February 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:0624-1: important: Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5)
by OPENSUSE-UPDATES 26 Feb '24

26 Feb '24

# Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:0624-1 Rating: important References: * bsc#1215300 * bsc#1218733 Cross-References: * CVE-2023-4921 * CVE-2023-51780 CVSS scores: * CVE-2023-4921 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4921 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51780 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51780 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_18 fixes several issues. The following security issues were fixed: * CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215300). * CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218733). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-624=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-624=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_5-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-5-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-debuginfo-5-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_5-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-5-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-debuginfo-5-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4921.html * https://www.suse.com/security/cve/CVE-2023-51780.html * https://bugzilla.suse.com/show_bug.cgi?id=1215300 * https://bugzilla.suse.com/show_bug.cgi?id=1218733

1 0

SUSE-SU-2024:0619-1: important: Security update for java-1_8_0-ibm
by OPENSUSE-UPDATES 26 Feb '24

26 Feb '24

# Security update for java-1_8_0-ibm Announcement ID: SUSE-SU-2024:0619-1 Rating: important References: * bsc#1218903 * bsc#1218905 * bsc#1218906 * bsc#1218907 * bsc#1218908 * bsc#1218909 * bsc#1218911 * bsc#1219843 Cross-References: * CVE-2023-33850 * CVE-2024-20918 * CVE-2024-20919 * CVE-2024-20921 * CVE-2024-20926 * CVE-2024-20932 * CVE-2024-20945 * CVE-2024-20952 CVSS scores: * CVE-2023-33850 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-20918 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-20919 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-20921 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-20926 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-20932 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-20945 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-20952 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Legacy Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves eight vulnerabilities can now be installed. ## Description: This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843] Security fixes: * CVE-2023-33850: Fixed information disclosure vulnerability due to the consumed GSKit library (bsc#1219843). * CVE-2024-20932: Fixed incorrect handling of ZIP files with duplicate entries (bsc#1218908). * CVE-2024-20952: Fixed RSA padding issue and timing side-channel attack against TLS (bsc#1218911). * CVE-2024-20918: Fixed array out-of-bounds access due to missing range check in C1 compiler (bsc#1218907). * CVE-2024-20921: Fixed range check loop optimization issue (bsc#1218905). * CVE-2024-20919: Fixed JVM class file verifier flaw allows unverified bytecode execution (bsc#1218903). * CVE-2024-20926: Fixed arbitrary Java code execution in Nashorn (bsc#1218906). * CVE-2024-20945: Fixed logging of digital signature private keys (bsc#1218909). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-619=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-619=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-619=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-619=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-619=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-619=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-619=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-619=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-619=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-619=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 * SUSE Enterprise Storage 7.1 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * SUSE Enterprise Storage 7.1 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * openSUSE Leap 15.5 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * openSUSE Leap 15.5 (x86_64) * java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * Legacy Module 15-SP5 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1 * Legacy Module 15-SP5 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1 * Legacy Module 15-SP5 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1 ## References: * https://www.suse.com/security/cve/CVE-2023-33850.html * https://www.suse.com/security/cve/CVE-2024-20918.html * https://www.suse.com/security/cve/CVE-2024-20919.html * https://www.suse.com/security/cve/CVE-2024-20921.html * https://www.suse.com/security/cve/CVE-2024-20926.html * https://www.suse.com/security/cve/CVE-2024-20932.html * https://www.suse.com/security/cve/CVE-2024-20945.html * https://www.suse.com/security/cve/CVE-2024-20952.html * https://bugzilla.suse.com/show_bug.cgi?id=1218903 * https://bugzilla.suse.com/show_bug.cgi?id=1218905 * https://bugzilla.suse.com/show_bug.cgi?id=1218906 * https://bugzilla.suse.com/show_bug.cgi?id=1218907 * https://bugzilla.suse.com/show_bug.cgi?id=1218908 * https://bugzilla.suse.com/show_bug.cgi?id=1218909 * https://bugzilla.suse.com/show_bug.cgi?id=1218911 * https://bugzilla.suse.com/show_bug.cgi?id=1219843

