February 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:0460-1: important: Security update for rekor
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Security update for rekor Announcement ID: SUSE-SU-2024:0460-1 Rating: important References: * bsc#1218207 * jsc#SLE-23476 Cross-References: * CVE-2023-48795 CVSS scores: * CVE-2023-48795 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-48795 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for rekor fixes the following issues: update to 1.3.5 (jsc#SLE-23476): * Additional unique index correction * Remove timestamp from checkpoint * Drop conditional when verifying entry checkpoint * Fix panic for DSSE canonicalization * Change Redis value for locking mechanism * give log timestamps nanosecond precision * output trace in slog and override correlation header name * bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207) Updated to 1.3.4: * add mysql indexstorage backend * add s3 storage for attestations * fix: Do not check for pubsub.topics.get on initialization * fix optional field in cose schema * Update ranges.go * update indexstorage interface to reduce roundtrips * use a single validator library in rekor-cli * Remove go-playground/validator dependency from pkg/pki Updated to rekor 1.3.3 (jsc#SLE-23476): * Update signer flag description * update trillian to 1.5.3 * adds redis_auth * Add method to get artifact hash for an entry * make e2e tests more usable with docker-compose * install go at correct version for codeql Updated to rekor 1.3.2 (jsc#SLE-23476): Updated to rekor 1.3.1 (jsc#SLE-23476): New Features: * enable GCP cloud profiling on rekor-server (#1746) * move index storage into interface (#1741) * add info to readme to denote additional documentation sources (#1722) * Add type of ed25519 key for TUF (#1677) * Allow parsing base64-encoded TUF metadata and root content (#1671) Quality Enhancements: * disable quota in trillian in test harness (#1680) Bug Fixes: * Update contact for code of conduct (#1720) * Fix panic when parsing SSH SK pubkeys (#1712) * Correct index creation (#1708) * docs: fixzes a small typo on the readme (#1686) * chore: fix backfill-redis Makefile target (#1685) Updated to rekor 1.3.0 (jsc#SLE-23476): * Update openapi.yaml (#1655) * pass transient errors through retrieveLogEntry (#1653) * return full entryID on HTTP 409 responses (#1650) * feat: Support publishing new log entries to Pub/Sub topics (#1580) * Change values of Identity.Raw, add fingerprints (#1628) * Extract all subjects from SANs for x509 verifier (#1632) * Fix type comment for Identity struct (#1619) * Refactor Identities API (#1611) * Refactor Verifiers to return multiple keys (#1601) * Update checkpoint link (#1597) * Use correct log index in inclusion proof (#1599) * remove instrumentation library (#1595) Updated to rekor 1.2.2 (jsc#SLE-23476): * pass down error with message instead of nil * swap killswitch for 'docker-compose restart' * CVE-2023-48795: Fixed Terrapin attack in embedded golang.org/x/crypto/ssh (bsc#1218207). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-460=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-460=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-460=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * rekor-debuginfo-1.3.5-150400.4.19.1 * rekor-1.3.5-150400.4.19.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rekor-1.3.5-150400.4.19.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rekor-1.3.5-150400.4.19.1 ## References: * https://www.suse.com/security/cve/CVE-2023-48795.html * https://bugzilla.suse.com/show_bug.cgi?id=1218207 * https://jira.suse.com/browse/SLE-23476

