November 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:4064-1: moderate: Recommended update for vexctl
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for vexctl Announcement ID: SUSE-RU-2024:4064-1 Release Date: 2024-11-26T10:10:44Z Rating: moderate References: * jsc#PED-11136 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that contains one feature can now be installed. ## Description: This update for vexctl fixes the following issues: vexctl is shipped in version 0.3.0. vexctl is a CLI tool to create, apply, and attest VEX (Vulnerability Exploitability eXchange) data. Its purpose is to help with the creation and management of VEX documents that allow "turning off" security scanner alerts of vulnerabilities known not to affect a product. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4064=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4064=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-4064=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4064=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * vexctl-0.3.0-150000.1.3.1 * vexctl-debuginfo-0.3.0-150000.1.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * vexctl-0.3.0-150000.1.3.1 * vexctl-debuginfo-0.3.0-150000.1.3.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * vexctl-0.3.0-150000.1.3.1 * vexctl-debuginfo-0.3.0-150000.1.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * vexctl-0.3.0-150000.1.3.1 * vexctl-debuginfo-0.3.0-150000.1.3.1 ## References: * https://jira.suse.com/browse/PED-11136

1 0

SUSE-RU-2024:4065-1: moderate: Recommended update for crypto-policies
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for crypto-policies Announcement ID: SUSE-RU-2024:4065-1 Release Date: 2024-11-26T10:11:12Z Rating: moderate References: * bsc#1233499 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for crypto-policies ships the missing crypto-policies scripts to SUSE Linux Enterprise Micro, which allows configuration of the policies. (bsc#1233499) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4065=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-4065=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4065=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4065=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4065=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4065=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4065=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-4065=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4065=1 ## Package List: * openSUSE Leap 15.4 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.8.1 * crypto-policies-scripts-20210917.c9d86d1-150400.3.8.1 * openSUSE Leap Micro 5.5 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.8.1 * crypto-policies-scripts-20210917.c9d86d1-150400.3.8.1 * openSUSE Leap 15.5 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.8.1 * crypto-policies-scripts-20210917.c9d86d1-150400.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.8.1 * crypto-policies-scripts-20210917.c9d86d1-150400.3.8.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.8.1 * crypto-policies-scripts-20210917.c9d86d1-150400.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.8.1 * crypto-policies-scripts-20210917.c9d86d1-150400.3.8.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.8.1 * crypto-policies-scripts-20210917.c9d86d1-150400.3.8.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.8.1 * crypto-policies-scripts-20210917.c9d86d1-150400.3.8.1 * Basesystem Module 15-SP5 (noarch) * crypto-policies-20210917.c9d86d1-150400.3.8.1 * crypto-policies-scripts-20210917.c9d86d1-150400.3.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1233499

1 0

SUSE-RU-2024:4066-1: moderate: Recommended update for lifecycle-data-sle-module-development-tools
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for lifecycle-data-sle-module-development-tools Announcement ID: SUSE-RU-2024:4066-1 Release Date: 2024-11-26T10:11:30Z Rating: moderate References: Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for lifecycle-data-sle-module-development-tools fixes the following issues: * mark past EOL dates for go1.20, go1.21, as now we have go1.22 and go1.23 * mark EOL date for gcc13 (2025-04-30). * added missing EOLs for rust 1.xx (release date of N+2 , +7 days ) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4066=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-4066=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-4066=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4066=1 ## Package List: * openSUSE Leap 15.6 (noarch) * lifecycle-data-sle-module-development-tools-1-150200.3.30.1 * Development Tools Module 15-SP5 (noarch) * lifecycle-data-sle-module-development-tools-1-150200.3.30.1 * Development Tools Module 15-SP6 (noarch) * lifecycle-data-sle-module-development-tools-1-150200.3.30.1 * openSUSE Leap 15.5 (noarch) * lifecycle-data-sle-module-development-tools-1-150200.3.30.1

