February 2024 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2024:0049-1: moderate: Recommended update for kmozillahelper
by maintenance＠opensuse.org 14 Feb '24

14 Feb '24

openSUSE Recommended Update: Recommended update for kmozillahelper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0049-1 Rating: moderate References: #1176852 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kmozillahelper fixes the following issues: Update to 5.0.6: * Exclude kmozillahelper from session management (boo#1176852) * Supplement not only MozillaFirefox, but also MozillaThunderbird Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-49=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): kmozillahelper-5.0.6-bp155.3.5.1 kmozillahelper-debuginfo-5.0.6-bp155.3.5.1 kmozillahelper-debugsource-5.0.6-bp155.3.5.1 References: https://bugzilla.suse.com/1176852

1 0

openSUSE-SU-2024:0048-1: important: Security update for pdns-recursor
by opensuse-security＠opensuse.org 14 Feb '24

14 Feb '24

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0048-1 Rating: important References: #1209897 #1219823 #1219826 Cross-References: CVE-2023-26437 CVE-2023-50387 CVE-2023-50868 CVSS scores: CVE-2023-26437 (NVD) : 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L CVE-2023-50387 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-50868 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for pdns-recursor fixes the following issues: Update to 4.8.6: * fixes case when crafted DNSSEC records in a zone can lead to a denial of service in Recursor https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-202 4-01.html (boo#1219823, boo#1219826, CVE-2023-50387, CVE-2023-50868) Changes in 4.8.5: * (I)XFR: handle partial read of len prefix. * YaHTTP: Prevent integer overflow on very large chunks. * Fix setting of policy tags for packet cache hits. Changes in 4.8.4: * Deterred spoofing attempts can lead to authoritative servers being marked unavailable (boo#1209897, CVE-2023-26437) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-48=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): pdns-recursor-4.8.6-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-26437.html https://www.suse.com/security/cve/CVE-2023-50387.html https://www.suse.com/security/cve/CVE-2023-50868.html https://bugzilla.suse.com/1209897 https://bugzilla.suse.com/1219823 https://bugzilla.suse.com/1219826

1 0

openSUSE-SU-2024:0047-1: important: Security update for hugin
by opensuse-security＠opensuse.org 14 Feb '24

14 Feb '24

openSUSE Security Update: Security update for hugin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0047-1 Rating: important References: #1219819 #1219820 #1219821 #1219822 Cross-References: CVE-2024-25442 CVE-2024-25443 CVE-2024-25445 CVE-2024-25446 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for hugin fixes the following issues: Update to version 2023.0.0: * PTBatcherGUI can now also queue user defined assistant and user defined output sequences. * PTBatcherGUI: Added option to generate panorama sequences from an existing pto template. * Assistant: Added option to select different output options like projection, FOV or canvas size depending on different variables (e.g. image count, field of view, lens type). * Allow building with epoxy instead of GLEW for OpenGL pointer management. * Several improvements to crop tool (outside crop, aspect ratio, ...). * Several bug fixes (e.g. in verdandi/internal blender). * Updated translations. - fixed: boo#1219819 (CVE-2024-25442), boo#1219820 (CVE-2024-25443) boo#1219821 (CVE-2024-25445), boo#1219822 (CVE-2024-25446) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-47=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): hugin-2023.0.0-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-25442.html https://www.suse.com/security/cve/CVE-2024-25443.html https://www.suse.com/security/cve/CVE-2024-25445.html https://www.suse.com/security/cve/CVE-2024-25446.html https://bugzilla.suse.com/1219819 https://bugzilla.suse.com/1219820 https://bugzilla.suse.com/1219821 https://bugzilla.suse.com/1219822

1 0

SUSE-RU-2024:0465-1: moderate: Recommended update for numatop
by OPENSUSE-UPDATES 14 Feb '24

14 Feb '24

# Recommended update for numatop Announcement ID: SUSE-RU-2024:0465-1 Rating: moderate References: * jsc#PED-5450 * jsc#PED-5667 * jsc#PED-6038 * jsc#PED-6059 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains four features can now be installed. ## Description: This update for numatop fixes the following issues: * update to version 2.4 * Support EMR processors (jsc#PED-6059, jsc#PED-6038) * Support Power10 processors (jsc#PED-5450, jsc#PED-5667) * Support Zen3, Zen4 processors ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-465=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-465=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-465=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2024-465=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-465=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-465=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-465=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-465=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-465=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2024-465=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-465=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-465=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-465=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2024-465=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-465=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-465=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-465=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-465=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-465=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-465=1 ## Package List: * SUSE Enterprise Storage 7.1 (x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE CaaS Platform 4.0 (x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * openSUSE Leap 15.5 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * Basesystem Module 15-SP5 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Manager Proxy 4.3 (x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 * SUSE Manager Server 4.3 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.9.1 * numatop-2.4-150100.3.9.1 * numatop-debugsource-2.4-150100.3.9.1 ## References: * https://jira.suse.com/browse/PED-5450 * https://jira.suse.com/browse/PED-5667 * https://jira.suse.com/browse/PED-6038 * https://jira.suse.com/browse/PED-6059

1 0

SUSE-RU-2024:0466-1: important: Recommended update for syslinux
by OPENSUSE-UPDATES 14 Feb '24

14 Feb '24

# Recommended update for syslinux Announcement ID: SUSE-RU-2024:0466-1 Rating: important References: * jsc#MSC-749 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 An update that contains one feature can now be installed. ## Description: This update for syslinux fixes the following issues: * syslinux RPM package was rebuilt to address issues with aarch64 built binaries ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-466=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-466=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-466=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-466=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-466=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-466=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-466=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-466=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-466=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-466=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-466=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-466=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-466=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-466=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-466=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-466=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-466=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-466=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-466=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-466=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-466=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-466=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-466=1 ## Package List: * openSUSE Leap 15.3 (x86_64 i586) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x) * syslinux-debuginfo-x86_64-4.04-150300.17.2.1 * syslinux-x86_64-4.04-150300.17.2.1 * openSUSE Leap Micro 5.3 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * openSUSE Leap Micro 5.4 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * openSUSE Leap 15.5 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x) * syslinux-debuginfo-x86_64-4.04-150300.17.2.1 * syslinux-x86_64-4.04-150300.17.2.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * Basesystem Module 15-SP5 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Manager Server 4.3 Module 4.3 (aarch64 ppc64le s390x) * syslinux-x86_64-4.04-150300.17.2.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Manager Proxy 4.3 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Manager Server 4.3 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 * SUSE Enterprise Storage 7.1 (x86_64) * syslinux-debuginfo-4.04-150300.17.2.1 * syslinux-debugsource-4.04-150300.17.2.1 * syslinux-4.04-150300.17.2.1 ## References: * https://jira.suse.com/browse/MSC-749

1 0

SUSE-RU-2024:0467-1: critical: Recommended update for google-guest-agent, google-guest-oslogin
by OPENSUSE-UPDATES 14 Feb '24

14 Feb '24

# Recommended update for google-guest-agent, google-guest-oslogin Announcement ID: SUSE-RU-2024:0467-1 Rating: critical References: * bsc#1219642 Affected Products: * openSUSE Leap 15.5 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for google-guest-agent, google-guest-oslogin contains the following fix: * Add explicit versioned dependency on google-guest-oslogin (bsc#1219642) * Add explicit versioned dependency on google-guest-agent (bsc#1219642) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-467=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-467=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-467=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-467=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-467=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * google-guest-oslogin-20231101.00-150000.1.38.1 * google-guest-oslogin-debugsource-20231101.00-150000.1.38.1 * google-guest-oslogin-debuginfo-20231101.00-150000.1.38.1 * google-guest-agent-20231031.01-150000.1.43.1 * Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64) * google-guest-oslogin-20231101.00-150000.1.38.1 * google-guest-oslogin-debugsource-20231101.00-150000.1.38.1 * google-guest-oslogin-debuginfo-20231101.00-150000.1.38.1 * google-guest-agent-20231031.01-150000.1.43.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * google-guest-oslogin-20231101.00-150000.1.38.1 * google-guest-oslogin-debugsource-20231101.00-150000.1.38.1 * google-guest-oslogin-debuginfo-20231101.00-150000.1.38.1 * google-guest-agent-20231031.01-150000.1.43.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * google-guest-oslogin-20231101.00-150000.1.38.1 * google-guest-oslogin-debugsource-20231101.00-150000.1.38.1 * google-guest-oslogin-debuginfo-20231101.00-150000.1.38.1 * google-guest-agent-20231031.01-150000.1.43.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * google-guest-oslogin-20231101.00-150000.1.38.1 * google-guest-oslogin-debugsource-20231101.00-150000.1.38.1 * google-guest-oslogin-debuginfo-20231101.00-150000.1.38.1 * google-guest-agent-20231031.01-150000.1.43.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219642

1 0

SUSE-RU-2024:0471-1: moderate: Recommended update for lifecycle-data-sle-module-live-patching
by OPENSUSE-UPDATES 14 Feb '24

14 Feb '24

# Recommended update for lifecycle-data-sle-module-live-patching Announcement ID: SUSE-RU-2024:0471-1 Rating: moderate References: * bsc#1020320 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP1 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for lifecycle-data-sle-module-live-patching fixes the following issues: * Added data for 4_12_14-150100_197_160, 4_12_14-150100_197_165, 5_14_21-150400_24_100, 5_14_21-150400_24_66, 5_14_21-150400_24_88, 5_14_21-150400_24_92, 5_14_21-150400_24_97, 5_14_21-150500_55_28, 5_14_21-150500_55_31, 5_14_21-150500_55_36, 5_14_21-150500_55_39, 5_3_18-150200_24_166, 5_3_18-150200_24_169, 5_3_18-150200_24_172, 5_3_18-150300_59_138, 5_3_18-150300_59_141, 5_3_18-150300_59_144, +kernel- livepatch-5_14_21-150400_15_53-rt, _,+kernel- livepatch-5_14_21-150400_15_56-rt,_ ,+kernel- livepatch-5_14_21-150400_15_59-rt, _,+kernel- livepatch-5_14_21-150400_15_62-rt,_ ,+kernel- livepatch-5_14_21-150500_13_18-rt, _,+kernel- livepatch-5_14_21-150500_13_21-rt,_ ,+kernel- livepatch-5_14_21-150500_13_24-rt, _,+kernel- livepatch-5_14_21-150500_13_27-rt,_. (bsc#1020320) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP1 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2024-471=1 * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-471=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-471=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-471=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-471=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-471=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP1 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.105.1 * SUSE Linux Enterprise Live Patching 15-SP2 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.105.1 * SUSE Linux Enterprise Live Patching 15-SP3 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.105.1 * SUSE Linux Enterprise Live Patching 15-SP4 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.105.1 * SUSE Linux Enterprise Live Patching 15-SP5 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.105.1 * openSUSE Leap 15.5 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.105.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1020320

1 0

SUSE-SU-2024:0472-1: important: Security update for tomcat
by OPENSUSE-UPDATES 14 Feb '24

14 Feb '24

# Security update for tomcat Announcement ID: SUSE-SU-2024:0472-1 Rating: important References: * bsc#1216118 * bsc#1216119 * bsc#1216120 * bsc#1217402 * bsc#1217649 * bsc#1217768 * bsc#1219208 Cross-References: * CVE-2023-42794 * CVE-2023-42795 * CVE-2023-45648 * CVE-2023-46589 * CVE-2024-22029 CVSS scores: * CVE-2023-42794 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-42794 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-42795 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-42795 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2023-45648 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-45648 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-46589 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-46589 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-22029 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Server 4.3 * Web and Scripting Module 15-SP5 An update that solves five vulnerabilities and has two security fixes can now be installed. ## Description: This update for tomcat fixes the following issues: Updated to Tomcat 9.0.85: * CVE-2023-45648: Improve trailer header parsing (bsc#1216118). * CVE-2023-42794: FileUpload: remove tmp files to avoid DoS on Windows (bsc#1216120). * CVE-2023-42795: Improve handling of failures during recycle() methods (bsc#1216119). * CVE-2023-46589: Fixed HTTP request smuggling due to incorrect headers parsing (bsc#1217649) * CVE-2024-22029: Fixed escalation to root from tomcat user via %post script. (bsc#1219208) The following non-security issues were fixed: * Fixed the file permissions for server.xml (bsc#1217768, bsc#1217402). Find the full release notes at: https://tomcat.apache.org/tomcat-9.0-doc/changelog.html ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-472=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-472=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-472=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-472=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-472=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-472=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-472=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-472=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-472=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-472=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-472=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-472=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-472=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-472=1 ## Package List: * openSUSE Leap 15.5 (noarch) * tomcat-javadoc-9.0.85-150200.57.1 * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-embed-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * tomcat-docs-webapp-9.0.85-150200.57.1 * tomcat-jsvc-9.0.85-150200.57.1 * Web and Scripting Module 15-SP5 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Manager Server 4.3 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 * SUSE Enterprise Storage 7.1 (noarch) * tomcat-lib-9.0.85-150200.57.1 * tomcat-el-3_0-api-9.0.85-150200.57.1 * tomcat-servlet-4_0-api-9.0.85-150200.57.1 * tomcat-webapps-9.0.85-150200.57.1 * tomcat-admin-webapps-9.0.85-150200.57.1 * tomcat-9.0.85-150200.57.1 * tomcat-jsp-2_3-api-9.0.85-150200.57.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42794.html * https://www.suse.com/security/cve/CVE-2023-42795.html * https://www.suse.com/security/cve/CVE-2023-45648.html * https://www.suse.com/security/cve/CVE-2023-46589.html * https://www.suse.com/security/cve/CVE-2024-22029.html * https://bugzilla.suse.com/show_bug.cgi?id=1216118 * https://bugzilla.suse.com/show_bug.cgi?id=1216119 * https://bugzilla.suse.com/show_bug.cgi?id=1216120 * https://bugzilla.suse.com/show_bug.cgi?id=1217402 * https://bugzilla.suse.com/show_bug.cgi?id=1217649 * https://bugzilla.suse.com/show_bug.cgi?id=1217768 * https://bugzilla.suse.com/show_bug.cgi?id=1219208

1 0

SUSE-SU-2024:0469-1: important: Security update for the Linux Kernel
by OPENSUSE-UPDATES 14 Feb '24