1 0

SUSE-SU-2024:0461-1: moderate: Security update for libxml2
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Security update for libxml2 Announcement ID: SUSE-SU-2024:0461-1 Rating: moderate References: * bsc#1219576 Cross-References: * CVE-2024-25062 CVSS scores: * CVE-2024-25062 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-25062 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 An update that solves one vulnerability can now be installed. ## Description: This update for libxml2 fixes the following issues: * CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-461=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-461=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-461=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-461=1 ## Package List: * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * python-libxml2-python-debugsource-2.9.7-150000.3.66.1 * libxml2-tools-debuginfo-2.9.7-150000.3.66.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.66.1 * libxml2-tools-2.9.7-150000.3.66.1 * libxml2-debugsource-2.9.7-150000.3.66.1 * libxml2-2-2.9.7-150000.3.66.1 * libxml2-2-debuginfo-2.9.7-150000.3.66.1 * python3-libxml2-python-2.9.7-150000.3.66.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * python-libxml2-python-debugsource-2.9.7-150000.3.66.1 * libxml2-tools-debuginfo-2.9.7-150000.3.66.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.66.1 * libxml2-tools-2.9.7-150000.3.66.1 * libxml2-debugsource-2.9.7-150000.3.66.1 * libxml2-2-2.9.7-150000.3.66.1 * libxml2-2-debuginfo-2.9.7-150000.3.66.1 * python3-libxml2-python-2.9.7-150000.3.66.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-libxml2-python-debugsource-2.9.7-150000.3.66.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.66.1 * python3-libxml2-python-2.9.7-150000.3.66.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libxml2-tools-debuginfo-2.9.7-150000.3.66.1 * libxml2-tools-2.9.7-150000.3.66.1 * libxml2-debugsource-2.9.7-150000.3.66.1 * libxml2-2-2.9.7-150000.3.66.1 * libxml2-2-debuginfo-2.9.7-150000.3.66.1 ## References: * https://www.suse.com/security/cve/CVE-2024-25062.html * https://bugzilla.suse.com/show_bug.cgi?id=1219576

1 0

SUSE-SU-2024:0455-1: important: Security update for squid
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Security update for squid Announcement ID: SUSE-SU-2024:0455-1 Rating: important References: * bsc#1217654 * bsc#1219131 Cross-References: * CVE-2023-50269 * CVE-2024-23638 CVSS scores: * CVE-2023-50269 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-50269 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23638 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23638 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654) * CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-455=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-455=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-455=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-455=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-455=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-455=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-455=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-455=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-455=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-455=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Manager Proxy 4.3 (x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * squid-debuginfo-5.7-150400.3.23.1 * squid-5.7-150400.3.23.1 * squid-debugsource-5.7-150400.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50269.html * https://www.suse.com/security/cve/CVE-2024-23638.html * https://bugzilla.suse.com/show_bug.cgi?id=1217654 * https://bugzilla.suse.com/show_bug.cgi?id=1219131

1 0

SUSE-RU-2024:0456-1: moderate: Recommended update for grub2
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Recommended update for grub2 Announcement ID: SUSE-RU-2024:0456-1 Rating: moderate References: Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for grub2 fixes the following issues: * Fix missing grub2 exporters on Leap ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-456=1 openSUSE-SLE-15.5-2024-456=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-456=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-456=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-456=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * grub2-2.06-150500.29.13.1 * grub2-branding-upstream-2.06-150500.29.13.1 * grub2-debuginfo-2.06-150500.29.13.1 * openSUSE Leap 15.5 (aarch64 s390x x86_64 i586) * grub2-debugsource-2.06-150500.29.13.1 * openSUSE Leap 15.5 (noarch) * grub2-powerpc-ieee1275-2.06-150500.29.13.1 * grub2-s390x-emu-extras-2.06-150500.29.13.1 * grub2-x86_64-efi-2.06-150500.29.13.1 * grub2-i386-xen-2.06-150500.29.13.1 * grub2-x86_64-efi-debug-2.06-150500.29.13.1 * grub2-x86_64-efi-extras-2.06-150500.29.13.1 * grub2-powerpc-ieee1275-extras-2.06-150500.29.13.1 * grub2-i386-efi-2.06-150500.29.13.1 * grub2-arm64-efi-2.06-150500.29.13.1 * grub2-arm64-efi-extras-2.06-150500.29.13.1 * grub2-i386-efi-extras-2.06-150500.29.13.1 * grub2-powerpc-ieee1275-debug-2.06-150500.29.13.1 * grub2-i386-pc-2.06-150500.29.13.1 * grub2-x86_64-xen-2.06-150500.29.13.1 * grub2-i386-xen-extras-2.06-150500.29.13.1 * grub2-systemd-sleep-plugin-2.06-150500.29.13.1 * grub2-i386-pc-debug-2.06-150500.29.13.1 * grub2-x86_64-xen-extras-2.06-150500.29.13.1 * grub2-arm64-efi-debug-2.06-150500.29.13.1 * grub2-i386-pc-extras-2.06-150500.29.13.1 * grub2-i386-efi-debug-2.06-150500.29.13.1 * grub2-snapper-plugin-2.06-150500.29.13.1 * openSUSE Leap 15.5 (s390x) * grub2-s390x-emu-debug-2.06-150500.29.13.1 * grub2-s390x-emu-2.06-150500.29.13.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * grub2-2.06-150500.29.13.1 * grub2-debugsource-2.06-150500.29.13.1 * grub2-debuginfo-2.06-150500.29.13.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * grub2-arm64-efi-2.06-150500.29.13.1 * grub2-snapper-plugin-2.06-150500.29.13.1 * grub2-x86_64-efi-2.06-150500.29.13.1 * grub2-i386-pc-2.06-150500.29.13.1 * grub2-x86_64-xen-2.06-150500.29.13.1 * SUSE Linux Enterprise Micro 5.5 (s390x) * grub2-s390x-emu-2.06-150500.29.13.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * grub2-2.06-150500.29.13.1 * grub2-debuginfo-2.06-150500.29.13.1 * Basesystem Module 15-SP5 (noarch) * grub2-systemd-sleep-plugin-2.06-150500.29.13.1 * grub2-powerpc-ieee1275-2.06-150500.29.13.1 * grub2-arm64-efi-2.06-150500.29.13.1 * grub2-snapper-plugin-2.06-150500.29.13.1 * grub2-x86_64-efi-2.06-150500.29.13.1 * grub2-i386-pc-2.06-150500.29.13.1 * Basesystem Module 15-SP5 (aarch64 s390x x86_64) * grub2-debugsource-2.06-150500.29.13.1 * Basesystem Module 15-SP5 (s390x) * grub2-s390x-emu-2.06-150500.29.13.1 * Server Applications Module 15-SP5 (noarch) * grub2-x86_64-xen-2.06-150500.29.13.1

