December 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:4391-1: moderate: Recommended update for docker-stable
by OPENSUSE-UPDATES 20 Dec '24

20 Dec '24

# Recommended update for docker-stable Announcement ID: SUSE-RU-2024:4391-1 Release Date: 2024-12-20T09:13:48Z Rating: moderate References: * bsc#1231348 * bsc#1232999 Cross-References: * CVE-2024-23653 * CVE-2024-41110 CVSS scores: * CVE-2024-23653 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23653 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41110 ( SUSE ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for docker-stable fixes the following issues: * Update docker-buildx to v0.19.2. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.19.2>. Some notable changelogs from the last update: * <https://github.com/docker/buildx/releases/tag/v0.19.0> * <https://github.com/docker/buildx/releases/tag/v0.18.0> * Add a new toggle file /etc/docker/suse-secrets-enable which allows users to disable the SUSEConnect integration with Docker (which creates special mounts in /run/secrets to allow container-suseconnect to authenticate containers with registries on registered hosts). bsc#1231348 bsc#1232999 In order to disable these mounts, just do echo 0 > /etc/docker/suse-secrets- enable and restart Docker. In order to re-enable them, just do echo 1 > /etc/docker/suse-secrets-enable and restart Docker. Docker will output information on startup to tell you whether the SUSE secrets feature is enabled or not. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-4391=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-4391=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-4391=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4391=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4391=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-4391=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4391=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-4391=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4391=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-4391=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4391=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4391=1 ## Package List: * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * Containers Module 15-SP5 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * Containers Module 15-SP6 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * SUSE Enterprise Storage 7.1 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * openSUSE Leap 15.5 (noarch) * docker-stable-fish-completion-24.0.9_ce-150000.1.8.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * docker-stable-rootless-extras-24.0.9_ce-150000.1.8.1 * docker-stable-zsh-completion-24.0.9_ce-150000.1.8.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.8.1 * docker-stable-24.0.9_ce-150000.1.8.1 * openSUSE Leap 15.6 (noarch) * docker-stable-fish-completion-24.0.9_ce-150000.1.8.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.8.1 * docker-stable-rootless-extras-24.0.9_ce-150000.1.8.1 * docker-stable-zsh-completion-24.0.9_ce-150000.1.8.1 ## References: * https://www.suse.com/security/cve/CVE-2024-23653.html * https://www.suse.com/security/cve/CVE-2024-41110.html * https://bugzilla.suse.com/show_bug.cgi?id=1231348 * https://bugzilla.suse.com/show_bug.cgi?id=1232999

1 0

SUSE-SU-2024:4392-1: important: Security update for emacs
by OPENSUSE-UPDATES 20 Dec '24

20 Dec '24

# Security update for emacs Announcement ID: SUSE-SU-2024:4392-1 Release Date: 2024-12-20T10:20:29Z Rating: important References: * bsc#1233894 Cross-References: * CVE-2024-53920 CVSS scores: * CVE-2024-53920 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53920 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-53920 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for emacs fixes the following issues: * CVE-2024-53920: Fixed arbitrary code execution via Lisp macro expansion (bsc#1233894) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4392=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4392=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4392=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4392=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4392=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-4392=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-4392=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-4392=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-4392=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-4392=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-4392=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-4392=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-4392=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-4392=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-4392=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * openSUSE Leap 15.4 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * openSUSE Leap 15.5 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * openSUSE Leap 15.6 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * Basesystem Module 15-SP5 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * Basesystem Module 15-SP6 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS (x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-x11-debuginfo-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-x11-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Manager Proxy 4.3 (x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Manager Proxy 4.3 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Manager Retail Branch Server 4.3 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.20.2 * emacs-debugsource-27.2-150400.3.20.2 * emacs-nox-debuginfo-27.2-150400.3.20.2 * emacs-27.2-150400.3.20.2 * emacs-nox-27.2-150400.3.20.2 * etags-27.2-150400.3.20.2 * emacs-debuginfo-27.2-150400.3.20.2 * SUSE Manager Server 4.3 (noarch) * emacs-el-27.2-150400.3.20.2 * emacs-info-27.2-150400.3.20.2 ## References: * https://www.suse.com/security/cve/CVE-2024-53920.html * https://bugzilla.suse.com/show_bug.cgi?id=1233894

