March 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:0794-1: important: Security update for sudo
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0794-1 Rating: important References: * bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: * CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-794=1 openSUSE-SLE-15.5-2024-794=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-794=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-794=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * sudo-test-1.9.12p1-150500.7.7.1 * sudo-plugin-python-debuginfo-1.9.12p1-150500.7.7.1 * sudo-plugin-python-1.9.12p1-150500.7.7.1 * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-devel-1.9.12p1-150500.7.7.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-debuginfo-1.9.12p1-150500.7.7.1 * sudo-plugin-python-1.9.12p1-150500.7.7.1 * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-devel-1.9.12p1-150500.7.7.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1219026 * https://bugzilla.suse.com/show_bug.cgi?id=1220389

1 0

SUSE-SU-2024:0795-1: important: Security update for sudo
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0795-1 Rating: important References: * bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: * CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-795=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-795=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-795=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-795=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-795=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-795=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-795=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-795=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-795=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-795=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-795=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-795=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Proxy 4.3 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * sudo-test-1.9.9-150400.4.33.1 * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1219026 * https://bugzilla.suse.com/show_bug.cgi?id=1220389

1 0

SUSE-OU-2024:0801-1: low: Optional update for grpc
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Optional update for grpc Announcement ID: SUSE-OU-2024:0801-1 Rating: low References: * bsc#1220732 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for grpc fixes the following issue: * Add grpc-devel packages (bsc#1220732). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-801=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-801=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-801=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-801=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-801=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * upb-devel-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * grpc-devel-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * openSUSE Leap 15.4 (noarch) * grpc-source-1.60.0-150400.8.5.2 * openSUSE Leap 15.4 (x86_64) * libre2-11-32bit-debuginfo-20240201-150400.9.5.1 * libre2-11-32bit-20240201-150400.9.5.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libre2-11-64bit-20240201-150400.9.5.1 * libre2-11-64bit-debuginfo-20240201-150400.9.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * upb-devel-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * grpc-devel-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * openSUSE Leap 15.5 (noarch) * grpc-source-1.60.0-150400.8.5.2 * openSUSE Leap 15.5 (x86_64) * libre2-11-32bit-debuginfo-20240201-150400.9.5.1 * libre2-11-32bit-20240201-150400.9.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgrpc++1_60-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * grpc-debuginfo-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220732

1 0

SUSE-RU-2024:0802-1: moderate: Recommended update for wicked
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:0802-1 Rating: moderate References: * bsc#1215692 * bsc#1218926 * bsc#1218927 * bsc#1219265 * bsc#1219751 * jsc#PED-7183 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that contains one feature and has five fixes can now be installed. ## Description: This update for wicked fixes the following issues: * ifreload: VLAN changes require device deletion (bsc#1218927) * ifcheck: fix config changed check (bsc#1218926) * client: fix exit code for no-carrier status (bsc#1219265) * dhcp6: omit the SO_REUSEPORT option (bsc#1215692) * duid: fix comment for v6time * rtnl: fix peer address parsing for non ptp-interfaces * system-updater: Parse updater format from XML configuration to ensure install calls can run * team: add new options like link_watch_policy (jsc#PED-7183) * Fix memory leaks in dbus variant destroy and fsm free * xpath: allow underscore in node identifier * vxlan: don't format unknown rtnl attrs (bsc#1219751) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-802=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-802=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-802=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-802=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-802=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-802=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-802=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215692 * https://bugzilla.suse.com/show_bug.cgi?id=1218926 * https://bugzilla.suse.com/show_bug.cgi?id=1218927 * https://bugzilla.suse.com/show_bug.cgi?id=1219265 * https://bugzilla.suse.com/show_bug.cgi?id=1219751 * https://jira.suse.com/browse/PED-7183

1 0

SUSE-RU-2024:0788-1: moderate: Recommended update for saptune
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Recommended update for saptune Announcement ID: SUSE-RU-2024:0788-1 Rating: moderate References: * bsc#1219500 * jsc#PED-5025 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP2 * SAP Applications Module 15-SP3 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has one fix can now be installed. ## Description: This update for saptune fixes the following issues: * saptune was updated from version 3.1.1 to 3.1.2: * To support setups with saptune monitoring and heavy automation we limited the setting of our saptune lock to commands having the potential to change anything in the system. (bsc#1219500) * Fixed timestamp in log messages of saptune * Removed redundant version information in header comment of note definition files * SAP Note 1656250 updated to Version 63 SAP Note 1771258 updated to Version 8 SAP Note 2382421 updated to Version 45 SAP Note 3024346 updated to Version 10 but without parameter value changes, only house keeping of the version section and comment updates * SAP Note 1984787 updated to Version 42 SAP Note 2578899 updated to Version 47 * Added requirement of package `sysctl-logger` (jsc#PED-5025) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-788=1 * SAP Applications Module 15-SP2 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2024-788=1 * SAP Applications Module 15-SP3 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2024-788=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-788=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-788=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP2 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP3 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP4 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP5 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219500 * https://jira.suse.com/browse/PED-5025

1 0

openSUSE-RU-2024:0074-1: moderate: Recommended update for sshfs
by maintenance＠opensuse.org 06 Mar '24

06 Mar '24

openSUSE Recommended Update: Recommended update for sshfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0074-1 Rating: moderate References: #1215574 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sshfs fixes the following issues: Update to 3.7.4a: - Reverting PR #1 from user-reported bug (boo#1215574). Update to 3.7.4: - Support request size negotiation and increased throughput on high-latency connections - Supports connecting to vsock (7) via shfs -o vsock=CID:PORT @g-easy - README in markdown instead of rst - Various test fixes @neunenak Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-74=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): sshfs-3.7.4a-bp155.2.3.1 References: https://bugzilla.suse.com/1215574

