December 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:4410-1: moderate: Recommended update for amazon-dracut-config, google-dracut-config, microsoft-dracut-config
by OPENSUSE-UPDATES 23 Dec '24

23 Dec '24

# Recommended update for amazon-dracut-config, google-dracut-config, microsoft- dracut-config Announcement ID: SUSE-RU-2024:4410-1 Release Date: 2024-12-23T11:19:54Z Rating: moderate References: * bsc#1234708 Affected Products: * openSUSE Leap 15.3 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for amazon-dracut-config, google-dracut-config, microsoft-dracut- config fixes the following issues: * Fix support level to L3 (bsc#1234708) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-4410=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-4410=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-4410=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-4410=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-4410=1 ## Package List: * openSUSE Leap 15.3 (noarch) * google-dracut-config-0.0.1-150300.7.5.1 * amazon-dracut-config-0.0.1-150300.7.5.1 * microsoft-dracut-config-0.0.1-150300.7.5.1 * Public Cloud Module 15-SP3 (noarch) * google-dracut-config-0.0.1-150300.7.5.1 * amazon-dracut-config-0.0.1-150300.7.5.1 * microsoft-dracut-config-0.0.1-150300.7.5.1 * Public Cloud Module 15-SP4 (noarch) * google-dracut-config-0.0.1-150300.7.5.1 * amazon-dracut-config-0.0.1-150300.7.5.1 * microsoft-dracut-config-0.0.1-150300.7.5.1 * Public Cloud Module 15-SP5 (noarch) * google-dracut-config-0.0.1-150300.7.5.1 * amazon-dracut-config-0.0.1-150300.7.5.1 * microsoft-dracut-config-0.0.1-150300.7.5.1 * Public Cloud Module 15-SP6 (noarch) * google-dracut-config-0.0.1-150300.7.5.1 * amazon-dracut-config-0.0.1-150300.7.5.1 * microsoft-dracut-config-0.0.1-150300.7.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1234708

1 0

openSUSE-RU-2024:0411-1: moderate: Recommended update for libgarcon, libxfce4ui, libxfce4util, mousepad, ristretto, xfburn, xfce4-clipman-plugin, xfce4-kbdleds-plugin, xfce4-notifyd, xfce4-panel, xfce4-power-manager, xfce4-session, xfce4-settings, xfce4-taskmanager, xfce4-terminal
by maintenance＠opensuse.org 20 Dec '24