1 0

SUSE-SU-2024:4393-1: moderate: Security update for python-grpcio
by OPENSUSE-UPDATES 20 Dec '24

20 Dec '24

# Security update for python-grpcio Announcement ID: SUSE-SU-2024:4393-1 Release Date: 2024-12-20T10:24:11Z Rating: moderate References: * bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407 * CVE-2024-7246 CVSS scores: * CVE-2024-11407 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-11407 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H * CVE-2024-11407 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:X/RE:L/U:Green * CVE-2024-7246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L * CVE-2024-7246 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.6 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-grpcio fixes the following issues: * CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) * CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4393=1 openSUSE-SLE-15.6-2024-4393=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-4393=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python311-grpcio-1.60.1-150600.16.8.1 * python311-grpcio-debuginfo-1.60.1-150600.16.8.1 * python-grpcio-debugsource-1.60.1-150600.16.8.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-grpcio-1.60.1-150600.16.8.1 * python311-grpcio-debuginfo-1.60.1-150600.16.8.1 * python-grpcio-debugsource-1.60.1-150600.16.8.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11407.html * https://www.suse.com/security/cve/CVE-2024-7246.html * https://bugzilla.suse.com/show_bug.cgi?id=1228919 * https://bugzilla.suse.com/show_bug.cgi?id=1233821

1 0

openSUSE-RU-2024:0410-1: moderate: Recommended update for zypper-keys-plugin
by maintenance＠opensuse.org 19 Dec '24

19 Dec '24

openSUSE Recommended Update: Recommended update for zypper-keys-plugin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0410-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for zypper-keys-plugin fixes the following issues: zypper-keys-plugin: - Version 0.5.0 - Relicense to GPL3 - Add release script - Require pytz - Version 0.4.0 - Better doc in --help - Show help and list keys if no args are given zyppkeys: - Version 0.5.0 - Relicense to GPL3 - Add release script - Require pytz - Version 0.4.0 - Switch to setuptools - Show key help and list keys when called without args - Add some more documentation via argparse - Handle http errors when downloading keys - Add readme examples Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-410=1 Package List: - openSUSE Backports SLE-15-SP6 (noarch): zypper-keys-plugin-0.5.0-bp156.3.3.1 References:

1 0

SUSE-SU-2024:4386-1: moderate: Security update for avahi
by OPENSUSE-UPDATES 19 Dec '24