1 0

SUSE-SU-2024:0784-1: important: Security update for python39
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Security update for python39 Announcement ID: SUSE-SU-2024:0784-1 Rating: important References: * bsc#1196025 * bsc#1210638 * bsc#1212015 * bsc#1214692 * bsc#1215454 * bsc#1219666 * jsc#PED-7886 * jsc#SLE-21253 Cross-References: * CVE-2022-25236 * CVE-2023-27043 * CVE-2023-40217 * CVE-2023-6597 CVSS scores: * CVE-2022-25236 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-25236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-40217 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2023-40217 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2023-6597 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities, contains two features and has two security fixes can now be installed. ## Description: This update for python39 fixes the following issues: * CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). * CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). * CVE-2023-40217: Fixed a ssl.SSLSocket TLS bypass vulnerability where data is sent unencrypted (bsc#1214692). * CVE-2022-25236: Fixed an expat vulnerability by supporting expat >= 2.4.4 (bsc#1212015). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-784=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-784=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-784=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-784=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-784=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-784=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-doc-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tk-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * python39-doc-devhelp-3.9.18-150300.4.38.1 * python39-testsuite-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-testsuite-debuginfo-3.9.18-150300.4.38.1 * openSUSE Leap 15.3 (x86_64) * libpython3_9-1_0-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-3.9.18-150300.4.38.1 * libpython3_9-1_0-32bit-3.9.18-150300.4.38.1 * python39-base-32bit-3.9.18-150300.4.38.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libpython3_9-1_0-64bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-64bit-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-64bit-3.9.18-150300.4.38.1 * python39-64bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-64bit-3.9.18-150300.4.38.1 * python39-64bit-3.9.18-150300.4.38.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-doc-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tk-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * python39-doc-devhelp-3.9.18-150300.4.38.1 * python39-testsuite-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-testsuite-debuginfo-3.9.18-150300.4.38.1 * openSUSE Leap 15.5 (x86_64) * libpython3_9-1_0-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-3.9.18-150300.4.38.1 * libpython3_9-1_0-32bit-3.9.18-150300.4.38.1 * python39-base-32bit-3.9.18-150300.4.38.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 ## References: * https://www.suse.com/security/cve/CVE-2022-25236.html * https://www.suse.com/security/cve/CVE-2023-27043.html * https://www.suse.com/security/cve/CVE-2023-40217.html * https://www.suse.com/security/cve/CVE-2023-6597.html * https://bugzilla.suse.com/show_bug.cgi?id=1196025 * https://bugzilla.suse.com/show_bug.cgi?id=1210638 * https://bugzilla.suse.com/show_bug.cgi?id=1212015 * https://bugzilla.suse.com/show_bug.cgi?id=1214692 * https://bugzilla.suse.com/show_bug.cgi?id=1215454 * https://bugzilla.suse.com/show_bug.cgi?id=1219666 * https://jira.suse.com/browse/PED-7886 * https://jira.suse.com/browse/SLE-21253

1 0

openSUSE-RU-2024:0073-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 06 Mar '24

06 Mar '24

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0073-1 Rating: moderate References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update of yast2-theme just rebuilds the yast2-theme package against current updates. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2024-73=1 Package List: - openSUSE Leap 15.5 (noarch): yast2-theme-4.5.0-lp155.2.4.1 yast2-theme-breeze-4.5.0-lp155.2.4.1 yast2-theme-oxygen-4.5.0-lp155.2.4.1 References:

1 0

SUSE-SU-2024:0782-1: important: Security update for python311
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Security update for python311 Announcement ID: SUSE-SU-2024:0782-1 Rating: important References: * bsc#1196025 * bsc#1210638 * bsc#1219666 Cross-References: * CVE-2022-25236 * CVE-2023-27043 * CVE-2023-6597 CVSS scores: * CVE-2022-25236 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-25236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-6597 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). * CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). * CVE-2022-25236: Fixed an expat vulnerability by supporting expat >= 2.4.4 (bsc#1212015). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-782=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-782=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-782=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-782=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-782=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * python311-testsuite-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-testsuite-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * openSUSE Leap 15.4 (x86_64) * libpython3_11-1_0-32bit-3.11.8-150400.9.23.1 * python311-base-32bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-3.11.8-150400.9.23.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_11-1_0-64bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-64bit-3.11.8-150400.9.23.1 * python311-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-64bit-3.11.8-150400.9.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * python311-testsuite-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-testsuite-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * openSUSE Leap 15.5 (x86_64) * libpython3_11-1_0-32bit-3.11.8-150400.9.23.1 * python311-base-32bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-3.11.8-150400.9.23.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 ## References: * https://www.suse.com/security/cve/CVE-2022-25236.html * https://www.suse.com/security/cve/CVE-2023-27043.html * https://www.suse.com/security/cve/CVE-2023-6597.html * https://bugzilla.suse.com/show_bug.cgi?id=1196025 * https://bugzilla.suse.com/show_bug.cgi?id=1210638 * https://bugzilla.suse.com/show_bug.cgi?id=1219666

1 0

SUSE-OU-2024:0774-1: moderate: Optional update for warewulf4
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Optional update for warewulf4 Announcement ID: SUSE-OU-2024:0774-1 Rating: moderate References: * bsc#1215583 * bsc#1220189 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 An update that has two fixes can now be installed. ## Description: This update for warewulf4 fixes the following issues: warewulf4 was updated to version 4.5.0rc2: * Changes in version 4.5.0rc2: * `wwctl node list` panics if a node uses a profile with a network which isn't present on this node (bsc#1220189) * Changes in version 4.5.0rc1: * All overlays reside now under a `rootfs` diretory e.g. the host overlays reside now under /var/lib/warewulf/host/rootfs. This has the advantage that the `rootfs` can be under a version control, without the effect that the meta files, e.g. `.git` will show up in the rendered overlays * Changes in version v4.5.0rc0: * Disks, partitions and file systems can set in the configuration and if ignition is present in the container, changes to the disks will be made * Grub can be used as alternative boot method instead of iPXE. The grub binary is extracted from the container and shim is executed before the grub. This enables secure boot * wwctl has now the genconfig subcommand which will print/create valid configurations * All paths e.g the overlay dir, can now be configured in warewulf.conf * Fixed a bug where profile tags were erroneously overridden by empty node values * Fixed bug where tags from profiles weren't rendered * Moved example templates for client overlays to example-templates/ in the package documentation * Renamed: `warewulf4-doc` to `warewulf4-man` * Renamed: `warewulf4-slurm` to `warewulf4-overlay-slurm` * Make only overlay dir being config files * Added documentation for replacing dhcpd and tftp with dnsmasq as README.dnsmasq (jira#HPC-65) * Check if automatic configured ip range doesn't contain ip address of ww4 host (bsc#1215583) * Removed the ipxe binaries * Set warewulf4-man and warewulf4-overlay-slurm to noarch * Use bash for config-warewulf.sh ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-774=1 openSUSE-SLE-15.5-2024-774=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2024-774=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * warewulf4-4.5.0~rc2-150500.6.5.1 * warewulf4-overlay-4.5.0~rc2-150500.6.5.1 * warewulf4-api-4.5.0~rc2-150500.6.5.1 * openSUSE Leap 15.5 (noarch) * warewulf4-overlay-slurm-4.5.0~rc2-150500.6.5.1 * warewulf4-man-4.5.0~rc2-150500.6.5.1 * HPC Module 15-SP5 (aarch64 x86_64) * warewulf4-4.5.0~rc2-150500.6.5.1 * warewulf4-overlay-4.5.0~rc2-150500.6.5.1 * warewulf4-api-4.5.0~rc2-150500.6.5.1 * HPC Module 15-SP5 (noarch) * warewulf4-overlay-slurm-4.5.0~rc2-150500.6.5.1 * warewulf4-man-4.5.0~rc2-150500.6.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215583 * https://bugzilla.suse.com/show_bug.cgi?id=1220189