1 0

SUSE-RU-2024:0449-1: moderate: Recommended update for pdsh
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Recommended update for pdsh Announcement ID: SUSE-RU-2024:0449-1 Rating: moderate References: * bsc#1212946 * jsc#PED-7817 * jsc#PED-7829 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that contains two features and has one fix can now be installed. ## Description: This update for pdsh fixes the following issues: * pdsh was updated to version 2.35 (jsc#PED-7817, jsc#PED-7829): * Added `-d` option to log errors * Added `-k` option to fail fast on ssh failures or non-zero return code * build: use LDADD instead of LDFLAGS for libcommon.la * dsbak: fixed handling of empty input lines * Release a lock that is no longer used * slurm: add -C to restrict hostlist to nodes with features * slurm: call slurm_init() once before any call to Slurm API * slurm: fix compile of slurm plugin against Slurm >= 23.x * ssh: fixed sshcmd_signal on macos * Fixed missing pdsh-slurm options to run jobs against the slurm cluster (bsc#1212946) * Removed outdated and defunct project URI on Google: * The content can still be found in the archives at: https://code.google.com/archive/p/pdsh/. * The project has moved to github entirely. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-449=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-449=1 openSUSE-SLE-15.5-2024-449=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2024-449=1 ## Package List: * SUSE Package Hub 15 15-SP5 (ppc64le s390x) * pdsh-debugsource-2.35-150500.46.3.1 * pdsh-dshgroup-2.35-150500.46.3.1 * pdsh-slurm-2.35-150500.46.3.1 * pdsh-machines-2.35-150500.46.3.1 * pdsh-genders-debuginfo-2.35-150500.46.3.1 * pdsh-machines-debuginfo-2.35-150500.46.3.1 * pdsh-genders-2.35-150500.46.3.1 * pdsh-2.35-150500.46.3.1 * pdsh-netgroup-2.35-150500.46.3.1 * pdsh-netgroup-debuginfo-2.35-150500.46.3.1 * pdsh-dshgroup-debuginfo-2.35-150500.46.3.1 * pdsh-debuginfo-2.35-150500.46.3.1 * pdsh-slurm-debuginfo-2.35-150500.46.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * pdsh-debugsource-2.35-150500.46.3.1 * pdsh-dshgroup-2.35-150500.46.3.1 * pdsh-machines-2.35-150500.46.3.1 * pdsh-genders-debuginfo-2.35-150500.46.3.1 * pdsh-machines-debuginfo-2.35-150500.46.3.1 * pdsh-genders-2.35-150500.46.3.1 * pdsh-2.35-150500.46.3.1 * pdsh-netgroup-2.35-150500.46.3.1 * pdsh-netgroup-debuginfo-2.35-150500.46.3.1 * pdsh-dshgroup-debuginfo-2.35-150500.46.3.1 * pdsh-debuginfo-2.35-150500.46.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * pdsh-slurm-debuginfo-2.35-150500.46.3.1 * pdsh-slurm-2.35-150500.46.3.1 * HPC Module 15-SP5 (aarch64 x86_64) * pdsh-debugsource-2.35-150500.46.3.1 * pdsh-dshgroup-2.35-150500.46.3.1 * pdsh-slurm-2.35-150500.46.3.1 * pdsh-machines-2.35-150500.46.3.1 * pdsh-genders-debuginfo-2.35-150500.46.3.1 * pdsh-machines-debuginfo-2.35-150500.46.3.1 * pdsh-genders-2.35-150500.46.3.1 * pdsh-2.35-150500.46.3.1 * pdsh-netgroup-2.35-150500.46.3.1 * pdsh-netgroup-debuginfo-2.35-150500.46.3.1 * pdsh-dshgroup-debuginfo-2.35-150500.46.3.1 * pdsh-debuginfo-2.35-150500.46.3.1 * pdsh-slurm-debuginfo-2.35-150500.46.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212946 * https://jira.suse.com/browse/PED-7817 * https://jira.suse.com/browse/PED-7829

