March 2024 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2024:0097-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 31 Mar '24

31 Mar '24

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0097-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: Update to version 1.0.23 + Bugfixes: + Fixed possible duplication of song entries after organizing (#1341). + Fixed possible crash when connecting devices (#1313). + Fixed playlist sorting of original year (#1349). + Enhancements: + Treat all stream errors as non-fatal (#1347). + Require KDSingleApplication 1.1.0. + Fix logging of restored unavailable songs. - Add BuildRequires for KDSingleApplication-qt6 with Tumbleweed. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-97=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): strawberry-1.0.23-bp155.2.9.1 References:

1 0

openSUSE-RU-2024:0096-1: moderate: Recommended update for pgbadger
by maintenance＠opensuse.org 31 Mar '24

31 Mar '24

openSUSE Recommended Update: Recommended update for pgbadger ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0096-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for pgbadger fixes the following issues: - update to 12.4 This is a maintenance release of pgBadger that fixes issues reported by users since last release. * Fix pgbouncer report with version 1.21. Thanks to Ales Zeleny for the patch. * Prevent parallelism perl file to be higher than the number of files. Thanks to maliangzhu for the report. * Fix regression test broken since v12.3. Thanks to ieshin for the report. * Fix cases where LOG entries where counted as ERROR log level entries. Thanks to Matti Linnanvuori for the report. - update to 12.3 This is a maintenance release of pgBadger that fixes issues reported by users since last release. It also adds some new features: * Add option --include-pid to only report events related to a session pid (%p). Can be used multiple time. Thanks to Henrietta Dombrovskaya for the feature request. * Add option --include-session to only report events related to the session id (%c). Can be used multiple time. Thanks to Henrietta Dombrovskaya for the feature request. * Add option --dump-raw-csv to only parse the log and dump the information into CSV format. No further processing is done, no report is generated. Thanks to Henrietta Dombrovskaya for the feature request. Here is the complete list of changes and acknowledgments: * Update pgFormatter to version 5.5 * Fix end date of parsing with jsonlog format. Thanks to jw1u1 for the report. * Fix typo in "Sessions per application". Thanks to fairyfar for the patch. * Fix "INSERT/UPDATE/DELETE Traffic" chart bug. Thanks to fairyfar for the patch. * Fix parsing of orphan lines with bind queries. Thanks to youxq for the report. * Fix Analyze per table report with new PG versions. Thanks to Jean-Christophe Arnu for the patch. * Fix syslog entry parser when the syslog timestamp contains milliseconds. Thanks to Pavel Rabel for the report. - add systemd timer examples: beside the existing cron job example, this allows people to get an idea how to automate the generation of reports - introduce local cron macro: only recommend cron on older distributions and leave the cron example file where it was historically (but place it into the examples folder on newer distributions). - Package rename: provide and obsolete the old PgBadger package - update to 12.2 https://github.com/darold/pgbadger/releases/tag/v12.2 - update to 12.1 https://github.com/darold/pgbadger/releases/tag/v12.1 - update to 12.0 https://github.com/darold/pgbadger/releases/tag/v12.0 - update to 11.8 https://github.com/darold/pgbadger/releases/tag/v11.8 - update to 11.7 https://github.com/darold/pgbadger/releases/tag/v11.7 - update to 11.6 https://github.com/darold/pgbadger/releases/tag/v11.5 https://github.com/darold/pgbadger/releases/tag/v11.6 - update to 11.4 https://github.com/darold/pgbadger/releases/tag/v11.2 https://github.com/darold/pgbadger/releases/tag/v11.3 https://github.com/darold/pgbadger/releases/tag/v11.4 - update to 11.1 - please refer to /usr/share/doc/packages/pgbadger/ChangeLog for a complete list of changes. The following is just an excerpt - This new release breaks backward compatibility with old binary or JSON files. This also mean that incremental mode will not be able to read old binary file. If you want to update pgBadger and keep you old reports take care to upgrade at start of a new week otherwise weekly report will be broken. pgBadger will print a warning and just skip the old binary file. - From 9.0: This major release of pgBadger is a port to bootstrap 3 and a version upgrade of all resources files (CSS and Javascript). There's also some bugs fixes and features enhancements. - Add support of pgbouncer syslog log file format. - Add support to all auto_explain format (text, xml, json and yaml). - Add support to %q placeholder in log_line_prefix. - Add jsonlog format of Michael Paquier extension, with -f jsonlog pgbadger will be able to parse the log. - Add report of checkpoint distance and estimate. - Add support of AWS Redshift keywords to SQL code beautifier. - Add autodetection of log format in remote mode to allow remote parsing of pgbouncer log file together with PostgreSQL log file. - Replace the SQL formatter/beautify with v3.0 of pgFormatter. - Add report of error class distribution when SQLState is available in the log_line_prefix (see %e placeholder). - Update SQL Beautifier to pgFormatter v1.6 code. - Improve error message normalization. - Add --normalized-only option to generate a text file containing all normalized queries found in a log with count. - Allow %c (session id) to replace %p (pid) as unique session id. - Add waiting for lock messages to event reports. - Add --start-monday option to start calendar weeks in Monday instead of default to Sunday. - Add report of top N queries that consume the most time in the prepare or parse stage. - Add report of top N queries that consume the most time in the bind stage. - Add report of timing for prepare/bind/execute queries parts. Reported in a new "Duration" tab in Global Stats report. This also fix previous report of "Total query duration" that was only reporting execute total duration. - Add support to RDS and CloudWatch log format, they are detected automatically. You can use -f rds if pgbadger is not able to auto-detect the log format. - Add new configuration option --month-report to be able to build monthly incremental reports. - Add top bind queries that generate the more temporary files. Require log_connection and log_disconnection be activated. - Add --exclude-client command line option to be able to exclude log entries for the specified client ip. Can be used multiple time. - Add -H, --html-dir option to be able to set a different path where HTML report must be written in incremental mode. Binary files stay on directory defined with -O, --outdir option. - Add -E | --explode option to explode the main report into one report per database. Global information not related to a database are added to the postgres database report. - Add per database report to incremental mode. In this mode there will be a sub directory per database with dedicated incremental reports. - Add support to Heroku's PostgreSQL logplex format. - update to 8.1 - Fix one case where pid file remain after dying. - Add requirement of log_error_verbosity = default to documentation. - Report message "LOG: using stale statistics instead of current ones because stats collector is not responding" in events view. - Remove obsolete days when we are in binary mode with --noreport - Fix wrong report of statements responsible of temporary files. Thanks to Luan Nicolini Marcondes for the report. This patch also exclude line with log level LOCATION to be parsed. - Fix limit on number of sample at report generation and remove pending LAST_PARSED.tmp file. - Update load_stat() function and global variables to support pgbouncer statistics. Update version to 2.0. - Handle more kind or query types. Thanks to julien Rouhaud for the patch. - Fix pgbouncer log parser to handle message: FATAL: the database system is shutting down - Fix whitespace placed in between the E and the quote character. Thanks to clijunky for the report. - Fix a major issue introduced with support to pgbouncer that prevent parsing of compressed PostgreSQL log files. Thanks to Levente Birta for the report. - update to 7.1: + This new release fixes some issues and adds a new report: ++ Distribution of sessions per application + It also adds Json operators to SQL Beautifier. + this release also adds some more useful reports and features, please check the changes file in /usr/share/doc/packages/pgbadger/ChangeLog for details - update to 6.2 + This is a maintenance release to fix a regression in SQL traffic graphs and fix some other minor issues. + The release also add a new option -D or --dns-resolv to map client ip addresses to FQDN without having log_hostname enabled on the postgresql's configuration + Do not display queries in Slowest individual, Time consuming and Normalized slowest queries reports when there is no duration in log file. Display NO DATASET instead. + Fix min/max queries in SQL traffic that was based on duration instead of query count. + Fix wrong unit to Synced files in Checkpoints files report. Thanks to Levente Birta for the report. + Enable allow_loose_quotes in Text::CSV_XS call to fix CSV parsing error when fields have quote inside an unquoted field. Thanks to Josh Berkus for the report. +- Add -D | --dns-resolv command line option to replace ip addresses by their DNS name. Be warned that this can slow down pgBagder a lot. Thanks to Jiri Hlinka for the feature request. - update to 5.0: + This new major release adds some new features like incremental mode and SQL queries times histogram. There is also a hourly graphic representation of the count and average duration of top normalized queries. + there are many more changes, please refer to /usr/share/doc/packages/pgbadger/ChangeLog for details - update to 3.3: * adds four more useful reports about queries that generate locks and temporary files * new report about restartpoint on slaves and several * adds escaping of HTML code inside queries * adds Min/Max reports with Average duration in all queries reports * many bug fixes - update to 3.1: !! UPGRADE: if you are running pgbadger by cron take care if you !! were using one of the following option: --enable-log_min_duration !! and --enable-log_duration, they have been removed and pgbadger !! will refuse to start + This new major release adds parallel log processing by using as many cores as wanted to parse log files, the performances gain is directly related to the number of cores specified. There's also new reports about autovacuum/autoanalyze informations and many bugs have been fixed. + Please read the full Changelog at: /usr/share/doc/packages/pgbadger/ChangeLog - update to 2.3 * Clarify misleading statement about log_duration: log_duration may be turned on depending on desired information. Only log_statement must not be on. Thanks to Matt Romaine for the patch. * Fix --dbname and --dbuser not working with csvlog format. Thanks to Luke Cyca for the report. * Fix issue in SQL formatting that prevent left back indentation when major keywords were found. Thanks to Kevin Brannen for the report. * Display 3 decimals in time report so that ms can be seen. Thanks to Adam Schroder for the request. * Force the parser to not insert a new line after the SET keyword when the query begin with it. This is to preserve the single line with queries like SET client_encoding TO "utf8"; * Add better SQL formatting of update queries by adding a new line after the SET keyword. Thanks to pilat66 for the report. * Update copyright and documentation. * See ChangeLog - initial version 2.2-1 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-96=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): pgbadger-12.4-bp155.2.2 References:

1 0

openSUSE-SU-2024:0095-1: moderate: Security update for kanidm
by opensuse-security＠opensuse.org 30 Mar '24

30 Mar '24

openSUSE Security Update: Security update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0095-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for kanidm fixes the following issues: Update to version 1.1.0~rc16~git6.e51d0de: * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686) * return consent map to service account (#2604) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-95=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.1.0~rc16~git6.e51d0de-bp155.14.1 kanidm-clients-1.1.0~rc16~git6.e51d0de-bp155.14.1 kanidm-docs-1.1.0~rc16~git6.e51d0de-bp155.14.1 kanidm-server-1.1.0~rc16~git6.e51d0de-bp155.14.1 kanidm-unixd-clients-1.1.0~rc16~git6.e51d0de-bp155.14.1 References:

1 0

openSUSE-RU-2024:0094-1: moderate: Recommended update for gcalcli
by maintenance＠opensuse.org 29 Mar '24

29 Mar '24

openSUSE Recommended Update: Recommended update for gcalcli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0094-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gcalcli fixes the following issues: - Introducing version 4.3.0+git14.3e616f7 to Leap. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-94=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): gcalcli-4.3.0+git14.3e616f7-bp155.2.1 References:

1 0

SUSE-SU-2024:1063-1: important: Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4)
by OPENSUSE-UPDATES 29 Mar '24

29 Mar '24

# Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:1063-1 Rating: important References: * bsc#1216898 * bsc#1218487 * bsc#1218610 Cross-References: * CVE-2023-46813 * CVE-2023-51779 * CVE-2023-6531 CVSS scores: * CVE-2023-46813 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-46813 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51779 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_88 fixes several issues. The following security issues were fixed: * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487). * CVE-2023-46813: Fixed a local privilege escalation with user-space programs that have access to MMIO regions (bsc#1216898). * CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218610). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1064=1 SUSE-2024-1065=1 SUSE-2024-1066=1 SUSE-2024-1067=1 SUSE-2024-1068=1 SUSE-2024-1069=1 SUSE-2024-1071=1 SUSE-2024-1070=1 SUSE-2024-1063=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-1064=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-1065=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-1066=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-1067=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-1068=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-1069=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-1071=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-1070=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-1063=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_10-debugsource-12-150400.2.3 * kernel-livepatch-5_14_21-150400_24_74-default-8-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_18-debugsource-6-150400.2.2 * kernel-livepatch-5_14_21-150400_24_60-default-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_63-default-debuginfo-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_81-default-7-150400.2.3 * kernel-livepatch-5_14_21-150400_24_88-default-6-150400.2.2 * kernel-livepatch-SLE15-SP4_Update_16-debugsource-7-150400.2.3 * kernel-livepatch-5_14_21-150400_24_69-default-8-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_12-debugsource-11-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-9-150400.2.3 * kernel-livepatch-5_14_21-150400_24_92-default-5-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_11-debugsource-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_60-default-debuginfo-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_74-default-debuginfo-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_55-default-12-150400.2.3 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-9-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_14-debugsource-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_81-default-debuginfo-7-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-5-150400.2.3 * kernel-livepatch-5_14_21-150400_24_69-default-debuginfo-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-5-150400.2.3 * kernel-livepatch-5_14_21-150400_24_63-default-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_66-default-9-150400.2.3 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-6-150400.2.2 * kernel-livepatch-SLE15-SP4_Update_15-debugsource-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_55-default-debuginfo-12-150400.2.3 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_10-debugsource-12-150400.2.3 * kernel-livepatch-5_14_21-150400_24_74-default-8-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_18-debugsource-6-150400.2.2 * kernel-livepatch-5_14_21-150400_24_60-default-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_63-default-debuginfo-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_81-default-7-150400.2.3 * kernel-livepatch-5_14_21-150400_24_88-default-6-150400.2.2 * kernel-livepatch-SLE15-SP4_Update_16-debugsource-7-150400.2.3 * kernel-livepatch-5_14_21-150400_24_69-default-8-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_12-debugsource-11-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-9-150400.2.3 * kernel-livepatch-5_14_21-150400_24_92-default-5-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_11-debugsource-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_60-default-debuginfo-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_74-default-debuginfo-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_55-default-12-150400.2.3 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-9-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_14-debugsource-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_81-default-debuginfo-7-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-5-150400.2.3 * kernel-livepatch-5_14_21-150400_24_69-default-debuginfo-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-5-150400.2.3 * kernel-livepatch-5_14_21-150400_24_63-default-11-150400.2.3 * kernel-livepatch-5_14_21-150400_24_66-default-9-150400.2.3 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-6-150400.2.2 * kernel-livepatch-SLE15-SP4_Update_15-debugsource-8-150400.2.3 * kernel-livepatch-5_14_21-150400_24_55-default-debuginfo-12-150400.2.3 ## References: * https://www.suse.com/security/cve/CVE-2023-46813.html * https://www.suse.com/security/cve/CVE-2023-51779.html * https://www.suse.com/security/cve/CVE-2023-6531.html * https://bugzilla.suse.com/show_bug.cgi?id=1216898 * https://bugzilla.suse.com/show_bug.cgi?id=1218487 * https://bugzilla.suse.com/show_bug.cgi?id=1218610

1 0

SUSE-SU-2024:1072-1: important: Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)
by OPENSUSE-UPDATES 29 Mar '24

29 Mar '24

# Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:1072-1 Rating: important References: * bsc#1218487 * bsc#1218610 Cross-References: * CVE-2023-51779 * CVE-2023-6531 CVSS scores: * CVE-2023-51779 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_100 fixes several issues. The following security issues were fixed: * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487). * CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218610). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1072=1 SUSE-2024-1073=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-1072=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-1073=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_20-debugsource-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_97-default-4-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_100-default-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-4-150400.2.3 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_20-debugsource-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_97-default-4-150400.2.3 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_100-default-4-150400.2.3 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-4-150400.2.3 ## References: * https://www.suse.com/security/cve/CVE-2023-51779.html * https://www.suse.com/security/cve/CVE-2023-6531.html * https://bugzilla.suse.com/show_bug.cgi?id=1218487 * https://bugzilla.suse.com/show_bug.cgi?id=1218610

1 0

openSUSE-SU-2024:0093-1: important: Security update for minidlna
by opensuse-security＠opensuse.org 29 Mar '24

29 Mar '24

openSUSE Security Update: Security update for minidlna ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0093-1 Rating: important References: #1222007 Cross-References: CVE-2023-33476 CVSS scores: CVE-2023-33476 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for minidlna fixes the following issues: Update to 1.3.3 (boo#1222007): - Fixed HTTP chunk length parsing. (CVE-2023-33476) - Improved Dutch and Swedish translations. - Fixed directory symlink deletion handling. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-93=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): minidlna-1.3.3-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-33476.html https://bugzilla.suse.com/1222007

1 0

SUSE-SU-2024:1054-1: important: Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
by OPENSUSE-UPDATES 28 Mar '24

28 Mar '24

# Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:1054-1 Rating: important References: * bsc#1218487 Cross-References: * CVE-2023-6531 CVSS scores: * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_150 fixes one issue. The following security issue was fixed: * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-1054=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1056=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-1056=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150200_24_175-default-debuginfo-4-150200.2.3 * kernel-livepatch-SLE15-SP2_Update_44-debugsource-4-150200.2.3 * kernel-livepatch-5_3_18-150200_24_175-default-4-150200.2.3 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_41-debugsource-3-150300.2.3 * kernel-livepatch-5_3_18-150300_59_150-default-debuginfo-3-150300.2.3 * kernel-livepatch-5_3_18-150300_59_150-default-3-150300.2.3 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_150-preempt-debuginfo-3-150300.2.3 * kernel-livepatch-5_3_18-150300_59_150-preempt-3-150300.2.3 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_150-default-3-150300.2.3 ## References: * https://www.suse.com/security/cve/CVE-2023-6531.html * https://bugzilla.suse.com/show_bug.cgi?id=1218487

1 0

SUSE-RU-2024:1055-1: important: Recommended update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)
by OPENSUSE-UPDATES 28 Mar '24

28 Mar '24

# Recommended update for the Linux Kernel (Live Patch 9 for SLE 15 SP5) Announcement ID: SUSE-RU-2024:1055-1 Rating: important References: * bsc#1219157 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_44 fixes one issue. The following bugs were fixed: * Recommended fix for IO lock-ups on HBA355i with SLES 15SP5. (bsc#1219157) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1055=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-1055=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_44-default-3-150500.2.2 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-3-150500.2.2 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-3-150500.2.2 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_44-default-3-150500.2.2 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-3-150500.2.2 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-3-150500.2.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219157

1 0

openSUSE-RU-2024:0085-1: moderate: Recommended update for phoronix-test-suite
by maintenance＠opensuse.org 22 Mar '24

22 Mar '24

openSUSE Recommended Update: Recommended update for phoronix-test-suite ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0085-1 Rating: moderate References: #1215534 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for phoronix-test-suite fixes the following issues: - Require php8 when building (boo#1215534) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-85=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): phoronix-test-suite-10.8.4-bp155.3.3.1 References: https://bugzilla.suse.com/1215534

1 0

openSUSE-SU-2024:0084-1: important: Security update for chromium
by opensuse-security＠opensuse.org 18 Mar '24

18 Mar '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0084-1 Rating: important References: #1220131 #1220604 #1221105 #1221335 Cross-References: CVE-2024-1669 CVE-2024-1670 CVE-2024-1671 CVE-2024-1672 CVE-2024-1673 CVE-2024-1674 CVE-2024-1675 CVE-2024-1676 CVE-2024-2173 CVE-2024-2174 CVE-2024-2176 CVE-2024-2400 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for chromium fixes the following issue: Chromium 122.0.6261.128 (boo#1221335) * CVE-2024-2400: Use after free in Performance Manager Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105) * New upstream security release. * CVE-2024-2173: Out of bounds memory access in V8. * CVE-2024-2174: Inappropriate implementation in V8. * CVE-2024-2176: Use after free in FedCM. Chromium 122.0.6261.94 * CVE-2024-1669: Out of bounds memory access in Blink. * CVE-2024-1670: Use after free in Mojo. * CVE-2024-1671: Inappropriate implementation in Site Isolation. * CVE-2024-1672: Inappropriate implementation in Content Security Policy. * CVE-2024-1673: Use after free in Accessibility. * CVE-2024-1674: Inappropriate implementation in Navigation. * CVE-2024-1675: Insufficient policy enforcement in Download. * CVE-2024-1676: Inappropriate implementation in Navigation. * Type Confusion in V8 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-84=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): clang17-17.0.6-bp155.2.2 clang17-debuginfo-17.0.6-bp155.2.2 clang17-devel-17.0.6-bp155.2.2 libLLVM17-17.0.6-bp155.2.2 libLLVM17-debuginfo-17.0.6-bp155.2.2 libLTO17-17.0.6-bp155.2.2 libLTO17-debuginfo-17.0.6-bp155.2.2 libclang-cpp17-17.0.6-bp155.2.2 libclang-cpp17-debuginfo-17.0.6-bp155.2.2 lld17-17.0.6-bp155.2.2 lld17-debuginfo-17.0.6-bp155.2.2 llvm17-17.0.6-bp155.2.2 llvm17-debuginfo-17.0.6-bp155.2.2 llvm17-devel-17.0.6-bp155.2.2 llvm17-devel-debuginfo-17.0.6-bp155.2.2 llvm17-gold-17.0.6-bp155.2.2 llvm17-gold-debuginfo-17.0.6-bp155.2.2 llvm17-libclang13-17.0.6-bp155.2.2 llvm17-libclang13-debuginfo-17.0.6-bp155.2.2 llvm17-polly-17.0.6-bp155.2.2 llvm17-polly-debuginfo-17.0.6-bp155.2.2 llvm17-polly-devel-17.0.6-bp155.2.2 - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le x86_64): libomp17-devel-17.0.6-bp155.2.2 libomp17-devel-debuginfo-17.0.6-bp155.2.2 - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-122.0.6261.128-bp155.2.75.1 chromedriver-debuginfo-122.0.6261.128-bp155.2.75.1 chromium-122.0.6261.128-bp155.2.75.1 chromium-debuginfo-122.0.6261.128-bp155.2.75.1 liblldb17-17.0.6-bp155.2.2 liblldb17-debuginfo-17.0.6-bp155.2.2 lldb17-17.0.6-bp155.2.2 lldb17-debuginfo-17.0.6-bp155.2.2 lldb17-devel-17.0.6-bp155.2.2 llvm17-libc++-devel-17.0.6-bp155.2.2 llvm17-libc++1-17.0.6-bp155.2.2 llvm17-libc++1-debuginfo-17.0.6-bp155.2.2 llvm17-libc++abi-devel-17.0.6-bp155.2.2 llvm17-libc++abi1-17.0.6-bp155.2.2 llvm17-libc++abi1-debuginfo-17.0.6-bp155.2.2 python3-lldb17-17.0.6-bp155.2.2 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): libLLVM17-64bit-17.0.6-bp155.2.2 libLLVM17-64bit-debuginfo-17.0.6-bp155.2.2 libclang-cpp17-64bit-17.0.6-bp155.2.2 libclang-cpp17-64bit-debuginfo-17.0.6-bp155.2.2 - openSUSE Backports SLE-15-SP5 (x86_64): libLLVM17-32bit-17.0.6-bp155.2.2 libLLVM17-32bit-debuginfo-17.0.6-bp155.2.2 libclang-cpp17-32bit-17.0.6-bp155.2.2 libclang-cpp17-32bit-debuginfo-17.0.6-bp155.2.2 - openSUSE Backports SLE-15-SP5 (noarch): clang17-doc-17.0.6-bp155.2.2 llvm17-doc-17.0.6-bp155.2.2 llvm17-opt-viewer-17.0.6-bp155.2.2 llvm17-vim-plugins-17.0.6-bp155.2.2 python3-clang17-17.0.6-bp155.2.2 References: https://www.suse.com/security/cve/CVE-2024-1669.html https://www.suse.com/security/cve/CVE-2024-1670.html https://www.suse.com/security/cve/CVE-2024-1671.html https://www.suse.com/security/cve/CVE-2024-1672.html https://www.suse.com/security/cve/CVE-2024-1673.html https://www.suse.com/security/cve/CVE-2024-1674.html https://www.suse.com/security/cve/CVE-2024-1675.html https://www.suse.com/security/cve/CVE-2024-1676.html https://www.suse.com/security/cve/CVE-2024-2173.html https://www.suse.com/security/cve/CVE-2024-2174.html https://www.suse.com/security/cve/CVE-2024-2176.html https://www.suse.com/security/cve/CVE-2024-2400.html https://bugzilla.suse.com/1220131 https://bugzilla.suse.com/1220604 https://bugzilla.suse.com/1221105 https://bugzilla.suse.com/1221335

1 0

openSUSE-RU-2024:0083-1: moderate: Recommended update for glab
by maintenance＠opensuse.org 16 Mar '24

16 Mar '24

openSUSE Recommended Update: Recommended update for glab ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0083-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for glab fixes the following issues: Update to version 1.37.0: * feat: Json output * fix: support transparent background on all tui views * fix: reorganise commands/variable/update like commands/variable/set * docs: Add a stub changelog file * fix: ci trigger does interactively ask for job (#7462) * feat(ci): add compile command to show full ci config * chore: Vale and Markdown rule refresh for project * docs: Add mention of 1Password collaboration * chore: Update .gitlab-ci.yml - use GO_VERSION var for code_navigation * fix(release): use link to display release URL * fix: change `repo list` alias from `users` to `ls` * fix: use gitlab.Client.BaseURL to build release upload URL * docs(sourcefile): fix gitFlags comment * docs: add glab ask GitLab Duo docs to README * docs: document SemVer adoption and usage * chore(dependency): update to github.com/google/renameio/v2 * build: upgrade go version from 1.19 to 1.21 * docs: Lint URL fragments for validity * feat(pagination): add pagination to release list * feat(schedule): add option to create a scheduled pipeline with variables * feat(lint): provide dry-run, include-jobs and ref options * chore: remove deprecated `config init` command Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-83=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): glab-1.37.0-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): glab-bash-completion-1.37.0-bp155.2.3.1 glab-doc-1.37.0-bp155.2.3.1 glab-fish-completion-1.37.0-bp155.2.3.1 glab-zsh-completion-1.37.0-bp155.2.3.1 References:

1 0

openSUSE-SU-2024:0082-1: important: Security update for python-rpyc
by opensuse-security＠opensuse.org 15 Mar '24

15 Mar '24

openSUSE Security Update: Security update for python-rpyc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0082-1 Rating: important References: #1221331 Cross-References: CVE-2024-27758 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-rpyc fixes the following issues: - CVE-2024-27758: Fixed remote code execution via exposed methods (boo#1221331). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-82=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-rpyc-4.1.5-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2024-27758.html https://bugzilla.suse.com/1221331

1 0

SUSE-RU-2024:0878-1: important: Recommended update for grub2
by OPENSUSE-UPDATES 14 Mar '24

14 Mar '24

# Recommended update for grub2 Announcement ID: SUSE-RU-2024:0878-1 Rating: important References: * bsc#1181762 * bsc#1219248 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for grub2 fixes the following issues: * Fix grub.xen memdisk script looking for /boot/grub/grub.cfg (bsc#1219248, bsc#1181762) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-878=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-878=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-878=1 openSUSE-SLE-15.5-2024-878=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-878=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * grub2-2.06-150500.29.19.1 * grub2-debuginfo-2.06-150500.29.19.1 * Basesystem Module 15-SP5 (noarch) * grub2-snapper-plugin-2.06-150500.29.19.1 * grub2-i386-pc-2.06-150500.29.19.1 * grub2-arm64-efi-2.06-150500.29.19.1 * grub2-powerpc-ieee1275-2.06-150500.29.19.1 * grub2-x86_64-efi-2.06-150500.29.19.1 * grub2-systemd-sleep-plugin-2.06-150500.29.19.1 * Basesystem Module 15-SP5 (aarch64 s390x x86_64) * grub2-debugsource-2.06-150500.29.19.1 * Basesystem Module 15-SP5 (s390x) * grub2-s390x-emu-2.06-150500.29.19.1 * Server Applications Module 15-SP5 (noarch) * grub2-x86_64-xen-2.06-150500.29.19.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * grub2-2.06-150500.29.19.1 * grub2-debuginfo-2.06-150500.29.19.1 * grub2-branding-upstream-2.06-150500.29.19.1 * openSUSE Leap 15.5 (aarch64 s390x x86_64 i586) * grub2-debugsource-2.06-150500.29.19.1 * openSUSE Leap 15.5 (noarch) * grub2-powerpc-ieee1275-extras-2.06-150500.29.19.1 * grub2-i386-pc-debug-2.06-150500.29.19.1 * grub2-i386-pc-extras-2.06-150500.29.19.1 * grub2-i386-efi-debug-2.06-150500.29.19.1 * grub2-i386-efi-extras-2.06-150500.29.19.1 * grub2-powerpc-ieee1275-debug-2.06-150500.29.19.1 * grub2-snapper-plugin-2.06-150500.29.19.1 * grub2-i386-pc-2.06-150500.29.19.1 * grub2-x86_64-xen-2.06-150500.29.19.1 * grub2-arm64-efi-extras-2.06-150500.29.19.1 * grub2-arm64-efi-2.06-150500.29.19.1 * grub2-x86_64-efi-debug-2.06-150500.29.19.1 * grub2-i386-efi-2.06-150500.29.19.1 * grub2-systemd-sleep-plugin-2.06-150500.29.19.1 * grub2-x86_64-efi-extras-2.06-150500.29.19.1 * grub2-x86_64-xen-extras-2.06-150500.29.19.1 * grub2-powerpc-ieee1275-2.06-150500.29.19.1 * grub2-arm64-efi-debug-2.06-150500.29.19.1 * grub2-x86_64-efi-2.06-150500.29.19.1 * grub2-i386-xen-extras-2.06-150500.29.19.1 * grub2-i386-xen-2.06-150500.29.19.1 * grub2-s390x-emu-extras-2.06-150500.29.19.1 * openSUSE Leap 15.5 (s390x) * grub2-s390x-emu-2.06-150500.29.19.1 * grub2-s390x-emu-debug-2.06-150500.29.19.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * grub2-2.06-150500.29.19.1 * grub2-debuginfo-2.06-150500.29.19.1 * grub2-debugsource-2.06-150500.29.19.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * grub2-snapper-plugin-2.06-150500.29.19.1 * grub2-i386-pc-2.06-150500.29.19.1 * grub2-x86_64-xen-2.06-150500.29.19.1 * grub2-arm64-efi-2.06-150500.29.19.1 * grub2-x86_64-efi-2.06-150500.29.19.1 * SUSE Linux Enterprise Micro 5.5 (s390x) * grub2-s390x-emu-2.06-150500.29.19.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1181762 * https://bugzilla.suse.com/show_bug.cgi?id=1219248

1 0

SUSE-SU-2024:0870-1: moderate: Security update for glibc
by OPENSUSE-UPDATES 13 Mar '24

13 Mar '24

# Security update for glibc Announcement ID: SUSE-SU-2024:0870-1 Rating: moderate References: * bsc#1217445 * bsc#1217589 * bsc#1218866 Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has three security fixes can now be installed. ## Description: This update for glibc fixes the following issues: Security issues fixed: * qsort: harden handling of degenerated / non transient compare function (bsc#1218866) Other issues fixed: * getaddrinfo: translate ENOMEM to EAI_MEMORY (bsc#1217589, BZ #31163) * aarch64: correct CFI in rawmemchr (bsc#1217445, BZ #31113) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-870=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-870=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-870=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-870=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-870=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-870=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-870=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-870=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-870=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-870=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-870=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-870=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-870=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-870=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-870=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-870=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-870=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-870=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-870=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-870=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-870=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-870=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-870=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-870=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-870=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-870=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586 i686) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * glibc-utils-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * openSUSE Leap 15.3 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-html-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * openSUSE Leap 15.3 (x86_64) * glibc-utils-32bit-2.31-150300.68.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * glibc-utils-32bit-debuginfo-2.31-150300.68.1 * glibc-profile-32bit-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-devel-static-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * openSUSE Leap 15.3 (aarch64_ilp32) * glibc-64bit-debuginfo-2.31-150300.68.1 * glibc-devel-static-64bit-2.31-150300.68.1 * glibc-64bit-2.31-150300.68.1 * glibc-profile-64bit-2.31-150300.68.1 * glibc-locale-base-64bit-2.31-150300.68.1 * glibc-devel-64bit-debuginfo-2.31-150300.68.1 * glibc-devel-64bit-2.31-150300.68.1 * glibc-utils-64bit-2.31-150300.68.1 * glibc-utils-64bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-64bit-debuginfo-2.31-150300.68.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-utils-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * openSUSE Leap 15.5 (x86_64) * glibc-utils-32bit-2.31-150300.68.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * glibc-utils-32bit-debuginfo-2.31-150300.68.1 * glibc-profile-32bit-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-devel-static-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * openSUSE Leap 15.5 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-html-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * Basesystem Module 15-SP5 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * Basesystem Module 15-SP5 (x86_64) * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * glibc-utils-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * Development Tools Module 15-SP5 (x86_64) * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-utils-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-utils-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-utils-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * glibc-locale-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-utils-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-utils-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-utils-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-utils-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-utils-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * SUSE Manager Proxy 4.3 (x86_64) * glibc-locale-2.31-150300.68.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * SUSE Manager Proxy 4.3 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * glibc-locale-2.31-150300.68.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Manager Server 4.3 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Manager Server 4.3 (x86_64) * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-utils-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * nscd-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-extra-2.31-150300.68.1 * glibc-utils-debuginfo-2.31-150300.68.1 * nscd-debuginfo-2.31-150300.68.1 * glibc-devel-static-2.31-150300.68.1 * glibc-devel-debuginfo-2.31-150300.68.1 * glibc-utils-src-debugsource-2.31-150300.68.1 * glibc-profile-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-extra-debuginfo-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Enterprise Storage 7.1 (noarch) * glibc-info-2.31-150300.68.1 * glibc-i18ndata-2.31-150300.68.1 * glibc-lang-2.31-150300.68.1 * SUSE Enterprise Storage 7.1 (x86_64) * glibc-locale-base-32bit-debuginfo-2.31-150300.68.1 * glibc-32bit-debuginfo-2.31-150300.68.1 * glibc-locale-base-32bit-2.31-150300.68.1 * glibc-devel-32bit-debuginfo-2.31-150300.68.1 * glibc-devel-32bit-2.31-150300.68.1 * glibc-32bit-2.31-150300.68.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.68.1 * glibc-devel-2.31-150300.68.1 * glibc-locale-base-2.31-150300.68.1 * glibc-locale-base-debuginfo-2.31-150300.68.1 * glibc-debuginfo-2.31-150300.68.1 * glibc-2.31-150300.68.1 * glibc-debugsource-2.31-150300.68.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217445 * https://bugzilla.suse.com/show_bug.cgi?id=1217589 * https://bugzilla.suse.com/show_bug.cgi?id=1218866