1 0

SUSE-SU-2024:0769-1: critical: Security update for postgresql-jdbc
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for postgresql-jdbc Announcement ID: SUSE-SU-2024:0769-1 Rating: critical References: * bsc#1220644 Cross-References: * CVE-2024-1597 CVSS scores: * CVE-2024-1597 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for postgresql-jdbc fixes the following issues: * CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-769=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-769=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-769=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-769=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-769=1 ## Package List: * openSUSE Leap 15.3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * postgresql-jdbc-javadoc-42.2.25-150300.3.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 * SUSE Enterprise Storage 7.1 (noarch) * postgresql-jdbc-42.2.25-150300.3.14.1 ## References: * https://www.suse.com/security/cve/CVE-2024-1597.html * https://bugzilla.suse.com/show_bug.cgi?id=1220644

1 0

SUSE-SU-2024:0772-1: important: Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-SU-2024:0772-1 Rating: important References: * bsc#1220552 * jsc#PED-7117 Cross-References: * CVE-2022-42265 * CVE-2024-0074 * CVE-2024-0075 CVSS scores: * CVE-2022-42265 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2022-42265 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2024-0074 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-0075 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities and contains one feature can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Update to 550.54.14: * Added vGPU Host and vGPU Guest support. For vGPU Host, please refer to the README.vgpu packaged in the vGPU Host Package for more details. Security issues fixed: * CVE-2024-0074: A user could trigger a NULL ptr dereference. * CVE-2024-0075: A user could overwrite the end of a buffer, leading to crashes or code execution. * CVE-2022-42265: A unprivileged user could trigger an integer overflow which could lead to crashes or code execution. * create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks also during modprobing the nvidia module; this changes the issue of not having access to /dev/nvidia${devid}, when gfxcard has been replaced by a different gfx card after installing the driver * provide nvidia-open-driver-G06-kmp (jsc#PED-7117) This makes it easy to replace the package from nVidia's CUDA repository with this presigned package ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-772=1 openSUSE-SLE-15.5-2024-772=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-772=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-772=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-772=1 ## Package List: * openSUSE Leap 15.5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1 * openSUSE Leap 15.5 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-azure-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-azure-devel-550.54.14-150500.3.36.1 * openSUSE Leap 15.5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-default-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * openSUSE Leap 15.5 (aarch64) * nvidia-open-driver-G06-signed-64kb-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * Basesystem Module 15-SP5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1 * Basesystem Module 15-SP5 (aarch64) * nvidia-open-driver-G06-signed-64kb-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-default-devel-550.54.14-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1 * Public Cloud Module 15-SP5 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-kmp-azure-550.54.14_k5.14.21_150500.33.34-150500.3.36.1 * nvidia-open-driver-G06-signed-azure-devel-550.54.14-150500.3.36.1 ## References: * https://www.suse.com/security/cve/CVE-2022-42265.html * https://www.suse.com/security/cve/CVE-2024-0074.html * https://www.suse.com/security/cve/CVE-2024-0075.html * https://bugzilla.suse.com/show_bug.cgi?id=1220552 * https://jira.suse.com/browse/PED-7117

1 0

SUSE-SU-2024:0773-1: critical: Security update for postgresql-jdbc
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for postgresql-jdbc Announcement ID: SUSE-SU-2024:0773-1 Rating: critical References: * bsc#1220644 Cross-References: * CVE-2024-1597 CVSS scores: * CVE-2024-1597 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for postgresql-jdbc fixes the following issues: * CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-773=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-773=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-773=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-773=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-773=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-773=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-773=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-773=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-773=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-773=1 ## Package List: * openSUSE Leap 15.4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * postgresql-jdbc-javadoc-42.2.25-150400.3.12.1 * openSUSE Leap 15.5 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * postgresql-jdbc-javadoc-42.2.25-150400.3.12.1 * Server Applications Module 15-SP5 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Manager Proxy 4.3 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 * SUSE Manager Server 4.3 (noarch) * postgresql-jdbc-42.2.25-150400.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-1597.html * https://bugzilla.suse.com/show_bug.cgi?id=1220644

1 0

SUSE-RU-2024:0760-1: important: Recommended update for cloud-regionsrv-client
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Recommended update for cloud-regionsrv-client Announcement ID: SUSE-RU-2024:0760-1 Rating: important References: * bsc#1220164 * bsc#1220165 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for cloud-regionsrv-client contains the following fixes: * Update to version 10.1.7 (bsc#1220164, bsc#1220165) * Fix the failover path to a new target update server. At present a new server is not found since credential validation fails. We targeted the server detected in down condition to verify the credentials instead of the replacement server. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-760=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-760=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-760=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-760=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-760=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-760=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-760=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-760=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-760=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-760=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-760=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-760=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * openSUSE Leap Micro 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * openSUSE Leap 15.5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP2 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP3 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP4 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 * Public Cloud Module 15-SP5 (noarch) * cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1 * cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1 * cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1 * cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1 * cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1 * cloud-regionsrv-client-10.1.7-150000.6.108.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220164 * https://bugzilla.suse.com/show_bug.cgi?id=1220165

1 0

SUSE-SU-2024:0763-1: moderate: Security update for python-cryptography
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for python-cryptography Announcement ID: SUSE-SU-2024:0763-1 Rating: moderate References: * bsc#1220210 Cross-References: * CVE-2024-26130 CVSS scores: * CVE-2024-26130 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python-cryptography fixes the following issues: * CVE-2024-26130: Fixed NULL pointer dereference in pkcs12.serialize_key_and_certificates() (bsc#1220210). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-763=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-763=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-763=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python-cryptography-debugsource-41.0.3-150400.16.15.1 * python311-cryptography-debuginfo-41.0.3-150400.16.15.1 * python311-cryptography-41.0.3-150400.16.15.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-cryptography-debugsource-41.0.3-150400.16.15.1 * python311-cryptography-debuginfo-41.0.3-150400.16.15.1 * python311-cryptography-41.0.3-150400.16.15.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python-cryptography-debugsource-41.0.3-150400.16.15.1 * python311-cryptography-debuginfo-41.0.3-150400.16.15.1 * python311-cryptography-41.0.3-150400.16.15.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26130.html * https://bugzilla.suse.com/show_bug.cgi?id=1220210