1 0

SUSE-RU-2024:4067-1: moderate: Recommended update for openssh
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for openssh Announcement ID: SUSE-RU-2024:4067-1 Release Date: 2024-11-26T10:34:06Z Rating: moderate References: * bsc#1229010 * bsc#1229072 * bsc#1229449 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has three fixes can now be installed. ## Description: This update for openssh fixes the following issues: * Fixed a regression introduced in 9.6 that makes X11 forwarding very slow. (bsc#1229449) * Fixed RFC4256 implementation so that keyboard-interactive authentication method can send instructions and sshd shows them to users even before a prompt is requested. This fixes MFA push notifications (bsc#1229010). * Fix a dbus connection leaked in the logind patch that was missing a sd_bus_unref call. * Fixed a small memory leak when parsing the subsystem configuration option. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4067=1 openSUSE-SLE-15.6-2024-4067=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4067=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-4067=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * openssh-askpass-gnome-debugsource-9.6p1-150600.6.12.1 * openssh-debugsource-9.6p1-150600.6.12.1 * openssh-server-debuginfo-9.6p1-150600.6.12.1 * openssh-helpers-debuginfo-9.6p1-150600.6.12.1 * openssh-cavs-9.6p1-150600.6.12.1 * openssh-helpers-9.6p1-150600.6.12.1 * openssh-clients-9.6p1-150600.6.12.1 * openssh-cavs-debuginfo-9.6p1-150600.6.12.1 * openssh-debuginfo-9.6p1-150600.6.12.1 * openssh-common-9.6p1-150600.6.12.1 * openssh-fips-9.6p1-150600.6.12.1 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.12.1 * openssh-server-9.6p1-150600.6.12.1 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.12.1 * openssh-9.6p1-150600.6.12.1 * openssh-common-debuginfo-9.6p1-150600.6.12.1 * openssh-askpass-gnome-9.6p1-150600.6.12.1 * openssh-clients-debuginfo-9.6p1-150600.6.12.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssh-debugsource-9.6p1-150600.6.12.1 * openssh-server-debuginfo-9.6p1-150600.6.12.1 * openssh-helpers-debuginfo-9.6p1-150600.6.12.1 * openssh-clients-9.6p1-150600.6.12.1 * openssh-debuginfo-9.6p1-150600.6.12.1 * openssh-fips-9.6p1-150600.6.12.1 * openssh-common-9.6p1-150600.6.12.1 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.12.1 * openssh-server-9.6p1-150600.6.12.1 * openssh-helpers-9.6p1-150600.6.12.1 * openssh-common-debuginfo-9.6p1-150600.6.12.1 * openssh-9.6p1-150600.6.12.1 * openssh-clients-debuginfo-9.6p1-150600.6.12.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.12.1 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.12.1 * openssh-askpass-gnome-9.6p1-150600.6.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1229010 * https://bugzilla.suse.com/show_bug.cgi?id=1229072 * https://bugzilla.suse.com/show_bug.cgi?id=1229449

1 0

SUSE-RU-2024:4068-1: moderate: Recommended update for automake
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for automake Announcement ID: SUSE-RU-2024:4068-1 Release Date: 2024-11-26T11:22:19Z Rating: moderate References: * bsc#1232532 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for automake fixes the following issue: * check python major version and use imp or importlib accordingly (bsc#1232532). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4068=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4068=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4068=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-4068=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-4068=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4068=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4068=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4068=1 * SUSE Linux Enterprise Server 15 SP2 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-4068=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-4068=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4068=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-4068=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-4068=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4068=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4068=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-4068=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-4068=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-4068=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4068=1 ## Package List: * openSUSE Leap 15.6 (noarch) * automake-1.15.1-150000.4.13.2 * Basesystem Module 15-SP5 (noarch) * automake-1.15.1-150000.4.13.2 * Basesystem Module 15-SP6 (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Linux Enterprise Server 15 SP2 LTSS (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Manager Proxy 4.3 (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Manager Retail Branch Server 4.3 (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Manager Server 4.3 (noarch) * automake-1.15.1-150000.4.13.2 * SUSE Enterprise Storage 7.1 (noarch) * automake-1.15.1-150000.4.13.2 * openSUSE Leap 15.5 (noarch) * automake-1.15.1-150000.4.13.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1232532