14 Feb '24

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2024:0469-1 Rating: important References: * bsc#1065729 * bsc#1108281 * bsc#1141539 * bsc#1174649 * bsc#1181674 * bsc#1193285 * bsc#1194869 * bsc#1209834 * bsc#1210443 * bsc#1211515 * bsc#1212091 * bsc#1214377 * bsc#1215275 * bsc#1215885 * bsc#1216441 * bsc#1216559 * bsc#1216702 * bsc#1217895 * bsc#1217987 * bsc#1217988 * bsc#1217989 * bsc#1218005 * bsc#1218447 * bsc#1218527 * bsc#1218659 * bsc#1218713 * bsc#1218723 * bsc#1218730 * bsc#1218738 * bsc#1218752 * bsc#1218757 * bsc#1218768 * bsc#1218778 * bsc#1218779 * bsc#1218804 * bsc#1218832 * bsc#1218836 * bsc#1218916 * bsc#1218948 * bsc#1218958 * bsc#1218968 * bsc#1218997 * bsc#1219006 * bsc#1219012 * bsc#1219013 * bsc#1219014 * bsc#1219053 * bsc#1219067 * bsc#1219120 * bsc#1219128 * bsc#1219136 * bsc#1219285 * bsc#1219349 * bsc#1219412 * bsc#1219429 * bsc#1219434 * bsc#1219490 * bsc#1219512 * bsc#1219568 * bsc#1219582 * jsc#PED-4729 * jsc#PED-6694 * jsc#PED-7322 * jsc#PED-7615 * jsc#PED-7616 * jsc#PED-7620 * jsc#PED-7622 * jsc#PED-7623 Cross-References: * CVE-2021-33631 * CVE-2023-46838 * CVE-2023-47233 * CVE-2023-4921 * CVE-2023-51042 * CVE-2023-51043 * CVE-2023-51780 * CVE-2023-51782 * CVE-2023-6040 * CVE-2023-6356 * CVE-2023-6531 * CVE-2023-6535 * CVE-2023-6536 * CVE-2023-6915 * CVE-2024-0565 * CVE-2024-0641 * CVE-2024-0775 * CVE-2024-1085 * CVE-2024-1086 CVSS scores: * CVE-2021-33631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2021-33631 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-46838 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46838 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47233 ( SUSE ): 4.3 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47233 ( NVD ): 4.3 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-4921 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4921 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51042 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51042 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51043 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51043 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51780 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51780 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51782 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51782 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6040 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2023-6040 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6356 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6535 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6536 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6915 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6915 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-0565 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-0565 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2024-0641 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-0641 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-0775 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-0775 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-1085 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-1085 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-1086 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-1086 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Real Time Module 15-SP5 An update that solves 19 vulnerabilities, contains eight features and has 41 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219429). * CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219434). * CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128). * CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218730). * CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836). * CVE-2021-33631: Fixed an integer overflow in ext4_write_inline_data_end() (bsc#1219412). * CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988). * CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989). * CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987). * CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702). * CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215275). * CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c (bsc#1219120). * CVE-2024-0775: Fixed use-after-free in __ext4_remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053). * CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function (bsc#1218752). * CVE-2024-0641: Fixed a denial of service vulnerability in tipc_crypto_key_revoke in net/tipc/crypto.c (bsc#1218916). * CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1218832). * CVE-2023-6915: Fixed a NULL pointer dereference problem in ida_free in lib/idr.c (bsc#1218804). * CVE-2023-51782: Fixed use-after-free in rose_ioctl in net/rose/af_rose.c because of a rose_accept race condition (bsc#1218757). * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447). The following non-security bugs were fixed: * Store the old kernel changelog entries in kernel-docs package (bsc#1218713). * ACPI: LPIT: Avoid u32 multiplication overflow (git-fixes). * ACPI: LPSS: Fix the fractional clock divider flags (git-fixes). * ACPI: arm64: export acpi_arch_thermal_cpufreq_pctg() (bsc#1214377) * ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error (git-fixes). * ACPI: processor: reduce CPUFREQ thermal reduction pctg for Tegra241 (bsc#1214377) * ACPI: property: Allow _DSD buffer data only for byte accessors (git-fixes). * ACPI: resource: Add another DMI match for the TongFang GMxXGxx (git-fixes). * ACPI: thermal: Add Thermal fast Sampling Period (_TFP) support (bsc#1214377) * ACPI: video: check for error while searching for backlight device parent (git-fixes). * ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140 (git- fixes). * ALSA: hda/cs8409: Suppress vmaster control for Dolphin models (git-fixes). * ALSA: hda/realtek: Add quirks for ASUS Zenbook 2022 Models (git-fixes). * ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5 (git-fixes). * ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook (git-fixes). * ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx (git-fixes). * ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx (git-fixes). * ALSA: hda: Refer to correct stream index at loops (git-fixes). * ALSA: hda: intel-nhlt: Ignore vbps when looking for DMIC 32 bps format (git- fixes). * ALSA: oxygen: Fix right channel of capture volume mixer (git-fixes). * ASoC: Intel: Skylake: Fix mem leak in few functions (git-fixes). * ASoC: Intel: Skylake: mem leak in skl register function (git-fixes). * ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 (git- fixes). * ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch (git-fixes). * ASoC: amd: Add Dell G15 5525 to quirks list (bsc#1219136). * ASoC: amd: Add check for acp config flags (bsc#1219136). * ASoC: amd: Add new dmi entries to config entry (bsc#1219136). * ASoC: amd: Drop da7219_aad_jack_det() usage (bsc#1219136). * ASoC: amd: Drop empty platform remove function (bsc#1219136). * ASoC: amd: Update Pink Sardine platform ACP register header (bsc#1219136). * ASoC: amd: acp-config: Add missing MODULE_DESCRIPTION (git-fixes). * ASoC: amd: acp-da7219-max98357a: Map missing jack kcontrols (bsc#1219136). * ASoC: amd: acp-rt5645: Map missing jack kcontrols (bsc#1219136). * ASoC: amd: acp3x-rt5682-max9836: Configure jack as not detecting Line Out (bsc#1219136). * ASoC: amd: acp3x-rt5682-max9836: Map missing jack kcontrols (bsc#1219136). * ASoC: amd: acp: Add TDM slots setting support for ACP I2S controller (bsc#1219136). * ASoC: amd: acp: Add TDM support for acp i2s stream (bsc#1219136). * ASoC: amd: acp: Add i2s tdm support in machine driver (bsc#1219136). * ASoC: amd: acp: Add kcontrols and widgets per-codec in common code (bsc#1219136). * ASoC: amd: acp: Add missing MODULE_DESCRIPTION in mach-common (git-fixes). * ASoC: amd: acp: Add new cpu dai's in machine driver (bsc#1219136). * ASoC: amd: acp: Add setbias level for rt5682s codec in machine driver (bsc#1219136). * ASoC: amd: acp: Enable i2s tdm support for skyrim platforms (bsc#1219136). * ASoC: amd: acp: Fix possible UAF in acp_dma_open (bsc#1219136). * ASoC: amd: acp: Initialize list to store acp_stream during pcm_open (bsc#1219136). * ASoC: amd: acp: Map missing jack kcontrols (bsc#1219136). * ASoC: amd: acp: Modify dai_id macros to be more generic (bsc#1219136). * ASoC: amd: acp: Refactor bit width calculation (bsc#1219136). * ASoC: amd: acp: Refactor dai format implementation (bsc#1219136). * ASoC: amd: acp: Refactor i2s clocks programming sequence (bsc#1219136). * ASoC: amd: acp: add a label to make error path more clean (bsc#1219136). * ASoC: amd: acp: add acp i2s master clock generation for rembrandt platform (bsc#1219136). * ASoC: amd: acp: add pm ops support for acp pci driver (bsc#1219136). * ASoC: amd: acp: add pm ops support for rembrandt platform (bsc#1219136). * ASoC: amd: acp: clean up some inconsistent indentings (bsc#1219136). * ASoC: amd: acp: clear pdm dma interrupt mask (bsc#1219136). * ASoC: amd: acp: delete unnecessary NULL check (bsc#1219136). * ASoC: amd: acp: export config_acp_dma() and config_pte_for_stream() symbols (bsc#1219136). * ASoC: amd: acp: fix SND_SOC_AMD_ACP_PCI depdenencies (bsc#1219136). * ASoC: amd: acp: move pdm macros to common header file (bsc#1219136). * ASoC: amd: acp: refactor the acp init and de-init sequence (bsc#1219136). * ASoC: amd: acp: rembrandt: Drop if blocks with always false condition (bsc#1219136). * ASoC: amd: acp: remove acp poweroff function (bsc#1219136). * ASoC: amd: acp: remove the redundant acp enable/disable interrupts functions (bsc#1219136). * ASoC: amd: acp: remove unnecessary NULL checks (bsc#1219136). * ASoC: amd: acp: store platform device reference created in pci probe call (bsc#1219136). * ASoC: amd: acp: store the pdm stream channel mask (bsc#1219136). * ASoC: amd: acp: store xfer_resolution of the stream (bsc#1219136). * ASoC: amd: acp: switch to use dev_err_probe() (bsc#1219136). * ASoC: amd: acp: use devm_kcalloc() instead of devm_kzalloc() (bsc#1219136). * ASoC: amd: acp: use function devm_kcalloc() instead of devm_kzalloc() (bsc#1219136). * ASoC: amd: add Pink Sardine ACP PCI driver (bsc#1219136). * ASoC: amd: add Pink Sardine machine driver using dmic (bsc#1219136). * ASoC: amd: add Pink Sardine platform ACP IP register header (bsc#1219136). * ASoC: amd: add acp6.2 init/de-init functions (bsc#1219136). * ASoC: amd: add acp6.2 irq handler (bsc#1219136). * ASoC: amd: add acp6.2 pci driver pm ops (bsc#1219136). * ASoC: amd: add acp6.2 pdm driver dma ops (bsc#1219136). * ASoC: amd: add acp6.2 pdm driver pm ops (bsc#1219136). * ASoC: amd: add acp6.2 pdm platform driver (bsc#1219136). * ASoC: amd: add platform devices for acp6.2 pdm driver and dmic driver (bsc#1219136). * ASoC: amd: create platform device for acp6.2 machine driver (bsc#1219136). * ASoC: amd: enable Pink Sardine acp6.2 drivers build (bsc#1219136). * ASoC: amd: enable Pink sardine platform machine driver build (bsc#1219136). * ASoC: amd: fix ACP version typo mistake (bsc#1219136). * ASoC: amd: fix spelling mistake: "i.e" -> "i.e." (bsc#1219136). * ASoC: amd: ps: Add a module parameter to influence pdm_gain (bsc#1219136). * ASoC: amd: ps: Adjust the gain for PDM DMIC (bsc#1219136). * ASoC: amd: ps: Fix uninitialized ret in create_acp64_platform_devs() (bsc#1219136). * ASoC: amd: ps: Move acp63_dev_data strcture from PCI driver (bsc#1219136). * ASoC: amd: ps: Update copyright notice (bsc#1219136). * ASoC: amd: ps: add mutex lock for accessing common registers (bsc#1219136). * ASoC: amd: ps: fix for acp_lock access in pdm driver (bsc#1219136). * ASoC: amd: ps: implement api to retrieve acp device config (bsc#1219136). * ASoC: amd: ps: move irq handler registration (bsc#1219136). * ASoC: amd: ps: refactor acp power on and reset functions (bsc#1219136). * ASoC: amd: ps: refactor platform device creation logic (bsc#1219136). * ASoC: amd: ps: remove the register read and write wrappers (bsc#1219136). * ASoC: amd: ps: remove unused variable (bsc#1219136). * ASoC: amd: ps: update dev index value in irq handler (bsc#1219136). * ASoC: amd: ps: update macros with ps platform naming convention (bsc#1219136). * ASoC: amd: ps: update the acp clock source (bsc#1219136). * ASoC: amd: ps: use acp_lock to protect common registers in pdm driver (bsc#1219136). * ASoC: amd: ps: use static function (bsc#1219136). * ASoC: amd: renoir: Add a module parameter to influence pdm_gain (bsc#1219136). * ASoC: amd: renoir: Adjust the gain for PDM DMIC (bsc#1219136). * ASoC: amd: update pm_runtime enable sequence (bsc#1219136). * ASoC: amd: vangogh: Add check for acp config flags in vangogh platform (bsc#1219136). * ASoC: amd: vangogh: Make use of DRV_NAME (bsc#1219136). * ASoC: amd: vangogh: Remove unnecessary init function (bsc#1219136). * ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG (bsc#1219136). * ASoC: amd: yc: Add ASUS M3402RA into DMI table (bsc#1219136). * ASoC: amd: yc: Add ASUS M5402RA into DMI table (bsc#1219136). * ASoC: amd: yc: Add Alienware m17 R5 AMD into DMI table (bsc#1219136). * ASoC: amd: yc: Add Asus VivoBook Pro 14 OLED M6400RC to the quirks list for acp6x (bsc#1219136). * ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A42) (bsc#1219136). * ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A43) (bsc#1219136). * ASoC: amd: yc: Add DMI entries to support Victus by HP Gaming Laptop 15-fb0xxx (8A3E) (bsc#1219136). * ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx (8A22) (bsc#1219136). * ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12 (bsc#1219136). * ASoC: amd: yc: Add DMI entry to support System76 Pangolin 13 (bsc#1219136). * ASoC: amd: yc: Add DMI support for new acer/emdoor platforms (bsc#1219136). * ASoC: amd: yc: Add HP 255 G10 into quirk table (bsc#1219136). * ASoC: amd: yc: Add Lenovo Thinkbook 14+ 2022 21D0 to quirks table (bsc#1219136). * ASoC: amd: yc: Add MECHREVO Jiaolong Series MRID6 into DMI table (bsc#1219136). * ASoC: amd: yc: Add Razer Blade 14 2022 into DMI table (bsc#1219136). * ASoC: amd: yc: Add ThinkBook 14 G5+ ARP to quirks list for acp6x (bsc#1219136). * ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x (bsc#1219136). * ASoC: amd: yc: Add VivoBook Pro 15 to quirks list for acp6x (bsc#1219136). * ASoC: amd: yc: Add Xiaomi Redmi Book Pro 14 2022 into DMI table (bsc#1219136). * ASoC: amd: yc: Add Xiaomi Redmi Book Pro 15 2022 into DMI table (bsc#1219136). * ASoC: amd: yc: Add a module parameter to influence pdm_gain (bsc#1219136). * ASoC: amd: yc: Adding Lenovo ThinkBook 14 Gen 4+ ARA and Lenovo ThinkBook 16 Gen 4+ ARA to the Quirks List (bsc#1219136). * ASoC: amd: yc: Adjust the gain for PDM DMIC (bsc#1219136). * ASoC: amd: yc: Fix a non-functional mic on Lenovo 82TL (bsc#1219136). * ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA (bsc#1219136). * ASoC: amd: yp: Add OMEN by HP Gaming Laptop 16z-n000 to quirks (bsc#1219136). * ASoC: codecs: lpass-wsa-macro: fix compander volume hack (git-fixes). * ASoC: codecs: wcd938x: fix headphones volume controls (git-fixes). * ASoC: codecs: wcd938x: handle deferred probe (git-fixes). * ASoC: cs35l33: Fix GPIO name and drop legacy include (git-fixes). * ASoC: cs43130: Fix incorrect frame delay configuration (git-fixes). * ASoC: cs43130: Fix the position of const qualifier (git-fixes). * ASoC: da7219: Support low DC impedance headset (git-fixes). * ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 (git-fixes). * ASoC: ops: add correct range check for limiting volume (git-fixes). * ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] (git-fixes). * ASoC: rt5650: add mutex to avoid the jack detection failure (git-fixes). * ASoC: sun4i-spdif: Fix requirements for H6 (git-fixes). * ASoC: wm8974: Correct boost mixer inputs (git-fixes). * Add DMI ID for MSI Bravo 15 B7ED (bsc#1219136). * Bluetooth: Fix atomicity violation in {min,max}_key_size_set (git-fixes). * Bluetooth: btmtkuart: fix recv_buf() return value (git-fixes). * Documentation: Begin a RAS section (jsc#PED-7622). * EDAC/amd64: Add context struct (jsc#PED-7615). * EDAC/amd64: Add get_err_info() to pvt->ops (jsc#PED-7615). * EDAC/amd64: Add support for AMD heterogeneous Family 19h Model 30h-3Fh (jsc#PED-7616). * EDAC/amd64: Add support for ECC on family 19h model 60h-7Fh (jsc#PED-7615). * EDAC/amd64: Add support for family 0x19, models 0x90-9f devices (jsc#PED-7622). * EDAC/amd64: Allow for DF Indirect Broadcast reads (jsc#PED-7615). * EDAC/amd64: Cache and use GPU node map (jsc#PED-7616). * EDAC/amd64: Do not discover ECC symbol size for Family 17h and later (jsc#PED-7615). * EDAC/amd64: Do not set up EDAC PCI control on Family 17h+ (jsc#PED-7615). * EDAC/amd64: Document heterogeneous system enumeration (jsc#PED-7616). * EDAC/amd64: Drop dbam_to_cs() for Family 17h and later (jsc#PED-7615). * EDAC/amd64: Fix indentation in umc_determine_edac_cap() (jsc#PED-7615). * EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt (jsc#PED-7615). * EDAC/amd64: Remove PCI Function 0 (jsc#PED-7615). * EDAC/amd64: Remove PCI Function 6 (jsc#PED-7615). * EDAC/amd64: Remove early_channel_count() (jsc#PED-7615). * EDAC/amd64: Remove module version string (jsc#PED-7615). * EDAC/amd64: Remove scrub rate control for Family 17h and later (jsc#PED-7615). * EDAC/amd64: Rename debug_display_dimm_sizes() (jsc#PED-7615). * EDAC/amd64: Rename f17h_determine_edac_ctl_cap() (jsc#PED-7615). * EDAC/amd64: Rework hw_info_{get,put} (jsc#PED-7615). * EDAC/amd64: Shut up an -Werror,-Wsometimes-uninitialized clang false positive (jsc#PED-7615). * EDAC/amd64: Split determine_edac_cap() into dct/umc functions (jsc#PED-7615). * EDAC/amd64: Split determine_memory_type() into dct/umc functions (jsc#PED-7615). * EDAC/amd64: Split dump_misc_regs() into dct/umc functions (jsc#PED-7615). * EDAC/amd64: Split ecc_enabled() into dct/umc functions (jsc#PED-7615). * EDAC/amd64: Split get_csrow_nr_pages() into dct/umc functions (jsc#PED-7615). * EDAC/amd64: Split init_csrows() into dct/umc functions (jsc#PED-7615). * EDAC/amd64: Split prep_chip_selects() into dct/umc functions (jsc#PED-7615). * EDAC/amd64: Split read_base_mask() into dct/umc functions (jsc#PED-7615). * EDAC/amd64: Split read_mc_regs() into dct/umc functions (jsc#PED-7615). * EDAC/amd64: Split setup_mci_misc_attrs() into dct/umc functions (jsc#PED-7615). * EDAC/mc: Add new HBM2 memory type (jsc#PED-7616). * EDAC/mc: Add support for HBM3 memory type (jsc#PED-7622). * EDAC/mce_amd: Remove SMCA Extended Error code descriptions (jsc#PED-7622). * EDAC/thunderx: Fix possible out-of-bounds string access (git-fixes). * Fix crash in vmw_context_cotables_unref when 3d support is enabled (bsc#1218738) * HID: i2c-hid-of: fix NULL-deref on failed power up (git-fixes). * HID: wacom: Correct behavior when processing some confidence == false touches (git-fixes). * IB/iser: Prevent invalidating wrong MR (git-fixes) * Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID (git-fixes). * Input: atkbd - skip ATKBD_CMD_GETID in translated mode (git-fixes). * Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (git- fixes). * Input: atkbd - use ab83 as id when skipping the getid command (git-fixes). * Input: bcm5974 - check endpoint type before starting traffic (git-fixes). * Input: i8042 - add nomux quirk for Acer P459-G2-M (git-fixes). * Input: xpad - add Razer Wolverine V2 support (git-fixes). * KVM: SVM: Update EFER software model on CR0 trap for SEV-ES (git-fixes). * KVM: s390: vsie: Fix STFLE interpretive execution identification (git-fixes bsc#1218997). * KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322). * Limit kernel-source build to architectures for which the kernel binary is built (bsc#1108281). * PCI/AER: Configure ECRC only if AER is native (bsc#1218778) * PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg() (git-fixes). * PCI: Add ACS quirk for more Zhaoxin Root Ports (git-fixes). * PCI: keystone: Fix race condition when initializing PHYs (git-fixes). * PM: hibernate: Enforce ordering during image compression/decompression (git- fixes). * RDMA/hns: Fix inappropriate err code for unsupported operations (git-fixes) * RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm (git-fixes) * RDMA/hns: Remove unnecessary checks for NULL in mtr_alloc_bufs() (git-fixes) * RDMA/irdma: Add wait for suspend on SQD (git-fixes) * RDMA/irdma: Avoid free the non-cqp_request scratch (git-fixes) * RDMA/irdma: Do not modify to SQD on error (git-fixes) * RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() (git-fixes) * RDMA/irdma: Refactor error handling in create CQP (git-fixes) * RDMA/rtrs-clt: Fix the max_send_wr setting (git-fixes) * RDMA/rtrs-clt: Remove the warnings for req in_use check (git-fixes) * RDMA/rtrs-clt: Start hb after path_up (git-fixes) * RDMA/rtrs-srv: Check return values while processing info request (git-fixes) * RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight (git- fixes) * RDMA/rtrs-srv: Do not unconditionally enable irq (git-fixes) * RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true (git- fixes) * RDMA/usnic: Silence uninitialized symbol smatch warnings (git-fixes) * USB: xhci: workaround for grace period (git-fixes). * Update config files: enable ASoC AMD PS drivers (bsc#1219136) * Update patch reference for ax88179 fix (bsc#1218948) * acpi: property: Let args be NULL in __acpi_node_get_property_reference (git- fixes). * aio: fix mremap after fork null-deref (git-fixes). * apparmor: avoid crash when parsed profile name is empty (git-fixes). * arm64: Add CNT{P,V}CTSS_EL0 alternatives to cnt{p,v}ct_el0 (jsc#PED-4729) * arm64: Add a capability for FEAT_ECV (jsc#PED-4729) Use cpu_hwcaps PLACEHOLDER_4 for HAS_ECV. * arm64: alternative: patch alternatives in the vDSO (jsc#PED-4729) * arm64: dts: armada-3720-turris-mox: set irq type for RTC (git-fixes) * arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 (git- fixes) * arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb (git-fixes) * arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size (git-fixes) * arm64: dts: rockchip: Expand reg size of vdec node for RK3399 (git-fixes) * arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (git-fixes) * arm64: module: move find_section to header (jsc#PED-4729) * arm64: vdso: Fix "no previous prototype" warning (jsc#PED-4729) * arm64: vdso: remove two .altinstructions related symbols (jsc#PED-4729) * arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday (jsc#PED-4729) * asix: Add check for usbnet_get_endpoints (git-fixes). * attr: block mode changes of symlinks (git-fixes). * badblocks: add helper routines for badblock ranges handling (bsc#1174649). * badblocks: add more helper structure and routines in badblocks.h (bsc#1174649). * badblocks: avoid checking invalid range in badblocks_check() (bsc#1174649). * badblocks: improve badblocks_check() for multiple ranges handling (bsc#1174649). * badblocks: improve badblocks_clear() for multiple ranges handling (bsc#1174649). * badblocks: improve badblocks_set() for multiple ranges handling (bsc#1174649). * badblocks: switch to the improved badblock handling code (bsc#1174649). * bpf: Limit the number of kprobes when attaching program to multiple kprobes (git-fixes). * bus: mhi: host: Add alignment check for event ring read pointer (git-fixes). * bus: mhi: host: Add spinlock to protect WP access when queueing TREs (git- fixes). * bus: mhi: host: Drop chan lock before queuing buffers (git-fixes). * ceph: select FS_ENCRYPTION_ALGS if FS_ENCRYPTION (bsc#1219568). * clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config (git-fixes). * clk: qcom: videocc-sm8150: Add missing PLL config property (git-fixes). * clk: rockchip: rk3128: Fix HCLK_OTG gate register (git-fixes). * clk: samsung: Fix kernel-doc comments (git-fixes). * clk: si5341: fix an error code problem in si5341_output_clk_set_rate (git- fixes). * clk: zynqmp: Add a check for NULL pointer (git-fixes). * clk: zynqmp: make bestdiv unsigned (git-fixes). * clocksource: Skip watchdog check for large watchdog intervals (git-fixes). * clocksource: disable watchdog checks on TSC when TSC is watchdog (bsc#1215885). * coresight: etm4x: Add ACPI support in platform driver (bsc#1218779) * coresight: etm4x: Allocate and device assign 'struct etmv4_drvdata' (bsc#1218779) * coresight: etm4x: Change etm4_platform_driver driver for MMIO devices (bsc#1218779) * coresight: etm4x: Drop iomem 'base' argument from etm4_probe() (bsc#1218779) * coresight: etm4x: Drop pid argument from etm4_probe() (bsc#1218779) * coresight: etm4x: Ensure valid drvdata and clock before clk_put() (bsc#1218779) * coresight: platform: acpi: Ignore the absence of graph (bsc#1218779) * crypto: ccp - fix memleak in ccp_init_dm_workarea (git-fixes). * crypto: s390/aes - Fix buffer overread in CTR mode (git-fixes). * crypto: sa2ul - Return crypto_aead_setkey to transfer the error (git-fixes). * crypto: sahara - do not resize req->src when doing hash operations (git- fixes). * crypto: sahara - fix ahash reqsize (git-fixes). * crypto: sahara - fix ahash selftest failure (git-fixes). * crypto: sahara - fix cbc selftest failure (git-fixes). * crypto: sahara - fix processing hash requests with req->nbytes < sg->length (git-fixes). * crypto: sahara - fix processing requests with cryptlen < sg->length (git- fixes). * crypto: sahara - fix wait_for_completion_timeout() error handling (git- fixes). * crypto: sahara - handle zero-length aes requests (git-fixes). * crypto: sahara - improve error handling in sahara_sha_process() (git-fixes). * crypto: sahara - remove FLAGS_NEW_KEY logic (git-fixes). * crypto: scomp - fix req->dst buffer overflow (git-fixes). * dma-debug: fix kernel-doc warnings (git-fixes). * dmaengine: fix NULL pointer in channel unregistration function (git-fixes). * dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (git- fixes). * dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools (git-fixes). * dmaengine: idxd: Protect int_handle field in hw descriptor (git-fixes). * dmaengine: ti: k3-udma: Report short packet errors (git-fixes). * doc/README.KSYMS: Add to repo. * drivers/amd/pm: fix a use-after-free in kv_parse_power_table (git-fixes). * drivers: clk: zynqmp: calculate closest mux rate (git-fixes). * drivers: clk: zynqmp: update divider round rate logic (git-fixes). * drm/amd/display: Fix tiled display misalignment (git-fixes). * drm/amd/display: Port DENTIST hang and TDR fixes to OTG disable W/A (git- fixes). * drm/amd/display: add nv12 bounding box (git-fixes). * drm/amd/display: get dprefclk ss info from integration info table (git- fixes). * drm/amd/display: make flip_timestamp_in_us a 64-bit variable (git-fixes). * drm/amd/display: pbn_div need be updated for hotplug event (git-fixes). * drm/amd/display: update dcn315 lpddr pstate latency (git-fixes). * drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init (git-fixes). * drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table (git- fixes). * drm/amd/pm: fix a double-free in si_dpm_init (git-fixes). * drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' (git-fixes). * drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (git-fixes). * drm/amdgpu/pm: Fix the power source flag error (git-fixes). * drm/amdgpu: Add NULL checks for function pointers (git-fixes). * drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' (git-fixes). * drm/amdgpu: Fix '*fw' from request_firmware() not released in 'amdgpu_ucode_request()' (git-fixes). * drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer (git-fixes). * drm/amdgpu: Fix ecc irq enable/disable unpaired (git-fixes). * drm/amdgpu: Fix missing error code in 'gmc_v6/7/8/9_0_hw_init()' (git- fixes). * drm/amdgpu: Fix with right return code '-EIO' in 'amdgpu_gmc_vram_checking()' (git-fixes). * drm/amdgpu: Let KFD sync with VM fences (git-fixes). * drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' (git-fixes). * drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap (git- fixes). * drm/amdgpu: skip gpu_info fw loading on navi12 (git-fixes). * drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c (git-fixes). * drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()' (git-fixes). * drm/amdkfd: Fix iterator used outside loop in 'kfd_add_peer_prop()' (git- fixes). * drm/amdkfd: Fix lock dependency warning (git-fixes). * drm/amdkfd: Fix lock dependency warning with srcu (git-fixes). * drm/amdkfd: Use resource_size() helper function (git-fixes). * drm/amdkfd: fixes for HMM mem allocation (git-fixes). * drm/bridge: Fix typo in post_disable() description (git-fixes). * drm/bridge: anx7625: Ensure bridge is suspended in disable() (git-fixes). * drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable (git-fixes). * drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (git-fixes). * drm/bridge: nxp-ptn3460: simplify some error checking (git-fixes). * drm/bridge: parade-ps8640: Ensure bridge is suspended in .post_disable() (git-fixes). * drm/bridge: parade-ps8640: Make sure we drop the AUX mutex in the error case (git-fixes). * drm/bridge: parade-ps8640: Wait for HPD when doing an AUX transfer (git- fixes). * drm/bridge: tc358767: Fix return value on error case (git-fixes). * drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function (git-fixes). * drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (git-fixes). * drm/crtc: fix uninitialized variable use (git-fixes). * drm/drv: propagate errors from drm_modeset_register_all() (git-fixes). * drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (git- fixes). * drm/exynos: fix a potential error pointer dereference (git-fixes). * drm/exynos: fix a wrong error checking (git-fixes). * drm/exynos: fix accidental on-stack copy of exynos_drm_plane (git-fixes). * drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume (git- fixes). * drm/framebuffer: Fix use of uninitialized variable (git-fixes). * drm/mediatek: Return error if MDP RDMA failed to enable the clock (git- fixes). * drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr() (git-fixes). * drm/msm/dpu: Ratelimit framedone timeout msgs (git-fixes). * drm/msm/dpu: Set input_sel bit for INTF (git-fixes). * drm/msm/dpu: fix writeback programming for YUV cases (git-fixes). * drm/msm/dpu: rename dpu_encoder_phys_wb_setup_cdp to match its functionality (git-fixes). * drm/msm/dsi: Enable runtime PM (git-fixes). * drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks (git- fixes). * drm/msm/mdp4: flush vblank event on disable (git-fixes). * drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer (git- fixes). * drm/panel-edp: Add override_edid_mode quirk for generic edp (git-fixes). * drm/panel-elida-kd35t133: hold panel in reset for unprepare (git-fixes). * drm/panel: nt35510: fix typo (git-fixes). * drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq (git- fixes). * drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off() (git- fixes). * drm/radeon/dpm: fix a memleak in sumo_parse_power_table (git-fixes). * drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() (git- fixes). * drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() (git- fixes). * drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (git- fixes). * drm/radeon: check return value of radeon_ring_lock() (git-fixes). * drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (git-fixes). * drm/tidss: Check for K2G in in dispc_softreset() (git-fixes). * drm/tidss: Fix atomic_flush check (git-fixes). * drm/tidss: Fix dss reset (git-fixes). * drm/tidss: Move reset to the end of dispc_init() (git-fixes). * drm/tidss: Return error value from from softreset (git-fixes). * drm/tilcdc: Fix irq free on unload (git-fixes). * drm: Do not unref the same fb many times by mistake due to deadlock handling (git-fixes). * drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] (git- fixes). * drm: using mul_u32_u32() requires linux/math64.h (git-fixes). * dt-bindings: gpio: Remove FSI domain ports on Tegra234 (jsc#PED-6694) * efi/libstub: Disable PCI DMA before grabbing the EFI memory map (git-fixes). * eventfd: prevent underflow for eventfd semaphores (git-fixes). * exfat: fix reporting fs error when reading dir beyond EOF (git-fixes). * exfat: support handle zero-size directory (git-fixes). * exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree (git-fixes). * fbdev: Only disable sysfb on the primary device (bsc#1216441) * fbdev: Only disable sysfb on the primary device (bsc#1216441) Update an existing patch to fix bsc#1216441. * fbdev: flush deferred IO before closing (git-fixes). * fbdev: flush deferred work in fb_deferred_io_fsync() (git-fixes). * fbdev: imxfb: fix left margin setting (git-fixes). * fbdev: mmp: Fix typo and wording in code comment (git-fixes). * firewire: core: correct documentation of fw_csr_string() kernel API (git- fixes). * firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards (git-fixes). * firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() (git-fixes). * fjes: fix memleaks in fjes_hw_setup (git-fixes). * fs/mount_setattr: always cleanup mount_kattr (git-fixes). * fs: Fix error checking for d_hash_and_lookup() (git-fixes). * fs: Move notify_change permission checks into may_setattr (git-fixes). * fs: do not audit the capability check in simple_xattr_list() (git-fixes). * fs: drop peer group ids under namespace lock (git-fixes). * fs: indicate request originates from old mount API (git-fixes). * fs: sendfile handles O_NONBLOCK of out_fd (git-fixes). * fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() (bsc#1218659). * gfs2: Always check inode size of inline inodes (git-fixes). * gfs2: Cosmetic gfs2_dinode_{in,out} cleanup (git-fixes). * gfs2: Disable page faults during lockless buffered reads (git-fixes). * gfs2: Eliminate ip->i_gh (git-fixes). * gfs2: Eliminate vestigial HIF_FIRST (git-fixes). * gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (git-fixes). * gfs2: Introduce flag for glock holder auto-demotion (git-fixes). * gfs2: Move the inode glock locking to gfs2_file_buffered_write (git-fixes). * gfs2: Remove redundant check from gfs2_glock_dq (git-fixes). * gfs2: Switch to wait_event in gfs2_logd (git-fixes). * gfs2: assign rgrp glock before compute_bitstructs (git-fixes). * gfs2: low-memory forced flush fixes (git-fixes). * gfs2: release iopen glock early in evict (git-fixes). * gpio: eic-sprd: Clear interrupt after set the interrupt type (git-fixes). * gpu/drm/radeon: fix two memleaks in radeon_vm_init (git-fixes). * hv_netvsc: rndis_filter needs to select NLS (git-fixes). * hwmon: (corsair-psu) Fix probe when built-in (git-fixes). * hwrng: core - Fix page fault dead lock on mmap-ed hwrng (git-fixes). * i2c: rk3x: fix potential spinlock recursion on poll (git-fixes). * i2c: s3c24xx: fix read transfers in polling mode (git-fixes). * i2c: s3c24xx: fix transferring more than one message in polling mode (git- fixes). * iio: adc: ad7091r: Pass iio_dev to event handler (git-fixes). * iio: adc: ad9467: add mutex to struct ad9467_state (git-fixes). * iio: adc: ad9467: do not ignore error codes (git-fixes). * iio: adc: ad9467: fix reset gpio handling (git-fixes). * ipmi: Use regspacings passed as a module parameter (git-fixes). * kabi, vmstat: skip periodic vmstat update for isolated CPUs (bsc#1217895). * kabi/severities: ignore ASoC AMD acp driver symbols (bsc#1219136) * kabi/severities: ignore _rtl92c_phy_calculate_bit_shift symbol It's an internal function that shouldn't have been exported * kdb: Fix a potential buffer overflow in kdb_local() (git-fixes). * kernel-doc: handle a void function without producing a warning (git-fixes). * kernel-source: Fix description typo * kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR (git- fixes). * leds: aw2013: Select missing dependency REGMAP_I2C (git-fixes). * leds: ledtrig-tty: Free allocated ttyname buffer on deactivate (git-fixes). * libapi: Add missing linux/types.h header to get the __u64 type on io.h (git- fixes). * md: fix bi_status reporting in md_end_clone_io (bsc#1210443). * media: cx231xx: fix a memleak in cx231xx_init_isoc (git-fixes). * media: dt-bindings: ov8856: decouple lanes and link frequency from driver (git-fixes). * media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() (git-fixes). * media: imx355: Enable runtime PM before registering async sub-device (git- fixes). * media: ov9734: Enable runtime PM before registering async sub-device (git- fixes). * media: pvrusb2: fix use after free on context disconnection (git-fixes). * media: rkisp1: Disable runtime PM in probe error path (git-fixes). * media: rkisp1: Fix media device memory leak (git-fixes). * media: rkisp1: Read the ID register at probe time instead of streamon (git- fixes). * media: videobuf2-dma-sg: fix vmap callback (git-fixes). * mfd: intel-lpss: Fix the fractional clock divider flags (git-fixes). * misc: fastrpc: Mark all sessions as invalid in cb_remove (git-fixes). * mkspec: Include constraints for both multibuild and plain package always There is no need to check for multibuild flag, the constraints can be always generated for both cases. * mkspec: Use variant in constraints template Constraints are not applied consistently with kernel package variants. Add variant to the constraints template as appropriate, and expand it in mkspec. * mm: fs: initialize fsdata passed to write_begin/write_end interface (git- fixes). * mmc: core: Cancel delayed work before releasing host (git-fixes). * modpost: move **attribute** ((format(printf, 2, 3))) to modpost.h (git- fixes). * mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (git-fixes). * mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response (git- fixes). * mtd: rawnand: pl353: Fix kernel doc (git-fixes). * mtd: rawnand: rockchip: Add missing title to a kernel doc comment (git- fixes). * mtd: rawnand: rockchip: Rename a structure (git-fixes). * net: phy: micrel: populate .soft_reset for KSZ9131 (git-fixes). * net: usb: ax88179_178a: Bind only to vendor-specific interface (bsc#1218948). * net: usb: ax88179_178a: avoid two consecutive device resets (bsc#1218948). * net: usb: ax88179_178a: move priv to driver_priv (git-fixes). * net: usb: ax88179_178a: remove redundant init code (git-fixes). * net: usb: ax88179_178a: restore state on resume (bsc#1218948). * nfc: nci: free rx_data_reassembly skb on NCI device cleanup (git-fixes). * nfsd4: add refcount for nfsd4_blocked_lock (bsc#1218968 bsc#1219349). * nfsd: fix RELEASE_LOCKOWNER (bsc#1218968). * nouveau/tu102: flush all pdbs on vmm flush (git-fixes). * nouveau/vmm: do not set addr on the fail path to avoid warning (git-fixes). * nsfs: add compat ioctl handler (git-fixes). * nvme-loop: always quiesce and cancel commands before destroying admin q (bsc#1211515). * nvme-pci: add BOGUS_NID for Intel 0a54 device (git-fixes). * nvme-pci: fix sleeping function called from interrupt context (git-fixes). * nvme-rdma: Fix transfer length when write_generate/read_verify are 0 (git- fixes). * nvme-tcp: avoid open-coding nvme_tcp_teardown_admin_queue() (bsc#1211515). * nvme: fix max_discard_sectors calculation (git-fixes). * nvme: introduce helper function to get ctrl state (git-fixes). * nvme: move nvme_stop_keep_alive() back to original position (bsc#1211515). * nvme: start keep-alive after admin queue setup (bsc#1211515). * nvme: trace: avoid memcpy overflow warning (git-fixes). * nvmet: re-fix tracing strncpy() warning (git-fixes). * of: Fix double free in of_parse_phandle_with_args_map (git-fixes). * of: unittest: Fix of_count_phandle_with_args() expected value message (git- fixes). * parport: parport_serial: Add Brainboxes BAR details (git-fixes). * parport: parport_serial: Add Brainboxes device IDs and geometry (git-fixes). * perf/x86/intel/uncore: Factor out topology_gidnid_map() (bsc#1218958). * perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (bsc#1218958). * perf/x86/uncore: Use u64 to replace unsigned for the uncore offsets array (bsc#1219512). * phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (git-fixes). * phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (git-fixes). * pinctrl: intel: Revert "Unexport intel_pinctrl_probe()" (git-fixes). * platform/x86/amd/hsmp: Fix iomem handling (jsc#PED-7620). * platform/x86/amd/hsmp: add support for metrics tbl (jsc#PED-7620). * platform/x86/amd/hsmp: create plat specific struct (jsc#PED-7620). * platform/x86/amd/hsmp: improve the error log (jsc#PED-7620). * platform/x86: ISST: Reduce noise for missing numa information in logs (bsc#1219285). * platform/x86: use PLATFORM_DEVID_NONE instead of -1 (jsc#PED-7620). * power: supply: bq256xx: fix some problem in bq256xx_hw_init (git-fixes). * power: supply: cw2015: correct time_to_empty units in sysfs (git-fixes). * powerpc/fadump: reset dump area size if fadump memory reserve fails (bsc#1194869). * powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729). * powerpc/powernv: Add a null pointer check in opal_powercap_init() (bsc#1181674 ltc#189159 git-fixes). * powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869). * powerpc/pseries/iommu: enable_ddw incorrectly returns direct mapping for SR- IOV device (bsc#1212091 ltc#199106 git-fixes). * powerpc/pseries/memhp: Fix access beyond end of drmem array (bsc#1065729). * powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (bsc#1194869). * powerpc/pseries: fix potential memory leak in init_cpu_associativity() (bsc#1194869). * powerpc/xive: Fix endian conversion size (bsc#1194869). * pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (git- fixes). * pwm: Fix out-of-bounds access in of_pwm_single_xlate() (git-fixes). * pwm: jz4740: Do not use dev_err_probe() in .request() (git-fixes). * pwm: stm32: Fix enable count for clk in .probe() (git-fixes). * pwm: stm32: Use hweight32 in stm32_pwm_detect_channels (git-fixes). * pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable (git- fixes). * r8152: add vendor/device ID pair for ASUS USB-C2500 (git-fixes). * r8152: add vendor/device ID pair for D-Link DUB-E250 (git-fixes). * reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning (git- fixes). * ring-buffer/Documentation: Add documentation on buffer_percent file (git- fixes). * ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI (git-fixes). * s390/dasd: fix double module refcount decrement (bsc#1141539). * s390/pci: fix max size calculation in zpci_memcpy_toio() (git-fixes bsc#1219006). * s390/vfio-ap: always filter entire AP matrix (git-fixes bsc#1219012). * s390/vfio-ap: let on_scan_complete() callback filter matrix and update guest's APCB (git-fixes bsc#1219014). * s390/vfio-ap: loop over the shadow APCB when filtering guest's AP configuration (git-fixes bsc#1219013). * s390/vfio-ap: unpin pages on gisc registration failure (git-fixes bsc#1218723). * s390: vfio-ap: tighten the NIB validity check (git-fixes). * sched/isolation: add cpu_is_isolated() API (bsc#1217895). * scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (git-fixes). * scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (git-fixes). * scsi: core: Always send batch on reset or error handling command (git- fixes). * scsi: fnic: Return error if vmalloc() failed (git-fixes). * scsi: hisi_sas: Correct the number of global debugfs registers (git-fixes). * scsi: hisi_sas: Fix normally completed I/O analysed as failed (git-fixes). * scsi: hisi_sas: Fix warnings detected by sparse (git-fixes). * scsi: hisi_sas: Modify v3 HW SATA completion error processing (git-fixes). * scsi: hisi_sas: Modify v3 HW SSP underflow error processing (git-fixes). * scsi: hisi_sas: Rename HISI_SAS_{RESET -> RESETTING}_BIT (git-fixes). * scsi: hisi_sas: Replace with standard error code return value (git-fixes). * scsi: hisi_sas: Rollback some operations if FLR failed (git-fixes). * scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs (git- fixes). * scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code (git-fixes). * scsi: ibmvfc: Implement channel queue depth and event buffer accounting (bsc#1209834 ltc#202097). * scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (bsc#1209834 ltc#202097). * scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param() (git-fixes). * scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (git-fixes). * scsi: lpfc: Change VMID driver load time parameters to read only (bsc#1219582). * scsi: lpfc: Move determination of vmid_flag after VMID reinitialization completes (bsc#1219582). * scsi: lpfc: Reinitialize an NPIV's VMID data structures after FDISC (bsc#1219582). * scsi: lpfc: Update lpfc version to 14.2.0.17 (bsc#1219582). * scsi: megaraid_sas: Fix deadlock on firmware crashdump (git-fixes). * scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers (git-fixes). * scsi: mpt3sas: Fix an outdated comment (git-fixes). * scsi: mpt3sas: Fix in error path (git-fixes). * scsi: mpt3sas: Fix loop logic (bsc#1219067). * scsi: mpt3sas: Fix loop logic (git-fixes). * scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (git-fixes). * scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command (git-fixes). * scsi: qla2xxx: Fix system crash due to bad pointer access (git-fixes). * selftests/net: fix grep checking for fib_nexthop_multiprefix (git-fixes). * serial: 8250: omap: Do not skip resource freeing if pm_runtime_resume_and_get() failed (git-fixes). * serial: core: Fix atomicity violation in uart_tiocmget (git-fixes). * serial: imx: Correct clock error message in function probe() (git-fixes). * serial: imx: fix tx statemachine deadlock (git-fixes). * serial: max310x: fail probe if clock crystal is unstable (git-fixes). * serial: max310x: improve crystal stable clock detection (git-fixes). * serial: max310x: set default value when reading clock ready bit (git-fixes). * serial: sc16is7xx: add check for unsupported SPI modes during probe (git- fixes). * serial: sc16is7xx: set safe default SPI clock frequency (git-fixes). * serial: sccnxp: Improve error message if regulator_disable() fails (git- fixes). * shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (git- fixes). * software node: Let args be NULL in software_node_get_reference_args (git- fixes). * spi: spi-zynqmp-gqspi: fix driver kconfig dependencies (git-fixes). * swiotlb-xen: provide the "max_mapping_size" method (git-fixes). * swiotlb: fix a braino in the alignment check fix (bsc#1216559). * swiotlb: fix slot alignment checks (bsc#1216559). * trace,smp: Add tracepoints around remotelly called functions (bsc#1217895). * tracefs: Add missing lockdown check to tracefs_create_dir() (git-fixes). * tracing/trigger: Fix to return error if failed to alloc snapshot (git- fixes). * tracing: Add size check when printing trace_marker output (git-fixes). * tracing: Ensure visibility when inserting an element into tracing_map (git- fixes). * tracing: Fix uaf issue when open the hist or hist_debug file (git-fixes). * tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing (git-fixes). * ubifs: Check @c->dirty_[n|p]n_cnt and @c->nroot state under @c->lp_mutex (git-fixes). * ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted (git-fixes). * ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (git- fixes). * uio: Fix use-after-free in uio_open (git-fixes). * usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled (git- fixes). * usb: cdns3: fix uvc failure work since sg support enabled (git-fixes). * usb: chipidea: wait controller resume finished for wakeup irq (git-fixes). * usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (git-fixes). * usb: fsl-mph-dr-of: mark fsl_usb2_mpc5121_init() static (git-fixes). * usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK (git- fixes). * usb: mon: Fix atomicity violation in mon_bin_vma_fault (git-fixes). * usb: otg numberpad exception (bsc#1218527). * usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() (git-fixes). * usb: typec: class: fix typec_altmode_put_partner to put plugs (git-fixes). * usb: ucsi: Add missing ppm_lock (git-fixes). * usb: ucsi_acpi: Fix command completion handling (git-fixes). * usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer (git- fixes). * usr/Kconfig: fix typos of "its" (git-fixes). * vfs: make freeze_super abort when sync_filesystem returns error (git-fixes). * vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE (git-fixes). * virtio-mmio: fix memory leak of vm_dev (git-fixes). * virtio_balloon: Fix endless deflation and inflation on arm64 (git-fixes). * vmstat: skip periodic vmstat update for isolated CPUs (bsc#1217895). * vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (git-fixes). * watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (git-fixes). * watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling (git-fixes). * watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused (git-fixes). * watchdog: set cdev owner before adding (git-fixes). * wifi: ath11k: Defer on rproc_get failure (git-fixes). * wifi: cfg80211: lock wiphy mutex for rfkill poll (git-fixes). * wifi: iwlwifi: mvm: send TX path flush in rfkill (git-fixes). * wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request (git- fixes). * wifi: iwlwifi: pcie: avoid a NULL pointer dereference (git-fixes). * wifi: libertas: stop selecting wext (git-fixes). * wifi: mt76: fix broken precal loading from MTD for mt7915 (git-fixes). * wifi: mt76: mt7921s: fix workqueue problem causes STA association fail (git- fixes). * wifi: mwifiex: configure BSSID consistently when starting AP (git-fixes). * wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (git-fixes). * wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (git- fixes). * wifi: rtlwifi: add calculate_bit_shift() (git-fixes). * wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (git-fixes). * wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (git-fixes). * wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (git-fixes). * wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (git-fixes). * wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (git-fixes). * wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (git-fixes). * wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (git-fixes). * wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (git- fixes). * wifi: rtw88: fix RX filter in FIF_ALLMULTI flag (git-fixes). * x86/MCE/AMD, EDAC/mce_amd: Decode UMC_V2 ECC errors (jsc#PED-7616). * x86/MCE/AMD: Add new MA_LLC, USR_DP, and USR_CP bank types (jsc#PED-7622). * x86/MCE/AMD: Split amd_mce_is_memory_error() (jsc#PED-7623). * x86/amd_nb: Add AMD Family MI300 PCI IDs (jsc#PED-7622). * x86/amd_nb: Add MI200 PCI IDs (jsc#PED-7616). * x86/cpu: Merge Intel and AMD ppin_init() functions (jsc#PED-7615). * x86/cpu: Read/save PPIN MSR during initialization (jsc#PED-7615). * x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285). * x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM (git-fixes). * x86/hyperv: Use atomic_try_cmpxchg() to micro-optimize hv_nmi_unknown() (git-fixes). * x86/mce: Cleanup mce_usable_address() (jsc#PED-7623). * x86/mce: Define amd_mce_usable_address() (jsc#PED-7623). * xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled (git-fixes). * xen/events: fix delayed eoi list handling (git-fixes). * xhci: Add grace period after xHC start to prevent premature runtime suspend (git-fixes). * xhci: cleanup xhci_hub_control port references (git-fixes). * xhci: pass port pointer as parameter to xhci_set_port_power() (git-fixes). * xhci: track port suspend state correctly in unsuccessful resume cases (git- fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-469=1 openSUSE-SLE-15.5-2024-469=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-469=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-469=1 * SUSE Real Time Module 15-SP5 zypper in -t patch SUSE-SLE-Module-RT-15-SP5-2024-469=1 ## Package List: * openSUSE Leap 15.5 (noarch) * kernel-devel-rt-5.14.21-150500.13.35.1 * kernel-source-rt-5.14.21-150500.13.35.1 * openSUSE Leap 15.5 (x86_64) * kernel-rt-devel-5.14.21-150500.13.35.1 * kernel-rt-vdso-debuginfo-5.14.21-150500.13.35.1 * reiserfs-kmp-rt-5.14.21-150500.13.35.1 * kernel-livepatch-5_14_21-150500_13_35-rt-debuginfo-1-150500.11.5.1 * kselftests-kmp-rt-debuginfo-5.14.21-150500.13.35.1 * kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.35.1 * kernel-rt-livepatch-devel-5.14.21-150500.13.35.1 * cluster-md-kmp-rt-5.14.21-150500.13.35.1 * kernel-rt_debug-vdso-5.14.21-150500.13.35.1 * kernel-rt-debuginfo-5.14.21-150500.13.35.1 * dlm-kmp-rt-5.14.21-150500.13.35.1 * gfs2-kmp-rt-5.14.21-150500.13.35.1 * reiserfs-kmp-rt-debuginfo-5.14.21-150500.13.35.1 * kernel-rt-livepatch-5.14.21-150500.13.35.1 * kernel-rt-optional-debuginfo-5.14.21-150500.13.35.1 * kernel-rt-debugsource-5.14.21-150500.13.35.1 * kernel-rt-extra-debuginfo-5.14.21-150500.13.35.1 * kernel-livepatch-SLE15-SP5-RT_Update_10-debugsource-1-150500.11.5.1 * ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.35.1 * kernel-rt_debug-debuginfo-5.14.21-150500.13.35.1 * kernel-rt_debug-debugsource-5.14.21-150500.13.35.1 * kernel-livepatch-5_14_21-150500_13_35-rt-1-150500.11.5.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.35.1 * gfs2-kmp-rt-debuginfo-5.14.21-150500.13.35.1 * kselftests-kmp-rt-5.14.21-150500.13.35.1 * kernel-rt-vdso-5.14.21-150500.13.35.1 * dlm-kmp-rt-debuginfo-5.14.21-150500.13.35.1 * kernel-rt_debug-livepatch-devel-5.14.21-150500.13.35.1 * kernel-rt_debug-devel-5.14.21-150500.13.35.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.35.1 * kernel-syms-rt-5.14.21-150500.13.35.1 * kernel-rt-devel-debuginfo-5.14.21-150500.13.35.1 * kernel-rt-extra-5.14.21-150500.13.35.1 * kernel-rt-optional-5.14.21-150500.13.35.1 * ocfs2-kmp-rt-5.14.21-150500.13.35.1 * openSUSE Leap 15.5 (nosrc x86_64) * kernel-rt_debug-5.14.21-150500.13.35.1 * kernel-rt-5.14.21-150500.13.35.1 * SUSE Linux Enterprise Micro 5.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.35.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * kernel-rt-debuginfo-5.14.21-150500.13.35.1 * kernel-rt-debugsource-5.14.21-150500.13.35.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_35-rt-debuginfo-1-150500.11.5.1 * kernel-livepatch-5_14_21-150500_13_35-rt-1-150500.11.5.1 * kernel-livepatch-SLE15-SP5-RT_Update_10-debugsource-1-150500.11.5.1 * SUSE Real Time Module 15-SP5 (x86_64) * kernel-rt-devel-5.14.21-150500.13.35.1 * kernel-rt-vdso-debuginfo-5.14.21-150500.13.35.1 * kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.35.1 * cluster-md-kmp-rt-5.14.21-150500.13.35.1 * kernel-rt_debug-vdso-5.14.21-150500.13.35.1 * kernel-rt-debuginfo-5.14.21-150500.13.35.1 * dlm-kmp-rt-5.14.21-150500.13.35.1 * gfs2-kmp-rt-5.14.21-150500.13.35.1 * kernel-rt-debugsource-5.14.21-150500.13.35.1 * ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.35.1 * kernel-rt_debug-debuginfo-5.14.21-150500.13.35.1 * kernel-rt_debug-debugsource-5.14.21-150500.13.35.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.35.1 * gfs2-kmp-rt-debuginfo-5.14.21-150500.13.35.1 * kernel-rt-vdso-5.14.21-150500.13.35.1 * dlm-kmp-rt-debuginfo-5.14.21-150500.13.35.1 * kernel-rt_debug-devel-5.14.21-150500.13.35.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.35.1 * kernel-syms-rt-5.14.21-150500.13.35.1 * kernel-rt-devel-debuginfo-5.14.21-150500.13.35.1 * ocfs2-kmp-rt-5.14.21-150500.13.35.1 * SUSE Real Time Module 15-SP5 (noarch) * kernel-devel-rt-5.14.21-150500.13.35.1 * kernel-source-rt-5.14.21-150500.13.35.1 * SUSE Real Time Module 15-SP5 (nosrc x86_64) * kernel-rt_debug-5.14.21-150500.13.35.1 * kernel-rt-5.14.21-150500.13.35.1 ## References: * https://www.suse.com/security/cve/CVE-2021-33631.html * https://www.suse.com/security/cve/CVE-2023-46838.html * https://www.suse.com/security/cve/CVE-2023-47233.html * https://www.suse.com/security/cve/CVE-2023-4921.html * https://www.suse.com/security/cve/CVE-2023-51042.html * https://www.suse.com/security/cve/CVE-2023-51043.html * https://www.suse.com/security/cve/CVE-2023-51780.html * https://www.suse.com/security/cve/CVE-2023-51782.html * https://www.suse.com/security/cve/CVE-2023-6040.html * https://www.suse.com/security/cve/CVE-2023-6356.html * https://www.suse.com/security/cve/CVE-2023-6531.html * https://www.suse.com/security/cve/CVE-2023-6535.html * https://www.suse.com/security/cve/CVE-2023-6536.html * https://www.suse.com/security/cve/CVE-2023-6915.html * https://www.suse.com/security/cve/CVE-2024-0565.html * https://www.suse.com/security/cve/CVE-2024-0641.html * https://www.suse.com/security/cve/CVE-2024-0775.html * https://www.suse.com/security/cve/CVE-2024-1085.html * https://www.suse.com/security/cve/CVE-2024-1086.html * https://bugzilla.suse.com/show_bug.cgi?id=1065729 * https://bugzilla.suse.com/show_bug.cgi?id=1108281 * https://bugzilla.suse.com/show_bug.cgi?id=1141539 * https://bugzilla.suse.com/show_bug.cgi?id=1174649 * https://bugzilla.suse.com/show_bug.cgi?id=1181674 * https://bugzilla.suse.com/show_bug.cgi?id=1193285 * https://bugzilla.suse.com/show_bug.cgi?id=1194869 * https://bugzilla.suse.com/show_bug.cgi?id=1209834 * https://bugzilla.suse.com/show_bug.cgi?id=1210443 * https://bugzilla.suse.com/show_bug.cgi?id=1211515 * https://bugzilla.suse.com/show_bug.cgi?id=1212091 * https://bugzilla.suse.com/show_bug.cgi?id=1214377 * https://bugzilla.suse.com/show_bug.cgi?id=1215275 * https://bugzilla.suse.com/show_bug.cgi?id=1215885 * https://bugzilla.suse.com/show_bug.cgi?id=1216441 * https://bugzilla.suse.com/show_bug.cgi?id=1216559 * https://bugzilla.suse.com/show_bug.cgi?id=1216702 * https://bugzilla.suse.com/show_bug.cgi?id=1217895 * https://bugzilla.suse.com/show_bug.cgi?id=1217987 * https://bugzilla.suse.com/show_bug.cgi?id=1217988 * https://bugzilla.suse.com/show_bug.cgi?id=1217989 * https://bugzilla.suse.com/show_bug.cgi?id=1218005 * https://bugzilla.suse.com/show_bug.cgi?id=1218447 * https://bugzilla.suse.com/show_bug.cgi?id=1218527 * https://bugzilla.suse.com/show_bug.cgi?id=1218659 * https://bugzilla.suse.com/show_bug.cgi?id=1218713 * https://bugzilla.suse.com/show_bug.cgi?id=1218723 * https://bugzilla.suse.com/show_bug.cgi?id=1218730 * https://bugzilla.suse.com/show_bug.cgi?id=1218738 * https://bugzilla.suse.com/show_bug.cgi?id=1218752 * https://bugzilla.suse.com/show_bug.cgi?id=1218757 * https://bugzilla.suse.com/show_bug.cgi?id=1218768 * https://bugzilla.suse.com/show_bug.cgi?id=1218778 * https://bugzilla.suse.com/show_bug.cgi?id=1218779 * https://bugzilla.suse.com/show_bug.cgi?id=1218804 * https://bugzilla.suse.com/show_bug.cgi?id=1218832 * https://bugzilla.suse.com/show_bug.cgi?id=1218836 * https://bugzilla.suse.com/show_bug.cgi?id=1218916 * https://bugzilla.suse.com/show_bug.cgi?id=1218948 * https://bugzilla.suse.com/show_bug.cgi?id=1218958 * https://bugzilla.suse.com/show_bug.cgi?id=1218968 * https://bugzilla.suse.com/show_bug.cgi?id=1218997 * https://bugzilla.suse.com/show_bug.cgi?id=1219006 * https://bugzilla.suse.com/show_bug.cgi?id=1219012 * https://bugzilla.suse.com/show_bug.cgi?id=1219013 * https://bugzilla.suse.com/show_bug.cgi?id=1219014 * https://bugzilla.suse.com/show_bug.cgi?id=1219053 * https://bugzilla.suse.com/show_bug.cgi?id=1219067 * https://bugzilla.suse.com/show_bug.cgi?id=1219120 * https://bugzilla.suse.com/show_bug.cgi?id=1219128 * https://bugzilla.suse.com/show_bug.cgi?id=1219136 * https://bugzilla.suse.com/show_bug.cgi?id=1219285 * https://bugzilla.suse.com/show_bug.cgi?id=1219349 * https://bugzilla.suse.com/show_bug.cgi?id=1219412 * https://bugzilla.suse.com/show_bug.cgi?id=1219429 * https://bugzilla.suse.com/show_bug.cgi?id=1219434 * https://bugzilla.suse.com/show_bug.cgi?id=1219490 * https://bugzilla.suse.com/show_bug.cgi?id=1219512 * https://bugzilla.suse.com/show_bug.cgi?id=1219568 * https://bugzilla.suse.com/show_bug.cgi?id=1219582 * https://jira.suse.com/browse/PED-4729 * https://jira.suse.com/browse/PED-6694 * https://jira.suse.com/browse/PED-7322 * https://jira.suse.com/browse/PED-7615 * https://jira.suse.com/browse/PED-7616 * https://jira.suse.com/browse/PED-7620 * https://jira.suse.com/browse/PED-7622 * https://jira.suse.com/browse/PED-7623