20 Dec '24

openSUSE Recommended Update: Recommended update for libgarcon, libxfce4ui, libxfce4util, mousepad, ristretto, xfburn, xfce4-clipman-plugin, xfce4-kbdleds-plugin, xfce4-notifyd, xfce4-panel, xfce4-power-manager, xfce4-session, xfce4-settings, xfce4-taskmanager, xfce4-terminal ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0411-1 Rating: moderate References: #1215641 #1216470 Affected Products: openSUSE Backports SLE-15-SP6 openSUSE Leap 15.6 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libgarcon, libxfce4ui, libxfce4util, mousepad, ristretto, xfburn, xfce4-clipman-plugin, xfce4-kbdleds-plugin, xfce4-notifyd, xfce4-panel, xfce4-power-manager, xfce4-session, xfce4-settings, xfce4-taskmanager, xfce4-terminal fixes the following issues: libgarcon update to version 4.18.2 * garcon-gtk: Remove weak ref on GarconMenu on finalize() * Use target desktop files instead of symlinks (Fixes #1) * garcon-gtk: Avoid populating a wrong menu * garcon-gtk: Prevent use-after-free when loading garcon menu * Add icon at 64px, clean up SVG metadata * Translation Updates libxfce4ui update to version 4.18.6 * shortcuts-grabber: Remove filtering by level - Update to version 4.18.5 * build: Search for bind_textdomain_codeset in libintl too * sm-client: Reset SmcConnection when IceConnection is closed on error * docs: Improve xfce_sm_client_get() * shortcuts-grabber: Fix filtering by level * shortcuts-grabber: Simplify filtering by group * shortcuts-grabber: Variable renaming * shortcuts-grabber: Filter grabbing by key level * Detect keyboard shortcuts with only single modifier keys on key release * Translation Updates - Update to version 4.18.2 * Search for bind_textdomain_codeset in libintl too * xfce-rc: Add support for the LANGUAGE environment variable * Add missing config.h includes * Improve checksum calculation (#17) * xfce-rc: Document the fact that delimiter escaping is not supported * xfce-rc: Properly write translated entries when available * Update bug report address - Update to version 0.6.2 * history: Default to yes when user is asked to restore previous session * build: Search for bind_textdomain_codeset in libintl too * tests: Increase timeout a bit * tests: Check for pwait/pidwait * dialogs: Do not reuse text buffer to test encoding in save-as dialog * history: Remove dead code * history: Rework paste menu * Move paste history to mousepad-history.c * window: Fix GVariant management * Do not scroll text view when zooming in or out * file-monitoring: Delay emission of "externaly-modified" signal * Fix a typo in a comment, additionnal → additional. * Add icons at missing sizes, clean up SVG metadata * search: Properly reset current match * Translation Updates - Update to version 0.13.2 * Fix duplicate mnemonic in File menu * image_viewer: Add missing sanity check * Fix criticals about unset GIO attributes * viewer: Fix possible crash when closing while an image is loading * Ensure that file manager proxy creation is non-blocking * Add icons at missing sizes, clean up SVG metadata * Translation Updates - Update to version 0.7.2 * Fix help dialog opening on unintended keypresses - Update to version 0.7.1 * build: clang: Silence -Wcast-align * build: clang: Fix -Wmissing-noreturn * build: clang: Fix -Wuninitialized * build: clang: Fix -Wunused-but-set-variable * Simulate F1 accelerator for Help * Add Contents entry to Help menu * build: Fix autoconf warning * Add missing end tag to ui file * I18n: Update po/LINGUAS list * build: Use XDT_VERSION_INIT and get rid of configure.ac.in * build: Switch from intltool to gettext * Fix bashism in configure test * Add missing G_END_DECLS * Remove roles from about dialog * Look for toast and img extensions, not just iso * Fix segfault when settings file is readonly * Update README.md * Translation Updates - Update to version 1.6.6 * Use X11 clipboard manager from libxfce4ui if available * collector: Fix sanity check * history: Make search case-sensitive * actions: Update gimp command (Fixes #96) * build: Use system wlr-protocols if avail or fall back to submodule * clipboard-manager: Add missing static qualifier * build: Lower xfce4-dev-tools requirements to stable version * Fix xfce_titled_dialog_create_action_area() deprecation * build: Simplify and clarify X11/Wayland distinction * build: Define our own windowing macro instead of extending GDK's * build: Add check for gdk-wayland * Translation Updates - Re-generate xfce4-clipman-plugin-relax-x11-version.patch - Update to version 1.6.5 * wayland: Hide skip-action-on-key-down setting * wayland: Hide persistent-primary-clipboard setting * Add set-text action to plugin app to allow D-Bus calls * Add Wayland impl for clipboard-manager * Make clipboard manager an interface and add X11 impl * Rename x11-clipboard-manager to clipboard-manager * Move paste_on_activate() to common * Make X11 dependencies optional and guard X11 code paths * cleanup: Remove unused project files * cleanup: Remove useless variable assignment * tests: Add missing include * history-dialog: Fix memory leak * ui: Mark 2 strings translatable * history-dialog: Keep paste-on-activate in sync with the settings (V2) * settings: Fix tooltip text * status-icon: Enable tooltip * status-icon: Add missing sanity check * popup-clipman: Replace deprecated gdk_keyboard_grab() * Replace deprecated gtk_menu_popup() when possible * collector: Do not restore default clipboard if not really empty * menu: Fix translated string * Update URLs * Translation Updates - Add xfce4-clipman-plugin-relax-x11-version.patch - Update to version 0.3.0 * Ability to show/hide leds * Add missing x11 linker flags - update to 0.9.6: * Use shared_module() for panel plugin meson build * Fix menu being destroyed before item activation handlers running * Translation Updates - update to 0.9.5: * Add an option to set the minimum width of notification windows * Fix include issue with meson build * Only emblem the panel plugin icon when theme lacks the 'new' variant * Destroy and recreate the panel menu every time it's popped up * Add meson build files * Fix uninitialized field warning * Move NOTIFICATIONS_SPEC_VERSION out of the build system * Remove redundant positioning code from Wayland path * Use different layer-shell anchors on Wayland * build: clang: Silence -Wcast-align * common: Explicitly depend on gio-unix-2.0 * Fix positioning on Wayland in multi-monitor setups * Set output on layer-shell surface on Wayland * Fix active-monitor notification positioning on Wayland * Translation Updates - Rebase xfce4-notifyd-relax-x11-version.patch - update to 0.9.4: * Clarify why the symbolic icons don't go in symbolic/status * Fix icons directory names * Fall back to monitor 0 if no primary monitor set * Add a fallback for drawing the unread notification emblem * Remove redundant icon embleming code * Fix opacity on notification hover * Translation Updates - Update to version 4.18.6 * Do not use g_log_set_always_fatal() * launcher: Ensure default icon in empty launchers * build: Search for bind_textdomain_codeset in libintl too * Fix memory management of GTypeModules * pager: Avoid recursion in WnckScren signal handler * pager: Do not query workspace count if screen is not initialized * libxfce4panel: Fix custom menu items management * clock: Create monitor proxy asynchronously * Add missing G_BEGIN_DECLS * Translation Updates - Update to version 4.18.4 * power: Fix overall charge state calculation * systray-icon: Handle scroll events * Only show desktop files in Xfce * main: Add missing newline in version info * Remove outdated references to xfce-goodies * pm-helper: Add missing GError initialization * settings: Fix debug log * settings: Fix inconsistent ref values between ui and gobject * Fix initial state of "Handle brightness keys" switch in settings UI * Ungrab brightness keys when not handling them * Revert "Fix system-sleep-inactivity min value" * Fix system-sleep-inactivity min value * Translation Updates - Update to version 4.18.3 * power: Fix inhibition management * settings: Present window to the user when already opened * settings: Remove useless g_application_hold/release() * A review of signal handlers disconnection * Remove #ifdefs DEBUG * brightness: Rework min level management * Refactor XfpmBrightness * Remove useless logs * backlight: Adjust some spacing for consistency / readability * backlight: Return earlier when brightness key event should not be handled * backlight: fix "handle display brightness keys" setting * Simplify brightness level management (Fixes #139) * Add missing properties for panel plugin settings * Use same debug function everywhere (V2) * brightness: Silence more warnings * Fix previous commit (again) * Fix previous commit * Fix g_spawn*_sync() wait status management * brightness: Fix g_spawn() wait status management * Silence some more warnings * Update docs url * power: Fix memory leak * settings: Fix hidden widgets when !has_lcd_brightness * backlight: Fix xfconf warning about cancelled operation * Lower some warning levels * Use same debug function everywhere * Fix upower object management * plugin: Fix non unreffed objects on finalize * systray-icon: Fix "floating object" warning on finalize * systray-icon: Fix "invalid property" warnings * Suspend system if lock screen fails on lid close (Fixes #209) * Add