1 0

openSUSE-RU-2024:0059-1: moderate: Recommended update for rxvt-unicode
by maintenance＠opensuse.org 26 Feb '24

26 Feb '24

openSUSE Recommended Update: Recommended update for rxvt-unicode ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0059-1 Rating: moderate References: #1214136 #1217732 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for rxvt-unicode fixes the following issues: - Change the confirm-paste keys beck to what was used before 9.31 (boo#1217732) - Do not set empty locale (boo#1214136) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-59=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): rxvt-unicode-9.31-bp155.3.6.1 References: https://bugzilla.suse.com/1214136 https://bugzilla.suse.com/1217732

3 2

SUSE-FU-2024:0611-1: moderate: Feature providing a supportconfig plugin for servers with pmem memory
by OPENSUSE-UPDATES 26 Feb '24

26 Feb '24

# Feature providing a supportconfig plugin for servers with pmem memory Announcement ID: SUSE-FU-2024:0611-1 Rating: moderate References: * jsc#PED-3251 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature can now be installed. ## Description: This feature provides supportutils-plugin-pmem, a supportconfig plugin for servers with pmem memory: * New package targeting SUSE:SLE-15-SP3:Update (jsc#PED-3251). This is a support utils plugin to gather information on ndctl (NVDIMM) & ipmctl (Intel pmem) tools for issue diagnosis. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-611=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-611=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-611=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-611=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-611=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-611=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-611=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-611=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-611=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-611=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-611=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-611=1 ## Package List: * openSUSE Leap 15.3 (x86_64) * ipmctl-02.00.00.3847-150300.3.2.2 * ipmctl-debuginfo-02.00.00.3847-150300.3.2.2 * ipmctl-devel-02.00.00.3847-150300.3.2.2 * ipmctl-debugsource-02.00.00.3847-150300.3.2.2 * openSUSE Leap 15.3 (aarch64 ppc64le x86_64) * ndctl-debuginfo-71.1-150300.3.5.2 * ndctl-debugsource-71.1-150300.3.5.2 * ndctl-71.1-150300.3.5.2 * libndctl6-71.1-150300.3.5.2 * libndctl-devel-71.1-150300.3.5.2 * libndctl6-debuginfo-71.1-150300.3.5.2 * openSUSE Leap 15.3 (noarch) * supportutils-plugin-pmem-0.0.1-150300.7.5.1 * openSUSE Leap 15.4 (x86_64) * ipmctl-devel-03.00.00.0423-150400.3.2.2 * ipmctl-debuginfo-03.00.00.0423-150400.3.2.2 * ipmctl-debugsource-03.00.00.0423-150400.3.2.2 * ipmctl-03.00.00.0423-150400.3.2.2 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * ndctl-71.1-150400.10.5.1 * libndctl-devel-71.1-150400.10.5.1 * ndctl-debugsource-71.1-150400.10.5.1 * libndctl6-71.1-150400.10.5.1 * ndctl-debuginfo-71.1-150400.10.5.1 * libndctl6-debuginfo-71.1-150400.10.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libiniparser1-4.1-150500.4.5.1 * libiniparser1-debuginfo-4.1-150500.4.5.1 * iniparser-debugsource-4.1-150500.4.5.1 * libiniparser-devel-4.1-150500.4.5.1 * openSUSE Leap 15.5 (x86_64) * libiniparser1-32bit-debuginfo-4.1-150500.4.5.1 * libiniparser1-32bit-4.1-150500.4.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * libndctl-devel-75-150500.4.2.1 * ndctl-75-150500.4.2.1 * libndctl6-debuginfo-75-150500.4.2.1 * ndctl-debugsource-75-150500.4.2.1 * libndctl6-75-150500.4.2.1 * ndctl-debuginfo-75-150500.4.2.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libiniparser1-64bit-4.1-150500.4.5.1 * libiniparser1-64bit-debuginfo-4.1-150500.4.5.1 * Basesystem Module 15-SP5 (x86_64) * libndctl-devel-75-150500.4.2.1 * ndctl-75-150500.4.2.1 * libndctl6-debuginfo-75-150500.4.2.1 * ndctl-debugsource-75-150500.4.2.1 * libndctl6-75-150500.4.2.1 * ndctl-debuginfo-75-150500.4.2.1 * libiniparser1-4.1-150500.4.5.1 * ipmctl-03.00.00.0423-150400.3.2.2 * Basesystem Module 15-SP5 (noarch) * supportutils-plugin-pmem-0.0.1-150300.7.5.1 * Server Applications Module 15-SP5 (x86_64) * ndctl-75-150500.4.2.1 * ndctl-debugsource-75-150500.4.2.1 * libiniparser1-debuginfo-4.1-150500.4.5.1 * ipmctl-devel-03.00.00.0423-150400.3.2.2 * ipmctl-03.00.00.0423-150400.3.2.2 * iniparser-debugsource-4.1-150500.4.5.1 * ipmctl-debugsource-03.00.00.0423-150400.3.2.2 * ndctl-debuginfo-75-150500.4.2.1 * libiniparser1-4.1-150500.4.5.1 * ipmctl-debuginfo-03.00.00.0423-150400.3.2.