1 0

SUSE-SU-2024:0871-1: important: Security update for vim
by OPENSUSE-UPDATES 13 Mar '24

13 Mar '24

# Security update for vim Announcement ID: SUSE-SU-2024:0871-1 Rating: important References: * bsc#1215005 * bsc#1217316 * bsc#1217320 * bsc#1217321 * bsc#1217324 * bsc#1217326 * bsc#1217329 * bsc#1217330 * bsc#1217432 * bsc#1219581 Cross-References: * CVE-2023-4750 * CVE-2023-48231 * CVE-2023-48232 * CVE-2023-48233 * CVE-2023-48234 * CVE-2023-48235 * CVE-2023-48236 * CVE-2023-48237 * CVE-2023-48706 * CVE-2024-22667 CVSS scores: * CVE-2023-4750 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4750 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-4750 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-48231 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L * CVE-2023-48231 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-48232 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L * CVE-2023-48232 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-48233 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2023-48233 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-48234 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2023-48234 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-48235 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2023-48235 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-48236 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N * CVE-2023-48236 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-48237 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2023-48237 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-48706 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2023-48706 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-22667 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-22667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for vim fixes the following issues: * CVE-2023-48231: Fixed Use-After-Free in win_close() (bsc#1217316). * CVE-2023-48232: Fixed Floating point Exception in adjust_plines_for_skipcol() (bsc#1217320). * CVE-2023-48233: Fixed overflow with count for :s command (bsc#1217321). * CVE-2023-48234: Fixed overflow in nv_z_get_count (bsc#1217324). * CVE-2023-48235: Fixed overflow in ex address parsing (bsc#1217326). * CVE-2023-48236: Fixed overflow in get_number (bsc#1217329). * CVE-2023-48237: Fixed overflow in shift_line (bsc#1217330). * CVE-2023-48706: Fixed heap-use-after-free in ex_substitute (bsc#1217432). * CVE-2024-22667: Fixed stack-based buffer overflow in did_set_langmap function in map.c (bsc#1219581). * CVE-2023-4750: Fixed heap use-after-free in function bt_quickfix (bsc#1215005). Updated to version 9.1 with patch level 0111: https://github.com/vim/vim/compare/v9.0.2103...v9.1.0111 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-871=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-871=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-871=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-871=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-871=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-871=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-871=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-871=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-871=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-871=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-871=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-871=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-871=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-871=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-871=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-871=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-871=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-871=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-871=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-871=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-871=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-871=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-871=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-871=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * openSUSE Leap Micro 5.4 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Manager Proxy 4.3 (x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Manager Proxy 4.3 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Manager Server 4.3 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * gvim-debuginfo-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * vim-small-debuginfo-9.1.0111-150000.5.60.1 * gvim-9.1.0111-150000.5.60.1 * vim-9.1.0111-150000.5.60.1 * SUSE Enterprise Storage 7.1 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * vim-data-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * vim-data-common-9.1.0111-150000.5.60.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * vim-small-debuginfo-9.1.0111-150000.5.60.1 * vim-small-9.1.0111-150000.5.60.1 * vim-debugsource-9.1.0111-150000.5.60.1 * vim-debuginfo-9.1.0111-150000.5.60.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4750.html * https://www.suse.com/security/cve/CVE-2023-48231.html * https://www.suse.com/security/cve/CVE-2023-48232.html * https://www.suse.com/security/cve/CVE-2023-48233.html * https://www.suse.com/security/cve/CVE-2023-48234.html * https://www.suse.com/security/cve/CVE-2023-48235.html * https://www.suse.com/security/cve/CVE-2023-48236.html * https://www.suse.com/security/cve/CVE-2023-48237.html * https://www.suse.com/security/cve/CVE-2023-48706.html * https://www.suse.com/security/cve/CVE-2024-22667.html * https://bugzilla.suse.com/show_bug.cgi?id=1215005 * https://bugzilla.suse.com/show_bug.cgi?id=1217316 * https://bugzilla.suse.com/show_bug.cgi?id=1217320 * https://bugzilla.suse.com/show_bug.cgi?id=1217321 * https://bugzilla.suse.com/show_bug.cgi?id=1217324 * https://bugzilla.suse.com/show_bug.cgi?id=1217326 * https://bugzilla.suse.com/show_bug.cgi?id=1217329 * https://bugzilla.suse.com/show_bug.cgi?id=1217330 * https://bugzilla.suse.com/show_bug.cgi?id=1217432 * https://bugzilla.suse.com/show_bug.cgi?id=1219581

1 0

SUSE-RU-2024:0872-1: moderate: Recommended update for lifecycle-data-sle-module-live-patching
by OPENSUSE-UPDATES 13 Mar '24

13 Mar '24

# Recommended update for lifecycle-data-sle-module-live-patching Announcement ID: SUSE-RU-2024:0872-1 Rating: moderate References: * bsc#1020320 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for lifecycle-data-sle-module-live-patching fixes the following issues: * Added data for 4_12_14-150100_197_168, 5_14_21-150400_24_103, 5_14_21-150400_24_108, 5_14_21-150500_55_44, 5_14_21-150500_55_49, 5_3_18-150200_24_175, 5_3_18-150200_24_178, 5_3_18-150300_59_147, 5_3_18-150300_59_150 (bsc#1020320) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-872=1 * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-872=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-872=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-872=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-872=1 ## Package List: * openSUSE Leap 15.5 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.108.1 * SUSE Linux Enterprise Live Patching 15-SP2 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.108.1 * SUSE Linux Enterprise Live Patching 15-SP3 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.108.1 * SUSE Linux Enterprise Live Patching 15-SP4 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.108.1 * SUSE Linux Enterprise Live Patching 15-SP5 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.108.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1020320

1 0

SUSE-SU-2024:0877-1: important: Security update for sudo
by OPENSUSE-UPDATES 13 Mar '24

13 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0877-1 Rating: important References: * bsc#1221134 * bsc#1221151 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: * CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-877=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-877=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-877=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-877=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-877=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-877=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-877=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-877=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-877=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-877=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-877=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-877=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-877=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-877=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-877=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * sudo-plugin-python-debuginfo-1.9.9-150400.4.36.1 * sudo-plugin-python-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-test-1.9.9-150400.4.36.1 * sudo-1.9.9-150400.4.36.1 * sudo-devel-1.9.9-150400.4.36.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sudo-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sudo-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sudo-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sudo-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sudo-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sudo-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-debuginfo-1.9.9-150400.4.36.1 * sudo-plugin-python-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-1.9.9-150400.4.36.1 * sudo-devel-1.9.9-150400.4.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-debuginfo-1.9.9-150400.4.36.1 * sudo-plugin-python-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-1.9.9-150400.4.36.1 * sudo-devel-1.9.9-150400.4.36.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * sudo-plugin-python-debuginfo-1.9.9-150400.4.36.1 * sudo-plugin-python-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-1.9.9-150400.4.36.1 * sudo-devel-1.9.9-150400.4.36.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-debuginfo-1.9.9-150400.4.36.1 * sudo-plugin-python-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-1.9.9-150400.4.36.1 * sudo-devel-1.9.9-150400.4.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * sudo-plugin-python-debuginfo-1.9.9-150400.4.36.1 * sudo-plugin-python-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-1.9.9-150400.4.36.1 * sudo-devel-1.9.9-150400.4.36.1 * SUSE Manager Proxy 4.3 (x86_64) * sudo-plugin-python-debuginfo-1.9.9-150400.4.36.1 * sudo-plugin-python-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-1.9.9-150400.4.36.1 * sudo-devel-1.9.9-150400.4.36.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * sudo-plugin-python-debuginfo-1.9.9-150400.4.36.1 * sudo-plugin-python-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-1.9.9-150400.4.36.1 * sudo-devel-1.9.9-150400.4.36.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * sudo-plugin-python-debuginfo-1.9.9-150400.4.36.1 * sudo-plugin-python-1.9.9-150400.4.36.1 * sudo-debugsource-1.9.9-150400.4.36.1 * sudo-debuginfo-1.9.9-150400.4.36.1 * sudo-1.9.9-150400.4.36.1 * sudo-devel-1.9.9-150400.4.36.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1221134 * https://bugzilla.suse.com/show_bug.cgi?id=1221151

1 0

SUSE-RU-2024:0861-1: moderate: Recommended update for aaa_base
by OPENSUSE-UPDATES 13 Mar '24

13 Mar '24

# Recommended update for aaa_base Announcement ID: SUSE-RU-2024:0861-1 Rating: moderate References: * bsc#1218232 Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for aaa_base fixes the following issues: * Silence the output in the case of broken symlinks (bsc#1218232) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-861=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-861=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-861=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-861=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-861=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-861=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-861=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-861=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-861=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-861=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-861=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-861=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-861=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-wsl-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-wsl-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-extras-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-malloccheck-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * aaa_base-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.12.1 * aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218232

1 0

SUSE-RU-2024:0865-1: moderate: Recommended update for yast2
by OPENSUSE-UPDATES 13 Mar '24

13 Mar '24

# Recommended update for yast2 Announcement ID: SUSE-RU-2024:0865-1 Rating: moderate References: * bsc#1219920 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for yast2 fixes the following issue: * Allow host/domain names starting with an underscore (bsc#1219920) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-865=1 openSUSE-SLE-15.5-2024-865=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-865=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-865=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * yast2-logs-4.5.26-150500.3.3.2 * yast2-4.5.26-150500.3.3.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * yast2-logs-4.5.26-150500.3.3.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * yast2-logs-4.5.26-150500.3.3.2 * yast2-4.5.26-150500.3.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219920

1 0

SUSE-RU-2024:0867-1: moderate: Recommended update for fence-agents
by OPENSUSE-UPDATES 13 Mar '24

13 Mar '24

# Recommended update for fence-agents Announcement ID: SUSE-RU-2024:0867-1 Rating: moderate References: * bsc#1218718 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for fence-agents fixes the following issues: * Fix detecting problems accessing the fence device (bsc#1218718) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-867=1 openSUSE-SLE-15.5-2024-867=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-867=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * fence-agents-4.12.1+git.1677142927.bf55c675-150500.4.6.1 * fence-agents-debugsource-4.12.1+git.1677142927.bf55c675-150500.4.6.1 * fence-agents-debuginfo-4.12.1+git.1677142927.bf55c675-150500.4.6.1 * fence-agents-devel-4.12.1+git.1677142927.bf55c675-150500.4.6.1 * fence-agents-amt_ws-4.12.1+git.1677142927.bf55c675-150500.4.6.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * fence-agents-4.12.1+git.1677142927.bf55c675-150500.4.6.1 * fence-agents-devel-4.12.1+git.1677142927.bf55c675-150500.4.6.1 * fence-agents-debuginfo-4.12.1+git.1677142927.bf55c675-150500.4.6.1 * fence-agents-debugsource-4.12.1+git.1677142927.bf55c675-150500.4.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218718

1 0

SUSE-RU-2024:0868-1: moderate: Recommended update for lttng-tools
by OPENSUSE-UPDATES 13 Mar '24

13 Mar '24

# Recommended update for lttng-tools Announcement ID: SUSE-RU-2024:0868-1 Rating: moderate References: * bsc#1218508 Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for lttng-tools fixes the following issues: * Fix UST communication when -EAGAIN is returned which leads to lttng-sessiond abort (bsc#1218508) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-868=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-868=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-868=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-868=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-868=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le x86_64 i586) * liblttng-ctl0-debuginfo-2.12.2-150300.3.3.1 * lttng-tools-debugsource-2.12.2-150300.3.3.1 * lttng-tools-debuginfo-2.12.2-150300.3.3.1 * lttng-tools-devel-2.12.2-150300.3.3.1 * liblttng-ctl0-2.12.2-150300.3.3.1 * lttng-tools-2.12.2-150300.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * liblttng-ctl0-debuginfo-2.12.2-150300.3.3.1 * lttng-tools-debugsource-2.12.2-150300.3.3.1 * lttng-tools-debuginfo-2.12.2-150300.3.3.1 * lttng-tools-devel-2.12.2-150300.3.3.1 * liblttng-ctl0-2.12.2-150300.3.3.1 * lttng-tools-2.12.2-150300.3.3.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * liblttng-ctl0-debuginfo-2.12.2-150300.3.3.1 * lttng-tools-debugsource-2.12.2-150300.3.3.1 * lttng-tools-debuginfo-2.12.2-150300.3.3.1 * liblttng-ctl0-2.12.2-150300.3.3.1 * lttng-tools-2.12.2-150300.3.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le x86_64) * liblttng-ctl0-debuginfo-2.12.2-150300.3.3.1 * liblttng-ctl0-2.12.2-150300.3.3.1 * lttng-tools-debugsource-2.12.2-150300.3.3.1 * lttng-tools-debuginfo-2.12.2-150300.3.3.1 * Development Tools Module 15-SP5 (x86_64) * lttng-tools-debuginfo-2.12.2-150300.3.3.1 * lttng-tools-devel-2.12.2-150300.3.3.1 * lttng-tools-debugsource-2.12.2-150300.3.3.1 * lttng-tools-2.12.2-150300.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218508

1 0

SUSE-SU-2024:0857-1: important: Security update for the Linux Kernel
by OPENSUSE-UPDATES 13 Mar '24

13 Mar '24

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2024:0857-1 Rating: important References: * bsc#1200599 * bsc#1207653 * bsc#1212514 * bsc#1213456 * bsc#1216223 * bsc#1218195 * bsc#1218689 * bsc#1218915 * bsc#1219127 * bsc#1219128 * bsc#1219146 * bsc#1219295 * bsc#1219653 * bsc#1219827 * bsc#1219835 * bsc#1219915 * bsc#1220009 * bsc#1220140 * bsc#1220187 * bsc#1220238 * bsc#1220240 * bsc#1220241 * bsc#1220243 * bsc#1220250 * bsc#1220253 * bsc#1220255 * bsc#1220328 * bsc#1220330 * bsc#1220344 * bsc#1220398 * bsc#1220409 * bsc#1220416 * bsc#1220418 * bsc#1220421 * bsc#1220436 * bsc#1220444 * bsc#1220459 * bsc#1220469 * bsc#1220482 * bsc#1220526 * bsc#1220538 * bsc#1220570 * bsc#1220572 * bsc#1220599 * bsc#1220627 * bsc#1220641 * bsc#1220649 * bsc#1220660 * bsc#1220689 * bsc#1220700 * bsc#1220735 * bsc#1220736 * bsc#1220737 * bsc#1220742 * bsc#1220745 * bsc#1220767 * bsc#1220796 * bsc#1220825 * bsc#1220826 * bsc#1220831 * bsc#1220845 * bsc#1220860 * bsc#1220863 * bsc#1220870 * bsc#1220917 * bsc#1220918 * bsc#1220930 * bsc#1220931 * bsc#1220932 * bsc#1221039 * bsc#1221040 Cross-References: * CVE-2019-25162 * CVE-2020-36777 * CVE-2020-36784 * CVE-2021-46904 * CVE-2021-46905 * CVE-2021-46906 * CVE-2021-46915 * CVE-2021-46924 * CVE-2021-46929 * CVE-2021-46932 * CVE-2021-46934 * CVE-2021-46953 * CVE-2021-46964 * CVE-2021-46966 * CVE-2021-46968 * CVE-2021-46974 * CVE-2021-46989 * CVE-2021-47005 * CVE-2021-47012 * CVE-2021-47013 * CVE-2021-47054 * CVE-2021-47060 * CVE-2021-47061 * CVE-2021-47069 * CVE-2021-47076 * CVE-2021-47078 * CVE-2021-47083 * CVE-2022-20154 * CVE-2022-48627 * CVE-2023-28746 * CVE-2023-35827 * CVE-2023-46343 * CVE-2023-51042 * CVE-2023-52340 * CVE-2023-52429 * CVE-2023-52439 * CVE-2023-52443 * CVE-2023-52445 * CVE-2023-52448 * CVE-2023-52449 * CVE-2023-52451 * CVE-2023-52463 * CVE-2023-52475 * CVE-2023-52478 * CVE-2023-52482 * CVE-2023-52502 * CVE-2023-52530 * CVE-2023-52531 * CVE-2023-52532 * CVE-2023-52569 * CVE-2023-52574 * CVE-2023-52597 * CVE-2023-52605 * CVE-2023-6817 * CVE-2024-0340 * CVE-2024-0607 * CVE-2024-1151 * CVE-2024-23849 * CVE-2024-23851 * CVE-2024-26585 * CVE-2024-26586 * CVE-2024-26589 * CVE-2024-26593 * CVE-2024-26595 * CVE-2024-26602 * CVE-2024-26607 * CVE-2024-26622 CVSS scores: * CVE-2019-25162 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2020-36777 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2020-36784 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2021-46904 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2021-46905 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2021-46906 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2021-46915 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2021-46924 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2021-46929 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2021-46932 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2021-46934 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2021-46953 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2021-46968 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2021-46974 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2021-47005 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2021-47012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47013 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2021-47060 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47061 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47069 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2021-47076 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2021-47078 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2021-47083 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2022-20154 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-20154 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48627 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2023-28746 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2023-35827 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-46343 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46343 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-51042 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51042 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52429 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52429 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52439 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52443 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52445 ( SUSE ): 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52451 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2023-52463 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52475 ( SUSE ): 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52478 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2023-52482 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52530 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52531 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52532 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52569 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52574 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52597 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2023-52605 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6817 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6817 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-0340 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2024-0340 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-0607 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2024-0607 ( NVD ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-1151 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23849 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-23849 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23851 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23851 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26586 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2024-26593 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-26595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26602 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-26607 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Availability Extension 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves 67 vulnerabilities and has four security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831). * CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255). * CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187). * CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295). * CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915). * CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195). * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825). * CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250). * CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444) * CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328). * CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238). * CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649) * CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796) * CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436). * CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459) * CVE-2019-25162: Fixed a potential use after free (bsc#1220409). * CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570). * CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241). * CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343). * CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140). * CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240). * CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398). * CVE-2024-26593: Fixed block process call transactions (bsc#1220009). * CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641). * CVE-2024-26586: Fixed stack corruption (bsc#1220243). * CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344). * CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253). * CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835). * CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127). * CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689). * CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128). * CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863) * CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860) * CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039) * CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918). * CVE-2023-52482: Fixex a bug by adding SRSO mitigation for Hygon processors (bsc#1220735). * CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040). * CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845). * CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870). * CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469). * CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514). * CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932). * CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930). * CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931). * CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917). * CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736). * CVE-2021-47005: Fixed a NULL pointer dereference for ->get_features() (bsc#1220660). * CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742). * CVE-2021-47012: Fixed a use after free in siw_alloc_mr (bsc#1220627). * CVE-2021-46989: Fixed a bug by preventing corruption in shrinking truncate in hfsplus (bsc#1220737). * CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (bsc#1220745). The following non-security bugs were fixed: * EDAC/thunderx: Fix possible out-of-bounds string access (bsc#1220330) * ext4: fix deadlock due to mbcache entry corruption (bsc#1207653 bsc#1219915). * ibmvfc: make 'max_sectors' a module option (bsc#1216223). * KVM: Destroy target device if coalesced MMIO unregistration fails (git- fixes). * KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (git-fixes). * KVM: VMX: Move VERW closer to VMentry for MDS mitigation (git-fixes). * KVM: VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (git- fixes). * KVM: x86: add support for CPUID leaf 0x80000021 (git-fixes). * KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (git-fixes). * KVM: x86: synthesize CPUID leaf 0x80000021h if useful (git-fixes). * KVM: x86: work around QEMU issue with synthetic CPUID leaves (git-fixes). * mbcache: Fixup kABI of mb_cache_entry (bsc#1207653 bsc#1219915). * scsi: Update max_hw_sectors on rescan (bsc#1216223). * x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (git-fixes). * x86/bugs: Add asm helpers for executing VERW (git-fixes). * x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (git- fixes). Also add the removed mds_user_clear symbol to kABI severities as it is exposed just for KVM module and is generally a core kernel component so removing it is low risk. * x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (git-fixes). * x86/entry_32: Add VERW just before userspace transition (git-fixes). * x86/entry_64: Add VERW just before userspace transition (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-857=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-857=1 * SUSE Linux Enterprise High Availability Extension 15 SP3 zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2024-857=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-857=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-857=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-857=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-857=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-857=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-857=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-857=1 ## Package List: * openSUSE Leap 15.3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.153.2 * openSUSE Leap 15.3 (noarch) * kernel-devel-5.3.18-150300.59.153.2 * kernel-docs-html-5.3.18-150300.59.153.2 * kernel-macros-5.3.18-150300.59.153.2 * kernel-source-5.3.18-150300.59.153.2 * kernel-source-vanilla-5.3.18-150300.59.153.2 * openSUSE Leap 15.3 (nosrc ppc64le x86_64) * kernel-kvmsmall-5.3.18-150300.59.153.2 * kernel-debug-5.3.18-150300.59.153.2 * openSUSE Leap 15.3 (ppc64le x86_64) * kernel-debug-devel-debuginfo-5.3.18-150300.59.153.2 * kernel-debug-debuginfo-5.3.18-150300.59.153.2 * kernel-kvmsmall-devel-5.3.18-150300.59.153.2 * kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.153.2 * kernel-kvmsmall-debuginfo-5.3.18-150300.59.153.2 * kernel-kvmsmall-debugsource-5.3.18-150300.59.153.2 * kernel-debug-livepatch-devel-5.3.18-150300.59.153.2 * kernel-debug-devel-5.3.18-150300.59.153.2 * kernel-kvmsmall-devel-debuginfo-5.3.18-150300.59.153.2 * kernel-debug-debugsource-5.3.18-150300.59.153.2 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * dlm-kmp-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-livepatch-devel-5.3.18-150300.59.153.2 * gfs2-kmp-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.153.2 * reiserfs-kmp-default-5.3.18-150300.59.153.2 * ocfs2-kmp-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-extra-debuginfo-5.3.18-150300.59.153.2 * kernel-obs-build-5.3.18-150300.59.153.2 * kernel-obs-qa-5.3.18-150300.59.153.1 * kernel-default-optional-5.3.18-150300.59.153.2 * kernel-obs-build-debugsource-5.3.18-150300.59.153.2 * kselftests-kmp-default-5.3.18-150300.59.153.2 * cluster-md-kmp-default-debuginfo-5.3.18-150300.59.153.2 * cluster-md-kmp-default-5.3.18-150300.59.153.2 * kernel-default-devel-5.3.18-150300.59.153.2 * kernel-default-extra-5.3.18-150300.59.153.2 * dlm-kmp-default-5.3.18-150300.59.153.2 * kernel-default-base-5.3.18-150300.59.153.2.150300.18.90.2 * kernel-default-livepatch-5.3.18-150300.59.153.2 * kernel-syms-5.3.18-150300.59.153.1 * kernel-default-debugsource-5.3.18-150300.59.153.2 * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.153.2 * kselftests-kmp-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-debuginfo-5.3.18-150300.59.153.2 * gfs2-kmp-default-5.3.18-150300.59.153.2 * kernel-default-optional-debuginfo-5.3.18-150300.59.153.2 * ocfs2-kmp-default-5.3.18-150300.59.153.2 * kernel-default-base-rebuild-5.3.18-150300.59.153.2.150300.18.90.2 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.3.18-150300.59.153.2 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_153-default-debuginfo-1-150300.7.3.2 * kernel-livepatch-5_3_18-150300_59_153-default-1-150300.7.3.2 * kernel-livepatch-SLE15-SP3_Update_42-debugsource-1-150300.7.3.2 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_153-preempt-1-150300.7.3.2 * kernel-livepatch-5_3_18-150300_59_153-preempt-debuginfo-1-150300.7.3.2 * openSUSE Leap 15.3 (aarch64 x86_64) * kselftests-kmp-preempt-5.3.18-150300.59.153.2 * cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.153.2 * kernel-preempt-devel-5.3.18-150300.59.153.2 * kernel-preempt-optional-5.3.18-150300.59.153.2 * dlm-kmp-preempt-5.3.18-150300.59.153.2 * ocfs2-kmp-preempt-5.3.18-150300.59.153.2 * dlm-kmp-preempt-debuginfo-5.3.18-150300.59.153.2 * kernel-preempt-debugsource-5.3.18-150300.59.153.2 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.153.2 * kernel-preempt-extra-5.3.18-150300.59.153.2 * reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.153.2 * kernel-preempt-debuginfo-5.3.18-150300.59.153.2 * kernel-preempt-optional-debuginfo-5.3.18-150300.59.153.2 * kernel-preempt-extra-debuginfo-5.3.18-150300.59.153.2 * gfs2-kmp-preempt-5.3.18-150300.59.153.2 * gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.153.2 * kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.153.2 * reiserfs-kmp-preempt-5.3.18-150300.59.153.2 * cluster-md-kmp-preempt-5.3.18-150300.59.153.2 * kernel-preempt-livepatch-devel-5.3.18-150300.59.153.2 * ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.153.2 * openSUSE Leap 15.3 (aarch64 nosrc x86_64) * kernel-preempt-5.3.18-150300.59.153.2 * openSUSE Leap 15.3 (nosrc s390x) * kernel-zfcpdump-5.3.18-150300.59.153.2 * openSUSE Leap 15.3 (s390x) * kernel-zfcpdump-debugsource-5.3.18-150300.59.153.2 * kernel-zfcpdump-debuginfo-5.3.18-150300.59.153.2 * openSUSE Leap 15.3 (nosrc) * dtb-aarch64-5.3.18-150300.59.153.1 * openSUSE Leap 15.3 (aarch64) * kernel-64kb-debuginfo-5.3.18-150300.59.153.2 * gfs2-kmp-64kb-debuginfo-5.3.18-150300.59.153.2 * dtb-sprd-5.3.18-150300.59.153.1 * dtb-exynos-5.3.18-150300.59.153.1 * dtb-zte-5.3.18-150300.59.153.1 * dtb-broadcom-5.3.18-150300.59.153.1 * gfs2-kmp-64kb-5.3.18-150300.59.153.2 * reiserfs-kmp-64kb-5.3.18-150300.59.153.2 * kernel-64kb-extra-5.3.18-150300.59.153.2 * ocfs2-kmp-64kb-5.3.18-150300.59.153.2 * kselftests-kmp-64kb-5.3.18-150300.59.153.2 * dtb-cavium-5.3.18-150300.59.153.1 * dtb-socionext-5.3.18-150300.59.153.1 * kernel-64kb-extra-debuginfo-5.3.18-150300.59.153.2 * dlm-kmp-64kb-debuginfo-5.3.18-150300.59.153.2 * ocfs2-kmp-64kb-debuginfo-5.3.18-150300.59.153.2 * dtb-rockchip-5.3.18-150300.59.153.1 * cluster-md-kmp-64kb-5.3.18-150300.59.153.2 * reiserfs-kmp-64kb-debuginfo-5.3.18-150300.59.153.2 * dtb-allwinner-5.3.18-150300.59.153.1 * dtb-hisilicon-5.3.18-150300.59.153.1 * dtb-amlogic-5.3.18-150300.59.153.1 * cluster-md-kmp-64kb-debuginfo-5.3.18-150300.59.153.2 * dlm-kmp-64kb-5.3.18-150300.59.153.2 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.153.2 * kselftests-kmp-64kb-debuginfo-5.3.18-150300.59.153.2 * dtb-nvidia-5.3.18-150300.59.153.1 * kernel-64kb-livepatch-devel-5.3.18-150300.59.153.2 * dtb-qcom-5.3.18-150300.59.153.1 * kernel-64kb-optional-debuginfo-5.3.18-150300.59.153.2 * dtb-mediatek-5.3.18-150300.59.153.1 * dtb-arm-5.3.18-150300.59.153.1 * dtb-apm-5.3.18-150300.59.153.1 * kernel-64kb-debugsource-5.3.18-150300.59.153.2 * kernel-64kb-optional-5.3.18-150300.59.153.2 * dtb-altera-5.3.18-150300.59.153.1 * dtb-renesas-5.3.18-150300.59.153.1 * dtb-marvell-5.3.18-150300.59.153.1 * kernel-64kb-devel-5.3.18-150300.59.153.2 * dtb-xilinx-5.3.18-150300.59.153.1 * dtb-lg-5.3.18-150300.59.153.1 * dtb-al-5.3.18-150300.59.153.1 * dtb-freescale-5.3.18-150300.59.153.1 * dtb-amd-5.3.18-150300.59.153.1 * openSUSE Leap 15.3 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Live Patching 15-SP3 (nosrc) * kernel-default-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-default-livepatch-devel-5.3.18-150300.59.153.2 * kernel-default-livepatch-5.3.18-150300.59.153.2 * kernel-default-debugsource-5.3.18-150300.59.153.2 * kernel-livepatch-5_3_18-150300_59_153-default-1-150300.7.3.2 * kernel-default-debuginfo-5.3.18-150300.59.153.2 * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le s390x x86_64) * dlm-kmp-default-debuginfo-5.3.18-150300.59.153.2 * gfs2-kmp-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-debugsource-5.3.18-150300.59.153.2 * cluster-md-kmp-default-debuginfo-5.3.18-150300.59.153.2 * cluster-md-kmp-default-5.3.18-150300.59.153.2 * gfs2-kmp-default-5.3.18-150300.59.153.2 * kernel-default-debuginfo-5.3.18-150300.59.153.2 * ocfs2-kmp-default-debuginfo-5.3.18-150300.59.153.2 * dlm-kmp-default-5.3.18-150300.59.153.2 * ocfs2-kmp-default-5.3.18-150300.59.153.2 * SUSE Linux Enterprise High Availability Extension 15 SP3 (nosrc) * kernel-default-5.3.18-150300.59.153.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.153.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64) * kernel-64kb-debugsource-5.3.18-150300.59.153.2 * kernel-64kb-devel-5.3.18-150300.59.153.2 * kernel-64kb-debuginfo-5.3.18-150300.59.153.2 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.153.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 nosrc x86_64) * kernel-preempt-5.3.18-150300.59.153.2 * kernel-default-5.3.18-150300.59.153.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * kernel-preempt-debuginfo-5.3.18-150300.59.153.2 * kernel-syms-5.3.18-150300.59.153.1 * kernel-obs-build-debugsource-5.3.18-150300.59.153.2 * kernel-preempt-devel-5.3.18-150300.59.153.2 * kernel-preempt-debugsource-5.3.18-150300.59.153.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.153.2 * reiserfs-kmp-default-5.3.18-150300.59.153.2 * kernel-default-debugsource-5.3.18-150300.59.153.2 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.153.2 * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-devel-5.3.18-150300.59.153.2 * kernel-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-base-5.3.18-150300.59.153.2.150300.18.90.2 * kernel-obs-build-5.3.18-150300.59.153.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * kernel-source-5.3.18-150300.59.153.2 * kernel-macros-5.3.18-150300.59.153.2 * kernel-devel-5.3.18-150300.59.153.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64) * kernel-64kb-debugsource-5.3.18-150300.59.153.2 * kernel-64kb-devel-5.3.18-150300.59.153.2 * kernel-64kb-debuginfo-5.3.18-150300.59.153.2 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * kernel-syms-5.3.18-150300.59.153.1 * kernel-obs-build-debugsource-5.3.18-150300.59.153.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.153.2 * reiserfs-kmp-default-5.3.18-150300.59.153.2 * kernel-default-debugsource-5.3.18-150300.59.153.2 * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-devel-5.3.18-150300.59.153.2 * kernel-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-base-5.3.18-150300.59.153.2.150300.18.90.2 * kernel-obs-build-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * kernel-source-5.3.18-150300.59.153.2 * kernel-macros-5.3.18-150300.59.153.2 * kernel-devel-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 nosrc x86_64) * kernel-preempt-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 x86_64) * kernel-preempt-debuginfo-5.3.18-150300.59.153.2 * kernel-preempt-devel-5.3.18-150300.59.153.2 * kernel-preempt-debugsource-5.3.18-150300.59.153.2 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (nosrc s390x) * kernel-zfcpdump-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (s390x) * kernel-zfcpdump-debugsource-5.3.18-150300.59.153.2 * kernel-zfcpdump-debuginfo-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc ppc64le x86_64) * kernel-default-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * kernel-syms-5.3.18-150300.59.153.1 * kernel-obs-build-debugsource-5.3.18-150300.59.153.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.153.2 * reiserfs-kmp-default-5.3.18-150300.59.153.2 * kernel-default-debugsource-5.3.18-150300.59.153.2 * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-devel-5.3.18-150300.59.153.2 * kernel-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-base-5.3.18-150300.59.153.2.150300.18.90.2 * kernel-obs-build-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * kernel-source-5.3.18-150300.59.153.2 * kernel-macros-5.3.18-150300.59.153.2 * kernel-devel-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch nosrc) * kernel-docs-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc x86_64) * kernel-preempt-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * kernel-preempt-debuginfo-5.3.18-150300.59.153.2 * kernel-preempt-devel-5.3.18-150300.59.153.2 * kernel-preempt-debugsource-5.3.18-150300.59.153.2 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.153.2 * SUSE Enterprise Storage 7.1 (aarch64 nosrc) * kernel-64kb-5.3.18-150300.59.153.2 * SUSE Enterprise Storage 7.1 (aarch64) * kernel-64kb-debugsource-5.3.18-150300.59.153.2 * kernel-64kb-devel-5.3.18-150300.59.153.2 * kernel-64kb-debuginfo-5.3.18-150300.59.153.2 * kernel-64kb-devel-debuginfo-5.3.18-150300.59.153.2 * SUSE Enterprise Storage 7.1 (aarch64 nosrc x86_64) * kernel-preempt-5.3.18-150300.59.153.2 * kernel-default-5.3.18-150300.59.153.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * kernel-preempt-debuginfo-5.3.18-150300.59.153.2 * kernel-syms-5.3.18-150300.59.153.1 * kernel-obs-build-debugsource-5.3.18-150300.59.153.2 * kernel-preempt-devel-5.3.18-150300.59.153.2 * kernel-preempt-debugsource-5.3.18-150300.59.153.2 * kernel-default-devel-debuginfo-5.3.18-150300.59.153.2 * reiserfs-kmp-default-5.3.18-150300.59.153.2 * kernel-default-debugsource-5.3.18-150300.59.153.2 * kernel-preempt-devel-debuginfo-5.3.18-150300.59.153.2 * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-devel-5.3.18-150300.59.153.2 * kernel-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-base-5.3.18-150300.59.153.2.150300.18.90.2 * kernel-obs-build-5.3.18-150300.59.153.2 * SUSE Enterprise Storage 7.1 (noarch) * kernel-source-5.3.18-150300.59.153.2 * kernel-macros-5.3.18-150300.59.153.2 * kernel-devel-5.3.18-150300.59.153.2 * SUSE Enterprise Storage 7.1 (noarch nosrc) * kernel-docs-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Micro 5.1 (aarch64 nosrc s390x x86_64) * kernel-default-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * kernel-default-base-5.3.18-150300.59.153.2.150300.18.90.2 * kernel-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-debugsource-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Micro 5.2 (aarch64 nosrc s390x x86_64) * kernel-default-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Micro 5.2 (aarch64 x86_64) * kernel-default-base-5.3.18-150300.59.153.2.150300.18.90.2 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-debugsource-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 nosrc s390x x86_64) * kernel-default-5.3.18-150300.59.153.2 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 x86_64) * kernel-default-base-5.3.18-150300.59.153.2.150300.18.90.2 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.3.18-150300.59.153.2 * kernel-default-debugsource-5.3.18-150300.59.153.2 ## References: * https://www.suse.com/security/cve/CVE-2019-25162.html * https://www.suse.com/security/cve/CVE-2020-36777.html * https://www.suse.com/security/cve/CVE-2020-36784.html * https://www.suse.com/security/cve/CVE-2021-46904.html * https://www.suse.com/security/cve/CVE-2021-46905.html * https://www.suse.com/security/cve/CVE-2021-46906.html * https://www.suse.com/security/cve/CVE-2021-46915.html * https://www.suse.com/security/cve/CVE-2021-46924.html * https://www.suse.com/security/cve/CVE-2021-46929.html * https://www.suse.com/security/cve/CVE-2021-46932.html * https://www.suse.com/security/cve/CVE-2021-46934.html * https://www.suse.com/security/cve/CVE-2021-46953.html * https://www.suse.com/security/cve/CVE-2021-46964.html * https://www.suse.com/security/cve/CVE-2021-46966.html * https://www.suse.com/security/cve/CVE-2021-46968.html * https://www.suse.com/security/cve/CVE-2021-46974.html * https://www.suse.com/security/cve/CVE-2021-46989.html * https://www.suse.com/security/cve/CVE-2021-47005.html * https://www.suse.com/security/cve/CVE-2021-47012.html * https://www.suse.com/security/cve/CVE-2021-47013.html * https://www.suse.com/security/cve/CVE-2021-47054.html * https://www.suse.com/security/cve/CVE-2021-47060.html * https://www.suse.com/security/cve/CVE-2021-47061.html * https://www.suse.com/security/cve/CVE-2021-47069.html * https://www.suse.com/security/cve/CVE-2021-47076.html * https://www.suse.com/security/cve/CVE-2021-47078.html * https://www.suse.com/security/cve/CVE-2021-47083.html * https://www.suse.com/security/cve/CVE-2022-20154.html * https://www.suse.com/security/cve/CVE-2022-48627.html * https://www.suse.com/security/cve/CVE-2023-28746.html * https://www.suse.com/security/cve/CVE-2023-35827.html * https://www.suse.com/security/cve/CVE-2023-46343.html * https://www.suse.com/security/cve/CVE-2023-51042.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52429.html * https://www.suse.com/security/cve/CVE-2023-52439.html * https://www.suse.com/security/cve/CVE-2023-52443.html * https://www.suse.com/security/cve/CVE-2023-52445.html * https://www.suse.com/security/cve/CVE-2023-52448.html * https://www.suse.com/security/cve/CVE-2023-52449.html * https://www.suse.com/security/cve/CVE-2023-52451.html * https://www.suse.com/security/cve/CVE-2023-52463.html * https://www.suse.com/security/cve/CVE-2023-52475.html * https://www.suse.com/security/cve/CVE-2023-52478.html * https://www.suse.com/security/cve/CVE-2023-52482.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-52530.html * https://www.suse.com/security/cve/CVE-2023-52531.html * https://www.suse.com/security/cve/CVE-2023-52532.html * https://www.suse.com/security/cve/CVE-2023-52569.html * https://www.suse.com/security/cve/CVE-2023-52574.html * https://www.suse.com/security/cve/CVE-2023-52597.html * https://www.suse.com/security/cve/CVE-2023-52605.html * https://www.suse.com/security/cve/CVE-2023-6817.html * https://www.suse.com/security/cve/CVE-2024-0340.html * https://www.suse.com/security/cve/CVE-2024-0607.html * https://www.suse.com/security/cve/CVE-2024-1151.html * https://www.suse.com/security/cve/CVE-2024-23849.html * https://www.suse.com/security/cve/CVE-2024-23851.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26586.html * https://www.suse.com/security/cve/CVE-2024-26589.html * https://www.suse.com/security/cve/CVE-2024-26593.html * https://www.suse.com/security/cve/CVE-2024-26595.html * https://www.suse.com/security/cve/CVE-2024-26602.html * https://www.suse.com/security/cve/CVE-2024-26607.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://bugzilla.suse.com/show_bug.cgi?id=1200599 * https://bugzilla.suse.com/show_bug.cgi?id=1207653 * https://bugzilla.suse.com/show_bug.cgi?id=1212514 * https://bugzilla.suse.com/show_bug.cgi?id=1213456 * https://bugzilla.suse.com/show_bug.cgi?id=1216223 * https://bugzilla.suse.com/show_bug.cgi?id=1218195 * https://bugzilla.suse.com/show_bug.cgi?id=1218689 * https://bugzilla.suse.com/show_bug.cgi?id=1218915 * https://bugzilla.suse.com/show_bug.cgi?id=1219127 * https://bugzilla.suse.com/show_bug.cgi?id=1219128 * https://bugzilla.suse.com/show_bug.cgi?id=1219146 * https://bugzilla.suse.com/show_bug.cgi?id=1219295 * https://bugzilla.suse.com/show_bug.cgi?id=1219653 * https://bugzilla.suse.com/show_bug.cgi?id=1219827 * https://bugzilla.suse.com/show_bug.cgi?id=1219835 * https://bugzilla.suse.com/show_bug.cgi?id=1219915 * https://bugzilla.suse.com/show_bug.cgi?id=1220009 * https://bugzilla.suse.com/show_bug.cgi?id=1220140 * https://bugzilla.suse.com/show_bug.cgi?id=1220187 * https://bugzilla.suse.com/show_bug.cgi?id=1220238 * https://bugzilla.suse.com/show_bug.cgi?id=1220240 * https://bugzilla.suse.com/show_bug.cgi?id=1220241 * https://bugzilla.suse.com/show_bug.cgi?id=1220243 * https://bugzilla.suse.com/show_bug.cgi?id=1220250 * https://bugzilla.suse.com/show_bug.cgi?id=1220253 * https://bugzilla.suse.com/show_bug.cgi?id=1220255 * https://bugzilla.suse.com/show_bug.cgi?id=1220328 * https://bugzilla.suse.com/show_bug.cgi?id=1220330 * https://bugzilla.suse.com/show_bug.cgi?id=1220344 * https://bugzilla.suse.com/show_bug.cgi?id=1220398 * https://bugzilla.suse.com/show_bug.cgi?id=1220409 * https://bugzilla.suse.com/show_bug.cgi?id=1220416 * https://bugzilla.suse.com/show_bug.cgi?id=1220418 * https://bugzilla.suse.com/show_bug.cgi?id=1220421 * https://bugzilla.suse.com/show_bug.cgi?id=1220436 * https://bugzilla.suse.com/show_bug.cgi?id=1220444 * https://bugzilla.suse.com/show_bug.cgi?id=1220459 * https://bugzilla.suse.com/show_bug.cgi?id=1220469 * https://bugzilla.suse.com/show_bug.cgi?id=1220482 * https://bugzilla.suse.com/show_bug.cgi?id=1220526 * https://bugzilla.suse.com/show_bug.cgi?id=1220538 * https://bugzilla.suse.com/show_bug.cgi?id=1220570 * https://bugzilla.suse.com/show_bug.cgi?id=1220572 * https://bugzilla.suse.com/show_bug.cgi?id=1220599 * https://bugzilla.suse.com/show_bug.cgi?id=1220627 * https://bugzilla.suse.com/show_bug.cgi?id=1220641 * https://bugzilla.suse.com/show_bug.cgi?id=1220649 * https://bugzilla.suse.com/show_bug.cgi?id=1220660 * https://bugzilla.suse.com/show_bug.cgi?id=1220689 * https://bugzilla.suse.com/show_bug.cgi?id=1220700 * https://bugzilla.suse.com/show_bug.cgi?id=1220735 * https://bugzilla.suse.com/show_bug.cgi?id=1220736 * https://bugzilla.suse.com/show_bug.cgi?id=1220737 * https://bugzilla.suse.com/show_bug.cgi?id=1220742 * https://bugzilla.suse.com/show_bug.cgi?id=1220745 * https://bugzilla.suse.com/show_bug.cgi?id=1220767 * https://bugzilla.suse.com/show_bug.cgi?id=1220796 * https://bugzilla.suse.com/show_bug.cgi?id=1220825 * https://bugzilla.suse.com/show_bug.cgi?id=1220826 * https://bugzilla.suse.com/show_bug.cgi?id=1220831 * https://bugzilla.suse.com/show_bug.cgi?id=1220845 * https://bugzilla.suse.com/show_bug.cgi?id=1220860 * https://bugzilla.suse.com/show_bug.cgi?id=1220863 * https://bugzilla.suse.com/show_bug.cgi?id=1220870 * https://bugzilla.suse.com/show_bug.cgi?id=1220917 * https://bugzilla.suse.com/show_bug.cgi?id=1220918 * https://bugzilla.suse.com/show_bug.cgi?id=1220930 * https://bugzilla.suse.com/show_bug.cgi?id=1220931 * https://bugzilla.suse.com/show_bug.cgi?id=1220932 * https://bugzilla.suse.com/show_bug.cgi?id=1221039 * https://bugzilla.suse.com/show_bug.cgi?id=1221040