energy rate into device details * power: Fix use of g_hash_table_get_values() * Fix light locker integration (Fixes #201) * Add app icon at 64px, 96px, clean up SVG metadata * Fix description for pending states. * Translation Updates - Update to version 4.18.4 * Explicitly depend on gio-unix-2.0 * Replace deprecated xfce_spawn_command_line_on_screen() * Add missing G_(BEGIN|END)_DECLS * Add xapp for Wallpaper and Screenshot in xfce-portals.conf * Add minimal xdg-desktop-portal conf file for Xfce (Fixes #181) * Ensure all various XDG_* etc. env vars are passed to DBus and systemd * Add missing export for XDG_CONFIG_HOME and XDG_CACHE_HOME * Clean up SVG icon metadata for 24px, 48px actions * Add action icons at 96px * Add icons at missing sizes, clean up SVG metadata * Translation Updates - Added xfce-portals.conf file. XDP 0.18.0 requires desktop and other environments to have their own portals.conf drop in file and this is a workaround until a better fix lands (boo#1215641) - Added xdg-current-desktop-xfce.desktop to autostart to ensure variable XDG_CURRENT_DESKTOP variable is properly exposed to systemd (boo#1215641) - Relax requirement of branding package version to prevent xfce4-branding-openSUSE breaking on Leap due to repos being out of sync (boo#1216470) - Update to version 4.18.6 * Revert "x11: displays: Disable new outputs if /Notify is set to "Do nothing"" - Update to version 4.18.5 * keyboard-settings: Escape markup characters in command tooltips * xfce-randr: Take RR_DoubleScan and RR_Interlace flags into account * display-settings: Better fit with the way GApplication works * display-settings: Fix xfconf warning * display-settings: Fix cairo surface management * Fix memory leaks around display_settings_get_profiles() * x11: displays: Fix use of deprecation macros * x11: displays: Disable new outputs if /Notify is set to "Do nothing" * Translation Updates - Update to version 4.18.4 * display-settings: Fix memory management of confirmation dialog * xfsettingsd: displays: Always do some actions on RRScreenChangeNotify * xfsettingsd: displays: Fix memory leak * settings-manager: Support absolute path as icon name * Replace deprecated xfce_spawn(_command_line)?_on_screen * appearance: Match more dark themes (fixes #495) * appearance: Check for presence of color-scheme key * Apply matching xfwm4 when the switch is clicked * displays: Lower warning level * Translation Updates - Update to version 1.5.7 * build: Fix -Wcast-align warning from clang * Fix UBSan errors * settings-dialog: Fix XtmRefreshRate memory leak * Dark mode for process-statusbar * Dark mode for process-monitor * Allow multiple instances via command line option. * Fix blurry app icons when UI scale > 1 * Use symbolic window picker icon in toolbar * Fix broken "show-legend" setting sync * Translation Updates - Update to version 1.1.3 * prefs-dialog: Fix wrong assert * screen: Fix wrong assert * Translation Updates - Update to version 1.1.2 * Update tooltip when hovering over a hyperlink * build: Align CFLAGS with LDADD * prefs-dialog: Add missing strings to translate (#222) * dropdown: Default dropdown-toggle-focus to false * Add runtime guard for XfceSMClient * build: Restrict XfceSMClient to X11 * Determine cwd on FreeBSD in a native way instead of using linprocfs * window: Remove weak ref on prefs dialog in finalize() * build: Get rid of #ifdef G_ENABLE_DEBUG * Do not reconnect accels when closing last tab * build: Lower xfce4-dev-tools requirements to stable version * search-dialog: Use xfce_titled_dialog_set_default_response() * Translation Updates * backport fix for "paste unsafe text" dialog not popping up (gxo#apps/xfce4-terminal#299) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6: zypper in -t patch openSUSE-2024-411=1 - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-411=1 Package List: - openSUSE Leap 15.6 (noarch): libgarcon-branding-openSUSE-4.18.0+git4.79f6d44-lp156.2.2.16 libxfce4ui-branding-openSUSE-4.18.0+git4.79f6d44-lp156.2.2.16 thunar-volman-branding-openSUSE-4.18.0+git4.79f6d44-lp156.2.2.16 xfce4-notifyd-branding-openSUSE-4.18.0+git4.79f6d44-lp156.2.2.16 xfce4-panel-branding-openSUSE-4.18.0+git4.79f6d44-lp156.2.2.16 xfce4-power-manager-branding-openSUSE-4.18.0+git4.79f6d44-lp156.2.2.16 xfce4-session-branding-openSUSE-4.18.0+git4.79f6d44-lp156.2.2.16 xfce4-settings-branding-openSUSE-4.18.0+git4.79f6d44-lp156.2.2.16 xfdesktop-branding-openSUSE-4.18.0+git4.79f6d44-lp156.2.2.16 xfwm4-branding-openSUSE-4.18.0+git4.79f6d44-lp156.2.2.16 - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): exo-data-4.18.0-bp156.3.2.1 exo-debuginfo-4.18.0-bp156.3.2.1 exo-debugsource-4.18.0-bp156.3.2.1 