1 0

SUSE-SU-2024:4053-1: important: Security update for ucode-intel
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Security update for ucode-intel Announcement ID: SUSE-SU-2024:4053-1 Release Date: 2024-11-26T03:37:12Z Rating: important References: * bsc#1233313 Cross-References: * CVE-2024-21820 * CVE-2024-21853 * CVE-2024-23918 * CVE-2024-23984 * CVE-2024-24968 CVSS scores: * CVE-2024-21820 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N * CVE-2024-21820 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N * CVE-2024-21820 ( NVD ): 8.5 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-21820 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N * CVE-2024-21853 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-21853 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-21853 ( NVD ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-21853 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23918 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2024-23918 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2024-23918 ( NVD ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-23918 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2024-23984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2024-23984 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2024-23984 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-23984 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2024-24968 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-24968 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2024-24968 ( NVD ): 5.6 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-24968 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves five vulnerabilities can now be installed. ## Description: This update for ucode-intel fixes the following issues: * Intel CPU Microcode was updated to the 20241112 release (bsc#1233313) * CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access. * CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access. * CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access. * CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access. * CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access. * Update for functional issues. New Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000036 | 00000037 | Core Gen12 | ADL | H0 | 06-97-05/07 | 00000036 | 00000037 | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000434 | 00000435 | Core Gen12 | ADL | R0 | 06-9a-04/80 | 00000434 | 00000435 | Core Gen12 | EMR-SP | A0 | 06-cf-01/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | EMR-SP | A1 | 06-cf-02/87 | 21000230 | 21000283 | Xeon Scalable Gen5 | MTL | C0 | 06-aa-04/e6 | 0000001f | 00000020 | Core™ Ultra Processor | RPL-H/P/PX 6+8 | J0 | 06-ba-02/e0 | 00004122 | 00004123 | Core Gen13 | RPL-HX/S | C0 | 06-bf-02/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-S | H0 | 06-bf-05/07 | 00000036 | 00000037 | Core Gen13/Gen14 | RPL-U 2+8 | Q0 | 06-ba-03/e0 | 00004122 | 00004123 | Core Gen13 | SPR-SP | E3 | 06-8f-06/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E4/S2 | 06-8f-07/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4 New Disclosures Updated in Prior Releases: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ICL-D | B0 | 06-6c-01/10 | 010002b0 | N/A | Xeon D-17xx/D-18xx, D-27xx/D-28xx | ICX-SP | Dx/M1 | 06-6a-06/87 | 0d0003e7 | N/A | Xeon Scalable Gen3 * Intel CPU Microcode was updated to the 20241029 release Update for functional issues. Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | RPL-E/HX/S | B0 | 06-b7-01/32 | 00000129 | 0000012b | Core Gen13/Gen14 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-4053=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4053=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4053=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4053=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4053=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4053=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4053=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-4053=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4053=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4053=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-4053=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-4053=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4053=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4053=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4053=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-4053=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-4053=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4053=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-4053=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-4053=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4053=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4053=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-4053=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-4053=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-4053=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-4053=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-4053=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-4053=1 ## Package List: * openSUSE Leap Micro 5.5 (x86_64) * ucode-intel-20241112-150200.50.1 * openSUSE Leap 15.5 (x86_64) * ucode-intel-20241112-150200.50.1 * openSUSE Leap 15.6 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * ucode-intel-20241112-150200.50.1 * Basesystem Module 15-SP5 (x86_64) * ucode-intel-20241112-150200.50.1 * Basesystem Module 15-SP6 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Manager Proxy 4.3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Manager Server 4.3 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Enterprise Storage 7.1 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * ucode-intel-20241112-150200.50.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * ucode-intel-20241112-150200.50.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21820.html * https://www.suse.com/security/cve/CVE-2024-21853.html * https://www.suse.com/security/cve/CVE-2024-23918.html * https://www.suse.com/security/cve/CVE-2024-23984.html * https://www.suse.com/security/cve/CVE-2024-24968.html * https://bugzilla.suse.com/show_bug.cgi?id=1233313