1 0

SUSE-SU-2024:0858-1: important: Security update for the Linux Kernel
by OPENSUSE-UPDATES 13 Mar '24

13 Mar '24

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2024:0858-1 Rating: important References: * bsc#1194869 * bsc#1206453 * bsc#1209412 * bsc#1213456 * bsc#1216776 * bsc#1217927 * bsc#1218195 * bsc#1218216 * bsc#1218450 * bsc#1218527 * bsc#1218663 * bsc#1218915 * bsc#1219126 * bsc#1219127 * bsc#1219141 * bsc#1219146 * bsc#1219295 * bsc#1219443 * bsc#1219653 * bsc#1219827 * bsc#1219835 * bsc#1219839 * bsc#1219840 * bsc#1219934 * bsc#1220003 * bsc#1220009 * bsc#1220021 * bsc#1220030 * bsc#1220106 * bsc#1220140 * bsc#1220187 * bsc#1220238 * bsc#1220240 * bsc#1220241 * bsc#1220243 * bsc#1220250 * bsc#1220251 * bsc#1220253 * bsc#1220254 * bsc#1220255 * bsc#1220257 * bsc#1220267 * bsc#1220277 * bsc#1220317 * bsc#1220326 * bsc#1220328 * bsc#1220330 * bsc#1220335 * bsc#1220344 * bsc#1220348 * bsc#1220350 * bsc#1220364 * bsc#1220392 * bsc#1220393 * bsc#1220398 * bsc#1220409 * bsc#1220444 * bsc#1220457 * bsc#1220459 * bsc#1220649 * bsc#1220796 * bsc#1220825 * jsc#PED-7618 Cross-References: * CVE-2019-25162 * CVE-2021-46923 * CVE-2021-46924 * CVE-2021-46932 * CVE-2023-28746 * CVE-2023-5197 * CVE-2023-52340 * CVE-2023-52429 * CVE-2023-52439 * CVE-2023-52443 * CVE-2023-52445 * CVE-2023-52447 * CVE-2023-52448 * CVE-2023-52449 * CVE-2023-52451 * CVE-2023-52452 * CVE-2023-52456 * CVE-2023-52457 * CVE-2023-52463 * CVE-2023-52464 * CVE-2023-52475 * CVE-2023-52478 * CVE-2023-6817 * CVE-2024-0607 * CVE-2024-1151 * CVE-2024-23849 * CVE-2024-23850 * CVE-2024-23851 * CVE-2024-25744 * CVE-2024-26585 * CVE-2024-26586 * CVE-2024-26589 * CVE-2024-26591 * CVE-2024-26593 * CVE-2024-26595 * CVE-2024-26598 * CVE-2024-26602 * CVE-2024-26603 * CVE-2024-26622 CVSS scores: * CVE-2019-25162 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2021-46923 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2021-46924 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2021-46932 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2023-28746 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2023-5197 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2023-5197 ( NVD ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52429 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52429 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52439 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52443 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52445 ( SUSE ): 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52447 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52451 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2023-52452 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-52456 ( SUSE ): 4.0 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52457 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2023-52463 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52464 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-52475 ( SUSE ): 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52478 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2023-6817 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6817 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-0607 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2024-0607 ( NVD ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-1151 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23849 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-23849 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23850 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23850 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23851 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23851 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-25744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26586 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2024-26591 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26593 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-26595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26602 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-26603 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * Legacy Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that solves 39 vulnerabilities, contains one feature and has 23 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2019-25162: Fixed a potential use after free (bsc#1220409). * CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457). * CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459) * CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444) * CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456). * CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216). * CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295). * CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm- table.c (bsc#1219827). * CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140). * CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240). * CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241). * CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251). * CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253). * CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238). * CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250). * CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257). * CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364). * CVE-2023-52457: Fixed skipped resource freeing if pm_runtime_resume_and_get() failed (bsc#1220350). * CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328). * CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330) * CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649) * CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796) * CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195). * CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915). * CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835). * CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127). * CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126). * CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146). * CVE-2024-25744: Fixed Security issue with int 80 interrupt vector (bsc#1217927). * CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187). * CVE-2024-26586: Fixed stack corruption (bsc#1220243). * CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255). * CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach (bsc#1220254). * CVE-2024-26593: Fixed block process call transactions (bsc#1220009). * CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344). * CVE-2024-26598: Fixed potential UAF in LPI translation cache (bsc#1220326). * CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398). * CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335). * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825). The following non-security bugs were fixed: * acpi: apei: set memory failure flags as mf_action_required on synchronous events (git-fixes). * acpi: button: add lid disable dmi quirk for nextbook ares 8a (git-fixes). * acpi: extlog: fix null pointer dereference check (git-fixes). * acpi: resource: add asus model s5402za to quirks (git-fixes). * acpi: resource: skip irq override on asus expertbook b1502cba (git-fixes). * acpi: resource: skip irq override on asus expertbook b2402cba (git-fixes). * acpi: video: add backlight=native dmi quirk for apple imac11,3 (git-fixes). * acpi: video: add backlight=native dmi quirk for apple imac12,1 and imac12,2 (git-fixes). * acpi: video: add backlight=native dmi quirk for lenovo thinkpad x131e (3371 amd version) (git-fixes). * acpi: video: add quirk for the colorful x15 at 23 laptop (git-fixes). * add reference to recently released cve * afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (git- fixes). * afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() (git-fixes). * afs: hide silly-rename files from userspace (git-fixes). * afs: increase buffer size in afs_update_volume_status() (git-fixes). * ahci: asm1166: correct count of reported ports (git-fixes). * alsa: drop leftover snd-rtctimer stuff from makefile (git-fixes). * alsa: firewire-lib: fix to check cycle continuity (git-fixes). * alsa: hda/conexant: add quirk for sws js201d (git-fixes). * alsa: hda/realtek: apply headset jack quirk for non-bass alc287 thinkpads (git-fixes). * alsa: hda/realtek: cs35l41: fix device id / model name (git-fixes). * alsa: hda/realtek: cs35l41: fix order and duplicates in quirks table (git- fixes). * alsa: hda/realtek: enable headset mic on vaio vjfe-adl (git-fixes). * alsa: hda/realtek: enable mute led on hp laptop 14-fq0xxx (git-fixes). * alsa: hda/realtek: fix mute/micmute led for hp mt645 (git-fixes). * alsa: hda/realtek: fix mute/micmute leds for hp zbook power (git-fixes). * alsa: hda/realtek: fix the external mic not being recognised for acer swift 1 sf114-32 (git-fixes). * alsa: usb-audio: add a quirk for yamaha yit-w12tx transmitter (git-fixes). * alsa: usb-audio: add delay quirk for motu m series 2nd revision (git-fixes). * alsa: usb-audio: add quirk for rode nt-usb+ (git-fixes). * alsa: usb-audio: check presence of valid altsetting control (git-fixes). * alsa: usb-audio: ignore clock selector errors for single connection (git- fixes). * alsa: usb-audio: more relaxed check of midi jack names (git-fixes). * alsa: usb-audio: sort quirk table entries (git-fixes). * arm64: entry: fix arm64_workaround_speculative_unpriv_load (bsc#1219443) * arm64: entry: preserve/restore x29 even for compat tasks (bsc#1219443) * arm64: entry: simplify tramp_alias macro and tramp_exit routine (bsc#1219443) * arm64: errata: add cortex-a510 speculative unprivileged load (bsc#1219443) enable workaround. * arm64: errata: add cortex-a520 speculative unprivileged load (bsc#1219443) enable workaround without kabi break. * arm64: errata: mitigate ampere1 erratum ac03_cpu_38 at stage-2 (git-fixes) enable ampere_erratum_ac03_cpu_38 workaround without kabi break * arm64: irq: set the correct node for shadow call stack (git-fixes) * arm64: irq: set the correct node for vmap stack (git-fixes) * arm64: rename arm64_workaround_2966298 (bsc#1219443) * arm64: subscribe microsoft azure cobalt 100 to arm neoverse n2 errata (git- fixes) * asoc: doc: fix undefined snd_soc_dapm_nopm argument (git-fixes). * asoc: rt5645: fix deadlock in rt5645_jack_detect_work() (git-fixes). * asoc: sof: ipc3: fix message bounds on ipc ops (git-fixes). * asoc: sunxi: sun4i-spdif: add support for allwinner h616 (git-fixes). * atm: idt77252: fix a memleak in open_card_ubr0 (git-fixes). * bluetooth: avoid potential use-after-free in hci_error_reset (git-fixes). * bluetooth: enforce validation on max value of connection interval (git- fixes). * bluetooth: hci_event: fix handling of hci_ev_io_capa_request (git-fixes). * bluetooth: hci_event: fix wrongly recorded wakeup bd_addr (git-fixes). * bluetooth: hci_sync: check the correct flag before starting a scan (git- fixes). * bluetooth: hci_sync: fix accept_list when attempting to suspend (git-fixes). * bluetooth: l2cap: fix possible multiple reject send (git-fixes). * bluetooth: qca: fix wrong event type for patch config command (git-fixes). * bpf: fix verification of indirect var-off stack access (git-fixes). * bpf: guard stack limits against 32bit overflow (git-fixes). * bpf: minor logging improvement (bsc#1220257). * bus: moxtet: add spi device table (git-fixes). * cachefiles: fix memory leak in cachefiles_add_cache() (bsc#1220267). * can: j1939: fix uaf in j1939_sk_match_filter during setsockopt(so_j1939_filter) (git-fixes). * crypto: api - disallow identical driver names (git-fixes). * crypto: ccp - fix null pointer dereference in __sev_platform_shutdown_locked (git-fixes). * crypto: octeontx2 - fix cptvf driver cleanup (git-fixes). * crypto: stm32/crc32 - fix parsing list of devices (git-fixes). * dmaengine: fsl-qdma: fix a memory leak related to the queue command dma (git-fixes). * dmaengine: fsl-qdma: fix soc may hang on 16 byte unaligned read (git-fixes). * dmaengine: fsl-qdma: increase size of 'irq_name' (git-fixes). * dmaengine: fsl-qdma: init irq after reg initialization (git-fixes). * dmaengine: ptdma: use consistent dma masks (git-fixes). * dmaengine: shdma: increase size of 'dev_id' (git-fixes). * dmaengine: ti: edma: add some null pointer checks to the edma_probe (git- fixes). * driver core: fix device_link_flag_is_sync_state_only() (git-fixes). * drm/amd/display: fix memory leak in dm_sw_fini() (git-fixes). * drm/amd/display: fix possible buffer overflow in 'find_dcfclk_for_voltage()' (git-fixes). * drm/amd/display: fix possible null dereference on device remove/driver unload (git-fixes). * drm/amd/display: increase frame-larger-than for all display_mode_vba files (git-fixes). * drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz (git-fixes). * drm/amd/display: preserve original aspect ratio in create stream (git- fixes). * drm/amdgpu/display: initialize gamma correction mode variable in dcn30_get_gamcor_current() (git-fixes). * drm/amdgpu: reset gpu for s3 suspend abort case (git-fixes). * drm/amdgpu: skip to program gfxdec registers for suspend abort (git-fixes). * drm/buddy: fix range bias (git-fixes). * drm/crtc: fix uninitialized variable use even harder (git-fixes). * drm/i915/gvt: fix uninitialized variable in handle_mmio() (git-fixes). * drm/msm/dp: return correct colorimetry for dp_test_dynamic_range_cea case (git-fixes). * drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup (git- fixes). * drm/msms/dp: fixed link clock divider bits be over written in bpc unknown case (git-fixes). * drm/prime: support page array >= 4gb (git-fixes). * drm/syncobj: call drm_syncobj_fence_add_wait when wait_available flag is set (git-fixes). * drm/ttm: fix an invalid freeing on already freed page in error path (git- fixes). * drop bcm5974 input patch causing a regression (bsc#1220030) * efi/capsule-loader: fix incorrect allocation size (git-fixes). * efi: do not add memblocks for soft-reserved memory (git-fixes). * efi: runtime: fix potential overflow of soft-reserved region size (git- fixes). * fbcon: always restore the old font data in fbcon_do_set_font() (git-fixes). * fbdev: savage: error out if pixclock equals zero (git-fixes). * fbdev: sis: error out if pixclock equals zero (git-fixes). * firewire: core: send bus reset promptly on gap count error (git-fixes). * fs: dlm: fix build with config_ipv6 disabled (git-fixes). * fs:jfs:ubsan:array-index-out-of-bounds in dbadjtree (git-fixes). * gpio: 74x164: enable output pins after registers are reset (git-fixes). * gpio: fix resource unwinding order in error path (git-fixes). * gpiolib: acpi: ignore touchpad wakeup on gpd g1619-04 (git-fixes). * gpiolib: fix the error path order in gpiochip_add_data_with_key() (git- fixes). * hid: apple: add 2021 magic keyboard fn key mapping (git-fixes). * hid: apple: add support for the 2021 magic keyboard (git-fixes). * hid: wacom: do not register input devices until after hid_hw_start (git- fixes). * hid: wacom: generic: avoid reporting a serial of '0' to userspace (git- fixes). * hwmon: (aspeed-pwm-tacho) mutex for tach reading (git-fixes). * hwmon: (coretemp) enlarge per package core count limit (git-fixes). * hwmon: (coretemp) fix bogus core_id to attr name mapping (git-fixes). * hwmon: (coretemp) fix out-of-bounds memory access (git-fixes). * i2c: i801: fix block process call transactions (git-fixes). * i2c: i801: remove i801_set_block_buffer_mode (git-fixes). * i2c: imx: add timer for handling the stop condition (git-fixes). * i2c: imx: when being a target, mark the last read as processed (git-fixes). * i3c: master: cdns: update maximum prescaler value for i2c clock (git-fixes). * ib/hfi1: fix a memleak in init_credit_return (git-fixes) * ib/hfi1: fix sdma.h tx->num_descs off-by-one error (git-fixes) * iio: accel: bma400: fix a compilation problem (git-fixes). * iio: adc: ad7091r: set alert bit in config register (git-fixes). * iio: core: fix memleak in iio_device_register_sysfs (git-fixes). * iio: hid-sensor-als: return 0 for hid_usage_sensor_time_timestamp (git- fixes). * iio: magnetometer: rm3100: add boundary check for the value read from rm3100_reg_tmrc (git-fixes). * input: iqs269a - switch to define_simple_dev_pm_ops() and pm_sleep_ptr() (git-fixes). * input: xpad - add lenovo legion go controllers (git-fixes). * irqchip/gic-v3-its: fix gicv4.1 vpe affinity update (git-fixes). * irqchip/irq-brcmstb-l2: add write memory barrier before exit (git-fixes). * jfs: fix array-index-out-of-bounds in dbadjtree (git-fixes). * jfs: fix array-index-out-of-bounds in dinewext (git-fixes). * jfs: fix slab-out-of-bounds read in dtsearch (git-fixes). * jfs: fix uaf in jfs_evict_inode (git-fixes). * kbuild: fix changing elf file type for output of gen_btf for big endian (git-fixes). * kvm: s390: fix cc for successful pqap (git-fixes bsc#1219839). * kvm: s390: fix setting of fpc register (git-fixes bsc#1220392). * kvm: s390: vsie: fix race during shadow creation (git-fixes bsc#1220393). * kvm: vmx: move verw closer to vmentry for mds mitigation (git-fixes). * kvm: vmx: use bt+jnc, i.e. eflags.cf to select vmresume vs. vmlaunch (git- fixes). * lan78xx: enable auto speed configuration for lan7850 if no eeprom is detected (git-fixes). * leds: trigger: panic: do not register panic notifier if creating the trigger failed (git-fixes). * lib/stackdepot: add depot_fetch_stack helper (jsc-ped#7423). * lib/stackdepot: add refcount for records (jsc-ped#7423). * lib/stackdepot: fix first entry having a 0-handle (jsc-ped#7423). * lib/stackdepot: move stack_record struct definition into the header (jsc- ped#7423). * libsubcmd: fix memory leak in uniq() (git-fixes). * media: ddbridge: fix an error code problem in ddb_probe (git-fixes). * media: ir_toy: fix a memleak in irtoy_tx (git-fixes). * media: rc: bpf attach/detach requires write permission (git-fixes). * media: rockchip: rga: fix swizzling for rgb formats (git-fixes). * media: stk1160: fixed high volume of stk1160_dbg messages (git-fixes). * mfd: syscon: fix null pointer dereference in of_syscon_register() (git- fixes). * mm,page_owner: display all stacks and their count (jsc-ped#7423). * mm,page_owner: filter out stacks by a threshold (jsc-ped#7423). * mm,page_owner: implement the tracking of the stacks count (jsc-ped#7423). * mm,page_owner: maintain own list of stack_records structs (jsc-ped#7423). * mm,page_owner: update documentation regarding page_owner_stacks (jsc- ped#7423). * mm/hwpoison: fix unpoison_memory() (bsc#1218663). * mm/hwpoison: mf_mutex for soft offline and unpoison (bsc#1218663). * mm/hwpoison: remove mf_msg_buddy_2nd and mf_msg_poisoned_huge (bsc#1218663). * mm: memory-failure: fix potential unexpected return value from unpoison_memory() (git-fixes). * mmc: core: fix emmc initialization with 1-bit bus connection (git-fixes). * mmc: core: use mrq.sbc in close-ended ffu (git-fixes). * mmc: mmc_spi: remove custom dma mapped buffers (git-fixes). * mmc: sdhci-xenon: add timeout for phy init complete (git-fixes). * mmc: sdhci-xenon: fix phy init clock stability (git-fixes). * mmc: slot-gpio: allow non-sleeping gpio ro (git-fixes). * modpost: trim leading spaces when processing source files list (git-fixes). * mtd: spinand: gigadevice: fix the get ecc status issue (git-fixes). * net: usb: dm9601: fix wrong return value in dm9601_mdio_read (git-fixes). * netfs, fscache: prevent oops in fscache_put_cache() (bsc#1220003). * nilfs2: fix data corruption in dsync block recovery for small block sizes (git-fixes). * nilfs2: replace warn_ons for invalid dat metadata block requests (git- fixes). * nouveau/svm: fix kvcalloc() argument order (git-fixes). * nouveau: fix function cast warnings (git-fixes). * ntfs: check overflow when iterating attr_records (git-fixes). * ntfs: fix use-after-free in ntfs_attr_find() (git-fixes). * nvme-fabrics: fix i/o connect error handling (git-fixes). * nvme-host: fix the updating of the firmware version (git-fixes). * pci/aer: decode requester id when no error info found (git-fixes). * pci: add no pm reset quirk for nvidia spectrum devices (git-fixes). * pci: add pci_header_type_mfd definition (bsc#1220021). * pci: fix 64gt/s effective data rate calculation (git-fixes). * pci: only override amd usb controller if required (git-fixes). * pci: switchtec: fix stdev_release() crash after surprise hot remove (git- fixes). * platform/x86: thinkpad_acpi: only update profile if successfully converted (git-fixes). * platform/x86: touchscreen_dmi: add info for the teclast x16 plus tablet (git-fixes). * platform/x86: touchscreen_dmi: allow partial (prefix) matches for acpi names (git-fixes). * pm: core: remove unnecessary (void *) conversions (git-fixes). * pm: runtime: have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (git-fixes). * pnp: acpi: fix fortify warning (git-fixes). * power: supply: bq27xxx-i2c: do not free non existing irq (git-fixes). * powerpc/64: set task pt_regs->link to the lr value on scv entry (bsc#1194869). * powerpc/powernv: fix fortify source warnings in opal-prd.c (bsc#1194869). * powerpc/pseries: add a clear modifier to ibm,pa/pi-features parser (bsc#1220348). * powerpc/pseries: rework lppaca_shared_proc() to avoid debug_preempt (bsc#1194869). * powerpc/pseries: set cpu_ftr_dbell according to ibm,pi-features (bsc#1220348). * powerpc/watchpoint: disable pagefaults when getting user instruction (bsc#1194869). * powerpc/watchpoints: annotate atomic context in more places (bsc#1194869). * powerpc/watchpoints: disable preemption in thread_change_pc() (bsc#1194869). * powerpc: add crtsavres.o to always-y instead of extra-y (bsc#1194869). * powerpc: do not include lppaca.h in paca.h (bsc#1194869). * pstore/ram: fix crash when setting number of cpus to an odd number (git- fixes). * ras/amd/atl: add mi300 row retirement support (jsc#ped-7618). * ras/amd/atl: fix bit overflow in denorm_addr_df4_np2() (git-fixes). * ras: introduce a fru memory poison manager (jsc#ped-7618). * rdma/bnxt_re: add a missing check in bnxt_qplib_query_srq (git-fixes) * rdma/bnxt_re: return error for srq resize (git-fixes) * rdma/core: fix uninit-value access in ib_get_eth_speed() (bsc#1219934). * rdma/core: get ib width and speed from netdev (bsc#1219934). * rdma/irdma: add ae for too many rnrs (git-fixes) * rdma/irdma: fix kasan issue with tasklet (git-fixes) * rdma/irdma: set the cq read threshold for gen 1 (git-fixes) * rdma/irdma: validate max_send_wr and max_recv_wr (git-fixes) * rdma/qedr: fix qedr_create_user_qp error flow (git-fixes) * rdma/srpt: fix function pointer cast warnings (git-fixes) * rdma/srpt: support specifying the srpt_service_guid parameter (git-fixes) * refresh patches.suse/dm_blk_ioctl-implement-path-failover-for-sg_io (bsc#1216776, bsc#1220277) * regulator: core: only increment use_count when enable_count