1 0

SUSE-SU-2024:0473-1: important: Security update for tomcat10
by OPENSUSE-UPDATES 14 Feb '24

14 Feb '24

# Security update for tomcat10 Announcement ID: SUSE-SU-2024:0473-1 Rating: important References: * bsc#1219208 Cross-References: * CVE-2024-22029 CVSS scores: * CVE-2024-22029 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * Web and Scripting Module 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for tomcat10 fixes the following issues: * CVE-2024-22029: Fixed escalation to root from tomcat user via %post script. (bsc#1219208) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-473=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-473=1 ## Package List: * openSUSE Leap 15.5 (noarch) * tomcat10-admin-webapps-10.1.18-150200.5.11.1 * tomcat10-el-5_0-api-10.1.18-150200.5.11.1 * tomcat10-docs-webapp-10.1.18-150200.5.11.1 * tomcat10-jsp-3_1-api-10.1.18-150200.5.11.1 * tomcat10-10.1.18-150200.5.11.1 * tomcat10-lib-10.1.18-150200.5.11.1 * tomcat10-webapps-10.1.18-150200.5.11.1 * tomcat10-embed-10.1.18-150200.5.11.1 * tomcat10-servlet-6_0-api-10.1.18-150200.5.11.1 * tomcat10-jsvc-10.1.18-150200.5.11.1 * Web and Scripting Module 15-SP5 (noarch) * tomcat10-admin-webapps-10.1.18-150200.5.11.1 * tomcat10-el-5_0-api-10.1.18-150200.5.11.1 * tomcat10-jsp-3_1-api-10.1.18-150200.5.11.1 * tomcat10-lib-10.1.18-150200.5.11.1 * tomcat10-10.1.18-150200.5.11.1 * tomcat10-webapps-10.1.18-150200.5.11.1 * tomcat10-servlet-6_0-api-10.1.18-150200.5.11.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22029.html * https://bugzilla.suse.com/show_bug.cgi?id=1219208