19 Dec '24

# Security update for avahi Announcement ID: SUSE-SU-2024:4386-1 Release Date: 2024-12-19T14:04:42Z Rating: moderate References: * bsc#1226586 * bsc#1233420 Cross-References: * CVE-2024-52616 CVSS scores: * CVE-2024-52616 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-52616 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-52616 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for avahi fixes the following issues: * CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420) Other fixes: \- no longer supply bogus services to callbacks (bsc#1226586). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4386=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-4386=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4386=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4386=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-4386=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4386=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-4386=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-4386=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4386=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-4386=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-4386=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-utils-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * libhowl0-0.8-150400.7.20.1 * avahi-utils-gtk-debuginfo-0.8-150400.7.20.1 * avahi-autoipd-debuginfo-0.8-150400.7.20.1 * libavahi-gobject-devel-0.8-150400.7.20.1 * avahi-qt5-debugsource-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libdns_sd-debuginfo-0.8-150400.7.20.1 * libavahi-glib-devel-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-debuginfo-0.8-150400.7.20.1 * libdns_sd-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-0.8-150400.7.20.1 * libhowl0-debuginfo-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-0.8-150400.7.20.1 * libavahi-qt5-devel-0.8-150400.7.20.1 * libavahi-gobject0-debuginfo-0.8-150400.7.20.1 * libavahi-libevent1-0.8-150400.7.20.1 * libavahi-devel-0.8-150400.7.20.1 * avahi-utils-debuginfo-0.8-150400.7.20.1 * libavahi-gobject0-0.8-150400.7.20.1 * avahi-autoipd-0.8-150400.7.20.1 * avahi-compat-howl-devel-0.8-150400.7.20.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.20.1 * avahi-utils-gtk-0.8-150400.7.20.1 * avahi-glib2-debugsource-0.8-150400.7.20.1 * python3-avahi-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * python3-avahi-gtk-0.8-150400.7.20.1 * libavahi-qt5-1-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-libevent1-debuginfo-0.8-150400.7.20.1 * libavahi-qt5-1-debuginfo-0.8-150400.7.20.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * openSUSE Leap 15.4 (x86_64) * libavahi-glib1-32bit-0.8-150400.7.20.1 * libdns_sd-32bit-0.8-150400.7.20.1 * libavahi-glib1-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.20.1 * avahi-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-common3-32bit-0.8-150400.7.20.1 * libavahi-client3-32bit-0.8-150400.7.20.1 * libdns_sd-32bit-debuginfo-0.8-150400.7.20.1 * openSUSE Leap 15.4 (noarch) * avahi-lang-0.8-150400.7.20.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libavahi-common3-64bit-debuginfo-0.8-150400.7.20.1 * libavahi-client3-64bit-0.8-150400.7.20.1 * libavahi-client3-64bit-debuginfo-0.8-150400.7.20.1 * libdns_sd-64bit-0.8-150400.7.20.1 * libavahi-common3-64bit-0.8-150400.7.20.1 * libavahi-glib1-64bit-debuginfo-0.8-150400.7.20.1 * libdns_sd-64bit-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-64bit-0.8-150400.7.20.1 * avahi-64bit-debuginfo-0.8-150400.7.20.