March 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:0794-1: important: Security update for sudo
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0794-1 Rating: important References: * bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: * CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-794=1 openSUSE-SLE-15.5-2024-794=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-794=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-794=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * sudo-test-1.9.12p1-150500.7.7.1 * sudo-plugin-python-debuginfo-1.9.12p1-150500.7.7.1 * sudo-plugin-python-1.9.12p1-150500.7.7.1 * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-devel-1.9.12p1-150500.7.7.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-debuginfo-1.9.12p1-150500.7.7.1 * sudo-plugin-python-1.9.12p1-150500.7.7.1 * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-devel-1.9.12p1-150500.7.7.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1219026 * https://bugzilla.suse.com/show_bug.cgi?id=1220389

1 0

SUSE-SU-2024:0795-1: important: Security update for sudo
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0795-1 Rating: important References: * bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: * CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-795=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-795=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-795=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-795=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-795=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-795=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-795=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-795=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-795=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-795=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-795=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-795=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Proxy 4.3 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * sudo-test-1.9.9-150400.4.33.1 * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1219026 * https://bugzilla.suse.com/show_bug.cgi?id=1220389

1 0

SUSE-OU-2024:0801-1: low: Optional update for grpc
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Optional update for grpc Announcement ID: SUSE-OU-2024:0801-1 Rating: low References: * bsc#1220732 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for grpc fixes the following issue: * Add grpc-devel packages (bsc#1220732). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-801=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-801=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-801=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-801=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-801=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * upb-devel-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * grpc-devel-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * openSUSE Leap 15.4 (noarch) * grpc-source-1.60.0-150400.8.5.2 * openSUSE Leap 15.4 (x86_64) * libre2-11-32bit-debuginfo-20240201-150400.9.5.1 * libre2-11-32bit-20240201-150400.9.5.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libre2-11-64bit-20240201-150400.9.5.1 * libre2-11-64bit-debuginfo-20240201-150400.9.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * upb-devel-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * grpc-devel-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * openSUSE Leap 15.5 (noarch) * grpc-source-1.60.0-150400.8.5.2 * openSUSE Leap 15.5 (x86_64) * libre2-11-32bit-debuginfo-20240201-150400.9.5.1 * libre2-11-32bit-20240201-150400.9.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgrpc++1_60-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * grpc-debuginfo-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220732

1 0

SUSE-RU-2024:0802-1: moderate: Recommended update for wicked
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:0802-1 Rating: moderate References: * bsc#1215692 * bsc#1218926 * bsc#1218927 * bsc#1219265 * bsc#1219751 * jsc#PED-7183 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that contains one feature and has five fixes can now be installed. ## Description: This update for wicked fixes the following issues: * ifreload: VLAN changes require device deletion (bsc#1218927) * ifcheck: fix config changed check (bsc#1218926) * client: fix exit code for no-carrier status (bsc#1219265) * dhcp6: omit the SO_REUSEPORT option (bsc#1215692) * duid: fix comment for v6time * rtnl: fix peer address parsing for non ptp-interfaces * system-updater: Parse updater format from XML configuration to ensure install calls can run * team: add new options like link_watch_policy (jsc#PED-7183) * Fix memory leaks in dbus variant destroy and fsm free * xpath: allow underscore in node identifier * vxlan: don't format unknown rtnl attrs (bsc#1219751) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-802=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-802=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-802=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-802=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-802=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-802=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-802=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215692 * https://bugzilla.suse.com/show_bug.cgi?id=1218926 * https://bugzilla.suse.com/show_bug.cgi?id=1218927 * https://bugzilla.suse.com/show_bug.cgi?id=1219265 * https://bugzilla.suse.com/show_bug.cgi?id=1219751 * https://jira.suse.com/browse/PED-7183

1 0

SUSE-RU-2024:0788-1: moderate: Recommended update for saptune
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Recommended update for saptune Announcement ID: SUSE-RU-2024:0788-1 Rating: moderate References: * bsc#1219500 * jsc#PED-5025 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP2 * SAP Applications Module 15-SP3 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has one fix can now be installed. ## Description: This update for saptune fixes the following issues: * saptune was updated from version 3.1.1 to 3.1.2: * To support setups with saptune monitoring and heavy automation we limited the setting of our saptune lock to commands having the potential to change anything in the system. (bsc#1219500) * Fixed timestamp in log messages of saptune * Removed redundant version information in header comment of note definition files * SAP Note 1656250 updated to Version 63 SAP Note 1771258 updated to Version 8 SAP Note 2382421 updated to Version 45 SAP Note 3024346 updated to Version 10 but without parameter value changes, only house keeping of the version section and comment updates * SAP Note 1984787 updated to Version 42 SAP Note 2578899 updated to Version 47 * Added requirement of package `sysctl-logger` (jsc#PED-5025) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-788=1 * SAP Applications Module 15-SP2 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2024-788=1 * SAP Applications Module 15-SP3 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2024-788=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-788=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-788=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP2 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP3 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP4 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP5 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219500 * https://jira.suse.com/browse/PED-5025