1 0

SUSE-SU-2024:4054-1: moderate: Security update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Security update for javapackages-tools, xmlgraphics-batik, xmlgraphics- commons, xmlgraphics-fop Announcement ID: SUSE-SU-2024:4054-1 Release Date: 2024-11-26T05:06:51Z Rating: moderate References: * bsc#1231347 * bsc#1231428 Cross-References: * CVE-2024-28168 CVSS scores: * CVE-2024-28168 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-28168 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L * CVE-2024-28168 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop fixes the following issues: xmlgraphics-fop was updated from version 2.8 to 2.10: * Security issues fixed: * CVE-2024-28168: Fixed improper restriction of XML External Entity (XXE) reference (bsc#1231428) * Upstream changes and bugs fixed: * Version 2.10: * footnote-body ignores rl-tb writing mode * SVG tspan content is displayed out of place * Added new schema to handle pdf/a and pdfa/ua * Correct fop version at runtime * NoSuchElementException when using font with no family name * Resolve classpath for binary distribution * Switch to spotbugs * Set an automatic module name * Rename packages to avoid conflicts with modules * Resize table only for multicolumn page * Missing jars in servlet * Optimise performance of PNG with alpha using raw loader * basic-link not navigating to corresponding footnote * Added option to sign PDF * Added secure processing for XSL input * Allow sections which need security permissions to be run when AllPermission denied in caller code * Remove unused PDFStructElem * Remove space generated by fo:wrapper * Reset content length for table changing ipd * Added alt text to PDF signature * Allow change of resource level for SVG in AFP * Exclude shape not in clipping path for AFP * Only support 1 column for redo of layout without page pos only * Switch to Jakarta servlet API * NPE when list item is split alongside an ipd change * Added mandatory MODCA triplet to AFP * Redo layout for multipage columns * Added image mask option for AFP * Skip written block ipds inside float * Allow curly braces for src url * Missing content for last page with change ipd * Added warning when different pdf languages are used * Only restart line manager when there is a linebreak for blocklayout * Version 2.9: * Values in PDF Number Trees must be indirect references * Do not delete files on syntax errors using command line * Surrogate pair edge-case causes Exception * Reset character spacing * SVG text containing certain glyphs isn't rendered * Remove duplicate classes from maven classpath * Allow use of page position only on redo of layout * Failure to render multi-block itemBody alongside float * Update to PDFBox 2.0.27 * NPE if link destination is missing with accessibility * Make property cache thread safe * Font size was rounded to 0 for AFP TTF * Cannot process a SVG using mvn jars * Remove serializer jar * Allow creating a PDF 2.0 document * Text missing after page break inside table inline * IllegalArgumentException for list in a table * Table width may be too wide when layout width changes * NPE when using broken link and PDF 1.5 * Allow XMP at PDF page level * Symbol font was not being mapped to unicode * Correct font differences table for Chrome * Link against Java 8 API * Added support for font-selection-strategy=character-by-character * Merge form fields in external PDFs * Fixed test for Java 11 xmlgraphics-batik was updated from version 1.17 to 1.18: * PNG transcoder references nonexistent class * Set offset to 0 if missing in stop tag * Validate throws NPE * Fixed missing arabic characters * Animated rotate tranform ignores y-origin at exactly 270 degrees * Set an automatic module name * Ignore inkscape properties * Switch to spotbugs * Allow source and target resolution configuration xmlgraphics-commons was updated from version 2.8 to 2.10: * Fixed test for Java 11 * Allow XMP at PDF page level * Allow source resolution configuration * Added new schema to handle pdf/a and pdfa/ua * Set an automatic module name * Switch to spotbugs * Do not use a singleton for ImageImplRegistry javapackages-tools was updated from version 6.3.0 to 6.3.4: * Version 6.3.4: * A corner case when which is not present * Remove dependency on which * Simplify after the which -> type -p change * jpackage_script: Remove pointless assignment when %java_home is unset * Don't export JAVA_HOME (bsc#1231347) * Version 6.3.2: * Search for JAVACMD under JAVA_HOME only if it's set * Obsolete set_jvm and set_jvm_dirs functions * Drop unneeded _set_java_home function * Remove JAVA_HOME check from check_java_env function * Bump codecov/codecov-action from 2.0.2 to 4.6.0 * Bump actions/setup-python from 4 to 5 * Bump actions/checkout from 2 to 4 * Added custom dependabot config * Remove the test for JAVA_HOME and error if it is not set * java-functions: Remove