exo-devel-4.18.0-bp156.3.2.1 exo-tools-4.18.0-bp156.3.2.1 exo-tools-debuginfo-4.18.0-bp156.3.2.1 libexo-2-0-4.18.0-bp156.3.2.1 libexo-2-0-debuginfo-4.18.0-bp156.3.2.1 libgarcon-1-0-4.18.2-bp156.4.3.1 libgarcon-devel-4.18.2-bp156.4.3.1 libmousepad0-0.6.2-bp156.2.3.1 libmousepad0-debuginfo-0.6.2-bp156.2.3.1 libxfce4kbd-private-3-0-4.18.6-bp156.2.3.1 libxfce4kbd-private-3-0-debuginfo-4.18.6-bp156.2.3.1 libxfce4panel-2_0-4-4.18.6-bp156.2.3.1 libxfce4panel-2_0-4-debuginfo-4.18.6-bp156.2.3.1 libxfce4ui-2-0-4.18.6-bp156.2.3.1 libxfce4ui-2-0-debuginfo-4.18.6-bp156.2.3.1 libxfce4ui-debuginfo-4.18.6-bp156.2.3.1 libxfce4ui-debugsource-4.18.6-bp156.2.3.1 libxfce4ui-devel-4.18.6-bp156.2.3.1 libxfce4ui-devel-debuginfo-4.18.6-bp156.2.3.1 libxfce4ui-tools-4.18.6-bp156.2.3.1 libxfce4ui-tools-debuginfo-4.18.6-bp156.2.3.1 libxfce4util-debuginfo-4.18.2-bp156.3.3.1 libxfce4util-debugsource-4.18.2-bp156.3.3.1 libxfce4util-devel-4.18.2-bp156.3.3.1 libxfce4util-tools-4.18.2-bp156.3.3.1 libxfce4util-tools-debuginfo-4.18.2-bp156.3.3.1 libxfce4util7-4.18.2-bp156.3.3.1 libxfce4util7-debuginfo-4.18.2-bp156.3.3.1 libxfconf-0-3-4.18.3-bp156.3.2.1 libxfconf-0-3-debuginfo-4.18.3-bp156.3.2.1 libxfconf-devel-4.18.3-bp156.3.2.1 mousepad-0.6.2-bp156.2.3.1 mousepad-debuginfo-0.6.2-bp156.2.3.1 mousepad-debugsource-0.6.2-bp156.2.3.1 mousepad-devel-0.6.2-bp156.2.3.1 ristretto-0.13.2-bp156.2.3.1 ristretto-debuginfo-0.13.2-bp156.2.3.1 ristretto-debugsource-0.13.2-bp156.2.3.1 typelib-1_0-Libxfce4panel-2_0-4.18.6-bp156.2.3.1 typelib-1_0-Libxfce4ui-2_0-4.18.6-bp156.2.3.1 typelib-1_0-Libxfce4util-1_0-4.18.2-bp156.3.3.1 typelib-1_0-Xfconf-0-4.18.3-bp156.3.2.1 xfburn-0.7.2-bp156.3.3.1 xfburn-debuginfo-0.7.2-bp156.3.3.1 xfburn-debugsource-0.7.2-bp156.3.3.1 xfce4-clipman-plugin-1.6.6-bp156.2.3.1 xfce4-clipman-plugin-debuginfo-1.6.6-bp156.2.3.1 xfce4-clipman-plugin-debugsource-1.6.6-bp156.2.3.1 xfce4-dev-tools-4.18.1-bp156.2.2.1 xfce4-dev-tools-debuginfo-4.18.1-bp156.2.2.1 xfce4-dev-tools-debugsource-4.18.1-bp156.2.2.1 xfce4-kbdleds-plugin-0.3.0-bp156.3.3.1 xfce4-kbdleds-plugin-debuginfo-0.3.0-bp156.3.3.1 xfce4-kbdleds-plugin-debugsource-0.3.0-bp156.3.3.1 xfce4-notifyd-0.9.6-bp156.2.3.1 xfce4-notifyd-debuginfo-0.9.6-bp156.2.3.1 xfce4-notifyd-debugsource-0.9.6-bp156.2.3.1 xfce4-panel-4.18.6-bp156.2.3.1 xfce4-panel-debuginfo-4.18.6-bp156.2.3.1 xfce4-panel-debugsource-4.18.6-bp156.2.3.1 xfce4-panel-devel-4.18.6-bp156.2.3.1 xfce4-panel-restore-defaults-4.18.6-bp156.2.3.1 xfce4-power-manager-4.18.4-bp156.2.3.1 xfce4-power-manager-debuginfo-4.18.4-bp156.2.3.1 xfce4-power-manager-debugsource-4.18.4-bp156.2.3.1 xfce4-power-manager-plugin-4.18.4-bp156.2.3.1 xfce4-power-manager-plugin-debuginfo-4.18.4-bp156.2.3.1 xfce4-session-4.18.4-bp156.2.3.1 xfce4-session-debuginfo-4.18.4-bp156.2.3.1 xfce4-session-debugsource-4.18.4-bp156.2.3.1 xfce4-settings-4.18.6-bp156.2.3.1 xfce4-settings-color-4.18.6-bp156.2.3.1 xfce4-settings-color-debuginfo-4.18.6-bp156.2.3.1 xfce4-settings-debuginfo-4.18.6-bp156.2.3.1 xfce4-settings-debugsource-4.18.6-bp156.2.3.1 xfce4-taskmanager-1.5.7-bp156.2.3.1 xfce4-taskmanager-debuginfo-1.5.7-bp156.2.3.1 xfce4-taskmanager-debugsource-1.5.7-bp156.2.3.1 xfce4-terminal-1.1.3-bp156.2.3.1 xfce4-terminal-debuginfo-1.1.3-bp156.2.3.1 xfce4-terminal-debugsource-1.1.3-bp156.2.3.1 xfconf-4.18.3-bp156.3.2.1 xfconf-debuginfo-4.18.3-bp156.3.2.1 xfconf-debugsource-4.18.3-bp156.3.2.1 xiccd-0.3.0-bp156.4.2.1 xiccd-debuginfo-0.3.0-bp156.4.2.1 xiccd-debugsource-0.3.0-bp156.4.2.1 - openSUSE Backports SLE-15-SP6 (noarch): exo-lang-4.18.0-bp156.3.2.1 libgarcon-branding-upstream-4.18.2-bp156.4.3.1 libgarcon-data-4.18.2-bp156.4.3.1 libgarcon-doc-4.18.2-bp156.4.3.1 libgarcon-lang-4.18.2-bp156.4.3.1 libxfce4ui-branding-upstream-4.18.6-bp156.2.3.1 libxfce4ui-doc-4.18.6-bp156.2.3.1 libxfce4ui-lang-4.18.6-bp156.2.3.1 libxfce4util-lang-4.18.2-bp156.3.3.1 mousepad-lang-0.6.2-bp156.2.3.1 ristretto-lang-0.13.2-bp156.2.3.1 xfburn-lang-0.7.2-bp156.3.3.1 xfce4-clipman-plugin-lang-1.6.6-bp156.2.3.1 xfce4-kbdleds-plugin-lang-0.3.0-bp156.3.3.1 xfce4-notifyd-branding-upstream-0.9.6-bp156.2.3.1 xfce4-notifyd-lang-0.9.6-bp156.2.3.1 xfce4-panel-branding-upstream-4.18.6-bp156.2.3.1 xfce4-panel-lang-4.18.6-bp156.2.3.1 xfce4-power-manager-branding-upstream-4.18.4-bp156.2.3.1 xfce4-power-manager-lang-4.18.4-bp156.2.3.1 xfce4-session-branding-upstream-4.18.4-bp156.2.3.1 xfce4-session-lang-4.18.4-bp156.2.3.1 xfce4-settings-branding-upstream-4.18.6-bp156.2.3.1 xfce4-settings-lang-4.18.6-bp156.2.3.1 xfce4-taskmanager-lang-1.5.7-bp156.2.3.1 xfce4-terminal-lang-1.1.3-bp156.2.3.1 xfconf-lang-4.18.3-bp156.3.2.1 References: https://bugzilla.suse.com/1215641 https://bugzilla.suse.com/1216470