1 0

SUSE-RU-2024:0450-1: moderate: Recommended update for imb
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Recommended update for imb Announcement ID: SUSE-RU-2024:0450-1 Rating: moderate References: * jsc#PED-7111 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that contains one feature can now be installed. ## Description: This update for imb fixes the following issues: * Update to version 2021.7 * Change default value for mem_alloc_type to device * License update * Bug fixes * Currently not provided in SUSE: IMB-MPI1-GPU benchmark: Dynamically loading from LD_LIBRARY_PATH cuda or level zero library. * Drop support for openmpi[123] (jsc#PED-7111) * Prepare support for openmpi5 * Add build support for gcc11/12. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-450=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-450=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2024-450=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-450=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-450=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-450=1 ## Package List: * openSUSE Leap 15.4 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * imb_2021_7-gnu-mpich-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mvapich2-2021.7-150400.3.6.1 * imb-openmpi4-debuginfo-2021.7-150400.3.6.1 * imb-openmpi4-2021.7-150400.3.6.1 * imb-mvapich2-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mpich-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mpich-debuginfo-2021.7-150400.3.6.1 * imb-openmpi4-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debugsource-2021.7-150400.3.6.1 * imb-mpich-2021.7-150400.3.6.1 * imb-mvapich2-debuginfo-2021.7-150400.3.6.1 * openSUSE Leap 15.5 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * imb_2021_7-gnu-mpich-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mvapich2-2021.7-150400.3.6.1 * imb-openmpi4-debuginfo-2021.7-150400.3.6.1 * imb-openmpi4-2021.7-150400.3.6.1 * imb-mvapich2-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mpich-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debuginfo-2021.7-150400.3.6.1 * imb-mpich-debuginfo-2021.7-150400.3.6.1 * imb-openmpi4-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debugsource-2021.7-150400.3.6.1 * imb-mpich-2021.7-150400.3.6.1 * imb-mvapich2-debuginfo-2021.7-150400.3.6.1 * HPC Module 15-SP5 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * HPC Module 15-SP5 (aarch64 x86_64) * imb_2021_7-gnu-openmpi3-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * imb-openmpi4-debugsource-2021.7-150400.3.6.1 * imb-mvapich2-2021.7-150400.3.6.1 * imb-openmpi4-debuginfo-2021.7-150400.3.6.1 * imb-openmpi4-2021.7-150400.3.6.1 * imb-mpich-2021.7-150400.3.6.1 * imb-mpich-debuginfo-2021.7-150400.3.6.1 * imb-mpich-debugsource-2021.7-150400.3.6.1 * imb-mvapich2-debugsource-2021.7-150400.3.6.1 * imb-mvapich2-debuginfo-2021.7-150400.3.6.1 * SUSE Package Hub 15 15-SP5 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * imb_2021_7-gnu-openmpi3-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * imb-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb-gnu-openmpi4-hpc-2021.7-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * imb_2021_7-gnu-openmpi3-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mpich-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debugsource-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-mvapich2-hpc-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi3-hpc-debuginfo-2021.7-150400.3.6.1 * imb_2021_7-gnu-openmpi4-hpc-2021.7-150400.3.6.1 ## References: * https://jira.suse.com/browse/PED-7111