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * ipmctl-debugsource-02.00.00.3847-150300.3.2.2 * ipmctl-devel-02.00.00.3847-150300.3.2.2 * ndctl-debuginfo-71.1-150300.3.5.2 * ndctl-debugsource-71.1-150300.3.5.2 * ipmctl-02.00.00.3847-150300.3.2.2 * libndctl6-71.1-150300.3.5.2 * ndctl-71.1-150300.3.5.2 * libndctl-devel-71.1-150300.3.5.2 * libndctl6-debuginfo-71.1-150300.3.5.2 * ipmctl-debuginfo-02.00.00.3847-150300.3.2.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * supportutils-plugin-pmem-0.0.1-150300.7.5.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libndctl-devel-71.1-150400.10.5.1 * ndctl-71.1-150400.10.5.1 * ndctl-debugsource-71.1-150400.10.5.1 * libndctl6-71.1-150400.10.5.1 * ipmctl-devel-03.00.00.0423-150400.3.2.2 * ndctl-debuginfo-71.1-150400.10.5.1 * ipmctl-03.00.00.0423-150400.3.2.2 * ipmctl-debugsource-03.00.00.0423-150400.3.2.2 * libndctl6-debuginfo-71.1-150400.10.5.1 * ipmctl-debuginfo-03.00.00.0423-150400.3.2.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * supportutils-plugin-pmem-0.0.1-150300.7.5.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libndctl-devel-71.1-150400.10.5.1 * ndctl-71.1-150400.10.5.1 * ndctl-debugsource-71.1-150400.10.5.1 * libndctl6-71.1-150400.10.5.1 * ipmctl-devel-03.00.00.0423-150400.3.2.2 * ndctl-debuginfo-71.1-150400.10.5.1 * ipmctl-03.00.00.0423-150400.3.2.2 * ipmctl-debugsource-03.00.00.0423-150400.3.2.2 * libndctl6-debuginfo-71.1-150400.10.5.1 * ipmctl-debuginfo-03.00.00.0423-150400.3.2.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * supportutils-plugin-pmem-0.0.1-150300.7.5.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * ipmctl-debugsource-02.00.00.3847-150300.3.2.2 * ipmctl-devel-02.00.00.3847-150300.3.2.2 * ndctl-debuginfo-71.1-150300.3.5.2 * ndctl-debugsource-71.1-150300.3.5.2 * ipmctl-02.00.00.3847-150300.3.2.2 * libndctl6-71.1-150300.3.5.2 * ndctl-71.1-150300.3.5.2 * libndctl-devel-71.1-150300.3.5.2 * libndctl6-debuginfo-71.1-150300.3.5.2 * ipmctl-debuginfo-02.00.00.3847-150300.3.2.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * supportutils-plugin-pmem-0.0.1-150300.7.5.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libndctl-devel-71.1-150400.10.5.1 * ndctl-71.1-150400.10.5.1 * ndctl-debugsource-71.1-150400.10.5.1 * libndctl6-71.1-150400.10.5.1 * ipmctl-devel-03.00.00.0423-150400.3.2.2 * ndctl-debuginfo-71.1-150400.10.5.1 * ipmctl-03.00.00.0423-150400.3.2.2 * ipmctl-debugsource-03.00.00.0423-150400.3.2.2 * libndctl6-debuginfo-71.1-150400.10.5.1 * ipmctl-debuginfo-03.00.00.0423-150400.3.2.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * supportutils-plugin-pmem-0.0.1-150300.7.5.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * ipmctl-debugsource-02.00.00.3847-150300.3.2.2 * ipmctl-devel-02.00.00.3847-150300.3.2.2 * ndctl-debuginfo-71.1-150300.3.5.2 * ndctl-debugsource-71.1-150300.3.5.2 * ipmctl-02.00.00.3847-150300.3.2.2 * libndctl6-71.1-150300.3.5.2 * ndctl-71.1-150300.3.5.2 * libndctl-devel-71.1-150300.3.5.2 * libndctl6-debuginfo-71.1-150300.3.5.2 * ipmctl-debuginfo-02.00.00.3847-150300.3.2.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * supportutils-plugin-pmem-0.0.1-150300.7.5.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libndctl-devel-71.1-150400.10.5.1 * ndctl-71.1-150400.10.5.1 * ndctl-debugsource-71.1-150400.10.5.1 * libndctl6-71.1-150400.10.5.1 * ipmctl-devel-03.00.00.0423-150400.3.2.2 * ndctl-debuginfo-71.1-150400.10.5.1 * ipmctl-03.00.00.0423-150400.3.2.2 * ipmctl-debugsource-03.00.00.0423-150400.3.2.2 * libndctl6-debuginfo-71.1-150400.10.5.1 * ipmctl-debuginfo-03.00.00.0423-150400.3.2.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * supportutils-plugin-pmem-0.0.1-150300.7.5.1 ## References: * https://jira.suse.com/browse/PED-3251