1 0

SUSE-SU-2024:0460-1: important: Security update for rekor
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Security update for rekor Announcement ID: SUSE-SU-2024:0460-1 Rating: important References: * bsc#1218207 * jsc#SLE-23476 Cross-References: * CVE-2023-48795 CVSS scores: * CVE-2023-48795 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-48795 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for rekor fixes the following issues: update to 1.3.5 (jsc#SLE-23476): * Additional unique index correction * Remove timestamp from checkpoint * Drop conditional when verifying entry checkpoint * Fix panic for DSSE canonicalization * Change Redis value for locking mechanism * give log timestamps nanosecond precision * output trace in slog and override correlation header name * bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207) Updated to 1.3.4: * add mysql indexstorage backend * add s3 storage for attestations * fix: Do not check for pubsub.topics.get on initialization * fix optional field in cose schema * Update ranges.go * update indexstorage interface to reduce roundtrips * use a single validator library in rekor-cli * Remove go-playground/validator dependency from pkg/pki Updated to rekor 1.3.3 (jsc#SLE-23476): * Update signer flag description * update trillian to 1.5.3 * adds redis_auth * Add method to get artifact hash for an entry * make e2e tests more usable with docker-compose * install go at correct version for codeql Updated to rekor 1.3.2 (jsc#SLE-23476): Updated to rekor 1.3.1 (jsc#SLE-23476): New Features: * enable GCP cloud profiling on rekor-server (#1746) * move index storage into interface (#1741) * add info to readme to denote additional documentation sources (#1722) * Add type of ed25519 key for TUF (#1677) * Allow parsing base64-encoded TUF metadata and root content (#1671) Quality Enhancements: * disable quota in trillian in test harness (#1680) Bug Fixes: * Update contact for code of conduct (#1720) * Fix panic when parsing SSH SK pubkeys (#1712) * Correct index creation (#1708) * docs: fixzes a small typo on the readme (#1686) * chore: fix backfill-redis Makefile target (#1685) Updated to rekor 1.3.0 (jsc#SLE-23476): * Update openapi.yaml (#1655) * pass transient errors through retrieveLogEntry (#1653) * return full entryID on HTTP 409 responses (#1650) * feat: Support publishing new log entries to Pub/Sub topics (#1580) * Change values of Identity.Raw, add fingerprints (#1628) * Extract all subjects from SANs for x509 verifier (#1632) * Fix type comment for Identity struct (#1619) * Refactor Identities API (#1611) * Refactor Verifiers to return multiple keys (#1601) * Update checkpoint link (#1597) * Use correct log index in inclusion proof (#1599) * remove instrumentation library (#1595) Updated to rekor 1.2.2 (jsc#SLE-23476): * pass down error with message instead of nil * swap killswitch for 'docker-compose restart' * CVE-2023-48795: Fixed Terrapin attack in embedded golang.org/x/crypto/ssh (bsc#1218207). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-460=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-460=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-460=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * rekor-debuginfo-1.3.5-150400.4.19.1 * rekor-1.3.5-150400.4.19.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rekor-1.3.5-150400.4.19.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rekor-1.3.5-150400.4.19.1 ## References: * https://www.suse.com/security/cve/CVE-2023-48795.html * https://bugzilla.suse.com/show_bug.cgi?id=1218207 * https://jira.suse.com/browse/SLE-23476

1 0

SUSE-SU-2024:0461-1: moderate: Security update for libxml2
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Security update for libxml2 Announcement ID: SUSE-SU-2024:0461-1 Rating: moderate References: * bsc#1219576 Cross-References: * CVE-2024-25062 CVSS scores: * CVE-2024-25062 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-25062 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 An update that solves one vulnerability can now be installed. ## Description: This update for libxml2 fixes the following issues: * CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-461=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-461=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-461=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-461=1 ## Package List: * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * python-libxml2-python-debugsource-2.9.7-150000.3.66.1 * libxml2-tools-debuginfo-2.9.7-150000.3.66.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.66.1 * libxml2-tools-2.9.7-150000.3.66.1 * libxml2-debugsource-2.9.7-150000.3.66.1 * libxml2-2-2.9.7-150000.3.66.1 * libxml2-2-debuginfo-2.9.7-150000.3.66.1 * python3-libxml2-python-2.9.7-150000.3.66.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * python-libxml2-python-debugsource-2.9.7-150000.3.66.1 * libxml2-tools-debuginfo-2.9.7-150000.3.66.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.66.1 * libxml2-tools-2.9.7-150000.3.66.1 * libxml2-debugsource-2.9.7-150000.3.66.1 * libxml2-2-2.9.7-150000.3.66.1 * libxml2-2-debuginfo-2.9.7-150000.3.66.1 * python3-libxml2-python-2.9.7-150000.3.66.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-libxml2-python-debugsource-2.9.7-150000.3.66.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.66.1 * python3-libxml2-python-2.9.7-150000.3.66.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libxml2-tools-debuginfo-2.9.7-150000.3.66.1 * libxml2-tools-2.9.7-150000.3.66.1 * libxml2-debugsource-2.9.7-150000.3.66.1 * libxml2-2-2.9.7-150000.3.66.1 * libxml2-2-debuginfo-2.9.7-150000.3.66.1 ## References: * https://www.suse.com/security/cve/CVE-2024-25062.html * https://bugzilla.suse.com/show_bug.cgi?id=1219576

1 0

SUSE-SU-2024:0455-1: important: Security update for squid
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Security update for squid Announcement ID: SUSE-SU-2024:0455-1 Rating: important References: * bsc#1217654 * bsc#1219131 Cross-References: * CVE-2023-50269 * CVE-2024-23638 CVSS scores: * CVE-2023-50269 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-50269 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23638 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23638 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654) * CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-455=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-455=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-455=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-455=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-455=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-455=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-455=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-455=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-455=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-455=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Manager Proxy 4.3 (x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50269.html * https://www.suse.com/security/cve/CVE-2024-23638.html * https://bugzilla.suse.com/show_bug.cgi?id=1217654 * https://bugzilla.suse.com/show_bug.cgi?id=1219131

1 0

SUSE-RU-2024:0456-1: moderate: Recommended update for grub2
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Recommended update for grub2 Announcement ID: SUSE-RU-2024:0456-1 Rating: moderate References: Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for grub2 fixes the following issues: * Fix missing grub2 exporters on Leap ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-456=1 openSUSE-SLE-15.5-2024-456=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-456=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-456=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-456=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * grub2-2.06-150500.29.13.1 * grub2-branding-upstream-2.06-150500.29.13.1 * grub2-debuginfo-2.06-150500.29.13.1 * openSUSE Leap 15.5 (aarch64 s390x x86_64 i586) * grub2-debugsource-2.06-150500.29.13.1 * openSUSE Leap 15.5 (noarch) * grub2-powerpc-ieee1275-2.06-150500.29.13.1 * grub2-s390x-emu-extras-2.06-150500.29.13.1 * grub2-x86_64-efi-2.06-150500.29.13.1 * grub2-i386-xen-2.06-150500.29.13.1 * grub2-x86_64-efi-debug-2.06-150500.29.13.1 * grub2-x86_64-efi-extras-2.06-150500.29.13.1 * grub2-powerpc-ieee1275-extras-2.06-150500.29.13.1 * grub2-i386-efi-2.06-150500.29.13.1 * grub2-arm64-efi-2.06-150500.29.13.1 * grub2-arm64-efi-extras-2.06-150500.29.13.1 * grub2-i386-efi-extras-2.06-150500.29.13.1 * grub2-powerpc-ieee1275-debug-2.06-150500.29.13.1 * grub2-i386-pc-2.06-150500.29.13.1 * grub2-x86_64-xen-2.06-150500.29.13.1 * grub2-i386-xen-extras-2.06-150500.29.13.1 * grub2-systemd-sleep-plugin-2.06-150500.29.13.1 * grub2-i386-pc-debug-2.06-150500.29.13.1 * grub2-x86_64-xen-extras-2.06-150500.29.13.1 * grub2-arm64-efi-debug-2.06-150500.29.13.1 * grub2-i386-pc-extras-2.06-150500.29.13.1 * grub2-i386-efi-debug-2.06-150500.29.13.1 * grub2-snapper-plugin-2.06-150500.29.13.1 * openSUSE Leap 15.5 (s390x) * grub2-s390x-emu-debug-2.06-150500.29.13.1 * grub2-s390x-emu-2.06-150500.29.13.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * grub2-2.06-150500.29.13.1 * grub2-debugsource-2.06-150500.29.13.1 * grub2-debuginfo-2.06-150500.29.13.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * grub2-arm64-efi-2.06-150500.29.13.1 * grub2-snapper-plugin-2.06-150500.29.13.1 * grub2-x86_64-efi-2.06-150500.29.13.1 * grub2-i386-pc-2.06-150500.29.13.1 * grub2-x86_64-xen-2.06-150500.29.13.1 * SUSE Linux Enterprise Micro 5.5 (s390x) * grub2-s390x-emu-2.06-150500.29.13.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * grub2-2.06-150500.29.13.1 * grub2-debuginfo-2.06-150500.29.13.1 * Basesystem Module 15-SP5 (noarch) * grub2-systemd-sleep-plugin-2.06-150500.29.13.1 * grub2-powerpc-ieee1275-2.06-150500.29.13.1 * grub2-arm64-efi-2.06-150500.29.13.1 * grub2-snapper-plugin-2.06-150500.29.13.1 * grub2-x86_64-efi-2.06-150500.29.13.1 * grub2-i386-pc-2.06-150500.29.13.1 * Basesystem Module 15-SP5 (aarch64 s390x x86_64) * grub2-debugsource-2.06-150500.29.13.1 * Basesystem Module 15-SP5 (s390x) * grub2-s390x-emu-2.06-150500.29.13.1 * Server Applications Module 15-SP5 (noarch) * grub2-x86_64-xen-2.06-150500.29.13.1

1 0

SUSE-RU-2024:0449-1: moderate: Recommended update for pdsh
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Recommended update for pdsh Announcement ID: SUSE-RU-2024:0449-1 Rating: moderate References: * bsc#1212946 * jsc#PED-7817 * jsc#PED-7829 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that contains two features and has one fix can now be installed. ## Description: This update for pdsh fixes the following issues: * pdsh was updated to version 2.35 (jsc#PED-7817, jsc#PED-7829): * Added `-d` option to log errors * Added `-k` option to fail fast on ssh failures or non-zero return code * build: use LDADD instead of LDFLAGS for libcommon.la * dsbak: fixed handling of empty input lines * Release a lock that is no longer used * slurm: add -C to restrict hostlist to nodes with features * slurm: call slurm_init() once before any call to Slurm API * slurm: fix compile of slurm plugin against Slurm >= 23.x * ssh: fixed sshcmd_signal on macos * Fixed missing pdsh-slurm options to run jobs against the slurm cluster (bsc#1212946) * Removed outdated and defunct project URI on Google: * The content can still be found in the archives at: https://code.google.com/archive/p/pdsh/. * The project has moved to github entirely. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-449=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-449=1 openSUSE-SLE-15.5-2024-449=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2024-449=1 ## Package List: * SUSE Package Hub 15 15-SP5 (ppc64le s390x) * pdsh-debugsource-2.35-150500.46.3.1 * pdsh-dshgroup-2.35-150500.46.3.1 * pdsh-slurm-2.35-150500.46.3.1 * pdsh-machines-2.35-150500.46.3.1 * pdsh-genders-debuginfo-2.35-150500.46.3.1 * pdsh-machines-debuginfo-2.35-150500.46.3.1 * pdsh-genders-2.35-150500.46.3.1 * pdsh-2.35-150500.46.3.1 * pdsh-netgroup-2.35-150500.46.3.1 * pdsh-netgroup-debuginfo-2.35-150500.46.3.1 * pdsh-dshgroup-debuginfo-2.35-150500.46.3.1 * pdsh-debuginfo-2.35-150500.46.3.1 * pdsh-slurm-debuginfo-2.35-150500.46.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * pdsh-debugsource-2.35-150500.46.3.1 * pdsh-dshgroup-2.35-150500.46.3.1 * pdsh-machines-2.35-150500.46.3.1 * pdsh-genders-debuginfo-2.35-150500.46.3.1 * pdsh-machines-debuginfo-2.35-150500.46.3.1 * pdsh-genders-2.35-150500.46.3.1 * pdsh-2.35-150500.46.3.1 * pdsh-netgroup-2.35-150500.46.3.1 * pdsh-netgroup-debuginfo-2.35-150500.46.3.1 * pdsh-dshgroup-debuginfo-2.35-150500.46.3.1 * pdsh-debuginfo-2.35-150500.46.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * pdsh-slurm-debuginfo-2.35-150500.46.3.1 * pdsh-slurm-2.35-150500.46.3.1 * HPC Module 15-SP5 (aarch64 x86_64) * pdsh-debugsource-2.35-150500.46.3.1 * pdsh-dshgroup-2.35-150500.46.3.1 * pdsh-slurm-2.35-150500.46.3.1 * pdsh-machines-2.35-150500.46.3.1 * pdsh-genders-debuginfo-2.35-150500.46.3.1 * pdsh-machines-debuginfo-2.35-150500.46.3.1 * pdsh-genders-2.35-150500.46.3.1 * pdsh-2.35-150500.46.3.1 * pdsh-netgroup-2.35-150500.46.3.1 * pdsh-netgroup-debuginfo-2.35-150500.46.3.1 * pdsh-dshgroup-debuginfo-2.35-150500.46.3.1 * pdsh-debuginfo-2.35-150500.46.3.1 * pdsh-slurm-debuginfo-2.35-150500.46.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212946 * https://jira.suse.com/browse/PED-7817 * https://jira.suse.com/browse/PED-7829

1 0

SUSE-RU-2024:0450-1: moderate: Recommended update for imb
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Recommended update for imb Announcement ID: SUSE-RU-2024:0450-1 Rating: moderate References: * jsc#PED-7111 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that contains one feature can now be installed. ## Description: This update for imb fixes the following issues: * Update to version 2021.7 * Change default value for mem_alloc_type to device * License update * Bug fixes * Currently not provided in SUSE: IMB-MPI1-GPU benchmark: Dynamically loading from LD_LIBRARY_PATH cuda or level zero library. * Drop support for openmpi[123] (jsc#PED-7111) * Prepare support for openmpi5 * Add build support for gcc11/12. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-450=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-450=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2024-450=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-450=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-450=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-450=1 ## Package List: * openSUSE Leap 15.4 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * imb_2021_7-gnu-mpich-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mvapich2-2021.7-150400.3.6.1 * imb-openmpi4-debuginfo-2021.7-150400.3.6.1 * imb-openmpi4-2021.7-150400.3.6.1 * imb-mvapich2-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mpich-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mpich-debuginfo-2021.7-150400.3.6.1 * imb-openmpi4-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debugsource-2021.7-150400.3.6.1 * imb-mpich-2021.7-150400.3.6.1 * imb-mvapich2-debuginfo-2021.7-150400.3.6.1 * openSUSE Leap 15.5 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * imb_2021_7-gnu-mpich-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mvapich2-2021.7-150400.3.6.1 * imb-openmpi4-debuginfo-2021.7-150400.3.6.1 * imb-openmpi4-2021.7-150400.3.6.1 * imb-mvapich2-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mpich-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mpich-debuginfo-2021.7-150400.3.6.1 * imb-openmpi4-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debugsource-2021.7-150400.3.6.1 * imb-mpich-2021.7-150400.3.6.1 * imb-mvapich2-debuginfo-2021.7-150400.3.6.1 * HPC Module 15-SP5 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * HPC Module 15-SP5 (aarch64 x86_64) * imb_2021_7-gnu-openmpi3-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * imb-openmpi4-debugsource-2021.7-150400.3.6.1 * imb-mvapich2-2021.7-150400.3.6.1 * imb-openmpi4-debuginfo-2021.7-150400.3.6.1 * imb-openmpi4-2021.7-150400.3.6.1 * imb-mpich-2021.7-150400.3.6.1 * imb-mpich-debuginfo-2021.7-150400.3.6.1 * imb-mpich-debugsource-2021.7-150400.3.6.1 * imb-mvapich2-debugsource-2021.7-150400.3.6.1 * imb-mvapich2-debuginfo-2021.7-150400.3.6.1 * SUSE Package Hub 15 15-SP5 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * imb_2021_7-gnu-openmpi3-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * imb_2021_7-gnu-openmpi3-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-2021.7-150400.3.6.1 ## References: * https://jira.suse.com/browse/PED-7111

1 0

SUSE-RU-2024:0451-1: moderate: Recommended update for golang-github-vpenso-prometheus_slurm_exporter
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Recommended update for golang-github-vpenso-prometheus_slurm_exporter Announcement ID: SUSE-RU-2024:0451-1 Rating: moderate References: * jsc#PED-7818 * jsc#PED-7833 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that contains two features can now be installed. ## Description: This update for golang-github-vpenso-prometheus_slurm_exporter fixes the following issues: * Ship package `golang-github-vpenso-prometheus_slurm_exporter` in HPC Module (x86_64, aarch64) * Fix to make GPU data gathering works with all Slurm versions since 18.08. * Add a sysconfig settings to make daemon command line args easily. * Fix service file names to match upstream: * `prometheus-slurm_exporter.service` was renamed to `prometheus-slurm- exporter.service` * `rcprometheus-slurm_exporter` was renamed to `rcprometheus-slurm-exporter` * To support updates, the old name is still kept as sym-link. * Added README.SUSE to inform about sysconfig file. * Multiple fixes to the README file ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-451=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2024-451=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-451=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-451=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-451=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-451=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-451=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * HPC Module 15-SP5 (aarch64 x86_64) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * SUSE Package Hub 15 15-SP5 (ppc64le s390x) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 ## References: * https://jira.suse.com/browse/PED-7818 * https://jira.suse.com/browse/PED-7833

1 0

SUSE-RU-2024:0452-1: moderate: Recommended update for spack
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Recommended update for spack Announcement ID: SUSE-RU-2024:0452-1 Rating: moderate References: * bsc#1219480 Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 An update that has one fix can now be installed. ## Description: This update for spack fixes the following issues: spack was updated to version 0.21.1 (bsc#1219480): * Version 0.21.1: * Add support for reading buildcaches created by Spack v0.22 * Bugfixes: * `spack graph`: fix coloring with environments * `spack info`: sort variants in --variants-by-name * `Spec.format`: error on old style format strings * ASP-based solver: * fix infinite recursion when computing concretization errors * don't error for type mismatch on preferences * don't emit spurious debug output. * Improve the error message for deprecated preferences * Fix multi-word aliases * Add a warning for unconfigured compiler * environment: fix an issue with deconcretization/reconcretization of specs * buildcache: don't error if a patch is missing, when installing from binaries * Version 0.21.0: * New features: * Better error messages with condition chaining: In v0.18, we added better error messages that could tell you what problem happened, but they couldn't tell you why it happened. 0.21 adds condition chaining to the solver, and Spack can now trace back through the conditions that led to an error and build a tree of causes potential causes and where they came from. * OCI build caches: You can now use an arbitrary OCI registry as a build cache: * For Dockerhub: `$ spack mirror add my_registry oci://user/image` * For another registry (GHCR): `$ spack mirror add my_registry oci://ghcr.io/haampie/spack-test` Then set the login credentials: `$ spack mirror set --push --oci-username ... --oci-password ... my_registry` and push to it: `$ spack buildcache push my_registry [specs...]` You can optionally add a base image to get runnable images: `$ spack buildcache push --base-image leap:15.5 my_registry python` Pushed ... as [image]:python-3.11.2-65txfcpqbmpawclvtasuog4yzmxwaoia.spack $ docker run --rm -it [image]:python-3.11.2-65txfcpqbmpawclvtasuog4yzmxwaoia.spack` This creates a container image from the Spack installations on the host system, without the need to run `spack install` from a `Dockerfile` or `sif` file. It also addresses the inconvenience of losing binaries of dependencies when `RUN spack install` fails inside `docker build`. Further, the container image layers and build cache tarballs are the same files. This means that `spack install` and `docker pull` use the exact same underlying binaries. If you previously used `spack install` inside of docker build, this feature helps you save storage by a factor two. \+ Multiple versions of build dependencies: Increasingly, complex package builds require multiple versions of some build dependencies. For example, Python packages frequently require very specific versions of `setuptools`, `cython`, while different physics packages require different versions of Python to build. The concretizer enforced that every solve was unified, i.e., so that there was only one version of every package. The concretizer now supports "duplicate" nodes for build dependencies, but enforces unification through transitive link and run dependencies. This will allow it to better resolve complex dependency graphs in ecosystems like Python. \+ Cherry- picking virtual dependencies: You can now select only a subset of virtual dependencies from a spec that may provide more. For example, to make mpich your mpi provider, you can be explicit by writing: `hdf5 ^[virtuals=mpi] mpich` Or, to use, e.g., `intel-parallel-studio` for blas along with an external `lapack` like `openblas`, you could write: `strumpack ^[virtuals=mpi] intel-parallel-studio+mkl ^[virtuals=lapack] openblas`` The `virtuals=mpi` is an edge attribute, and dependency edges in Spack graphs now track which virtuals they satisfied. \+ The `spack deconcretize` command gives you control over what you want to update in an already concrete environment. As an example, with an environment built with meson, and you want to update your meson version, you can run: `$spack deconcretize meson` and have everything that depends on meson rebuilt the next time you run spack concretize. In the future, we'll handle this in a single command, but for now you can use this to drop bits of your lockfile and resolve your dependencies again. \+ UI Improvements: The `spack info` received a rework to make the output more appealing. It is now on par with the rest of Spack's UI. `spack info` now makes much better use of terminal space and shows variants, their values, and their descriptions more clearly. Conditional variants are grouped separately so you can more easily understand how packages are structured. `spack checksum` now allows you to filter versions from your editor, or by version range. It also notifies you about potential download URL changes. \+ Environments can include definitions: Spack did not previously support using `include:` with The definitions section of an environment, but now it does. You can use this to curate lists of specs and more easily reuse them across environments. \+ Aliases: You can now add aliases to Spack commands in `config.yaml`, e.g. this might enshrine your favorite args to `spack find` as `spack f`: `config: aliases: f: find -lv` * Improved autoloading of modules: In this release, you can start using `hide_implicits: true` instead, which exposes only explicitly installed packages to the user, while still autoloading dependencies. On top of that, you can safely use `hash_length: 0`, as this config now only applies to the modules exposed to the user -- you don't have to worry about file name clashes for hidden dependencies. Note: for Tcl this feature requires Modules 4.7 or higher * Other new commands and directives: * `spack env activate` without arguments now loads a default environment that you do not have to create. * `spack find -H` / `--hashes`: a new shortcut for piping spack find output to other commands. * Add `spack checksum --verify`, fix `--add`. * New `default_args` context manager factors out common args for directives. * `spack compiler find --[no]-mixed-toolchain` lets you easily mix clang and gfortran on Linux * Performance improvements: * `spack external find execution` is now much faster. * `spack location -i` is now much faster on success. * Drop redundant rpaths post install. * ASP-based solver: avoid cycles in clingo using hidden directive. * Fix multiple quadratic complexity issues in environments * Other new features of note: * archspec: update to v0.2.2, support for Sapphire Rapids, Power10, Neoverse V2. * Propagate variants across nodes that don't have that variant * Implement fish shell completion. * Can now distinguish between source/binary mirror; don't ping mirror.spack.io as much. * Improve status reporting on `spack install` (add [n/total] display...). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-452=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-452=1 ## Package List: * openSUSE Leap 15.3 (noarch) * spack-info-0.21.1-150300.12.1 * spack-recipes-0.21.1-150300.12.1 * spack-0.21.1-150300.12.1 * spack-man-0.21.1-150300.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * spack-info-0.21.1-150300.12.1 * spack-recipes-0.21.1-150300.12.1 * spack-man-0.21.1-150300.12.1 * spack-0.21.1-150300.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219480

1 0

SUSE-RU-2024:0446-1: moderate: Recommended update for suse-migration-services
by OPENSUSE-UPDATES 12 Feb '24

12 Feb '24

# Recommended update for suse-migration-services Announcement ID: SUSE-RU-2024:0446-1 Rating: moderate References: * bsc#1219004 Affected Products: * openSUSE Leap 15.5 An update that has one fix can now be installed. ## Description: This update for suse-migration-services fixes the following issues: * Address nose tests deprecation issues The Python 3.8 CI testing is failing with an error because we haven't addressed the nose tests support deprecation by renaming the setup() method to setup_method(). * Bind mount the configured certs location bsc#1219004 When the migration is running ensure that the correct certs directory is bind mounted from the /system-root into the ISO boot's runtime environment, by retrieving the configured server.certlocation setting from the /system- root/etc/regionserverclnt.cfg file. Default to the new cert location if a cert location cannot be determined. Log a message when no certs are present in the cert location, checking in the system being migrated, and after the bind mount of that path into the ISO runtime environment. Add unit tests for new get_regionsrv_certs_path() function and tweak some existing tests, that depend upon mocking calls to builtin.open(), so that they mock any calls to get_regionsrv_certs_path() so as to avoid triggering additional open() calls that would break those tests. * Remove target information that was confusing customers. Clarify SP4 support timeline * Added mailmap Don't lose contributions of the past ;) * Update kiwi config files to match current build versions * Clarify supported versions of SLES * Added block marker to listings to increase readability * Fixing variablelists that caused validation errors ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-446=1 ## Package List: * openSUSE Leap 15.5 (noarch) * suse-migration-pre-checks-2.0.38-150000.1.65.1 * suse-migration-services-2.0.38-150000.1.65.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219004

1 0

openSUSE-RU-2024:0045-1: moderate: Recommended update for kanidm
by maintenance＠opensuse.org 10 Feb '24

