December 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:4434-1: important: Recommended update for rmt-server
by OPENSUSE-UPDATES 30 Dec '24

30 Dec '24

# Recommended update for rmt-server Announcement ID: SUSE-RU-2024:4434-1 Release Date: 2024-12-30T09:34:07Z Rating: important References: * bsc#1229152 * bsc#1230154 * bsc#1230157 * bsc#1230419 * bsc#1233308 * bsc#1233314 * bsc#1234641 Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has seven fixes can now be installed. ## Description: This update for rmt-server fixes the following issues: * Fixed an issue where custom sync/mirror timer config was overwritten on package update * Fixed an issue where the column size for repository and file paths was too small (bsc#1229152) * suseconnect client user-agents are now forwarded to SCC * rmt- server-pubcloud: * Fixed an issue with LTSS product verification (bsc#1230154) * Fixed an issue with activations check when no product info is available (bsc#1230157) * Fixed an issue with Azure SCC connection (bsc#1233314) * Deny access of Azure Basic type images to LTSS * Fixed an issue where SLE Micro systems could not access SLES repositories (bsc#1230419) * Fixed an issue where system token rotation was not skipped in read-only APIs * Fixed an issue where RMT didn't handle the new dl.suse.com CDN domain (bsc#1234641) * Fixed an issue where RMT metadata was not correctly cleaned up after repo update (bsc#1233308) * Fixed an issue with packages that have a path longer 255 characters (bsc#1229152) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4434=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4434=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4434=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4434=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4434=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-4434=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-4434=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4434=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-4434=1 ## Package List: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rmt-server-debuginfo-2.20-150400.3.34.1 * rmt-server-debugsource-2.20-150400.3.34.1 * rmt-server-config-2.20-150400.3.34.1 * rmt-server-2.20-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rmt-server-debuginfo-2.20-150400.3.34.1 * rmt-server-debugsource-2.20-150400.3.34.1 * rmt-server-config-2.20-150400.3.34.1 * rmt-server-2.20-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.20-150400.3.34.1 * rmt-server-debugsource-2.20-150400.3.34.1 * rmt-server-config-2.20-150400.3.34.1 * rmt-server-2.20-150400.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rmt-server-debuginfo-2.20-150400.3.34.1 * rmt-server-debugsource-2.20-150400.3.34.1 * rmt-server-config-2.20-150400.3.34.1 * rmt-server-2.20-150400.3.34.1 * SUSE Manager Proxy 4.3 (x86_64) * rmt-server-debuginfo-2.20-150400.3.34.1 * rmt-server-debugsource-2.20-150400.3.34.1 * rmt-server-config-2.20-150400.3.34.1 * rmt-server-2.20-150400.3.34.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * rmt-server-debuginfo-2.20-150400.3.34.1 * rmt-server-debugsource-2.20-150400.3.34.1 * rmt-server-config-2.20-150400.3.34.1 * rmt-server-2.20-150400.3.34.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * rmt-server-debuginfo-2.20-150400.3.34.1 * rmt-server-debugsource-2.20-150400.3.34.1 * rmt-server-config-2.20-150400.3.34.1 * rmt-server-2.20-150400.3.34.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.20-150400.3.34.1 * rmt-server-debugsource-2.20-150400.3.34.1 * rmt-server-2.20-150400.3.34.1 * rmt-server-config-2.20-150400.3.34.1 * rmt-server-pubcloud-2.20-150400.3.34.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.20-150400.3.34.1 * rmt-server-debugsource-2.20-150400.3.34.1 * rmt-server-pubcloud-2.20-150400.3.34.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1229152 * https://bugzilla.suse.com/show_bug.cgi?id=1230154 * https://bugzilla.suse.com/show_bug.cgi?id=1230157 * https://bugzilla.suse.com/show_bug.cgi?id=1230419 * https://bugzilla.suse.com/show_bug.cgi?id=1233308 * https://bugzilla.suse.com/show_bug.cgi?id=1233314 * https://bugzilla.suse.com/show_bug.cgi?id=1234641

1 0

SUSE-RU-2024:4430-1: important: Recommended update for rmt-server
by OPENSUSE-UPDATES 30 Dec '24