1 0

openSUSE-RU-2024:0074-1: moderate: Recommended update for sshfs
by maintenance＠opensuse.org 06 Mar '24

06 Mar '24

openSUSE Recommended Update: Recommended update for sshfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0074-1 Rating: moderate References: #1215574 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sshfs fixes the following issues: Update to 3.7.4a: - Reverting PR #1 from user-reported bug (boo#1215574). Update to 3.7.4: - Support request size negotiation and increased throughput on high-latency connections - Supports connecting to vsock (7) via shfs -o vsock=CID:PORT @g-easy - README in markdown instead of rst - Various test fixes @neunenak Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-74=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): sshfs-3.7.4a-bp155.2.3.1 References: https://bugzilla.suse.com/1215574

1 0

SUSE-SU-2024:0784-1: important: Security update for python39
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Security update for python39 Announcement ID: SUSE-SU-2024:0784-1 Rating: important References: * bsc#1196025 * bsc#1210638 * bsc#1212015 * bsc#1214692 * bsc#1215454 * bsc#1219666 * jsc#PED-7886 * jsc#SLE-21253 Cross-References: * CVE-2022-25236 * CVE-2023-27043 * CVE-2023-40217 * CVE-2023-6597 CVSS scores: * CVE-2022-25236 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-25236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-40217 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2023-40217 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2023-6597 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities, contains two features and has two security fixes can now be installed. ## Description: This update for python39 fixes the following issues: * CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). * CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). * CVE-2023-40217: Fixed a ssl.SSLSocket TLS bypass vulnerability where data is sent unencrypted (bsc#1214692). * CVE-2022-25236: Fixed an expat vulnerability by supporting expat >= 2.4.4 (bsc#1212015). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-784=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-784=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-784=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-784=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-784=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-784=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-doc-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tk-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * python39-doc-devhelp-3.9.18-150300.4.38.1 * python39-testsuite-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-testsuite-debuginfo-3.9.18-150300.4.38.1 * openSUSE Leap 15.3 (x86_64) * libpython3_9-1_0-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-3.9.18-150300.4.38.1 * libpython3_9-1_0-32bit-3.9.18-150300.4.38.1 * python39-base-32bit-3.9.18-150300.4.38.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libpython3_9-1_0-64bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-64bit-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-64bit-3.9.18-150300.4.38.1 * python39-64bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-64bit-3.9.18-150300.4.38.1 * python39-64bit-3.9.18-150300.4.38.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-doc-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tk-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * python39-doc-devhelp-3.9.18-150300.4.38.1 * python39-testsuite-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-testsuite-debuginfo-3.9.18-150300.4.38.1 * openSUSE Leap 15.5 (x86_64) * libpython3_9-1_0-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-3.9.18-150300.4.38.1 * libpython3_9-1_0-32bit-3.9.18-150300.4.38.1 * python39-base-32bit-3.9.18-150300.4.38.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 ## References: * https://www.suse.com/security/cve/CVE-2022-25236.html * https://www.suse.com/security/cve/CVE-2023-27043.html * https://www.suse.com/security/cve/CVE-2023-40217.html * https://www.suse.com/security/cve/CVE-2023-6597.html * https://bugzilla.suse.com/show_bug.cgi?id=1196025 * https://bugzilla.suse.com/show_bug.cgi?id=1210638 * https://bugzilla.suse.com/show_bug.cgi?id=1212015 * https://bugzilla.suse.com/show_bug.cgi?id=1214692 * https://bugzilla.suse.com/show_bug.cgi?id=1215454 * https://bugzilla.suse.com/show_bug.cgi?id=1219666 * https://jira.suse.com/browse/PED-7886 * https://jira.suse.com/browse/SLE-21253

1 0

openSUSE-RU-2024:0073-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 06 Mar '24

06 Mar '24

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0073-1 Rating: moderate References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update of yast2-theme just rebuilds the yast2-theme package against current updates. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2024-73=1 Package List: - openSUSE Leap 15.5 (noarch): yast2-theme-4.5.0-lp155.2.4.1 yast2-theme-breeze-4.5.0-lp155.2.4.1 yast2-theme-oxygen-4.5.0-lp155.2.4.1 References:

1 0

SUSE-SU-2024:0782-1: important: Security update for python311
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Security update for python311 Announcement ID: SUSE-SU-2024:0782-1 Rating: important References: * bsc#1196025 * bsc#1210638 * bsc#1219666 Cross-References: * CVE-2022-25236 * CVE-2023-27043 * CVE-2023-6597 CVSS scores: * CVE-2022-25236 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-25236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-6597 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). * CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). * CVE-2022-25236: Fixed an expat vulnerability by supporting expat >= 2.4.4 (bsc#1212015). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-782=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-782=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-782=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-782=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-782=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * python311-testsuite-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-testsuite-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * openSUSE Leap 15.4 (x86_64) * libpython3_11-1_0-32bit-3.11.8-150400.9.23.1 * python311-base-32bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-3.11.8-150400.9.23.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_11-1_0-64bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-64bit-3.11.8-150400.9.23.1 * python311-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-64bit-3.11.8-150400.9.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * python311-testsuite-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-testsuite-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * openSUSE Leap 15.5 (x86_64) * libpython3_11-1_0-32bit-3.11.8-150400.9.23.1 * python311-base-32bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-3.11.8-150400.9.23.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 ## References: * https://www.suse.com/security/cve/CVE-2022-25236.html * https://www.suse.com/security/cve/CVE-2023-27043.html * https://www.suse.com/security/cve/CVE-2023-6597.html * https://bugzilla.suse.com/show_bug.cgi?id=1196025 * https://bugzilla.suse.com/show_bug.cgi?id=1210638 * https://bugzilla.suse.com/show_bug.cgi?id=1219666

1 0

SUSE-OU-2024:0774-1: moderate: Optional update for warewulf4
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Optional update for warewulf4 Announcement ID: SUSE-OU-2024:0774-1 Rating: moderate References: * bsc#1215583 * bsc#1220189 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 An update that has two fixes can now be installed. ## Description: This update for warewulf4 fixes the following issues: warewulf4 was updated to version 4.5.0rc2: * Changes in version 4.5.0rc2: * `wwctl node list` panics if a node uses a profile with a network which isn't present on this node (bsc#1220189) * Changes in version 4.5.0rc1: * All overlays reside now under a `rootfs` diretory e.g. the host overlays reside now under /var/lib/warewulf/host/rootfs. This has the advantage that the `rootfs` can be under a version control, without the effect that the meta files, e.g. `.git` will show up in the rendered overlays * Changes in version v4.5.0rc0: * Disks, partitions and file systems can set in the configuration and if ignition is present in the container, changes to the disks will be made * Grub can be used as alternative boot method instead of iPXE. The grub binary is extracted from the container and shim is executed before the grub. This enables secure boot * wwctl has now the genconfig subcommand which will print/create valid configurations * All paths e.g the overlay dir, can now be configured in warewulf.conf * Fixed a bug where profile tags were erroneously overridden by empty node values * Fixed bug where tags from profiles weren't rendered * Moved example templates for client overlays to example-templates/ in the package documentation * Renamed: `warewulf4-doc` to `warewulf4-man` * Renamed: `warewulf4-slurm` to `warewulf4-overlay-slurm` * Make only overlay dir being config files * Added documentation for replacing dhcpd and tftp with dnsmasq as README.dnsmasq (jira#HPC-65) * Check if automatic configured ip range doesn't contain ip address of ww4 host (bsc#1215583) * Removed the ipxe binaries * Set warewulf4-man and warewulf4-overlay-slurm to noarch * Use bash for config-warewulf.sh ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-774=1 openSUSE-SLE-15.5-2024-774=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2024-774=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * warewulf4-4.5.0~rc2-150500.6.5.1 * warewulf4-overlay-4.5.0~rc2-150500.6.5.1 * warewulf4-api-4.5.0~rc2-150500.6.5.1 * openSUSE Leap 15.5 (noarch) * warewulf4-overlay-slurm-4.5.0~rc2-150500.6.5.1 * warewulf4-man-4.5.0~rc2-150500.6.5.1 * HPC Module 15-SP5 (aarch64 x86_64) * warewulf4-4.5.0~rc2-150500.6.5.1 * warewulf4-overlay-4.5.0~rc2-150500.6.5.1 * warewulf4-api-4.5.0~rc2-150500.6.5.1 * HPC Module 15-SP5 (noarch) * warewulf4-overlay-slurm-4.5.0~rc2-150500.6.5.1 * warewulf4-man-4.5.0~rc2-150500.6.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215583 * https://bugzilla.suse.com/show_bug.cgi?id=1220189