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-utils-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-utils-gtk-debuginfo-0.8-150400.7.20.1 * libhowl0-0.8-150400.7.20.1 * avahi-autoipd-debuginfo-0.8-150400.7.20.1 * avahi-qt5-debugsource-0.8-150400.7.20.1 * libavahi-gobject-devel-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-glib-devel-0.8-150400.7.20.1 * libdns_sd-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-debuginfo-0.8-150400.7.20.1 * libdns_sd-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-0.8-150400.7.20.1 * libhowl0-debuginfo-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-0.8-150400.7.20.1 * libavahi-qt5-devel-0.8-150400.7.20.1 * libavahi-gobject0-debuginfo-0.8-150400.7.20.1 * libavahi-libevent1-0.8-150400.7.20.1 * libavahi-devel-0.8-150400.7.20.1 * avahi-utils-debuginfo-0.8-150400.7.20.1 * libavahi-gobject0-0.8-150400.7.20.1 * avahi-autoipd-0.8-150400.7.20.1 * avahi-compat-howl-devel-0.8-150400.7.20.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.20.1 * avahi-utils-gtk-0.8-150400.7.20.1 * avahi-glib2-debugsource-0.8-150400.7.20.1 * python3-avahi-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * python3-avahi-gtk-0.8-150400.7.20.1 * libavahi-qt5-1-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-libevent1-debuginfo-0.8-150400.7.20.1 * libavahi-qt5-1-debuginfo-0.8-150400.7.20.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * openSUSE Leap 15.5 (x86_64) * libavahi-glib1-32bit-0.8-150400.7.20.1 * libdns_sd-32bit-0.8-150400.7.20.1 * libavahi-glib1-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-common3-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.20.1 * avahi-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-common3-32bit-0.8-150400.7.20.1 * libavahi-client3-32bit-0.8-150400.7.20.1 * libdns_sd-32bit-debuginfo-0.8-150400.7.20.1 * openSUSE Leap 15.5 (noarch) * avahi-lang-0.8-150400.7.20.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libavahi-client3-debuginfo-0.8-150400.7.20.1 * avahi-utils-0.8-150400.7.20.1 * avahi-0.8-150400.7.20.1 * libhowl0-0.8-150400.7.20.1 * libavahi-client3-0.8-150400.7.20.1 * libavahi-glib-devel-0.8-150400.7.20.1 * libdns_sd-debuginfo-0.8-150400.7.20.1 * libavahi-core7-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-debuginfo-0.8-150400.7.20.1 * libdns_sd-0.8-150400.7.20.1 * libavahi-ui-gtk3-0-0.8-150400.7.20.1 * libhowl0-debuginfo-0.8-150400.7.20.1 * libavahi-common3-0.8-150400.7.20.1 * libavahi-core7-debuginfo-0.8-150400.7.20.1 * libavahi-glib1-0.8-150400.7.20.1 * libavahi-gobject0-debuginfo-0.8-150400.7.20.1 * libavahi-libevent1-0.8-150400.7.20.1 * libavahi-devel-0.8-150400.7.20.1 * avahi-utils-debuginfo-0.8-150400.7.20.1 * libavahi-gobject0-0.8-150400.7.20.1 * avahi-compat-howl-devel-0.8-150400.7.20.1 * avahi-compat-mDNSResponder-devel-0.8-150400.7.20.1 * avahi-glib2-debugsource-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * libavahi-libevent1-debuginfo-0.8-150400.7.20.1 * typelib-1_0-Avahi-0_6-0.8-150400.7.20.1 * libavahi-common3-debuginfo-0.8-150400.7.20.1 * Basesystem Module 15-SP5 (noarch) * avahi-lang-0.8-150400.7.20.1 * Basesystem Module 15-SP5 (x86_64) * libavahi-common3-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-client3-32bit-debuginfo-0.8-150400.7.20.1 * avahi-32bit-debuginfo-0.8-150400.7.20.1 * libavahi-common3-32bit-0.8-150400.7.20.1 * libavahi-client3-32bit-0.8-150400.7.20.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * avahi-debuginfo-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 * avahi-utils-gtk-debuginfo-0.8-150400.7.20.1 * avahi-autoipd-debuginfo-0.8-150400.7.20.1 * avahi-autoipd-0.8-150400.7.20.1 * libavahi-gobject-devel-0.8-150400.7.20.1 * avahi-utils-gtk-0.8-150400.7.20.1 * avahi-glib2-debugsource-0.8-150400.7.20.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-avahi-0.8-150400.7.20.1 * avahi-debuginfo-0.8-150400.7.20.1 * avahi-debugsource-0.8-150400.7.20.1 ## References: * https://www.suse.com/security/cve/CVE-2024-52616.html * https://bugzilla.suse.com/show_bug.cgi?id=1226586 * https://bugzilla.suse.com/show_bug.cgi?id=1233420