1 0

SUSE-SU-2024:4396-1: moderate: Security update for python-aiohttp
by OPENSUSE-UPDATES 20 Dec '24

20 Dec '24

# Security update for python-aiohttp Announcement ID: SUSE-SU-2024:4396-1 Release Date: 2024-12-20T12:02:05Z Rating: moderate References: * bsc#1223098 Cross-References: * CVE-2024-27306 CVSS scores: * CVE-2024-27306 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.5 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-aiohttp fixes the following issues: * CVE-2024-27306: filenames and paths not escaped when generating index pages for static file handling. (bsc#1223098) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-4396=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-4396=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-4396=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-4396=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4396=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-4396=1 ## Package List: * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python-aiohttp-doc-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 * Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64) * python3-aiohttp-debuginfo-3.6.0-150100.3.24.1 * python-aiohttp-debugsource-3.6.0-150100.3.24.1 * python-aiohttp-doc-3.6.0-150100.3.24.1 * python3-aiohttp-3.6.0-150100.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2024-27306.html * https://bugzilla.suse.com/show_bug.cgi?id=1223098

1 0

SUSE-RU-2024:4399-1: important: Recommended update for pacemaker
by OPENSUSE-UPDATES 20 Dec '24

20 Dec '24

# Recommended update for pacemaker Announcement ID: SUSE-RU-2024:4399-1 Release Date: 2024-12-20T14:59:02Z Rating: important References: * bsc#1217259 * bsc#1228781 * bsc#1232613 * bsc#1233544 * jsc#PED-8311 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature and has four fixes can now be installed. ## Description: This update for pacemaker fixes the following issues: * libcib: Avoid memory leak in async calls (bsc#1233544) * CTS: Fix cts-lab --list * executor: Avoid use-after-free upon shutdown (bsc#1232613) * tools: Restore crmadmin default timeout to 30 seconds (bsc#1217259, bsc#1228781) * controld: Leave xml-src attribute empty when no DC selected (bsc#1217259, bsc#1228781) * libcrmcommon: Don't assert on failure to write errors * scheduler: Fixed memory leak when searching for unfencing devices * controller: Avoid memory leak on scheduler API error * libcib: Treat empty variant variables same as unset * libcrmcommon: Detect newly created alerts section * tools: Fix crm_rule man page section division * pacemaker-based: Client name can be NULL * scheduler: Correct format arguments * libcrmcommon: Mark configuration message handlers as printf-like ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4399=1 openSUSE-SLE-15.6-2024-4399=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2024-4399=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * pacemaker-debugsource-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-libs-debuginfo-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-devel-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-remote-debuginfo-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-remote-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-debuginfo-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-cli-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-libs-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-cli-debuginfo-2.1.7+20231219.0f7f88312-150600.6.6.1 * openSUSE Leap 15.6 (noarch) * python3-pacemaker-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-schemas-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-cts-2.1.7+20231219.0f7f88312-150600.6.6.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * pacemaker-debugsource-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-libs-debuginfo-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-devel-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-remote-debuginfo-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-remote-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-debuginfo-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-cli-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-libs-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-cli-debuginfo-2.1.7+20231219.0f7f88312-150600.6.6.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (noarch) * python3-pacemaker-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-schemas-2.1.7+20231219.0f7f88312-150600.6.6.1 * pacemaker-cts-2.1.7+20231219.0f7f88312-150600.6.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217259 * https://bugzilla.suse.com/show_bug.cgi?id=1228781 * https://bugzilla.suse.com/show_bug.cgi?id=1232613 * https://bugzilla.suse.com/show_bug.cgi?id=1233544 * https://jira.suse.com/browse/PED-8311

1 0

SUSE-SU-2024:4400-1: moderate: Security update for grpc
by OPENSUSE-UPDATES 20 Dec '24

20 Dec '24

# Security update for grpc Announcement ID: SUSE-SU-2024:4400-1 Release Date: 2024-12-20T15:27:39Z Rating: moderate References: * bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407 * CVE-2024-7246 CVSS scores: * CVE-2024-11407 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-11407 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H * CVE-2024-11407 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-7246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L * CVE-2024-7246 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for grpc fixes the following issues: * CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) * CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4400=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-4400=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * grpc-devel-debuginfo-1.60.0-150400.8.8.1 * upb-devel-1.60.0-150400.8.8.1 * grpc-devel-1.60.0-150400.8.8.1 * libgrpc1_60-debuginfo-1.60.0-150400.8.8.1 * libgrpc37-1.60.0-150400.8.8.1 * libupb37-1.60.0-150400.8.8.1 * libgrpc++1_60-1.60.0-150400.8.8.1 * grpc-debugsource-1.60.0-150400.8.8.1 * grpc-debuginfo-1.60.0-150400.8.8.1 * libupb37-debuginfo-1.60.0-150400.8.8.1 * libgrpc1_60-1.60.0-150400.8.8.1 * libgrpc37-debuginfo-1.60.0-150400.8.8.1 * libgrpc++1_60-debuginfo-1.60.0-150400.8.8.1 * openSUSE Leap 15.4 (noarch) * grpc-source-1.60.0-150400.8.8.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * grpc-debugsource-1.60.0-150400.8.8.1 * grpc-debuginfo-1.60.0-150400.8.8.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11407.html * https://www.suse.com/security/cve/CVE-2024-7246.html * https://bugzilla.suse.com/show_bug.cgi?id=1228919 * https://bugzilla.suse.com/show_bug.cgi?id=1233821