10 Feb '24

openSUSE Recommended Update: Recommended update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0045-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kanidm fixes the following issues: - Update to version 1.1.0~rc16~git1.a917291: * Correct cargo versions * Release 1.1.0-rc.16 (#2483) * Fix for incorrect domain migration rollbacks (#2482) * Add tools for remigration and domain level raising (#2481) * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480) * Support SPN in groups claim (#2474) * Credential update tweaks (#2475) * Oauth2 pkce faq (#2473) * Fix debian versioning (#2472) * chore(deps): bump the all group in /pykanidm with 7 updates (#2479) * chore(deps): bump the all group with 1 update (#2478) * Fix RUV trim (#2466) * 20240125 2217 client credentials grant (#2456) * docs: Add application passwords design document (#2427) * handling master docs (#2465) * update the artifact name in the download step (#2464) * Book SUMMARY.md: Fix part titles according to mdbook (#2463) * Update chat link, add keywords (#2462) * PyKanidm updates and testing (#2301) * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461) * 1222 what rights does anonymous have (#2436) * Fix inverted key/chain logic from TLS error improvement (#2453) * Improve TLS configuration errors (#2447) * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445) * chore(deps): bump the all group with 1 update (#2441) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443) * Return sshkey label to cli fields (#2440) * Add rfc8414 metadata (#2434) * Add test for delete referer invalid (#2435) * Clarify role of WebUI in README.md (#2431) * Adding max_ber_size option in config for ldap sync (#2416) * Debian build fixes (also the book) (#2400) * 2390 1980 allow native applications (#2428) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430) * cookies (#2426) * Clean RUV (#2424) * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425) * Upgrade replication to use anchors (#2423) * Minor fixes for oidc with single page applications (#2420) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421) * Use case insensitive match on substrings in line with ldap (#2419) * Change OAuth2 RS Origin from the CLI (#2418) * Add design diagrams (#2332) * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410) * Fix deb release flow to find the matrix split artifacts (#2406) * 20231222 piv authentication (#2398) * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405) * Build the kanidm cli tools deb as well (#2402) * Force apply idm migrations to apply access controls (#2401) * fixing up the integration script (#2392) * chore(deps): bump the all group in /pykanidm with 8 updates (#2396) * chore(deps): bump the all group with 2 updates (#2395) * fix backup filename and regexp pattern for cleanup (#2386) * idprovider: Provide the keystore during auth (#2385) * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389) * daemon: Fix inverted logic on cache dir check (#2388) * Add improved domain migration framework and default MFA (#2382) * Trim and lowecase usernames (#2380) * Add DN as a virtual ldap attr (#2379) * fixing default for oauth2 request_parameter_supported metadata (#2378) * chore(deps): bump the all group in /pykanidm with 6 updates (#2375) * 20231218 ipa sync unix password (#2374) * chore(deps): bump the all group with 2 updates (#2372) * 1481 2024 access control rework (#2366) * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368) * chore(deps): bump the all group with 3 updates (#2363) * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362) * 249 2024 managed by syntax (#2359) * typo (#2356) * 20231204 ipa sync minor improvements (#2357) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355) * Unixd build/debugging updates (#2350) * 20231129 webauthn attestation (#2351) * Fix handling of TPM in some trait contexts (#2347) * docs: miniflux added pkce support (#2352) * Using proper axum http headers lib for compatibility (#2348) * Bearer should send with same caps we accept (#2345) * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341) * docs: improve grammar for book/src/developers/faq.md (#2343) * Expose machine key in auth phase (#2340) * 20231128 freeipa migration (#2338) * Unix crossbuild scripts and docs (#2326) * Expose TPM in more interface places (#2334) * chore(deps): bump the all group in /pykanidm with 6 updates (#2336) * Adding kanidm client config docs and notes ref #2248 (#2333) * Update to the latest compact-jwt version (#2331) * Adding env var configs for the server (#2329) * Better errors when TPM PIN file not found (#2330) * 20231120 2320 sssd compat (#2328) * Resolve future send issue with keystore (#2311) * chore(deps): bump the all group in /pykanidm with 6 updates (#2325) * chore(deps): bump the all group with 3 updates (#2324) * Add test (#2323) * OAuth2 scopes validation logging missing details (#2317) * Add systemd deps for unixd (#2314) * 20231115 oauth2 authreq (#2310) * Docs - Bump Fedora 36 to Fedora 38 (#2309) * chore(deps): bump the all group with 4 updates (#2306) * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305) * Remove serde json from wasm (#2304) * Fix spelling (#2303) * 20231109 1122 credential class (#2300) * Moving daemon tracing to OpenTelemetry (#2292) * 20231101 add id cert to unixint (#2284) * Docs fixes for #2296 (#2297) * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294) * chore(deps): bump the all group with 8 updates (#2293) * pw min length in account policy (#2289) * WASM troubleshooting docs closes #2286 (#2291) * oauth2 typo (#2290) * Update notes to avoid some possible interpretation errors (#2288) * Feature: kanidm CLI pulling OpenAPI schema (#2285) * Feature: configurable replication poll interval (#2283) * Minor improvements to incoming replication (#2279) * Problems with bash completion autocomplete (#2281) * Remove unused imports and clippy lint (#2276) * Rework ldap bind routine (#2268) * Disable inconsistent test (#2278) * make versions consistent * 1.1.0 rc.15 dev post-release (#2271) - Update to version 1.1.0~rc15~git8.122b6af: * Remove unused import that breaks builds on newer rust versions * Update to latest webauthn-rs version * fix version * Fix maint branch versions * Disable inconsistent test (#2278) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-45=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-clients-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-docs-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-server-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-unixd-clients-1.1.0~rc16~git1.a917291-bp155.5.1 References:

1 0

openSUSE-RU-2024:0042-1: moderate: Recommended update for awf-gtk2
by maintenance＠opensuse.org 09 Feb '24

09 Feb '24

openSUSE Recommended Update: Recommended update for awf-gtk2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0042-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for awf-gtk2 fixes the following issues: - New upstream release (2.8.0) * add progress bar in tool bar and status bar * auto resize window to minimal size after layout update - New upstream version (2.7.0) * add text direction menu * add close button for tabs Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-42=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): awf-gtk2-2.8.0-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0044-1: moderate: Recommended update for awf-gtk4
by maintenance＠opensuse.org 09 Feb '24

09 Feb '24

openSUSE Recommended Update: Recommended update for awf-gtk4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0044-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for awf-gtk4 fixes the following issues: - New upstream release (2.8.0) * add progress bar in tool bar and status bar * auto resize window to minimal size after layout update - New upstream version (2.7.0) * add text direction menu * add close button for tabs Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-44=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): awf-gtk4-2.8.0-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0043-1: moderate: Recommended update for awf-gtk3
by maintenance＠opensuse.org 09 Feb '24

09 Feb '24

openSUSE Recommended Update: Recommended update for awf-gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0043-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for awf-gtk3 fixes the following issues: - New upstream release (2.8.0) * add progress bar in tool bar and status bar * auto resize window to minimal size after layout update - New upstream version (2.7.0) * add text direction menu * add close button for tabs Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-43=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): awf-gtk3-2.8.0-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0041-1: moderate: Recommended update for opi
by maintenance＠opensuse.org 09 Feb '24

09 Feb '24

openSUSE Recommended Update: Recommended update for opi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0041-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for opi fixes the following issues: Version 5.0.0 * Allow selecting mirror 1st time when adding packman repo * Add Plugin for SoftMaker Freeoffice * Use new osc service run cmd syntax * Codecs: Install AV1 decoder for mpv * Bump .NET SDK plugin to .NET 8.0 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-41=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): opi-5.0.0-bp155.2.15.1 References:

1 0

SUSE-RU-2024:0443-1: moderate: Recommended update for go1.22
by OPENSUSE-UPDATES 09 Feb '24

09 Feb '24

# Recommended update for go1.22 Announcement ID: SUSE-RU-2024:0443-1 Rating: moderate References: * bsc#1218424 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for go1.22 fixes the following issues: This is go1.22 (released 2024-02-06), a major release of Go. (bsc#1218424 go1.22 release tracking) go1.22.x minor releases will be provided through February 2024. See https://github.com/golang/go/wiki/Go-Release-Cycle go1.22 arrives six months after go1.21. Most of its changes are in the implementation of the toolchain, runtime, and libraries. As always, the release maintains the Go 1 promise of compatibility. We expect almost all Go programs to continue to compile and run as before. * Language change: go1.22 makes two changes to for loops. Previously, the variables declared by a for loop were created once and updated by each iteration. In go1.22, each iteration of the loop creates new variables, to avoid accidental sharing bugs. The transition support tooling described in the proposal continues to work in the same way it did in Go 1.21. * Language change: For loops may now range over integers * Language change: go1.22 includes a preview of a language change we are considering for a future version of Go: range-over-function iterators. Building with GOEXPERIMENT=rangefunc enables this feature. * go command: Commands in workspaces can now use a vendor directory containing the dependencies of the workspace. The directory is created by go work vendor, and used by build commands when the -mod flag is set to vendor, which is the default when a workspace vendor directory is present. Note that the vendor directory's contents for a workspace are different from those of a single module: if the directory at the root of a workspace also contains one of the modules in the workspace, its vendor directory can contain the dependencies of either the workspace or of the module, but not both. * go get is no longer supported outside of a module in the legacy GOPATH mode (that is, with GO111MODULE=off). Other build commands, such as go build and go test, will continue to work indefinitely for legacy GOPATH programs. * go mod init no longer attempts to import module requirements from configuration files for other vendoring tools (such as Gopkg.lock). * go test -cover now prints coverage summaries for covered packages that do not have their own test files. Prior to Go 1.22 a go test -cover run for such a package would report: ? mymod/mypack [no test files] and now with go1.22, functions in the package are treated as uncovered: mymod/mypack coverage: 0.0% of statements Note that if a package contains no executable code at all, we can't report a meaningful coverage percentage; for such packages the go tool will continue to report that there are no test files. * trace: The trace tool's web UI has been gently refreshed as part of the work to support the new tracer, resolving several issues and improving the readability of various sub-pages. The web UI now supports exploring traces in a thread-oriented view. The trace viewer also now displays the full duration of all system calls. These improvements only apply for viewing traces produced by programs built with go1.22 or newer. A future release will bring some of these improvements to traces produced by older version of Go. * vet: References to loop variables The behavior of the vet tool has changed to match the new semantics (see above) of loop variables in go1.22. When analyzing a file that requires go1.22 or newer (due to its go.mod file or a per-file build constraint), vetcode> no longer reports references to loop variables from within a function literal that might outlive the iteration of the loop. In Go 1.22, loop variables are created anew for each iteration, so such references are no longer at risk of using a variable after it has been updated by the loop. * vet: New warnings for missing values after append The vet tool now reports calls to append that pass no values to be appended to the slice, such as slice = append(slice). Such a statement has no effect, and experience has shown that is nearly always a mistake. * vet: New warnings for deferring time.Since The vet tool now reports a non- deferred call to time.Since(t) within a defer statement. This is equivalent to calling time.Now().Sub(t) before the defer statement, not when the deferred function is called. In nearly all cases, the correct code requires deferring the time.Since call. * vet: New warnings for mismatched key-value pairs in log/slog calls The vet tool now reports invalid arguments in calls to functions and methods in the structured logging package, log/slog, that accept alternating key/value pairs. It reports calls where an argument in a key position is neither a string nor a slog.Attr, and where a final key is missing its value. * runtime: The runtime now keeps type-based garbage collection metadata nearer to each heap object, improving the CPU performance (latency or throughput) of Go programs by 1-3%. This change also reduces the memory overhead of the majority Go programs by approximately 1% by deduplicating redundant metadata. Some programs may see a smaller improvement because this change adjusts the size class boundaries of the memory allocator, so some objects may be moved up a size class. A consequence of this change is that some objects' addresses that were previously always aligned to a 16 byte (or higher) boundary will now only be aligned to an 8 byte boundary. Some programs that use assembly instructions that require memory addresses to be more than 8-byte aligned and rely on the memory allocator's previous alignment behavior may break, but we expect such programs to be rare. Such programs may be built with GOEXPERIMENT=noallocheaders to revert to the old metadata layout and restore the previous alignment behavior, but package owners should update their assembly code to avoid the alignment assumption, as this workaround will be removed in a future release. * runtime: On the windows/amd64 port, programs linking or loading Go libraries built with -buildmode=c-archive or -buildmode=c-shared can now use the SetUnhandledExceptionFilter Win32 function to catch exceptions not handled by the Go runtime. Note that this was already supported on the windows/386 port. * compiler: Profile-guided Optimization (PGO) builds can now devirtualize a higher proportion of calls than previously possible. Most programs from a representative set of Go programs now see between 2 and 14% improvement from enabling PGO. * compiler: The compiler now interleaves devirtualization and inlining, so interface method calls are better optimized. * compiler: go1.22 also includes a preview of an enhanced implementation of the compiler's inlining phase that uses heuristics to boost inlinability at call sites deemed "important" (for example, in loops) and discourage inlining at call sites deemed "unimportant" (for example, on panic paths). Building with GOEXPERIMENT=newinliner enables the new call-site heuristics; see issue #61502 for more info and to provide feedback. * linker: The linker's -s and -w flags are now behave more consistently across all platforms. The -w flag suppresses DWARF debug information generation. The -s flag suppresses symbol table generation. The -s flag also implies the -w flag, which can be negated with -w=0. That is, -s -w=0 will generate a binary with DWARF debug information generation but without the symbol table. * linker: On ELF platforms, the -B linker flag now accepts a special form: with -B gobuildid, the linker will generate a GNU build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go build ID. * linker: On Windows, when building with -linkmode=internal, the linker now preserves SEH information from C object files by copying the .pdata and .xdata sections into the final binary. This helps with debugging and profiling binaries using native tools, such as WinDbg. Note that until now, C functions' SEH exception handlers were not being honored, so this change may cause some programs to behave differently. -linkmode=external is not affected by this change, as external linkers already preserve SEH information. * bootstrap: As mentioned in the Go 1.20 release notes, go1.22 now requires the final point release of Go 1.20 or later for bootstrap. We expect that Go 1.24 will require the final point release of go1.22 or later for bootstrap. * core library: New math/rand/v2 package: go1.22 includes the first “v2” package in the standard library, math/rand/v2. The changes compared to math/rand are detailed in proposal go#61716. The most important changes are: * The Read method, deprecated in math/rand, was not carried forward for math/rand/v2. (It remains available in math/rand.) The vast majority of calls to Read should use crypto/rand’s Read instead. Otherwise a custom Read can be constructed using the Uint64 method. * The global generator accessed by top-level functions is unconditionally randomly seeded. Because the API guarantees no fixed sequence of results, optimizations like per-thread random generator states are now possible. * The Source interface now has a single Uint64 method; there is no Source64 interface. * Many methods now use faster algorithms that were not possible to adopt in math/rand because they changed the output streams. * The Intn, Int31, Int31n, Int63, and Int64n top-level functions and methods from math/rand are spelled more idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64, and Int64N. There are also new top-level functions and methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN. * The new generic function N is like Int64N or Uint64N but works for any integer type. For example a random duration from 0 up to 5 minutes is rand.N(5*time.Minute). * The Mitchell & Reeds LFSR generator provided by math/rand’s Source has been replaced by two more modern pseudo-random generator sources: ChaCha8 PCG. ChaCha8 is a new, cryptographically strong random number generator roughly similar to PCG in efficiency. ChaCha8 is the algorithm used for the top- level functions in math/rand/v2. As of go1.22, math/rand's top-level functions (when not explicitly seeded) and the Go runtime also use ChaCha8 for randomness. * We plan to include an API migration tool in a future release, likely Go 1.23. * core library: New go/version package: The new go/version package implements functions for validating and comparing Go version strings. * core library: Enhanced routing patterns: HTTP routing in the standard library is now more expressive. The patterns used by net/http.ServeMux have been enhanced to accept methods and wildcards. This change breaks backwards compatibility in small ways, some obvious—patterns with "{" and "}" behave differently— and some less so—treatment of escaped paths has been improved. The change is controlled by a GODEBUG field named httpmuxgo121. Set httpmuxgo121=1 to restore the old behavior. * Minor changes to the library As always, there are various minor changes and updates to the library, made with the Go 1 promise of compatibility in mind. There are also various performance improvements, not enumerated here. * archive/tar: The new method Writer.AddFS adds all of the files from an fs.FS to the archive. * archive/zip: The new method Writer.AddFS adds all of the files from an fs.FS to the archive. * bufio: When a SplitFunc returns ErrFinalToken with a nil token, Scanner will now stop immediately. Previously, it would report a final empty token before stopping, which was usually not desired. Callers that do want to report a final empty token can do so by returning []byte{} rather than nil. * cmp: The new function Or returns the first in a sequence of values that is not the zero value. * crypto/tls: ConnectionState.ExportKeyingMaterial will now return an error unless TLS 1.3 is in use, or the extended_master_secret extension is supported by both the server and client. crypto/tls has supported this extension since Go 1.20. This can be disabled with the tlsunsafeekm=1 GODEBUG setting. * crypto/tls: By default, the minimum version offered by crypto/tls servers is now TLS 1.2 if not specified with config.MinimumVersion, matching the behavior of crypto/tls clients. This change can be reverted with the tls10server=1 GODEBUG setting. * crypto/tls: By default, cipher suites without ECDHE support are no longer offered by either clients or servers during pre-TLS 1.3 handshakes. This change can be reverted with the tlsrsakex=1 GODEBUG setting. * crypto/x509: The new CertPool.AddCertWithConstraint method can be used to add customized constraints to root certificates to be applied during chain building. * crypto/x509: On Android, root certificates will now be loaded from /data/misc/keychain/certs-added as well as /system/etc/security/cacerts. * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers with individual components larger than 31 bits. A new field which uses this type, Policies, is added to the Certificate struct, and is now populated during parsing. Any OIDs which cannot be represented using a asn1.ObjectIdentifier will appear in Policies, but not in the old PolicyIdentifiers field. When calling CreateCertificate, the Policies field is ignored, and policies are taken from the PolicyIdentifiers field. Using the x509usepolicies=1 GODEBUG setting inverts this, populating certificate policies from the Policies field, and ignoring the PolicyIdentifiers field. We may change the default value of x509usepolicies in Go 1.23, making Policies the default field for marshaling. * database/sql: The new Null[T] type provide a way to scan nullable columns for any column types. * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64 systems. Additional R_LARCH_* constants are defined for use with LoongArch systems. * encoding: The new methods AppendEncode and AppendDecode added to each of the Encoding types in the packages encoding/base32, encoding/base64, and encoding/hex simplify encoding and decoding from and to byte slices by taking care of byte slice buffer management. * encoding: The methods base32.Encoding.WithPadding and base64.Encoding.WithPadding now panic if the padding argument is a negative value other than NoPadding. * encoding/json: Marshaling and encoding functionality now escapes '\b' and '\f' characters as \b and \f instead of \u0008 and \u000c. * go/ast: The following declarations related to syntactic identifier resolution are now deprecated: Ident.Obj, Object, Scope, File.Scope, File.Unresolved, Importer, Package, NewPackage. In general, identifiers cannot be accurately resolved without type information. Consider, for example, the identifier K in T{K: ""}: it could be the name of a local variable if T is a map type, or the name of a field if T is a struct type. New programs should use the go/types package to resolve identifiers; see Object, Info.Uses, and Info.Defs for details. * go/ast: The new ast.Unparen function removes any enclosing parentheses from an expression. * go/types: The new Alias type represents type aliases. Previously, type aliases were not represented explicitly, so a reference to a type alias was equivalent to spelling out the aliased type, and the name of the alias was lost. The new representation retains the intermediate Alias. This enables improved error reporting (the name of a type alias can be reported), and allows for better handling of cyclic type declarations involving type aliases. In a future release, Alias types will also carry type parameter information. The new function Unalias returns the actual type denoted by an Alias type (or any other Type for that matter). * go/types: Because Alias types may break existing type switches that do not know to check for them, this functionality is controlled by a GODEBUG field named gotypesalias. With gotypesalias=0, everything behaves as before, and Alias types are never created. With gotypesalias=1, Alias types are created and clients must expect them. The default is gotypesalias=0. In a future release, the default will be changed to gotypesalias=1. Clients of go/types are urged to adjust their code as soon as possible to work with gotypesalias=1 to eliminate problems early. * go/types: The Info struct now exports the FileVersions map which provides per-file Go version information. * go/types: The new helper method PkgNameOf returns the local package name for the given import declaration. * go/types: The implementation of SizesFor has been adjusted to compute the same type sizes as the compiler when the compiler argument for SizesFor is "gc". The default Sizes implementation used by the type checker is now types.SizesFor("gc", "amd64"). * go/types: The start position (Pos) of the lexical environment block (Scope) that represents a function body has changed: it used to start at the opening curly brace of the function body, but now starts at the function's func token. * html/template: Javascript template literals may now contain Go template actions, and parsing a template containing one will no longer return ErrJSTemplate. Similarly the GODEBUG setting jstmpllitinterp no longer has any effect. * io: The new SectionReader.Outer method returns the ReaderAt, offset, and size passed to NewSectionReader. * log/slog: The new SetLogLoggerLevel function controls the level for the bridge between the `slog` and `log` packages. It sets the minimum level for calls to the top-level `slog` logging functions, and it sets the level for calls to `log.Logger` that go through `slog`. * math/big: The new method Rat.FloatPrec computes the number of fractional decimal digits required to represent a rational number accurately as a floating-point number, and whether accurate decimal representation is possible in the first place. * net: When io.Copy copies from a TCPConn to a UnixConn, it will now use Linux's splice(2) system call if possible, using the new method TCPConn.WriteTo. * net: The Go DNS Resolver, used when building with "-tags=netgo", now searches for a matching name in the Windows hosts file, located at %SystemRoot%\System32\drivers\etc\hosts, before making a DNS query. * net/http: The new functions ServeFileFS, FileServerFS, and NewFileTransportFS are versions of the existing ServeFile, FileServer, and NewFileTransport, operating on an fs.FS. * net/http: The HTTP server and client now reject requests and responses containing an invalid empty Content-Length header. The previous behavior may be restored by setting GODEBUG field httplaxcontentlength=1. * net/http: The new method Request.PathValue returns path wildcard values from a request and the new method Request.SetPathValue sets path wildcard values on a request. * net/http/cgi: When executing a CGI process, the PATH_INFO variable is now always set to the empty string or a value starting with a / character, as required by RFC 3875. It was previously possible for some combinations of Handler.Root and request URL to violate this requirement. * net/netip: The new AddrPort.Compare method compares two AddrPorts. * os: On Windows, the Stat function now follows all reparse points that link to another named entity in the system. It was previously only following IO_REPARSE_TAG_SYMLINK and IO_REPARSE_TAG_MOUNT_POINT reparse points. * os: On Windows, passing O_SYNC to OpenFile now causes write operations to go directly to disk, equivalent to O_SYNC on Unix platforms. * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and File.Readdirnames functions now read directory entries in batches to reduce the number of system calls, improving performance up to 30%. * os: When io.Copy copies from a File to a net.UnixConn, it will now use Linux's sendfile(2) system call if possible, using the new method File.WriteTo. * os/exec: On Windows, LookPath now ignores empty entries in %PATH%, and returns ErrNotFound (instead of ErrNotExist) if no executable file extension is found to resolve an otherwise-unambiguous name. * os/exec: On Windows, Command and Cmd.Start no longer call LookPath if the path to the executable is already absolute and has an executable file extension. In addition, Cmd.Start no longer writes the resolved extension back to the Path field, so it is now safe to call the String method concurrently with a call to Start. * reflect: The Value.IsZero method will now return true for a floating-point or complex negative zero, and will return true for a struct value if a blank field (a field named _) somehow has a non-zero value. These changes make IsZero consistent with comparing a value to zero using the language == operator. * reflect: The PtrTo function is deprecated, in favor of PointerTo. * reflect: The new function TypeFor returns the Type that represents the type argument T. Previously, to get the reflect.Type value for a type, one had to use reflect.TypeOf((*T)(nil)).Elem(). This may now be written as reflect.TypeForT. * runtime/metrics: Four new histogram metrics /sched/pauses/stopping/gc:seconds, /sched/pauses/stopping/other:seconds, /sched/pauses/total/gc:seconds, and /sched/pauses/total/other:seconds provide additional details about stop-the-world pauses. The "stopping" metrics report the time taken from deciding to stop the world until all goroutines are stopped. The "total" metrics report the time taken from deciding to stop the world until it is started again. * runtime/metrics: The /gc/pauses:seconds metric is deprecated, as it is equivalent to the new /sched/pauses/total/gc:seconds metric. * runtime/metrics: /sync/mutex/wait/total:seconds now includes contention on runtime-internal locks in addition to sync.Mutex and sync.RWMutex. * runtime/pprof: Mutex profiles now scale contention by the number of goroutines blocked on the mutex. This provides a more accurate representation of the degree to which a mutex is a bottleneck in a Go program. For instance, if 100 goroutines are blocked on a mutex for 10 milliseconds, a mutex profile will now record 1 second of delay instead of 10 milliseconds of delay. * runtime/pprof: Mutex profiles also now include contention on runtime- internal locks in addition to sync.Mutex and sync.RWMutex. Contention on runtime-internal locks is always reported at runtime._LostContendedRuntimeLock. A future release will add complete stack traces in these cases. * runtime/pprof: CPU profiles on Darwin platforms now contain the process's memory map, enabling the disassembly view in the pprof tool. * runtime/trace: The execution tracer has been completely overhauled in this release, resolving several long-standing issues and paving the way for new use-cases for execution traces. * runtime/trace: Execution traces now use the operating system's clock on most platforms (Windows excluded) so it is possible to correlate them with traces produced by lower-level components. Execution traces no longer depend on the reliability of the platform's clock to produce a correct trace. Execution traces are now partitioned regularly on-the-fly and as a result may be processed in a streamable way. Execution traces now contain complete durations for all system calls. Execution traces now contain information about the operating system threads that goroutines executed on. The latency impact of starting and stopping execution traces has been dramatically reduced. Execution traces may now begin or end during the garbage collection mark phase. * runtime/trace: To allow Go developers to take advantage of these improvements, an experimental trace reading package is available at golang.org/x/exp/trace. Note that this package only works on traces produced by programs built with go1.22 at the moment. Please try out the package and provide feedback on the corresponding proposal issue. * runtime/trace: If you experience any issues with the new execution tracer implementation, you may switch back to the old implementation by building your Go program with GOEXPERIMENT=noexectracer2. If you do, please file an issue, otherwise this option will be removed in a future release. * slices: The new function Concat concatenates multiple slices. * slices: Functions that shrink the size of a slice (Delete, DeleteFunc, Compact, CompactFunc, and Replace) now zero the elements between the new length and the old length. * slices: Insert now always panics if the argument i is out of range. Previously it did not panic in this situation if there were no elements to be inserted. * syscall: The syscall package has been frozen since Go 1.4 and was marked as deprecated in Go 1.11, causing many editors to warn about any use of the package. However, some non-deprecated functionality requires use of the syscall package, such as the os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints on such code, the syscall package is no longer marked as deprecated. The package remains frozen to most new functionality, and new code remains encouraged to use golang.org/x/sys/unix or golang.org/x/sys/windows where possible. * syscall: On Linux, the new SysProcAttr.PidFD field allows obtaining a PID FD when starting a child process via StartProcess or os/exec. * syscall: On Windows, passing O_SYNC to Open now causes write operations to go directly to disk, equivalent to O_SYNC on Unix platforms. * testing/slogtest: The new Run function uses sub-tests to run test cases, providing finer-grained control. * Ports: Darwin: On macOS on 64-bit x86 architecture (the darwin/amd64 port), the Go toolchain now generates position-independent executables (PIE) by default. Non-PIE binaries can be generated by specifying the -buildmode=exe build flag. On 64-bit ARM-based macOS (the darwin/arm64 port), the Go toolchain already generates PIE by default. go1.22 is the last release that will run on macOS 10.15 Catalina. Go 1.23 will require macOS 11 Big Sur or later. * Ports: Arm: The GOARM environment variable now allows you to select whether to use software or hardware floating point. Previously, valid GOARM values were 5, 6, or 7. Now those same values can be optionally followed by ,softfloat or ,hardfloat to select the floating-point implementation. This new option defaults to softfloat for version 5 and hardfloat for versions 6 and 7. * Ports: Loong64: The loong64 port now supports passing function arguments and results using registers. The linux/loong64 port now supports the address sanitizer, memory sanitizer, new-style linker relocations, and the plugin build mode. * OpenBSD go1.22 adds an experimental port to OpenBSD on big-endian 64-bit PowerPC (openbsd/ppc64). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-443=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-443=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.22-1.22.0-150000.1.6.1 * go1.22-race-1.22.0-150000.1.6.1 * go1.22-doc-1.22.0-150000.1.6.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.22-1.22.0-150000.1.6.1 * go1.22-race-1.22.0-150000.1.6.1 * go1.22-doc-1.22.0-150000.1.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218424

