70.5-150400.3.17.1 * libgio-2_0-0-64bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-64bit-2.70.5-150400.3.17.1 * libglib-2_0-0-64bit-debuginfo-2.70.5-150400.3.17.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * openSUSE Leap 15.5 (noarch) * glib2-lang-2.70.5-150400.3.17.1 * gio-branding-upstream-2.70.5-150400.3.17.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * glib2-devel-debuginfo-2.70.5-150400.3.17.1 * glib2-tests-devel-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * glib2-doc-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-2.70.5-150400.3.17.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * glib2-devel-2.70.5-150400.3.17.1 * glib2-tests-devel-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * glib2-devel-static-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * openSUSE Leap 15.5 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-32bit-2.70.5-150400.3.17.1 * glib2-devel-32bit-2.70.5-150400.3.17.1 * glib2-devel-32bit-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * glib2-tools-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * glib2-tools-32bit-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * glib2-devel-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * glib2-devel-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * Basesystem Module 15-SP5 (noarch) * glib2-lang-2.70.5-150400.3.17.1 * Basesystem Module 15-SP5 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * glib2-devel-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * glib2-devel-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * glib2-lang-2.70.5-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * glib2-devel-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * glib2-devel-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * glib2-lang-2.70.5-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS (x86_64) * glib2-debugsource-2.70.5-150400.3.17.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * glib2-devel-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * glib2-devel-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS (noarch) * glib2-lang-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * glib2-devel-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * glib2-devel-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * glib2-lang-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * glib2-devel-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * glib2-devel-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * glib2-lang-2.70.5-150400.3.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * SUSE Manager Proxy 4.3 (x86_64) * glib2-debugsource-2.70.5-150400.3.17.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * glib2-devel-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * glib2-devel-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * SUSE Manager Proxy 4.3 (noarch) * glib2-lang-2.70.5-150400.3.17.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * glib2-debugsource-2.70.5-150400.3.17.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * glib2-devel-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * glib2-devel-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * glib2-lang-2.70.5-150400.3.17.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * glib2-devel-debuginfo-2.70.5-150400.3.17.1 * libgmodule-2_0-0-2.70.5-150400.3.17.1 * glib2-debugsource-2.70.5-150400.3.17.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgthread-2_0-0-2.70.5-150400.3.17.1 * libgobject-2_0-0-2.70.5-150400.3.17.1 * glib2-tools-2.70.5-150400.3.17.1 * glib2-tools-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-2.70.5-150400.3.17.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgio-2_0-0-2.70.5-150400.3.17.1 * glib2-devel-2.70.5-150400.3.17.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.17.1 * SUSE Manager Server 4.3 (noarch) * glib2-lang-2.70.5-150400.3.17.1 * SUSE Manager Server 4.3 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.17.1 * libgio-2_0-0-32bit-2.70.5-150400.3.17.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.17.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.17.1 ## References: * https://www.suse.com/security/cve/CVE-2024-52533.html * https://bugzilla.suse.com/show_bug.cgi?id=1233282

1 0

SUSE-SU-2024:4084-1: important: Security update for webkit2gtk3
by OPENSUSE-UPDATES 27 Nov '24