1 0

SUSE-RU-2024:0451-1: moderate: Recommended update for golang-github-vpenso-prometheus_slurm_exporter
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Recommended update for golang-github-vpenso-prometheus_slurm_exporter Announcement ID: SUSE-RU-2024:0451-1 Rating: moderate References: * jsc#PED-7818 * jsc#PED-7833 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that contains two features can now be installed. ## Description: This update for golang-github-vpenso-prometheus_slurm_exporter fixes the following issues: * Ship package `golang-github-vpenso-prometheus_slurm_exporter` in HPC Module (x86_64, aarch64) * Fix to make GPU data gathering works with all Slurm versions since 18.08. * Add a sysconfig settings to make daemon command line args easily. * Fix service file names to match upstream: * `prometheus-slurm_exporter.service` was renamed to `prometheus-slurm- exporter.service` * `rcprometheus-slurm_exporter` was renamed to `rcprometheus-slurm-exporter` * To support updates, the old name is still kept as sym-link. * Added README.SUSE to inform about sysconfig file. * Multiple fixes to the README file ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-451=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2024-451=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-451=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-451=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-451=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-451=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-451=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * HPC Module 15-SP5 (aarch64 x86_64) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * SUSE Package Hub 15 15-SP5 (ppc64le s390x) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * golang-github-vpenso-prometheus_slurm_exporter-0.20-150300.3.8.1 ## References: * https://jira.suse.com/browse/PED-7818 * https://jira.suse.com/browse/PED-7833

1 0

SUSE-RU-2024:0452-1: moderate: Recommended update for spack
by OPENSUSE-UPDATES 13 Feb '24