1 0

openSUSE-RU-2024:0058-1: moderate: Recommended update for rdiff-backup
by maintenance＠opensuse.org 24 Feb '24

24 Feb '24

openSUSE Recommended Update: Recommended update for rdiff-backup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0058-1 Rating: moderate References: #1219652 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rdiff-backup fixes the following issues: Update to 2.2.6: * FIX: extended variables were not correctly written if content of file hadn't changed and file was read-only (API 201). * FIX: failed parsing of arguments would return code 2 for warnings instead of 1 for errors * FIX: quoting variables where not correctly propagated when set from the command line (API 201). * FIX: some new functions were needed with higher security level and had to be sorted accordingly (API 201). * FIX: test action would fail with empty error message when using API 201 * FIX: timezone was not always correctly calculated in countries with historically changing DST, closes #902 * NEW: add environment variable RDIFF_BACKUP_API_VERSION to artificially modify the API version dictionary, see the man page for details. * NEW: add warning that server will be called with deprecated CLI and how to avoid the corresponding warning (see also the FAQ) * NEW: there is now a weekly release with changelog for intermediate testing available at https://github.com/rdiff-backup/rdiff-backup/releases/tag/weekly * FIX: cross-version issue with 2.0.5 complaining about KeyError restrict_path, closes #872 * FIX: fail gracefully when connection(s) can't be setup e.g. in case of network error, closes #868 Update to 2.2.4: * Only very small code and documentation fixes, hopefully really the last fix release of the stable branch 2.2, before the development effort for v2.4 starts. Update to 2.2.3: * Only small code and documentation fixes and additions, probably the last fix release of the stable branch 2.2, before the development effort for v2.4 starts. * That's embarrassing but the last version still had a glitch and the sdist package `rdiff-backup-2.2.2.tar.gz` didn't contain the pre-rendered man-pages which some packagers requested. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-58=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): rdiff-backup-2.2.6-bp155.2.3.1 References: https://bugzilla.suse.com/1219652