1 0

SUSE-SU-2024:4401-1: moderate: Security update for grpc
by OPENSUSE-UPDATES 20 Dec '24

20 Dec '24

# Security update for grpc Announcement ID: SUSE-SU-2024:4401-1 Release Date: 2024-12-20T15:28:10Z Rating: moderate References: * bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407 * CVE-2024-7246 CVSS scores: * CVE-2024-11407 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-11407 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H * CVE-2024-11407 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-7246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L * CVE-2024-7246 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for grpc fixes the following issues: * CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) * CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4401=1 openSUSE-SLE-15.6-2024-4401=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4401=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libgrpc37-debuginfo-1.60.0-150600.15.3.1 * grpc-debugsource-1.60.0-150600.15.3.1 * libgrpc++1_60-debuginfo-1.60.0-150600.15.3.1 * libgrpc1_60-debuginfo-1.60.0-150600.15.3.1 * grpc-devel-1.60.0-150600.15.3.1 * libgrpc37-1.60.0-150600.15.3.1 * libupb37-debuginfo-1.60.0-150600.15.3.1 * grpc-debuginfo-1.60.0-150600.15.3.1 * grpc-devel-debuginfo-1.60.0-150600.15.3.1 * libgrpc1_60-1.60.0-150600.15.3.1 * libupb37-1.60.0-150600.15.3.1 * upb-devel-1.60.0-150600.15.3.1 * libgrpc++1_60-1.60.0-150600.15.3.1 * openSUSE Leap 15.6 (noarch) * grpc-source-1.60.0-150600.15.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libgrpc37-debuginfo-1.60.0-150600.15.3.1 * grpc-debugsource-1.60.0-150600.15.3.1 * libgrpc++1_60-debuginfo-1.60.0-150600.15.3.1 * libgrpc1_60-debuginfo-1.60.0-150600.15.3.1 * grpc-devel-1.60.0-150600.15.3.1 * libgrpc37-1.60.0-150600.15.3.1 * libupb37-debuginfo-1.60.0-150600.15.3.1 * grpc-debuginfo-1.60.0-150600.15.3.1 * grpc-devel-debuginfo-1.60.0-150600.15.3.1 * libgrpc1_60-1.60.0-150600.15.3.1 * libupb37-1.60.0-150600.15.3.1 * libgrpc++1_60-1.60.0-150600.15.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11407.html * https://www.suse.com/security/cve/CVE-2024-7246.html * https://bugzilla.suse.com/show_bug.cgi?id=1228919 * https://bugzilla.suse.com/show_bug.cgi?id=1233821

1 0

SUSE-RU-2024:4402-1: moderate: Recommended update for libzypp
by OPENSUSE-UPDATES 20 Dec '24

20 Dec '24

# Recommended update for libzypp Announcement ID: SUSE-RU-2024:4402-1 Release Date: 2024-12-20T15:41:47Z Rating: moderate References: * bsc#1234749 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for libzypp fixes the following issues: * Url: queryparams without value should not have a trailing "=" ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4402=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4402=1 openSUSE-SLE-15.6-2024-4402=1 * SUSE Linux Enterprise High Performance Computing 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-4402=1 * SUSE Linux Enterprise Server 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-4402=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-4402=1 * SUSE Linux Enterprise Desktop 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-4402=1 ## Package List: * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libzypp-debuginfo-17.35.16-150600.3.39.1 * libzypp-debugsource-17.35.16-150600.3.39.1 * libzypp-devel-17.35.16-150600.3.39.1 * libzypp-17.35.16-150600.3.39.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libzypp-debuginfo-17.35.16-150600.3.39.1 * libzypp-devel-doc-17.35.16-150600.3.39.1 * libzypp-debugsource-17.35.16-150600.3.39.1 * libzypp-devel-17.35.16-150600.3.39.1 * libzypp-17.35.16-150600.3.39.1 * SUSE Linux Enterprise High Performance Computing 15 SP6 (aarch64 x86_64) * libzypp-17.35.16-150600.3.39.1 * SUSE Linux Enterprise Server 15 SP6 (aarch64 ppc64le s390x x86_64) * libzypp-17.35.16-150600.3.39.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libzypp-17.35.16-150600.3.39.1 * SUSE Linux Enterprise Desktop 15 SP6 (x86_64) * libzypp-17.35.16-150600.3.39.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1234749