13 Feb '24

# Recommended update for spack Announcement ID: SUSE-RU-2024:0452-1 Rating: moderate References: * bsc#1219480 Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 An update that has one fix can now be installed. ## Description: This update for spack fixes the following issues: spack was updated to version 0.21.1 (bsc#1219480): * Version 0.21.1: * Add support for reading buildcaches created by Spack v0.22 * Bugfixes: * `spack graph`: fix coloring with environments * `spack info`: sort variants in --variants-by-name * `Spec.format`: error on old style format strings * ASP-based solver: * fix infinite recursion when computing concretization errors * don't error for type mismatch on preferences * don't emit spurious debug output. * Improve the error message for deprecated preferences * Fix multi-word aliases * Add a warning for unconfigured compiler * environment: fix an issue with deconcretization/reconcretization of specs * buildcache: don't error if a patch is missing, when installing from binaries * Version 0.21.0: * New features: * Better error messages with condition chaining: In v0.18, we added better error messages that could tell you what problem happened, but they couldn't tell you why it happened. 0.21 adds condition chaining to the solver, and Spack can now trace back through the conditions that led to an error and build a tree of causes potential causes and where they came from. * OCI build caches: You can now use an arbitrary OCI registry as a build cache: * For Dockerhub: `$ spack mirror add my_registry oci://user/image` * For another registry (GHCR): `$ spack mirror add my_registry oci://ghcr.io/haampie/spack-test` Then set the login credentials: `$ spack mirror set --push --oci-username ... --oci-password ... my_registry` and push to it: `$ spack buildcache push my_registry [specs...]` You can optionally add a base image to get runnable images: `$ spack buildcache push --base-image leap:15.5 my_registry python` Pushed ... as [image]:python-3.11.2-65txfcpqbmpawclvtasuog4yzmxwaoia.spack $ docker run --rm -it [image]:python-3.11.2-65txfcpqbmpawclvtasuog4yzmxwaoia.spack` This creates a container image from the Spack installations on the host system, without the need to run `spack install` from a `Dockerfile` or `sif` file. It also addresses the inconvenience of losing binaries of dependencies when `RUN spack install` fails inside `docker build`. Further, the container image layers and build cache tarballs are the same files. This means that `spack install` and `docker pull` use the exact same underlying binaries. If you previously used `spack install` inside of docker build, this feature helps you save storage by a factor two. \+ Multiple versions of build dependencies: Increasingly, complex package builds require multiple versions of some build dependencies. For example, Python packages frequently require very specific versions of `setuptools`, `cython`, while different physics packages require different versions of Python to build. The concretizer enforced that every solve was unified, i.e., so that there was only one version of every package. The concretizer now supports "duplicate" nodes for build dependencies, but enforces unification through transitive link and run dependencies. This will allow it to better resolve complex dependency graphs in ecosystems like Python. \+ Cherry- picking virtual dependencies: You can now select only a subset of virtual dependencies from a spec that may provide more. For example, to make mpich your mpi provider, you can be explicit by writing: `hdf5 ^[virtuals=mpi] mpich` Or, to use, e.g., `intel-parallel-studio` for blas along with an external `lapack` like `openblas`, you could write: `strumpack ^[virtuals=mpi] intel-parallel-studio+mkl ^[virtuals=lapack] openblas`` The `virtuals=mpi` is an edge attribute, and dependency edges in Spack graphs now track which virtuals they satisfied. \+ The `spack deconcretize` command gives you control over what you want to update in an already concrete environment. As an example, with an environment built with meson, and you want to update your meson version, you can run: `$spack deconcretize meson` and have everything that depends on meson rebuilt the next time you run spack concretize. In the future, we'll handle this in a single command, but for now you can use this to drop bits of your lockfile and resolve your dependencies again. \+ UI Improvements: The `spack info` received a rework to make the output more appealing. It is now on par with the rest of Spack's UI. `spack info` now makes much better use of terminal space and shows variants, their values, and their descriptions more clearly. Conditional variants are grouped separately so you can more easily understand how packages are structured. `spack checksum` now allows you to filter versions from your editor, or by version range. It also notifies you about potential download URL changes. \+ Environments can include definitions: Spack did not previously support using `include:` with The definitions section of an environment, but now it does. You can use this to curate lists of specs and more easily reuse them across environments. \+ Aliases: You can now add aliases to Spack commands in `config.yaml`, e.g. this might enshrine your favorite args to `spack find` as `spack f`: `config: aliases: f: find -lv` * Improved autoloading of modules: In this release, you can start using `hide_implicits: true` instead, which exposes only explicitly installed packages to the user, while still autoloading dependencies. On top of that, you can safely use `hash_length: 0`, as this config now only applies to the modules exposed to the user -- you don't have to worry about file name clashes for hidden dependencies. Note: for Tcl this feature requires Modules 4.7 or higher * Other new commands and directives: * `spack env activate` without arguments now loads a default environment that you do not have to create. * `spack find -H` / `--hashes`: a new shortcut for piping spack find output to other commands. * Add `spack checksum --verify`, fix `--add`. * New `default_args` context manager factors out common args for directives. * `spack compiler find --[no]-mixed-toolchain` lets you easily mix clang and gfortran on Linux * Performance improvements: * `spack external find execution` is now much faster. * `spack location -i` is now much faster on success. * Drop redundant rpaths post install. * ASP-based solver: avoid cycles in clingo using hidden directive. * Fix multiple quadratic complexity issues in environments * Other new features of note: * archspec: update to v0.2.2, support for Sapphire Rapids, Power10, Neoverse V2. * Propagate variants across nodes that don't have that variant * Implement fish shell completion. * Can now distinguish between source/binary mirror; don't ping mirror.spack.io as much. * Improve status reporting on `spack install` (add [n/total] display...). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-452=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-452=1 ## Package List: * openSUSE Leap 15.3 (noarch) * spack-info-0.21.1-150300.12.1 * spack-recipes-0.21.1-150300.12.1 * spack-0.21.1-150300.12.1 * spack-man-0.21.1-150300.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * spack-info-0.21.1-150300.12.1 * spack-recipes-0.21.1-150300.12.1 * spack-man-0.21.1-150300.12.1 * spack-0.21.1-150300.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219480