unneeded local variables * Fixed build status shield * Version 6.3.1: * Allow missing components with abs2rel * Fixed tests with python 3.4 * Sync spec file from Fedora * Drop default JRE/JDK * Fixed the use of java-functions in scripts * Test that we don't bomb on <relativePath/> * Test variable expansion in artifactId * Interpolate properties also in the current artifact * Rewrite abs2rel in shell * Use asciidoctor instead of asciidoc * Fixed incompatibility with RPM 4.20 * Reproducible exclusions order in maven metadata * Do not bomb on <relativePath/> construct * Make maven_depmap order of aliases reproducible ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4054=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4054=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4054=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4054=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-4054=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-4054=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4054=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-4054=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-4054=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4054=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4054=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4054=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-4054=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-4054=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4054=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-4054=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-4054=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4054=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4054=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-4054=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-4054=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-4054=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * openSUSE Leap 15.5 (noarch) * xmlgraphics-batik-svgpp-1.18-150200.4.10.2 * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * xmlgraphics-batik-javadoc-1.18-150200.4.10.2 * xmlgraphics-batik-ttf2svg-1.18-150200.4.10.2 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-batik-squiggle-1.18-150200.4.10.2 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-javadoc-2.10-150200.3.10.2 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-rasterizer-1.18-150200.4.10.2 * xmlgraphics-batik-css-1.18-150200.4.10.2 * xmlgraphics-batik-demo-1.18-150200.4.10.2 * xmlgraphics-batik-slideshow-1.18-150200.4.10.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * openSUSE Leap 15.6 (noarch) * xmlgraphics-batik-svgpp-1.18-150200.4.10.2 * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * xmlgraphics-batik-javadoc-1.18-150200.4.10.2 * xmlgraphics-batik-ttf2svg-1.18-150200.4.10.2 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-batik-squiggle-1.18-150200.4.10.2 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-javadoc-2.10-150200.3.10.2 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-rasterizer-1.18-150200.4.10.2 * xmlgraphics-batik-css-1.18-150200.4.10.2 * xmlgraphics-batik-demo-1.18-150200.4.10.2 * xmlgraphics-batik-slideshow-1.18-150200.4.10.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * Basesystem Module 15-SP5 (noarch) * python3-javapackages-6.3.4-150200.3.15.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * Basesystem Module 15-SP6 (noarch) * python3-javapackages-6.3.4-150200.3.15.1 * Development Tools Module 15-SP5 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * Development Tools Module 15-SP6 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * javapackages-local-6.3.4-150200.3.15.1 * SUSE Package Hub 15 15-SP6 (noarch) * xmlgraphics-batik-css-1.18-150200.4.10.2 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 * SUSE Manager Proxy 4.3 (x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Manager Proxy 4.3 (noarch) * python3-javapackages-6.3.4-150200.3.15.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * python3-javapackages-6.3.4-150200.3.15.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Manager Server 4.3 (noarch) * python3-javapackages-6.3.4-150200.3.15.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * javapackages-filesystem-6.3.4-150200.3.15.1 * javapackages-tools-6.3.4-150200.3.15.1 * SUSE Enterprise Storage 7.1 (noarch) * javapackages-ivy-6.3.4-150200.3.15.1 * javapackages-gradle-6.3.4-150200.3.15.1 * python3-javapackages-6.3.4-150200.3.15.1 * xmlgraphics-fop-2.10-150200.13.10.1 * xmlgraphics-commons-2.10-150200.3.10.2 * xmlgraphics-batik-1.18-150200.4.10.2 * javapackages-local-6.3.4-150200.3.15.1 * xmlgraphics-batik-css-1.18-150200.4.10.2 ## References: * https://www.suse.com/security/cve/CVE-2024-28168.html * https://bugzilla.suse.com/show_bug.cgi?id=1231347 * https://bugzilla.suse.com/show_bug.cgi?id=1231428