27 Nov '24

# Security update for webkit2gtk3 Announcement ID: SUSE-SU-2024:4084-1 Release Date: 2024-11-27T14:36:51Z Rating: important References: * bsc#1231039 * bsc#1232747 Cross-References: * CVE-2024-40866 * CVE-2024-44185 * CVE-2024-44187 * CVE-2024-44244 * CVE-2024-44296 CVSS scores: * CVE-2024-40866 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-40866 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-44185 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-44185 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-44185 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-44185 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-44187 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-44187 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-44244 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-44244 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-44244 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2024-44296 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-44296 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-44296 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-44296 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 (bsc#1232747): * CVE-2024-44244: Processing maliciously crafted web content may lead to an unexpected process crash. * CVE-2024-44296: Processing maliciously crafted web content may prevent Content Security Policy from being enforced. * CVE-2024-40866: Visiting a malicious website may lead to address bar spoofing. New references to version 2.46.0 (boo#1231039): * CVE-2024-44187: A cross- origin issue existed with “iframe” elements. This was addressed with improved tracking of security origins. * CVE-2024-44185: Processing maliciously crafted web content may lead to an unexpected process crash. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4084=1 openSUSE-SLE-15.6-2024-4084=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4084=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-4084=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-4084=1 ## Package List: * openSUSE Leap 15.6 (noarch) * WebKitGTK-4.1-lang-2.46.3-150600.12.16.1 * WebKitGTK-6.0-lang-2.46.3-150600.12.16.1 * WebKitGTK-4.0-lang-2.46.3-150600.12.16.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libwebkitgtk-6_0-4-2.46.3-150600.12.16.1 * webkit2gtk3-soup2-debugsource-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_0-18-2.46.3-150600.12.16.1 * webkit2gtk4-devel-2.46.3-150600.12.16.1 * webkit-jsc-4.1-2.46.3-150600.12.16.1 * webkit2gtk3-soup2-minibrowser-debuginfo-2.46.3-150600.12.16.1 * libwebkit2gtk-4_1-0-2.46.3-150600.12.16.1 * webkitgtk-6_0-injected-bundles-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_1-0-2.46.3-150600.12.16.1 * webkit2gtk4-minibrowser-2.46.3-150600.12.16.1 * webkit2gtk-4_1-injected-bundles-2.46.3-150600.12.16.1 * typelib-1_0-JavaScriptCore-4_1-2.46.3-150600.12.16.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.46.3-150600.12.16.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.3-150600.12.16.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.3-150600.12.16.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.3-150600.12.16.1 * webkit-jsc-4-2.46.3-150600.12.16.1 * webkit2gtk-4_0-injected-bundles-2.46.3-150600.12.16.1 * typelib-1_0-JavaScriptCore-4_0-2.46.3-150600.12.16.1 * webkit-jsc-4.1-debuginfo-2.46.3-150600.12.16.1 * webkit2gtk3-soup2-devel-2.46.3-150600.12.16.1 * webkit2gtk3-minibrowser-2.46.3-150600.12.16.1 * webkit2gtk4-minibrowser-debuginfo-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.3-150600.12.16.1 * libwebkitgtk-6_0-4-debuginfo-2.46.3-150600.12.16.1 * webkit-jsc-4-debuginfo-2.46.3-150600.12.16.1 * webkit2gtk3-soup2-minibrowser-2.46.3-150600.12.16.1 * typelib-1_0-JavaScriptCore-6_0-2.46.3-150600.12.16.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.3-150600.12.16.1 * typelib-1_0-WebKit2-4_1-2.46.3-150600.12.16.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.3-150600.12.16.1 * webkit2gtk3-debugsource-2.46.3-150600.12.16.1 * webkit-jsc-6.0-debuginfo-2.46.3-150600.12.16.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.3-150600.12.16.1 * libjavascriptcoregtk-6_0-1-2.46.3-150600.12.16.1 * webkit2gtk3-minibrowser-debuginfo-2.46.3-150600.12.16.1 * typelib-1_0-WebKit-6_0-2.46.3-150600.12.16.1 * webkit2gtk4-debugsource-2.46.3-150600.12.16.1 * webkit2gtk3-devel-2.46.3-150600.12.16.1 * typelib-1_0-WebKit2-4_0-2.46.3-150600.12.16.1 * webkit-jsc-6.0-2.46.3-150600.12.16.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.3-150600.12.16.1 * libwebkit2gtk-4_0-37-2.46.3-150600.12.16.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.3-150600.12.16.1 * openSUSE Leap 15.6 (x86_64) * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.46.3-150600.12.16.1 * libwebkit2gtk-4_1-0-32bit-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_0-18-32bit-2.46.3-150600.12.16.1 * libwebkit2gtk-4_0-37-32bit-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_1-0-32bit-2.46.3-150600.12.16.1 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.46.3-150600.12.16.1 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.46.3-150600.12.16.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_1-0-64bit-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.46.3-150600.12.16.1 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_0-18-64bit-2.46.3-150600.12.16.1 * libwebkit2gtk-4_0-37-64bit-2.46.3-150600.12.16.1 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.46.3-150600.12.16.1 * libwebkit2gtk-4_1-0-64bit-2.46.3-150600.12.16.1 * Basesystem Module 15-SP6 (noarch) * WebKitGTK-6.0-lang-2.46.3-150600.12.16.1 * WebKitGTK-4.0-lang-2.46.3-150600.12.16.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libjavascriptcoregtk-4_0-18-debuginfo-2.46.3-150600.12.16.1 * libwebkitgtk-6_0-4-2.46.3-150600.12.16.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.3-150600.12.16.1 * webkit2gtk3-soup2-debugsource-2.46.3-150600.12.16.1 * libwebkitgtk-6_0-4-debuginfo-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_0-18-2.46.3-150600.12.16.1 * libjavascriptcoregtk-6_0-1-2.46.3-150600.12.16.1 * webkit2gtk4-debugsource-2.46.3-150600.12.16.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.46.3-150600.12.16.1 * typelib-1_0-WebKit2-4_0-2.46.3-150600.12.16.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.3-150600.12.16.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.3-150600.12.16.1 * webkit2gtk-4_0-injected-bundles-2.46.3-150600.12.16.1 * libwebkit2gtk-4_0-37-2.46.3-150600.12.16.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.3-150600.12.16.1 * typelib-1_0-JavaScriptCore-4_0-2.46.3-150600.12.16.1 * webkit2gtk3-soup2-devel-2.46.3-150600.12.16.1 * webkitgtk-6_0-injected-bundles-2.46.3-150600.12.16.1 * Desktop Applications Module 15-SP6 (noarch) * WebKitGTK-4.1-lang-2.46.3-150600.12.16.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-debugsource-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_1-0-2.46.3-150600.12.16.1 * webkit2gtk-4_1-injected-bundles-2.46.3-150600.12.16.1 * typelib-1_0-JavaScriptCore-4_1-2.46.3-150600.12.16.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.3-150600.12.16.1 * libwebkit2gtk-4_1-0-2.46.3-150600.12.16.1 * webkit2gtk3-devel-2.46.3-150600.12.16.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.3-150600.12.16.1 * typelib-1_0-WebKit2-4_1-2.46.3-150600.12.16.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.3-150600.12.16.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.3-150600.12.16.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * webkit2gtk4-debugsource-2.46.3-150600.12.16.1 * typelib-1_0-JavaScriptCore-6_0-2.46.3-150600.12.16.1 * typelib-1_0-WebKit-6_0-2.46.3-150600.12.16.1 * webkit2gtk4-devel-2.46.3-150600.12.16.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.46.3-150600.12.16.1 ## References: * https://www.suse.com/security/cve/CVE-2024-40866.html * https://www.suse.com/security/cve/CVE-2024-44185.html * https://www.suse.com/security/cve/CVE-2024-44187.html * https://www.suse.com/security/cve/CVE-2024-44244.html * https://www.suse.com/security/cve/CVE-2024-44296.html * https://bugzilla.suse.com/show_bug.cgi?id=1231039 * https://bugzilla.suse.com/show_bug.cgi?id=1232747