1 0

SUSE-SU-2024:0769-1: critical: Security update for postgresql-jdbc
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for postgresql-jdbc Announcement ID: SUSE-SU-2024:0769-1 Rating: critical References: * bsc#1220644 Cross-References: * CVE-2024-1597 CVSS scores: * CVE-2024-1597 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for postgresql-jdbc fixes the following issues: * CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-769=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-769=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-769=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-769=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-769=1 ## Package List: * openSUSE Leap 15.3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * postgresql-jdbc-javadoc-42.2.25-150300.3.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * SUSE Enterprise Storage 7.1 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 ## References: * https://www.suse.com/security/cve/CVE-2024-1597.html * https://bugzilla.suse.com/show_bug.cgi?id=1220644

1 0

SUSE-SU-2024:0772-1: important: Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-SU-2024:0772-1 Rating: important References: * bsc#1220552 * jsc#PED-7117 Cross-References: * CVE-2022-42265 * CVE-2024-0074 * CVE-2024-0075 CVSS scores: * CVE-2022-42265 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2022-42265 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2024-0074 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-0075 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities and contains one feature can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Update to 550.54.14: * Added vGPU Host and vGPU Guest support. For vGPU Host, please refer to the README.vgpu packaged in the vGPU Host Package for more details. Security issues fixed: * CVE-2024-0074: A user could trigger a NULL ptr dereference. * CVE-2024-0075: A user could overwrite the end of a buffer, leading to crashes or code execution. * CVE-2022-42265: A unprivileged user could trigger an integer overflow which could lead to crashes or code execution. * create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks also during modprobing the nvidia module; this changes the issue of not having access to /dev/nvidia${devid}, when gfxcard has been replaced by a different gfx card after installing the driver * provide nvidia-open-driver-G06-kmp (jsc#PED-7117) This makes it easy to replace the package from nVidia's CUDA repository with this presigned package ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-772=1 openSUSE-SLE-15.5-2024-772=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-772=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-772=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-772=1 ## Package List: * openSUSE Leap 15.5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1 * openSUSE Leap 15.5 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-azure-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-azure-devel-550.54.14-150500.3.36.1 * openSUSE Leap 15.5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-default-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * openSUSE Leap 15.5 (aarch64) * nvidia-open-driver-G06-signed-64kb-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * Basesystem Module 15-SP5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1 * Basesystem Module 15-SP5 (aarch64) * nvidia-open-driver-G06-signed-64kb-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-default-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * Public Cloud Module 15-SP5 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-azure-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-azure-devel-550.54.14-150500.3.36.1 ## References: * https://www.suse.com/security/cve/CVE-2022-42265.html * https://www.suse.com/security/cve/CVE-2024-0074.html * https://www.suse.com/security/cve/CVE-2024-0075.html * https://bugzilla.suse.com/show_bug.cgi?id=1220552 * https://jira.suse.com/browse/PED-7117

1 0

SUSE-SU-2024:0773-1: critical: Security update for postgresql-jdbc
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for postgresql-jdbc Announcement ID: SUSE-SU-2024:0773-1 Rating: critical References: * bsc#1220644 Cross-References: * CVE-2024-1597 CVSS scores: * CVE-2024-1597 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for postgresql-jdbc fixes the following issues: * CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-773=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-773=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-773=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-773=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-773=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-773=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-773=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-773=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-773=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-773=1 ## Package List: * openSUSE Leap 15.4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * postgresql-jdbc-javadoc-42.2.25-150400.3.12.1 * openSUSE Leap 15.5 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * postgresql-jdbc-javadoc-42.2.25-150400.3.12.1 * Server Applications Module 15-SP5 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Manager Proxy 4.3 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Manager Server 4.3 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-1597.html * https://bugzilla.suse.com/show_bug.cgi?id=1220644

1 0

SUSE-RU-2024:0760-1: important: Recommended update for cloud-regionsrv-client
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Recommended update for cloud-regionsrv-client Announcement ID: SUSE-RU-2024:0760-1 Rating: important References: * bsc#1220164 * bsc#1220165 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for cloud-regionsrv-client contains the following fixes: * Update to version 10.1.7 (bsc#1220164, bsc#1220165) * Fix the failover path to a new target update server. At present a new server is not found since credential validation fails. We targeted the server detected in down condition to verify the credentials instead of the replacement server. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-760=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-760=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-760=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-760=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-760=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-760=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-760=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-760=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-760=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-760=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-760=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-760=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * openSUSE Leap Micro 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * openSUSE Leap 15.5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP2 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220164 * https://bugzilla.suse.com/show_bug.cgi?id=1220165