1 0

openSUSE-RU-2024:0057-1: moderate: Recommended update for lynx
by maintenance＠opensuse.org 24 Feb '24

24 Feb '24

openSUSE Recommended Update: Recommended update for lynx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0057-1 Rating: moderate References: #1220026 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lynx fixes the following issues: lynx was updated to 2.9.0 [boo#1220026] 2024-01-15 (2.9.0) * fixes for UBSAN/ASAN issues with clang on Windows -GV * modify install-doc rule to use relative path for symbolic links -TD * add support for gopher's hURL functionality (patch by Viatrix). * allow ^G interrupt to end read from a stalled connection without exiting Lynx (Debian #1033423) -TD * allow the ^S keymap to be disabled in the configuration file, e.g., KEYMAP:^S:UNMAPPED (report by TG) -TD * repair docs/OS-390.announce and docs/README.jp -TD * make the test-files non-empty, to appease some packaging tools -TD * check for getpwuid(), use in preference to deprecated cuserid() -TD * modify curses initialization to permit ^S built-in keymap to work without needing external stty changes -TD * correct ifdef for LYmsec_delay() (report by Alexander Arkhipov) -TD * add a NUL after "/" in the SGML parser when the next character is ">", to make PRETTYSRC view display correctly (report by "Dima") -TD * trim some obsolete style code for NeXT -TD * improve responsiveness with respect to SIGWINCH (report by Mark Zaharov) -TD * improve check for MAX_URI_SIZE -TD * improve check for UTF-8 character encoding in XML Text Declaration (report by Lennart Jablonka) -TD * fix for decoding utf-8 in CDATA sections (patch by Hiltjo Posthuma) * treat HTTP 308 permanently redirected the same as HTTP 301 permanently moved (Debian #1041686). * formatting fixes for manpage (Debian #1037353). * change defaults in configure script to use compression -TD * modify HTChunkPutb2() to avoid passing a zero-size or null pointer to memcpy() -TD * correct loop in fill_addrinfo() which adds sizes of struct addrinfo's found in getaddrinfo() call; the 2.8.8dev.15 change did not update the pointer to the struct addrinfo's (Redhat #2185402) -TD * modify configure script to reduce implicit-function warnings -TD * add viewport meta-tag to documentation/test files -TD * update config.guess (2023-08-22), config.sub (2023-09-15) * update ro.po from http://translationproject.org/latest/lynx 2023-01-08 (2.9.0dev.12) * add a rewind() call before reading existing bookmark file opened for append with read/write, to ensure that the file-position is at the beginning of the file (report by Klatt Volkmar) -TD * improve compiler-warnings in configure script checks -TD * fix a few ifdef'ing problems (prompted by discussion with Klatt Volkmar) -TD * fix spelling errors found with codespell (report by Jens Schleusener) -TD * update eo.po from http://translationproject.org/latest/lynx 2022-12-28 (2.9.0dev.11) * update ncurses/lynx homepage URLs to deprecate ftp -TD * modify configure script to reduce implicit-function warnings (report by Florian Weimer) -TD * update configure script to work around regression in grep 3.8 -TD * add some consistency-checks to dtd_util to make it easier to use -TD * improve formatting of bookmark file, e.g., to fix warnings by tidy -TD * correct workaround for asan2 report of overlapping strcpy (report by KH) -TD * amend fix for Debian #738121; URL-encoded "?" in HTFile.c corresponds to an actual "?" in a file path (report by TG) -TD * before calling delscreen, delete the private working windows in case delwin invalidates those (Debian #1015756) -TD * add presentation type for xhtml, related state information to better handle things such as "<script src=foo />" -Shlomi Fish, TD * improve line-breaks and whitespace for Japanese characters -KH + permit line breaks after any Japanese character (enabled by --enable-wcwidth-support configuration and only called on last byte of multibyte UTF-8 sequence) + avoid adding spaces when joining lines after Japanese characters. * add new "Minimal" user mode, to minimize on-screen help/status. Eliminates the URL on the bottom line, the forward/backward indicator in the upper left, and most status-line messages - Paul G Fox * add PREVENT_KEYBOARD_WRAPAROUND symbol to userdefs.h Undefing this will allow cursor to wrap from bottom to/from top, when there's more content than a single page. (It can already wrap when the content already fits on a page.) - Paul G Fox * modify NSL-fork to call freeaddrinfo only if getaddrinfo returns successfully (patch by Rajeev V Pillai) * add ".br", ".lz", ".lzip", and ".xz" to binary-suffixes list -TD * changes for using brotli stream decompression -TD * changes for working with SOCKS5 on Windows 10 -GV, -TD * fix a few coverity and clang warnings -TD * add a null-pointer check in StrAllocVsprintf() to work with existing SOCKS5 configuration (report/patch by Gisle Vanem). * change capitalization of "Content-type" sent to the remote server to work around "HeavyThing" server which does not follow RFC 2616 in treating field name as case insensitive (report/patch by Sylvain Bertrand) * improved several configure macros: AM_WITH_NLS, CF_ADD_INCDIR, CF_BUILD_CC, CF_CHECK_EXTERN_DATA, CF_DISABLE_ECHO, CF_FIX_WARNINGS, CF_MAKEFLAGS, CF_MATH_LIB, CF_NCURSES_CONFIG, CF_NCURSES_LIBS, CF_PKG_CONFIG, CF_PROG_LINT, CF_SIZECHANGE, CF_TRY_XOPEN_SOURCE, CF_WITH_PATH, CF_XOPEN_SOURCE Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-57=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): lynx-2.9.0-bp155.2.3.1 References: https://bugzilla.suse.com/1220026