1 0

SUSE-RU-2024:4069-1: moderate: Recommended update for yast2-iscsi-client
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for yast2-iscsi-client Announcement ID: SUSE-RU-2024:4069-1 Release Date: 2024-11-26T12:01:56Z Rating: moderate References: * bsc#1231385 * bsc#1233351 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed. ## Description: This update for yast2-iscsi-client fixes the following issues: * Version update v4.6.5 * Avoid using iscsi_offload.sh script on YaST UI dialog at startup. YaST iSCSI wrongly preselects "Default (Software)" transport in offload case (bsc#1231385). * Fix typo introduced by previous change (bsc#1231385, bsc#1233351). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4069=1 openSUSE-SLE-15.6-2024-4069=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4069=1 ## Package List: * openSUSE Leap 15.6 (noarch) * yast2-iscsi-client-4.6.5-150600.3.11.2 * Basesystem Module 15-SP6 (noarch) * yast2-iscsi-client-4.6.5-150600.3.11.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231385 * https://bugzilla.suse.com/show_bug.cgi?id=1233351

1 0

SUSE-RU-2024:4070-1: moderate: Recommended update for yast2-network
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for yast2-network Announcement ID: SUSE-RU-2024:4070-1 Release Date: 2024-11-26T12:27:20Z Rating: moderate References: * bsc#1232531 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for yast2-network fixes the following issues: * Version update: v4.6.10 * Assign default routes to a specific connection when possible (bsc#1232531). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4070=1 openSUSE-SLE-15.6-2024-4070=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4070=1 ## Package List: * openSUSE Leap 15.6 (noarch) * yast2-network-4.6.10-150600.3.3.2 * Basesystem Module 15-SP6 (noarch) * yast2-network-4.6.10-150600.3.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1232531

1 0

SUSE-RU-2024:4071-1: moderate: Recommended update for yast2-network
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for yast2-network Announcement ID: SUSE-RU-2024:4071-1 Release Date: 2024-11-26T12:29:46Z Rating: moderate References: * bsc#1232531 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for yast2-network fixes the following issues: * Version update: v4.5.25 * Assign default routes to a specific connection when possible (bsc#1232531). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-4071=1 openSUSE-SLE-15.5-2024-4071=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4071=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4071=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4071=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4071=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4071=1 ## Package List: * openSUSE Leap 15.5 (noarch) * yast2-network-4.5.25-150500.3.17.2 * SUSE Linux Enterprise High Performance Computing 15 SP5 (noarch) * yast2-network-4.5.25-150500.3.17.2 * SUSE Linux Enterprise Server 15 SP5 (noarch) * yast2-network-4.5.25-150500.3.17.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * yast2-network-4.5.25-150500.3.17.2 * SUSE Linux Enterprise Desktop 15 SP5 (noarch) * yast2-network-4.5.25-150500.3.17.2 * Basesystem Module 15-SP5 (noarch) * yast2-network-4.5.25-150500.3.17.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1232531