1 0

SUSE-SU-2024:0763-1: moderate: Security update for python-cryptography
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for python-cryptography Announcement ID: SUSE-SU-2024:0763-1 Rating: moderate References: * bsc#1220210 Cross-References: * CVE-2024-26130 CVSS scores: * CVE-2024-26130 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python-cryptography fixes the following issues: * CVE-2024-26130: Fixed NULL pointer dereference in pkcs12.serialize_key_and_certificates() (bsc#1220210). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-763=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-763=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-763=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python-cryptography-debugsource-41.0.3-150400.16.15.1 * python311-cryptography-debuginfo-41.0.3-150400.16.15.1 * python311-cryptography-41.0.3-150400.16.15.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-cryptography-debugsource-41.0.3-150400.16.15.1 * python311-cryptography-debuginfo-41.0.3-150400.16.15.1 * python311-cryptography-41.0.3-150400.16.15.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python-cryptography-debugsource-41.0.3-150400.16.15.1 * python311-cryptography-debuginfo-41.0.3-150400.16.15.1 * python311-cryptography-41.0.3-150400.16.15.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26130.html * https://bugzilla.suse.com/show_bug.cgi?id=1220210

1 0

SUSE-SU-2024:0764-1: important: Security update for wpa_supplicant
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for wpa_supplicant Announcement ID: SUSE-SU-2024:0764-1 Rating: important References: * bsc#1219975 Cross-References: * CVE-2023-52160 CVSS scores: * CVE-2023-52160 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52160 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: * CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-764=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-764=1 openSUSE-SLE-15.5-2024-764=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-764=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-2.10-150500.3.3.1 * wpa_supplicant-debugsource-2.10-150500.3.3.1 * wpa_supplicant-debuginfo-2.10-150500.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * wpa_supplicant-debugsource-2.10-150500.3.3.1 * wpa_supplicant-gui-2.10-150500.3.3.1 * wpa_supplicant-gui-debuginfo-2.10-150500.3.3.1 * wpa_supplicant-2.10-150500.3.3.1 * wpa_supplicant-debuginfo-2.10-150500.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * wpa_supplicant-2.10-150500.3.3.1 * wpa_supplicant-debugsource-2.10-150500.3.3.1 * wpa_supplicant-debuginfo-2.10-150500.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52160.html * https://bugzilla.suse.com/show_bug.cgi?id=1219975

1 0

SUSE-SU-2024:0765-1: important: Security update for rubygem-rack
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for rubygem-rack Announcement ID: SUSE-SU-2024:0765-1 Rating: important References: * bsc#1220239 * bsc#1220242 * bsc#1220248 Cross-References: * CVE-2024-25126 * CVE-2024-26141 * CVE-2024-26146 CVSS scores: * CVE-2024-25126 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26141 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26146 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP2 * SUSE Linux Enterprise High Availability Extension 15 SP3 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 Business Critical Linux 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves three vulnerabilities can now be installed. ## Description: This update for rubygem-rack fixes the following issues: * CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing (bsc#1220239). * CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing (bsc#1220242). * CVE-2024-26146: Fixed a denial-of-service vulnerability in Rack headers parsing routine (bsc#1220248). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP2 zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP3 zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-765=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2 * ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2 * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP2 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 ## References: * https://www.suse.com/security/cve/CVE-2024-25126.html * https://www.suse.com/security/cve/CVE-2024-26141.html * https://www.suse.com/security/cve/CVE-2024-26146.html * https://bugzilla.suse.com/show_bug.cgi?id=1220239 * https://bugzilla.suse.com/show_bug.cgi?id=1220242 * https://bugzilla.suse.com/show_bug.cgi?id=1220248

1 0

SUSE-SU-2024:0757-1: important: Security update for apache2-mod_auth_openidc
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for apache2-mod_auth_openidc Announcement ID: SUSE-SU-2024:0757-1 Rating: important References: * bsc#1219911 Cross-References: * CVE-2024-24814 CVSS scores: * CVE-2024-24814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for apache2-mod_auth_openidc fixes the following issues: * CVE-2024-24814: Fixed a denial of service when using `OIDCSessionType client-cookie` and manipulating cookies (bsc#1219911). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-757=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-757=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-757=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-757=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-757=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-757=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-757=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-757=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-757=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-757=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-757=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-757=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-757=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-757=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-757=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-757=1 ## Package List: * SUSE Manager Proxy 4.3 (x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24814.html * https://bugzilla.suse.com/show_bug.cgi?id=1219911

1 0

SUSE-RU-2024:0744-1: important: Recommended update for yast2-hana-update
by OPENSUSE-UPDATES 04 Mar '24