1 0

SUSE-RU-2024:4055-1: moderate: Recommended update for Jackson
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for Jackson Announcement ID: SUSE-RU-2024:4055-1 Release Date: 2024-11-26T05:26:43Z Rating: moderate References: Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 An update that can now be installed. ## Description: This update for Jackson fixes the following issues: jackson-annotations was updated from version 2.16.1 to 2.17.3: * Allow `@JsonAnySetter` on `ElementType.PARAMETER` (for use on constructor parameters) * Build the module-info.java source too (with release=9) jackson-bom was updated from version 2.16.1 to 2.17.3: * Added `jackson-jr-extension-javatime` * Added managed dependency to JUnit5 * Removed unused JUnit5 dependency jackson-core, jackson-databind, jackson-dataformats-binary were updated from version 2.16.1 to 2.17.3: * Various minor bugs have been fixed jackson-modules-base was updated from version 2.16.1 to 2.17.3: * Version update with no changes jackson-parent was updated from version 2.16 to 2.17: * Update to oss-parent 58 (plugin version updates) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4055=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4055=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-4055=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-4055=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-4055=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-4055=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-4055=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4055=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4055=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4055=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-4055=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-4055=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4055=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-4055=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-4055=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4055=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4055=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-4055=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-4055=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-4055=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4055=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4055=1 ## Package List: * Basesystem Module 15-SP5 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * Basesystem Module 15-SP6 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * Development Tools Module 15-SP5 (noarch) * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * Development Tools Module 15-SP6 (noarch) * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * SUSE Manager Server 4.3 Module 4.3 (noarch) * jackson-module-paranamer-2.17.3-150200.5.16.1 * jackson-modules-base-2.17.3-150200.5.16.1 * jackson-parent-2.17-150200.3.13.1 * jackson-module-guice-2.17.3-150200.5.16.1 * jackson-core-2.17.3-150200.3.19.1 * jackson-module-blackbird-2.17.3-150200.5.16.1 * jackson-module-no-ctor-deser-2.17.3-150200.5.16.1 * jackson-module-osgi-2.17.3-150200.5.16.1 * jackson-databind-2.17.3-150200.3.23.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-module-jaxb-annotations-2.17.3-150200.5.16.1 * jackson-module-mrbean-2.17.3-150200.5.16.1 * jackson-module-afterburner-2.17.3-150200.5.16.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * jackson-core-2.17.3-150200.3.19.1 * jackson-databind-2.17.3-150200.3.23.