changes (git- fixes). * regulator: pwm-regulator: add validity checks in continuous .get_voltage (git-fixes). * revert "drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz" (git- fixes). * revert "drm/amd/pm: resolve reboot exception for si oland" (git-fixes). * revert "drm/amd: flush any delayed gfxoff on suspend entry" (git-fixes). * rpm/kernel-binary.spec.in: install scripts/gdb when enabled in config (bsc#1219653) they are put into -devel subpackage. and a proper link to /usr/share/gdb/auto-load/ is created. * s390/qeth: fix potential loss of l3-ip@ in case of network issues (git-fixes bsc#1219840). * s390: use the correct count for __iowrite64_copy() (git-fixes bsc#1220317). * sched/membarrier: reduce the ability to hammer on sys_membarrier (git- fixes). * scsi: core: move scsi_host_busy() out of host lock for waking up eh handler (git-fixes). * scsi: core: move scsi_host_busy() out of host lock if it is for per-command (git-fixes). * scsi: fnic: move fnic_fnic_flush_tx() to a work queue (git-fixes bsc#1219141). * scsi: hisi_sas: prevent parallel flr and controller reset (git-fixes). * scsi: ibmvfc: limit max hw queues by num_online_cpus() (bsc#1220106). * scsi: ibmvfc: open-code reset loop for target reset (bsc#1220106). * scsi: isci: fix an error code problem in isci_io_request_build() (git- fixes). * scsi: lpfc: add condition to delete ndlp object after sending bls_rjt to an abts (bsc#1220021). * scsi: lpfc: allow lpfc_plogi_confirm_nport() logic to execute for fabric nodes (bsc#1220021). * scsi: lpfc: change lpfc_vport fc_flag member into a bitmask (bsc#1220021). * scsi: lpfc: change lpfc_vport load_flag member into a bitmask (bsc#1220021). * scsi: lpfc: change nlp state statistic counters into atomic_t (bsc#1220021). * scsi: lpfc: copyright updates for 14.4.0.0 patches (bsc#1220021). * scsi: lpfc: fix failure to delete vports when discovery is in progress (bsc#1220021). * scsi: lpfc: fix possible memory leak in lpfc_rcv_padisc() (bsc#1220021). * scsi: lpfc: initialize status local variable in lpfc_sli4_repost_sgl_list() (bsc#1220021). * scsi: lpfc: move handling of reset congestion statistics events (bsc#1220021). * scsi: lpfc: protect vport fc_nodes list with an explicit spin lock (bsc#1220021). * scsi: lpfc: remove d_id swap log message from trace event logger (bsc#1220021). * scsi: lpfc: remove nlp_rcv_plogi early return during rscn processing for ndlps (bsc#1220021). * scsi: lpfc: remove shost_lock protection for fc_host_port shost apis (bsc#1220021). * scsi: lpfc: replace deprecated strncpy() with strscpy() (bsc#1220021). * scsi: lpfc: save fpin frequency statistics upon receipt of peer cgn notifications (bsc#1220021). * scsi: lpfc: update lpfc version to 14.4.0.0 (bsc#1220021). * scsi: lpfc: use pci_header_type_mfd instead of literal (bsc#1220021). * scsi: lpfc: use sg_dma_len() api to get struct scatterlist's length (bsc#1220021). * scsi: mpi3mr: refresh sdev queue depth after controller reset (git-fixes). * scsi: revert "scsi: fcoe: fix potential deadlock on &fip->ctlr_lock" (git- fixes bsc#1219141). * serial: 8250: remove serial_rs485 sanitization from em485 (git-fixes). * spi-mxs: fix chipselect glitch (git-fixes). * spi: hisi-sfc-v3xx: return irq_none if no interrupts were detected (git- fixes). * spi: ppc4xx: drop write-only variable (git-fixes). * spi: sh-msiof: avoid integer overflow in constants (git-fixes). * staging: iio: ad5933: fix type mismatch regression (git-fixes). * supported.conf: remove external flag from ibm supported modules. (bsc#1209412) * tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd (bsc#1218450). * tomoyo: fix uaf write bug in tomoyo_write_control() (git-fixes). * topology/sysfs: add format parameter to macro defining "show" functions for proc (jsc#ped-7618). * topology/sysfs: add ppin in sysfs under cpu topology (jsc#ped-7618). * tty: allow tiocslcktrmios with cap_checkpoint_restore (git-fixes). * ubsan: array-index-out-of-bounds in dtsplitroot (git-fixes). * usb: cdns3: fix memory double free when handle zero packet (git-fixes). * usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (git- fixes). * usb: cdns3: modify the return value of cdns_set_active () to void when config_pm_sleep is disabled (git-fixes). * usb: cdns3: put the cdns set active part outside the spin lock (git-fixes). * usb: cdns: readd old api (git-fixes). * usb: cdnsp: blocked some cdns3 specific code (git-fixes). * usb: cdnsp: fixed issue with incorrect detecting cdnsp family controllers (git-fixes). * usb: dwc3: gadget: do not disconnect if not started (git-fixes). * usb: dwc3: gadget: handle ep0 request dequeuing properly (git-fixes). * usb: dwc3: gadget: ignore end transfer delay on teardown (git-fixes). * usb: dwc3: gadget: queue pm runtime idle on disconnect event (git-fixes). * usb: dwc3: gadget: refactor ep0 forced stall/restart into a separate api (git-fixes). * usb: dwc3: gadget: submit endxfer command if delayed during disconnect (git- fixes). * usb: dwc3: host: set xhci_sg_trb_cache_size_quirk (git-fixes). * usb: f_mass_storage: forbid async queue when shutdown happen (git-fixes). * usb: gadget: core: add missing kerneldoc for vbus_work (git-fixes). * usb: gadget: core: adjust uevent timing on gadget unbind (git-fixes). * usb: gadget: core: help prevent panic during uvc unconfigure (git-fixes). * usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes). * usb: gadget: f_hid: fix report descriptor allocation (git-fixes). * usb: gadget: fix obscure lockdep violation for udc_mutex (git-fixes). * usb: gadget: fix use-after-free read in usb_udc_uevent() (git-fixes). * usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (git-fixes). * usb: gadget: ncm: avoid dropping datagrams of properly parsed ntbs (git- fixes). * usb: gadget: udc: core: offload usb_udc_vbus_handler processing (git-fixes). * usb: gadget: udc: core: prevent soft_connect_store() race (git-fixes). * usb: gadget: udc: handle gadget_connect failure during bind operation (git- fixes). * usb: hub: check for alternate port before enabling a_alt_hnp_support (bsc#1218527). * usb: hub: replace hardcoded quirk value with bit() macro (git-fixes). * usb: roles: do not get/set_role() when usb_role_switch is unregistered (git- fixes). * usb: roles: fix null pointer issue when put module's reference (git-fixes). * usb: serial: cp210x: add id for imst im871a-usb (git-fixes). * usb: serial: option: add fibocom fm101-gl variant (git-fixes). * usb: serial: qcserial: add new usb-id for dell wireless dw5826e (git-fixes). * watchdog: it87_wdt: keep wdtctrl bit 3 unmodified for it8784/it8786 (git- fixes). * wifi: ath11k: fix registration of 6ghz-only phy without the full channel range (git-fixes). * wifi: ath9k: fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (git-fixes). * wifi: cfg80211: fix missing interfaces when dumping (git-fixes). * wifi: cfg80211: free beacon_ies when overridden from hidden bss (git-fixes). * wifi: iwlwifi: fix some error codes (git-fixes). * wifi: iwlwifi: mvm: avoid baid size integer overflow (git-fixes). * wifi: iwlwifi: uninitialized variable in iwl_acpi_get_ppag_table() (git- fixes). * wifi: mac80211: adding missing drv_mgd_complete_tx() call (git-fixes). * wifi: mac80211: fix race condition on enabling fast-xmit (git-fixes). * wifi: nl80211: reject iftype change with mesh id change (git-fixes). * wifi: rt2x00: restart beacon queue when hardware reset (git-fixes). * wifi: rtl8xxxu: add additional usb ids for rtl8192eu devices (git-fixes). * wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (git-fixes). * wifi: wext-core: fix -wstringop-overflow warning in ioctl_standard_iw_point() (git-fixes). * x86/asm: add _asm_rip() macro for x86-64 (%rip) suffix (git-fixes). * x86/bugs: add asm helpers for executing verw (git-fixes). * x86/bugs: use alternative() instead of mds_user_clear static key (git- fixes). also add mds_user_clear to kabi severities since it's strictly mitigation related so should be low risk. * x86/cpu: x86_feature_intel_ppin finally had a cpuid bit (jsc#ped-7618). * x86/entry_32: add verw just before userspace transition (git-fixes). * x86/entry_64: add verw just before userspace transition (git-fixes). * x86/mm: fix memory encryption features advertisement (bsc#1206453). * xfs: remove unused fields from struct xbtree_ifakeroot (git-fixes). * xfs: short circuit xfs_growfs_data_private() if delta is zero (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-858=1 openSUSE-SLE-15.5-2024-858=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-858=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-858=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-858=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-858=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-858=1 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-858=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-858=1 ## Package List: * openSUSE Leap 15.5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (noarch) * kernel-source-vanilla-5.14.21-150500.55.52.1 * kernel-docs-html-5.14.21-150500.55.52.1 * kernel-devel-5.14.21-150500.55.52.1 * kernel-macros-5.14.21-150500.55.52.1 * kernel-source-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (nosrc ppc64le x86_64) * kernel-debug-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (ppc64le x86_64) * kernel-debug-debugsource-5.14.21-150500.55.52.1 * kernel-debug-devel-debuginfo-5.14.21-150500.55.52.1 * kernel-debug-debuginfo-5.14.21-150500.55.52.1 * kernel-debug-livepatch-devel-5.14.21-150500.55.52.1 * kernel-debug-devel-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (x86_64) * kernel-default-vdso-5.14.21-150500.55.52.1 * kernel-debug-vdso-debuginfo-5.14.21-150500.55.52.1 * kernel-kvmsmall-vdso-5.14.21-150500.55.52.1 * kernel-debug-vdso-5.14.21-150500.55.52.1 * kernel-default-vdso-debuginfo-5.14.21-150500.55.52.1 * kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.52.1.150500.6.23.1 * kernel-kvmsmall-debugsource-5.14.21-150500.55.52.1 * kernel-kvmsmall-debuginfo-5.14.21-150500.55.52.1 * kernel-kvmsmall-livepatch-devel-5.14.21-150500.55.52.1 * kernel-kvmsmall-devel-5.14.21-150500.55.52.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.52.1 * kernel-default-base-rebuild-5.14.21-150500.55.52.1.150500.6.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-5.14.21-150500.55.52.1 * kernel-default-optional-5.14.21-150500.55.52.1 * dlm-kmp-default-5.14.21-150500.55.52.1 * kernel-default-livepatch-5.14.21-150500.55.52.1 * kernel-default-debugsource-5.14.21-150500.55.52.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.52.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.52.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.52.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.52.1 * gfs2-kmp-default-5.14.21-150500.55.52.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.52.1 * kselftests-kmp-default-debuginfo-5.14.21-150500.55.52.1 * kernel-default-debuginfo-5.14.21-150500.55.52.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.52.1 * kernel-default-optional-debuginfo-5.14.21-150500.55.52.1 * kernel-obs-qa-5.14.21-150500.55.52.1 * kernel-obs-build-5.14.21-150500.55.52.1 * kernel-syms-5.14.21-150500.55.52.1 * kernel-default-livepatch-devel-5.14.21-150500.55.52.1 * cluster-md-kmp-default-5.14.21-150500.55.52.1 * ocfs2-kmp-default-5.14.21-150500.55.52.1 * kernel-default-extra-5.14.21-150500.55.52.1 * reiserfs-kmp-default-5.14.21-150500.55.52.1 * kselftests-kmp-default-5.14.21-150500.55.52.1 * kernel-obs-build-debugsource-5.14.21-150500.55.52.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_11-debugsource-1-150500.11.3.1 * kernel-livepatch-5_14_21-150500_55_52-default-debuginfo-1-150500.11.3.1 * kernel-livepatch-5_14_21-150500_55_52-default-1-150500.11.3.1 * openSUSE Leap 15.5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.52.1 * kernel-zfcpdump-debugsource-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (nosrc) * dtb-aarch64-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (aarch64) * kernel-64kb-optional-5.14.21-150500.55.52.1 * dtb-qcom-5.14.21-150500.55.52.1 * dtb-amd-5.14.21-150500.55.52.1 * dtb-altera-5.14.21-150500.55.52.1 * dtb-socionext-5.14.21-150500.55.52.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.52.1 * dtb-apple-5.14.21-150500.55.52.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.52.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.52.1 * kernel-64kb-extra-5.14.21-150500.55.52.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.52.1 * dtb-apm-5.14.21-150500.55.52.1 * dtb-hisilicon-5.14.21-150500.55.52.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.52.1 * dtb-renesas-5.14.21-150500.55.52.1 * dtb-arm-5.14.21-150500.55.52.1 * gfs2-kmp-64kb-5.14.21-150500.55.52.1 * kernel-64kb-devel-5.14.21-150500.55.52.1 * kselftests-kmp-64kb-5.14.21-150500.55.52.1 * dtb-lg-5.14.21-150500.55.52.1 * dlm-kmp-64kb-5.14.21-150500.55.52.1 * kernel-64kb-livepatch-devel-5.14.21-150500.55.52.1 * dtb-amlogic-5.14.21-150500.55.52.1 * dtb-amazon-5.14.21-150500.55.52.1 * kernel-64kb-debugsource-5.14.21-150500.55.52.1 * dtb-sprd-5.14.21-150500.55.52.1 * dtb-xilinx-5.14.21-150500.55.52.1 * dtb-cavium-5.14.21-150500.55.52.1 * dtb-nvidia-5.14.21-150500.55.52.1 * kernel-64kb-extra-debuginfo-5.14.21-150500.55.52.1 * dtb-mediatek-5.14.21-150500.55.52.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.52.1 * kernel-64kb-optional-debuginfo-5.14.21-150500.55.52.1 * dtb-allwinner-5.14.21-150500.55.52.1 * kernel-64kb-debuginfo-5.14.21-150500.55.52.1 * cluster-md-kmp-64kb-5.14.21-150500.55.52.1 * dtb-freescale-5.14.21-150500.55.52.1 * dtb-marvell-5.14.21-150500.55.52.1 * dtb-rockchip-5.14.21-150500.55.52.1 * dtb-broadcom-5.14.21-150500.55.52.1 * ocfs2-kmp-64kb-5.14.21-150500.55.52.1 * reiserfs-kmp-64kb-5.14.21-150500.55.52.1 * dlm-kmp-64kb-debuginfo-5.14.21-150500.55.52.1 * dtb-exynos-5.14.21-150500.55.52.1 * openSUSE Leap 15.5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.52.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150500.55.52.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * kernel-default-base-5.14.21-150500.55.52.1.150500.6.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150500.55.52.1 * kernel-default-debugsource-5.14.21-150500.55.52.1 * Basesystem Module 15-SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.52.1 * Basesystem Module 15-SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.52.1 * kernel-64kb-devel-5.14.21-150500.55.52.1 * kernel-64kb-debuginfo-5.14.21-150500.55.52.1 * kernel-64kb-debugsource-5.14.21-150500.55.52.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150500.55.52.1 * Basesystem Module 15-SP5 (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.52.1.150500.6.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-5.14.21-150500.55.52.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.52.1 * kernel-default-debuginfo-5.14.21-150500.55.52.1 * kernel-default-debugsource-5.14.21-150500.55.52.1 * Basesystem Module 15-SP5 (noarch) * kernel-devel-5.14.21-150500.55.52.1 * kernel-macros-5.14.21-150500.55.52.1 * Basesystem Module 15-SP5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.52.1 * Basesystem Module 15-SP5 (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.52.1 * kernel-zfcpdump-debugsource-5.14.21-150500.55.52.1 * Development Tools Module 15-SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.52.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kernel-syms-5.14.21-150500.55.52.1 * kernel-obs-build-5.14.21-150500.55.52.1 * kernel-obs-build-debugsource-5.14.21-150500.55.52.1 * Development Tools Module 15-SP5 (noarch) * kernel-source-5.14.21-150500.55.52.1 * Legacy Module 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.52.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * reiserfs-kmp-default-5.14.21-150500.55.52.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.52.1 * kernel-default-debuginfo-5.14.21-150500.55.52.1 * kernel-default-debugsource-5.14.21-150500.55.52.1 * SUSE Linux Enterprise Live Patching 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.52.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_11-debugsource-1-150500.11.3.1 * kernel-default-livepatch-5.14.21-150500.55.52.1 * kernel-default-debugsource-5.14.21-150500.55.52.1 * kernel-default-livepatch-devel-5.14.21-150500.55.52.1 * kernel-livepatch-5_14_21-150500_55_52-default-1-150500.11.3.1 * kernel-livepatch-5_14_21-150500_55_52-default-debuginfo-1-150500.11.3.1 * kernel-default-debuginfo-5.14.21-150500.55.52.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.52.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.52.1 * cluster-md-kmp-default-5.14.21-150500.55.52.1 * dlm-kmp-default-5.14.21-150500.55.52.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.52.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.52.1 * gfs2-kmp-default-5.14.21-150500.55.52.1 * ocfs2-kmp-default-5.14.21-150500.55.52.1 * kernel-default-debuginfo-5.14.21-150500.55.52.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.52.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (nosrc) * kernel-default-5.14.21-150500.55.52.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (nosrc) * kernel-default-5.14.21-150500.55.52.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * kernel-default-extra-5.14.21-150500.55.52.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.52.1 * kernel-default-debuginfo-5.14.21-150500.55.52.1 * kernel-default-debugsource-5.14.21-150500.55.52.1 ## References: * https://www.suse.com/security/cve/CVE-2019-25162.html * https://www.suse.com/security/cve/CVE-2021-46923.html * https://www.suse.com/security/cve/CVE-2021-46924.html * https://www.suse.com/security/cve/CVE-2021-46932.html * https://www.suse.com/security/cve/CVE-2023-28746.html * https://www.suse.com/security/cve/CVE-2023-5197.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52429.html * https://www.suse.com/security/cve/CVE-2023-52439.html * https://www.suse.com/security/cve/CVE-2023-52443.html * https://www.suse.com/security/cve/CVE-2023-52445.html * https://www.suse.com/security/cve/CVE-2023-52447.html * https://www.suse.com/security/cve/CVE-2023-52448.html * https://www.suse.com/security/cve/CVE-2023-52449.html * https://www.suse.com/security/cve/CVE-2023-52451.html * https://www.suse.com/security/cve/CVE-2023-52452.html * https://www.suse.com/security/cve/CVE-2023-52456.html * https://www.suse.com/security/cve/CVE-2023-52457.html * https://www.suse.com/security/cve/CVE-2023-52463.html * https://www.suse.com/security/cve/CVE-2023-52464.html * https://www.suse.com/security/cve/CVE-2023-52475.html * https://www.suse.com/security/cve/CVE-2023-52478.html * https://www.suse.com/security/cve/CVE-2023-6817.html * https://www.suse.com/security/cve/CVE-2024-0607.html * https://www.suse.com/security/cve/CVE-2024-1151.html * https://www.suse.com/security/cve/CVE-2024-23849.html * https://www.suse.com/security/cve/CVE-2024-23850.html * https://www.suse.com/security/cve/CVE-2024-23851.html * https://www.suse.com/security/cve/CVE-2024-25744.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26586.html * https://www.suse.com/security/cve/CVE-2024-26589.html * https://www.suse.com/security/cve/CVE-2024-26591.html * https://www.suse.com/security/cve/CVE-2024-26593.html * https://www.suse.com/security/cve/CVE-2024-26595.html * https://www.suse.com/security/cve/CVE-2024-26598.html * https://www.suse.com/security/cve/CVE-2024-26602.html * https://www.suse.com/security/cve/CVE-2024-26603.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://bugzilla.suse.com/show_bug.cgi?id=1194869 * https://bugzilla.suse.com/show_bug.cgi?id=1206453 * https://bugzilla.suse.com/show_bug.cgi?id=1209412 * https://bugzilla.suse.com/show_bug.cgi?id=1213456 * https://bugzilla.suse.com/show_bug.cgi?id=1216776 * https://bugzilla.suse.com/show_bug.cgi?id=1217927 * https://bugzilla.suse.com/show_bug.cgi?id=1218195 * https://bugzilla.suse.com/show_bug.cgi?id=1218216 * https://bugzilla.suse.com/show_bug.cgi?id=1218450 * https://bugzilla.suse.com/show_bug.cgi?id=1218527 * https://bugzilla.suse.com/show_bug.cgi?id=1218663 * https://bugzilla.suse.com/show_bug.cgi?id=1218915 * https://bugzilla.suse.com/show_bug.cgi?id=1219126 * https://bugzilla.suse.com/show_bug.cgi?id=1219127 * https://bugzilla.suse.com/show_bug.cgi?id=1219141 * https://bugzilla.suse.com/show_bug.cgi?id=1219146 * https://bugzilla.suse.com/show_bug.cgi?id=1219295 * https://bugzilla.suse.com/show_bug.cgi?id=1219443 * https://bugzilla.suse.com/show_bug.cgi?id=1219653 * https://bugzilla.suse.com/show_bug.cgi?id=1219827 * https://bugzilla.suse.com/show_bug.cgi?id=1219835 * https://bugzilla.suse.com/show_bug.cgi?id=1219839 * https://bugzilla.suse.com/show_bug.cgi?id=1219840 * https://bugzilla.suse.com/show_bug.cgi?id=1219934 * https://bugzilla.suse.com/show_bug.cgi?id=1220003 * https://bugzilla.suse.com/show_bug.cgi?id=1220009 * https://bugzilla.suse.com/show_bug.cgi?id=1220021 * https://bugzilla.suse.com/show_bug.cgi?id=1220030 * https://bugzilla.suse.com/show_bug.cgi?id=1220106 * https://bugzilla.suse.com/show_bug.cgi?id=1220140 * https://bugzilla.suse.com/show_bug.cgi?id=1220187 * https://bugzilla.suse.com/show_bug.cgi?id=1220238 * https://bugzilla.suse.com/show_bug.cgi?id=1220240 * https://bugzilla.suse.com/show_bug.cgi?id=1220241 * https://bugzilla.suse.com/show_bug.cgi?id=1220243 * https://bugzilla.suse.com/show_bug.cgi?id=1220250 * https://bugzilla.suse.com/show_bug.cgi?id=1220251 * https://bugzilla.suse.com/show_bug.cgi?id=1220253 * https://bugzilla.suse.com/show_bug.cgi?id=1220254 * https://bugzilla.suse.com/show_bug.cgi?id=1220255 * https://bugzilla.suse.com/show_bug.cgi?id=1220257 * https://bugzilla.suse.com/show_bug.cgi?id=1220267 * https://bugzilla.suse.com/show_bug.cgi?id=1220277 * https://bugzilla.suse.com/show_bug.cgi?id=1220317 * https://bugzilla.suse.com/show_bug.cgi?id=1220326 * https://bugzilla.suse.com/show_bug.cgi?id=1220328 * https://bugzilla.suse.com/show_bug.cgi?id=1220330 * https://bugzilla.suse.com/show_bug.cgi?id=1220335 * https://bugzilla.suse.com/show_bug.cgi?id=1220344 * https://bugzilla.suse.com/show_bug.cgi?id=1220348 * https://bugzilla.suse.com/show_bug.cgi?id=1220350 * https://bugzilla.suse.com/show_bug.cgi?id=1220364 * https://bugzilla.suse.com/show_bug.cgi?id=1220392 * https://bugzilla.suse.com/show_bug.cgi?id=1220393 * https://bugzilla.suse.com/show_bug.cgi?id=1220398 * https://bugzilla.suse.com/show_bug.cgi?id=1220409 * https://bugzilla.suse.com/show_bug.cgi?id=1220444 * https://bugzilla.suse.com/show_bug.cgi?id=1220457 * https://bugzilla.suse.com/show_bug.cgi?id=1220459 * https://bugzilla.suse.com/show_bug.cgi?id=1220649 * https://bugzilla.suse.com/show_bug.cgi?id=1220796 * https://bugzilla.suse.com/show_bug.cgi?id=1220825 * https://jira.suse.com/browse/PED-7618

1 0

SUSE-SU-2024:0855-1: important: Security update for the Linux Kernel
by OPENSUSE-UPDATES 12 Mar '24