04 Mar '24

# Recommended update for yast2-hana-update Announcement ID: SUSE-RU-2024:0744-1 Rating: important References: * bsc#1158843 * bsc#1216079 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for yast2-hana-update fixes the following issues: * Fix reformatting output of SAPHanaSR-showAttr * Fix upgrade failure of SAP HANA when using YaST (bsc#1216079) * Fix broken gettext support (bsc#1158843) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-744=1 SUSE-2024-744=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-744=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * yast2-hana-update-1.2.3-150500.3.3.1 * SAP Applications Module 15-SP5 (ppc64le x86_64) * yast2-hana-update-1.2.3-150500.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1158843 * https://bugzilla.suse.com/show_bug.cgi?id=1216079

1 0

openSUSE-RU-2024:0072-1: moderate: Recommended update for piglit
by maintenance＠opensuse.org 03 Mar '24

03 Mar '24

openSUSE Recommended Update: Recommended update for piglit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0072-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for piglit fixes the following issues: - Update to version 1~20240202: * glsl: test globals are handled correctly across stage * Add GL_EXT_texture_storage tests * tests/llvmpipe: Fix CMake mis-matching arguments warning. * ci: teach codespell to accept my name * tests/llvmpipe: don't require git repository, allow running from tarball * tests/llvmpipe: drop unused GIT_HEAD_HASH_SHORT * test/util: call destroy before reporting the result * modifiers: Remove sampler-view tests * modifiers: Add QCOM_TILED3 * ext_transform_feedback: document missing mode in usage * arb_copy_image-formats: avoid undefined behavior * arb_texture_barrier: allow testing the extension under GL3.0 * arb_shader_atomic_counters-semantics: use correct output-type * egl_khr_create_context: add test for EXT_create_context_robustness and EXT_query_reset_notification_strategy - Update to version 1~20231228: * ext_render_snorm-render: Fix deprecated-non-prototype warning * version-mixing: Fix deprecated-non-prototype warning * draw-prim-rate: test more varying counts * glsl-1.10/built-in-uniform-state: don't test Infs due to undefined behavior * arb_vertex_program/property-bindings: don't test Infs due to undefined behavior * glsl-1.40: add a UBO test that I don't remember why I needed it * glsl-1.10: test a smooth color input with glShadeModel(GL_FLAT) * arb_fragment_layer_viewport: don't test out-of-range gl_Layer values * ext_render_snorm-render: lower test ctx version requirement * Implement piglit_subprocess for Windows * modifiers: Make a single list of the known modifiers. * modifiers: Allow specifying format and modifier * modifiers: Improve the presentation of results * modifiers: Add clear reimport subtest * modifiers: Add stress subtest * modifiers: Indent an inner loop * modifiers: Try to autogenerate dmabufs * framework: Add piglit_drm_create_dma_buf_modifiers * framework: Add an n_planes field * ext_image_dma_buf_import: Add a test for modifiers * ext_image_dma_buf_import: Support non-external textures * ext_image_dma_buf_import: Require GL_EXT_EGL_image_storage * Import the drm_fourcc/drm.h header and use them. * arb_tessellation_shader: Add new test tesslevels-indirect * ext_image_dma_buf_import: add a multithread refcount test * ext_image_dma_buf_import-export-tex: Print normal info to stdout, not stderr. * arb_separate_shader_objects/atomic-counter: Add missing GLSL requirement. * GL_ARB_arrays_of_arrays: Fix a missing extension requirement. * arb_shader_texture_lod: Fix incorrect require directive for the ext. * Use piglit_require_minimum_getinteger(GL_MAX_DRAW_BUFFERS) more. * fbo-mrt-alphatest: Actually require MRTs to be available. * piglit: Make a general helper for required glGetIntegerv values. * arb_copy_image: test copying of different mipmap levels of a texture * arb_copy_image: test copying of different mipmap levels of a texture * rendermode-feedback: fix stack-use-after-scope * readme: Update vkrunner link * add a test to verify that null attachments don't clamp fb size * shader_runner: allow -1 to indicate a null fb attachment * delete invalid gl_Layer/gl_Viewport tests * shader_runner: support setting GL_CLIP_DISTANCE enums * ext_render_snorm-render: test some negative values also * arb_blend_func_extended: Don't print expected compile fails to stderr. * shaders@glsl-max-varyings: reduce size of pixels * ci: test with Python 3.11 * cmake: Add Python 3.12 to supported versions * ext_external_objects: simplification for check_bound_fbo_status * ext_external_objects: cleanup, remove some global parameters * amd_gpu_shader_half_float: fix modf tests * EGL_EXT_image_dma_buf_import: add VYUY format support * EGL_EXT_image_dma_buf_import: add YVYU format support * EGL_EXT_image_dma_buf_import: add NV21 format support * ext_transform_feedback/api-errors: stop xfb before shutdown * nv_copy_image-simple: Use red instead of green * cmake: workaround BASH_COMPLETION_COMPLETIONSDIR pointing into wrong path * bash-completion: Remove #! from non-executable file * docs: Fix README link * arb_bindless_texture: add additional uniform struct test * glsl-1.10: add tests for clamp(abs(x)) and clamp(-x) * glsl-1.10: extend glsl-vs-copy-propagation-1 test * util: Pass explicit "-" for spirv-as input filename - Update to version 1~20230615: * cl: fix error in cl-api-create-program-with-binary * arb_gpu_shader5: Test a very specific case of bitfieldInsert - Update to version 1~20230613: * fface-invariant: Make the expected link failure go to stdout. * arb_arrays_of_arrays/max-binding: Don't log all the expected fails to stderr. * arb_texture_buffer_object: Don't compile the CS if GLSL version too low. * arb_blend_func_extended/output-location: Quiet expected link failure. * arb_cull_distance/exceed-limits: Don't log to stderr on expected result. * piglit: Don't warn about defaulting to GL under EGL if it's explicitly set. * gl-3.0-bound-resource-limits: Don't print to stderr on normal operation. * fface-invariant: Don't log to stderr when we compile fail as expected. * intel_performance_query: request 3.0 context * general/depth-clear-with-copy: New test. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-72=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): piglit-1~20240202-bp155.3.3.1 References:

1 0

openSUSE-RU-2024:0071-1: moderate: Recommended update for stress-ng
by maintenance＠opensuse.org 03 Mar '24

03 Mar '24

openSUSE Recommended Update: Recommended update for stress-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0071-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for stress-ng fixes the following issues: - update to 0.17.4: * kernel-coverage: add longer duration sysbadaddr test * stress-pthread: disable pthread_sigqueue call for CYGWIN * stress-tree: disable RB trees for CYGWIN * stress-sparsematrix: disable RB trees for CYGWIN * core-helper: add _start workaround for CYGWIN * core-shim: fix setdomainname check on HAVE_SETDOMAINNAME * stress-dir: don't reference non-POSIX d_reclen for CYGWIN * stress-mmapfork: use stress_mmap_populate for MAP_POPULATE * stress-xattr: workaround ENODATA not being defined for NetBSD * stress-metamix: voidify parameter temp_dir if O_DIRECTORY is not defined * core-time: voidify parameter dnow, cleans up Dilos build warning * stress-sysbadaddr: fix another valid fd check, should be >= 0 * stress-sysbadaddr: fix valid fd check, should be >= 0 * stress-sysbadaddr: close fdin rather than fdout on fdout open failure * stress-sysfs: use SCNu16 formate specifier for sscanf uint16_t * stress-sock: remove shadowed declaration of variable i * stress-vdso: add clock_getres * stress-sysinval: set dirfd mode, gid and uid back to original setting * stress-sigxfsz: retry setrlimit with smaller size if limit is too large * stress-copy-file: replace sizeof(char) with 8 * stress-copy-file: fix the max off_t, it's signed to cater for this * stress-sysbadaddr: use shim_cacheflush instead of direct system call * stress-sysbadaddr: pass different addresses to ppoll * stress-af-alg-defconfigs: re-order and remove blank lines * stress-mmap: add mprotect EACCESS error check for NetBSD * stress-metamix: add EBADF on fdatasync on read-only fd * stress-metamix: fix incorrect EBADF check * stress-metamix: ignore EBADF on fdatasync on read-only file * stress-ng: don't call mprotect if it does not exist * stress-syscall: add comment explaining why shell sort is used instead of qsort * stress-sysbadaddr: use VOID_RET for typed voidification of system call returns * Update copyright year to 2024 * Manual: remove . in Eigen description * stress-sock: exercise SO_SOCKET SO_* opts that return int type values * stress-sysbadaddr: only increment counter if a syscall is to be made * stress-sysbadaddr: avoid exercising system calls that will not fail * stress-sysbadaddr: add some more xattr system calls * stress-sysbadaddr: bad_fstat: exercise fstat on temp dir * stress-sysbadaddr: add copy_file_range * stress-sysbadaddr: add missing MIPS cacheflush system call * stress-syscall: add missing MIPS cacheflush system call * stress-sysbadaddr: exercise shim'd and non-shim'd syscalls * stress-sysbadaddr: exericse system call parameters with range of parameters * stress-sysbadaddr: only respawn child when bad addr breaks system call * core-version: define EQUAL_GNUC for all compiler times * stress-radixsort: remove array size specifiers to fix tcc build failures * core-builtin: add shim wrapper for __builtin_assume_aligned() * core-cache: add missing tab to clean up \ alignments * stress-vecshuf: remove redundant variables total_ops and total_bytes * stress-numa: Fix spelling mistake in comment * stress-memthrash: remove trailing space at end of line Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-71=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): stress-ng-0.17.04-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): stress-ng-bash-completion-0.17.04-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0070-1: moderate: Recommended update for fprintd
by maintenance＠opensuse.org 03 Mar '24