1 0

openSUSE-SU-2024:0379-1: moderate: Security update for iptraf-ng
by opensuse-security＠opensuse.org 26 Nov '24

26 Nov '24

openSUSE Security Update: Security update for iptraf-ng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0379-1 Rating: moderate References: Cross-References: CVE-2024-52949 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for iptraf-ng fixes the following issues: - Update to release 1.2.2 * serv.c: validate loading/saving/entry of port ranges * limit interface name lengths to IFNAMSIZ [CVE-2024-52949] Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-379=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): iptraf-ng-1.2.2-bp156.4.3.1 References: https://www.suse.com/security/cve/CVE-2024-52949.html

1 0

SUSE-RU-2024:4060-1: moderate: Recommended update for ocl-icd
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for ocl-icd Announcement ID: SUSE-RU-2024:4060-1 Release Date: 2024-11-26T08:08:55Z Rating: moderate References: * jsc#PED-11444 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that contains one feature can now be installed. ## Description: This update for ocl-icd fixes the following issues: * get rid of update-alternatives; it's no longer needed because with upcoming G06 production drivers, the nvidia packages will rely on this implementation (JIRA#PED-11444) * added conflicts to packages for legacy nvidia drivers (G04,G05) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4060=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4060=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-4060=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4060=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4060=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-4060=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-4060=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ocl-icd-debugsource-2.3.1-150100.8.12.2 * libOpenCL1-debuginfo-2.3.1-150100.8.12.2 * libOpenCL1-2.3.1-150100.8.12.2 * ocl-icd-devel-2.3.1-150100.8.12.2 * openSUSE Leap 15.5 (x86_64) * libOpenCL1-32bit-debuginfo-2.3.1-150100.8.12.2 * libOpenCL1-32bit-2.3.1-150100.8.12.2 * ocl-icd-devel-32bit-2.3.1-150100.8.12.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ocl-icd-debugsource-2.3.1-150100.8.12.2 * libOpenCL1-debuginfo-2.3.1-150100.8.12.2 * libOpenCL1-2.3.1-150100.8.12.2 * ocl-icd-devel-2.3.1-150100.8.12.2 * openSUSE Leap 15.6 (x86_64) * libOpenCL1-32bit-debuginfo-2.3.1-150100.8.12.2 * libOpenCL1-32bit-2.3.1-150100.8.12.2 * ocl-icd-devel-32bit-2.3.1-150100.8.12.2 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * ocl-icd-debugsource-2.3.1-150100.8.12.2 * libOpenCL1-debuginfo-2.3.1-150100.8.12.2 * libOpenCL1-2.3.1-150100.8.12.2 * ocl-icd-devel-2.3.1-150100.8.12.2 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x) * ocl-icd-debugsource-2.3.1-150100.8.12.2 * libOpenCL1-debuginfo-2.3.1-150100.8.12.2 * libOpenCL1-2.3.1-150100.8.12.2 * ocl-icd-devel-2.3.1-150100.8.12.2 * SUSE Package Hub 15 15-SP6 (x86_64) * libOpenCL1-32bit-debuginfo-2.3.1-150100.8.12.2 * libOpenCL1-32bit-2.3.1-150100.8.12.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS (x86_64) * ocl-icd-debugsource-2.3.1-150100.8.12.2 * libOpenCL1-debuginfo-2.3.1-150100.8.12.2 * libOpenCL1-2.3.1-150100.8.12.2 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * ocl-icd-debugsource-2.3.1-150100.8.12.2 * libOpenCL1-debuginfo-2.3.1-150100.8.12.2 * libOpenCL1-2.3.1-150100.8.12.2 * ocl-icd-devel-2.3.1-150100.8.12.2 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * ocl-icd-debugsource-2.3.1-150100.8.12.2 * libOpenCL1-debuginfo-2.3.1-150100.8.12.2 * libOpenCL1-2.3.1-150100.8.12.2 ## References: * https://jira.suse.com/browse/PED-11444