1 0

SUSE-SU-2024:0444-1: important: Security update for suse-build-key
by OPENSUSE-UPDATES 09 Feb '24

09 Feb '24

# Security update for suse-build-key Announcement ID: SUSE-SU-2024:0444-1 Rating: important References: * bsc#1219123 * bsc#1219189 * jsc#PED-2777 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has two security fixes can now be installed. ## Description: This update for suse-build-key fixes the following issues: This update runs a import-suse-build-key script. The previous libzypp-post-script based installation is replaced with a systemd timer and service (bsc#1217215 bsc#1216410 jsc#PED-2777). \- suse-build-key- import.service \- suse-build-key-import.timer It imports the future SUSE Linux Enterprise 15 4096 bit RSA key primary and reserve keys. After successful import the timer is disabled. To manually import them you can also run: # rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-63c9481c.asc # rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-d588dc46-63c939db.asc Bugfix added since last update: * run rpm commands in import script only when libzypp is not active. bsc#1219189 bsc#1219123 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-444=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-444=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-444=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-444=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-444=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-444=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-444=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-444=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-444=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-444=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-444=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-444=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-444=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-444=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-444=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-444=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-444=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-444=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-444=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-444=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-444=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-444=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-444=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-444=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-444=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-444=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-444=1 ## Package List: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Manager Proxy 4.3 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Manager Server 4.3 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Enterprise Storage 7.1 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * suse-build-key-12.0-150000.8.40.1 * openSUSE Leap Micro 5.3 (noarch) * suse-build-key-12.0-150000.8.40.1 * openSUSE Leap Micro 5.4 (noarch) * suse-build-key-12.0-150000.8.40.1 * openSUSE Leap 15.5 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * suse-build-key-12.0-150000.8.40.1 * Basesystem Module 15-SP5 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * suse-build-key-12.0-150000.8.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * suse-build-key-12.0-150000.8.40.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219123 * https://bugzilla.suse.com/show_bug.cgi?id=1219189 * https://jira.suse.com/browse/PED-2777

1 0

SUSE-RU-2024:0440-1: moderate: Recommended update for scap-security-guide
by OPENSUSE-UPDATES 09 Feb '24

09 Feb '24

# Recommended update for scap-security-guide Announcement ID: SUSE-RU-2024:0440-1 Rating: moderate References: * jsc#ECO-3319 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.0 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Client Tools for SLE Micro 5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for scap-security-guide fixes the following issues: * updated to 0.1.71 (jsc#ECO-3319) * Add RHEL 9 STIG * Add support for Debian 12 * Update PCI-DSS profile for RHEL * lots of bugfixes and improvements for SLE * removed left over file, patch upstreamed in 0.1.69 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-440=1 * SUSE Manager Client Tools for SLE Micro 5 zypper in -t patch SUSE-SLE-Manager-Tools-For-Micro-5-2024-440=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-440=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2024-440=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-440=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-440=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-440=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-440=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-440=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2024-440=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-440=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-440=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-440=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2024-440=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-440=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-440=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-440=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-440=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-440=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-440=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-440=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. ## Package List: * openSUSE Leap 15.5 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Manager Client Tools for SLE Micro 5 (noarch) * scap-security-guide-0.1.71-150000.1.75.1 * Basesystem Module 15-SP5 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Manager Proxy 4.3 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Manager Server 4.3 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE Enterprise Storage 7.1 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 * SUSE CaaS Platform 4.0 (noarch) * scap-security-guide-redhat-0.1.71-150000.1.75.1 * scap-security-guide-ubuntu-0.1.71-150000.1.75.1 * scap-security-guide-0.1.71-150000.1.75.1 * scap-security-guide-debian-0.1.71-150000.1.75.1 ## References: * https://jira.suse.com/browse/ECO-3319

1 0

SUSE-RU-2024:0433-1: moderate: Recommended update for source-highlight
by OPENSUSE-UPDATES 08 Feb '24

08 Feb '24

# Recommended update for source-highlight Announcement ID: SUSE-RU-2024:0433-1 Rating: moderate References: * jsc#PED-6584 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature can now be installed. ## Description: This update for source-highlight fixes the following issues: Version update to 3.1.9: * changed esc.style to work better with dark theme terminals * updated C and C++ to more recent standards * fixed zsh.lang * added new Python keywords * added Rust * added ixpe * added vim * ships it to missing service packs like SUSE Linux Enterprise 15 SP3. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-433=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-433=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-433=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-433=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-433=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-433=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-433=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-433=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-433=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-433=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-433=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-433=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-433=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-433=1 ## Package List: * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * source-highlight-debugsource-3.1.9-150000.3.7.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * source-highlight-debugsource-3.1.9-150000.3.7.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * source-highlight-debugsource-3.1.9-150000.3.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * source-highlight-debugsource-3.1.9-150000.3.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * source-highlight-debugsource-3.1.9-150000.3.7.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * source-highlight-cgi-debuginfo-3.1.9-150000.3.7.1 * source-highlight-debugsource-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * source-highlight-3.1.9-150000.3.7.1 * source-highlight-cgi-3.1.9-150000.3.7.1 * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * source-highlight-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * openSUSE Leap 15.5 (x86_64) * libsource-highlight4-32bit-3.1.9-150000.3.7.1 * libsource-highlight4-32bit-debuginfo-3.1.9-150000.3.7.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * source-highlight-debugsource-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * source-highlight-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * source-highlight-debugsource-3.1.9-150000.3.7.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * source-highlight-debugsource-3.1.9-150000.3.7.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libsource-highlight4-debuginfo-3.1.9-150000.3.7.1 * libsource-highlight-devel-3.1.9-150000.3.7.1 * libsource-highlight4-3.1.9-150000.3.7.1 ## References: * https://jira.suse.com/browse/PED-6584

1 0

SUSE-SU-2024:0430-1: moderate: Security update for cosign
by OPENSUSE-UPDATES 08 Feb '24

08 Feb '24

# Security update for cosign Announcement ID: SUSE-SU-2024:0430-1 Rating: moderate References: * bsc#1218207 * jsc#SLE-23879 Cross-References: * CVE-2023-48795 CVSS scores: * CVE-2023-48795 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-48795 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for cosign fixes the following issues: Updated to 2.2.3 (jsc#SLE-23879): Bug Fixes: * Fix race condition on verification with multiple signatures attached to image (#3486) * fix(clean): Fix clean cmd for private registries (#3446) * Fixed BYO PKI verification (#3427) Features: * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466) * Add support for OpenVEX predicate type (#3405) Documentation: * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447) * add examples for cosign attach signature cmd (#3468) Misc: * Remove CertSubject function (#3467) * Use local rekor and fulcio instances in e2e tests (#3478) * bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207) Updated to 2.2.2 (jsc#SLE-23879): v2.2.2 adds a new container with a shell, gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing container gcr.io/projectsigstore/cosign:vx.y.z without a shell. For private deployments, we have also added an alias for \--insecure-skip-log, --private-infrastructure. Bug Fixes: * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS * Don't require CT log keys if using a key/sk (#3415) * Fix copy without any flag set (#3409) * Update cosign generate cmd to not include newline (#3393) * Fix idempotency error with signing (#3371) Features: * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383) * Use the timeout flag value in verify* commands. (#3391) * add --private-infrastructure flag (#3369) Container Updates: * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373) Documentation: * Update SBOM_SPEC.md (#3358) * CVE-2023-48795: Fixed the Terrapin attack in embedded golang.org/x/crypto/ssh (bsc#1218207). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-430=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-430=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-430=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cosign-2.2.3-150400.3.17.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * cosign-debuginfo-2.2.3-150400.3.17.1 * cosign-2.2.3-150400.3.17.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cosign-2.2.3-150400.3.17.1 ## References: * https://www.suse.com/security/cve/CVE-2023-48795.html * https://bugzilla.suse.com/show_bug.cgi?id=1218207 * https://jira.suse.com/browse/SLE-23879

1 0

SUSE-OU-2024:0431-1: moderate: Optional update for
by OPENSUSE-UPDATES 08 Feb '24

08 Feb '24

# Optional update for Announcement ID: SUSE-OU-2024:0431-1 Rating: moderate References: * bsc#1199654 * bsc#1218626 * jsc#MSC-375 Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that contains one feature and has two fixes can now be installed. ## Description: This optional update for provides: * Deliver missing wxWidgets-3_0 to SUSE Package Hub 15 SP4 and solve installation issues on Filezilla and python3-wxPython. (bsc#1199654) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-431=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-431=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-431=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libwx_gtk2u_aui-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_baseu_net-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_aui-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_stc-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_media-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_richtext-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_xrc-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_propgrid-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_baseu_xml-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_richtext-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_stc-suse3_0_5-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-plugin-sound_sdlu-3_0-3.0.5.1-150200.11.5.21 * libwx_gtk2u_qa-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_propgrid-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_qa-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_gl-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_html-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_gl-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_baseu_xml-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_baseu_net-suse3_0_5-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-devel-3.0.5.1-150200.11.5.21 * libwx_baseu-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_baseu-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_xrc-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_ribbon-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_media-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_ribbon-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-plugin-sound_sdlu-3_0-debuginfo-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-devel-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_adv-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_adv-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_core-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_html-suse3_0_5-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-debugsource-3.0.5.1-150200.11.5.21 * libwx_gtk2u_core-suse3_0_5-3.0.5.1-150200.11.5.21 * openSUSE Leap 15.5 (x86_64) * libwx_gtk2u_html-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_aui-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * libwx_gtk2u_core-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_baseu-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-plugin-sound_sdlu-3_0-32bit-3.0.5.1-150200.11.5.21 * libwx_gtk2u_propgrid-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * libwx_gtk2u_adv-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * libwx_baseu_net-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_adv-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_richtext-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * libwx_baseu_net-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * libwx_gtk2u_core-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-devel-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_gl-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * libwx_gtk2u_qa-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_baseu-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_media-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * libwx_gtk2u_richtext-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_ribbon-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_baseu_xml-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_xrc-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-plugin-sound_sdlu-3_0-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_stc-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * libwx_gtk2u_media-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_xrc-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_gl-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_qa-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-devel-32bit-3.0.5.1-150200.11.5.21 * libwx_gtk2u_ribbon-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * libwx_gtk2u_aui-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_propgrid-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_html-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * libwx_gtk2u_stc-suse3_0_5-32bit-debuginfo-3.0.5.1-150200.11.5.21 * libwx_baseu_xml-suse3_0_5-32bit-3.0.5.1-150200.11.5.21 * openSUSE Leap 15.5 (noarch) * wxWidgets-lang-3.0.5.1-150200.11.5.21 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libwx_gtk2u_aui-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_baseu_net-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_aui-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_stc-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_media-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_richtext-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_xrc-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_propgrid-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_baseu_xml-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_richtext-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_stc-suse3_0_5-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-plugin-sound_sdlu-3_0-3.0.5.1-150200.11.5.21 * libwx_gtk2u_qa-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_propgrid-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_qa-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_gl-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_html-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_gl-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_baseu_xml-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_baseu_net-suse3_0_5-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-devel-3.0.5.1-150200.11.5.21 * libwx_baseu-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_baseu-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_xrc-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_ribbon-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_media-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_ribbon-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-plugin-sound_sdlu-3_0-debuginfo-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-devel-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_adv-suse3_0_5-3.0.5.1-150200.11.5.21 * libwx_gtk2u_adv-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_core-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_gtk2u_html-suse3_0_5-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-debugsource-3.0.5.1-150200.11.5.21 * libwx_gtk2u_core-suse3_0_5-3.0.5.1-150200.11.5.21 * SUSE Package Hub 15 15-SP5 (noarch) * wxWidgets-lang-3.0.5.1-150200.11.5.21 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libwx_gtk2u_core-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_baseu-suse3_0_5-debuginfo-3.0.5.1-150200.11.5.21 * libwx_baseu-suse3_0_5-3.0.5.1-150200.11.5.21 * wxWidgets-3_0-debugsource-3.0.5.1-150200.11.5.21 * libwx_gtk2u_core-suse3_0_5-3.0.5.1-150200.11.5.21 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1199654 * https://bugzilla.suse.com/show_bug.cgi?id=1218626 * https://jira.suse.com/browse/MSC-375

1 0

SUSE-RU-2024:0432-1: moderate: Recommended update for obs-service-kiwi_metainfo_helper
by OPENSUSE-UPDATES 08 Feb '24

08 Feb '24

# Recommended update for obs-service-kiwi_metainfo_helper Announcement ID: SUSE-RU-2024:0432-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 An update that can now be installed. ## Description: This update for obs-service-kiwi_metainfo_helper fixes the following issues: * Replace %ARCH% with the architecture in images for supporting subscriptions in SCC based on architectures * cpio on SLE12 does not support -D option, emulate it ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-432=1 ## Package List: * openSUSE Leap 15.5 (noarch) * obs-service-kiwi_metainfo_helper-0.6-150000.1.21.1

1 0

SUSE-SU-2024:0429-1: important: Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)
by OPENSUSE-UPDATES 08 Feb '24

08 Feb '24

# Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:0429-1 Rating: important References: * bsc#1218255 Cross-References: * CVE-2023-6932 CVSS scores: * CVE-2023-6932 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_100 fixes one issue. The following security issue was fixed: * CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-429=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-429=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_100-default-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-2-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_100-default-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-2-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6932.html * https://bugzilla.suse.com/show_bug.cgi?id=1218255

1 0

SUSE-SU-2024:0423-1: important: Security update for libavif
by OPENSUSE-UPDATES 08 Feb '24

08 Feb '24

# Security update for libavif Announcement ID: SUSE-SU-2024:0423-1 Rating: important References: * bsc#1218303 Cross-References: * CVE-2023-6704 CVSS scores: * CVE-2023-6704 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-6704 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for libavif fixes the following issues: * CVE-2023-6704: Fixed use after free by not storing colorproperties until alpha item is found (bsc#1218303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-423=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-423=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-423=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-423=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-423=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-423=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-423=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-423=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-423=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-423=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-423=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libavif-debugsource-0.9.3-150400.3.3.1 * libavif-devel-0.9.3-150400.3.3.1 * gdk-pixbuf-loader-libavif-debuginfo-0.9.3-150400.3.3.1 * gdk-pixbuf-loader-libavif-0.9.3-150400.3.3.1 * libavif13-0.9.3-150400.3.3.1 * libavif13-debuginfo-0.9.3-150400.3.3.1 * avif-tools-debuginfo-0.9.3-150400.3.3.1 * avif-tools-0.9.3-150400.3.3.1 * openSUSE Leap 15.4 (x86_64) * libavif13-32bit-debuginfo-0.9.3-150400.3.3.1 * libavif13-32bit-0.9.3-150400.3.3.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libavif13-64bit-debuginfo-0.9.3-150400.3.3.1 * libavif13-64bit-0.9.3-150400.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libavif-debugsource-0.9.3-150400.3.3.1 * libavif-devel-0.9.3-150400.3.3.1 * gdk-pixbuf-loader-libavif-debuginfo-0.9.3-150400.3.3.1 * gdk-pixbuf-loader-libavif-0.9.3-150400.3.3.1 * libavif13-0.9.3-150400.3.3.1 * libavif13-debuginfo-0.9.3-150400.3.3.1 * avif-tools-debuginfo-0.9.3-150400.3.3.1 * avif-tools-0.9.3-150400.3.3.1 * openSUSE Leap 15.5 (x86_64) * libavif13-32bit-debuginfo-0.9.3-150400.3.3.1 * libavif13-32bit-0.9.3-150400.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libavif-debugsource-0.9.3-150400.3.3.1 * libavif13-0.9.3-150400.3.3.1 * libavif13-debuginfo-0.9.3-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libavif-debugsource-0.9.3-150400.3.3.1 * libavif13-0.9.3-150400.3.3.1 * libavif13-debuginfo-0.9.3-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libavif-debugsource-0.9.3-150400.3.3.1 * libavif13-0.9.3-150400.3.3.1 * libavif13-debuginfo-0.9.3-150400.3.3.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libavif-debugsource-0.9.3-150400.3.3.1 * libavif13-0.9.3-150400.3.3.1 * libavif13-debuginfo-0.9.3-150400.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libavif-debugsource-0.9.3-150400.3.3.1 * libavif13-0.9.3-150400.3.3.1 * libavif13-debuginfo-0.9.3-150400.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libavif-debugsource-0.9.3-150400.3.3.1 * libavif13-0.9.3-150400.3.3.1 * libavif13-debuginfo-0.9.3-150400.3.3.1 * SUSE Manager Proxy 4.3 (x86_64) * libavif-debugsource-0.9.3-150400.3.3.1 * libavif13-0.9.3-150400.3.3.1 * libavif13-debuginfo-0.9.3-150400.3.3.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libavif-debugsource-0.9.3-150400.3.3.1 * libavif13-0.9.3-150400.3.3.1 * libavif13-debuginfo-0.9.3-150400.3.3.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libavif-debugsource-0.9.3-150400.3.3.1 * libavif13-0.9.3-150400.3.3.1 * libavif13-debuginfo-0.9.3-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6704.html * https://bugzilla.suse.com/show_bug.cgi?id=1218303

1 0

SUSE-RU-2024:0424-1: moderate: Recommended update for python3-M2Crypto
by OPENSUSE-UPDATES 08 Feb '24

08 Feb '24

# Recommended update for python3-M2Crypto Announcement ID: SUSE-RU-2024:0424-1 Rating: moderate References: * bsc#1205042 * bsc#1212757 * bsc#1217782 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has three fixes can now be installed. ## Description: This update for python3-M2Crypto fixes the following issues: * Packaging changes (bsc#1217782, bsc#1212757) * Set OpenSSL 3.0 as the default openssl in Tumbleweed (bsc#1205042) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-424=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-424=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-424=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-424=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-424=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-424=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-424=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-424=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-424=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-424=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python3-M2Crypto-debuginfo-0.38.0-150400.10.1 * python3-M2Crypto-debugsource-0.38.0-150400.10.1 * python3-M2Crypto-0.38.0-150400.10.1 * openSUSE Leap 15.4 (noarch) * python3-M2Crypto-doc-0.38.0-150400.10.1 * openSUSE Leap Micro 5.3 (aarch64 ppc64le s390x x86_64) * python3-M2Crypto-debuginfo-0.38.0-150400.10.1 * python3-M2Crypto-debugsource-0.38.0-150400.10.1 * python3-M2Crypto-0.38.0-150400.10.1 * openSUSE Leap Micro 5.4 (aarch64 ppc64le s390x x86_64) * python3-M2Crypto-debuginfo-0.38.0-150400.10.1 * python3-M2Crypto-debugsource-0.38.0-150400.10.1 * python3-M2Crypto-0.38.0-150400.10.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-M2Crypto-debuginfo-0.38.0-150400.10.1 * python3-M2Crypto-debugsource-0.38.0-150400.10.1 * python3-M2Crypto-0.38.0-150400.10.1 * openSUSE Leap 15.5 (noarch) * python3-M2Crypto-doc-0.38.0-150400.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-M2Crypto-debuginfo-0.38.0-150400.10.1 * python3-M2Crypto-debugsource-0.38.0-150400.10.1 * python3-M2Crypto-0.38.0-150400.10.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-M2Crypto-debuginfo-0.38.0-150400.10.1 * python3-M2Crypto-debugsource-0.38.0-150400.10.1 * python3-M2Crypto-0.38.0-150400.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-M2Crypto-debuginfo-0.38.0-150400.10.1 * python3-M2Crypto-debugsource-0.38.0-150400.10.1 * python3-M2Crypto-0.38.0-150400.10.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-M2Crypto-debuginfo-0.38.0-150400.10.1 * python3-M2Crypto-debugsource-0.38.0-150400.10.1 * python3-M2Crypto-0.38.0-150400.10.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * python3-M2Crypto-debuginfo-0.38.0-150400.10.1 * python3-M2Crypto-debugsource-0.38.0-150400.10.1 * python3-M2Crypto-0.38.0-150400.10.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-M2Crypto-debuginfo-0.38.0-150400.10.1 * python3-M2Crypto-debugsource-0.38.0-150400.10.1 * python3-M2Crypto-0.38.0-150400.10.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1205042 * https://bugzilla.suse.com/show_bug.cgi?id=1212757 * https://bugzilla.suse.com/show_bug.cgi?id=1217782

1 0

SUSE-RU-2024:0427-1: moderate: Recommended update for supportutils
by OPENSUSE-UPDATES 08 Feb '24

08 Feb '24

# Recommended update for supportutils Announcement ID: SUSE-RU-2024:0427-1 Rating: moderate References: * bsc#1183663 * bsc#1193173 * bsc#1196293 * bsc#1211547 * bsc#1216049 * bsc#1216388 * bsc#1216390 * bsc#1216522 * bsc#1216827 * bsc#1217287 * bsc#1218201 * bsc#1218282 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has 12 fixes can now be installed. ## Description: This update for supportutils fixes the following issues: * Update to version 3.1.28 * Correctly detects Xen Dom0 (bsc#1218201) * Fixed smart disk error (bsc#1218282) * Remove supportutils requires for util-linux-systemd and kmod (bsc#1193173) * Added missing klp information to kernel-livepatch.txt (bsc#1216390) * Fixed plugins creating empty files when using supportconfig.rc (bsc#1216388) * Provides long listing for /etc/sssd/sssd.conf (bsc#1211547) * Optimize lsof usage (bsc#1183663) * Collects chrony or ntp as needed (bsc#1196293) * Fixed podman display issue (bsc#1217287) * Added nvme-stas configuration to nvme.txt (bsc#1216049) * Added timed command to fs-files.txt (bsc#1216827) * Collects zypp history file issue#166 (bsc#1216522) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-427=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-427=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-427=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-427=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-427=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-427=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-427=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-427=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-427=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-427=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-427=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-427=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-427=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-427=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-427=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-427=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-427=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-427=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-427=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-427=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-427=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-427=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-427=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-427=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-427=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-427=1 ## Package List: * openSUSE Leap 15.3 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * openSUSE Leap Micro 5.3 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * openSUSE Leap Micro 5.4 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * openSUSE Leap 15.5 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * Basesystem Module 15-SP5 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Real Time 15 SP4 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Manager Proxy 4.3 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Manager Server 4.3 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Enterprise Storage 7.1 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * supportutils-3.1.28-150300.7.35.24.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * supportutils-3.1.28-150300.7.35.24.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1183663 * https://bugzilla.suse.com/show_bug.cgi?id=1193173 * https://bugzilla.suse.com/show_bug.cgi?id=1196293 * https://bugzilla.suse.com/show_bug.cgi?id=1211547 * https://bugzilla.suse.com/show_bug.cgi?id=1216049 * https://bugzilla.suse.com/show_bug.cgi?id=1216388 * https://bugzilla.suse.com/show_bug.cgi?id=1216390 * https://bugzilla.suse.com/show_bug.cgi?id=1216522 * https://bugzilla.suse.com/show_bug.cgi?id=1216827 * https://bugzilla.suse.com/show_bug.cgi?id=1217287 * https://bugzilla.suse.com/show_bug.cgi?id=1218201 * https://bugzilla.suse.com/show_bug.cgi?id=1218282

1 0

SUSE-SU-2024:0414-1: important: Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP4)
by OPENSUSE-UPDATES 07 Feb '24

07 Feb '24

# Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:0414-1 Rating: important References: * bsc#1216044 * bsc#1217522 * bsc#1218255 Cross-References: * CVE-2023-5178 * CVE-2023-6176 * CVE-2023-6932 CVSS scores: * CVE-2023-5178 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6176 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6176 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6932 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_46 fixes several issues. The following security issues were fixed: * CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). * CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522). * CVE-2023-5178: Fixed a use-after-free vulnerability in queue intialization setup (bsc#1215768). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-412=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-414=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-413=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-414=1 SUSE-2024-413=1 SUSE-2024-412=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_46-default-debuginfo-11-150400.2.2 * kernel-livepatch-SLE15-SP4_Update_8-debugsource-11-150400.2.2 * kernel-livepatch-5_14_21-150400_24_46-default-11-150400.2.2 * kernel-livepatch-5_14_21-150400_24_66-default-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_55-default-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_10-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_55-default-debuginfo-10-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_46-default-debuginfo-11-150400.2.2 * kernel-livepatch-SLE15-SP4_Update_8-debugsource-11-150400.2.2 * kernel-livepatch-5_14_21-150400_24_46-default-11-150400.2.2 * kernel-livepatch-5_14_21-150400_24_66-default-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_55-default-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_10-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_55-default-debuginfo-10-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5178.html * https://www.suse.com/security/cve/CVE-2023-6176.html * https://www.suse.com/security/cve/CVE-2023-6932.html * https://bugzilla.suse.com/show_bug.cgi?id=1216044 * https://bugzilla.suse.com/show_bug.cgi?id=1217522 * https://bugzilla.suse.com/show_bug.cgi?id=1218255

1 0

SUSE-SU-2024:0418-1: important: Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1)
by OPENSUSE-UPDATES 07 Feb '24

07 Feb '24

# Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1) Announcement ID: SUSE-SU-2024:0418-1 Rating: important References: * bsc#1218255 Cross-References: * CVE-2023-6932 CVSS scores: * CVE-2023-6932 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP1 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 4.12.14-150100_197_134 fixes one issue. The following security issue was fixed: * CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP1 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2024-418=1 SUSE-SLE- Module-Live-Patching-15-SP1-2024-415=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-417=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-417=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP1 (ppc64le x86_64) * kernel-livepatch-4_12_14-150100_197_134-default-11-150100.2.2 * kernel-livepatch-4_12_14-150100_197_160-default-3-150100.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_8-debugsource-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-debuginfo-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-2-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_8-debugsource-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-debuginfo-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-2-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6932.html * https://bugzilla.suse.com/show_bug.cgi?id=1218255

1 0

SUSE-RU-2024:0408-1: moderate: Recommended update for podman
by OPENSUSE-UPDATES 07 Feb '24