1 0

SUSE-RU-2024:4383-1: moderate: Recommended update for grub2
by OPENSUSE-UPDATES 19 Dec '24

19 Dec '24

# Recommended update for grub2 Announcement ID: SUSE-RU-2024:4383-1 Release Date: 2024-12-19T08:05:20Z Rating: moderate References: * bsc#1231604 * bsc#1232573 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for grub2 fixes the following issues: * xen-debug Subpackage Created: Debug files (with the .module suffix) previously included in the main xen package have been moved to a separate xen-debug subpackage (bsc#1232573) * minix Filesystem Misdetection Fixed: Addressed an issue where leftover data on disk could cause a misdetection and errors (bsc#1231604) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4383=1 SUSE-2024-4383=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-4383=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4383=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-4383=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-4383=1 ## Package List: * openSUSE Leap 15.5 (noarch) * grub2-i386-xen-extras-2.06-150500.29.37.1 * grub2-arm64-efi-debug-2.06-150500.29.37.1 * grub2-powerpc-ieee1275-extras-2.06-150500.29.37.1 * grub2-powerpc-ieee1275-debug-2.06-150500.29.37.1 * grub2-systemd-sleep-plugin-2.06-150500.29.37.1 * grub2-snapper-plugin-2.06-150500.29.37.1 * grub2-x86_64-xen-debug-2.06-150500.29.37.1 * grub2-x86_64-xen-extras-2.06-150500.29.37.1 * grub2-i386-efi-debug-2.06-150500.29.37.1 * grub2-i386-efi-extras-2.06-150500.29.37.1 * grub2-i386-efi-2.06-150500.29.37.1 * grub2-i386-pc-debug-2.06-150500.29.37.1 * grub2-i386-xen-debug-2.06-150500.29.37.1 * grub2-i386-pc-2.06-150500.29.37.1 * grub2-x86_64-efi-extras-2.06-150500.29.37.1 * grub2-s390x-emu-extras-2.06-150500.29.37.1 * grub2-arm64-efi-2.06-150500.29.37.1 * grub2-x86_64-efi-debug-2.06-150500.29.37.1 * grub2-powerpc-ieee1275-2.06-150500.29.37.1 * grub2-x86_64-efi-2.06-150500.29.37.1 * grub2-arm64-efi-extras-2.06-150500.29.37.1 * grub2-x86_64-xen-2.06-150500.29.37.1 * grub2-i386-pc-extras-2.06-150500.29.37.1 * grub2-i386-xen-2.06-150500.29.37.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * grub2-debuginfo-2.06-150500.29.37.1 * grub2-2.06-150500.29.37.1 * grub2-branding-upstream-2.06-150500.29.37.1 * openSUSE Leap 15.5 (aarch64 s390x x86_64 i586) * grub2-debugsource-2.06-150500.29.37.1 * openSUSE Leap 15.5 (s390x) * grub2-s390x-emu-debug-2.06-150500.29.37.1 * grub2-s390x-emu-2.06-150500.29.37.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * grub2-debuginfo-2.06-150500.29.37.1 * grub2-2.06-150500.29.37.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * grub2-x86_64-efi-2.06-150500.29.37.1 * grub2-x86_64-xen-2.06-150500.29.37.1 * grub2-arm64-efi-2.06-150500.29.37.1 * grub2-snapper-plugin-2.06-150500.29.37.1 * grub2-i386-pc-2.06-150500.29.37.1 * grub2-powerpc-ieee1275-2.06-150500.29.37.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * grub2-debugsource-2.06-150500.29.37.1 * SUSE Linux Enterprise Micro 5.5 (s390x) * grub2-s390x-emu-2.06-150500.29.37.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * grub2-debuginfo-2.06-150500.29.37.1 * grub2-2.06-150500.29.37.1 * Basesystem Module 15-SP5 (noarch) * grub2-x86_64-efi-2.06-150500.29.37.1 * grub2-arm64-efi-2.06-150500.29.37.1 * grub2-systemd-sleep-plugin-2.06-150500.29.37.1 * grub2-snapper-plugin-2.06-150500.29.37.1 * grub2-i386-pc-2.06-150500.29.37.1 * grub2-powerpc-ieee1275-2.06-150500.29.37.1 * Basesystem Module 15-SP5 (aarch64 s390x x86_64) * grub2-debugsource-2.06-150500.29.37.1 * Basesystem Module 15-SP5 (s390x) * grub2-s390x-emu-2.06-150500.29.37.1 * Server Applications Module 15-SP5 (noarch) * grub2-x86_64-xen-2.06-150500.29.37.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * grub2-debuginfo-2.06-150500.29.37.1 * grub2-2.06-150500.29.37.1 * grub2-debugsource-2.06-150500.29.37.1 * openSUSE Leap Micro 5.5 (noarch) * grub2-x86_64-efi-2.06-150500.29.37.1 * grub2-i386-pc-2.06-150500.29.37.1 * grub2-x86_64-xen-2.06-150500.29.37.1 * grub2-arm64-efi-2.06-150500.29.37.1 * grub2-snapper-plugin-2.06-150500.29.37.1 * openSUSE Leap Micro 5.5 (s390x) * grub2-s390x-emu-2.06-150500.29.37.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231604 * https://bugzilla.suse.com/show_bug.cgi?id=1232573

1 0

SUSE-RU-2024:4384-1: moderate: Recommended update for grub2
by OPENSUSE-UPDATES 19 Dec '24