1 0

SUSE-RU-2024:4061-1: moderate: Recommended update for rubygem-nokogiri
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for rubygem-nokogiri Announcement ID: SUSE-RU-2024:4061-1 Release Date: 2024-11-26T08:39:26Z Rating: moderate References: * bsc#1213999 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for rubygem-nokogiri fixes the following issues: * Only report mismatching libxml2 version if the runtime version is older than the build versin (bsc#1213999) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-4061=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4061=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4061=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4061=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4061=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4061=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4061=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4061=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4061=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4061=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4061=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4061=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-4061=1 ## Package List: * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-testsuite-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-doc-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-testsuite-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-doc-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-testsuite-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-doc-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS (x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * SUSE Manager Proxy 4.3 (x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-150400.14.6.1 * rubygem-nokogiri-debugsource-1.8.5-150400.14.6.1 * ruby2.5-rubygem-nokogiri-1.8.5-150400.14.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213999

1 0

SUSE-OU-2024:4062-1: moderate: Optional update for wxWidgets-3_0
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Optional update for wxWidgets-3_0 Announcement ID: SUSE-OU-2024:4062-1 Release Date: 2024-11-26T08:40:10Z Rating: moderate References: * bsc#1231480 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that has one fix can now be installed. ## Description: This update for wxWidgets-3_0 ixes the following issue: * Ship bellow extra binaries SLE-Module-Packagehub-Subpackages_15-SP6 (bsc#1231480) -libwx_gtk2u_propgrid-suse3_0_5 -libwx_gtk2u_qa-suse3_0_5 -libwx_gtk2u_ribbon-suse3_0_5 -libwx_gtk2u_richtext-suse3_0_5 -wxWidgets-3_0-devel -wxWidgets-3_0-plugin-sound_sdlu-3_0 -wxWidgets-lang ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4062=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4062=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-4062=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4062=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-4062=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-4062=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libwx_gtk2u_propgrid-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-debugsource-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_propgrid-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * openSUSE Leap 15.5 (x86_64) * libwx_gtk2u_core-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_propgrid-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-32bit-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_propgrid-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * openSUSE Leap 15.5 (noarch) * wxWidgets-lang-3.0.5.1-150200.11.7.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libwx_gtk2u_propgrid-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-debugsource-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_propgrid-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * openSUSE Leap 15.6 (x86_64) * libwx_gtk2u_core-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_propgrid-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-32bit-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_propgrid-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-32bit-3.0.5.1-150200.11.7.1 * openSUSE Leap 15.6 (noarch) * wxWidgets-lang-3.0.5.1-150200.11.7.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libwx_gtk2u_propgrid-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-debugsource-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_propgrid-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * SUSE Package Hub 15 15-SP5 (noarch) * wxWidgets-lang-3.0.5.1-150200.11.7.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * libwx_gtk2u_propgrid-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-debugsource-3.0.5.1-150200.11.7.1 * libwx_gtk2u_stc-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_aui-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_media-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-devel-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_baseu_xml-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_propgrid-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_adv-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_qa-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_html-suse3_0_5-3.0.5.1-150200.11.7.1 * wxWidgets-3_0-plugin-sound_sdlu-3_0-3.0.5.1-150200.11.7.1 * libwx_gtk2u_gl-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_baseu_net-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_ribbon-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_xrc-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_richtext-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * SUSE Package Hub 15 15-SP6 (noarch) * wxWidgets-lang-3.0.5.1-150200.11.7.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wxWidgets-3_0-debugsource-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * wxWidgets-3_0-debugsource-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 * libwx_gtk2u_core-suse3_0_5-3.0.5.1-150200.11.7.1 * libwx_baseu-suse3_0_5-debuginfo-3.0.5.1-150200.11.7.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231480