12 Mar '24

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2024:0855-1 Rating: important References: * bsc#1194869 * bsc#1206453 * bsc#1209412 * bsc#1216776 * bsc#1217927 * bsc#1218195 * bsc#1218216 * bsc#1218450 * bsc#1218527 * bsc#1218562 * bsc#1218663 * bsc#1218915 * bsc#1219126 * bsc#1219127 * bsc#1219141 * bsc#1219146 * bsc#1219295 * bsc#1219443 * bsc#1219653 * bsc#1219827 * bsc#1219835 * bsc#1219839 * bsc#1219840 * bsc#1219934 * bsc#1220003 * bsc#1220009 * bsc#1220021 * bsc#1220030 * bsc#1220106 * bsc#1220140 * bsc#1220187 * bsc#1220238 * bsc#1220240 * bsc#1220241 * bsc#1220243 * bsc#1220250 * bsc#1220251 * bsc#1220253 * bsc#1220254 * bsc#1220255 * bsc#1220257 * bsc#1220267 * bsc#1220277 * bsc#1220317 * bsc#1220325 * bsc#1220326 * bsc#1220328 * bsc#1220330 * bsc#1220335 * bsc#1220344 * bsc#1220348 * bsc#1220350 * bsc#1220364 * bsc#1220392 * bsc#1220393 * bsc#1220398 * bsc#1220409 * bsc#1220433 * bsc#1220444 * bsc#1220457 * bsc#1220459 * bsc#1220469 * bsc#1220649 * bsc#1220735 * bsc#1220736 * bsc#1220796 * bsc#1220825 * bsc#1220845 * bsc#1220848 * bsc#1220917 * bsc#1220930 * bsc#1220931 * bsc#1220933 * jsc#PED-7618 Cross-References: * CVE-2019-25162 * CVE-2021-46923 * CVE-2021-46924 * CVE-2021-46932 * CVE-2021-46934 * CVE-2021-47083 * CVE-2022-48627 * CVE-2022-48628 * CVE-2023-5197 * CVE-2023-52340 * CVE-2023-52429 * CVE-2023-52439 * CVE-2023-52443 * CVE-2023-52445 * CVE-2023-52447 * CVE-2023-52448 * CVE-2023-52449 * CVE-2023-52451 * CVE-2023-52452 * CVE-2023-52456 * CVE-2023-52457 * CVE-2023-52462 * CVE-2023-52463 * CVE-2023-52464 * CVE-2023-52467 * CVE-2023-52475 * CVE-2023-52478 * CVE-2023-52482 * CVE-2023-52530 * CVE-2023-52531 * CVE-2023-52559 * CVE-2023-6270 * CVE-2023-6817 * CVE-2024-0607 * CVE-2024-1151 * CVE-2024-23849 * CVE-2024-23850 * CVE-2024-23851 * CVE-2024-25744 * CVE-2024-26585 * CVE-2024-26586 * CVE-2024-26589 * CVE-2024-26591 * CVE-2024-26593 * CVE-2024-26595 * CVE-2024-26598 * CVE-2024-26602 * CVE-2024-26603 * CVE-2024-26607 * CVE-2024-26622 CVSS scores: * CVE-2019-25162 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2021-46923 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2021-46924 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2021-46932 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2021-46934 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2021-47083 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2022-48627 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2022-48628 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2023-5197 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2023-5197 ( NVD ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52429 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52429 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52439 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52443 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52445 ( SUSE ): 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52447 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52451 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2023-52452 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-52456 ( SUSE ): 4.0 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52457 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2023-52462 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2023-52463 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52464 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-52467 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52475 ( SUSE ): 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52478 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2023-52482 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2023-52530 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52531 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52559 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6270 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6270 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6817 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6817 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-0607 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2024-0607 ( NVD ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-1151 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23849 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-23849 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23850 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23850 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23851 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-23851 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-25744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26586 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2024-26591 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26593 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-26595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26602 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-26603 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26607 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 50 vulnerabilities, contains one feature and has 23 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-6270: Fixed a use-after-free bug in aoecmd_cfg_pkts (bsc#1218562). * CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933). * CVE-2023-52462: Fixed a security check for attempt to corrupt spilled pointer (bsc#1220325). * CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433). * CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328). * CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930). * CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736). * CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach (bsc#1220254). * CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255). * CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187). * CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295). * CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915). * CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195). * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825). * CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126). * CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257). * CVE-2023-52457: Fixed skipped resource freeing if pm_runtime_resume_and_get() failed (bsc#1220350). * CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364). * CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250). * CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251). * CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238). * CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457). * CVE-2024-26598: Fixed potential UAF in LPI translation cache (bsc#1220326). * CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335). * CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241). * CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140). * CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240). * CVE-2024-26593: Fixed block process call transactions (bsc#1220009). * CVE-2024-26586: Fixed stack corruption (bsc#1220243). * CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344). * CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330) * CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253). * CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835). * CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216). * CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127). * CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm- table.c (bsc#1219827). * CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146). The following non-security bugs were fixed: * ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events (git-fixes). * ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A (git-fixes). * ACPI: extlog: fix NULL pointer dereference check (git-fixes). * ACPI: resource: Add ASUS model S5402ZA to quirks (git-fixes). * ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA (git-fixes). * ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA (git-fixes). * ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3 (git-fixes). * ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2 (git-fixes). * ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 AMD version) (git-fixes). * ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (git-fixes). * afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (git- fixes). * afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() (git-fixes). * afs: Hide silly-rename files from userspace (git-fixes). * afs: Increase buffer size in afs_update_volume_status() (git-fixes). * ahci: asm1166: correct count of reported ports (git-fixes). * ALSA: Drop leftover snd-rtctimer stuff from Makefile (git-fixes). * ALSA: firewire-lib: fix to check cycle continuity (git-fixes). * ALSA: hda/conexant: Add quirk for SWS JS201D (git-fixes). * ALSA: hda/realtek: Apply headset jack quirk for non-bass alc287 thinkpads (git-fixes). * ALSA: hda/realtek: cs35l41: Fix device ID / model name (git-fixes). * ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table (git- fixes). * ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL (git-fixes). * ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx (git-fixes). * ALSA: hda/realtek: fix mute/micmute LED For HP mt645 (git-fixes). * ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power (git-fixes). * ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32 (git-fixes). * ALSA: usb-audio: Add a quirk for Yamaha YIT-W12TX transmitter (git-fixes). * ALSA: usb-audio: Add delay quirk for MOTU M Series 2nd revision (git-fixes). * ALSA: usb-audio: add quirk for RODE NT-USB+ (git-fixes). * ALSA: usb-audio: Check presence of valid altsetting control (git-fixes). * ALSA: usb-audio: Ignore clock selector errors for single connection (git- fixes). * ALSA: usb-audio: More relaxed check of MIDI jack names (git-fixes). * ALSA: usb-audio: Sort quirk table entries (git-fixes). * arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD (bsc#1219443) * arm64: entry: Preserve/restore X29 even for compat tasks (bsc#1219443) * arm64: entry: Simplify tramp_alias macro and tramp_exit routine (bsc#1219443) * arm64: errata: Add Cortex-A510 speculative unprivileged load (bsc#1219443) Enable workaround. * arm64: errata: Add Cortex-A520 speculative unprivileged load (bsc#1219443) Enable workaround without kABI break. * arm64: errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2 (git-fixes) Enable AMPERE_ERRATUM_AC03_CPU_38 workaround without kABI break * arm64: irq: set the correct node for shadow call stack (git-fixes) * arm64: irq: set the correct node for VMAP stack (git-fixes) * arm64: Rename ARM64_WORKAROUND_2966298 (bsc#1219443) * arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (git- fixes) * ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument (git-fixes). * ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (git-fixes). * ASoC: SOF: IPC3: fix message bounds on ipc ops (git-fixes). * ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 (git-fixes). * atm: idt77252: fix a memleak in open_card_ubr0 (git-fixes). * Bluetooth: Avoid potential use-after-free in hci_error_reset (git-fixes). * Bluetooth: Enforce validation on max value of connection interval (git- fixes). * Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (git-fixes). * Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR (git-fixes). * Bluetooth: hci_sync: Check the correct flag before starting a scan (git- fixes). * Bluetooth: hci_sync: Fix accept_list when attempting to suspend (git-fixes). * Bluetooth: L2CAP: Fix possible multiple reject send (git-fixes). * Bluetooth: qca: Fix wrong event type for patch config command (git-fixes). * bpf: Fix verification of indirect var-off stack access (git-fixes). * bpf: Fix verification of indirect var-off stack access (git-fixes). * bpf: Guard stack limits against 32bit overflow (git-fixes). * bpf: Guard stack limits against 32bit overflow (git-fixes). * bpf: Minor logging improvement (bsc#1220257). * bus: moxtet: Add spi device table (git-fixes). * cachefiles: fix memory leak in cachefiles_add_cache() (bsc#1220267). * can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (git-fixes). * crypto: api - Disallow identical driver names (git-fixes). * crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked (git-fixes). * crypto: octeontx2 - Fix cptvf driver cleanup (git-fixes). * crypto: stm32/crc32 - fix parsing list of devices (git-fixes). * dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (git-fixes). * dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read (git-fixes). * dmaengine: fsl-qdma: increase size of 'irq_name' (git-fixes). * dmaengine: fsl-qdma: init irq after reg initialization (git-fixes). * dmaengine: ptdma: use consistent DMA masks (git-fixes). * dmaengine: shdma: increase size of 'dev_id' (git-fixes). * dmaengine: ti: edma: Add some null pointer checks to the edma_probe (git- fixes). * driver core: Fix device_link_flag_is_sync_state_only() (git-fixes). * drm/amd/display: Fix memory leak in dm_sw_fini() (git-fixes). * drm/amd/display: Fix possible buffer overflow in 'find_dcfclk_for_voltage()' (git-fixes). * drm/amd/display: Fix possible NULL dereference on device remove/driver unload (git-fixes). * drm/amd/display: Increase frame-larger-than for all display_mode_vba files (git-fixes). * drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz (git-fixes). * drm/amd/display: Preserve original aspect ratio in create stream (git- fixes). * drm/amdgpu: reset gpu for s3 suspend abort case (git-fixes). * drm/amdgpu: skip to program GFXDEC registers for suspend abort (git-fixes). * drm/amdgpu/display: Initialize gamma correction mode variable in dcn30_get_gamcor_current() (git-fixes). * drm/buddy: fix range bias (git-fixes). * drm/crtc: fix uninitialized variable use even harder (git-fixes). * drm/i915/gvt: Fix uninitialized variable in handle_mmio() (git-fixes). * drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case (git-fixes). * drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup (git- fixes). * drm/msms/dp: fixed link clock divider bits be over written in BPC unknown case (git-fixes). * drm/prime: Support page array >= 4GB (git-fixes). * drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set (git-fixes). * drm/ttm: Fix an invalid freeing on already freed page in error path (git- fixes). * efi: Do not add memblocks for soft-reserved memory (git-fixes). * efi: runtime: Fix potential overflow of soft-reserved region size (git- fixes). * efi/capsule-loader: fix incorrect allocation size (git-fixes). * fbcon: always restore the old font data in fbcon_do_set_font() (git-fixes). * fbdev: savage: Error out if pixclock equals zero (git-fixes). * fbdev: sis: Error out if pixclock equals zero (git-fixes). * firewire: core: send bus reset promptly on gap count error (git-fixes). * fs: dlm: fix build with CONFIG_IPV6 disabled (git-fixes). * fs: JFS: UBSAN: array-index-out-of-bounds in dbAdjTree (git-fixes). * gpio: 74x164: Enable output pins after registers are reset (git-fixes). * gpio: fix resource unwinding order in error path (git-fixes). * gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 (git-fixes). * gpiolib: Fix the error path order in gpiochip_add_data_with_key() (git- fixes). * HID: apple: Add 2021 magic keyboard FN key mapping (git-fixes). * HID: apple: Add support for the 2021 Magic Keyboard (git-fixes). * HID: wacom: Do not register input devices until after hid_hw_start (git- fixes). * HID: wacom: generic: Avoid reporting a serial of '0' to userspace (git- fixes). * hwmon: (aspeed-pwm-tacho) mutex for tach reading (git-fixes). * hwmon: (coretemp) Enlarge per package core count limit (git-fixes). * hwmon: (coretemp) Fix bogus core_id to attr name mapping (git-fixes). * hwmon: (coretemp) Fix out-of-bounds memory access (git-fixes). * i2c: i801: Fix block process call transactions (git-fixes). * i2c: i801: Remove i801_set_block_buffer_mode (git-fixes). * i2c: imx: Add timer for handling the stop condition (git-fixes). * i2c: imx: when being a target, mark the last read as processed (git-fixes). * i3c: master: cdns: Update maximum prescaler value for i2c clock (git-fixes). * IB/hfi1: Fix a memleak in init_credit_return (git-fixes) * IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (git-fixes) * iio: accel: bma400: Fix a compilation problem (git-fixes). * iio: adc: ad7091r: Set alert bit in config register (git-fixes). * iio: core: fix memleak in iio_device_register_sysfs (git-fixes). * iio: hid-sensor-als: Return 0 for HID_USAGE_SENSOR_TIME_TIMESTAMP (git- fixes). * iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC (git-fixes). * Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table (git-fixes). * Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table (git-fixes). * Input: i8042 - add quirk for Fujitsu Lifebook A574/H (git-fixes). * Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU (git-fixes). * Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr() (git-fixes). * Input: pm8941-powerkey - fix debounce on gen2+ PMICs (git-fixes). * Input: pm8941-pwrkey - add software key press debouncing support (git- fixes). * Input: pm8941-pwrkey - add support for PON GEN3 base addresses (git-fixes). * Input: xpad - add Lenovo Legion Go controllers (git-fixes). * Input: xpad - add Lenovo Legion Go controllers (git-fixes). * irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update (git-fixes). * irqchip/irq-brcmstb-l2: Add write memory barrier before exit (git-fixes). * jfs: fix array-index-out-of-bounds in dbAdjTree (git-fixes). * jfs: fix array-index-out-of-bounds in diNewExt (git-fixes). * jfs: fix slab-out-of-bounds Read in dtSearch (git-fixes). * jfs: fix uaf in jfs_evict_inode (git-fixes). * kbuild: Fix changing ELF file type for output of gen_btf for big endian (git-fixes). * KVM: s390: fix cc for successful PQAP (git-fixes bsc#1219839). * KVM: s390: fix setting of fpc register (git-fixes bsc#1220392). * KVM: s390: vsie: fix race during shadow creation (git-fixes bsc#1220393). * KVM: VMX: Move VERW closer to VMentry for MDS mitigation (git-fixes). * KVM: VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (git- fixes). * lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (git-commit). * lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (git-fixes). * leds: trigger: panic: Do not register panic notifier if creating the trigger failed (git-fixes). * lib/stackdepot: add depot_fetch_stack helper (jsc-PED#7423). * lib/stackdepot: add refcount for records (jsc-PED#7423). * lib/stackdepot: Fix first entry having a 0-handle (jsc-PED#7423). * lib/stackdepot: Move stack_record struct definition into the header (jsc- PED#7423). * libsubcmd: Fix memory leak in uniq() (git-fixes). * md: Do not ignore suspended array in md_check_recovery() (git-fixes). * md: do not leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() (git-fixes). * md: introduce md_ro_state (git-fixes). * md: Make sure md_do_sync() will set MD_RECOVERY_DONE (git-fixes). * md: Whenassemble the array, consult the superblock of the freshest device (git-fixes). * md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (git-fixes). * md/raid5: release batch_last before waiting for another stripe_head (git- fixes). * md/raid6: use valid sector values to determine if an I/O should wait on the reshape (git-fixes). * media: ddbridge: fix an error code problem in ddb_probe (git-fixes). * media: ir_toy: fix a memleak in irtoy_tx (git-fixes). * media: rc: bpf attach/detach requires write permission (git-fixes). * media: rockchip: rga: fix swizzling for RGB formats (git-fixes). * media: stk1160: Fixed high volume of stk1160_dbg messages (git-fixes). * mfd: syscon: Fix null pointer dereference in of_syscon_register() (git- fixes). * mm,page_owner: Display all stacks and their count (jsc-PED#7423). * mm,page_owner: Filter out stacks by a threshold (jsc-PED#7423). * mm,page_owner: Implement the tracking of the stacks count (jsc-PED#7423). * mm,page_owner: Maintain own list of stack_records structs (jsc-PED#7423). * mm,page_owner: Update Documentation regarding page_owner_stacks (jsc- PED#7423). * mm: memory-failure: fix potential unexpected return value from unpoison_memory() (git-fixes). * mm/hwpoison: fix unpoison_memory() (bsc#1218663). * mm/hwpoison: mf_mutex for soft offline and unpoison (bsc#1218663). * mm/hwpoison: remove MF_MSG_BUDDY_2ND and MF_MSG_POISONED_HUGE (bsc#1218663). * mmc: core: Fix eMMC initialization with 1-bit bus connection (git-fixes). * mmc: core: Use mrq.sbc in close-ended ffu (git-fixes). * mmc: mmc_spi: remove custom DMA mapped buffers (git-fixes). * mmc: sdhci-xenon: add timeout for PHY init complete (git-fixes). * mmc: sdhci-xenon: fix PHY init clock stability (git-fixes). * mmc: slot-gpio: Allow non-sleeping GPIO ro (git-fixes). * modpost: trim leading spaces when processing source files list (git-fixes). * mtd: spinand: gigadevice: Fix the get ecc status issue (git-fixes). * net: usb: dm9601: fix wrong return value in dm9601_mdio_read (git-fixes). * net: usb: dm9601: fix wrong return value in dm9601_mdio_read (git-fixes). * netfs, fscache: Prevent Oops in fscache_put_cache() (bsc#1220003). * nilfs2: fix data corruption in dsync block recovery for small block sizes (git-fixes). * nilfs2: replace WARN_ONs for invalid DAT metadata block requests (git- fixes). * nouveau: fix function cast warnings (git-fixes). * nouveau/svm: fix kvcalloc() argument order (git-fixes). * ntfs: check overflow when iterating ATTR_RECORDs (git-fixes). * ntfs: fix use-after-free in ntfs_attr_find() (git-fixes). * nvme-fabrics: fix I/O connect error handling (git-fixes). * nvme-host: fix the updating of the firmware version (git-fixes). * PCI: Add no PM reset quirk for NVIDIA Spectrum devices (git-fixes). * PCI: Add PCI_HEADER_TYPE_MFD definition (bsc#1220021). * PCI: Fix 64GT/s effective data rate calculation (git-fixes). * PCI: Only override AMD USB controller if required (git-fixes). * PCI: switchtec: Fix stdev_release() crash after surprise hot remove (git- fixes). * PCI/AER: Decode Requester ID when no error info found (git-fixes). * platform/x86: thinkpad_acpi: Only update profile if successfully converted (git-fixes). * platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet (git-fixes). * platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names (git-fixes). * PM: core: Remove unnecessary (void *) conversions (git-fixes). * PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (git-fixes). * PNP: ACPI: fix fortify warning (git-fixes). * power: supply: bq27xxx-i2c: Do not free non existing IRQ (git-fixes). * powerpc: add crtsavres.o to always-y instead of extra-y (bsc#1194869). * powerpc: Do not include lppaca.h in paca.h (bsc#1194869). * powerpc/64: Set task pt_regs->link to the LR value on scv entry (bsc#1194869). * powerpc/powernv: Fix fortify source warnings in opal-prd.c (bsc#1194869). * powerpc/pseries: Add a clear modifier to ibm,pa/pi-features parser (bsc#1220348). * powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT (bsc#1194869). * powerpc/pseries: Set CPU_FTR_DBELL according to ibm,pi-features (bsc#1220348). * powerpc/watchpoint: Disable pagefaults when getting user instruction (bsc#1194869). * powerpc/watchpoints: Annotate atomic context in more places (bsc#1194869). * powerpc/watchpoints: Disable preemption in thread_change_pc() (bsc#1194869). * pstore/ram: Fix crash when setting number of cpus to an odd number (git- fixes). * RAS: Introduce a FRU memory poison manager (jsc#PED-7618). * RAS/AMD/ATL: Add MI300 row retirement support (jsc#PED-7618). * RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2() (git-fixes). * RDMA/bnxt_re: Add a missing check in bnxt_qplib_query_srq (git-fixes) * RDMA/bnxt_re: Return error for SRQ resize (git-fixes) * RDMA/core: Fix uninit-value access in ib_get_eth_speed() (bsc#1219934). * RDMA/core: Get IB width and speed from netdev (bsc#1219934). * RDMA/irdma: Add AE for too many RNRS (git-fixes) * RDMA/irdma: Fix KASAN issue with tasklet (git-fixes) * RDMA/irdma: Set the CQ read threshold for GEN 1 (git-fixes) * RDMA/irdma: Validate max_send_wr and max_recv_wr (git-fixes) * RDMA/qedr: Fix qedr_create_user_qp error flow (git-fixes) * RDMA/srpt: fix function pointer cast warnings (git-fixes) * RDMA/srpt: Support specifying the srpt_service_guid parameter (git-fixes) * regulator: core: Only increment use_count when enable_count changes (git- fixes). * regulator: pwm-regulator: Add validity checks in continuous .get_voltage (git-fixes). * Revert "drm/amd: flush any delayed gfxoff on suspend entry" (git-fixes). * Revert "drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz" (git- fixes). * Revert "drm/amd/pm: resolve reboot exception for si oland" (git-fixes). * ring-buffer: Clean ring_buffer_poll_wait() error return (git-fixes). * s390: use the correct count for __iowrite64_copy() (git-fixes bsc#1220317). * s390/qeth: Fix potential loss of L3-IP@ in case of network issues (git-fixes bsc#1219840). * sched/membarrier: reduce the ability to hammer on sys_membarrier (git- fixes). * scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (git-fixes). * scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (git-fixes). * scsi: fnic: Move fnic_fnic_flush_tx() to a work queue (git-fixes bsc#1219141). * scsi: hisi_sas: Prevent parallel FLR and controller reset (git-fixes). * scsi: ibmvfc: Limit max hw queues by num_online_cpus() (bsc#1220106). * scsi: ibmvfc: Open-code reset loop for target reset (bsc#1220106). * scsi: isci: Fix an error code problem in isci_io_request_build() (git- fixes). * scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (bsc#1220021). * scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (bsc#1220021). * scsi: lpfc: Change lpfc_vport fc_flag member into a bitmask (bsc#1220021). * scsi: lpfc: Change lpfc_vport load_flag member into a bitmask (bsc#1220021). * scsi: lpfc: Change nlp state statistic counters into atomic_t (bsc#1220021). * scsi: lpfc: Copyright updates for 14.4.0.0 patches (bsc#1220021). * scsi: lpfc: Fix failure to delete vports when discovery is in progress (bsc#1220021). * scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (bsc#1220021). * scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() (bsc#1220021). * scsi: lpfc: Move handling of reset congestion statistics events (bsc#1220021). * scsi: lpfc: Protect vport fc_nodes list with an explicit spin lock (bsc#1220021). * scsi: lpfc: Remove D_ID swap log message from trace event logger (bsc#1220021). * scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (bsc#1220021). * scsi: lpfc: Remove shost_lock protection for fc_host_port shost APIs (bsc#1220021). * scsi: lpfc: Replace deprecated strncpy() with strscpy() (bsc#1220021). * scsi: lpfc: Save FPIN frequency statistics upon receipt of peer cgn notifications (bsc#1220021). * scsi: lpfc: Update lpfc version to 14.4.0.0 (bsc#1220021). * scsi: lpfc: Use PCI_HEADER_TYPE_MFD instead of literal (bsc#1220021). * scsi: lpfc: Use sg_dma_len() API to get struct scatterlist's length (bsc#1220021). * scsi: mpi3mr: Refresh sdev queue depth after controller reset (git-fixes). * scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" (git- fixes bsc#1219141). * serial: 8250: Remove serial_rs485 sanitization from em485 (git-fixes). * spi-mxs: Fix chipselect glitch (git-fixes). * spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected (git- fixes). * spi: ppc4xx: Drop write-only variable (git-fixes). * spi: sh-msiof: avoid integer overflow in constants (git-fixes). * staging: iio: ad5933: fix type mismatch regression (git-fixes). * tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd (bsc#1218450). * tomoyo: fix UAF write bug in tomoyo_write_control() (git-fixes). * topology: Fix up build warning in topology_is_visible() (jsc#PED-7618). * topology/sysfs: Add format parameter to macro defining "show" functions for proc (jsc#PED-7618). * topology/sysfs: Add PPIN in sysfs under cpu topology (jsc#PED-7618). * topology/sysfs: Hide PPIN on systems that do not support it (jsc#PED-7618). * tracing: Fix wasted memory in saved_cmdlines logic (git-fixes). * tracing: Inform kmemleak of saved_cmdlines allocation (git-fixes). * tracing/probes: Fix to show a parse error for bad type for $comm (git- fixes). * tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE (git-fixes). * UBSAN: array-index-out-of-bounds in dtSplitRoot (git-fixes). * usb: cdns: readd old API (git-fixes). * usb: cdns3: fix memory double free when handle zero packet (git-fixes). * usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (git- fixes). * usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled (git-fixes). * usb: cdns3: Put the cdns set active part outside the spin lock (git-fixes). * usb: cdnsp: blocked some cdns3 specific code (git-fixes). * usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers (git-fixes). * usb: dwc3: gadget: Do not disconnect if not started (git-fixes). * usb: dwc3: gadget: Handle EP0 request dequeuing properly (git-fixes). * usb: dwc3: gadget: Ignore End Transfer delay on teardown (git-fixes). * usb: dwc3: gadget: Queue PM runtime idle on disconnect event (git-fixes). * usb: dwc3: gadget: Refactor EP0 forced stall/restart into a separate API (git-fixes). * usb: dwc3: gadget: Submit endxfer command if delayed during disconnect (git- fixes). * usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK (git-fixes). * usb: f_mass_storage: forbid async queue when shutdown happen (git-fixes). * usb: f_mass_storage: forbid async queue when shutdown happen (git-fixes). * usb: gadget: core: Add missing kerneldoc for vbus_work (git-fixes). * usb: gadget: core: adjust uevent timing on gadget unbind (git-fixes). * usb: Gadget: core: Help prevent panic during UVC unconfigure (git-fixes). * usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes). * usb: gadget: f_hid: fix report descriptor allocation (git-fixes). * usb: gadget: Fix obscure lockdep violation for udc_mutex (git-fixes). * usb: gadget: Fix use-after-free Read in usb_udc_uevent() (git-fixes). * usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (git-fixes). * usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (git- fixes). * usb: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes). * usb: gadget: udc: core: Prevent soft_connect_store() race (git-fixes). * usb: gadget: udc: Handle gadget_connect failure during bind operation (git- fixes). * usb: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT (bsc#1218527). * usb: hub: Replace hardcoded quirk value with BIT() macro (git-fixes). * usb: hub: Replace hardcoded quirk value with BIT() macro (git-fixes). * usb: roles: do not get/set_role() when usb_role_switch is unregistered (git- fixes). * usb: roles: fix NULL pointer issue when put module's reference (git-fixes). * usb: serial: cp210x: add ID for IMST iM871A-USB (git-fixes). * usb: serial: option: add Fibocom FM101-GL variant (git-fixes). * usb: serial: qcserial: add new usb-id for Dell Wireless DW5826e (git-fixes). * watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 (git- fixes). * wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range (git-fixes). * wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (git-fixes). * wifi: cfg80211: fix missing interfaces when dumping (git-fixes). * wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (git-fixes). * wifi: cfg80211: free beacon_ies when overridden from hidden BSS (git-fixes). * wifi: iwlwifi: Fix some error codes (git-fixes). * wifi: iwlwifi: mvm: avoid baid size integer overflow (git-fixes). * wifi: iwlwifi: uninitialized variable in iwl_acpi_get_ppag_table() (git- fixes). * wifi: mac80211: adding missing drv_mgd_complete_tx() call (git-fixes). * wifi: mac80211: fix race condition on enabling fast-xmit (git-fixes). * wifi: nl80211: reject iftype change with mesh ID change (git-fixes). * wifi: rt2x00: restart beacon queue when hardware reset (git-fixes). * wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices (git-fixes). * wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (git-fixes). * wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (git-fixes). * x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (git-fixes). * x86/bugs: Add asm helpers for executing VERW (git-fixes). * x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (git- fixes). Also add mds_user_clear to kABI severities since it's strictly mitigation related so should be low risk. * x86/cpu: X86_FEATURE_INTEL_PPIN finally had a CPUID bit (jsc#PED-7618). * x86/entry_32: Add VERW just before userspace transition (git-fixes). * x86/entry_64: Add VERW just before userspace transition (git-fixes). * x86/mm: Fix memory encryption features advertisement (bsc#1206453). * xfs: remove unused fields from struct xbtree_ifakeroot (git-fixes). * xfs: short circuit xfs_growfs_data_private() if delta is zero (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-855=1 SUSE-2024-855=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-855=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * kernel-azure-optional-5.14.21-150500.33.37.1 * dlm-kmp-azure-5.14.21-150500.33.37.1 * kernel-azure-debugsource-5.14.21-150500.33.37.1 * kernel-azure-extra-5.14.21-150500.33.37.1 * gfs2-kmp-azure-debuginfo-5.14.21-150500.33.37.1 * kernel-azure-extra-debuginfo-5.14.21-150500.33.37.1 * kernel-azure-livepatch-devel-5.14.21-150500.33.37.1 * gfs2-kmp-azure-5.14.21-150500.33.37.1 * dlm-kmp-azure-debuginfo-5.14.21-150500.33.37.1 * kernel-syms-azure-5.14.21-150500.33.37.1 * cluster-md-kmp-azure-5.14.21-150500.33.37.1 * kernel-azure-debuginfo-5.14.21-150500.33.37.1 * reiserfs-kmp-azure-debuginfo-5.14.21-150500.33.37.1 * cluster-md-kmp-azure-debuginfo-5.14.21-150500.33.37.1 * kernel-azure-devel-5.14.21-150500.33.37.1 * kernel-azure-optional-debuginfo-5.14.21-150500.33.37.1 * reiserfs-kmp-azure-5.14.21-150500.33.37.1 * kselftests-kmp-azure-5.14.21-150500.33.37.1 * kernel-azure-devel-debuginfo-5.14.21-150500.33.37.1 * ocfs2-kmp-azure-debuginfo-5.14.21-150500.33.37.1 * ocfs2-kmp-azure-5.14.21-150500.33.37.1 * kselftests-kmp-azure-debuginfo-5.14.21-150500.33.37.1 * openSUSE Leap 15.5 (aarch64 nosrc x86_64) * kernel-azure-5.14.21-150500.33.37.1 * openSUSE Leap 15.5 (x86_64) * kernel-azure-vdso-debuginfo-5.14.21-150500.33.37.1 * kernel-azure-vdso-5.14.21-150500.33.37.1 * openSUSE Leap 15.5 (noarch) * kernel-source-azure-5.14.21-150500.33.37.1 * kernel-devel-azure-5.14.21-150500.33.37.1 * Public Cloud Module 15-SP5 (aarch64 nosrc x86_64) * kernel-azure-5.14.21-150500.33.37.1 * Public Cloud Module 15-SP5 (aarch64 x86_64) * kernel-azure-devel-debuginfo-5.14.21-150500.33.37.1 * kernel-azure-debugsource-5.14.21-150500.33.37.1 * kernel-azure-devel-5.14.21-150500.33.37.1 * kernel-syms-azure-5.14.21-150500.33.37.1 * kernel-azure-debuginfo-5.14.21-150500.33.37.1 * Public Cloud Module 15-SP5 (noarch) * kernel-source-azure-5.14.21-150500.33.37.1 * kernel-devel-azure-5.14.21-150500.33.37.1 ## References: * https://www.suse.com/security/cve/CVE-2019-25162.html * https://www.suse.com/security/cve/CVE-2021-46923.html * https://www.suse.com/security/cve/CVE-2021-46924.html * https://www.suse.com/security/cve/CVE-2021-46932.html * https://www.suse.com/security/cve/CVE-2021-46934.html * https://www.suse.com/security/cve/CVE-2021-47083.html * https://www.suse.com/security/cve/CVE-2022-48627.html * https://www.suse.com/security/cve/CVE-2022-48628.html * https://www.suse.com/security/cve/CVE-2023-5197.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52429.html * https://www.suse.com/security/cve/CVE-2023-52439.html * https://www.suse.com/security/cve/CVE-2023-52443.html * https://www.suse.com/security/cve/CVE-2023-52445.html * https://www.suse.com/security/cve/CVE-2023-52447.html * https://www.suse.com/security/cve/CVE-2023-52448.html * https://www.suse.com/security/cve/CVE-2023-52449.html * https://www.suse.com/security/cve/CVE-2023-52451.html * https://www.suse.com/security/cve/CVE-2023-52452.html * https://www.suse.com/security/cve/CVE-2023-52456.html * https://www.suse.com/security/cve/CVE-2023-52457.html * https://www.suse.com/security/cve/CVE-2023-52462.html * https://www.suse.com/security/cve/CVE-2023-52463.html * https://www.suse.com/security/cve/CVE-2023-52464.html * https://www.suse.com/security/cve/CVE-2023-52467.html * https://www.suse.com/security/cve/CVE-2023-52475.html * https://www.suse.com/security/cve/CVE-2023-52478.html * https://www.suse.com/security/cve/CVE-2023-52482.html * https://www.suse.com/security/cve/CVE-2023-52530.html * https://www.suse.com/security/cve/CVE-2023-52531.html * https://www.suse.com/security/cve/CVE-2023-52559.html * https://www.suse.com/security/cve/CVE-2023-6270.html * https://www.suse.com/security/cve/CVE-2023-6817.html * https://www.suse.com/security/cve/CVE-2024-0607.html * https://www.suse.com/security/cve/CVE-2024-1151.html * https://www.suse.com/security/cve/CVE-2024-23849.html * https://www.suse.com/security/cve/CVE-2024-23850.html * https://www.suse.com/security/cve/CVE-2024-23851.html * https://www.suse.com/security/cve/CVE-2024-25744.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26586.html * https://www.suse.com/security/cve/CVE-2024-26589.html * https://www.suse.com/security/cve/CVE-2024-26591.html * https://www.suse.com/security/cve/CVE-2024-26593.html * https://www.suse.com/security/cve/CVE-2024-26595.html * https://www.suse.com/security/cve/CVE-2024-26598.html * https://www.suse.com/security/cve/CVE-2024-26602.html * https://www.suse.com/security/cve/CVE-2024-26603.html * https://www.suse.com/security/cve/CVE-2024-26607.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://bugzilla.suse.com/show_bug.cgi?id=1194869 * https://bugzilla.suse.com/show_bug.cgi?id=1206453 * https://bugzilla.suse.com/show_bug.cgi?id=1209412 * https://bugzilla.suse.com/show_bug.cgi?id=1216776 * https://bugzilla.suse.com/show_bug.cgi?id=1217927 * https://bugzilla.suse.com/show_bug.cgi?id=1218195 * https://bugzilla.suse.com/show_bug.cgi?id=1218216 * https://bugzilla.suse.com/show_bug.cgi?id=1218450 * https://bugzilla.suse.com/show_bug.cgi?id=1218527 * https://bugzilla.suse.com/show_bug.cgi?id=1218562 * https://bugzilla.suse.com/show_bug.cgi?id=1218663 * https://bugzilla.suse.com/show_bug.cgi?id=1218915 * https://bugzilla.suse.com/show_bug.cgi?id=1219126 * https://bugzilla.suse.com/show_bug.cgi?id=1219127 * https://bugzilla.suse.com/show_bug.cgi?id=1219141 * https://bugzilla.suse.com/show_bug.cgi?id=1219146 * https://bugzilla.suse.com/show_bug.cgi?id=1219295 * https://bugzilla.suse.com/show_bug.cgi?id=1219443 * https://bugzilla.suse.com/show_bug.cgi?id=1219653 * https://bugzilla.suse.com/show_bug.cgi?id=1219827 * https://bugzilla.suse.com/show_bug.cgi?id=1219835 * https://bugzilla.suse.com/show_bug.cgi?id=1219839 * https://bugzilla.suse.com/show_bug.cgi?id=1219840 * https://bugzilla.suse.com/show_bug.cgi?id=1219934 * https://bugzilla.suse.com/show_bug.cgi?id=1220003 * https://bugzilla.suse.com/show_bug.cgi?id=1220009 * https://bugzilla.suse.com/show_bug.cgi?id=1220021 * https://bugzilla.suse.com/show_bug.cgi?id=1220030 * https://bugzilla.suse.com/show_bug.cgi?id=1220106 * https://bugzilla.suse.com/show_bug.cgi?id=1220140 * https://bugzilla.suse.com/show_bug.cgi?id=1220187 * https://bugzilla.suse.com/show_bug.cgi?id=1220238 * https://bugzilla.suse.com/show_bug.cgi?id=1220240 * https://bugzilla.suse.com/show_bug.cgi?id=1220241 * https://bugzilla.suse.com/show_bug.cgi?id=1220243 * https://bugzilla.suse.com/show_bug.cgi?id=1220250 * https://bugzilla.suse.com/show_bug.cgi?id=1220251 * https://bugzilla.suse.com/show_bug.cgi?id=1220253 * https://bugzilla.suse.com/show_bug.cgi?id=1220254 * https://bugzilla.suse.com/show_bug.cgi?id=1220255 * https://bugzilla.suse.com/show_bug.cgi?id=1220257 * https://bugzilla.suse.com/show_bug.cgi?id=1220267 * https://bugzilla.suse.com/show_bug.cgi?id=1220277 * https://bugzilla.suse.com/show_bug.cgi?id=1220317 * https://bugzilla.suse.com/show_bug.cgi?id=1220325 * https://bugzilla.suse.com/show_bug.cgi?id=1220326 * https://bugzilla.suse.com/show_bug.cgi?id=1220328 * https://bugzilla.suse.com/show_bug.cgi?id=1220330 * https://bugzilla.suse.com/show_bug.cgi?id=1220335 * https://bugzilla.suse.com/show_bug.cgi?id=1220344 * https://bugzilla.suse.com/show_bug.cgi?id=1220348 * https://bugzilla.suse.com/show_bug.cgi?id=1220350 * https://bugzilla.suse.com/show_bug.cgi?id=1220364 * https://bugzilla.suse.com/show_bug.cgi?id=1220392 * https://bugzilla.suse.com/show_bug.cgi?id=1220393 * https://bugzilla.suse.com/show_bug.cgi?id=1220398 * https://bugzilla.suse.com/show_bug.cgi?id=1220409 * https://bugzilla.suse.com/show_bug.cgi?id=1220433 * https://bugzilla.suse.com/show_bug.cgi?id=1220444 * https://bugzilla.suse.com/show_bug.cgi?id=1220457 * https://bugzilla.suse.com/show_bug.cgi?id=1220459 * https://bugzilla.suse.com/show_bug.cgi?id=1220469 * https://bugzilla.suse.com/show_bug.cgi?id=1220649 * https://bugzilla.suse.com/show_bug.cgi?id=1220735 * https://bugzilla.suse.com/show_bug.cgi?id=1220736 * https://bugzilla.suse.com/show_bug.cgi?id=1220796 * https://bugzilla.suse.com/show_bug.cgi?id=1220825 * https://bugzilla.suse.com/show_bug.cgi?id=1220845 * https://bugzilla.suse.com/show_bug.cgi?id=1220848 * https://bugzilla.suse.com/show_bug.cgi?id=1220917 * https://bugzilla.suse.com/show_bug.cgi?id=1220930 * https://bugzilla.suse.com/show_bug.cgi?id=1220931 * https://bugzilla.suse.com/show_bug.cgi?id=1220933 * https://jira.suse.com/browse/PED-7618

1 0

SUSE-SU-2024:0834-1: important: Security update for sudo
by OPENSUSE-UPDATES 12 Mar '24

12 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0834-1 Rating: important References: * bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: * CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026). Fixed issues introduced by first patches for CVE-2023-42465 (bsc#1220389). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-834=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-834=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-834=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-834=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-834=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-834=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-834=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-834=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * sudo-devel-1.9.5p2-150300.3.33.1 * sudo-1.9.5p2-150300.3.33.1 * sudo-plugin-python-1.9.5p2-150300.3.33.1 * sudo-debugsource-1.9.5p2-150300.3.33.1 * sudo-debuginfo-1.9.5p2-150300.3.33.1 * sudo-plugin-python-debuginfo-1.9.5p2-150300.3.33.1 * sudo-test-1.9.5p2-150300.3.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * sudo-devel-1.9.5p2-150300.3.33.1 * sudo-1.9.5p2-150300.3.33.1 * sudo-plugin-python-1.9.5p2-150300.3.33.1 * sudo-debugsource-1.9.5p2-150300.3.33.1 * sudo-debuginfo-1.9.5p2-150300.3.33.1 * sudo-plugin-python-debuginfo-1.9.5p2-150300.3.33.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * sudo-devel-1.9.5p2-150300.3.33.1 * sudo-1.9.5p2-150300.3.33.1 * sudo-plugin-python-1.9.5p2-150300.3.33.1 * sudo-debugsource-1.9.5p2-150300.3.33.1 * sudo-debuginfo-1.9.5p2-150300.3.33.1 * sudo-plugin-python-debuginfo-1.9.5p2-150300.3.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * sudo-devel-1.9.5p2-150300.3.33.1 * sudo-1.9.5p2-150300.3.33.1 * sudo-plugin-python-1.9.5p2-150300.3.33.1 * sudo-debugsource-1.9.5p2-150300.3.33.1 * sudo-debuginfo-1.9.5p2-150300.3.33.1 * sudo-plugin-python-debuginfo-1.9.5p2-150300.3.33.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * sudo-devel-1.9.5p2-150300.3.33.1 * sudo-1.9.5p2-150300.3.33.1 * sudo-plugin-python-1.9.5p2-150300.3.33.1 * sudo-debugsource-1.9.5p2-150300.3.33.1 * sudo-debuginfo-1.9.5p2-150300.3.33.1 * sudo-plugin-python-debuginfo-1.9.5p2-150300.3.33.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sudo-debugsource-1.9.5p2-150300.3.33.1 * sudo-debuginfo-1.9.5p2-150300.3.33.1 * sudo-1.9.5p2-150300.3.33.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sudo-debugsource-1.9.5p2-150300.3.33.1 * sudo-debuginfo-1.9.5p2-150300.3.33.1 * sudo-1.9.5p2-150300.3.33.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sudo-debugsource-1.9.5p2-150300.3.33.1 * sudo-debuginfo-1.9.5p2-150300.3.33.1 * sudo-1.9.5p2-150300.3.33.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1219026 * https://bugzilla.suse.com/show_bug.cgi?id=1220389

1 0

SUSE-RU-2024:0837-1: moderate: Recommended update for selinux-policy
by OPENSUSE-UPDATES 12 Mar '24

12 Mar '24

# Recommended update for selinux-policy Announcement ID: SUSE-RU-2024:0837-1 Rating: moderate References: * bsc#1220361 Affected Products: * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that has one fix can now be installed. ## Description: This update for selinux-policy fixes the following issues: * Fixed SELinux preventing agetty from using the checkpoint_restore capability (bsc#1220361) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-837=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-837=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-837=1 ## Package List: * openSUSE Leap Micro 5.4 (noarch) * selinux-policy-targeted-20230511+git16.5733e724-150400.4.30.1 * selinux-policy-20230511+git16.5733e724-150400.4.30.1 * selinux-policy-devel-20230511+git16.5733e724-150400.4.30.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * selinux-policy-targeted-20230511+git16.5733e724-150400.4.30.1 * selinux-policy-20230511+git16.5733e724-150400.4.30.1 * selinux-policy-devel-20230511+git16.5733e724-150400.4.30.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * selinux-policy-targeted-20230511+git16.5733e724-150400.4.30.1 * selinux-policy-20230511+git16.5733e724-150400.4.30.1 * selinux-policy-devel-20230511+git16.5733e724-150400.4.30.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220361

1 0

SUSE-RU-2024:0838-1: moderate: Recommended update for util-linux
by OPENSUSE-UPDATES 12 Mar '24