30 Dec '24

# Recommended update for rmt-server Announcement ID: SUSE-RU-2024:4430-1 Release Date: 2024-12-27T22:14:16Z Rating: important References: * bsc#1229152 * bsc#1230154 * bsc#1230157 * bsc#1230419 * bsc#1233308 * bsc#1233314 * bsc#1234641 Affected Products: * openSUSE Leap 15.3 * Public Cloud Module 15-SP3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that has seven fixes can now be installed. ## Description: This update for rmt-server fixes the following issues: * Fixed an issue where custom sync/mirror timer config was overwritten on package update * Fixed an issue where the column size for repository and file paths was too small (bsc#1229152) * suseconnect client user-agents are now forwarded to SCC * rmt-server-pubcloud: * Fixed an issue with LTSS product verification (bsc#1230154) * Fixed an issue with activations check when no product info is available (bsc#1230157) * Fixed an issue with Azure SCC connection (bsc#1233314) * Deny access of Azure Basic type images to LTSS * Fixed an issue where SLE Micro systems could not access SLES repositories (bsc#1230419) * Fixed an issue where system token rotation was not skipped in read-only APIs * Fixed an issue where RMT didn't handle the new dl.suse.com CDN domain (bsc#1234641) * Fixed an issue where RMT metadata was not correctly cleaned up after repo update (bsc#1233308) * Fixed an issue with packages that have a path longer 255 characters (bsc#1229152) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-4430=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-4430=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-4430=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-4430=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-4430=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-4430=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * rmt-server-pubcloud-2.20-150300.3.46.1 * rmt-server-debuginfo-2.20-150300.3.46.1 * rmt-server-2.20-150300.3.46.1 * rmt-server-config-2.20-150300.3.46.1 * rmt-server-debugsource-2.20-150300.3.46.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.20-150300.3.46.1 * rmt-server-pubcloud-2.20-150300.3.46.1 * rmt-server-debugsource-2.20-150300.3.46.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * rmt-server-debuginfo-2.20-150300.3.46.1 * rmt-server-debugsource-2.20-150300.3.46.1 * rmt-server-config-2.20-150300.3.46.1 * rmt-server-2.20-150300.3.46.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.20-150300.3.46.1 * rmt-server-debugsource-2.20-150300.3.46.1 * rmt-server-config-2.20-150300.3.46.1 * rmt-server-2.20-150300.3.46.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * rmt-server-debuginfo-2.20-150300.3.46.1 * rmt-server-debugsource-2.20-150300.3.46.1 * rmt-server-config-2.20-150300.3.46.1 * rmt-server-2.20-150300.3.46.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * rmt-server-debuginfo-2.20-150300.3.46.1 * rmt-server-debugsource-2.20-150300.3.46.1 * rmt-server-config-2.20-150300.3.46.1 * rmt-server-2.20-150300.3.46.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1229152 * https://bugzilla.suse.com/show_bug.cgi?id=1230154 * https://bugzilla.suse.com/show_bug.cgi?id=1230157 * https://bugzilla.suse.com/show_bug.cgi?id=1230419 * https://bugzilla.suse.com/show_bug.cgi?id=1233308 * https://bugzilla.suse.com/show_bug.cgi?id=1233314 * https://bugzilla.suse.com/show_bug.cgi?id=1234641

1 0

SUSE-RU-2024:4431-1: important: Recommended update for rmt-server
by OPENSUSE-UPDATES 30 Dec '24