1 0

SUSE-RU-2024:0446-1: moderate: Recommended update for suse-migration-services
by OPENSUSE-UPDATES 12 Feb '24

12 Feb '24

# Recommended update for suse-migration-services Announcement ID: SUSE-RU-2024:0446-1 Rating: moderate References: * bsc#1219004 Affected Products: * openSUSE Leap 15.5 An update that has one fix can now be installed. ## Description: This update for suse-migration-services fixes the following issues: * Address nose tests deprecation issues The Python 3.8 CI testing is failing with an error because we haven't addressed the nose tests support deprecation by renaming the setup() method to setup_method(). * Bind mount the configured certs location bsc#1219004 When the migration is running ensure that the correct certs directory is bind mounted from the /system-root into the ISO boot's runtime environment, by retrieving the configured server.certlocation setting from the /system- root/etc/regionserverclnt.cfg file. Default to the new cert location if a cert location cannot be determined. Log a message when no certs are present in the cert location, checking in the system being migrated, and after the bind mount of that path into the ISO runtime environment. Add unit tests for new get_regionsrv_certs_path() function and tweak some existing tests, that depend upon mocking calls to builtin.open(), so that they mock any calls to get_regionsrv_certs_path() so as to avoid triggering additional open() calls that would break those tests. * Remove target information that was confusing customers. Clarify SP4 support timeline * Added mailmap Don't lose contributions of the past ;) * Update kiwi config files to match current build versions * Clarify supported versions of SLES * Added block marker to listings to increase readability * Fixing variablelists that caused validation errors ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-446=1 ## Package List: * openSUSE Leap 15.5 (noarch) * suse-migration-pre-checks-2.0.38-150000.1.65.1 * suse-migration-services-2.0.38-150000.1.65.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219004

1 0

openSUSE-RU-2024:0045-1: moderate: Recommended update for kanidm
by maintenance＠opensuse.org 10 Feb '24