1 0

SUSE-SU-2024:0607-1: important: Security update for MozillaFirefox
by OPENSUSE-UPDATES 23 Feb '24

23 Feb '24

# Security update for MozillaFirefox Announcement ID: SUSE-SU-2024:0607-1 Rating: important References: * bsc#1184272 * bsc#1220048 Cross-References: * CVE-2024-1546 * CVE-2024-1547 * CVE-2024-1548 * CVE-2024-1549 * CVE-2024-1550 * CVE-2024-1551 * CVE-2024-1552 * CVE-2024-1553 CVSS scores: Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves eight vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.8.0 ESR (MFSA 2024-06) (bsc#1220048): * CVE-2024-1546: Out-of-bounds memory read in networking channels * CVE-2024-1547: Alert dialog could have been spoofed on another site * CVE-2024-1548: Fullscreen Notification could have been hidden by select element * CVE-2024-1549: Custom cursor could obscure the permission dialog * CVE-2024-1550: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants * CVE-2024-1551: Multipart HTTP Responses would accept the Set-Cookie header in response parts * CVE-2024-1552: Incorrect code generation on 32-bit ARM devices * CVE-2024-1553: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 * Recommend libfido2-udev on codestreams that exist, in order to try to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-607=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-607=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-607=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-607=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-607=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-607=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-607=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-607=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-607=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-607=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-607=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-607=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-607=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-607=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-branding-upstream-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * openSUSE Leap 15.5 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * Desktop Applications Module 15-SP5 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * MozillaFirefox-115.8.0-150200.152.126.3 * MozillaFirefox-debuginfo-115.8.0-150200.152.126.3 * MozillaFirefox-translations-other-115.8.0-150200.152.126.3 * MozillaFirefox-debugsource-115.8.0-150200.152.126.3 * MozillaFirefox-translations-common-115.8.0-150200.152.126.3 * SUSE Enterprise Storage 7.1 (noarch) * MozillaFirefox-devel-115.8.0-150200.152.126.3 ## References: * https://www.suse.com/security/cve/CVE-2024-1546.html * https://www.suse.com/security/cve/CVE-2024-1547.html * https://www.suse.com/security/cve/CVE-2024-1548.html * https://www.suse.com/security/cve/CVE-2024-1549.html * https://www.suse.com/security/cve/CVE-2024-1550.html * https://www.suse.com/security/cve/CVE-2024-1551.html * https://www.suse.com/security/cve/CVE-2024-1552.html * https://www.suse.com/security/cve/CVE-2024-1553.html * https://bugzilla.suse.com/show_bug.cgi?id=1184272 * https://bugzilla.suse.com/show_bug.cgi?id=1220048