1 0

SUSE-SU-2024:4063-1: important: Security update for postgresql, postgresql16, postgresql17
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Security update for postgresql, postgresql16, postgresql17 Announcement ID: SUSE-SU-2024:4063-1 Release Date: 2024-11-26T09:16:21Z Rating: important References: * bsc#1219340 * bsc#1230423 * bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327 * jsc#PED-11514 Cross-References: * CVE-2024-10976 * CVE-2024-10977 * CVE-2024-10978 * CVE-2024-10979 CVSS scores: * CVE-2024-10976 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-10976 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-10977 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2024-10977 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2024-10978 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-10978 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-10979 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-10979 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves four vulnerabilities, contains one feature and has two security fixes can now be installed. ## Description: This update for postgresql, postgresql16, postgresql17 fixes the following issues: This update ships postgresql17 , and fixes security issues with postgresql16: * bsc#1230423: Relax the dependency of extensions on the server version from exact major.minor to greater or equal, after Tom Lane confirmed on the PostgreSQL packagers list that ABI stability is being taken care of between minor releases. * bsc#1219340: The last fix was not correct. Improve it by removing the dependency again and call fillup only if it is installed. postgresql16 was updated to 16.6: * Repair ABI break for extensions that work with struct ResultRelInfo. * Restore functionality of ALTER {ROLE|DATABASE} SET role. * Fix cases where a logical replication slot's restart_lsn could go backwards. * Avoid deleting still-needed WAL files during pg_rewind. * Fix race conditions associated with dropping shared statistics entries. * Count index scans in contrib/bloom indexes in the statistics views, such as the pg_stat_user_indexes.idx_scan counter. * Fix crash when checking to see if an index's opclass options have changed. * Avoid assertion failure caused by disconnected NFA sub-graphs in regular expression parsing. * https://www.postgresql.org/docs/release/16.6/ postgresql16 was updated to 16.5: * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level table reference. * CVE-2024-10977, bsc#1233325: Make libpq discard error messages received during SSL or GSS protocol negotiation. * CVE-2024-10978, bsc#1233326: Fix unintended interactions between SET SESSION AUTHORIZATION and SET ROLE * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from changing environment variables. * https://www.postgresql.org/about/news/p-2955/ * https://www.postgresql.org/docs/release/16.5/ * Don't build the libs and mini flavor anymore to hand over to PostgreSQL 17. * https://www.postgresql.org/about/news/p-2910/ postgresql17 is shipped in version 17.2: * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level table reference. * CVE-2024-10977, bsc#1233325: Make libpq discard error messages received during SSL or GSS protocol negotiation. * CVE-2024-10978, bsc#1233326: Fix unintended interactions between SET SESSION AUTHORIZATION and SET ROLE * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from changing environment variables. * https://www.postgresql.org/about/news/p-2955/ * https://www.postgresql.org/docs/release/17.1/ * https://www.postgresql.org/docs/release/17.2/ Upgrade to 17.2: * Repair ABI break for extensions that work with struct ResultRelInfo. * Restore functionality of ALTER {ROLE|DATABASE} SET role. * Fix cases where a logical replication slot's restart_lsn could go backwards. * Avoid deleting still-needed WAL files during pg_rewind. * Fix race conditions associated with dropping shared statistics entries. * Count index scans in contrib/bloom indexes in the statistics views, such as the pg_stat_user_indexes.idx_scan counter. * Fix crash when checking to see if an index's opclass options have changed. * Avoid assertion failure caused by disconnected NFA sub-graphs in regular expression parsing. Upgrade to 17.0: * New memory management system for VACUUM, which reduces memory consumption and can improve