1 0

SUSE-SU-2024:0764-1: important: Security update for wpa_supplicant
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for wpa_supplicant Announcement ID: SUSE-SU-2024:0764-1 Rating: important References: * bsc#1219975 Cross-References: * CVE-2023-52160 CVSS scores: * CVE-2023-52160 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52160 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: * CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-764=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-764=1 openSUSE-SLE-15.5-2024-764=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-764=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-2.10-150500.3.3.1 * wpa_supplicant-debugsource-2.10-150500.3.3.1 * wpa_supplicant-debuginfo-2.10-150500.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * wpa_supplicant-debugsource-2.10-150500.3.3.1 * wpa_supplicant-gui-2.10-150500.3.3.1 * wpa_supplicant-gui-debuginfo-2.10-150500.3.3.1 * wpa_supplicant-2.10-150500.3.3.1 * wpa_supplicant-debuginfo-2.10-150500.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * wpa_supplicant-2.10-150500.3.3.1 * wpa_supplicant-debugsource-2.10-150500.3.3.1 * wpa_supplicant-debuginfo-2.10-150500.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52160.html * https://bugzilla.suse.com/show_bug.cgi?id=1219975

1 0

SUSE-SU-2024:0765-1: important: Security update for rubygem-rack
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for rubygem-rack Announcement ID: SUSE-SU-2024:0765-1 Rating: important References: * bsc#1220239 * bsc#1220242 * bsc#1220248 Cross-References: * CVE-2024-25126 * CVE-2024-26141 * CVE-2024-26146 CVSS scores: * CVE-2024-25126 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26141 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26146 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP2 * SUSE Linux Enterprise High Availability Extension 15 SP3 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 Business Critical Linux 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves three vulnerabilities can now be installed. ## Description: This update for rubygem-rack fixes the following issues: * CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing (bsc#1220239). * CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing (bsc#1220242). * CVE-2024-26146: Fixed a denial-of-service vulnerability in Rack headers parsing routine (bsc#1220248). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP2 zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP3 zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-765=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-765=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2 * ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2 * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP2 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.21.2 ## References: * https://www.suse.com/security/cve/CVE-2024-25126.html * https://www.suse.com/security/cve/CVE-2024-26141.html * https://www.suse.com/security/cve/CVE-2024-26146.html * https://bugzilla.suse.com/show_bug.cgi?id=1220239 * https://bugzilla.suse.com/show_bug.cgi?id=1220242 * https://bugzilla.suse.com/show_bug.cgi?id=1220248

1 0

SUSE-SU-2024:0757-1: important: Security update for apache2-mod_auth_openidc
by OPENSUSE-UPDATES 05 Mar '24

05 Mar '24

# Security update for apache2-mod_auth_openidc Announcement ID: SUSE-SU-2024:0757-1 Rating: important References: * bsc#1219911 Cross-References: * CVE-2024-24814 CVSS scores: * CVE-2024-24814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for apache2-mod_auth_openidc fixes the following issues: * CVE-2024-24814: Fixed a denial of service when using `OIDCSessionType client-cookie` and manipulating cookies (bsc#1219911). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-757=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-757=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-757=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-757=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-757=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-757=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-757=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-757=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-757=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-757=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-757=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-757=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-757=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-757=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-757=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-757=1 ## Package List: * SUSE Manager Proxy 4.3 (x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * apache2-mod_auth_openidc-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.28.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.28.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24814.html * https://bugzilla.suse.com/show_bug.cgi?id=1219911

1 0

SUSE-RU-2024:0744-1: important: Recommended update for yast2-hana-update
by OPENSUSE-UPDATES 04 Mar '24

04 Mar '24

# Recommended update for yast2-hana-update Announcement ID: SUSE-RU-2024:0744-1 Rating: important References: * bsc#1158843 * bsc#1216079 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for yast2-hana-update fixes the following issues: * Fix reformatting output of SAPHanaSR-showAttr * Fix upgrade failure of SAP HANA when using YaST (bsc#1216079) * Fix broken gettext support (bsc#1158843) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-744=1 SUSE-2024-744=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-744=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * yast2-hana-update-1.2.3-150500.3.3.1 * SAP Applications Module 15-SP5 (ppc64le x86_64) * yast2-hana-update-1.2.3-150500.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1158843 * https://bugzilla.suse.com/show_bug.cgi?id=1216079

1 0

openSUSE-RU-2024:0072-1: moderate: Recommended update for piglit
by maintenance＠opensuse.org 03 Mar '24

03 Mar '24

openSUSE Recommended Update: Recommended update for piglit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0072-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for piglit fixes the following issues: - Update to version 1~20240202: * glsl: test globals are handled correctly across stage * Add GL_EXT_texture_storage tests * tests/llvmpipe: Fix CMake mis-matching arguments warning. * ci: teach codespell to accept my name * tests/llvmpipe: don't require git repository, allow running from tarball * tests/llvmpipe: drop unused GIT_HEAD_HASH_SHORT * test/util: call destroy before reporting the result * modifiers: Remove sampler-view tests * modifiers: Add QCOM_TILED3 * ext_transform_feedback: document missing mode in usage * arb_copy_image-formats: avoid undefined behavior * arb_texture_barrier: allow testing the extension under GL3.0 * arb_shader_atomic_counters-semantics: use correct output-type * egl_khr_create_context: add test for EXT_create_context_robustness and EXT_query_reset_notification_strategy - Update to version 1~20231228: * ext_render_snorm-render: Fix deprecated-non-prototype warning * version-mixing: Fix deprecated-non-prototype warning * draw-prim-rate: test more varying counts * glsl-1.10/built-in-uniform-state: don't test Infs due to undefined behavior * arb_vertex_program/property-bindings: don't test Infs due to undefined behavior * glsl-1.40: add a UBO test that I don't remember why I needed it * glsl-1.10: test a smooth color input with glShadeModel(GL_FLAT) * arb_fragment_layer_viewport: don't test out-of-range gl_Layer values * ext_render_snorm-render: lower test ctx version requirement * Implement piglit_subprocess for Windows * modifiers: Make a single list of the known modifiers. * modifiers: Allow specifying format and modifier * modifiers: Improve the presentation of results * modifiers: Add clear reimport subtest * modifiers: Add stress subtest * modifiers: Indent an inner loop * modifiers: Try to autogenerate dmabufs * framework: Add piglit_drm_create_dma_buf_modifiers * framework: Add an n_planes field * ext_image_dma_buf_import: Add a test for modifiers * ext_image_dma_buf_import: Support non-external textures * ext_image_dma_buf_import: Require GL_EXT_EGL_image_storage * Import the drm_fourcc/drm.h header and use them. * arb_tessellation_shader: Add new test tesslevels-indirect * ext_image_dma_buf_import: add a multithread refcount test * ext_image_dma_buf_import-export-tex: Print normal info to stdout, not stderr. * arb_separate_shader_objects/atomic-counter: Add missing GLSL requirement. * GL_ARB_arrays_of_arrays: Fix a missing extension requirement. * arb_shader_texture_lod: Fix incorrect require directive for the ext. * Use piglit_require_minimum_getinteger(GL_MAX_DRAW_BUFFERS) more. * fbo-mrt-alphatest: Actually require MRTs to be available. * piglit: Make a general helper for required glGetIntegerv values. * arb_copy_image: test copying of different mipmap levels of a texture * arb_copy_image: test copying of different mipmap levels of a texture * rendermode-feedback: fix stack-use-after-scope * readme: Update vkrunner link * add a test to verify that null attachments don't clamp fb size * shader_runner: allow -1 to indicate a null fb attachment * delete invalid gl_Layer/gl_Viewport tests * shader_runner: support setting GL_CLIP_DISTANCE enums * ext_render_snorm-render: test some negative values also * arb_blend_func_extended: Don't print expected compile fails to stderr. * shaders@glsl-max-varyings: reduce size of pixels * ci: test with Python 3.11 * cmake: Add Python 3.12 to supported versions * ext_external_objects: simplification for check_bound_fbo_status * ext_external_objects: cleanup, remove some global parameters * amd_gpu_shader_half_float: fix modf tests * EGL_EXT_image_dma_buf_import: add VYUY format support * EGL_EXT_image_dma_buf_import: add YVYU format support * EGL_EXT_image_dma_buf_import: add NV21 format support * ext_transform_feedback/api-errors: stop xfb before shutdown * nv_copy_image-simple: Use red instead of green * cmake: workaround BASH_COMPLETION_COMPLETIONSDIR pointing into wrong path * bash-completion: Remove #! from non-executable file * docs: Fix README link * arb_bindless_texture: add additional uniform struct test * glsl-1.10: add tests for clamp(abs(x)) and clamp(-x) * glsl-1.10: extend glsl-vs-copy-propagation-1 test * util: Pass explicit "-" for spirv-as input filename - Update to version 1~20230615: * cl: fix error in cl-api-create-program-with-binary * arb_gpu_shader5: Test a very specific case of bitfieldInsert - Update to version 1~20230613: * fface-invariant: Make the expected link failure go to stdout. * arb_arrays_of_arrays/max-binding: Don't log all the expected fails to stderr. * arb_texture_buffer_object: Don't compile the CS if GLSL version too low. * arb_blend_func_extended/output-location: Quiet expected link failure. * arb_cull_distance/exceed-limits: Don't log to stderr on expected result. * piglit: Don't warn about defaulting to GL under EGL if it's explicitly set. * gl-3.0-bound-resource-limits: Don't print to stderr on normal operation. * fface-invariant: Don't log to stderr when we compile fail as expected. * intel_performance_query: request 3.0 context * general/depth-clear-with-copy: New test. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-72=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): piglit-1~20240202-bp155.3.3.1 References:

1 0

openSUSE-RU-2024:0071-1: moderate: Recommended update for stress-ng
by maintenance＠opensuse.org 03 Mar '24

03 Mar '24

openSUSE Recommended Update: Recommended update for stress-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0071-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for stress-ng fixes the following issues: - update to 0.17.4: * kernel-coverage: add longer duration sysbadaddr test * stress-pthread: disable pthread_sigqueue call for CYGWIN * stress-tree: disable RB trees for CYGWIN * stress-sparsematrix: disable RB trees for CYGWIN * core-helper: add _start workaround for CYGWIN * core-shim: fix setdomainname check on HAVE_SETDOMAINNAME * stress-dir: don't reference non-POSIX d_reclen for CYGWIN * stress-mmapfork: use stress_mmap_populate for MAP_POPULATE * stress-xattr: workaround ENODATA not being defined for NetBSD * stress-metamix: voidify parameter temp_dir if O_DIRECTORY is not defined * core-time: voidify parameter dnow, cleans up Dilos build warning * stress-sysbadaddr: fix another valid fd check, should be >= 0 * stress-sysbadaddr: fix valid fd check, should be >= 0 * stress-sysbadaddr: close fdin rather than fdout on fdout open failure * stress-sysfs: use SCNu16 formate specifier for sscanf uint16_t * stress-sock: remove shadowed declaration of variable i * stress-vdso: add clock_getres * stress-sysinval: set dirfd mode, gid and uid back to original setting * stress-sigxfsz: retry setrlimit with smaller size if limit is too large * stress-copy-file: replace sizeof(char) with 8 * stress-copy-file: fix the max off_t, it's signed to cater for this * stress-sysbadaddr: use shim_cacheflush instead of direct system call * stress-sysbadaddr: pass different addresses to ppoll * stress-af-alg-defconfigs: re-order and remove blank lines * stress-mmap: add mprotect EACCESS error check for NetBSD * stress-metamix: add EBADF on fdatasync on read-only fd * stress-metamix: fix incorrect EBADF check * stress-metamix: ignore EBADF on fdatasync on read-only file * stress-ng: don't call mprotect if it does not exist * stress-syscall: add comment explaining why shell sort is used instead of qsort * stress-sysbadaddr: use VOID_RET for typed voidification of system call returns * Update copyright year to 2024 * Manual: remove . in Eigen description * stress-sock: exercise SO_SOCKET SO_* opts that return int type values * stress-sysbadaddr: only increment counter if a syscall is to be made * stress-sysbadaddr: avoid exercising system calls that will not fail * stress-sysbadaddr: add some more xattr system calls * stress-sysbadaddr: bad_fstat: exercise fstat on temp dir * stress-sysbadaddr: add copy_file_range * stress-sysbadaddr: add missing MIPS cacheflush system call * stress-syscall: add missing MIPS cacheflush system call * stress-sysbadaddr: exercise shim'd and non-shim'd syscalls * stress-sysbadaddr: exericse system call parameters with range of parameters * stress-sysbadaddr: only respawn child when bad addr breaks system call * core-version: define EQUAL_GNUC for all compiler times * stress-radixsort: remove array size specifiers to fix tcc build failures * core-builtin: add shim wrapper for __builtin_assume_aligned() * core-cache: add missing tab to clean up \ alignments * stress-vecshuf: remove redundant variables total_ops and total_bytes * stress-numa: Fix spelling mistake in comment * stress-memthrash: remove trailing space at end of line Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-71=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): stress-ng-0.17.04-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): stress-ng-bash-completion-0.17.04-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0070-1: moderate: Recommended update for fprintd
by maintenance＠opensuse.org 03 Mar '24

03 Mar '24

openSUSE Recommended Update: Recommended update for fprintd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0070-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fprintd fixes the following issues: - add supported USB devices as Supplements Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-70=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): fprintd-1.94.2-bp155.2.3.1 fprintd-pam-1.94.2-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): fprintd-pam-64bit-1.94.2-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): fprintd-devel-1.94.2-bp155.2.3.1 fprintd-doc-1.94.2-bp155.2.3.1 fprintd-lang-1.94.2-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0069-1: moderate: Recommended update for kamoso
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for kamoso ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0069-1 Rating: moderate References: #1220668 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kamoso fixes the following issues: - Add missing QML runtime dependencies (boo#1220668) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-69=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): kamoso-22.12.3-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): kamoso-lang-22.12.3-bp155.2.3.1 References: https://bugzilla.suse.com/1220668