03 Mar '24

openSUSE Recommended Update: Recommended update for fprintd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0070-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fprintd fixes the following issues: - add supported USB devices as Supplements Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-70=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): fprintd-1.94.2-bp155.2.3.1 fprintd-pam-1.94.2-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): fprintd-pam-64bit-1.94.2-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): fprintd-devel-1.94.2-bp155.2.3.1 fprintd-doc-1.94.2-bp155.2.3.1 fprintd-lang-1.94.2-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0069-1: moderate: Recommended update for kamoso
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for kamoso ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0069-1 Rating: moderate References: #1220668 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kamoso fixes the following issues: - Add missing QML runtime dependencies (boo#1220668) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-69=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): kamoso-22.12.3-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): kamoso-lang-22.12.3-bp155.2.3.1 References: https://bugzilla.suse.com/1220668

1 0

SUSE-RU-2024:0741-1: moderate: Recommended update for bluez
by OPENSUSE-UPDATES 01 Mar '24

01 Mar '24

# Recommended update for bluez Announcement ID: SUSE-RU-2024:0741-1 Rating: moderate References: * bsc#1217251 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that has one fix can now be installed. ## Description: This update of bluez fixes the following issue: * The bluez-deprecated package is shipped again, as it contains some tools still in common use. (bsc#1217251) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-741=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-741=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-741=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-741=1 openSUSE-SLE-15.5-2024-741=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-741=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * bluez-deprecated-5.65-150500.3.8.1 * bluez-5.65-150500.3.8.1 * libbluetooth3-5.65-150500.3.8.1 * libbluetooth3-debuginfo-5.65-150500.3.8.1 * bluez-deprecated-debuginfo-5.65-150500.3.8.1 * bluez-debugsource-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * Basesystem Module 15-SP5 (noarch) * bluez-zsh-completion-5.65-150500.3.8.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * bluez-debugsource-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * bluez-devel-5.65-150500.3.8.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * bluez-cups-5.65-150500.3.8.1 * bluez-cups-debuginfo-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * bluez-debugsource-5.65-150500.3.8.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * bluez-cups-5.65-150500.3.8.1 * bluez-deprecated-5.65-150500.3.8.1 * bluez-5.65-150500.3.8.1 * bluez-debugsource-5.65-150500.3.8.1 * libbluetooth3-5.65-150500.3.8.1 * bluez-obexd-debuginfo-5.65-150500.3.8.1 * bluez-test-5.65-150500.3.8.1 * bluez-devel-5.65-150500.3.8.1 * bluez-deprecated-debuginfo-5.65-150500.3.8.1 * bluez-test-debuginfo-5.65-150500.3.8.1 * libbluetooth3-debuginfo-5.65-150500.3.8.1 * bluez-obexd-5.65-150500.3.8.1 * bluez-cups-debuginfo-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * openSUSE Leap 15.5 (noarch) * bluez-zsh-completion-5.65-150500.3.8.1 * bluez-auto-enable-devices-5.65-150500.3.8.1 * openSUSE Leap 15.5 (x86_64) * bluez-devel-32bit-5.65-150500.3.8.1 * libbluetooth3-32bit-5.65-150500.3.8.1 * libbluetooth3-32bit-debuginfo-5.65-150500.3.8.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libbluetooth3-64bit-debuginfo-5.65-150500.3.8.1 * libbluetooth3-64bit-5.65-150500.3.8.1 * bluez-devel-64bit-5.65-150500.3.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * bluez-debugsource-5.65-150500.3.8.1 * libbluetooth3-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * libbluetooth3-debuginfo-5.65-150500.3.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217251

1 0

openSUSE-RU-2024:0068-1: moderate: Recommended update for xmrig
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for xmrig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0068-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for xmrig fixes the following issues: Update to version 6.21.1: * Fix segfault in HTTP API rebind * Fixed Zephyr mining (OpenCL) * add support for townforge (monero fork using randomx) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-68=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 x86_64): xmrig-6.21.1-bp155.2.6.1 References:

1 0