overall vacuuming performance. * New SQL/JSON capabilities, including constructors, identity functions, and the JSON_TABLE() function, which converts JSON data into a table representation. * Various query performance improvements, including for sequential reads using streaming I/O, write throughput under high concurrency, and searches over multiple values in a btree index. * Logical replication enhancements, including: * Failover control * pg_createsubscriber, a utility that creates logical replicas from physical standbys * pg_upgrade now preserves replication slots on both publishers and subscribers * New client-side connection option, sslnegotiation=direct, that performs a direct TLS handshake to avoid a round-trip negotiation. * pg_basebackup now supports incremental backup. * COPY adds a new option, ON_ERROR ignore, that allows a copy operation to continue in the event of an error. * https://www.postgresql.org/about/news/p-2936/ * https://www.postgresql.org/docs/17/release-17.html ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4063=1 SUSE-2024-4063=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4063=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4063=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-4063=1 ## Package List: * openSUSE Leap 15.6 (noarch) * postgresql-docs-17-150600.17.6.1 * postgresql-llvmjit-devel-17-150600.17.6.1 * postgresql-contrib-17-150600.17.6.1 * postgresql-server-devel-17-150600.17.6.1 * postgresql-server-17-150600.17.6.1 * postgresql16-docs-16.6-150600.16.10.1 * postgresql-llvmjit-17-150600.17.6.1 * postgresql-17-150600.17.6.1 * postgresql-plpython-17-150600.17.6.1 * postgresql-pltcl-17-150600.17.6.1 * postgresql17-docs-17.2-150600.13.5.1 * postgresql-test-17-150600.17.6.1 * postgresql-devel-17-150600.17.6.1 * postgresql-plperl-17-150600.17.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * postgresql17-devel-mini-17.2-150600.13.5.1 * postgresql16-plpython-16.6-150600.16.10.1 * postgresql17-debuginfo-17.2-150600.13.5.1 * postgresql17-llvmjit-debuginfo-17.2-150600.13.5.1 * postgresql16-test-16.6-150600.16.10.1 * postgresql16-llvmjit-16.6-150600.16.10.1 * libecpg6-debuginfo-17.2-150600.13.5.1 * postgresql17-plpython-debuginfo-17.2-150600.13.5.1 * postgresql17-17.2-150600.13.5.1 * libecpg6-17.2-150600.13.5.1 * postgresql17-server-devel-debuginfo-17.2-150600.13.5.1 * postgresql16-contrib-16.6-150600.16.10.1 * postgresql17-debugsource-17.2-150600.13.5.1 * postgresql17-devel-debuginfo-17.2-150600.13.5.1 * libpq5-debuginfo-17.2-150600.13.5.1 * postgresql16-server-devel-debuginfo-16.6-150600.16.10.1 * postgresql16-plpython-debuginfo-16.6-150600.16.10.1 * postgresql17-contrib-debuginfo-17.2-150600.13.5.1 * postgresql17-llvmjit-devel-17.2-150600.13.5.1 * postgresql17-server-debuginfo-17.2-150600.13.5.1 * postgresql16-devel-debuginfo-16.6-150600.16.10.1 * postgresql17-pltcl-17.2-150600.13.5.1 * postgresql16-contrib-debuginfo-16.6-150600.16.10.1 * postgresql16-server-debuginfo-16.6-150600.16.10.1 * postgresql16-llvmjit-devel-16.6-150600.16.10.1 * postgresql17-llvmjit-17.2-150600.13.5.1 * postgresql17-plpython-17.2-150600.13.5.1 * postgresql16-llvmjit-debuginfo-16.6-150600.16.10.1 * postgresql16-debugsource-16.6-150600.16.10.1 * postgresql16-16.6-150600.16.10.1 * postgresql17-test-17.2-150600.13.5.1 * postgresql16-plperl-debuginfo-16.6-150600.16.10.1 * postgresql17-server-17.2-150600.13.5.1 * libpq5-17.2-150600.13.5.1 * postgresql17-devel-mini-debuginfo-17.2-150600.13.5.1 * postgresql16-debuginfo-16.6-150600.16.10.1 * postgresql17-pltcl-debuginfo-17.2-150600.13.5.1 * postgresql17-plperl-17.2-150600.13.5.1 * postgresql17-plperl-debuginfo-17.2-150600.13.5.1 * postgresql17-server-devel-17.2-150600.13.5.1 * postgresql16-plperl-16.6-150600.16.10.1 * postgresql16-pltcl-16.6-150600.16.10.1 * postgresql16-server-16.6-150600.16.10.1 * postgresql17-mini-debugsource-17.2-150600.13.5.1 * postgresql16-devel-16.6-150600.16.10.1 * postgresql16-pltcl-debuginfo-16.6-150600.16.10.1 * postgresql17-devel-17.2-150600.13.5.1 * postgresql17-contrib-17.2-150600.13.5.1 * postgresql16-server-devel-16.6-150600.16.10.1 * openSUSE Leap 15.6 (x86_64) * libecpg6-32bit-17.2-150600.13.5.1 * libpq5-32bit-debuginfo-17.2-150600.13.5.1 * libpq5-32bit-17.2-150600.13.5.1 * libecpg6-32bit-debuginfo-17.2-150600.13.5.