30 Dec '24

# Recommended update for rmt-server Announcement ID: SUSE-RU-2024:4431-1 Release Date: 2024-12-30T03:34:27Z Rating: important References: * bsc#1229152 * bsc#1230154 * bsc#1230157 * bsc#1230419 * bsc#1233308 * bsc#1233314 * bsc#1234641 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has seven fixes can now be installed. ## Description: This update for rmt-server fixes the following issues: * Fixed an issue where custom sync/mirror timer config was overwritten on package update * Fixed an issue where the column size for repository and file paths was too small (bsc#1229152) * suseconnect client user-agents are now forwarded to SCC * rmt- server-pubcloud: * Fixed an issue with LTSS product verification (bsc#1230154) * Fixed an issue with activations check when no product info is available (bsc#1230157) * Fixed an issue with Azure SCC connection (bsc#1233314) * Deny access of Azure Basic type images to LTSS * Fixed an issue where SLE Micro systems could not access SLES repositories (bsc#1230419) * Fixed an issue where system token rotation was not skipped in read-only APIs * Fixed an issue where RMT didn't handle the new dl.suse.com CDN domain (bsc#1234641) * Fixed an issue where RMT metadata was not correctly cleaned up after repo update (bsc#1233308) * Fixed an issue with packages that have a path longer 255 characters (bsc#1229152) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-4431=1 openSUSE-SLE-15.5-2024-4431=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4431=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-4431=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-4431=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-4431=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-4431=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2024-4431=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2024-4431=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2024-4431=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2024-4431=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rmt-server-config-2.20-150500.3.25.1 * rmt-server-pubcloud-2.20-150500.3.25.1 * rmt-server-2.20-150500.3.25.1 * rmt-server-debuginfo-2.20-150500.3.25.1 * rmt-server-debugsource-2.20-150500.3.25.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * rmt-server-config-2.20-150500.3.25.1 * rmt-server-pubcloud-2.20-150500.3.25.1 * rmt-server-2.20-150500.3.25.1 * rmt-server-debuginfo-2.20-150500.3.25.1 * rmt-server-debugsource-2.20-150500.3.25.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rmt-server-pubcloud-2.20-150500.3.25.1 * rmt-server-debuginfo-2.20-150500.3.25.1 * rmt-server-debugsource-2.20-150500.3.25.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * rmt-server-pubcloud-2.20-150500.3.25.1 * rmt-server-debuginfo-2.20-150500.3.25.1 * rmt-server-debugsource-2.20-150500.3.25.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rmt-server-debugsource-2.20-150500.3.25.1 * rmt-server-config-2.20-150500.3.25.1 * rmt-server-debuginfo-2.20-150500.3.25.1 * rmt-server-2.20-150500.3.25.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * rmt-server-debugsource-2.20-150500.3.25.1 * rmt-server-config-2.20-150500.3.25.1 * rmt-server-debuginfo-2.20-150500.3.25.1 * rmt-server-2.20-150500.3.25.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * rmt-server-debugsource-2.20-150500.3.25.1 * rmt-server-config-2.20-150500.3.25.1 * rmt-server-debuginfo-2.20-150500.3.25.1 * rmt-server-2.20-150500.3.25.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * rmt-server-debugsource-2.20-150500.3.25.1 * rmt-server-config-2.20-150500.3.25.1 * rmt-server-debuginfo-2.20-150500.3.25.1 * rmt-server-2.20-150500.3.25.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rmt-server-debugsource-2.20-150500.3.25.1 * rmt-server-config-2.20-150500.3.25.1 * rmt-server-debuginfo-2.20-150500.3.25.1 * rmt-server-2.20-150500.3.25.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * rmt-server-debugsource-2.20-150500.3.25.1 * rmt-server-config-2.20-150500.3.25.1 * rmt-server-debuginfo-2.20-150500.3.25.1 * rmt-server-2.20-150500.3.25.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1229152 * https://bugzilla.suse.com/show_bug.cgi?id=1230154 * https://bugzilla.suse.com/show_bug.cgi?id=1230157 * https://bugzilla.suse.com/show_bug.cgi?id=1230419 * https://bugzilla.suse.com/show_bug.cgi?id=1233308 * https://bugzilla.suse.com/show_bug.cgi?id=1233314 * https://bugzilla.suse.com/show_bug.cgi?id=1234641

1 0

openSUSE-SU-2024:0417-1: important: Security update for chromium
by opensuse-security＠opensuse.org 28 Dec '24

28 Dec '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0417-1 Rating: important References: Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This security update for Chromium to version 131.0.6778.204 (boo#1234704) fixes: * CVE-2024-12692: Type Confusion in V8 * CVE-2024-12693: Out of bounds memory access in V8 * CVE-2024-12694: Use after free in Compositing * CVE-2024-12695: Out of bounds write in V8 * Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-417=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-417=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 x86_64): chromedriver-131.0.6778.204-bp156.2.65.1 chromedriver-debuginfo-131.0.6778.204-bp156.2.65.1 chromium-131.0.6778.204-bp156.2.65.1 chromium-debuginfo-131.0.6778.204-bp156.2.65.1 - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-131.0.6778.204-bp155.2.153.1 chromium-131.0.6778.204-bp155.2.153.1 References:

1 0

SUSE-SU-2024:4428-1: moderate: Security update for python-grpcio
by OPENSUSE-UPDATES 27 Dec '24

27 Dec '24

# Security update for python-grpcio Announcement ID: SUSE-SU-2024:4428-1 Release Date: 2024-12-27T10:16:24Z Rating: moderate References: * bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407 * CVE-2024-7246 CVSS scores: * CVE-2024-11407 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-11407 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H * CVE-2024-11407 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-7246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L * CVE-2024-7246 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-grpcio fixes the following issues: * CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) * CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4428=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-4428=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python-grpcio-debugsource-1.60.1-150400.9.10.1 * python311-grpcio-1.60.1-150400.9.10.1 * python311-grpcio-debuginfo-1.60.1-150400.9.10.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python-grpcio-debugsource-1.60.1-150400.9.10.1 * python311-grpcio-1.60.1-150400.9.10.1 * python311-grpcio-debuginfo-1.60.1-150400.9.10.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11407.html * https://www.suse.com/security/cve/CVE-2024-7246.html * https://bugzilla.suse.com/show_bug.cgi?id=1228919 * https://bugzilla.suse.com/show_bug.cgi?id=1233821

1 0

SUSE-SU-2024:4429-1: moderate: Security update for python-grpcio
by OPENSUSE-UPDATES 27 Dec '24

27 Dec '24

# Security update for python-grpcio Announcement ID: SUSE-SU-2024:4429-1 Release Date: 2024-12-27T10:16:46Z Rating: moderate References: * bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407 * CVE-2024-7246 CVSS scores: * CVE-2024-11407 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-11407 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H * CVE-2024-11407 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-7246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L * CVE-2024-7246 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-grpcio fixes the following issues: * CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) * CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-4429=1 openSUSE-SLE-15.5-2024-4429=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-4429=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-4429=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * python311-grpcio-debuginfo-1.60.1-150500.12.6.1 * python-grpcio-debugsource-1.60.1-150500.12.6.1 * python311-grpcio-1.60.1-150500.12.6.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-grpcio-debuginfo-1.60.1-150500.12.6.1 * python-grpcio-debugsource-1.60.1-150500.12.6.1 * python311-grpcio-1.60.1-150500.12.6.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-grpcio-debuginfo-1.60.1-150500.12.6.1 * python-grpcio-debugsource-1.60.1-150500.12.6.1 * python311-grpcio-1.60.1-150500.12.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11407.html * https://www.suse.com/security/cve/CVE-2024-7246.html * https://bugzilla.suse.com/show_bug.cgi?id=1228919 * https://bugzilla.suse.com/show_bug.cgi?id=1233821

1 0

SUSE-RU-2024:4426-1: moderate: Recommended update for google-guest-configs
by OPENSUSE-UPDATES 27 Dec '24