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-databind-javadoc-2.17.3-150200.3.23.1 * jackson-core-javadoc-2.17.3-150200.3.19.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-javadoc-2.17.3-150200.3.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * jackson-core-2.17.3-150200.3.19.1 * jackson-databind-2.17.3-150200.3.23.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-databind-javadoc-2.17.3-150200.3.23.1 * jackson-core-javadoc-2.17.3-150200.3.19.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-javadoc-2.17.3-150200.3.19.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * jackson-core-2.17.3-150200.3.19.1 * jackson-databind-2.17.3-150200.3.23.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-databind-javadoc-2.17.3-150200.3.23.1 * jackson-core-javadoc-2.17.3-150200.3.19.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-javadoc-2.17.3-150200.3.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * SUSE Manager Proxy 4.3 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * SUSE Manager Server 4.3 (noarch) * jackson-databind-2.17.3-150200.3.23.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-core-2.17.3-150200.3.19.1 * SUSE Enterprise Storage 7.1 (noarch) * jackson-core-2.17.3-150200.3.19.1 * jackson-databind-2.17.3-150200.3.23.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-databind-javadoc-2.17.3-150200.3.23.1 * jackson-core-javadoc-2.17.3-150200.3.19.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-annotations-javadoc-2.17.3-150200.3.19.1 * openSUSE Leap 15.5 (noarch) * jackson-module-paranamer-2.17.3-150200.5.16.1 * jackson-parent-2.17-150200.3.13.1 * jackson-module-no-ctor-deser-2.17.3-150200.5.16.1 * jackson-databind-javadoc-2.17.3-150200.3.23.1 * jackson-core-javadoc-2.17.3-150200.3.19.1 * jackson-module-mrbean-2.17.3-150200.5.16.1 * jackson-annotations-javadoc-2.17.3-150200.3.19.1 * jackson-dataformat-smile-2.17.3-150200.3.18.1 * jackson-modules-base-2.17.3-150200.5.16.1 * jackson-core-2.17.3-150200.3.19.1 * jackson-dataformats-binary-2.17.3-150200.3.18.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-bom-2.17.3-150200.3.16.1 * jackson-module-jaxb-annotations-2.17.3-150200.5.16.1 * jackson-modules-base-javadoc-2.17.3-150200.5.16.1 * jackson-module-guice-2.17.3-150200.5.16.1 * jackson-dataformats-binary-javadoc-2.17.3-150200.3.18.1 * jackson-module-blackbird-2.17.3-150200.5.16.1 * jackson-module-osgi-2.17.3-150200.5.16.1 * jackson-databind-2.17.3-150200.3.23.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-module-afterburner-2.17.3-150200.5.16.1 * openSUSE Leap 15.6 (noarch) * jackson-module-paranamer-2.17.3-150200.5.16.1 * jackson-parent-2.17-150200.3.13.1 * jackson-module-no-ctor-deser-2.17.3-150200.5.16.1 * jackson-databind-javadoc-2.17.3-150200.3.23.1 * jackson-core-javadoc-2.17.3-150200.3.19.1 * jackson-module-mrbean-2.17.3-150200.5.16.1 * jackson-annotations-javadoc-2.17.3-150200.3.19.1 * jackson-dataformat-smile-2.17.3-150200.3.18.1 * jackson-modules-base-2.17.3-150200.5.16.1 * jackson-core-2.17.3-150200.3.19.1 * jackson-dataformats-binary-2.17.3-150200.3.18.1 * jackson-annotations-2.17.3-150200.3.19.1 * jackson-bom-2.17.3-150200.3.16.1 * jackson-module-jaxb-annotations-2.17.3-150200.5.16.1 * jackson-modules-base-javadoc-2.17.3-150200.5.16.1 * jackson-module-guice-2.17.3-150200.5.16.1 * jackson-dataformats-binary-javadoc-2.17.3-150200.3.18.1 * jackson-module-blackbird-2.17.3-150200.5.16.1 * jackson-module-osgi-2.17.3-150200.5.16.1 * jackson-databind-2.17.3-150200.3.23.1 * jackson-dataformat-cbor-2.17.3-150200.3.18.1 * jackson-module-afterburner-2.17.3-150200.5.16.1