07 Feb '24

# Recommended update for podman Announcement ID: SUSE-RU-2024:0408-1 Rating: moderate References: * bsc#1217828 Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for podman fixes the following issues: * Update to version 4.8.3: * Update RELEASE_NOTES.md * update module golang.org/x/crypto [security] * Error on HyperV VM start when gvproxy has failed to start * Refactor network backend dependencies: * podman requires either netavark or cni-plugins. On ALP, require netavark, otherwise prefer netavark but don't force it. * This fixes missing cni-plugins in some scenarios * Default to netavark everywhere where it's available * Update to version 4.8.2: * Update RELEASE_NOTES.md * Kube Play - set ReportWriter when building an image * Fix user-mode net init flag on first time install * Default to the new networking backend, netavark, on openSUSE (bsc#1217828) * Update to version 4.8.1: * Handle symlinks when checking DB vs runtime configs * libpod: Detect whether we have a private UTS namespace on FreeBSD * pkg/bindings: add new APIVersionError error type * fix podman-remote exec regression with v4.8 * sqlite: fix issue in ValidateDBConfig() * sqlite: fix missing Commit() in RemovePodContainers() * sqlite: set busy timeout to 100s * Fix locking error in WSL machine rm -f * Gating test fixes * If API calls for kube play --replace, then replace pod * Fix wsl.conf generation when user-mode-networking is disabled * Update to version 4.8.0: * Bump to Buildah v1.33.2 * [CI:DOCS] Update release notes * machine applehv: create better error on start failure * Cirrus: Update operating branch * rootless_tutorial: modernize * Update to libhvee 0.5.0 * vmtypes names cannot be used as machine names * Add support for --compat-auth-file in login/logout * Update tests for a c/common error message change * Update c/image and c/common to latest, c/buildah to main * CI: test overlay and vfs * [CI:DOCS] Add link to podman py docs * Test fixes for debian * pasta tests: remove some skips * VM images: bump to 2023-11-16 * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security] * [CI:DOCS] Machine test timeout env var * Quadlet - add support for UID and GID Mapping * Quadlet - Allow using symlink on the base search paths * [skip-ci] Update dessant/lock-threads action to v5 * Avoid empty SSH keys on applehv * qemu,parseUSB: minor refactor * fix(deps): update module github.com/gorilla/handlers to v1.5.2 * docs: fix relabeling command * Pass secrets from the host down to internal podman containers * (Temporary) Emergency CI fix: quay search is broken * Update podman-stats.1.md.in * [CI:BUILD] packit: handle builds for RC releases * Quadlet test - add case for multi = sign in mount * set RLIMIT_NOFILE soft limit to match the hard limit on mac * rootless: use functionalities from c/storage * CI: e2e: fix a smattering of test bugs that slipped in * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1 * vendor: update c/storage * Improve the documentation of quadlet * Fix socket mapping socket mapping nits * fix(deps): update module golang.org/x/tools to v0.15.0 * fix(deps): update github.com/containers/libhvee digest to 9651e31 * [skip-ci] Update github/issue-labeler action to v3.3 * Document --userns=auto behaviour for rootless users * machine: qemu: add usb host passthrough * fix(deps): update module golang.org/x/net to v0.18.0 * fix(deps): update module github.com/onsi/gomega to v1.30.0 * Refactor Ignition configuration for virt providers * [CI:BUILD] rpm: disable GOPROXY * Automatic code cleanups [JetBrains] * Refactor key machine objects * systests: add [NNN] prefix in logs, NNN = filename * systests: add a last-minute check for db backend * applehv: allow virtiofs to mount to root * Run codespell on podman * update completion scripts for cobra v1.8.0 * Fix man page display of podman-kube-generate * Try to fix the broken formatting of man podman-kube-apply(1). * fix(deps): update module golang.org/x/text to v0.14.0 * docs: make CNI removal explicit * fix(deps): update module github.com/gorilla/mux to v1.8.1 * fix(deps): update module github.com/spf13/cobra to v1.8.0 * fix(deps): update module golang.org/x/sync to v0.5.0 * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18 * Podman push --help should reveal default compression * Update container-device-interface (CDI) to v0.6.2 * fix: adjust helper string in machine_common * fix: adjust helper string in machine_common * remote,test: remove .dockerignore which is a symlink * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2 * fix: adjust helper string in machine_common * vendor: update github.com/coreos/go-systemd/v22 to latest main * CI: default to sqlite * vendor: update c/common * check system connections before machine init * Consume OCI images for machine image * freebsd: drop dead code * libpod: make removePodCgroup linux specific * containers: drop special handling for ErrCgroupV1Rootless * compose: fix compose provider debug message * image: replace GetStoreImage with ResolveReference * vendor: bump c/image to 373c52a9466f * Refactor machine socket mapping * AppleHV: Fix machine rm error message * Add status messages to podman --remote commit * End-of-Life policy for github issues * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10 * Support passing of Ulimits as -1 to mean max * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4 * fix(deps): update github.com/crc-org/vfkit digest to f3c783d * Log gvproxy and server9 to file on log-level=debug * Change to using gopsutil for cross-OS process ops * Initial addition of 9p code to Podman * libpod: fix /etc/hostname with --uts=host * systests: stty test: retry once on flake * systests: pasta: avoid hangs * Fix secrets scanning GHA Workflow * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0 * docs: clarify systemd cgroup mount * podman build --remote URI Dockerfile shoud not be treated as file * Small fixes for wacko CI environments * Do not add powercap mask if no paths are masked * compose: try all possible providers before throwing an error * podman kube play --replace should force removal of pods and containers * Sort kube options alphabetically * container.conf: support attributed string slices * CI: podman farm tests cleanup * Mask /sys/devices/virtual/powercap * Update module github.com/google/uuid to v1.4.0 * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible * fix(deps): update module go.etcd.io/bbolt to v1.3.8 * CI: systest: safer random_rfc1918_subnet * CI: e2e: safer GetPort() * Fix broken code block markup in Introduction.rst * chore(deps): update module google.golang.org/grpc to v1.57.1 [security] * chore: remove npipe const and use vmtype const for checking * Update module github.com/onsi/gomega to v1.29.0 * CI: try to fix more networking flakes * fix: check wsl npipe when executing podman compose * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1 * Quadlet - explicit support for read-only-tmpfs * compat API: fix image-prune --all * Makefile - allow more control over Ginkgo parameters * Add e2e tests for farm build * vendor c/{buildah,common}: appendable containers.conf strings, Part 1 * Add podman farm build command * Add emulation package * Use buildah default isolation when working with podman play kube * docs(API): Fix compat network (dis-)connect * test/e2e: do not import buildah * pkg/specgen: remove config_unsupported.go * pkg/parallel/ctr: add !remote tag * pkg/domain/filters: add !remote tag * pkg/ps: add !remote tag * pkg/systemd/generate: add !remote tag * libpod: add !remote tag * pkg/autoupdate: add !remote tag * vendor latest c/common * libpod: remove build support non linux/freebsd * Fix typo * test/apiv2: adapt apiv2 test on cgroups v1 environment * ginkgo setup: retry cache pulls * Support size option when creating tmpfs volumes * not mounted layers should be reported as info not error * CI: stop using registry.k8s.io * fix(deps): update module github.com/vbatts/git-validation to v1.2.1 * test fixes for c/common tag chnages * vendor latest c/common * hyperV: Update lastUp time * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0 * lint: disable testifylint * lint: fix warnings found by perfsprint * lint: fix warnings found by inamedparam * lint: fix warnings found by protogetter * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon * Use node hostname in kube play when hostNetwork=true * cirrus setup: special-case perl unicode * network: document ports and macvlan interaction * quadlet: document cgroupv2 requirement * [skip-ci] Update actions/checkout digest to b4ffde6 * Revert "Emergency workaround for CI breakage" * remote: exec: do not leak session IDs on errors * fix(deps): update github.com/containers/storage digest to 79aa304 * fix(deps): update module k8s.io/kubernetes to v1.28.3 * System tests: fix broken silence127 * Add TERM iff TERM not defined in container when podman exec -t * Emergency workaround for CI breakage * Kill gvproxy when machine rm -f * Fix path for omvf vars on Darwin/arm64 * Allow systemd specifiers in User and Group Quadlet keys * libpod: rename confusing import name * use FindInitBinary() for init binary * vendor latest c/common * exec: do not leak session IDs on errors * systests: cp test: lots of cleanup * Define better error message for container name conflicts with external storage. * Quadlet - support ImageName for .image files * test/system: ignore 127 if it is the expected rc * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1 * image history: fix walking layers * fix(api): Ensure compatibality for network connect * [CI:DOCS] Add cross-build target info. * machine set: document --rootful better * libpod: restart+userns cleanup netns correctly * Minor log and doc fixes * Quadlet man page - discuss volume removal explicitly * Quadlet - add support for KubeDownForce * System Test - Quadlet kube oneshot * Fix output of podman --remote top * buildah-bud: test relative TMPDIR * Fix handling of --read-only-tmpfs flag * Vendor common and buildah main * remote,build: wire unsetlabels * test: build with TMPDIR as relative * docs: add unsetlabel * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85 * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2 * fix: pull error response docker rest api compatibility * Show client info even if remote connection fails * fix(deps): update github.com/containers/libhvee digest to e51be96 * Run codespell * SetLock for all virt providers * Machine: Teardown on init failure * healthcheck: make sure to always show health_status events * Apply suggestions from code review * [CI:DOCS]rtd: implement v2 build file * Quadlet - support oneshot .kube files * libpod: fix deadlock while parallel container create * fix(deps): update module golang.org/x/net to v0.17.0 * api: add `compatMode` paramenter to libpod's pull endpoint * api: break out compat image pull * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3 * use sqlite as default database * vendor latest c/common * fix(deps): update module github.com/nxadm/tail to v1.4.11 * Check for image with /libpod/containers/create * container: always check if mountpoint is mounted * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0 * vendor: update c/storage * api: drop debug statement * Quadlet - add support for global arguments * Add system test * fix(deps): update module golang.org/x/tools to v0.14.0 * Don't ignore containerfiles outside of build context * fix(deps): update github.com/containers/libhvee digest to fcf1cc2 * fix(deps): update module golang.org/x/term to v0.13.0 * Update module golang.org/x/sys to v0.13.0 * [CI:DOCS] Add updating version on podman.io to release process * containers.conf: add `privileged` field to containers table * Implement secrets/credential scanning * Cirrus: Execute Windows podman-machine e2e tests * vendor: bump c/storage * Update module golang.org/x/sync to v0.4.0 * [CI:DOCS] update swagger version on docs.podman.io * Create Qemu command wrapper * Adjust to path name change for resolved unit * Revert "Fix WSL systemd detection" * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL * [CI:DOCS] update kube play delete endpoint docs * [CI:DOCS] Remove dead link from README * test/system: --env-file test fixes * Revert "feat(env): support multiline in env-file" * Revert "docs(env-file): improve document description" * Revert "fix(env): parsing --env incorrect in cli" * Filter health_check and exec events for logging in console * inspect: ignore ENOENT during device lookup * test, manifest: test push retry * Fix locale issues with WSL version detection * vendor: update module github.com/docker/distribution to v2.8.3+incompatible * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509 * Update github.com/containers/libhvee digest to e9b1811 * windows: Use prebuilt gvproxy/win-sshproxy binaries * Volume create - fast exit when ignore is set and volume exists * Update golang.org/x/exp digest to 9212866 * Update github.com/opencontainers/runtime-spec digest to c0e9043 * remove selinux tag as not needed anymore * [skip-ci] Improve podmansh(1) * Build applehv for Intel Macs * Revert "GHA Workflow: Faster discussion-locking" * update vfkit vendored code * Add DefaultMode to kube play * Fix broken podman images filters * Remove `c.ExtraFiles` line in machine * podman: run --replace prints only the new container id * New machines should show Never as LastUp * podman machine: disable zincati update service * Revert "cirrus setup: install en_US.UTF-8 locale" * Cirrus: CI VM images w/ newer automation-library * CI VMs: bump to f39 + f38 * [CI:DOCS] Update podman load doc * Update mac installer to latest gvproxy release * Fix WSL systemd detection * Add documentation for the vrf option on netavark * fix(deps): update github.com/containers/common digest to 9342cdd * fix: typos in links, path and code example * e2e: ExitCleanly(): manual special cases * e2e: ExitCleanly(): the final fron^Wcommit * [CI:DOCS] Add win-sshproxy target to winmake * wsl: enable machine init tests * Update docs/source/markdown/options/rdt-class.md * move IntelRdtClosID to HostConfig * use default when user does not provide rdt-class * Add documentation for Intel RDT support * Add test for Intel RDT support * Add Intel RDT support * [CI:DOCS] Fix podman form update --help examples * Quadlet container mount - support non key=val options * test/e2e: default to netavark * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0 * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1 * fix(deps): update github.com/containers/common digest to 4619314 * applehv: enable machine tests for start * applehv: machine tests for stop and rm * Update machine tests README * Add podman socket info to machine inspect * Fix podman machine info test for hyperV * libpod: pass entire environment to conmon * e2e: ExitCleanly(): manual fixes to get tests working * e2e: ExitCleanly(): a few more * FCOS+podman-next: correct GHA conditional syntax * pkg/machine/e2e: wsl stop * wsl: machine tests for inspect * wsl: machine tests for ssh * fix(deps): update github.com/containers/common digest to e18cda8 * wsl: machine start test * wsl machine tests: set * wsl: machine tests * Skip proxy test for hyperV * Enable machine e2e test for applehv * hyperV: Respect rootful option on machine init * [CI:BUILD] FCOS image: enable nightly build * e2e: use safe fedora-minimal image * hyperv: machine e2e tests for set command * podman build: correct default pull policy * fix handling of static/volume dir * unbreak CI: useradd not found * hyperv: set more realistic starting state * hyperv: use StopWithForce with remove * Fix all ports exposed by kube play * Fix setting timezone on HyperV * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6 * Fix farm update to check for connections * Adjust machine CPU tests * Bump version on main * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds * Vendor c/common * pod rm: do not log error if anonymous volume is still used * e2e: ExitCleanly(): manual fixes to get tests passing * e2e: ExitCleanly(): a few more * fixes for pkg/machine/e2e on hyperv * test: fix rootless propagation test * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures * Enable disk resizing for applehv * Various updates for hyperv and machine e2e tests * test: update fedoraMinimal version * specgen, rootless: fix mount of cgroup without a netns * Automatically remove anonymous volumes when removing a container * Use ActiveServiceDestination in ssh remoteConnectionUsername * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405 * e2e: ExitCleanly(): generate_kube_test.go * e2e: generate kube -> kube generate * e2e: ExitCleanly(): generate_kube_test.go * windows cannot "do" extra files * e2e: ExitCleanly(): Fixes for breaking tests * play kube -> kube play * e2e: ExitCleanly(): play_kube_test.go * introduce pkg/strongunits * Makefile equiv Powershell script * pass --syslog to the cleanup process * vendor of containers/common * fix --authfile auto-update test * compat API: speed up network list * Change priority for cli-flags for remotely operating Podman * libpod: remove unused ContainerState() fucntion * [CI:BUILD] Packit: Enable failure notifications for cockpit tests * e2e: ExitCleanly(): more low-hanging fruit * e2e: ExitCleanly(): more low-hanging fruit * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1 * Enable machine e2e tests for WSL * systests: tighter checks for unwanted warnings * GHA Workflow: Faster discussion-locking * [CI:BUILD] FCOS + podman-next image: pull in wasm * [CI:BUILD] rpm: remove gvproxy subpackage * [CI:DOCS] Tweak podman to Podman in a few farm man pages * Docs on sig-proxy are wrong, we support TTY * e2e: ExitCleanly(): low-hanging fruit, part 2 * e2e: ExitCleanly(): low-hanging fruit, part 1 * Buildtag out unix commands for common OS files * systests: clean up after tests; fix missing path in logs * [CI:BUILD] followup PR for fcos with podman-next * Implement gvproxy networking using cmdline wrapper * fix, test: rmi should work with images w/o layers * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282 * Quadlet Image test - rearrange test function * e2e: continuing ExitCleanly() work: manual tweaks * e2e: continuing ExitCleanly() work * [CI:DOCS] Improve podman-tag man page * [CI:DOCS] Improve podman-build man page * [CI:DOCS] Include precheck to release process * [CI:DOCS] consistentize filter options in man pages * Quadlet - add support for .image units * \--env-host: use default from containers.conf * error when --module is specified on the command level * man page crossrefs: add --filter autocompletes * Fix specification of unix:///run * Add label! filter and tests to containers and pods * Add test for legacy address without two slashes * Use url with scheme and path for the unix address * Use crun only on selected archs ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-408=1 SUSE-2024-408=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-408=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-408=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * podman-debuginfo-4.8.3-150500.3.6.1 * podman-remote-debuginfo-4.8.3-150500.3.6.1 * podmansh-4.8.3-150500.3.6.1 * podman-4.8.3-150500.3.6.1 * podman-remote-4.8.3-150500.3.6.1 * openSUSE Leap 15.5 (noarch) * podman-docker-4.8.3-150500.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * podman-debuginfo-4.8.3-150500.3.6.1 * podman-remote-debuginfo-4.8.3-150500.3.6.1 * podmansh-4.8.3-150500.3.6.1 * podman-4.8.3-150500.3.6.1 * podman-remote-4.8.3-150500.3.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * podman-docker-4.8.3-150500.3.6.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.8.3-150500.3.6.1 * podman-remote-debuginfo-4.8.3-150500.3.6.1 * podmansh-4.8.3-150500.3.6.1 * podman-4.8.3-150500.3.6.1 * podman-remote-4.8.3-150500.3.6.1 * Containers Module 15-SP5 (noarch) * podman-docker-4.8.3-150500.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217828

1 0

SUSE-SU-2024:0409-1: important: Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)
by OPENSUSE-UPDATES 07 Feb '24

07 Feb '24

# Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:0409-1 Rating: important References: * bsc#1217522 * bsc#1218255 Cross-References: * CVE-2023-6176 * CVE-2023-6932 CVSS scores: * CVE-2023-6176 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6176 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6932 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_36 fixes several issues. The following security issues were fixed: * CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). * CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-409=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-407=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-407=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP2_Update_42-debugsource-3-150200.2.1 * kernel-livepatch-5_3_18-150200_24_169-default-debuginfo-3-150200.2.1 * kernel-livepatch-5_3_18-150200_24_169-default-3-150200.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_7-debugsource-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-2-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_7-debugsource-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-2-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6176.html * https://www.suse.com/security/cve/CVE-2023-6932.html * https://bugzilla.suse.com/show_bug.cgi?id=1217522 * https://bugzilla.suse.com/show_bug.cgi?id=1218255

1 0

SUSE-SU-2024:0394-1: important: Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)
by OPENSUSE-UPDATES 07 Feb '24

07 Feb '24

# Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:0394-1 Rating: important References: * bsc#1210619 Cross-References: * CVE-2023-1829 CVSS scores: * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_147 fixes one issue. The following security issue was fixed: * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-394=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-394=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_147-default-2-150300.2.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_147-default-debuginfo-2-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-default-2-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_40-debugsource-2-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_147-preempt-debuginfo-2-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-preempt-2-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-1829.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619

1 0

SUSE-SU-2024:0378-1: important: Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)
by OPENSUSE-UPDATES 06 Feb '24

06 Feb '24

# Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:0378-1 Rating: important References: * bsc#1216044 * bsc#1217522 * bsc#1218255 Cross-References: * CVE-2023-5178 * CVE-2023-6176 * CVE-2023-6932 CVSS scores: * CVE-2023-5178 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6176 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6176 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6932 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: * CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). * CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522). * CVE-2023-5178: Fixed a use-after-free vulnerability in queue intialization setup (bsc#1215768). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-378=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-378=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-379=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-379=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_19-debugsource-3-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-3-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-3-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_19-debugsource-3-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-3-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-3-150400.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_5-debugsource-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-4-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_5-debugsource-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-4-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5178.html * https://www.suse.com/security/cve/CVE-2023-6176.html * https://www.suse.com/security/cve/CVE-2023-6932.html * https://bugzilla.suse.com/show_bug.cgi?id=1216044 * https://bugzilla.suse.com/show_bug.cgi?id=1217522 * https://bugzilla.suse.com/show_bug.cgi?id=1218255

1 0

SUSE-SU-2024:0352-1: important: Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)
by OPENSUSE-UPDATES 06 Feb '24

06 Feb '24

# Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:0352-1 Rating: important References: * bsc#1216044 * bsc#1217522 * bsc#1218255 Cross-References: * CVE-2023-5178 * CVE-2023-6176 * CVE-2023-6932 CVSS scores: * CVE-2023-5178 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6176 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6176 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6932 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_19 fixes several issues. The following security issues were fixed: * CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). * CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522). * CVE-2023-5178: Fixed a use-after-free vulnerability in queue intialization setup (bsc#1215768). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-352=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-352=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_19-default-debuginfo-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_3-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-5-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_19-default-debuginfo-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_3-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-5-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5178.html * https://www.suse.com/security/cve/CVE-2023-6176.html * https://www.suse.com/security/cve/CVE-2023-6932.html * https://bugzilla.suse.com/show_bug.cgi?id=1216044 * https://bugzilla.suse.com/show_bug.cgi?id=1217522 * https://bugzilla.suse.com/show_bug.cgi?id=1218255

1 0

openSUSE-RU-2024:0040-1: moderate: Recommended update for dtv-scan-tables
by maintenance＠opensuse.org 06 Feb '24

06 Feb '24

openSUSE Recommended Update: Recommended update for dtv-scan-tables ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0040-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for dtv-scan-tables fixes the following issues: Update to version 20240131: * isdb-t: Update Brazil channel lists * dvb-s: drop transponders that aren't there at Lyngsat anymore * dvb-s: update from today's Lyngsat report * dtv-scan-tables: full uk transmitter update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-40=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): dtv-scan-tables-20240131-bp155.2.3.1 dtv-scan-tables-v5-20240131-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0039-1: moderate: Recommended update for novprog
by maintenance＠opensuse.org 05 Feb '24

05 Feb '24

openSUSE Recommended Update: Recommended update for novprog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0039-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for novprog fixes the following issues: - Update to version 3.2.3: * Translation updates: Turkish - Update to version 3.2.2: * Improved Linux deployment * Replaced deprecated code - Changes for version 3.2.1: * Switched to Qt 6 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-39=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): novprog-3.2.3-bp155.3.3.1 - openSUSE Backports SLE-15-SP5 (noarch): novprog-lang-3.2.3-bp155.3.3.1 References:

1 0

openSUSE-RU-2024:0038-1: moderate: Recommended update for rspamd
by maintenance＠opensuse.org 05 Feb '24

05 Feb '24

openSUSE Recommended Update: Recommended update for rspamd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0038-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rspamd fixes the following issues: Update to 3.8.1 - [Fix] Replace comment types by @arkamar in #4785 - [Test] statistics: per-user by @fatalbanana in #4789 - [Minor] rbl: fix warning by @fatalbanana in #4790 - Add Provides for user and group which are created in the %pre scriptlet. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-38=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): rspamd-3.8.1-bp155.2.15.1 References:

1 0

SUSE-SU-2024:0327-1: important: Security update for bouncycastle, jsch
by OPENSUSE-UPDATES 05 Feb '24

05 Feb '24

# Security update for bouncycastle, jsch Announcement ID: SUSE-SU-2024:0327-1 Rating: important References: * bsc#1218134 Cross-References: * CVE-2023-48795 CVSS scores: * CVE-2023-48795 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-48795 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for bouncycastle, jsch fixes the following issues: * Updated jsch to version 0.2.15: * CVE-2023-48795: Fixed a prefix truncation issue that could lead to disclosure of sensitive information (bsc#1218134). * Updated bouncycastle to version 1.77. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-327=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-327=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-327=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-327=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-327=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-327=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-327=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-327=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-327=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-327=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-327=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-327=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-327=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-327=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-327=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * SUSE Enterprise Storage 7.1 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * openSUSE Leap 15.5 (noarch) * bouncycastle-mail-1.77-150200.3.24.1 * bouncycastle-1.77-150200.3.24.1 * bouncycastle-tls-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-jmail-1.77-150200.3.24.1 * bouncycastle-javadoc-1.77-150200.3.24.1 * jsch-javadoc-0.2.15-150200.11.13.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * jsch-demo-0.2.15-150200.11.13.1 * Development Tools Module 15-SP5 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * SUSE Manager Server 4.3 Module 4.3 (noarch) * jsch-0.2.15-150200.11.13.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * bouncycastle-1.77-150200.3.24.1 * bouncycastle-util-1.77-150200.3.24.1 * bouncycastle-pkix-1.77-150200.3.24.1 * bouncycastle-pg-1.77-150200.3.24.1 * jsch-0.2.15-150200.11.13.1 ## References: * https://www.suse.com/security/cve/CVE-2023-48795.html * https://bugzilla.suse.com/show_bug.cgi?id=1218134

1 0

SUSE-SU-2024:0329-1: moderate: Security update for python
by OPENSUSE-UPDATES 05 Feb '24

05 Feb '24

# Security update for python Announcement ID: SUSE-SU-2024:0329-1 Rating: moderate References: * bsc#1210638 Cross-References: * CVE-2023-27043 CVSS scores: * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python fixes the following issues: * CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-329=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-329=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-debuginfo-2.7.18-150000.60.1 * python-idle-2.7.18-150000.60.1 * python-base-2.7.18-150000.60.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.60.1 * python-devel-2.7.18-150000.60.1 * python-tk-2.7.18-150000.60.1 * python-tk-debuginfo-2.7.18-150000.60.1 * libpython2_7-1_0-2.7.18-150000.60.1 * python-2.7.18-150000.60.1 * python-debugsource-2.7.18-150000.60.1 * python-xml-debuginfo-2.7.18-150000.60.1 * python-base-debugsource-2.7.18-150000.60.1 * python-gdbm-2.7.18-150000.60.1 * python-base-debuginfo-2.7.18-150000.60.1 * python-demo-2.7.18-150000.60.1 * python-xml-2.7.18-150000.60.1 * python-curses-2.7.18-150000.60.1 * python-gdbm-debuginfo-2.7.18-150000.60.1 * python-curses-debuginfo-2.7.18-150000.60.1 * openSUSE Leap 15.5 (x86_64) * python-base-32bit-2.7.18-150000.60.1 * libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.60.1 * libpython2_7-1_0-32bit-2.7.18-150000.60.1 * python-base-32bit-debuginfo-2.7.18-150000.60.1 * python-32bit-2.7.18-150000.60.1 * python-32bit-debuginfo-2.7.18-150000.60.1 * openSUSE Leap 15.5 (noarch) * python-doc-2.7.18-150000.60.1 * python-doc-pdf-2.7.18-150000.60.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * python-debuginfo-2.7.18-150000.60.1 * python-base-2.7.18-150000.60.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.60.1 * python-devel-2.7.18-150000.60.1 * libpython2_7-1_0-2.7.18-150000.60.1 * python-2.7.18-150000.60.1 * python-debugsource-2.7.18-150000.60.1 * python-xml-debuginfo-2.7.18-150000.60.1 * python-base-debugsource-2.7.18-150000.60.1 * python-gdbm-2.7.18-150000.60.1 * python-base-debuginfo-2.7.18-150000.60.1 * python-xml-2.7.18-150000.60.1 * python-curses-2.7.18-150000.60.1 * python-gdbm-debuginfo-2.7.18-150000.60.1 * python-curses-debuginfo-2.7.18-150000.60.1 ## References: * https://www.suse.com/security/cve/CVE-2023-27043.html * https://bugzilla.suse.com/show_bug.cgi?id=1210638