27 Dec '24

# Recommended update for google-guest-configs Announcement ID: SUSE-RU-2024:4426-1 Release Date: 2024-12-27T07:46:24Z Rating: moderate References: * bsc#1231775 * bsc#1231776 * bsc#1233625 * bsc#1233626 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has four fixes can now be installed. ## Description: This update for google-guest-configs fixes the following issues: * Update to version 20241121.00 (bsc#1233625, bsc#1233626) * Temporarily revert google_set_multiqueue changes for release * Remove IDPF devices from renaming rules * gce-nic-naming: Exit 1 so that udev ignores the rule on error * Remove Apt IPv4 only config for Debian and Ubuntu * Add GCE intent based NIC naming tools * google_set_multiqueue: skip set_irq if NIC is not a gvnic device * Update to version 20241021.00 (bsc#1231775, bsc#1231776) * Add GCE-specific config for systemd-resolved * Update google_set_multiqueue to enable on A3Ultra family * Update OWNERS * Depend on jq in enterprise linux * Always use IP from primary NIC in the networkd-dispatcher routable hook * Call google_set_hostname on openSUSE and when the agent is configured to manage hostname and FQDN, let it * Include systemd-networkd hook in Ubuntu packaging * Fix the name for A3 Edge VMs * Update is_a3_platform to include A3-edge shape * Add systemd-networkd hostname hook * Add hostname hook for NetworkManager without dhclient compat script ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4426=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4426=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4426=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-4426=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-4426=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-4426=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-4426=1 ## Package List: * openSUSE Leap 15.4 (noarch) * google-guest-configs-20241121.00-150400.13.14.1 * openSUSE Leap 15.5 (noarch) * google-guest-configs-20241121.00-150400.13.14.1 * openSUSE Leap 15.6 (noarch) * google-guest-configs-20241121.00-150400.13.14.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * google-guest-configs-20241121.00-150400.13.14.1 * Public Cloud Module 15-SP4 (noarch) * google-guest-configs-20241121.00-150400.13.14.1 * Public Cloud Module 15-SP5 (noarch) * google-guest-configs-20241121.00-150400.13.14.1 * Public Cloud Module 15-SP6 (noarch) * google-guest-configs-20241121.00-150400.13.14.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231775 * https://bugzilla.suse.com/show_bug.cgi?id=1231776 * https://bugzilla.suse.com/show_bug.cgi?id=1233625 * https://bugzilla.suse.com/show_bug.cgi?id=1233626

1 0

SUSE-RU-2024:4427-1: important: Recommended update for pacemaker
by OPENSUSE-UPDATES 27 Dec '24

27 Dec '24

# Recommended update for pacemaker Announcement ID: SUSE-RU-2024:4427-1 Release Date: 2024-12-27T07:46:33Z Rating: important References: * bsc#1217259 * bsc#1228781 * bsc#1232613 * jsc#PED-8311 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has three fixes can now be installed. ## Description: This update for pacemaker fixes the following issues: * executor: avoid use-after-free upon shutdown (bsc#1232613) * tools: restore crmadmin default timeout to 30 seconds (bsc#1217259, bsc#1228781) * controld: leave xml-src attribute empty when no DC selected #2902 (bsc#1217259, bsc#1228781) * libcrmcommon: don't assert on failure to write errors * scheduler: fixed memory leak when searching for unfencing devices * controller: avoid memory leak on scheduler API error * libcib: treat empty variant variables same as unset * tools: fix crm_rule man page section division * pacemaker-based: client name can be NULL * scheduler: correct format arguments ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4427=1 SUSE-2024-4427=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-4427=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * pacemaker-libs-debuginfo-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-libs-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-debuginfo-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-debugsource-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-cli-debuginfo-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-devel-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-remote-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-remote-debuginfo-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-cli-2.1.5+20221208.a3f44794f-150500.6.20.1 * openSUSE Leap 15.5 (noarch) * pacemaker-cts-2.1.5+20221208.a3f44794f-150500.6.20.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * pacemaker-libs-debuginfo-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-libs-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-debuginfo-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-debugsource-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-cli-debuginfo-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-devel-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-remote-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-remote-debuginfo-2.1.5+20221208.a3f44794f-150500.6.20.1 * pacemaker-cli-2.1.5+20221208.a3f44794f-150500.6.20.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (noarch) * pacemaker-cts-2.1.5+20221208.a3f44794f-150500.6.20.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217259 * https://bugzilla.suse.com/show_bug.cgi?id=1228781 * https://bugzilla.suse.com/show_bug.cgi?id=1232613 * https://jira.suse.com/browse/PED-8311

1 0

openSUSE-RU-2024:0416-1: moderate: Recommended update for kanidm
by maintenance＠opensuse.org 25 Dec '24

25 Dec '24

openSUSE Recommended Update: Recommended update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0416-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kanidm fixes the following issues: Release 1.4.5: * nss/pam resolver should reauth faster (#3309) * Further SCIM sync testing, minor fixes (#3305) * Automatically trigger passkeys on login view (#3307) * Re-add enrol another device flow * Improved Cookie Removal * Allow reseting account policy values to defaults (#3306) * Incorrect member name in groups (#3302) * SCIM Sync Missing Annotation (#3300) * Ignore system users for UPG synthesiseation (#3297) * Limit OAuth2 resumption to session (#3296) * Use specific errors for intent token revoked (#3291) * Autocomplete password during reauth with TOTP (#3290) * Add CORS headers to jwks and userinfo (#3283) - Require system-user-nobody to prevent install ordering issue with invalid rpc/statd users Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-416=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 x86_64): kanidm-1.4.5~git0.a7fabde-bp156.18.1 kanidm-clients-1.4.5~git0.a7fabde-bp156.18.1 kanidm-docs-1.4.5~git0.a7fabde-bp156.18.1 kanidm-server-1.4.5~git0.a7fabde-bp156.18.1 kanidm-unixd-clients-1.4.5~git0.a7fabde-bp156.18.1 References:

1 0

SUSE-SU-2024:4421-1: moderate: Security update for poppler
by OPENSUSE-UPDATES 24 Dec '24

24 Dec '24

# Security update for poppler Announcement ID: SUSE-SU-2024:4421-1 Release Date: 2024-12-24T12:40:42Z Rating: moderate References: * bsc#1234795 Cross-References: * CVE-2024-56378 CVSS scores: * CVE-2024-56378 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-56378 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * openSUSE Leap 15.4 An update that solves one vulnerability can now be installed. ## Description: This update for poppler fixes the following issues: * CVE-2024-56378: Fixed out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc (bsc#1234795) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4421=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libpoppler-qt5-1-debuginfo-22.01.0-150400.3.25.1 * libpoppler117-debuginfo-22.01.0-150400.3.25.1 * poppler-debugsource-22.01.0-150400.3.25.1 * libpoppler-glib8-22.01.0-150400.3.25.1 * libpoppler-cpp0-debuginfo-22.01.0-150400.3.25.1 * libpoppler-glib8-debuginfo-22.01.0-150400.3.25.1 * typelib-1_0-Poppler-0_18-22.01.0-150400.3.25.1 * libpoppler-qt6-3-debuginfo-22.01.0-150400.3.25.1 * poppler-tools-debuginfo-22.01.0-150400.3.25.1 * libpoppler-qt5-1-22.01.0-150400.3.25.1 * libpoppler-glib-devel-22.01.0-150400.3.25.1 * libpoppler117-22.01.0-150400.3.25.1 * poppler-tools-22.01.0-150400.3.25.1 * libpoppler-qt6-3-22.01.0-150400.3.25.1 * libpoppler-qt6-devel-22.01.0-150400.3.25.1 * poppler-qt6-debugsource-22.01.0-150400.3.25.1 * libpoppler-qt5-devel-22.01.0-150400.3.25.1 * poppler-qt5-debugsource-22.01.0-150400.3.25.1 * libpoppler-devel-22.01.0-150400.3.25.1 * libpoppler-cpp0-22.01.0-150400.3.25.1 * openSUSE Leap 15.4 (x86_64) * libpoppler-qt5-1-32bit-22.01.0-150400.3.25.1 * libpoppler-qt5-1-32bit-debuginfo-22.01.0-150400.3.25.1 * libpoppler-cpp0-32bit-debuginfo-22.01.0-150400.3.25.1 * libpoppler117-32bit-debuginfo-22.01.0-150400.3.25.1 * libpoppler117-32bit-22.01.0-150400.3.25.1 * libpoppler-glib8-32bit-22.01.0-150400.3.25.1 * libpoppler-cpp0-32bit-22.01.0-150400.3.25.1 * libpoppler-glib8-32bit-debuginfo-22.01.0-150400.3.25.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpoppler117-64bit-22.01.0-150400.3.25.1 * libpoppler-glib8-64bit-debuginfo-22.01.0-150400.3.25.1 * libpoppler-glib8-64bit-22.01.0-150400.3.25.1 * libpoppler-qt5-1-64bit-22.01.0-150400.3.25.1 * libpoppler-qt5-1-64bit-debuginfo-22.01.0-150400.3.25.1 * libpoppler117-64bit-debuginfo-22.01.0-150400.3.25.1 * libpoppler-cpp0-64bit-debuginfo-22.01.0-150400.3.25.1 * libpoppler-cpp0-64bit-22.01.0-150400.3.25.1 ## References: * https://www.suse.com/security/cve/CVE-2024-56378.html * https://bugzilla.suse.com/show_bug.cgi?id=1234795

1 0