12 Mar '24

# Recommended update for util-linux Announcement ID: SUSE-RU-2024:0838-1 Rating: moderate References: * bsc#1220117 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that has one fix can now be installed. ## Description: This update for util-linux fixes the following issues: * Processes not cleaned up after failed SSH session are using up 100% CPU (bsc#1220117) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-838=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-838=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-838=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-838=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-838=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-838=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-838=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libmount1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-2.37.2-150400.8.26.1 * libfdisk-devel-static-2.37.2-150400.8.26.1 * uuidd-debuginfo-2.37.2-150400.8.26.1 * python3-libmount-2.37.2-150400.8.26.1 * util-linux-2.37.2-150400.8.26.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.26.1 * libmount-devel-2.37.2-150400.8.26.1 * libuuid1-2.37.2-150400.8.26.1 * libblkid1-2.37.2-150400.8.26.1 * python3-libmount-debugsource-2.37.2-150400.8.26.1 * libsmartcols1-debuginfo-2.37.2-150400.8.26.1 * libuuid-devel-2.37.2-150400.8.26.1 * libblkid-devel-2.37.2-150400.8.26.1 * python3-libmount-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-debugsource-2.37.2-150400.8.26.1 * libuuid1-debuginfo-2.37.2-150400.8.26.1 * libmount1-2.37.2-150400.8.26.1 * uuidd-2.37.2-150400.8.26.1 * libmount-devel-static-2.37.2-150400.8.26.1 * libblkid-devel-static-2.37.2-150400.8.26.1 * libuuid-devel-static-2.37.2-150400.8.26.1 * libsmartcols-devel-static-2.37.2-150400.8.26.1 * libsmartcols1-2.37.2-150400.8.26.1 * libfdisk1-debuginfo-2.37.2-150400.8.26.1 * libfdisk1-2.37.2-150400.8.26.1 * util-linux-debuginfo-2.37.2-150400.8.26.1 * util-linux-debugsource-2.37.2-150400.8.26.1 * libfdisk-devel-2.37.2-150400.8.26.1 * libsmartcols-devel-2.37.2-150400.8.26.1 * openSUSE Leap 15.4 (x86_64) * libfdisk-devel-32bit-2.37.2-150400.8.26.1 * libfdisk1-32bit-2.37.2-150400.8.26.1 * libmount1-32bit-2.37.2-150400.8.26.1 * libuuid1-32bit-2.37.2-150400.8.26.1 * libblkid-devel-32bit-2.37.2-150400.8.26.1 * libmount-devel-32bit-2.37.2-150400.8.26.1 * libsmartcols1-32bit-debuginfo-2.37.2-150400.8.26.1 * libfdisk1-32bit-debuginfo-2.37.2-150400.8.26.1 * libblkid1-32bit-2.37.2-150400.8.26.1 * libblkid1-32bit-debuginfo-2.37.2-150400.8.26.1 * libmount1-32bit-debuginfo-2.37.2-150400.8.26.1 * libuuid-devel-32bit-2.37.2-150400.8.26.1 * libuuid1-32bit-debuginfo-2.37.2-150400.8.26.1 * libsmartcols-devel-32bit-2.37.2-150400.8.26.1 * libsmartcols1-32bit-2.37.2-150400.8.26.1 * openSUSE Leap 15.4 (noarch) * util-linux-lang-2.37.2-150400.8.26.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libmount1-64bit-2.37.2-150400.8.26.1 * libsmartcols1-64bit-debuginfo-2.37.2-150400.8.26.1 * libblkid1-64bit-2.37.2-150400.8.26.1 * libmount1-64bit-debuginfo-2.37.2-150400.8.26.1 * libblkid-devel-64bit-2.37.2-150400.8.26.1 * libsmartcols-devel-64bit-2.37.2-150400.8.26.1 * libblkid1-64bit-debuginfo-2.37.2-150400.8.26.1 * libsmartcols1-64bit-2.37.2-150400.8.26.1 * libuuid1-64bit-2.37.2-150400.8.26.1 * libfdisk-devel-64bit-2.37.2-150400.8.26.1 * libuuid-devel-64bit-2.37.2-150400.8.26.1 * libmount-devel-64bit-2.37.2-150400.8.26.1 * libfdisk1-64bit-2.37.2-150400.8.26.1 * libuuid1-64bit-debuginfo-2.37.2-150400.8.26.1 * libfdisk1-64bit-debuginfo-2.37.2-150400.8.26.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libmount1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-debugsource-2.37.2-150400.8.26.1 * libuuid1-debuginfo-2.37.2-150400.8.26.1 * libmount1-2.37.2-150400.8.26.1 * libsmartcols1-2.37.2-150400.8.26.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.26.1 * libfdisk1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-2.37.2-150400.8.26.1 * libuuid1-2.37.2-150400.8.26.1 * libfdisk1-2.37.2-150400.8.26.1 * util-linux-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-2.37.2-150400.8.26.1 * util-linux-debugsource-2.37.2-150400.8.26.1 * libsmartcols1-debuginfo-2.37.2-150400.8.26.1 * util-linux-2.37.2-150400.8.26.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libmount1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-debugsource-2.37.2-150400.8.26.1 * libuuid1-debuginfo-2.37.2-150400.8.26.1 * libmount1-2.37.2-150400.8.26.1 * libsmartcols1-2.37.2-150400.8.26.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.26.1 * libfdisk1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-2.37.2-150400.8.26.1 * libuuid1-2.37.2-150400.8.26.1 * libfdisk1-2.37.2-150400.8.26.1 * util-linux-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-2.37.2-150400.8.26.1 * util-linux-debugsource-2.37.2-150400.8.26.1 * libsmartcols1-debuginfo-2.37.2-150400.8.26.1 * util-linux-2.37.2-150400.8.26.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libmount1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-debugsource-2.37.2-150400.8.26.1 * libuuid1-debuginfo-2.37.2-150400.8.26.1 * libmount1-2.37.2-150400.8.26.1 * libsmartcols1-2.37.2-150400.8.26.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.26.1 * libfdisk1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-2.37.2-150400.8.26.1 * libuuid1-2.37.2-150400.8.26.1 * libfdisk1-2.37.2-150400.8.26.1 * util-linux-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-2.37.2-150400.8.26.1 * util-linux-debugsource-2.37.2-150400.8.26.1 * libsmartcols1-debuginfo-2.37.2-150400.8.26.1 * util-linux-2.37.2-150400.8.26.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libmount1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-debugsource-2.37.2-150400.8.26.1 * libuuid1-debuginfo-2.37.2-150400.8.26.1 * libmount1-2.37.2-150400.8.26.1 * libsmartcols1-2.37.2-150400.8.26.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.26.1 * libfdisk1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-2.37.2-150400.8.26.1 * libuuid1-2.37.2-150400.8.26.1 * libfdisk1-2.37.2-150400.8.26.1 * util-linux-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-2.37.2-150400.8.26.1 * util-linux-debugsource-2.37.2-150400.8.26.1 * libsmartcols1-debuginfo-2.37.2-150400.8.26.1 * util-linux-2.37.2-150400.8.26.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libmount1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-debugsource-2.37.2-150400.8.26.1 * libuuid1-debuginfo-2.37.2-150400.8.26.1 * libmount1-2.37.2-150400.8.26.1 * libsmartcols1-2.37.2-150400.8.26.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.26.1 * libfdisk1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-2.37.2-150400.8.26.1 * libuuid1-2.37.2-150400.8.26.1 * libfdisk1-2.37.2-150400.8.26.1 * util-linux-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-2.37.2-150400.8.26.1 * util-linux-debugsource-2.37.2-150400.8.26.1 * libsmartcols1-debuginfo-2.37.2-150400.8.26.1 * util-linux-2.37.2-150400.8.26.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libmount1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-debugsource-2.37.2-150400.8.26.1 * libuuid1-debuginfo-2.37.2-150400.8.26.1 * libmount1-2.37.2-150400.8.26.1 * libsmartcols1-2.37.2-150400.8.26.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.26.1 * libfdisk1-debuginfo-2.37.2-150400.8.26.1 * libblkid1-2.37.2-150400.8.26.1 * libuuid1-2.37.2-150400.8.26.1 * libfdisk1-2.37.2-150400.8.26.1 * util-linux-debuginfo-2.37.2-150400.8.26.1 * util-linux-systemd-2.37.2-150400.8.26.1 * util-linux-debugsource-2.37.2-150400.8.26.1 * libsmartcols1-debuginfo-2.37.2-150400.8.26.1 * util-linux-2.37.2-150400.8.26.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220117

1 0

SUSE-RU-2024:0849-1: important: Recommended update for cloud-init
by OPENSUSE-UPDATES 12 Mar '24

12 Mar '24

# Recommended update for cloud-init Announcement ID: SUSE-RU-2024:0849-1 Rating: important References: * bsc#1198533 * bsc#1214169 * bsc#1218952 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that has three fixes can now be installed. ## Description: This update for cloud-init contains the following fixes: * Skip tests with empty config. * Support reboot on package update/upgrade via the cloud-init config. (bsc#1198533, bsc#1218952, jsc#SMO-326) * Switch build dependency to the generic distribution-release package. * Move fdupes call back to %install. (bsc#1214169) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-849=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-849=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-849=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-849=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-849=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-849=1 openSUSE-SLE-15.5-2024-849=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-849=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-849=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-849=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-849=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-849=1 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * cloud-init-23.3-150100.8.74.7 * cloud-init-config-suse-23.3-150100.8.74.7 * Public Cloud Module 15-SP4 (noarch) * python3-jsonpointer-1.14-150000.3.2.1 * python3-jsonpatch-1.23-150100.3.5.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cloud-init-23.3-150100.8.74.7 * cloud-init-config-suse-23.3-150100.8.74.7 * Public Cloud Module 15-SP5 (noarch) * python3-jsonpointer-1.14-150000.3.2.1 * python3-jsonpatch-1.23-150100.3.5.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * dhcp-debuginfo-4.3.6.P1-150000.6.19.1 * dhcp-relay-debuginfo-4.3.6.P1-150000.6.19.1 * bind-9.16.48-150500.8.18.1 * dhcp-server-debuginfo-4.3.6.P1-150000.6.19.1 * dhcp-debugsource-4.3.6.P1-150000.6.19.1 * dhcp-relay-4.3.6.P1-150000.6.19.1 * bind-debuginfo-9.16.48-150500.8.18.1 * bind-debugsource-9.16.48-150500.8.18.1 * dhcp-server-4.3.6.P1-150000.6.19.1 * Server Applications Module 15-SP5 (noarch) * python3-pyserial-3.4-150000.3.4.1 * bind-doc-9.16.48-150500.8.18.1 * openSUSE Leap 15.3 (noarch) * python3-passlib-1.7.4-150300.3.2.1 * openSUSE Leap 15.4 (noarch) * python3-more-itertools-8.10.0-150400.7.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * bind-9.16.48-150500.8.18.1 * bind-utils-9.16.48-150500.8.18.1 * libuv-debugsource-1.44.2-150500.3.2.1 * libuv1-1.44.2-150500.3.2.1 * libuv1-debuginfo-1.44.2-150500.3.2.1 * bind-utils-debuginfo-9.16.48-150500.8.18.1 * bind-debuginfo-9.16.48-150500.8.18.1 * bind-debugsource-9.16.48-150500.8.18.1 * libuv-devel-1.44.2-150500.3.2.1 * openSUSE Leap 15.5 (noarch) * python3-jsonpointer-1.14-150000.3.2.1 * python3-jsonschema-3.2.0-150200.9.5.1 * python3-pyserial-3.4-150000.3.4.1 * python-pyserial-doc-3.4-150000.3.4.1 * python3-jsonpatch-1.23-150100.3.5.1 * python3-attrs-19.3.0-150200.3.6.1 * python3-PyJWT-2.4.0-150200.3.8.1 * python3-importlib-metadata-1.5.0-150100.3.5.1 * python3-zipp-0.6.0-150100.3.5.1 * python3-passlib-1.7.4-150300.3.2.1 * wget-lang-1.20.3-150000.3.17.1 * python3-oauthlib-2.0.6-150000.3.6.1 * python3-bind-9.16.48-150500.8.18.1 * python3-blinker-1.4-150000.3.6.1 * python3-more-itertools-8.10.0-150400.7.1 * python-blinker-doc-1.4-150000.3.6.1 * bind-doc-9.16.48-150500.8.18.1 * openSUSE Leap 15.5 (x86_64) * libmaxminddb0-32bit-debuginfo-1.4.3-150000.1.8.1 * libmaxminddb0-32bit-1.4.3-150000.1.8.1 * libuv1-32bit-debuginfo-1.44.2-150500.3.2.1 * libuv1-32bit-1.44.2-150500.3.2.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libuv1-64bit-1.44.2-150500.3.2.1 * libuv1-64bit-debuginfo-1.44.2-150500.3.2.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libmaxminddb-devel-1.4.3-150000.1.8.1 * mmdblookup-1.4.3-150000.1.8.1 * dhcp-devel-4.3.6.P1-150000.6.19.1 * cloud-init-23.3-150100.8.74.7 * dhcp-debugsource-4.3.6.P1-150000.6.19.1 * dhcp-server-debuginfo-4.3.6.P1-150000.6.19.1 * dhcp-client-4.3.6.P1-150000.6.19.1 * libmetalink-devel-0.1.3-150000.3.2.1 * python-netifaces-debuginfo-0.10.6-150000.3.2.1 * python-pyrsistent-debugsource-0.14.4-150100.3.4.1 * python3-pyrsistent-debuginfo-0.14.4-150100.3.4.1 * dhcp-server-4.3.6.P1-150000.6.19.1 * libmaxminddb0-1.4.3-150000.1.8.1 * dhcp-debuginfo-4.3.6.P1-150000.6.19.1 * python3-pyrsistent-0.14.4-150100.3.4.1 * python-pyrsistent-debuginfo-0.14.4-150100.3.4.1 * wget-debugsource-1.20.3-150000.3.17.1 * libmetalink3-debuginfo-0.1.3-150000.3.2.1 * wget-debuginfo-1.20.3-150000.3.17.1 * dhcp-relay-4.3.6.P1-150000.6.19.1 * python3-netifaces-debuginfo-0.10.6-150000.3.2.1 * dhcp-client-debuginfo-4.3.6.P1-150000.6.19.1 * mmdblookup-debuginfo-1.4.3-150000.1.8.1 * cloud-init-config-suse-23.3-150100.8.74.7 * python-netifaces-debugsource-0.10.6-150000.3.2.1 * python3-netifaces-0.10.6-150000.3.2.1 * dhcp-relay-debuginfo-4.3.6.P1-150000.6.19.1 * dhcp-4.3.6.P1-150000.6.19.1 * cloud-init-doc-23.3-150100.8.74.7 * libmaxminddb0-debuginfo-1.4.3-150000.1.8.1 * dhcp-doc-4.3.6.P1-150000.6.19.1 * libmaxminddb-debugsource-1.4.3-150000.1.8.1 * wget-1.20.3-150000.3.17.1 * libmetalink-debugsource-0.1.3-150000.3.2.1 * libmetalink3-0.1.3-150000.3.2.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * dhcp-devel-4.3.6.P1-150000.6.19.1 * cloud-init-23.3-150100.8.74.7 * dhcp-debugsource-4.3.6.P1-150000.6.19.1 * libuv1-1.44.2-150500.3.2.1 * dhcp-client-4.3.6.P1-150000.6.19.1 * python3-pyrsistent-debuginfo-0.14.4-150100.3.4.1 * libmaxminddb0-1.4.3-150000.1.8.1 * dhcp-debuginfo-4.3.6.P1-150000.6.19.1 * python3-pyrsistent-0.14.4-150100.3.4.1 * wget-debugsource-1.20.3-150000.3.17.1 * libmetalink3-debuginfo-0.1.3-150000.3.2.1 * wget-debuginfo-1.20.3-150000.3.17.1 * bind-utils-9.16.48-150500.8.18.1 * python3-netifaces-debuginfo-0.10.6-150000.3.2.1 * dhcp-client-debuginfo-4.3.6.P1-150000.6.19.1 * bind-utils-debuginfo-9.16.48-150500.8.18.1 * cloud-init-config-suse-23.3-150100.8.74.7 * python3-netifaces-0.10.6-150000.3.2.1 * dhcp-4.3.6.P1-150000.6.19.1 * libuv1-debuginfo-1.44.2-150500.3.2.1 * libmaxminddb0-debuginfo-1.4.3-150000.1.8.1 * wget-1.20.3-150000.3.17.1 * libmetalink3-0.1.3-150000.3.2.1 * SUSE Linux Enterprise Micro 5.5 (aarch64) * dhcp-relay-debuginfo-4.3.6.P1-150000.6.19.1 * python2-netifaces-debuginfo-0.10.6-150000.3.2.1 * dhcp-server-debuginfo-4.3.6.P1-150000.6.19.1 * libuv-debugsource-1.44.2-150500.3.2.1 * dhcp-relay-4.3.6.P1-150000.6.19.1 * python2-netifaces-0.10.6-150000.3.2.1 * libmetalink-devel-0.1.3-150000.3.2.1 * python-netifaces-debuginfo-0.10.6-150000.3.2.1 * python-netifaces-debugsource-0.10.6-150000.3.2.1 * libmetalink-debugsource-0.1.3-150000.3.2.1 * dhcp-server-4.3.6.P1-150000.6.19.1 * libuv-devel-1.44.2-150500.3.2.1 * SUSE Linux Enterprise Micro 5.5 (aarch64_ilp32) * libmaxminddb0-64bit-1.4.3-150000.1.8.1 * libuv1-64bit-1.44.2-150500.3.2.1 * libuv1-64bit-debuginfo-1.44.2-150500.3.2.1 * libmaxminddb0-64bit-debuginfo-1.4.3-150000.1.8.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-jsonschema-3.2.0-150200.9.5.1 * python3-pyserial-3.4-150000.3.4.1 * python2-blinker-1.4-150000.3.6.1 * python2-pyserial-3.4-150000.3.4.1 * python3-jsonpatch-1.23-150100.3.5.1 * python3-attrs-19.3.0-150200.3.6.1 * python3-PyJWT-2.4.0-150200.3.8.1 * python3-importlib-metadata-1.5.0-150100.3.5.1 * python3-zipp-0.6.0-150100.3.5.1 * python3-passlib-1.7.4-150300.3.2.1 * python3-oauthlib-2.0.6-150000.3.6.1 * python3-bind-9.16.48-150500.8.18.1 * python2-oauthlib-2.0.6-150000.3.6.1 * python3-blinker-1.4-150000.3.6.1 * python3-more-itertools-8.10.0-150400.7.1 * python2-jsonpointer-1.14-150000.3.2.1 * python3-jsonpointer-1.14-150000.3.2.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * bind-debugsource-9.16.48-150500.8.18.1 * bind-debuginfo-9.16.48-150500.8.18.1 * Basesystem Module 15-SP5 (noarch) * python3-jsonschema-3.2.0-150200.9.5.1 * python3-attrs-19.3.0-150200.3.6.1 * python3-PyJWT-2.4.0-150200.3.8.1 * python3-importlib-metadata-1.5.0-150100.3.5.1 * python3-zipp-0.6.0-150100.3.5.1 * python3-passlib-1.7.4-150300.3.2.1 * python3-oauthlib-2.0.6-150000.3.6.1 * python3-bind-9.16.48-150500.8.18.1 * python3-blinker-1.4-150000.3.6.1 * python3-more-itertools-8.10.0-150400.7.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * bind-debugsource-9.16.48-150500.8.18.1 * libmaxminddb-devel-1.4.3-150000.1.8.1 * mmdblookup-1.4.3-150000.1.8.1 * dhcp-devel-4.3.6.P1-150000.6.19.1 * dhcp-debugsource-4.3.6.P1-150000.6.19.1 * libuv1-1.44.2-150500.3.2.1 * dhcp-client-4.3.6.P1-150000.6.19.1 * libmetalink-devel-0.1.3-150000.3.2.1 * python-netifaces-debuginfo-0.10.6-150000.3.2.1 * python-pyrsistent-debugsource-0.14.4-150100.3.4.1 * python3-pyrsistent-debuginfo-0.14.4-150100.3.4.1 * libmaxminddb0-1.4.3-150000.1.8.1 * dhcp-debuginfo-4.3.6.P1-150000.6.19.1 * python3-pyrsistent-0.14.4-150100.3.4.1 * python-pyrsistent-debuginfo-0.14.4-150100.3.4.1 * libuv-debugsource-1.44.2-150500.3.2.1 * wget-debugsource-1.20.3-150000.3.17.1 * libmetalink3-debuginfo-0.1.3-150000.3.2.1 * wget-debuginfo-1.20.3-150000.3.17.1 * libuv-devel-1.44.2-150500.3.2.1 * bind-utils-9.16.48-150500.8.18.1 * python3-netifaces-debuginfo-0.10.6-150000.3.2.1 * dhcp-client-debuginfo-4.3.6.P1-150000.6.19.1 * bind-debuginfo-9.16.48-150500.8.18.1 * mmdblookup-debuginfo-1.4.3-150000.1.8.1 * bind-utils-debuginfo-9.16.48-150500.8.18.1 * python-netifaces-debugsource-0.10.6-150000.3.2.1 * python3-netifaces-0.10.6-150000.3.2.1 * dhcp-4.3.6.P1-150000.6.19.1 * libuv1-debuginfo-1.44.2-150500.3.2.1 * libmaxminddb0-debuginfo-1.4.3-150000.1.8.1 * libmaxminddb-debugsource-1.4.3-150000.1.8.1 * wget-1.20.3-150000.3.17.1 * libmetalink-debugsource-0.1.3-150000.3.2.1 * libmetalink3-0.1.3-150000.3.2.1 * SUSE Package Hub 15 15-SP5 (noarch) * python2-blinker-1.4-150000.3.6.1 * python2-pyserial-3.4-150000.3.4.1 * python2-oauthlib-2.0.6-150000.3.6.1 * python2-jsonpointer-1.14-150000.3.2.1 * python2-jsonpatch-1.23-150100.3.5.1 * python2-jsonschema-3.2.0-150200.9.5.1 * Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64) * cloud-init-23.3-150100.8.74.7 * cloud-init-config-suse-23.3-150100.8.74.7 * Public Cloud Module 15-SP2 (noarch) * python3-pyserial-3.4-150000.3.4.1 * python2-blinker-1.4-150000.3.6.1 * python3-jsonpatch-1.23-150100.3.5.1 * python2-oauthlib-2.0.6-150000.3.6.1 * python3-jsonpointer-1.14-150000.3.2.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * cloud-init-23.3-150100.8.74.7 * cloud-init-config-suse-23.3-150100.8.74.7 * Public Cloud Module 15-SP3 (noarch) * python3-jsonpointer-1.14-150000.3.2.1 * python3-jsonpatch-1.23-150100.3.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1198533 * https://bugzilla.suse.com/show_bug.cgi?id=1214169 * https://bugzilla.suse.com/show_bug.cgi?id=1218952

1 0

SUSE-SU-2024:0852-1: moderate: Security update for axis
by OPENSUSE-UPDATES 12 Mar '24

12 Mar '24

# Security update for axis Announcement ID: SUSE-SU-2024:0852-1 Rating: moderate References: * bsc#1218605 Cross-References: * CVE-2023-51441 CVSS scores: * CVE-2023-51441 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-51441 ( NVD ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for axis fixes the following issues: * CVE-2023-51441: Fixed SSRF when untrusted input is passed to the service admin HTTP API (bsc#1218605). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-852=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-852=1 ## Package List: * openSUSE Leap 15.5 (noarch) * axis-1.4-150200.13.9.1 * axis-manual-1.4-150200.13.9.1 * Basesystem Module 15-SP5 (noarch) * axis-1.4-150200.13.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-51441.html * https://bugzilla.suse.com/show_bug.cgi?id=1218605

1 0

SUSE-RU-2024:0844-1: moderate: Recommended update for raspberrypi-firmware-dt
by OPENSUSE-UPDATES 12 Mar '24

12 Mar '24

# Recommended update for raspberrypi-firmware-dt Announcement ID: SUSE-RU-2024:0844-1 Rating: moderate References: * bsc#1219094 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for raspberrypi-firmware-dt fixes the following issue: * Extend "ARM: dts: bcm27xx: Use better name for spidev" patch coverage. Change compatible "spidev" to "rohm,dh2228fv" in overlay files too. (bsc#1219094) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-844=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-844=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-844=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-844=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-844=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-844=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-844=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-844=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-844=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-844=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-844=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-844=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-844=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * Basesystem Module 15-SP5 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * openSUSE Leap 15.4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * openSUSE Leap Micro 5.3 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * openSUSE Leap Micro 5.4 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 * openSUSE Leap 15.5 (noarch) * raspberrypi-firmware-dt-2021.11.19-150400.5.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219094

1 0

SUSE-RU-2024:0845-1: moderate: Recommended update for release-notes-sles
by OPENSUSE-UPDATES 12 Mar '24

12 Mar '24

# Recommended update for release-notes-sles Announcement ID: SUSE-RU-2024:0845-1 Rating: moderate References: * bsc#1201266 * bsc#1210490 * bsc#1215156 * bsc#1216929 * bsc#933411 * jsc#TEAM-1245 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has five fixes can now be installed. ## Description: This update for release-notes-sles fixes the following issues: * Added note about sched parameter deprecation (bsc#1216929) * Added note about set-hostname deprecation (bsc#1215156) * Added note about Xen Dom0 suspend/resume (bsc#1210490) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-845=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-845=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-845=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 15 SP4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Linux Enterprise Server 15 SP4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Manager Server 4.3 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Linux Enterprise Desktop 15 SP4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Manager Retail Branch Server 4.3 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Manager Proxy 4.3 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 * openSUSE Leap 15.4 (noarch) * release-notes-sles-15.4.20240119-150400.3.24.5 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1201266 * https://bugzilla.suse.com/show_bug.cgi?id=1210490 * https://bugzilla.suse.com/show_bug.cgi?id=1215156 * https://bugzilla.suse.com/show_bug.cgi?id=1216929 * https://bugzilla.suse.com/show_bug.cgi?id=933411 * https://jira.suse.com/browse/TEAM-1245

1 0

openSUSE-SU-2024:0080-1: important: Security update for python-Django1
by opensuse-security＠opensuse.org 11 Mar '24

11 Mar '24

openSUSE Security Update: Security update for python-Django1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0080-1 Rating: important References: #1220358 Cross-References: CVE-2024-27351 CVSS scores: CVE-2024-27351 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Django1 fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words() (boo#1220358). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-80=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-Django1-1.11.29-bp155.4.9.1 References: https://www.suse.com/security/cve/CVE-2024-27351.html https://bugzilla.suse.com/1220358

1 0

openSUSE-RU-2024:0079-1: moderate: Recommended update for virtme
by maintenance＠opensuse.org 11 Mar '24

11 Mar '24

openSUSE Recommended Update: Recommended update for virtme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0079-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for virtme fixes the following issues: Update to 1.22: * Fix potential sudo errors (in openSUSE, Fedora, CachyOS) * Propagate /proc/sys/fs/nr_open from host to guest * More robust parsing of upstream kernel versions * Small command help improvements Update to 1.21: * When running in script mode do not hang in case of kernel panic, but return the special error code 255 (this allows to automate catching kernel panics) * Redirect kernel log to stderr on the host when running in interactive mode: this allows to easily save the kernel log to a file (or pipe it to another tool), simply by runing a vng -vr 2>/tmp/kernel.log * vng --dump can now generate a memory dump compatible with drgn * It is now possible to use virtiofsd with a btrfs root filesystem on the host (e.g., default openSUSE setup) * It is not possible to to use the microvm architecture with kernels that don't have built-in virtio-pci / virtio-mmio (e.g., stock openSUSE Tumbleweed kernel) Update to 1.20: * The return code of a command executed in the vng guest is now transparently channeled to the host: this, together with stdin/stdout/stderr redirection, gives the complete illusion to run the command in the guest as if it was executed on the host and it can help to easily integrate vng with other CI tools/scripts * NUMA support: it is now possible to create multiple NUMA nodes, and assign CPUs to them, inside a vng guest, using the --numa option. * new --quiet option to override --verbose * new --disable-kvm option to explicitly disable hardware virtualization (KVM) * lockdep is now disabled by default during the kernel build Update to 1.19: * The most noticeable change is definitely the support for running virtme-ng inside Docker containers. This opens the possibility for many other projects to use virtme-ng to potentially pick any arbitrary kernel to run their tests inside their Docker instances. * The other interesting change (this one only for Ubuntu users) is the --root-release argument (used together with --root) that allows bootstrapping a rootfs from scratch, selecting a specific Ubuntu release. The rootfs will be created from the latest Ubuntu cloud image of the target release. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-79=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): virtme-1.22-bp155.5.8.1 References:

1 0

openSUSE-RU-2024:0078-1: moderate: Recommended update for chromium
by maintenance＠opensuse.org 11 Mar '24

11 Mar '24

openSUSE Recommended Update: Recommended update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0078-1 Rating: moderate References: #1219070 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chromium fixes the following issues: - Disable codec checker this will always fail (boo#1219070) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-78=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-120.0.6099.224-bp155.2.70.1 chromium-120.0.6099.224-bp155.2.70.1 References: https://bugzilla.suse.com/1219070

1 0

openSUSE-SU-2024:0077-1: important: Security update for python-Django
by opensuse-security＠opensuse.org 11 Mar '24

11 Mar '24

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0077-1 Rating: important References: #1220358 Cross-References: CVE-2024-27351 CVSS scores: CVE-2024-27351 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Django fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words() (boo#1220358). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-77=1 Package List: References: https://www.suse.com/security/cve/CVE-2024-27351.html https://bugzilla.suse.com/1220358

1 0

SUSE-SU-2024:0831-1: moderate: Security update for openssl-1_0_0
by OPENSUSE-UPDATES 11 Mar '24

11 Mar '24

# Security update for openssl-1_0_0 Announcement ID: SUSE-SU-2024:0831-1 Rating: moderate References: * bsc#1219243 Cross-References: * CVE-2024-0727 CVSS scores: * CVE-2024-0727 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2024-0727 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Legacy Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_0_0 fixes the following issues: * CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-831=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-831=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-831=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-831=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-831=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-831=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-831=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-831=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-831=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-831=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-831=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-831=1 ## Package List: * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-1.0.2p-150000.3.91.1 * libopenssl1_0_0-steam-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-cavs-1.0.2p-150000.3.91.1 * openssl-1_0_0-cavs-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debugsource-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-1.0.2p-150000.3.91.1 * libopenssl1_0_0-steam-1.0.2p-150000.3.91.1 * openssl-1_0_0-1.0.2p-150000.3.91.1 * libopenssl10-debuginfo-1.0.2p-150000.3.91.1 * openssl-1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-debuginfo-1.0.2p-150000.3.91.1 * libopenssl10-1.0.2p-150000.3.91.1 * openSUSE Leap 15.5 (x86_64) * libopenssl1_0_0-32bit-debuginfo-1.0.2p-150000.3.91.1 * libopenssl1_0_0-32bit-1.0.2p-150000.3.91.1 * libopenssl1_0_0-steam-32bit-1.0.2p-150000.3.91.1 * libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-150000.3.91.1 * libopenssl-1_0_0-devel-32bit-1.0.2p-150000.3.91.1 * libopenssl1_0_0-hmac-32bit-1.0.2p-150000.3.91.1 * openSUSE Leap 15.5 (noarch) * openssl-1_0_0-doc-1.0.2p-150000.3.91.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0727.html * https://bugzilla.suse.com/show_bug.cgi?id=1219243

1 0

SUSE-RU-2024:0827-1: moderate: Recommended update for tomcat
by OPENSUSE-UPDATES 11 Mar '24

11 Mar '24

# Recommended update for tomcat Announcement ID: SUSE-RU-2024:0827-1 Rating: moderate References: * bsc#1219530 Affected Products: * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Server 4.3 * Web and Scripting Module 15-SP5 An update that has one fix can now be installed. ## Description: This update for tomcat fixes the following issues: * Added dependencies on tomcat `user` and `group`, required by RPM 4.19 (bsc#1219530) * Link ecj.jar into the install instead of copying it ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-827=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-827=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-827=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-827=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-827=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-827=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-827=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-827=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-827=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-827=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-827=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-827=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-827=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-827=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Manager Server 4.3 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Enterprise Storage 7.1 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * openSUSE Leap 15.5 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-embed-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-javadoc-9.0.85-150200.60.1 * tomcat-jsvc-9.0.85-150200.60.1 * tomcat-docs-webapp-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * Web and Scripting Module 15-SP5 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * tomcat-servlet-4_0-api-9.0.85-150200.60.1 * tomcat-webapps-9.0.85-150200.60.1 * tomcat-9.0.85-150200.60.1 * tomcat-el-3_0-api-9.0.85-150200.60.1 * tomcat-jsp-2_3-api-9.0.85-150200.60.1 * tomcat-admin-webapps-9.0.85-150200.60.1 * tomcat-lib-9.0.85-150200.60.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219530

1 0

openSUSE-RU-2024:0076-1: moderate: Recommended update for asar
by maintenance＠opensuse.org 10 Mar '24

10 Mar '24

openSUSE Recommended Update: Recommended update for asar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0076-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for asar fixes the following issues: New upstream version 3.2.9 * fix symlink pointing error in filesystem.insertLink New upstream version 3.2.8 * better error message when extracting a file that doesn't exist in the archive Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-76=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): asar-3.2.9-bp155.2.8.1 References:

1 0

openSUSE-RU-2024:0075-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 08 Mar '24

08 Mar '24

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0075-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fwts fixes the following issues: Update to version 24.01.00: * acpi: sbbr: check the existence of SPCR console devices * acpi: dbg2: update the subtype RISC-V SBI console for DBG2 * acpi: ras2: stop for loop when list exceeds the table * framework: fix memory leaks caused by fwts_log_get_filenames * acpi: s3: fix potential memory leaks on fwts_get() calls * acpi: s3: enable debug messages on S0ix failure for Intel platforms * lib: fwts_version.h - update to V24.01.00 * debian: update changelog * Update copyright year to 2024 * fwts-test: add regression tests for SKVL Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-75=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 x86_64): fwts-24.01.00-bp155.2.6.1 References:

1 0

SUSE-RU-2024:0822-1: moderate: Recommended update for crmsh
by OPENSUSE-UPDATES 08 Mar '24

08 Mar '24

# Recommended update for crmsh Announcement ID: SUSE-RU-2024:0822-1 Rating: moderate References: * bsc#1220022 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for crmsh fixes the following issues: * Update to version 4.5.1+20240220.de17a142 * Fix escape special characters in pattern (bsc#1220022) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-822=1 openSUSE-SLE-15.5-2024-822=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-822=1 ## Package List: * openSUSE Leap 15.5 (noarch) * crmsh-scripts-4.5.1+20240220.de17a142-150500.3.22.1 * crmsh-test-4.5.1+20240220.de17a142-150500.3.22.1 * crmsh-4.5.1+20240220.de17a142-150500.3.22.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (noarch) * crmsh-scripts-4.5.1+20240220.de17a142-150500.3.22.1 * crmsh-4.5.1+20240220.de17a142-150500.3.22.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220022

1 0

SUSE-SU-2024:0794-2: important: Security update for sudo
by OPENSUSE-UPDATES 08 Mar '24

08 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0794-2 Rating: important References: * bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: NOTE: This update has been retracted, as some logic was not changed correctly. * CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-794=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-794=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-794=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-debuginfo-1.9.12p1-150500.7.7.1 * sudo-plugin-python-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * sudo-devel-1.9.12p1-150500.7.7.1 * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-test-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sudo-1.9.12p1-150500.7.7.1 * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-debuginfo-1.9.12p1-150500.7.7.1 * sudo-plugin-python-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * sudo-devel-1.9.12p1-150500.7.7.1 * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1219026 * https://bugzilla.suse.com/show_bug.cgi?id=1220389

1 0

SUSE-SU-2024:0795-2: important: Security update for sudo
by OPENSUSE-UPDATES 08 Mar '24

08 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0795-2 Rating: important References: * bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: NOTE: This update has been retracted as some logic was not correct. * CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-795=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-795=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-795=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-795=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-795=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-795=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-795=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-795=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-795=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-795=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-795=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Manager Proxy 4.3 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1219026 * https://bugzilla.suse.com/show_bug.cgi?id=1220389

1 0

SUSE-SU-2024:0819-1: important: Security update for wpa_supplicant
by OPENSUSE-UPDATES 08 Mar '24

08 Mar '24

# Security update for wpa_supplicant Announcement ID: SUSE-SU-2024:0819-1 Rating: important References: * bsc#1219975 Cross-References: * CVE-2023-52160 CVSS scores: * CVE-2023-52160 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52160 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: * CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-819=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-819=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-819=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-819=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-819=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-819=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-819=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-819=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-819=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-819=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-819=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-819=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-819=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-819=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-819=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-819=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-819=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-819=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-819=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-819=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-819=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-819=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-819=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-819=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Manager Proxy 4.3 (x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * wpa_supplicant-2.9-150000.4.39.1 * wpa_supplicant-debuginfo-2.9-150000.4.39.1 * wpa_supplicant-debugsource-2.9-150000.4.39.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52160.html * https://bugzilla.suse.com/show_bug.cgi?id=1219975

1 0

SUSE-RU-2024:0821-1: moderate: Recommended update for suse-migration-services
by OPENSUSE-UPDATES 08 Mar '24

08 Mar '24

# Recommended update for suse-migration-services Announcement ID: SUSE-RU-2024:0821-1 Rating: moderate References: * bsc#1219004 Affected Products: * openSUSE Leap 15.5 An update that has one fix can now be installed. ## Description: This update for suse-migration-services fixes the following issues: * Update to version: 2.0.39 * Update dependencies to use suseconnect-ng rather than the legacy SUSEConnect (bsc#1219004) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-821=1 ## Package List: * openSUSE Leap 15.5 (noarch) * suse-migration-pre-checks-2.0.39-150000.1.68.1 * suse-migration-services-2.0.39-150000.1.68.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219004

1 0

SUSE-SU-2024:0811-1: important: Security update for go1.21
by OPENSUSE-UPDATES 08 Mar '24

08 Mar '24

# Security update for go1.21 Announcement ID: SUSE-SU-2024:0811-1 Rating: important References: * bsc#1212475 * bsc#1219988 * bsc#1220999 * bsc#1221000 * bsc#1221001 * bsc#1221002 * bsc#1221003 Cross-References: * CVE-2023-45289 * CVE-2023-45290 * CVE-2024-24783 * CVE-2024-24784 * CVE-2024-24785 CVSS scores: * CVE-2023-45289 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-45290 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24783 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24784 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24785 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves five vulnerabilities and has two security fixes can now be installed. ## Description: This update for go1.21 fixes the following issues: * Upgrade go to version 1.21.8 * CVE-2023-45289: net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (bsc#1221000) * CVE-2023-45290: net/http: memory exhaustion in Request.ParseMultipartForm (bsc#1221001) * CVE-2024-24783: crypto/x509: Verify panics on certificates with an unknown public key algorithm (bsc#1220999) * CVE-2024-24784: net/mail: comments in display names are incorrectly handled (bsc#1221002) * CVE-2024-24785: html/template: errors returned from MarshalJSON methods may break template escaping (bsc#1221003) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-811=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-811=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-811=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-811=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-811=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-811=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-811=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.21-race-1.21.8-150000.1.27.1 * go1.21-1.21.8-150000.1.27.1 * go1.21-doc-1.21.8-150000.1.27.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.21-race-1.21.8-150000.1.27.1 * go1.21-1.21.8-150000.1.27.1 * go1.21-doc-1.21.8-150000.1.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.21-race-1.21.8-150000.1.27.1 * go1.21-1.21.8-150000.1.27.1 * go1.21-doc-1.21.8-150000.1.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.21-race-1.21.8-150000.1.27.1 * go1.21-1.21.8-150000.1.27.1 * go1.21-doc-1.21.8-150000.1.27.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * go1.21-race-1.21.8-150000.1.27.1 * go1.21-1.21.8-150000.1.27.1 * go1.21-doc-1.21.8-150000.1.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * go1.21-1.21.8-150000.1.27.1 * go1.21-doc-1.21.8-150000.1.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * go1.21-race-1.21.8-150000.1.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.21-1.21.8-150000.1.27.1 * go1.21-doc-1.21.8-150000.1.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * go1.21-race-1.21.8-150000.1.27.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45289.html * https://www.suse.com/security/cve/CVE-2023-45290.html * https://www.suse.com/security/cve/CVE-2024-24783.html * https://www.suse.com/security/cve/CVE-2024-24784.html * https://www.suse.com/security/cve/CVE-2024-24785.html * https://bugzilla.suse.com/show_bug.cgi?id=1212475 * https://bugzilla.suse.com/show_bug.cgi?id=1219988 * https://bugzilla.suse.com/show_bug.cgi?id=1220999 * https://bugzilla.suse.com/show_bug.cgi?id=1221000 * https://bugzilla.suse.com/show_bug.cgi?id=1221001 * https://bugzilla.suse.com/show_bug.cgi?id=1221002 * https://bugzilla.suse.com/show_bug.cgi?id=1221003

1 0

SUSE-RU-2024:0805-1: moderate: Recommended update for ppc64-diag
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Recommended update for ppc64-diag Announcement ID: SUSE-RU-2024:0805-1 Rating: moderate References: * bsc#1209274 * bsc#1220345 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for ppc64-diag fixes the following issues: * Do not delete old system dumps offloaded from HMC (bsc#1209274). * Fix NVMe diagnostics support with nvmf drive (bsc#1220345). * Fix filelist for NVMe diag service, it was listed as conffile ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-805=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-805=1 openSUSE-SLE-15.5-2024-805=1 ## Package List: * Basesystem Module 15-SP5 (ppc64le) * ppc64-diag-debugsource-2.7.9-150500.3.8.1 * ppc64-diag-debuginfo-2.7.9-150500.3.8.1 * ppc64-diag-2.7.9-150500.3.8.1 * openSUSE Leap 15.5 (ppc64le) * ppc64-diag-debugsource-2.7.9-150500.3.8.1 * ppc64-diag-debuginfo-2.7.9-150500.3.8.1 * ppc64-diag-2.7.9-150500.3.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1209274 * https://bugzilla.suse.com/show_bug.cgi?id=1220345

1 0

SUSE-RU-2024:0789-1: moderate: Recommended update for go1.20
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Recommended update for go1.20 Announcement ID: SUSE-RU-2024:0789-1 Rating: moderate References: * bsc#1206346 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for go1.20 fixes the following issues: go1.20.14 (released 2024-02-06) includes fixes to the crypto/x509 package. (bsc#1206346 go1.20 release tracking) * go#64760 staticlockranking builders failing on release branches on LUCI * go#65322 crypto: rollback BoringCrypto fips-20220613 update * go#65379 crypto/x509: TestIssue51759 consistently failing on gotip-darwin- amd64_10.15 LUCI builder ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-789=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-789=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.20-1.20.14-150000.1.41.1 * go1.20-race-1.20.14-150000.1.41.1 * go1.20-debuginfo-1.20.14-150000.1.41.1 * go1.20-doc-1.20.14-150000.1.41.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.20-1.20.14-150000.1.41.1 * go1.20-race-1.20.14-150000.1.41.1 * go1.20-debuginfo-1.20.14-150000.1.41.1 * go1.20-doc-1.20.14-150000.1.41.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1206346

1 0

SUSE-RU-2024:0792-1: moderate: Recommended update for timezone
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Recommended update for timezone Announcement ID: SUSE-RU-2024:0792-1 Rating: moderate References: Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that can now be installed. ## Description: This update for timezone fixes the following issues: * Update to version 2024a * Kazakhstan unifies on UTC+5 * Palestine springs forward a week later than previously predicted in 2024 and 2025 * Asia/Ho_Chi_Minh's 1955-07-01 transition occurred at 01:00 not 00:00 * From 1947 through 1949, Toronto's transitions occurred at 02:00 not 00:00 * In 1911 Miquelon adopted standard time on June 15, not May 15 * The FROM and TO columns of Rule lines can no longer be "minimum" * localtime no longer mishandle some timestamps * strftime %s now uses tm_gmtoff if available * Ittoqqortoormiit, Greenland changes time zones on 2024-03-31 * Vostok, Antarctica changed time zones on 2023-12-18 * Casey, Antarctica changed time zones five times since 2020 * Code and data fixes for Palestine timestamps starting in 2072 * A new data file zonenow.tab for timestamps starting now * Much of Greenland changed its standard time from -03 to -02 on 2023-03-25 * localtime.c no longer mishandles TZif files that contain a single transition into a DST regime * tzselect no longer creates temporary files * tzselect no longer mishandles the following: * Spaces and most other special characters in BUGEMAIL, PACKAGE, TZDIR, and VERSION. * TZ strings when using mawk 1.4.3, which mishandles regular expressions of the form /X{2,}/ * ISO 6709 coordinates when using an awk that lacks the GNU extension of newlines in -v option-arguments * Non UTF-8 locales when using an iconv command that lacks the GNU //TRANSLIT extension * zic no longer mishandles data for Palestine after the year 2075 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-792=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-792=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-792=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-792=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-792=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-792=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-792=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-792=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-792=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-792=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-792=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-792=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-792=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-792=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-792=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-792=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-792=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-792=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-792=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-792=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-792=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-792=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-792=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-792=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-792=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-792=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-792=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * openSUSE Leap 15.5 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * Basesystem Module 15-SP5 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Manager Proxy 4.3 (x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Manager Proxy 4.3 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Manager Server 4.3 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Enterprise Storage 7.1 (noarch) * timezone-java-2024a-150000.75.28.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * timezone-debugsource-2024a-150000.75.28.1 * timezone-debuginfo-2024a-150000.75.28.1 * timezone-2024a-150000.75.28.1

1 0

SUSE-SU-2024:0793-1: important: Security update for gstreamer-plugins-bad
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Security update for gstreamer-plugins-bad Announcement ID: SUSE-SU-2024:0793-1 Rating: important References: * bsc#1217213 Cross-References: * CVE-2023-44446 CVSS scores: * CVE-2023-44446 ( SUSE ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for gstreamer-plugins-bad fixes the following issues: * CVE-2023-44446: Fixed use-after-free remote code execution vulnerability via MXF file (bsc#1217213). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-793=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-793=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-793=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-793=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-793=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.18.1 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-devel-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.18.1 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.18.1 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-doc-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.18.1 * libgstsctp-1_0-0-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.18.1 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-1.16.3-150300.9.18.1 * openSUSE Leap 15.3 (x86_64) * libgstinsertbin-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-32bit-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-32bit-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-32bit-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-32bit-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-32bit-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-32bit-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-32bit-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstsctp-1_0-0-32bit-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-32bit-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-32bit-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-32bit-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-32bit-debuginfo-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-32bit-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-32bit-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-32bit-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstsctp-1_0-0-32bit-debuginfo-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-32bit-1.16.3-150300.9.18.1 * openSUSE Leap 15.3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.18.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libgstsctp-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-64bit-debuginfo-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-64bit-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-64bit-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-64bit-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-64bit-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-64bit-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-64bit-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-64bit-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-64bit-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-64bit-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-64bit-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-64bit-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-64bit-1.16.3-150300.9.18.1 * libgstsctp-1_0-0-64bit-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-64bit-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-64bit-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-64bit-debuginfo-1.16.3-150300.9.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.18.1 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-devel-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.18.1 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.18.1 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.18.1 * libgstsctp-1_0-0-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.18.1 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-1.16.3-150300.9.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.18.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.18.1 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-devel-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.18.1 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.18.1 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.18.1 * libgstsctp-1_0-0-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.18.1 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-1.16.3-150300.9.18.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.18.1 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-devel-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.18.1 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.18.1 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.18.1 * libgstsctp-1_0-0-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.18.1 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-1.16.3-150300.9.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.18.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libgstsctp-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-1.16.3-150300.9.18.1 * libgstbadaudio-1_0-0-debuginfo-1.16.3-150300.9.18.1 * typelib-1_0-GstPlayer-1_0-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-devel-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstmpegts-1_0-0-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-1.16.3-150300.9.18.1 * typelib-1_0-GstMpegts-1_0-1.16.3-150300.9.18.1 * typelib-1_0-GstWebRTC-1_0-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-1.16.3-150300.9.18.1 * libgstplayer-1_0-0-1.16.3-150300.9.18.1 * libgstwayland-1_0-0-1.16.3-150300.9.18.1 * libgstisoff-1_0-0-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-1.16.3-150300.9.18.1 * libgsturidownloader-1_0-0-1.16.3-150300.9.18.1 * libgstinsertbin-1_0-0-debuginfo-1.16.3-150300.9.18.1 * libgstwebrtc-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-debugsource-1.16.3-150300.9.18.1 * libgstsctp-1_0-0-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-150300.9.18.1 * libgstphotography-1_0-0-1.16.3-150300.9.18.1 * libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-1.16.3-150300.9.18.1 * libgstadaptivedemux-1_0-0-debuginfo-1.16.3-150300.9.18.1 * gstreamer-plugins-bad-debuginfo-1.16.3-150300.9.18.1 * typelib-1_0-GstInsertBin-1_0-1.16.3-150300.9.18.1 * libgstcodecparsers-1_0-0-1.16.3-150300.9.18.1 * SUSE Enterprise Storage 7.1 (noarch) * gstreamer-plugins-bad-lang-1.16.3-150300.9.18.1 ## References: * https://www.suse.com/security/cve/CVE-2023-44446.html * https://bugzilla.suse.com/show_bug.cgi?id=1217213

1 0

SUSE-SU-2024:0794-1: important: Security update for sudo
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0794-1 Rating: important References: * bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: * CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-794=1 openSUSE-SLE-15.5-2024-794=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-794=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-794=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * sudo-test-1.9.12p1-150500.7.7.1 * sudo-plugin-python-debuginfo-1.9.12p1-150500.7.7.1 * sudo-plugin-python-1.9.12p1-150500.7.7.1 * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-devel-1.9.12p1-150500.7.7.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-debuginfo-1.9.12p1-150500.7.7.1 * sudo-plugin-python-1.9.12p1-150500.7.7.1 * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-devel-1.9.12p1-150500.7.7.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1219026 * https://bugzilla.suse.com/show_bug.cgi?id=1220389

1 0

SUSE-SU-2024:0795-1: important: Security update for sudo
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0795-1 Rating: important References: * bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: * CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-795=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-795=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-795=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-795=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-795=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-795=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-795=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-795=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-795=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-795=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-795=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-795=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Proxy 4.3 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * sudo-test-1.9.9-150400.4.33.1 * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1219026 * https://bugzilla.suse.com/show_bug.cgi?id=1220389

1 0

SUSE-OU-2024:0801-1: low: Optional update for grpc
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Optional update for grpc Announcement ID: SUSE-OU-2024:0801-1 Rating: low References: * bsc#1220732 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for grpc fixes the following issue: * Add grpc-devel packages (bsc#1220732). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-801=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-801=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-801=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-801=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-801=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * upb-devel-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * grpc-devel-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * openSUSE Leap 15.4 (noarch) * grpc-source-1.60.0-150400.8.5.2 * openSUSE Leap 15.4 (x86_64) * libre2-11-32bit-debuginfo-20240201-150400.9.5.1 * libre2-11-32bit-20240201-150400.9.5.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libre2-11-64bit-20240201-150400.9.5.1 * libre2-11-64bit-debuginfo-20240201-150400.9.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * upb-devel-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * grpc-devel-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * openSUSE Leap 15.5 (noarch) * grpc-source-1.60.0-150400.8.5.2 * openSUSE Leap 15.5 (x86_64) * libre2-11-32bit-debuginfo-20240201-150400.9.5.1 * libre2-11-32bit-20240201-150400.9.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgrpc++1_60-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * grpc-debuginfo-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220732

1 0

SUSE-RU-2024:0802-1: moderate: Recommended update for wicked
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:0802-1 Rating: moderate References: * bsc#1215692 * bsc#1218926 * bsc#1218927 * bsc#1219265 * bsc#1219751 * jsc#PED-7183 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that contains one feature and has five fixes can now be installed. ## Description: This update for wicked fixes the following issues: * ifreload: VLAN changes require device deletion (bsc#1218927) * ifcheck: fix config changed check (bsc#1218926) * client: fix exit code for no-carrier status (bsc#1219265) * dhcp6: omit the SO_REUSEPORT option (bsc#1215692) * duid: fix comment for v6time * rtnl: fix peer address parsing for non ptp-interfaces * system-updater: Parse updater format from XML configuration to ensure install calls can run * team: add new options like link_watch_policy (jsc#PED-7183) * Fix memory leaks in dbus variant destroy and fsm free * xpath: allow underscore in node identifier * vxlan: don't format unknown rtnl attrs (bsc#1219751) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-802=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-802=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-802=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-802=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-802=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-802=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-802=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215692 * https://bugzilla.suse.com/show_bug.cgi?id=1218926 * https://bugzilla.suse.com/show_bug.cgi?id=1218927 * https://bugzilla.suse.com/show_bug.cgi?id=1219265 * https://bugzilla.suse.com/show_bug.cgi?id=1219751 * https://jira.suse.com/browse/PED-7183

1 0

SUSE-RU-2024:0788-1: moderate: Recommended update for saptune
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Recommended update for saptune Announcement ID: SUSE-RU-2024:0788-1 Rating: moderate References: * bsc#1219500 * jsc#PED-5025 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP2 * SAP Applications Module 15-SP3 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has one fix can now be installed. ## Description: This update for saptune fixes the following issues: * saptune was updated from version 3.1.1 to 3.1.2: * To support setups with saptune monitoring and heavy automation we limited the setting of our saptune lock to commands having the potential to change anything in the system. (bsc#1219500) * Fixed timestamp in log messages of saptune * Removed redundant version information in header comment of note definition files * SAP Note 1656250 updated to Version 63 SAP Note 1771258 updated to Version 8 SAP Note 2382421 updated to Version 45 SAP Note 3024346 updated to Version 10 but without parameter value changes, only house keeping of the version section and comment updates * SAP Note 1984787 updated to Version 42 SAP Note 2578899 updated to Version 47 * Added requirement of package `sysctl-logger` (jsc#PED-5025) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-788=1 * SAP Applications Module 15-SP2 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2024-788=1 * SAP Applications Module 15-SP3 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2024-788=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-788=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-788=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP2 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP3 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP4 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP5 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219500 * https://jira.suse.com/browse/PED-5025

1 0

openSUSE-RU-2024:0074-1: moderate: Recommended update for sshfs
by maintenance＠opensuse.org 06 Mar '24

06 Mar '24

openSUSE Recommended Update: Recommended update for sshfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0074-1 Rating: moderate References: #1215574 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sshfs fixes the following issues: Update to 3.7.4a: - Reverting PR #1 from user-reported bug (boo#1215574). Update to 3.7.4: - Support request size negotiation and increased throughput on high-latency connections - Supports connecting to vsock (7) via shfs -o vsock=CID:PORT @g-easy - README in markdown instead of rst - Various test fixes @neunenak Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-74=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): sshfs-3.7.4a-bp155.2.3.1 References: https://bugzilla.suse.com/1215574

1 0

SUSE-SU-2024:0784-1: important: Security update for python39
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Security update for python39 Announcement ID: SUSE-SU-2024:0784-1 Rating: important References: * bsc#1196025 * bsc#1210638 * bsc#1212015 * bsc#1214692 * bsc#1215454 * bsc#1219666 * jsc#PED-7886 * jsc#SLE-21253 Cross-References: * CVE-2022-25236 * CVE-2023-27043 * CVE-2023-40217 * CVE-2023-6597 CVSS scores: * CVE-2022-25236 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-25236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-40217 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2023-40217 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2023-6597 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities, contains two features and has two security fixes can now be installed. ## Description: This update for python39 fixes the following issues: * CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). * CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). * CVE-2023-40217: Fixed a ssl.SSLSocket TLS bypass vulnerability where data is sent unencrypted (bsc#1214692). * CVE-2022-25236: Fixed an expat vulnerability by supporting expat >= 2.4.4 (bsc#1212015). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-784=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-784=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-784=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-784=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-784=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-784=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-doc-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tk-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * python39-doc-devhelp-3.9.18-150300.4.38.1 * python39-testsuite-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-testsuite-debuginfo-3.9.18-150300.4.38.1 * openSUSE Leap 15.3 (x86_64) * libpython3_9-1_0-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-3.9.18-150300.4.38.1 * libpython3_9-1_0-32bit-3.9.18-150300.4.38.1 * python39-base-32bit-3.9.18-150300.4.38.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libpython3_9-1_0-64bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-64bit-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-64bit-3.9.18-150300.4.38.1 * python39-64bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-64bit-3.9.18-150300.4.38.1 * python39-64bit-3.9.18-150300.4.38.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-doc-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tk-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * python39-doc-devhelp-3.9.18-150300.4.38.1 * python39-testsuite-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-testsuite-debuginfo-3.9.18-150300.4.38.1 * openSUSE Leap 15.5 (x86_64) * libpython3_9-1_0-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-3.9.18-150300.4.38.1 * libpython3_9-1_0-32bit-3.9.18-150300.4.38.1 * python39-base-32bit-3.9.18-150300.4.38.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 ## References: * https://www.suse.com/security/cve/CVE-2022-25236.html * https://www.suse.com/security/cve/CVE-2023-27043.html * https://www.suse.com/security/cve/CVE-2023-40217.html * https://www.suse.com/security/cve/CVE-2023-6597.html * https://bugzilla.suse.com/show_bug.cgi?id=1196025 * https://bugzilla.suse.com/show_bug.cgi?id=1210638 * https://bugzilla.suse.com/show_bug.cgi?id=1212015 * https://bugzilla.suse.com/show_bug.cgi?id=1214692 * https://bugzilla.suse.com/show_bug.cgi?id=1215454 * https://bugzilla.suse.com/show_bug.cgi?id=1219666 * https://jira.suse.com/browse/PED-7886 * https://jira.suse.com/browse/SLE-21253

1 0

openSUSE-RU-2024:0073-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 06 Mar '24

06 Mar '24

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0073-1 Rating: moderate References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update of yast2-theme just rebuilds the yast2-theme package against current updates. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2024-73=1 Package List: - openSUSE Leap 15.5 (noarch): yast2-theme-4.5.0-lp155.2.4.1 yast2-theme-breeze-4.5.0-lp155.2.4.1 yast2-theme-oxygen-4.5.0-lp155.2.4.1 References:

1 0

SUSE-SU-2024:0782-1: important: Security update for python311
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Security update for python311 Announcement ID: SUSE-SU-2024:0782-1 Rating: important References: * bsc#1196025 * bsc#1210638 * bsc#1219666 Cross-References: * CVE-2022-25236 * CVE-2023-27043 * CVE-2023-6597 CVSS scores: * CVE-2022-25236 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-25236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-6597 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). * CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). * CVE-2022-25236: Fixed an expat vulnerability by supporting expat >= 2.4.4 (bsc#1212015). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-782=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-782=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-782=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-782=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-782=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * python311-testsuite-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-testsuite-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * openSUSE Leap 15.4 (x86_64) * libpython3_11-1_0-32bit-3.11.8-150400.9.23.1 * python311-base-32bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-3.11.8-150400.9.23.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_11-1_0-64bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-64bit-3.11.8-150400.9.23.1 * python311-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-64bit-3.11.8-150400.9.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * python311-testsuite-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-testsuite-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * openSUSE Leap 15.5 (x86_64) * libpython3_11-1_0-32bit-3.11.8-150400.9.23.1 * python311-base-32bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-3.11.8-150400.9.23.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 ## References: * https://www.suse.com/security/cve/CVE-2022-25236.html * https://www.suse.com/security/cve/CVE-2023-27043.html * https://www.suse.com/security/cve/CVE-2023-6597.html * https://bugzilla.suse.com/show_bug.cgi?id=1196025 * https://bugzilla.suse.com/show_bug.cgi?id=1210638 * https://bugzilla.suse.com/show_bug.cgi?id=1219666

1 0

SUSE-OU-2024:0774-1: moderate: Optional update for warewulf4
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Optional update for warewulf4 Announcement ID: SUSE-OU-2024:0774-1 Rating: moderate References: * bsc#1215583 * bsc#1220189 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 An update that has two fixes can now be installed. ## Description: This update for warewulf4 fixes the following issues: warewulf4 was updated to version 4.5.0rc2: * Changes in version 4.5.0rc2: * `wwctl node list` panics if a node uses a profile with a network which isn't present on this node (bsc#1220189) * Changes in version 4.5.0rc1: * All overlays reside now under a `rootfs` diretory e.g. the host overlays reside now under /var/lib/warewulf/host/rootfs. This has the advantage that the `rootfs` can be under a version control, without the effect that the meta files, e.g. `.git` will show up in the rendered overlays * Changes in version v4.5.0rc0: * Disks, partitions and file systems can set in the configuration and if ignition is present in the container, changes to the disks will be made * Grub can be used as alternative boot method instead of iPXE. The grub binary is extracted from the container and shim is executed before the grub. This enables secure boot * wwctl has now the genconfig subcommand which will print/create valid configurations * All paths e.g the overlay dir, can now be configured in warewulf.conf * Fixed a bug where profile tags were erroneously overridden by empty node values * Fixed bug where tags from profiles weren't rendered * Moved example templates for client overlays to example-templates/ in the package documentation * Renamed: `warewulf4-doc` to `warewulf4-man` * Renamed: `warewulf4-slurm` to `warewulf4-overlay-slurm` * Make only overlay dir being config files * Added documentation for replacing dhcpd and tftp with dnsmasq as README.dnsmasq (jira#HPC-65) * Check if automatic configured ip range doesn't contain ip address of ww4 host (bsc#1215583) * Removed the ipxe binaries * Set warewulf4-man and warewulf4-overlay-slurm to noarch * Use bash for config-warewulf.sh ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-774=1 openSUSE-SLE-15.5-2024-774=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2024-774=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * warewulf4-4.5.0~rc2-150500.6.5.1 * warewulf4-overlay-4.5.0~rc2-150500.6.5.1 * warewulf4-api-4.5.0~rc2-150500.6.5.1 * openSUSE Leap 15.5 (noarch) * warewulf4-overlay-slurm-4.5.0~rc2-150500.6.5.1 * warewulf4-man-4.5.0~rc2-150500.6.5.1 * HPC Module 15-SP5 (aarch64 x86_64) * warewulf4-4.5.0~rc2-150500.6.5.1 * warewulf4-overlay-4.5.0~rc2-150500.6.5.1 * warewulf4-api-4.5.0~rc2-150500.6.5.1 * HPC Module 15-SP5 (noarch) * warewulf4-overlay-slurm-4.5.0~rc2-150500.6.5.1 * warewulf4-man-4.5.0~rc2-150500.6.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215583 * https://bugzilla.suse.com/show_bug.cgi?id=1220189

1 0

SUSE-SU-2024:0769-1: critical: Security update for postgresql-jdbc
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for postgresql-jdbc Announcement ID: SUSE-SU-2024:0769-1 Rating: critical References: * bsc#1220644 Cross-References: * CVE-2024-1597 CVSS scores: * CVE-2024-1597 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for postgresql-jdbc fixes the following issues: * CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-769=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-769=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-769=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-769=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-769=1 ## Package List: * openSUSE Leap 15.3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * postgresql-jdbc-javadoc-42.2.25-150300.3.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * SUSE Enterprise Storage 7.1 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 ## References: * https://www.suse.com/security/cve/CVE-2024-1597.html * https://bugzilla.suse.com/show_bug.cgi?id=1220644

1 0

SUSE-SU-2024:0772-1: important: Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-SU-2024:0772-1 Rating: important References: * bsc#1220552 * jsc#PED-7117 Cross-References: * CVE-2022-42265 * CVE-2024-0074 * CVE-2024-0075 CVSS scores: * CVE-2022-42265 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2022-42265 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2024-0074 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-0075 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities and contains one feature can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Update to 550.54.14: * Added vGPU Host and vGPU Guest support. For vGPU Host, please refer to the README.vgpu packaged in the vGPU Host Package for more details. Security issues fixed: * CVE-2024-0074: A user could trigger a NULL ptr dereference. * CVE-2024-0075: A user could overwrite the end of a buffer, leading to crashes or code execution. * CVE-2022-42265: A unprivileged user could trigger an integer overflow which could lead to crashes or code execution. * create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks also during modprobing the nvidia module; this changes the issue of not having access to /dev/nvidia${devid}, when gfxcard has been replaced by a different gfx card after installing the driver * provide nvidia-open-driver-G06-kmp (jsc#PED-7117) This makes it easy to replace the package from nVidia's CUDA repository with this presigned package ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-772=1 openSUSE-SLE-15.5-2024-772=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-772=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-772=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-772=1 ## Package List: * openSUSE Leap 15.5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1 * openSUSE Leap 15.5 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-azure-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-azure-devel-550.54.14-150500.3.36.1 * openSUSE Leap 15.5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-default-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * openSUSE Leap 15.5 (aarch64) * nvidia-open-driver-G06-signed-64kb-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * Basesystem Module 15-SP5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1 * Basesystem Module 15-SP5 (aarch64) * nvidia-open-driver-G06-signed-64kb-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-default-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * Public Cloud Module 15-SP5 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-azure-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-azure-devel-550.54.14-150500.3.36.1 ## References: * https://www.suse.com/security/cve/CVE-2022-42265.html * https://www.suse.com/security/cve/CVE-2024-0074.html * https://www.suse.com/security/cve/CVE-2024-0075.html * https://bugzilla.suse.com/show_bug.cgi?id=1220552 * https://jira.suse.com/browse/PED-7117

1 0

SUSE-SU-2024:0773-1: critical: Security update for postgresql-jdbc
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for postgresql-jdbc Announcement ID: SUSE-SU-2024:0773-1 Rating: critical References: * bsc#1220644 Cross-References: * CVE-2024-1597 CVSS scores: * CVE-2024-1597 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for postgresql-jdbc fixes the following issues: * CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-773=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-773=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-773=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-773=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-773=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-773=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-773=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-773=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-773=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-773=1 ## Package List: * openSUSE Leap 15.4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * postgresql-jdbc-javadoc-42.2.25-150400.3.12.1 * openSUSE Leap 15.5 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * postgresql-jdbc-javadoc-42.2.25-150400.3.12.1 * Server Applications Module 15-SP5 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Manager Proxy 4.3 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Manager Server 4.3 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-1597.html * https://bugzilla.suse.com/show_bug.cgi?id=1220644

1 0

SUSE-RU-2024:0760-1: important: Recommended update for cloud-regionsrv-client
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Recommended update for cloud-regionsrv-client Announcement ID: SUSE-RU-2024:0760-1 Rating: important References: * bsc#1220164 * bsc#1220165 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for cloud-regionsrv-client contains the following fixes: * Update to version 10.1.7 (bsc#1220164, bsc#1220165) * Fix the failover path to a new target update server. At present a new server is not found since credential validation fails. We targeted the server detected in down condition to verify the credentials instead of the replacement server. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-760=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-760=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-760=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-760=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-760=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-760=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-760=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-760=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-760=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-760=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-760=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-760=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * openSUSE Leap Micro 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * openSUSE Leap 15.5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP2 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220164 * https://bugzilla.suse.com/show_bug.cgi?id=1220165