19 Dec '24

# Recommended update for grub2 Announcement ID: SUSE-RU-2024:4384-1 Release Date: 2024-12-19T08:05:48Z Rating: moderate References: * bsc#1231604 * bsc#1232573 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed. ## Description: This update for grub2 fixes the following issues: * xen-debug Subpackage Created: Debug files (with the .module suffix) previously included in the main xen package have been moved to a separate xen-debug subpackage (bsc#1232573) * minix Filesystem Misdetection Fixed: Addressed an issue where leftover data on disk could cause a misdetection and errors (bsc#1231604) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4384=1 openSUSE-SLE-15.6-2024-4384=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4384=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-4384=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * grub2-branding-upstream-2.12-150600.8.12.1 * grub2-debuginfo-2.12-150600.8.12.1 * grub2-2.12-150600.8.12.1 * openSUSE Leap 15.6 (aarch64 s390x x86_64 i586) * grub2-debugsource-2.12-150600.8.12.1 * openSUSE Leap 15.6 (noarch) * grub2-powerpc-ieee1275-debug-2.12-150600.8.12.1 * grub2-powerpc-ieee1275-2.12-150600.8.12.1 * grub2-x86_64-efi-extras-2.12-150600.8.12.1 * grub2-i386-xen-extras-2.12-150600.8.12.1 * grub2-i386-efi-2.12-150600.8.12.1 * grub2-arm64-efi-extras-2.12-150600.8.12.1 * grub2-i386-efi-extras-2.12-150600.8.12.1 * grub2-powerpc-ieee1275-extras-2.12-150600.8.12.1 * grub2-snapper-plugin-2.12-150600.8.12.1 * grub2-x86_64-efi-debug-2.12-150600.8.12.1 * grub2-x86_64-xen-2.12-150600.8.12.1 * grub2-i386-xen-2.12-150600.8.12.1 * grub2-x86_64-xen-debug-2.12-150600.8.12.1 * grub2-x86_64-xen-extras-2.12-150600.8.12.1 * grub2-systemd-sleep-plugin-2.12-150600.8.12.1 * grub2-i386-xen-debug-2.12-150600.8.12.1 * grub2-x86_64-efi-2.12-150600.8.12.1 * grub2-i386-pc-debug-2.12-150600.8.12.1 * grub2-s390x-emu-extras-2.12-150600.8.12.1 * grub2-arm64-efi-debug-2.12-150600.8.12.1 * grub2-i386-pc-extras-2.12-150600.8.12.1 * grub2-i386-efi-debug-2.12-150600.8.12.1 * grub2-arm64-efi-2.12-150600.8.12.1 * grub2-i386-pc-2.12-150600.8.12.1 * openSUSE Leap 15.6 (s390x) * grub2-s390x-emu-debug-2.12-150600.8.12.1 * grub2-s390x-emu-2.12-150600.8.12.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * grub2-debuginfo-2.12-150600.8.12.1 * grub2-2.12-150600.8.12.1 * Basesystem Module 15-SP6 (noarch) * grub2-powerpc-ieee1275-2.12-150600.8.12.1 * grub2-systemd-sleep-plugin-2.12-150600.8.12.1 * grub2-x86_64-efi-2.12-150600.8.12.1 * grub2-snapper-plugin-2.12-150600.8.12.1 * grub2-arm64-efi-2.12-150600.8.12.1 * grub2-i386-pc-2.12-150600.8.12.1 * Basesystem Module 15-SP6 (aarch64 s390x x86_64) * grub2-debugsource-2.12-150600.8.12.1 * Basesystem Module 15-SP6 (s390x) * grub2-s390x-emu-2.12-150600.8.12.1 * Server Applications Module 15-SP6 (noarch) * grub2-x86_64-xen-2.12-150600.8.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231604 * https://bugzilla.suse.com/show_bug.cgi?id=1232573

1 0

SUSE-RU-2024:4385-1: moderate: Recommended update for release-notes-sles-for-sap
by OPENSUSE-UPDATES 19 Dec '24

19 Dec '24

# Recommended update for release-notes-sles-for-sap Announcement ID: SUSE-RU-2024:4385-1 Release Date: 2024-12-19T08:18:54Z Rating: moderate References: * bsc#933411 Affected Products: * openSUSE Leap 15.6 * SAP Applications Module 15-SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for release-notes-sles-for-sap fixes the following issues: * Version update 15.6.20241205 (bsc#933411). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4385=1 * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2024-4385=1 ## Package List: * openSUSE Leap 15.6 (noarch) * release-notes-sles-for-sap-15.6.20241105-150600.3.6.2 * SAP Applications Module 15-SP6 (noarch) * release-notes-sles-for-sap-15.6.20241105-150600.3.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=933411