1 0

SUSE-SU-2024:0608-1: important: Security update for MozillaThunderbird
by OPENSUSE-UPDATES 23 Feb '24

23 Feb '24

# Security update for MozillaThunderbird Announcement ID: SUSE-SU-2024:0608-1 Rating: important References: * bsc#1220048 Cross-References: * CVE-2024-1546 * CVE-2024-1547 * CVE-2024-1548 * CVE-2024-1549 * CVE-2024-1550 * CVE-2024-1551 * CVE-2024-1552 * CVE-2024-1553 CVSS scores: Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves eight vulnerabilities can now be installed. ## Description: This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 115.8 (bsc#1220048): * CVE-2024-1546: Out-of-bounds memory read in networking channels * CVE-2024-1547: Alert dialog could have been spoofed on another site * CVE-2024-1548: Fullscreen Notification could have been hidden by select element * CVE-2024-1549: Custom cursor could obscure the permission dialog * CVE-2024-1550: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants * CVE-2024-1551: Multipart HTTP Responses would accept the Set-Cookie header in response parts * CVE-2024-1552: Incorrect code generation on 32-bit ARM devices * CVE-2024-1553: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-608=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-608=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-608=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-115.8.0-150200.8.148.1 * MozillaThunderbird-debugsource-115.8.0-150200.8.148.1 * MozillaThunderbird-debuginfo-115.8.0-150200.8.148.1 * MozillaThunderbird-translations-common-115.8.0-150200.8.148.1 * MozillaThunderbird-translations-other-115.8.0-150200.8.148.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * MozillaThunderbird-115.8.0-150200.8.148.1 * MozillaThunderbird-debugsource-115.8.0-150200.8.148.1 * MozillaThunderbird-debuginfo-115.8.0-150200.8.148.1 * MozillaThunderbird-translations-common-115.8.0-150200.8.148.1 * MozillaThunderbird-translations-other-115.8.0-150200.8.148.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * MozillaThunderbird-115.8.0-150200.8.148.1 * MozillaThunderbird-debugsource-115.8.0-150200.8.148.1 * MozillaThunderbird-debuginfo-115.8.0-150200.8.148.1 * MozillaThunderbird-translations-common-115.8.0-150200.8.148.1 * MozillaThunderbird-translations-other-115.8.0-150200.8.148.1 ## References: * https://www.suse.com/security/cve/CVE-2024-1546.html * https://www.suse.com/security/cve/CVE-2024-1547.html * https://www.suse.com/security/cve/CVE-2024-1548.html * https://www.suse.com/security/cve/CVE-2024-1549.html * https://www.suse.com/security/cve/CVE-2024-1550.html * https://www.suse.com/security/cve/CVE-2024-1551.html * https://www.suse.com/security/cve/CVE-2024-1552.html * https://www.suse.com/security/cve/CVE-2024-1553.html * https://bugzilla.suse.com/show_bug.cgi?id=1220048