10 Feb '24

openSUSE Recommended Update: Recommended update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0045-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kanidm fixes the following issues: - Update to version 1.1.0~rc16~git1.a917291: * Correct cargo versions * Release 1.1.0-rc.16 (#2483) * Fix for incorrect domain migration rollbacks (#2482) * Add tools for remigration and domain level raising (#2481) * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480) * Support SPN in groups claim (#2474) * Credential update tweaks (#2475) * Oauth2 pkce faq (#2473) * Fix debian versioning (#2472) * chore(deps): bump the all group in /pykanidm with 7 updates (#2479) * chore(deps): bump the all group with 1 update (#2478) * Fix RUV trim (#2466) * 20240125 2217 client credentials grant (#2456) * docs: Add application passwords design document (#2427) * handling master docs (#2465) * update the artifact name in the download step (#2464) * Book SUMMARY.md: Fix part titles according to mdbook (#2463) * Update chat link, add keywords (#2462) * PyKanidm updates and testing (#2301) * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461) * 1222 what rights does anonymous have (#2436) * Fix inverted key/chain logic from TLS error improvement (#2453) * Improve TLS configuration errors (#2447) * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445) * chore(deps): bump the all group with 1 update (#2441) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443) * Return sshkey label to cli fields (#2440) * Add rfc8414 metadata (#2434) * Add test for delete referer invalid (#2435) * Clarify role of WebUI in README.md (#2431) * Adding max_ber_size option in config for ldap sync (#2416) * Debian build fixes (also the book) (#2400) * 2390 1980 allow native applications (#2428) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430) * cookies (#2426) * Clean RUV (#2424) * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425) * Upgrade replication to use anchors (#2423) * Minor fixes for oidc with single page applications (#2420) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421) * Use case insensitive match on substrings in line with ldap (#2419) * Change OAuth2 RS Origin from the CLI (#2418) * Add design diagrams (#2332) * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410) * Fix deb release flow to find the matrix split artifacts (#2406) * 20231222 piv authentication (#2398) * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405) * Build the kanidm cli tools deb as well (#2402) * Force apply idm migrations to apply access controls (#2401) * fixing up the integration script (#2392) * chore(deps): bump the all group in /pykanidm with 8 updates (#2396) * chore(deps): bump the all group with 2 updates (#2395) * fix backup filename and regexp pattern for cleanup (#2386) * idprovider: Provide the keystore during auth (#2385) * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389) * daemon: Fix inverted logic on cache dir check (#2388) * Add improved domain migration framework and default MFA (#2382) * Trim and lowecase usernames (#2380) * Add DN as a virtual ldap attr (#2379) * fixing default for oauth2 request_parameter_supported metadata (#2378) * chore(deps): bump the all group in /pykanidm with 6 updates (#2375) * 20231218 ipa sync unix password (#2374) * chore(deps): bump the all group with 2 updates (#2372) * 1481 2024 access control rework (#2366) * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368) * chore(deps): bump the all group with 3 updates (#2363) * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362) * 249 2024 managed by syntax (#2359) * typo (#2356) * 20231204 ipa sync minor improvements (#2357) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355) * Unixd build/debugging updates (#2350) * 20231129 webauthn attestation (#2351) * Fix handling of TPM in some trait contexts (#2347) * docs: miniflux added pkce support (#2352) * Using proper axum http headers lib for compatibility (#2348) * Bearer should send with same caps we accept (#2345) * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341) * docs: improve grammar for book/src/developers/faq.md (#2343) * Expose machine key in auth phase (#2340) * 20231128 freeipa migration (#2338) * Unix crossbuild scripts and docs (#2326) * Expose TPM in more interface places (#2334) * chore(deps): bump the all group in /pykanidm with 6 updates (#2336) * Adding kanidm client config docs and notes ref #2248 (#2333) * Update to the latest compact-jwt version (#2331) * Adding env var configs for the server (#2329) * Better errors when TPM PIN file not found (#2330) * 20231120 2320 sssd compat (#2328) * Resolve future send issue with keystore (#2311) * chore(deps): bump the all group in /pykanidm with 6 updates (#2325) * chore(deps): bump the all group with 3 updates (#2324) * Add test (#2323) * OAuth2 scopes validation logging missing details (#2317) * Add systemd deps for unixd (#2314) * 20231115 oauth2 authreq (#2310) * Docs - Bump Fedora 36 to Fedora 38 (#2309) * chore(deps): bump the all group with 4 updates (#2306) * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305) * Remove serde json from wasm (#2304) * Fix spelling (#2303) * 20231109 1122 credential class (#2300) * Moving daemon tracing to OpenTelemetry (#2292) * 20231101 add id cert to unixint (#2284) * Docs fixes for #2296 (#2297) * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294) * chore(deps): bump the all group with 8 updates (#2293) * pw min length in account policy (#2289) * WASM troubleshooting docs closes #2286 (#2291) * oauth2 typo (#2290) * Update notes to avoid some possible interpretation errors (#2288) * Feature: kanidm CLI pulling OpenAPI schema (#2285) * Feature: configurable replication poll interval (#2283) * Minor improvements to incoming replication (#2279) * Problems with bash completion autocomplete (#2281) * Remove unused imports and clippy lint (#2276) * Rework ldap bind routine (#2268) * Disable inconsistent test (#2278) * make versions consistent * 1.1.0 rc.15 dev post-release (#2271) - Update to version 1.1.0~rc15~git8.122b6af: * Remove unused import that breaks builds on newer rust versions * Update to latest webauthn-rs version * fix version * Fix maint branch versions * Disable inconsistent test (#2278) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-45=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-clients-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-docs-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-server-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-unixd-clients-1.1.0~rc16~git1.a917291-bp155.5.1 References:

1 0