1 0

SUSE-RU-2024:4343-2: moderate: Recommended update for libzypp
by OPENSUSE-UPDATES 19 Dec '24

19 Dec '24

# Recommended update for libzypp Announcement ID: SUSE-RU-2024:4343-2 Release Date: 2024-12-18T20:20:16Z Rating: moderate References: * bsc#1234304 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for libzypp fixes the following issues: NOTE: This update was retracted because it broke functionality of the new CDN. * Url query part: `=` is a safe char in value (bsc#1234304) * RpmDb: Recognize rpmdb.sqlite as database file * cmake: check location of fcgi header and adjust include accordingly. On Debian and derivatives the fcgi headers are not stored in a fastcgi/ subdirectory ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4343=1 SUSE-2024-4343=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-4343=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4343=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4343=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4343=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-4343=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-4343=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4343=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libzypp-devel-doc-17.35.15-150500.6.27.1 * libzypp-devel-17.35.15-150500.6.27.1 * libzypp-17.35.15-150500.6.27.1 * libzypp-debuginfo-17.35.15-150500.6.27.1 * libzypp-debugsource-17.35.15-150500.6.27.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libzypp-debuginfo-17.35.15-150500.6.27.1 * libzypp-17.35.15-150500.6.27.1 * libzypp-debugsource-17.35.15-150500.6.27.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libzypp-17.35.15-150500.6.27.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libzypp-17.35.15-150500.6.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libzypp-17.35.15-150500.6.27.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libzypp-17.35.15-150500.6.27.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libzypp-debuginfo-17.35.15-150500.6.27.1 * libzypp-17.35.15-150500.6.27.1 * libzypp-debugsource-17.35.15-150500.6.27.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libzypp-devel-17.35.15-150500.6.27.1 * libzypp-debuginfo-17.35.15-150500.6.27.1 * libzypp-17.35.15-150500.6.27.1 * libzypp-debugsource-17.35.15-150500.6.27.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1234304

1 0

SUSE-RU-2024:4339-2: moderate: Recommended update for libzypp
by OPENSUSE-UPDATES 19 Dec '24

19 Dec '24

# Recommended update for libzypp Announcement ID: SUSE-RU-2024:4339-2 Release Date: 2024-12-18T20:21:22Z Rating: moderate References: * bsc#1234304 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for libzypp fixes the following issues: NOTE: This update was retracted because it broke functionality of the new CDN. * Url query part: `=` is a safe char in value (bsc#1234304) * RpmDb: Recognize rpmdb.sqlite as database file * cmake: check location of fcgi header and adjust include accordingly. On Debian and derivatives the fcgi headers are not stored in a fastcgi/ subdirectory ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4339=1 openSUSE-SLE-15.6-2024-4339=1 * SUSE Linux Enterprise High Performance Computing 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-4339=1 * SUSE Linux Enterprise Server 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-4339=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-4339=1 * SUSE Linux Enterprise Desktop 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-4339=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4339=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libzypp-debuginfo-17.35.15-150600.3.35.1 * libzypp-debugsource-17.35.15-150600.3.35.1 * libzypp-17.35.15-150600.3.35.1 * libzypp-devel-doc-17.35.15-150600.3.35.1 * libzypp-devel-17.35.15-150600.3.35.1 * SUSE Linux Enterprise High Performance Computing 15 SP6 (aarch64 x86_64) * libzypp-17.35.15-150600.3.35.1 * SUSE Linux Enterprise Server 15 SP6 (aarch64 ppc64le s390x x86_64) * libzypp-17.35.15-150600.3.35.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libzypp-17.35.15-150600.3.35.1 * SUSE Linux Enterprise Desktop 15 SP6 (x86_64) * libzypp-17.35.15-150600.3.35.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libzypp-debuginfo-17.35.15-150600.3.35.1 * libzypp-debugsource-17.35.15-150600.3.35.1 * libzypp-devel-17.35.15-150600.3.35.1 * libzypp-17.35.15-150600.3.35.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1234304

1 0