1 0

SUSE-SU-2024:0331-1: important: Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP4)
by OPENSUSE-UPDATES 05 Feb '24

05 Feb '24

# Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:0331-1 Rating: important References: * bsc#1216044 * bsc#1217522 * bsc#1218255 Cross-References: * CVE-2023-5178 * CVE-2023-6176 * CVE-2023-6932 CVSS scores: * CVE-2023-5178 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5178 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6176 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6176 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6932 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_15_11 fixes several issues. The following security issues were fixed: * CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). * CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522). * CVE-2023-5178: Fixed a use-after-free vulnerability in queue intialization setup (bsc#1215768). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-331=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-332=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-333=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-334=1 SUSE- SLE-Module-Live-Patching-15-SP4-2024-335=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-336=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-337=1 SUSE- SLE-Module-Live-Patching-15-SP4-2024-338=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-345=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-346=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-341=1 SUSE-2024-342=1 SUSE-2024-343=1 SUSE-2024-340=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-341=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-342=1 SUSE-SLE-Module-Live- Patching-15-SP5-2024-343=1 SUSE-SLE-Module-Live-Patching-15-SP5-2024-340=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (x86_64) * kernel-livepatch-SLE15-SP4-RT_Update_5-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_15_8-rt-12-150400.2.2 * kernel-livepatch-SLE15-SP4-RT_Update_6-debugsource-9-150400.2.1 * kernel-livepatch-SLE15-SP4-RT_Update_11-debugsource-5-150400.2.1 * kernel-livepatch-5_14_21-150400_15_56-rt-3-150400.2.1 * kernel-livepatch-5_14_21-150400_15_11-rt-11-150400.2.2 * kernel-livepatch-5_14_21-150400_15_46-rt-5-150400.2.1 * kernel-livepatch-5_14_21-150400_15_56-rt-debuginfo-3-150400.2.1 * kernel-livepatch-5_14_21-150400_15_40-rt-6-150400.2.1 * kernel-livepatch-SLE15-SP4-RT_Update_3-debugsource-11-150400.2.2 * kernel-livepatch-SLE15-SP4-RT_Update_9-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_15_23-rt-debuginfo-9-150400.2.1 * kernel-livepatch-SLE15-SP4-RT_Update_13-debugsource-4-150400.2.1 * kernel-livepatch-5_14_21-150400_15_28-rt-9-150400.2.1 * kernel-livepatch-5_14_21-150400_15_18-rt-10-150400.2.1 * kernel-livepatch-SLE15-SP4-RT_Update_8-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_15_37-rt-debuginfo-6-150400.2.1 * kernel-livepatch-5_14_21-150400_15_46-rt-debuginfo-5-150400.2.1 * kernel-livepatch-5_14_21-150400_15_8-rt-debuginfo-12-150400.2.2 * kernel-livepatch-5_14_21-150400_15_37-rt-6-150400.2.1 * kernel-livepatch-5_14_21-150400_15_23-rt-9-150400.2.1 * kernel-livepatch-5_14_21-150400_15_18-rt-debuginfo-10-150400.2.1 * kernel-livepatch-SLE15-SP4-RT_Update_2-debugsource-12-150400.2.2 * kernel-livepatch-5_14_21-150400_15_11-rt-debuginfo-11-150400.2.2 * kernel-livepatch-5_14_21-150400_15_53-rt-4-150400.2.1 * kernel-livepatch-5_14_21-150400_15_40-rt-debuginfo-6-150400.2.1 * kernel-livepatch-5_14_21-150400_15_53-rt-debuginfo-4-150400.2.1 * kernel-livepatch-SLE15-SP4-RT_Update_7-debugsource-9-150400.2.1 * kernel-livepatch-SLE15-SP4-RT_Update_14-debugsource-3-150400.2.1 * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_1-debugsource-6-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_0-debugsource-7-150500.3.1 * kernel-livepatch-5_14_21-150500_13_11-rt-debuginfo-5-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_6-debugsource-3-150500.2.1 * kernel-livepatch-5_14_21-150500_11-rt-7-150500.3.1 * kernel-livepatch-5_14_21-150500_13_5-rt-6-150500.2.1 * kernel-livepatch-5_14_21-150500_11-rt-debuginfo-7-150500.3.1 * kernel-livepatch-5_14_21-150500_13_11-rt-5-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_3-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-debuginfo-3-150500.2.1 * kernel-livepatch-5_14_21-150500_13_5-rt-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-3-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_1-debugsource-6-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_0-debugsource-7-150500.3.1 * kernel-livepatch-5_14_21-150500_13_11-rt-debuginfo-5-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_6-debugsource-3-150500.2.1 * kernel-livepatch-5_14_21-150500_11-rt-7-150500.3.1 * kernel-livepatch-5_14_21-150500_13_5-rt-6-150500.2.1 * kernel-livepatch-5_14_21-150500_11-rt-debuginfo-7-150500.3.1 * kernel-livepatch-5_14_21-150500_13_11-rt-5-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_3-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-debuginfo-3-150500.2.1 * kernel-livepatch-5_14_21-150500_13_5-rt-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-3-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5178.html * https://www.suse.com/security/cve/CVE-2023-6176.html * https://www.suse.com/security/cve/CVE-2023-6932.html * https://bugzilla.suse.com/show_bug.cgi?id=1216044 * https://bugzilla.suse.com/show_bug.cgi?id=1217522 * https://bugzilla.suse.com/show_bug.cgi?id=1218255

1 0

SUSE-SU-2024:0344-1: important: Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5)
by OPENSUSE-UPDATES 05 Feb '24

05 Feb '24

# Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:0344-1 Rating: important References: * bsc#1217522 * bsc#1218255 Cross-References: * CVE-2023-6176 * CVE-2023-6932 CVSS scores: * CVE-2023-6176 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6176 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6932 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6932 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_24 fixes several issues. The following security issues were fixed: * CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). * CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-344=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-344=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_7-debugsource-3-150500.2.1 * kernel-livepatch-5_14_21-150500_13_24-rt-3-150500.2.1 * kernel-livepatch-5_14_21-150500_13_24-rt-debuginfo-3-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_7-debugsource-3-150500.2.1 * kernel-livepatch-5_14_21-150500_13_24-rt-3-150500.2.1 * kernel-livepatch-5_14_21-150500_13_24-rt-debuginfo-3-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6176.html * https://www.suse.com/security/cve/CVE-2023-6932.html * https://bugzilla.suse.com/show_bug.cgi?id=1217522 * https://bugzilla.suse.com/show_bug.cgi?id=1218255

1 0

SUSE-SU-2023:2882-1: important: Security update for perl
by OPENSUSE-UPDATES 05 Feb '24

05 Feb '24

# Security update for perl Announcement ID: SUSE-SU-2023:2882-1 Rating: important References: * bsc#1210999 Cross-References: * CVE-2023-31484 CVSS scores: * CVE-2023-31484 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2023-31484 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Development Tools Module 15-SP4 * Development Tools Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for perl fixes the following issues: * CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-2882=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-2882=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-2882=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-2882=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-2882=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-2882=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-2882=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-2882=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-2882=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-2882=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-2882=1 * Development Tools Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-2882=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-2882=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-2882=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-2882=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2882=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2882=1 * SUSE Linux Enterprise Real Time 15 SP3 zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-2882=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2882=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2882=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-2882=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-2882=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-2882=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-2882=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-2882=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2882=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2882=1 ## Package List: * openSUSE Leap 15.3 (x86_64) * perl-32bit-5.26.1-150300.17.14.1 * perl-core-DB_File-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-32bit-5.26.1-150300.17.14.1 * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * openSUSE Leap 15.3 (noarch) * perl-doc-5.26.1-150300.17.14.1 * openSUSE Leap 15.3 (aarch64_ilp32) * perl-64bit-5.26.1-150300.17.14.1 * perl-base-64bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-64bit-5.26.1-150300.17.14.1 * perl-64bit-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-64bit-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-64bit-5.26.1-150300.17.14.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * openSUSE Leap 15.4 (x86_64) * perl-32bit-5.26.1-150300.17.14.1 * perl-core-DB_File-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-32bit-5.26.1-150300.17.14.1 * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * openSUSE Leap 15.4 (noarch) * perl-doc-5.26.1-150300.17.14.1 * openSUSE Leap 15.5 (x86_64) * perl-32bit-5.26.1-150300.17.14.1 * perl-core-DB_File-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-32bit-5.26.1-150300.17.14.1 * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * openSUSE Leap 15.5 (noarch) * perl-doc-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * Basesystem Module 15-SP4 (x86_64) * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * Basesystem Module 15-SP5 (x86_64) * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * Development Tools Module 15-SP4 (noarch) * perl-doc-5.26.1-150300.17.14.1 * Development Tools Module 15-SP5 (noarch) * perl-doc-5.26.1-150300.17.14.1 * SUSE Package Hub 15 15-SP4 (x86_64) * perl-debugsource-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-32bit-5.26.1-150300.17.14.1 * SUSE Package Hub 15 15-SP5 (x86_64) * perl-debugsource-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-32bit-5.26.1-150300.17.14.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * perl-doc-5.26.1-150300.17.14.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * perl-doc-5.26.1-150300.17.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Real Time 15 SP3 (x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Real Time 15 SP3 (noarch) * perl-doc-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * perl-doc-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * perl-doc-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * SUSE Manager Proxy 4.2 (x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Manager Server 4.2 (x86_64) * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-core-DB_File-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Enterprise Storage 7.1 (noarch) * perl-doc-5.26.1-150300.17.14.1 * SUSE Enterprise Storage 7.1 (x86_64) * perl-base-32bit-5.26.1-150300.17.14.1 * perl-32bit-debuginfo-5.26.1-150300.17.14.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * perl-base-debuginfo-5.26.1-150300.17.14.1 * perl-debuginfo-5.26.1-150300.17.14.1 * perl-debugsource-5.26.1-150300.17.14.1 * perl-5.26.1-150300.17.14.1 * perl-base-5.26.1-150300.17.14.1 ## References: * https://www.suse.com/security/cve/CVE-2023-31484.html * https://bugzilla.suse.com/show_bug.cgi?id=1210999

1 0

SUSE-SU-2024:0323-1: critical: Security update for python-uamqp
by OPENSUSE-UPDATES 05 Feb '24

05 Feb '24

# Security update for python-uamqp Announcement ID: SUSE-SU-2024:0323-1 Rating: critical References: * bsc#1219409 Cross-References: * CVE-2024-21646 CVSS scores: * CVE-2024-21646 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-21646 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-uamqp fixes the following issues: * CVE-2024-21646: Fix integer overflow which may cause remote code execution (bsc#1219409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-323=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-323=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-323=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-323=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-323=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-uamqp-debuginfo-1.5.3-150100.4.10.1 * python3-uamqp-1.5.3-150100.4.10.1 * python-uamqp-debugsource-1.5.3-150100.4.10.1 * Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64) * python3-uamqp-debuginfo-1.5.3-150100.4.10.1 * python3-uamqp-1.5.3-150100.4.10.1 * python-uamqp-debugsource-1.5.3-150100.4.10.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * python3-uamqp-debuginfo-1.5.3-150100.4.10.1 * python3-uamqp-1.5.3-150100.4.10.1 * python-uamqp-debugsource-1.5.3-150100.4.10.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-uamqp-debuginfo-1.5.3-150100.4.10.1 * python3-uamqp-1.5.3-150100.4.10.1 * python-uamqp-debugsource-1.5.3-150100.4.10.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-uamqp-debuginfo-1.5.3-150100.4.10.1 * python3-uamqp-1.5.3-150100.4.10.1 * python-uamqp-debugsource-1.5.3-150100.4.10.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21646.html * https://bugzilla.suse.com/show_bug.cgi?id=1219409

1 0

SUSE-SU-2024:0325-1: important: Security update for java-17-openjdk
by OPENSUSE-UPDATES 05 Feb '24

05 Feb '24

# Security update for java-17-openjdk Announcement ID: SUSE-SU-2024:0325-1 Rating: important References: * bsc#1218903 * bsc#1218905 * bsc#1218907 * bsc#1218908 * bsc#1218909 * bsc#1218911 Cross-References: * CVE-2024-20918 * CVE-2024-20919 * CVE-2024-20921 * CVE-2024-20932 * CVE-2024-20945 * CVE-2024-20952 CVSS scores: * CVE-2024-20918 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-20919 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-20921 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-20932 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-20945 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-20952 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves six vulnerabilities can now be installed. ## Description: This update for java-17-openjdk fixes the following issues: Updated to version 17.0.10 (January 2024 CPU): * CVE-2024-20918: Fixed an out of bounds access in the Hotspot JVM due to a missing bounds check (bsc#1218907). * CVE-2024-20919: Fixed a sandbox bypass in the Hotspot JVM class file verifier (bsc#1218903). * CVE-2024-20921: Fixed an incorrect optimization in the Hotspot JVM that could lead to corruption of JVM memory (bsc#1218905). * CVE-2024-20932: Fixed an incorrect handling of ZIP files with duplicate entries (bsc#1218908). * CVE-2024-20945: Fixed a potential private key leak through debug logs (bsc#1218909). * CVE-2024-20952: Fixed an RSA padding issue and timing side-channel attack against TLS (bsc#1218911). Find the full release notes at: https://mail.openjdk.org/pipermail/jdk-updates-dev/2024-January/029089.html ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-325=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-325=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-325=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-325=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-325=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-325=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-325=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-325=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-325=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-325=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-325=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * java-17-openjdk-jmods-17.0.10.0-150400.3.36.1 * java-17-openjdk-demo-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-17.0.10.0-150400.3.36.1 * java-17-openjdk-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-debugsource-17.0.10.0-150400.3.36.1 * java-17-openjdk-src-17.0.10.0-150400.3.36.1 * java-17-openjdk-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-debuginfo-17.0.10.0-150400.3.36.1 * openSUSE Leap 15.4 (noarch) * java-17-openjdk-javadoc-17.0.10.0-150400.3.36.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * java-17-openjdk-jmods-17.0.10.0-150400.3.36.1 * java-17-openjdk-demo-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-17.0.10.0-150400.3.36.1 * java-17-openjdk-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-debugsource-17.0.10.0-150400.3.36.1 * java-17-openjdk-src-17.0.10.0-150400.3.36.1 * java-17-openjdk-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-debuginfo-17.0.10.0-150400.3.36.1 * openSUSE Leap 15.5 (noarch) * java-17-openjdk-javadoc-17.0.10.0-150400.3.36.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * java-17-openjdk-demo-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-17.0.10.0-150400.3.36.1 * java-17-openjdk-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-debugsource-17.0.10.0-150400.3.36.1 * java-17-openjdk-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-debuginfo-17.0.10.0-150400.3.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * java-17-openjdk-demo-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-17.0.10.0-150400.3.36.1 * java-17-openjdk-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-debugsource-17.0.10.0-150400.3.36.1 * java-17-openjdk-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-debuginfo-17.0.10.0-150400.3.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * java-17-openjdk-demo-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-17.0.10.0-150400.3.36.1 * java-17-openjdk-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-debugsource-17.0.10.0-150400.3.36.1 * java-17-openjdk-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-debuginfo-17.0.10.0-150400.3.36.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * java-17-openjdk-demo-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-17.0.10.0-150400.3.36.1 * java-17-openjdk-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-debugsource-17.0.10.0-150400.3.36.1 * java-17-openjdk-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-debuginfo-17.0.10.0-150400.3.36.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * java-17-openjdk-demo-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-17.0.10.0-150400.3.36.1 * java-17-openjdk-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-debugsource-17.0.10.0-150400.3.36.1 * java-17-openjdk-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-debuginfo-17.0.10.0-150400.3.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * java-17-openjdk-demo-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-17.0.10.0-150400.3.36.1 * java-17-openjdk-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-debugsource-17.0.10.0-150400.3.36.1 * java-17-openjdk-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-debuginfo-17.0.10.0-150400.3.36.1 * SUSE Manager Proxy 4.3 (x86_64) * java-17-openjdk-demo-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-17.0.10.0-150400.3.36.1 * java-17-openjdk-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-debugsource-17.0.10.0-150400.3.36.1 * java-17-openjdk-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-debuginfo-17.0.10.0-150400.3.36.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * java-17-openjdk-demo-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-17.0.10.0-150400.3.36.1 * java-17-openjdk-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-debugsource-17.0.10.0-150400.3.36.1 * java-17-openjdk-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-debuginfo-17.0.10.0-150400.3.36.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * java-17-openjdk-demo-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-17.0.10.0-150400.3.36.1 * java-17-openjdk-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-debugsource-17.0.10.0-150400.3.36.1 * java-17-openjdk-debuginfo-17.0.10.0-150400.3.36.1 * java-17-openjdk-headless-17.0.10.0-150400.3.36.1 * java-17-openjdk-devel-debuginfo-17.0.10.0-150400.3.36.1 ## References: * https://www.suse.com/security/cve/CVE-2024-20918.html * https://www.suse.com/security/cve/CVE-2024-20919.html * https://www.suse.com/security/cve/CVE-2024-20921.html * https://www.suse.com/security/cve/CVE-2024-20932.html * https://www.suse.com/security/cve/CVE-2024-20945.html * https://www.suse.com/security/cve/CVE-2024-20952.html * https://bugzilla.suse.com/show_bug.cgi?id=1218903 * https://bugzilla.suse.com/show_bug.cgi?id=1218905 * https://bugzilla.suse.com/show_bug.cgi?id=1218907 * https://bugzilla.suse.com/show_bug.cgi?id=1218908 * https://bugzilla.suse.com/show_bug.cgi?id=1218909 * https://bugzilla.suse.com/show_bug.cgi?id=1218911

1 0

SUSE-SU-2024:0320-1: important: Security update for xerces-c
by OPENSUSE-UPDATES 02 Feb '24

02 Feb '24

# Security update for xerces-c Announcement ID: SUSE-SU-2024:0320-1 Rating: important References: * bsc#1159552 Cross-References: * CVE-2018-1311 CVSS scores: * CVE-2018-1311 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2018-1311 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for xerces-c fixes the following issues: * CVE-2018-1311: fixed use-after-free triggered during the scanning of external DTDs potentially leading to DOS. (bsc#1159552) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-320=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-320=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-320=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-320=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-320=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-320=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-320=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-320=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-320=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-320=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-320=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-320=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-320=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-320=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-320=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-doc-3.2.3-150300.3.6.1 * xerces-c-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * openSUSE Leap 15.3 (x86_64) * libxerces-c-3_2-32bit-3.2.3-150300.3.6.1 * libxerces-c-3_2-32bit-debuginfo-3.2.3-150300.3.6.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libxerces-c-3_2-64bit-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-64bit-3.2.3-150300.3.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-doc-3.2.3-150300.3.6.1 * xerces-c-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * openSUSE Leap 15.5 (x86_64) * libxerces-c-3_2-32bit-3.2.3-150300.3.6.1 * libxerces-c-3_2-32bit-debuginfo-3.2.3-150300.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Manager Proxy 4.3 (x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libxerces-c-devel-3.2.3-150300.3.6.1 * libxerces-c-3_2-3.2.3-150300.3.6.1 * xerces-c-debuginfo-3.2.3-150300.3.6.1 * libxerces-c-3_2-debuginfo-3.2.3-150300.3.6.1 * xerces-c-debugsource-3.2.3-150300.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2018-1311.html * https://bugzilla.suse.com/show_bug.cgi?id=1159552

1 0

SUSE-SU-2024:0321-1: important: Security update for java-11-openjdk
by OPENSUSE-UPDATES 02 Feb '24

02 Feb '24

# Security update for java-11-openjdk Announcement ID: SUSE-SU-2024:0321-1 Rating: important References: * bsc#1218903 * bsc#1218905 * bsc#1218906 * bsc#1218907 * bsc#1218909 * bsc#1218911 Cross-References: * CVE-2024-20918 * CVE-2024-20919 * CVE-2024-20921 * CVE-2024-20926 * CVE-2024-20945 * CVE-2024-20952 CVSS scores: * CVE-2024-20918 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-20919 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-20921 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-20926 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-20945 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-20952 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for java-11-openjdk fixes the following issues: Updated to version 11.0.22 (January 2024 CPU): * CVE-2024-20918: Fixed an out of bounds access in the Hotspot JVM due to a missing bounds check (bsc#1218907). * CVE-2024-20919: Fixed a sandbox bypass in the Hotspot JVM class file verifier (bsc#1218903). * CVE-2024-20921: Fixed an incorrect optimization in the Hotspot JVM that could lead to corruption of JVM memory (bsc#1218905). * CVE-2024-20926: Fixed arbitrary Java code execution in Nashorn (bsc#1218906). * CVE-2024-20945: Fixed a potential private key leak through debug logs (bsc#1218909). * CVE-2024-20952: Fixed an RSA padding issue and timing side-channel attack against TLS (bsc#1218911). Find the full release notes at: https://mail.openjdk.org/pipermail/jdk-updates-dev/2024-January/029215.html ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-321=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-321=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2024-321=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-321=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-321=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-321=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-321=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-321=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2024-321=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-321=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-321=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-321=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2024-321=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-321=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-321=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-321=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-321=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-321=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-321=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-321=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-321=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * SUSE Package Hub 15 15-SP5 (noarch) * java-11-openjdk-javadoc-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Manager Proxy 4.3 (x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * SUSE CaaS Platform 4.0 (x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * java-11-openjdk-devel-11.0.22.0-150000.3.110.1 * java-11-openjdk-debugsource-11.0.22.0-150000.3.110.1 * java-11-openjdk-debuginfo-11.0.22.0-150000.3.110.1 * java-11-openjdk-jmods-11.0.22.0-150000.3.110.1 * java-11-openjdk-src-11.0.22.0-150000.3.110.1 * java-11-openjdk-demo-11.0.22.0-150000.3.110.1 * java-11-openjdk-11.0.22.0-150000.3.110.1 * java-11-openjdk-headless-11.0.22.0-150000.3.110.1 * openSUSE Leap 15.5 (noarch) * java-11-openjdk-javadoc-11.0.22.0-150000.3.110.1 ## References: * https://www.suse.com/security/cve/CVE-2024-20918.html * https://www.suse.com/security/cve/CVE-2024-20919.html * https://www.suse.com/security/cve/CVE-2024-20921.html * https://www.suse.com/security/cve/CVE-2024-20926.html * https://www.suse.com/security/cve/CVE-2024-20945.html * https://www.suse.com/security/cve/CVE-2024-20952.html * https://bugzilla.suse.com/show_bug.cgi?id=1218903 * https://bugzilla.suse.com/show_bug.cgi?id=1218905 * https://bugzilla.suse.com/show_bug.cgi?id=1218906 * https://bugzilla.suse.com/show_bug.cgi?id=1218907 * https://bugzilla.suse.com/show_bug.cgi?id=1218909 * https://bugzilla.suse.com/show_bug.cgi?id=1218911

1 0

SUSE-RU-2024:0322-1: moderate: Recommended update for aaa_base
by OPENSUSE-UPDATES 02 Feb '24

02 Feb '24

# Recommended update for aaa_base Announcement ID: SUSE-RU-2024:0322-1 Rating: moderate References: * bsc#1107342 * bsc#1215434 Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for aaa_base fixes the following issues: * Set JAVA_HOME correctly (bsc#1107342, bsc#1215434) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-322=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-322=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-322=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-322=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-322=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-322=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-322=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-322=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-322=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-322=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-322=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-322=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-322=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-322=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-322=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-322=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-322=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-322=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-322=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-322=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-322=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-322=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-322=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-322=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-322=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-wsl-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-wsl-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Manager Proxy 4.3 (x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.9.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1107342 * https://bugzilla.suse.com/show_bug.cgi?id=1215434

1 0

SUSE-RU-2024:0316-1: moderate: Recommended update for go1.22
by OPENSUSE-UPDATES 02 Feb '24

02 Feb '24

# Recommended update for go1.22 Announcement ID: SUSE-RU-2024:0316-1 Rating: moderate References: * bsc#1218424 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for go1.22 fixes the following issues: * go1.22rc2 (released 2024-01-24) is a release candidate version of go1.22 cut from the master branch at the revision tagged go1.22rc2. (bsc#1218424) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-316=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-316=1 ## Package List: * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.22-doc-1.22rc2-150000.1.3.1 * go1.22-1.22rc2-150000.1.3.1 * go1.22-race-1.22rc2-150000.1.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.22-doc-1.22rc2-150000.1.3.1 * go1.22-1.22rc2-150000.1.3.1 * go1.22-race-1.22rc2-150000.1.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218424

1 0

SUSE-RU-2024:0304-1: moderate: Recommended update for sles15-image
by OPENSUSE-UPDATES 01 Feb '24

01 Feb '24

# Recommended update for sles15-image Announcement ID: SUSE-RU-2024:0304-1 Rating: moderate References: * jsc#OBS-291 Affected Products: * openSUSE Leap 15.5 An update that contains one feature can now be installed. ## Description: This update for sles15-image fixes the following issues: * add artifacthub.io markers and introduction README.md (jsc#OBS-291) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-304=1 ## Package List: * openSUSE Leap 15.5 (noarch) * container:sles15-image-15.0.0-36.6.1 ## References: * https://jira.suse.com/browse/OBS-291

1 0