1 0

SUSE-RU-2024:4403-1: moderate: Recommended update for libzypp
by OPENSUSE-UPDATES 20 Dec '24

20 Dec '24

# Recommended update for libzypp Announcement ID: SUSE-RU-2024:4403-1 Release Date: 2024-12-20T15:42:50Z Rating: moderate References: * bsc#1234749 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for libzypp fixes the following issues: * Url: queryparams without value should not have a trailing "=" ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-4403=1 openSUSE-SLE-15.5-2024-4403=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-4403=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4403=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4403=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4403=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4403=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-4403=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4403=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libzypp-devel-17.35.16-150500.6.31.1 * libzypp-devel-doc-17.35.16-150500.6.31.1 * libzypp-debugsource-17.35.16-150500.6.31.1 * libzypp-17.35.16-150500.6.31.1 * libzypp-debuginfo-17.35.16-150500.6.31.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libzypp-debuginfo-17.35.16-150500.6.31.1 * libzypp-debugsource-17.35.16-150500.6.31.1 * libzypp-17.35.16-150500.6.31.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libzypp-17.35.16-150500.6.31.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libzypp-17.35.16-150500.6.31.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libzypp-17.35.16-150500.6.31.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libzypp-17.35.16-150500.6.31.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libzypp-debuginfo-17.35.16-150500.6.31.1 * libzypp-debugsource-17.35.16-150500.6.31.1 * libzypp-17.35.16-150500.6.31.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libzypp-devel-17.35.16-150500.6.31.1 * libzypp-debuginfo-17.35.16-150500.6.31.1 * libzypp-debugsource-17.35.16-150500.6.31.1 * libzypp-17.35.16-150500.6.31.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1234749

1 0

SUSE-RU-2024:4404-1: moderate: Recommended update for libzypp
by OPENSUSE-UPDATES 20 Dec '24

20 Dec '24

# Recommended update for libzypp Announcement ID: SUSE-RU-2024:4404-1 Release Date: 2024-12-20T15:44:27Z Rating: moderate References: * bsc#1234749 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for libzypp fixes the following issues: * Url: queryparams without value should not have a trailing "=" ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4404=1 SUSE- SLE-INSTALLER-15-SP4-2024-4404=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-4404=1 SUSE-SLE-Product-SUSE- Manager-Retail-Branch-Server-4.3-2024-4404=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-4404=1 SUSE-SLE-Product-SUSE- Manager-Server-4.3-2024-4404=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4404=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-4404=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-4404=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-4404=1 SUSE-SLE-Product- SLES_SAP-15-SP4-2024-4404=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-4404=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4404=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4404=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4404=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4404=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4404=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4404=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4404=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4404=1 ## Package List: * SUSE Manager Proxy 4.3 (x86_64) * libzypp-devel-17.35.16-150400.3.105.1 * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libzypp-devel-17.35.16-150400.3.105.1 * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libzypp-devel-17.35.16-150400.3.105.1 * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-17.35.16-150400.3.105.1 * libzypp-devel-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * libzypp-devel-doc-17.35.16-150400.3.105.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libzypp-17.35.16-150400.3.105.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libzypp-17.35.16-150400.3.105.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libzypp-devel-17.35.16-150400.3.105.1 * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libzypp-17.35.16-150400.3.105.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libzypp-devel-17.35.16-150400.3.105.1 * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libzypp-devel-17.35.16-150400.3.105.1 * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS (x86_64) * libzypp-devel-17.35.16-150400.3.105.1 * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libzypp-devel-17.35.16-150400.3.105.1 * libzypp-17.35.16-150400.3.105.1 * libzypp-debugsource-17.35.16-150400.3.105.1 * libzypp-debuginfo-17.35.16-150400.3.105.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1234749

1 0

SUSE-SU-2024:4390-1: moderate: Security update for haproxy
by OPENSUSE-UPDATES 20 Dec '24

20 Dec '24

# Security update for haproxy Announcement ID: SUSE-SU-2024:4390-1 Release Date: 2024-12-20T09:06:35Z Rating: moderate References: * bsc#1233973 Cross-References: * CVE-2024-53008 CVSS scores: * CVE-2024-53008 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-53008 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-53008 ( NVD ): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for haproxy fixes the following issues: * CVE-2024-53008: Fixed HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server (bsc#1233973) Other fixes: * Update to version 2.8.11 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4390=1 openSUSE-SLE-15.6-2024-4390=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2024-4390=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * haproxy-debugsource-2.8.11+git0.01c1056a4-150600.3.3.1 * haproxy-2.8.11+git0.01c1056a4-150600.3.3.1 * haproxy-debuginfo-2.8.11+git0.01c1056a4-150600.3.3.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * haproxy-debugsource-2.8.11+git0.01c1056a4-150600.3.3.1 * haproxy-2.8.11+git0.01c1056a4-150600.3.3.1 * haproxy-debuginfo-2.8.11+git0.01c1056a4-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-53008.html * https://bugzilla.suse.com/show_bug.cgi?id=1233973

1 0