1 0

SUSE-RU-2024:4056-1: moderate: Recommended update for apache2
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for apache2 Announcement ID: SUSE-RU-2024:4056-1 Release Date: 2024-11-26T05:38:51Z Rating: moderate References: * bsc#1227261 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that has one fix can now be installed. ## Description: This update for apache2 fixes the following issues: * Fixed the installation location (bsc#1227261) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4056=1 openSUSE-SLE-15.6-2024-4056=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4056=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4056=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-4056=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * apache2-utils-debuginfo-2.4.58-150600.5.29.1 * apache2-event-debuginfo-2.4.58-150600.5.29.1 * apache2-event-debugsource-2.4.58-150600.5.29.1 * apache2-prefork-debuginfo-2.4.58-150600.5.29.1 * apache2-debugsource-2.4.58-150600.5.29.1 * apache2-worker-2.4.58-150600.5.29.1 * apache2-utils-2.4.58-150600.5.29.1 * apache2-worker-debuginfo-2.4.58-150600.5.29.1 * apache2-prefork-2.4.58-150600.5.29.1 * apache2-worker-debugsource-2.4.58-150600.5.29.1 * apache2-2.4.58-150600.5.29.1 * apache2-devel-2.4.58-150600.5.29.1 * apache2-utils-debugsource-2.4.58-150600.5.29.1 * apache2-event-2.4.58-150600.5.29.1 * apache2-debuginfo-2.4.58-150600.5.29.1 * apache2-prefork-debugsource-2.4.58-150600.5.29.1 * openSUSE Leap 15.6 (noarch) * apache2-manual-2.4.58-150600.5.29.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-prefork-debuginfo-2.4.58-150600.5.29.1 * apache2-debugsource-2.4.58-150600.5.29.1 * apache2-prefork-2.4.58-150600.5.29.1 * apache2-2.4.58-150600.5.29.1 * apache2-debuginfo-2.4.58-150600.5.29.1 * apache2-prefork-debugsource-2.4.58-150600.5.29.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-event-debuginfo-2.4.58-150600.5.29.1 * apache2-event-debugsource-2.4.58-150600.5.29.1 * apache2-debugsource-2.4.58-150600.5.29.1 * apache2-event-2.4.58-150600.5.29.1 * apache2-debuginfo-2.4.58-150600.5.29.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-utils-debuginfo-2.4.58-150600.5.29.1 * apache2-worker-debugsource-2.4.58-150600.5.29.1 * apache2-worker-2.4.58-150600.5.29.1 * apache2-utils-2.4.58-150600.5.29.1 * apache2-worker-debuginfo-2.4.58-150600.5.29.1 * apache2-utils-debugsource-2.4.58-150600.5.29.1 * apache2-devel-2.4.58-150600.5.29.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1227261

1 0

SUSE-RU-2024:4057-1: moderate: Recommended update for selinux-policy
by OPENSUSE-UPDATES 26 Nov '24

26 Nov '24

# Recommended update for selinux-policy Announcement ID: SUSE-RU-2024:4057-1 Release Date: 2024-11-26T06:38:54Z Rating: moderate References: * bsc#1233198 Affected Products: * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Micro 5.5 An update that has one fix can now be installed. ## Description: This update for selinux-policy fixes the following issues: * Allow systemd-journal list cgroup directories (bsc#1233198) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-4057=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-4057=1 ## Package List: * openSUSE Leap Micro 5.5 (noarch) * selinux-policy-devel-20230511+git19.a02f4bde-150500.3.21.1 * selinux-policy-targeted-20230511+git19.a02f4bde-150500.3.21.1 * selinux-policy-20230511+git19.a02f4bde-150500.3.21.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * selinux-policy-devel-20230511+git19.a02f4bde-150500.3.21.1 * selinux-policy-targeted-20230511+git19.a02f4bde-150500.3.21.1 * selinux-policy-20230511+git19.a02f4bde-150500.3.21.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1233198

1 0