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libecpg6-64bit-17.2-150600.13.5.1 * libpq5-64bit-debuginfo-17.2-150600.13.5.1 * libecpg6-64bit-debuginfo-17.2-150600.13.5.1 * libpq5-64bit-17.2-150600.13.5.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql17-debugsource-17.2-150600.13.5.1 * postgresql16-debugsource-16.6-150600.16.10.1 * postgresql16-16.6-150600.16.10.1 * postgresql17-debuginfo-17.2-150600.13.5.1 * libpq5-debuginfo-17.2-150600.13.5.1 * libpq5-17.2-150600.13.5.1 * postgresql17-17.2-150600.13.5.1 * postgresql16-debuginfo-16.6-150600.16.10.1 * Basesystem Module 15-SP6 (noarch) * postgresql-17-150600.17.6.1 * Basesystem Module 15-SP6 (x86_64) * libpq5-32bit-debuginfo-17.2-150600.13.5.1 * libpq5-32bit-17.2-150600.13.5.1 * SUSE Package Hub 15 15-SP6 (noarch) * postgresql-docs-17-150600.17.6.1 * postgresql-llvmjit-devel-17-150600.17.6.1 * postgresql-contrib-17-150600.17.6.1 * postgresql-server-devel-17-150600.17.6.1 * postgresql-server-17-150600.17.6.1 * postgresql-llvmjit-17-150600.17.6.1 * postgresql-17-150600.17.6.1 * postgresql-plpython-17-150600.17.6.1 * postgresql-pltcl-17-150600.17.6.1 * postgresql-test-17-150600.17.6.1 * postgresql-devel-17-150600.17.6.1 * postgresql-plperl-17-150600.17.6.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql17-debugsource-17.2-150600.13.5.1 * postgresql16-llvmjit-debuginfo-16.6-150600.16.10.1 * postgresql16-debugsource-16.6-150600.16.10.1 * postgresql17-debuginfo-17.2-150600.13.5.1 * postgresql17-test-17.2-150600.13.5.1 * postgresql17-llvmjit-debuginfo-17.2-150600.13.5.1 * postgresql16-test-16.6-150600.16.10.1 * postgresql16-llvmjit-16.6-150600.16.10.1 * postgresql17-llvmjit-devel-17.2-150600.13.5.1 * postgresql16-debuginfo-16.6-150600.16.10.1 * postgresql17-llvmjit-17.2-150600.13.5.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql17-debuginfo-17.2-150600.13.5.1 * postgresql16-plpython-16.6-150600.16.10.1 * libecpg6-debuginfo-17.2-150600.13.5.1 * postgresql17-plpython-debuginfo-17.2-150600.13.5.1 * libecpg6-17.2-150600.13.5.1 * postgresql17-server-devel-debuginfo-17.2-150600.13.5.1 * postgresql16-contrib-16.6-150600.16.10.1 * postgresql17-debugsource-17.2-150600.13.5.1 * postgresql17-devel-debuginfo-17.2-150600.13.5.1 * postgresql16-server-devel-debuginfo-16.6-150600.16.10.1 * postgresql16-plpython-debuginfo-16.6-150600.16.10.1 * postgresql17-contrib-debuginfo-17.2-150600.13.5.1 * postgresql17-server-debuginfo-17.2-150600.13.5.1 * postgresql16-devel-debuginfo-16.6-150600.16.10.1 * postgresql17-pltcl-17.2-150600.13.5.1 * postgresql16-contrib-debuginfo-16.6-150600.16.10.1 * postgresql16-server-debuginfo-16.6-150600.16.10.1 * postgresql17-plpython-17.2-150600.13.5.1 * postgresql16-debugsource-16.6-150600.16.10.1 * postgresql16-plperl-debuginfo-16.6-150600.16.10.1 * postgresql17-server-17.2-150600.13.5.1 * postgresql16-debuginfo-16.6-150600.16.10.1 * postgresql17-pltcl-debuginfo-17.2-150600.13.5.1 * postgresql17-plperl-17.2-150600.13.5.1 * postgresql17-plperl-debuginfo-17.2-150600.13.5.1 * postgresql17-server-devel-17.2-150600.13.5.1 * postgresql16-plperl-16.6-150600.16.10.1 * postgresql16-pltcl-16.6-150600.16.10.1 * postgresql16-server-16.6-150600.16.10.1 * postgresql16-devel-16.6-150600.16.10.1 * postgresql16-pltcl-debuginfo-16.6-150600.16.10.1 * postgresql17-devel-17.2-150600.13.5.1 * postgresql17-contrib-17.2-150600.13.5.1 * postgresql16-server-devel-16.6-150600.16.10.1 * Server Applications Module 15-SP6 (noarch) * postgresql-docs-17-150600.17.6.1 * postgresql-contrib-17-150600.17.6.1 * postgresql-server-devel-17-150600.17.6.1 * postgresql-server-17-150600.17.6.1 * postgresql-plpython-17-150600.17.6.1 * postgresql-pltcl-17-150600.17.6.1 * postgresql17-docs-17.2-150600.13.5.1 * postgresql16-docs-16.6-150600.16.10.1 * postgresql-devel-17-150600.17.6.1 * postgresql-plperl-17-150600.17.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-10976.html * https://www.suse.com/security/cve/CVE-2024-10977.html * https://www.suse.com/security/cve/CVE-2024-10978.html * https://www.suse.com/security/cve/CVE-2024-10979.html * https://bugzilla.suse.com/show_bug.cgi?id=1219340 * https://bugzilla.suse.com/show_bug.cgi?id=1230423 * https://bugzilla.suse.com/show_bug.cgi?id=1233323 * https://bugzilla.suse.com/show_bug.cgi?id=1233325 * https://bugzilla.suse.com/show_bug.cgi?id=1233326 * https://bugzilla.suse.com/show_bug.cgi?id=1233327 * https://jira.suse.com/browse/PED-11514

1 0