1 0

SUSE-SU-2024:0763-1: moderate: Security update for python-cryptography
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for python-cryptography Announcement ID: SUSE-SU-2024:0763-1 Rating: moderate References: * bsc#1220210 Cross-References: * CVE-2024-26130 CVSS scores: * CVE-2024-26130 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python-cryptography fixes the following issues: * CVE-2024-26130: Fixed NULL pointer dereference in pkcs12.serialize_key_and_certificates() (bsc#1220210). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-763=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-763=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-763=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python-cryptography-debugsource-41.0.3-150400.16.15.1 * python311-cryptography-debuginfo-41.0.3-150400.16.15.1 * python311-cryptography-41.0.3-150400.16.15.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-cryptography-debugsource-41.0.3-150400.16.15.1 * python311-cryptography-debuginfo-41.0.3-150400.16.15.1 * python311-cryptography-41.0.3-150400.16.15.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python-cryptography-debugsource-41.0.3-150400.16.15.1 * python311-cryptography-debuginfo-41.0.3-150400.16.15.1 * python311-cryptography-41.0.3-150400.16.15.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26130.html * https://bugzilla.suse.com/show_bug.cgi?id=1220210

1 0

SUSE-SU-2024:0764-1: important: Security update for wpa_supplicant
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for wpa_supplicant Announcement ID: SUSE-SU-2024:0764-1 Rating: important References: * bsc#1219975 Cross-References: * CVE-2023-52160 CVSS scores: * CVE-2023-52160 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52160 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: * CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-764=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-764=1 openSUSE-SLE-15.5-2024-764=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-764=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-2.10-150500.3.3.1 * wpa_supplicant-debugsource-2.10-150500.3.3.1 * wpa_supplicant-debuginfo-2.10-150500.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * wpa_supplicant-debugsource-2.10-150500.3.3.1 * wpa_supplicant-gui-2.10-150500.3.3.1 * wpa_supplicant-gui-debuginfo-2.10-150500.3.3.1 * wpa_supplicant-2.10-150500.3.3.1 * wpa_supplicant-debuginfo-2.10-150500.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * wpa_supplicant-2.10-150500.3.3.1 * wpa_supplicant-debugsource-2.10-150500.3.3.1 * wpa_supplicant-debuginfo-2.10-150500.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52160.html * https://bugzilla.suse.com/show_bug.cgi?id=1219975

1 0

SUSE-SU-2024:0765-1: important: Security update for rubygem-rack
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for rubygem-rack Announcement ID: SUSE-SU-2024:0765-1 Rating: important References: * bsc#1220239 * bsc#1220242 * bsc#1220248 Cross-References: * CVE-2024-25126 * CVE-2024-26141 * CVE-2024-26146 CVSS scores: * CVE-2024-25126 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26141 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26146 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP2 * SUSE Linux Enterprise High Availability Extension 15 SP3 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 Business Critical Linux 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves three vulnerabilities can now be installed. ## Description: This update for rubygem-rack fixes the following issues: * CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing (bsc#1220239). * CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing (bsc#1220242). * CVE-2024-26146: Fixed a denial-of-service vulnerability in Rack headers parsing routine (bsc#1220248). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP2 zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP3 zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-765=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2 * ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2 * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP2 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 ## References: * https://www.suse.com/security/cve/CVE-2024-25126.html * https://www.suse.com/security/cve/CVE-2024-26141.html * https://www.suse.com/security/cve/CVE-2024-26146.html * https://bugzilla.suse.com/show_bug.cgi?id=1220239 * https://bugzilla.suse.com/show_bug.cgi?id=1220242 * https://bugzilla.suse.com/show_bug.cgi?id=1220248

1 0

SUSE-SU-2024:0757-1: important: Security update for apache2-mod_auth_openidc
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for apache2-mod_auth_openidc Announcement ID: SUSE-SU-2024:0757-1 Rating: important References: * bsc#1219911 Cross-References: * CVE-2024-24814 CVSS scores: * CVE-2024-24814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for apache2-mod_auth_openidc fixes the following issues: * CVE-2024-24814: Fixed a denial of service when using `OIDCSessionType client-cookie` and manipulating cookies (bsc#1219911). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-757=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-757=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-757=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-757=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-757=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-757=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-757=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-757=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-757=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-757=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-757=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-757=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-757=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-757=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-757=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-757=1 ## Package List: * SUSE Manager Proxy 4.3 (x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24814.html * https://bugzilla.suse.com/show_bug.cgi?id=1219911

1 0

SUSE-RU-2024:0744-1: important: Recommended update for yast2-hana-update
by OPENSUSE-UPDATES 04 Mar '24

04 Mar '24

# Recommended update for yast2-hana-update Announcement ID: SUSE-RU-2024:0744-1 Rating: important References: * bsc#1158843 * bsc#1216079 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for yast2-hana-update fixes the following issues: * Fix reformatting output of SAPHanaSR-showAttr * Fix upgrade failure of SAP HANA when using YaST (bsc#1216079) * Fix broken gettext support (bsc#1158843) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-744=1 SUSE-2024-744=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-744=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * yast2-hana-update-1.2.3-150500.3.3.1 * SAP Applications Module 15-SP5 (ppc64le x86_64) * yast2-hana-update-1.2.3-150500.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1158843 * https://bugzilla.suse.com/show_bug.cgi?id=1216079

1 0

openSUSE-RU-2024:0072-1: moderate: Recommended update for piglit
by maintenance＠opensuse.org 03 Mar '24

03 Mar '24

openSUSE Recommended Update: Recommended update for piglit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0072-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for piglit fixes the following issues: - Update to version 1~20240202: * glsl: test globals are handled correctly across stage * Add GL_EXT_texture_storage tests * tests/llvmpipe: Fix CMake mis-matching arguments warning. * ci: teach codespell to accept my name * tests/llvmpipe: don't require git repository, allow running from tarball * tests/llvmpipe: drop unused GIT_HEAD_HASH_SHORT * test/util: call destroy before reporting the result * modifiers: Remove sampler-view tests * modifiers: Add QCOM_TILED3 * ext_transform_feedback: document missing mode in usage * arb_copy_image-formats: avoid undefined behavior * arb_texture_barrier: allow testing the extension under GL3.0 * arb_shader_atomic_counters-semantics: use correct output-type * egl_khr_create_context: add test for EXT_create_context_robustness and EXT_query_reset_notification_strategy - Update to version 1~20231228: * ext_render_snorm-render: Fix deprecated-non-prototype warning * version-mixing: Fix deprecated-non-prototype warning * draw-prim-rate: test more varying counts * glsl-1.10/built-in-uniform-state: don't test Infs due to undefined behavior * arb_vertex_program/property-bindings: don't test Infs due to undefined behavior * glsl-1.40: add a UBO test that I don't remember why I needed it * glsl-1.10: test a smooth color input with glShadeModel(GL_FLAT) * arb_fragment_layer_viewport: don't test out-of-range gl_Layer values * ext_render_snorm-render: lower test ctx version requirement * Implement piglit_subprocess for Windows * modifiers: Make a single list of the known modifiers. * modifiers: Allow specifying format and modifier * modifiers: Improve the presentation of results * modifiers: Add clear reimport subtest * modifiers: Add stress subtest * modifiers: Indent an inner loop * modifiers: Try to autogenerate dmabufs * framework: Add piglit_drm_create_dma_buf_modifiers * framework: Add an n_planes field * ext_image_dma_buf_import: Add a test for modifiers * ext_image_dma_buf_import: Support non-external textures * ext_image_dma_buf_import: Require GL_EXT_EGL_image_storage * Import the drm_fourcc/drm.h header and use them. * arb_tessellation_shader: Add new test tesslevels-indirect * ext_image_dma_buf_import: add a multithread refcount test * ext_image_dma_buf_import-export-tex: Print normal info to stdout, not stderr. * arb_separate_shader_objects/atomic-counter: Add missing GLSL requirement. * GL_ARB_arrays_of_arrays: Fix a missing extension requirement. * arb_shader_texture_lod: Fix incorrect require directive for the ext. * Use piglit_require_minimum_getinteger(GL_MAX_DRAW_BUFFERS) more. * fbo-mrt-alphatest: Actually require MRTs to be available. * piglit: Make a general helper for required glGetIntegerv values. * arb_copy_image: test copying of different mipmap levels of a texture * arb_copy_image: test copying of different mipmap levels of a texture * rendermode-feedback: fix stack-use-after-scope * readme: Update vkrunner link * add a test to verify that null attachments don't clamp fb size * shader_runner: allow -1 to indicate a null fb attachment * delete invalid gl_Layer/gl_Viewport tests * shader_runner: support setting GL_CLIP_DISTANCE enums * ext_render_snorm-render: test some negative values also * arb_blend_func_extended: Don't print expected compile fails to stderr. * shaders@glsl-max-varyings: reduce size of pixels * ci: test with Python 3.11 * cmake: Add Python 3.12 to supported versions * ext_external_objects: simplification for check_bound_fbo_status * ext_external_objects: cleanup, remove some global parameters * amd_gpu_shader_half_float: fix modf tests * EGL_EXT_image_dma_buf_import: add VYUY format support * EGL_EXT_image_dma_buf_import: add YVYU format support * EGL_EXT_image_dma_buf_import: add NV21 format support * ext_transform_feedback/api-errors: stop xfb before shutdown * nv_copy_image-simple: Use red instead of green * cmake: workaround BASH_COMPLETION_COMPLETIONSDIR pointing into wrong path * bash-completion: Remove #! from non-executable file * docs: Fix README link * arb_bindless_texture: add additional uniform struct test * glsl-1.10: add tests for clamp(abs(x)) and clamp(-x) * glsl-1.10: extend glsl-vs-copy-propagation-1 test * util: Pass explicit "-" for spirv-as input filename - Update to version 1~20230615: * cl: fix error in cl-api-create-program-with-binary * arb_gpu_shader5: Test a very specific case of bitfieldInsert - Update to version 1~20230613: * fface-invariant: Make the expected link failure go to stdout. * arb_arrays_of_arrays/max-binding: Don't log all the expected fails to stderr. * arb_texture_buffer_object: Don't compile the CS if GLSL version too low. * arb_blend_func_extended/output-location: Quiet expected link failure. * arb_cull_distance/exceed-limits: Don't log to stderr on expected result. * piglit: Don't warn about defaulting to GL under EGL if it's explicitly set. * gl-3.0-bound-resource-limits: Don't print to stderr on normal operation. * fface-invariant: Don't log to stderr when we compile fail as expected. * intel_performance_query: request 3.0 context * general/depth-clear-with-copy: New test. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-72=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): piglit-1~20240202-bp155.3.3.1 References:

1 0

openSUSE-RU-2024:0071-1: moderate: Recommended update for stress-ng
by maintenance＠opensuse.org 03 Mar '24

03 Mar '24

openSUSE Recommended Update: Recommended update for stress-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0071-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for stress-ng fixes the following issues: - update to 0.17.4: * kernel-coverage: add longer duration sysbadaddr test * stress-pthread: disable pthread_sigqueue call for CYGWIN * stress-tree: disable RB trees for CYGWIN * stress-sparsematrix: disable RB trees for CYGWIN * core-helper: add _start workaround for CYGWIN * core-shim: fix setdomainname check on HAVE_SETDOMAINNAME * stress-dir: don't reference non-POSIX d_reclen for CYGWIN * stress-mmapfork: use stress_mmap_populate for MAP_POPULATE * stress-xattr: workaround ENODATA not being defined for NetBSD * stress-metamix: voidify parameter temp_dir if O_DIRECTORY is not defined * core-time: voidify parameter dnow, cleans up Dilos build warning * stress-sysbadaddr: fix another valid fd check, should be >= 0 * stress-sysbadaddr: fix valid fd check, should be >= 0 * stress-sysbadaddr: close fdin rather than fdout on fdout open failure * stress-sysfs: use SCNu16 formate specifier for sscanf uint16_t * stress-sock: remove shadowed declaration of variable i * stress-vdso: add clock_getres * stress-sysinval: set dirfd mode, gid and uid back to original setting * stress-sigxfsz: retry setrlimit with smaller size if limit is too large * stress-copy-file: replace sizeof(char) with 8 * stress-copy-file: fix the max off_t, it's signed to cater for this * stress-sysbadaddr: use shim_cacheflush instead of direct system call * stress-sysbadaddr: pass different addresses to ppoll * stress-af-alg-defconfigs: re-order and remove blank lines * stress-mmap: add mprotect EACCESS error check for NetBSD * stress-metamix: add EBADF on fdatasync on read-only fd * stress-metamix: fix incorrect EBADF check * stress-metamix: ignore EBADF on fdatasync on read-only file * stress-ng: don't call mprotect if it does not exist * stress-syscall: add comment explaining why shell sort is used instead of qsort * stress-sysbadaddr: use VOID_RET for typed voidification of system call returns * Update copyright year to 2024 * Manual: remove . in Eigen description * stress-sock: exercise SO_SOCKET SO_* opts that return int type values * stress-sysbadaddr: only increment counter if a syscall is to be made * stress-sysbadaddr: avoid exercising system calls that will not fail * stress-sysbadaddr: add some more xattr system calls * stress-sysbadaddr: bad_fstat: exercise fstat on temp dir * stress-sysbadaddr: add copy_file_range * stress-sysbadaddr: add missing MIPS cacheflush system call * stress-syscall: add missing MIPS cacheflush system call * stress-sysbadaddr: exercise shim'd and non-shim'd syscalls * stress-sysbadaddr: exericse system call parameters with range of parameters * stress-sysbadaddr: only respawn child when bad addr breaks system call * core-version: define EQUAL_GNUC for all compiler times * stress-radixsort: remove array size specifiers to fix tcc build failures * core-builtin: add shim wrapper for __builtin_assume_aligned() * core-cache: add missing tab to clean up \ alignments * stress-vecshuf: remove redundant variables total_ops and total_bytes * stress-numa: Fix spelling mistake in comment * stress-memthrash: remove trailing space at end of line Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-71=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): stress-ng-0.17.04-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): stress-ng-bash-completion-0.17.04-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0070-1: moderate: Recommended update for fprintd
by maintenance＠opensuse.org 03 Mar '24

03 Mar '24

openSUSE Recommended Update: Recommended update for fprintd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0070-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fprintd fixes the following issues: - add supported USB devices as Supplements Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-70=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): fprintd-1.94.2-bp155.2.3.1 fprintd-pam-1.94.2-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): fprintd-pam-64bit-1.94.2-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): fprintd-devel-1.94.2-bp155.2.3.1 fprintd-doc-1.94.2-bp155.2.3.1 fprintd-lang-1.94.2-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0069-1: moderate: Recommended update for kamoso
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for kamoso ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0069-1 Rating: moderate References: #1220668 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kamoso fixes the following issues: - Add missing QML runtime dependencies (boo#1220668) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-69=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): kamoso-22.12.3-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): kamoso-lang-22.12.3-bp155.2.3.1 References: https://bugzilla.suse.com/1220668

1 0

SUSE-RU-2024:0741-1: moderate: Recommended update for bluez
by OPENSUSE-UPDATES 01 Mar '24

01 Mar '24

# Recommended update for bluez Announcement ID: SUSE-RU-2024:0741-1 Rating: moderate References: * bsc#1217251 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that has one fix can now be installed. ## Description: This update of bluez fixes the following issue: * The bluez-deprecated package is shipped again, as it contains some tools still in common use. (bsc#1217251) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-741=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-741=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-741=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-741=1 openSUSE-SLE-15.5-2024-741=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-741=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * bluez-deprecated-5.65-150500.3.8.1 * bluez-5.65-150500.3.8.1 * libbluetooth3-5.65-150500.3.8.1 * libbluetooth3-debuginfo-5.65-150500.3.8.1 * bluez-deprecated-debuginfo-5.65-150500.3.8.1 * bluez-debugsource-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * Basesystem Module 15-SP5 (noarch) * bluez-zsh-completion-5.65-150500.3.8.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * bluez-debugsource-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * bluez-devel-5.65-150500.3.8.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * bluez-cups-5.65-150500.3.8.1 * bluez-cups-debuginfo-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * bluez-debugsource-5.65-150500.3.8.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * bluez-cups-5.65-150500.3.8.1 * bluez-deprecated-5.65-150500.3.8.1 * bluez-5.65-150500.3.8.1 * bluez-debugsource-5.65-150500.3.8.1 * libbluetooth3-5.65-150500.3.8.1 * bluez-obexd-debuginfo-5.65-150500.3.8.1 * bluez-test-5.65-150500.3.8.1 * bluez-devel-5.65-150500.3.8.1 * bluez-deprecated-debuginfo-5.65-150500.3.8.1 * bluez-test-debuginfo-5.65-150500.3.8.1 * libbluetooth3-debuginfo-5.65-150500.3.8.1 * bluez-obexd-5.65-150500.3.8.1 * bluez-cups-debuginfo-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * openSUSE Leap 15.5 (noarch) * bluez-zsh-completion-5.65-150500.3.8.1 * bluez-auto-enable-devices-5.65-150500.3.8.1 * openSUSE Leap 15.5 (x86_64) * bluez-devel-32bit-5.65-150500.3.8.1 * libbluetooth3-32bit-5.65-150500.3.8.1 * libbluetooth3-32bit-debuginfo-5.65-150500.3.8.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libbluetooth3-64bit-debuginfo-5.65-150500.3.8.1 * libbluetooth3-64bit-5.65-150500.3.8.1 * bluez-devel-64bit-5.65-150500.3.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * bluez-debugsource-5.65-150500.3.8.1 * libbluetooth3-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * libbluetooth3-debuginfo-5.65-150500.3.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217251

1 0

openSUSE-RU-2024:0068-1: moderate: Recommended update for xmrig
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for xmrig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0068-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for xmrig fixes the following issues: Update to version 6.21.1: * Fix segfault in HTTP API rebind * Fixed Zephyr mining (OpenCL) * add support for townforge (monero fork using randomx) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-68=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 x86_64): xmrig-6.21.1-bp155.2.6.1 References:

1 0

openSUSE-RU-2024:0067-1: moderate: Recommended update for tesseract-ocr
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for tesseract-ocr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0067-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tesseract-ocr fixes the following issues: Update to 5.3.4 - Fixes for autoconf, clang and sw builds - Send output of combine_tessdata -d to stdout instead of stderr. Fixes #4149 in #4150 - Move bail_out function before libtoolize check in #4151 - Improve OCR for an image URL - Fail on curl download errors - Add new parameter curl_cookiefile for curl_easy_setopt in #4156 - Set User-Agent: header field in HTTP request for curl downloads - Force TCP v4 for socket to ScrollView server. Fixes #3000 in #4162 - Fix some compiler warnings and avoid unnecessary conversions from std::string to char pointer in #4174 - Fix a tiny typo in publictypes.h in #4178 - Fixes for autoconf, clang and sw builds - Other small improvements for code and documentation. Update to 5.3.3 - Disable -mfpu=neon for aarch64 in #4098 - Fix build without git clone in cloned directory in #4099 - Fix some issues which were reported by Coverity Scan in #4097 - Update ScrollView.java in #4103 - Fix some code comments in #4113 - Optimize function ImageFind::FindImages in #4114 - Rename BibTex file to please GitHub in #4115 - Fix Broken URLs in citations.bib in #4118 - initDSProfile: correct std::vector usage in #4124 - Fix typo in stepblob.h in #4133 - Fix regression in layout detection since 5.0.0 (fixes issue #4014) in #4136 - Update ScrollView.java in #4104 - Fix loading of sublangs (regression) in #4141 Update to 5.3.2 - fix: Fix snap package building in #4043 - Support for Sgaw and W Pwo Karen languages in the Myanmar validator. in #4065 - Replace bool array by more compact vector in #4067 - Replace deprecated sprintf in #4068 - Improve format of logging from lstmtraining in #4066 - Clean code in #4071 - Abort with error message if OSD is requested with LSTM-only model in #4073 - Fix typos in #4096 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-67=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): libtesseract5-5.3.4-bp155.3.6.1 tesseract-ocr-5.3.4-bp155.3.6.1 tesseract-ocr-devel-5.3.4-bp155.3.6.1 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): libtesseract5-64bit-5.3.4-bp155.3.6.1 References:

1 0

openSUSE-RU-2024:0066-1: moderate: Recommended update for claws-mail
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for claws-mail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0066-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for claws-mail fixes the following issues: - Fixed an issue where quotes in To or Cc are incorrectly escaped, leading to a corrupted list of recipients. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-66=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): claws-mail-4.1.1-bp155.2.3.1 claws-mail-devel-4.1.1-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): claws-mail-lang-4.1.1-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0065-1: moderate: Recommended update for kanidm
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0065-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kanidm fixes the following issues: Update to version 1.1.0~rc16~git4.d407844: * Remove zstd feature Update to version 1.1.0~rc16~git3.81298e8: * Allow /dev/tpmrm0 on older systemd versions (#2587) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-65=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.1.0~rc16~git4.d407844-bp155.11.1 kanidm-clients-1.1.0~rc16~git4.d407844-bp155.11.1 kanidm-docs-1.1.0~rc16~git4.d407844-bp155.11.1 kanidm-server-1.1.0~rc16~git4.d407844-bp155.11.1 kanidm-unixd-clients-1.1.0~rc16~git4.d407844-bp155.11.1 References:

1 0

openSUSE-RU-2024:0061-1: moderate: Recommended update for libbacktrace
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for libbacktrace ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0061-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for libbacktrace fixes the following issues: Introducing libbacktrace version 1.0_git20231130 to Leap. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-61=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libbacktrace-devel-1.0+git20231130-bp155.2.1 libbacktrace0-1.0+git20231130-bp155.2.1 References:

1 0

openSUSE-RU-2024:0062-1: important: Recommended update for virtualbox
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0062-1 Rating: important References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for virtualbox fixes the following issues: - Fix extpack updater to allow PUEL version 11 - Package UnattendedTemplates into main package - Install UnattendedTemplates for unattended installing. Version bump to VirtualBox 7.0.14 (released January 16, 2024 by Oracle) This is a maintenance release. The following items were fixed and/or added: - Audio: Added more fixes for switching host audio devices on Windows hosts using the WAS backend - 3D: Added general improvements - OCI: Fixed wrong guest RAM unit usage in VirtualSystemDescription, memory is provided in bytes, "Byte" is the base unit - Main: OVF Import/Export: Added support for importing and exporting VMs containing NVMe storage controllers (bug #19320) - Main: OVF Import/Export: Added support for exporting a VM which contains a medium inserted into a virtual CD/DVD drive which is attached to a Virtio-SCSI controller - Devices: Fixed a problem where Windows guests "forget" in-progress touch events when the user holds down a finger without moving it for a period of time. - macOS Host USB: Added support for newer storage devices - macOS Host: Fixed memory Leak in the VBoxIntNetSwitch process when VM was configured to use 'Internal Networking' (bug #21752) - Linux Host and Guest: Added initial support for RHEL 9.4 kernel - Linux Guest Additions: Fixed kernel panic on RHEL 8.9 kernel caused by vboxvideo (bugs #10381 and #21911) - Solaris Guest Additions: Added support for the Additions to be installed into an alternate root path ('pkgadd -R') - Solaris Guest Additions: Removed requirement to reboot VM after uninstalling GAs - RDP: Fix possible crash when connecting with the Apple Silicon variant of the Microsoft Remote Desktop application (bug #21820). - BIOS: Fixed handle number used for DMI OEM table (bug #19781) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2024-62=1 Package List: - openSUSE Leap 15.5 (noarch): virtualbox-guest-desktop-icons-7.0.14-lp155.2.16.2 virtualbox-guest-source-7.0.14-lp155.2.16.2 virtualbox-host-source-7.0.14-lp155.2.16.2 - openSUSE Leap 15.5 (x86_64): python3-virtualbox-7.0.14-lp155.2.16.2 python3-virtualbox-debuginfo-7.0.14-lp155.2.16.2 virtualbox-7.0.14-lp155.2.16.2 virtualbox-debuginfo-7.0.14-lp155.2.16.2 virtualbox-debugsource-7.0.14-lp155.2.16.2 virtualbox-devel-7.0.14-lp155.2.16.2 virtualbox-guest-tools-7.0.14-lp155.2.16.2 virtualbox-guest-tools-debuginfo-7.0.14-lp155.2.16.2 virtualbox-kmp-debugsource-7.0.14-lp155.2.16.1 virtualbox-kmp-default-7.0.14_k5.14.21_150500.55.49-lp155.2.16.1 virtualbox-kmp-default-debuginfo-7.0.14_k5.14.21_150500.55.49-lp155.2.16.1 virtualbox-qt-7.0.14-lp155.2.16.2 virtualbox-qt-debuginfo-7.0.14-lp155.2.16.2 virtualbox-vnc-7.0.14-lp155.2.16.2 virtualbox-websrv-7.0.14-lp155.2.16.2 virtualbox-websrv-debuginfo-7.0.14-lp155.2.16.2 References:

1 0

openSUSE-SU-2024:0064-1: moderate: Security update for zabbix
by opensuse-security＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Security Update: Security update for zabbix ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0064-1 Rating: moderate References: #1219775 Cross-References: CVE-2024-22119 CVSS scores: CVE-2024-22119 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2024-22119 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for zabbix fixes the following issues: - CVE-2024-22119: Fixed a stored XSS in graph items select form (boo#1219775). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-64=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): zabbix-agent-4.0.50-bp155.3.12.1 zabbix-java-gateway-4.0.50-bp155.3.12.1 zabbix-phpfrontend-4.0.50-bp155.3.12.1 zabbix-proxy-4.0.50-bp155.3.12.1 zabbix-proxy-mysql-4.0.50-bp155.3.12.1 zabbix-proxy-postgresql-4.0.50-bp155.3.12.1 zabbix-proxy-sqlite-4.0.50-bp155.3.12.1 zabbix-server-4.0.50-bp155.3.12.1 zabbix-server-mysql-4.0.50-bp155.3.12.1 zabbix-server-postgresql-4.0.50-bp155.3.12.1 References: https://www.suse.com/security/cve/CVE-2024-22119.html https://bugzilla.suse.com/1219775

1 0

openSUSE-RU-2024:0063-1: moderate: Recommended update for rspamd
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for rspamd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0063-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rspamd fixes the following issues: - Update to 3.8.4 - [Fix] Allow different template expansion parameters by @vstakhov in #4830 - Update to 3.8.3 - This release includes a fix for a regression in redis_history which caused history to be recorded to a misnamed key. No other changes were introduced in this release - Update to 3.8.2 - [Feature] Add extraction type for from maps by @vstakhov in #4794 - [Rework] Breaking: Do not report module as action by @moisseev in #4795 - [Minor] Move server selection logic to common.js by @moisseev in #4796 - [WebUI] Show pass-through module in History by @moisseev in #4798 - [Feature] Allow to add templates to redis history prefix by @vstakhov in #4801 - Deal with Connection and Host headers on proxying by @vstakhov in #4802 - [Minor] configwizard: really use LOCAL_CONFDIR by @fatalbanana in #4804 - [Fix] Resolve issue with bayes stat in rspamadm mode by @vstakhov in #4805 - [Minor] rspamd_task API docs: fix broken link by @fatalbanana in #4807 - [Minor] Add more returnbits to surbl configuration by @fatalbanana in #4803 - [Feature] Support JSON logging when in syslog mode by @vstakhov in #4813 - Fix issues with URL fragment in HTTP requests by @vstakhov in #4814 - [Fix] Encode headers in metadata exporter by @vstakhov in #4816 - Improve Kaspersky AS integration by @vstakhov in #4806 - Allow dynamic keypairs loading in fuzzy storage by @vstakhov in #4818 - Build tests with CTest in Cmake by @vstakhov in #4822 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-63=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): rspamd-3.8.4-bp155.2.18.1 References:

1 0

SUSE-RU-2024:0739-1: moderate: Recommended update for pesign
by OPENSUSE-UPDATES 01 Mar '24

01 Mar '24

# Recommended update for pesign Announcement ID: SUSE-RU-2024:0739-1 Rating: moderate References: * bsc#1219198 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for pesign fixes the following issue: * Fix errors when installing pesign alone (bsc#1219198) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-739=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-739=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-739=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-739=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-739=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-739=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-739=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-739=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-739=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-739=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-739=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-739=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-739=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-739=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-739=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-739=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-739=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * openSUSE Leap 15.5 (noarch) * pesign-systemd-0.112-150000.4.21.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * Basesystem Module 15-SP5 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Manager Proxy 4.3 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Manager Server 4.3 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219198

1 0

SUSE-SU-2024:0728-1: important: Security update for nodejs16
by OPENSUSE-UPDATES 01 Mar '24

01 Mar '24

# Security update for nodejs16 Announcement ID: SUSE-SU-2024:0728-1 Rating: important References: * bsc#1219993 * bsc#1219997 * bsc#1220014 * bsc#1220017 * bsc#1220053 Cross-References: * CVE-2023-46809 * CVE-2024-22019 * CVE-2024-22025 * CVE-2024-24758 * CVE-2024-24806 CVSS scores: * CVE-2023-46809 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2024-22019 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24758 ( SUSE ): 3.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L * CVE-2024-24806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-24806 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Server 4.3 An update that solves five vulnerabilities can now be installed. ## Description: This update for nodejs16 fixes the following issues: Security issues fixed: * CVE-2023-46809: Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) (bsc#1219997). * CVE-2024-22019: http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (bsc#1219993). * CVE-2024-22025: Denial of Service by resource exhaustion in fetch() brotli decoding (bsc#1220014). * CVE-2024-24758: ignore proxy-authorization header (bsc#1220017). * CVE-2024-24806: fix improper domain lookup that potentially leads to SSRF attacks (bsc#1219724). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-728=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-728=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-728=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-728=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-728=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-728=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * corepack16-16.20.2-150400.3.30.1 * openSUSE Leap 15.4 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * SUSE Manager Server 4.3 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46809.html * https://www.suse.com/security/cve/CVE-2024-22019.html * https://www.suse.com/security/cve/CVE-2024-22025.html * https://www.suse.com/security/cve/CVE-2024-24758.html * https://www.suse.com/security/cve/CVE-2024-24806.html * https://bugzilla.suse.com/show_bug.cgi?id=1219993 * https://bugzilla.suse.com/show_bug.cgi?id=1219997 * https://bugzilla.suse.com/show_bug.cgi?id=1220014 * https://bugzilla.suse.com/show_bug.cgi?id=1220017 * https://bugzilla.suse.com/show_bug.cgi?id=1220053

1 0

SUSE-SU-2024:0729-1: important: Security update for nodejs16
by OPENSUSE-UPDATES 01 Mar '24

01 Mar '24

# Security update for nodejs16 Announcement ID: SUSE-SU-2024:0729-1 Rating: important References: * bsc#1219993 * bsc#1219997 * bsc#1220014 * bsc#1220017 * bsc#1220053 Cross-References: * CVE-2023-46809 * CVE-2024-22019 * CVE-2024-22025 * CVE-2024-24758 * CVE-2024-24806 CVSS scores: * CVE-2023-46809 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2024-22019 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24758 ( SUSE ): 3.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L * CVE-2024-24806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-24806 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves five vulnerabilities can now be installed. ## Description: This update for nodejs16 fixes the following issues: Security issues fixed: * CVE-2023-46809: Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) (bsc#1219997). * CVE-2024-22019: http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (bsc#1219993). * CVE-2024-22025: Denial of Service by resource exhaustion in fetch() brotli decoding (bsc#1220014). * CVE-2024-24758: ignore proxy-authorization header (bsc#1220017). * CVE-2024-24806: fix improper domain lookup that potentially leads to SSRF attacks (bsc#1219724). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-729=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-729=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-729=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-729=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-729=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * corepack16-16.20.2-150300.7.33.1 * npm16-16.20.2-150300.7.33.1 * nodejs16-debugsource-16.20.2-150300.7.33.1 * nodejs16-devel-16.20.2-150300.7.33.1 * nodejs16-debuginfo-16.20.2-150300.7.33.1 * nodejs16-16.20.2-150300.7.33.1 * openSUSE Leap 15.3 (noarch) * nodejs16-docs-16.20.2-150300.7.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * npm16-16.20.2-150300.7.33.1 * nodejs16-debugsource-16.20.2-150300.7.33.1 * nodejs16-devel-16.20.2-150300.7.33.1 * nodejs16-debuginfo-16.20.2-150300.7.33.1 * nodejs16-16.20.2-150300.7.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * nodejs16-docs-16.20.2-150300.7.33.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * npm16-16.20.2-150300.7.33.1 * nodejs16-debugsource-16.20.2-150300.7.33.1 * nodejs16-devel-16.20.2-150300.7.33.1 * nodejs16-debuginfo-16.20.2-150300.7.33.1 * nodejs16-16.20.2-150300.7.33.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * nodejs16-docs-16.20.2-150300.7.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * npm16-16.20.2-150300.7.33.1 * nodejs16-debugsource-16.20.2-150300.7.33.1 * nodejs16-devel-16.20.2-150300.7.33.1 * nodejs16-debuginfo-16.20.2-150300.7.33.1 * nodejs16-16.20.2-150300.7.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * nodejs16-docs-16.20.2-150300.7.33.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * npm16-16.20.2-150300.7.33.1 * nodejs16-debugsource-16.20.2-150300.7.33.1 * nodejs16-devel-16.20.2-150300.7.33.1 * nodejs16-debuginfo-16.20.2-150300.7.33.1 * nodejs16-16.20.2-150300.7.33.1 * SUSE Enterprise Storage 7.1 (noarch) * nodejs16-docs-16.20.2-150300.7.33.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46809.html * https://www.suse.com/security/cve/CVE-2024-22019.html * https://www.suse.com/security/cve/CVE-2024-22025.html * https://www.suse.com/security/cve/CVE-2024-24758.html * https://www.suse.com/security/cve/CVE-2024-24806.html * https://bugzilla.suse.com/show_bug.cgi?id=1219993 * https://bugzilla.suse.com/show_bug.cgi?id=1219997 * https://bugzilla.suse.com/show_bug.cgi?id=1220014 * https://bugzilla.suse.com/show_bug.cgi?id=1220017 * https://bugzilla.suse.com/show_bug.cgi?id=1220053

1 0