1 0

SUSE-RU-2024:0606-1: critical: Recommended update for pacemaker
by OPENSUSE-UPDATES 23 Feb '24

23 Feb '24

# Recommended update for pacemaker Announcement ID: SUSE-RU-2024:0606-1 Rating: critical References: * bsc#1219220 * bsc#1219323 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for pacemaker fixes the following issues: * libcrmcommon: Avoid file descriptor leak in IPC client with async connection (bsc#1219323) * libcrmcommon: Always output request= in XML output * libcrmcommon: crm_xml_escape() shouldn't stop on Unicode characters * tools: crm_attribute emits garbage for --node localhost or auto * tools: Fix memory leak in crm_mon with HTML output * tools: crm_mon segfaults when fencer connection is lost (bsc#1219220) * attrd: Write Pacemaker Remote node attributes even if not in cache * agents: Use attrd_updater dampen delay in SysInfo * libcrmcommon: Check correct env vars in pcmk__node_attr_target() * scheduler: Restore nvpair behavior without id-ref * scheduler: Reject expression without op sooner * libcrmcommon: Fix NULL dereference in expand_idref() * scheduler: Improve logs for invalid id-ref's * pacemaker-attrd,libcrmcluster: Avoid use-after-free when remote node in cluster node cache * libcrmcluster: Avoid use-after-free in trace log * HealthSmart: Check the parameter values of check_temperature to avoid error output * agents: Handle dampening parameter consistently and correctly * crm_resource: Make --wait wait for pending actions in CIB * scheduler: Avoid double free with disabled recurring actions * agents: HealthCPU - fix the validation of input * controller: Don't try to execute agent action at shutdown * tools: The dampen parameter is disabled when setting values with attrd_updater. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-606=1 openSUSE-SLE-15.5-2024-606=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-606=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * pacemaker-libs-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-debugsource-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-remote-debuginfo-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-libs-debuginfo-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-devel-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-cli-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-remote-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-cli-debuginfo-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-debuginfo-2.1.5+20221208.a3f44794f-150500.6.11.1 * openSUSE Leap 15.5 (noarch) * pacemaker-cts-2.1.5+20221208.a3f44794f-150500.6.11.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * pacemaker-libs-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-debugsource-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-remote-debuginfo-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-libs-debuginfo-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-devel-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-cli-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-remote-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-cli-debuginfo-2.1.5+20221208.a3f44794f-150500.6.11.1 * pacemaker-debuginfo-2.1.5+20221208.a3f44794f-150500.6.11.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (noarch) * pacemaker-cts-2.1.5+20221208.a3f44794f-150500.6.11.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219220 * https://bugzilla.suse.com/show_bug.cgi?id=1219323

1 0

openSUSE-RU-2024:0056-1: moderate: Recommended update for libkgapi
by maintenance＠opensuse.org 23 Feb '24

23 Feb '24

openSUSE Recommended Update: Recommended update for libkgapi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0056-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for libkgapi fixes the following issues: - Prepare for incoming Google API changes. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-56=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): libKPimGAPIBlogger5-22.12.3-bp155.2.3.1 libKPimGAPICalendar5-22.12.3-bp155.2.3.1 libKPimGAPIContacts5-22.12.3-bp155.2.3.1 libKPimGAPICore5-22.12.3-bp155.2.3.1 libKPimGAPIDrive5-22.12.3-bp155.2.3.1 libKPimGAPILatitude5-22.12.3-bp155.2.3.1 libKPimGAPIMaps5-22.12.3-bp155.2.3.1 libKPimGAPITasks5-22.12.3-bp155.2.3.1 libkgapi-devel-22.12.3-bp155.2.3.1 sasl2-kdexoauth2-22.12.3-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): libkgapi-lang-22.12.3-bp155.2.3.1 References:

1 0