1 0

SUSE-RU-2024:0741-1: moderate: Recommended update for bluez
by OPENSUSE-UPDATES 01 Mar '24

01 Mar '24

# Recommended update for bluez Announcement ID: SUSE-RU-2024:0741-1 Rating: moderate References: * bsc#1217251 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that has one fix can now be installed. ## Description: This update of bluez fixes the following issue: * The bluez-deprecated package is shipped again, as it contains some tools still in common use. (bsc#1217251) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-741=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-741=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-741=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-741=1 openSUSE-SLE-15.5-2024-741=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-741=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * bluez-deprecated-5.65-150500.3.8.1 * bluez-5.65-150500.3.8.1 * libbluetooth3-5.65-150500.3.8.1 * libbluetooth3-debuginfo-5.65-150500.3.8.1 * bluez-deprecated-debuginfo-5.65-150500.3.8.1 * bluez-debugsource-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * Basesystem Module 15-SP5 (noarch) * bluez-zsh-completion-5.65-150500.3.8.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * bluez-debugsource-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * bluez-devel-5.65-150500.3.8.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * bluez-cups-5.65-150500.3.8.1 * bluez-cups-debuginfo-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * bluez-debugsource-5.65-150500.3.8.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * bluez-cups-5.65-150500.3.8.1 * bluez-deprecated-5.65-150500.3.8.1 * bluez-5.65-150500.3.8.1 * bluez-debugsource-5.65-150500.3.8.1 * libbluetooth3-5.65-150500.3.8.1 * bluez-obexd-debuginfo-5.65-150500.3.8.1 * bluez-test-5.65-150500.3.8.1 * bluez-devel-5.65-150500.3.8.1 * bluez-deprecated-debuginfo-5.65-150500.3.8.1 * bluez-test-debuginfo-5.65-150500.3.8.1 * libbluetooth3-debuginfo-5.65-150500.3.8.1 * bluez-obexd-5.65-150500.3.8.1 * bluez-cups-debuginfo-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * openSUSE Leap 15.5 (noarch) * bluez-zsh-completion-5.65-150500.3.8.1 * bluez-auto-enable-devices-5.65-150500.3.8.1 * openSUSE Leap 15.5 (x86_64) * bluez-devel-32bit-5.65-150500.3.8.1 * libbluetooth3-32bit-5.65-150500.3.8.1 * libbluetooth3-32bit-debuginfo-5.65-150500.3.8.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libbluetooth3-64bit-debuginfo-5.65-150500.3.8.1 * libbluetooth3-64bit-5.65-150500.3.8.1 * bluez-devel-64bit-5.65-150500.3.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * bluez-debugsource-5.65-150500.3.8.1 * libbluetooth3-5.65-150500.3.8.1 * bluez-debuginfo-5.65-150500.3.8.1 * libbluetooth3-debuginfo-5.65-150500.3.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1217251

1 0

openSUSE-RU-2024:0068-1: moderate: Recommended update for xmrig
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for xmrig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0068-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for xmrig fixes the following issues: Update to version 6.21.1: * Fix segfault in HTTP API rebind * Fixed Zephyr mining (OpenCL) * add support for townforge (monero fork using randomx) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-68=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 x86_64): xmrig-6.21.1-bp155.2.6.1 References:

1 0

openSUSE-RU-2024:0067-1: moderate: Recommended update for tesseract-ocr
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for tesseract-ocr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0067-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tesseract-ocr fixes the following issues: Update to 5.3.4 - Fixes for autoconf, clang and sw builds - Send output of combine_tessdata -d to stdout instead of stderr. Fixes #4149 in #4150 - Move bail_out function before libtoolize check in #4151 - Improve OCR for an image URL - Fail on curl download errors - Add new parameter curl_cookiefile for curl_easy_setopt in #4156 - Set User-Agent: header field in HTTP request for curl downloads - Force TCP v4 for socket to ScrollView server. Fixes #3000 in #4162 - Fix some compiler warnings and avoid unnecessary conversions from std::string to char pointer in #4174 - Fix a tiny typo in publictypes.h in #4178 - Fixes for autoconf, clang and sw builds - Other small improvements for code and documentation. Update to 5.3.3 - Disable -mfpu=neon for aarch64 in #4098 - Fix build without git clone in cloned directory in #4099 - Fix some issues which were reported by Coverity Scan in #4097 - Update ScrollView.java in #4103 - Fix some code comments in #4113 - Optimize function ImageFind::FindImages in #4114 - Rename BibTex file to please GitHub in #4115 - Fix Broken URLs in citations.bib in #4118 - initDSProfile: correct std::vector usage in #4124 - Fix typo in stepblob.h in #4133 - Fix regression in layout detection since 5.0.0 (fixes issue #4014) in #4136 - Update ScrollView.java in #4104 - Fix loading of sublangs (regression) in #4141 Update to 5.3.2 - fix: Fix snap package building in #4043 - Support for Sgaw and W Pwo Karen languages in the Myanmar validator. in #4065 - Replace bool array by more compact vector in #4067 - Replace deprecated sprintf in #4068 - Improve format of logging from lstmtraining in #4066 - Clean code in #4071 - Abort with error message if OSD is requested with LSTM-only model in #4073 - Fix typos in #4096 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-67=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): libtesseract5-5.3.4-bp155.3.6.1 tesseract-ocr-5.3.4-bp155.3.6.1 tesseract-ocr-devel-5.3.4-bp155.3.6.1 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): libtesseract5-64bit-5.3.4-bp155.3.6.1 References:

1 0

openSUSE-RU-2024:0066-1: moderate: Recommended update for claws-mail
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for claws-mail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0066-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for claws-mail fixes the following issues: - Fixed an issue where quotes in To or Cc are incorrectly escaped, leading to a corrupted list of recipients. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-66=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): claws-mail-4.1.1-bp155.2.3.1 claws-mail-devel-4.1.1-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): claws-mail-lang-4.1.1-bp155.2.3.1 References:

1 0

openSUSE-RU-2024:0065-1: moderate: Recommended update for kanidm
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0065-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kanidm fixes the following issues: Update to version 1.1.0~rc16~git4.d407844: * Remove zstd feature Update to version 1.1.0~rc16~git3.81298e8: * Allow /dev/tpmrm0 on older systemd versions (#2587) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-65=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.1.0~rc16~git4.d407844-bp155.11.1 kanidm-clients-1.1.0~rc16~git4.d407844-bp155.11.1 kanidm-docs-1.1.0~rc16~git4.d407844-bp155.11.1 kanidm-server-1.1.0~rc16~git4.d407844-bp155.11.1 kanidm-unixd-clients-1.1.0~rc16~git4.d407844-bp155.11.1 References:

1 0

openSUSE-RU-2024:0061-1: moderate: Recommended update for libbacktrace
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for libbacktrace ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0061-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for libbacktrace fixes the following issues: Introducing libbacktrace version 1.0_git20231130 to Leap. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-61=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libbacktrace-devel-1.0+git20231130-bp155.2.1 libbacktrace0-1.0+git20231130-bp155.2.1 References:

1 0

openSUSE-RU-2024:0062-1: important: Recommended update for virtualbox
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0062-1 Rating: important References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for virtualbox fixes the following issues: - Fix extpack updater to allow PUEL version 11 - Package UnattendedTemplates into main package - Install UnattendedTemplates for unattended installing. Version bump to VirtualBox 7.0.14 (released January 16, 2024 by Oracle) This is a maintenance release. The following items were fixed and/or added: - Audio: Added more fixes for switching host audio devices on Windows hosts using the WAS backend - 3D: Added general improvements - OCI: Fixed wrong guest RAM unit usage in VirtualSystemDescription, memory is provided in bytes, "Byte" is the base unit - Main: OVF Import/Export: Added support for importing and exporting VMs containing NVMe storage controllers (bug #19320) - Main: OVF Import/Export: Added support for exporting a VM which contains a medium inserted into a virtual CD/DVD drive which is attached to a Virtio-SCSI controller - Devices: Fixed a problem where Windows guests "forget" in-progress touch events when the user holds down a finger without moving it for a period of time. - macOS Host USB: Added support for newer storage devices - macOS Host: Fixed memory Leak in the VBoxIntNetSwitch process when VM was configured to use 'Internal Networking' (bug #21752) - Linux Host and Guest: Added initial support for RHEL 9.4 kernel - Linux Guest Additions: Fixed kernel panic on RHEL 8.9 kernel caused by vboxvideo (bugs #10381 and #21911) - Solaris Guest Additions: Added support for the Additions to be installed into an alternate root path ('pkgadd -R') - Solaris Guest Additions: Removed requirement to reboot VM after uninstalling GAs - RDP: Fix possible crash when connecting with the Apple Silicon variant of the Microsoft Remote Desktop application (bug #21820). - BIOS: Fixed handle number used for DMI OEM table (bug #19781) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2024-62=1 Package List: - openSUSE Leap 15.5 (noarch): virtualbox-guest-desktop-icons-7.0.14-lp155.2.16.2 virtualbox-guest-source-7.0.14-lp155.2.16.2 virtualbox-host-source-7.0.14-lp155.2.16.2 - openSUSE Leap 15.5 (x86_64): python3-virtualbox-7.0.14-lp155.2.16.2 python3-virtualbox-debuginfo-7.0.14-lp155.2.16.2 virtualbox-7.0.14-lp155.2.16.2 virtualbox-debuginfo-7.0.14-lp155.2.16.2 virtualbox-debugsource-7.0.14-lp155.2.16.2 virtualbox-devel-7.0.14-lp155.2.16.2 virtualbox-guest-tools-7.0.14-lp155.2.16.2 virtualbox-guest-tools-debuginfo-7.0.14-lp155.2.16.2 virtualbox-kmp-debugsource-7.0.14-lp155.2.16.1 virtualbox-kmp-default-7.0.14_k5.14.21_150500.55.49-lp155.2.16.1 virtualbox-kmp-default-debuginfo-7.0.14_k5.14.21_150500.55.49-lp155.2.16.1 virtualbox-qt-7.0.14-lp155.2.16.2 virtualbox-qt-debuginfo-7.0.14-lp155.2.16.2 virtualbox-vnc-7.0.14-lp155.2.16.2 virtualbox-websrv-7.0.14-lp155.2.16.2 virtualbox-websrv-debuginfo-7.0.14-lp155.2.16.2 References:

1 0

openSUSE-SU-2024:0064-1: moderate: Security update for zabbix
by opensuse-security＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Security Update: Security update for zabbix ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0064-1 Rating: moderate References: #1219775 Cross-References: CVE-2024-22119 CVSS scores: CVE-2024-22119 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2024-22119 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for zabbix fixes the following issues: - CVE-2024-22119: Fixed a stored XSS in graph items select form (boo#1219775). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-64=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): zabbix-agent-4.0.50-bp155.3.12.1 zabbix-java-gateway-4.0.50-bp155.3.12.1 zabbix-phpfrontend-4.0.50-bp155.3.12.1 zabbix-proxy-4.0.50-bp155.3.12.1 zabbix-proxy-mysql-4.0.50-bp155.3.12.1 zabbix-proxy-postgresql-4.0.50-bp155.3.12.1 zabbix-proxy-sqlite-4.0.50-bp155.3.12.1 zabbix-server-4.0.50-bp155.3.12.1 zabbix-server-mysql-4.0.50-bp155.3.12.1 zabbix-server-postgresql-4.0.50-bp155.3.12.1 References: https://www.suse.com/security/cve/CVE-2024-22119.html https://bugzilla.suse.com/1219775

1 0

openSUSE-RU-2024:0063-1: moderate: Recommended update for rspamd
by maintenance＠opensuse.org 01 Mar '24

01 Mar '24

openSUSE Recommended Update: Recommended update for rspamd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0063-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rspamd fixes the following issues: - Update to 3.8.4 - [Fix] Allow different template expansion parameters by @vstakhov in #4830 - Update to 3.8.3 - This release includes a fix for a regression in redis_history which caused history to be recorded to a misnamed key. No other changes were introduced in this release - Update to 3.8.2 - [Feature] Add extraction type for from maps by @vstakhov in #4794 - [Rework] Breaking: Do not report module as action by @moisseev in #4795 - [Minor] Move server selection logic to common.js by @moisseev in #4796 - [WebUI] Show pass-through module in History by @moisseev in #4798 - [Feature] Allow to add templates to redis history prefix by @vstakhov in #4801 - Deal with Connection and Host headers on proxying by @vstakhov in #4802 - [Minor] configwizard: really use LOCAL_CONFDIR by @fatalbanana in #4804 - [Fix] Resolve issue with bayes stat in rspamadm mode by @vstakhov in #4805 - [Minor] rspamd_task API docs: fix broken link by @fatalbanana in #4807 - [Minor] Add more returnbits to surbl configuration by @fatalbanana in #4803 - [Feature] Support JSON logging when in syslog mode by @vstakhov in #4813 - Fix issues with URL fragment in HTTP requests by @vstakhov in #4814 - [Fix] Encode headers in metadata exporter by @vstakhov in #4816 - Improve Kaspersky AS integration by @vstakhov in #4806 - Allow dynamic keypairs loading in fuzzy storage by @vstakhov in #4818 - Build tests with CTest in Cmake by @vstakhov in #4822 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-63=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): rspamd-3.8.4-bp155.2.18.1 References:

1 0

SUSE-RU-2024:0739-1: moderate: Recommended update for pesign
by OPENSUSE-UPDATES 01 Mar '24

01 Mar '24

# Recommended update for pesign Announcement ID: SUSE-RU-2024:0739-1 Rating: moderate References: * bsc#1219198 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for pesign fixes the following issue: * Fix errors when installing pesign alone (bsc#1219198) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-739=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-739=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-739=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-739=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-739=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-739=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-739=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-739=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-739=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-739=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-739=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-739=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-739=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-739=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-739=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-739=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-739=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * openSUSE Leap 15.5 (noarch) * pesign-systemd-0.112-150000.4.21.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * Basesystem Module 15-SP5 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * pesign-systemd-0.112-150000.4.21.1 * SUSE Manager Proxy 4.3 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Manager Server 4.3 (x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * pesign-debuginfo-0.112-150000.4.21.1 * pesign-debugsource-0.112-150000.4.21.1 * pesign-0.112-150000.4.21.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219198

1 0

SUSE-SU-2024:0728-1: important: Security update for nodejs16
by OPENSUSE-UPDATES 01 Mar '24

01 Mar '24

# Security update for nodejs16 Announcement ID: SUSE-SU-2024:0728-1 Rating: important References: * bsc#1219993 * bsc#1219997 * bsc#1220014 * bsc#1220017 * bsc#1220053 Cross-References: * CVE-2023-46809 * CVE-2024-22019 * CVE-2024-22025 * CVE-2024-24758 * CVE-2024-24806 CVSS scores: * CVE-2023-46809 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2024-22019 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24758 ( SUSE ): 3.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L * CVE-2024-24806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-24806 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Server 4.3 An update that solves five vulnerabilities can now be installed. ## Description: This update for nodejs16 fixes the following issues: Security issues fixed: * CVE-2023-46809: Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) (bsc#1219997). * CVE-2024-22019: http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (bsc#1219993). * CVE-2024-22025: Denial of Service by resource exhaustion in fetch() brotli decoding (bsc#1220014). * CVE-2024-24758: ignore proxy-authorization header (bsc#1220017). * CVE-2024-24806: fix improper domain lookup that potentially leads to SSRF attacks (bsc#1219724). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-728=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-728=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-728=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-728=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-728=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-728=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * corepack16-16.20.2-150400.3.30.1 * openSUSE Leap 15.4 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * nodejs16-debugsource-16.20.2-150400.3.30.1 * nodejs16-16.20.2-150400.3.30.1 * npm16-16.20.2-150400.3.30.1 * nodejs16-debuginfo-16.20.2-150400.3.30.1 * nodejs16-devel-16.20.2-150400.3.30.1 * SUSE Manager Server 4.3 (noarch) * nodejs16-docs-16.20.2-150400.3.30.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46809.html * https://www.suse.com/security/cve/CVE-2024-22019.html * https://www.suse.com/security/cve/CVE-2024-22025.html * https://www.suse.com/security/cve/CVE-2024-24758.html * https://www.suse.com/security/cve/CVE-2024-24806.html * https://bugzilla.suse.com/show_bug.cgi?id=1219993 * https://bugzilla.suse.com/show_bug.cgi?id=1219997 * https://bugzilla.suse.com/show_bug.cgi?id=1220014 * https://bugzilla.suse.com/show_bug.cgi?id=1220017 * https://bugzilla.suse.com/show_bug.cgi?id=1220053

1 0

SUSE-SU-2024:0729-1: important: Security update for nodejs16
by OPENSUSE-UPDATES 01 Mar '24

01 Mar '24

# Security update for nodejs16 Announcement ID: SUSE-SU-2024:0729-1 Rating: important References: * bsc#1219993 * bsc#1219997 * bsc#1220014 * bsc#1220017 * bsc#1220053 Cross-References: * CVE-2023-46809 * CVE-2024-22019 * CVE-2024-22025 * CVE-2024-24758 * CVE-2024-24806 CVSS scores: * CVE-2023-46809 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2024-22019 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24758 ( SUSE ): 3.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L * CVE-2024-24806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-24806 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves five vulnerabilities can now be installed. ## Description: This update for nodejs16 fixes the following issues: Security issues fixed: * CVE-2023-46809: Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) (bsc#1219997). * CVE-2024-22019: http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (bsc#1219993). * CVE-2024-22025: Denial of Service by resource exhaustion in fetch() brotli decoding (bsc#1220014). * CVE-2024-24758: ignore proxy-authorization header (bsc#1220017). * CVE-2024-24806: fix improper domain lookup that potentially leads to SSRF attacks (bsc#1219724). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-729=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-729=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-729=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-729=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-729=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * corepack16-16.20.2-150300.7.33.1 * npm16-16.20.2-150300.7.33.1 * nodejs16-debugsource-16.20.2-150300.7.33.1 * nodejs16-devel-16.20.2-150300.7.33.1 * nodejs16-debuginfo-16.20.2-150300.7.33.1 * nodejs16-16.20.2-150300.7.33.1 * openSUSE Leap 15.3 (noarch) * nodejs16-docs-16.20.2-150300.7.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * npm16-16.20.2-150300.7.33.1 * nodejs16-debugsource-16.20.2-150300.7.33.1 * nodejs16-devel-16.20.2-150300.7.33.1 * nodejs16-debuginfo-16.20.2-150300.7.33.1 * nodejs16-16.20.2-150300.7.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * nodejs16-docs-16.20.2-150300.7.33.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * npm16-16.20.2-150300.7.33.1 * nodejs16-debugsource-16.20.2-150300.7.33.1 * nodejs16-devel-16.20.2-150300.7.33.1 * nodejs16-debuginfo-16.20.2-150300.7.33.1 * nodejs16-16.20.2-150300.7.33.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * nodejs16-docs-16.20.2-150300.7.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * npm16-16.20.2-150300.7.33.1 * nodejs16-debugsource-16.20.2-150300.7.33.1 * nodejs16-devel-16.20.2-150300.7.33.1 * nodejs16-debuginfo-16.20.2-150300.7.33.1 * nodejs16-16.20.2-150300.7.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * nodejs16-docs-16.20.2-150300.7.33.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * npm16-16.20.2-150300.7.33.1 * nodejs16-debugsource-16.20.2-150300.7.33.1 * nodejs16-devel-16.20.2-150300.7.33.1 * nodejs16-debuginfo-16.20.2-150300.7.33.1 * nodejs16-16.20.2-150300.7.33.1 * SUSE Enterprise Storage 7.1 (noarch) * nodejs16-docs-16.20.2-150300.7.33.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46809.html * https://www.suse.com/security/cve/CVE-2024-22019.html * https://www.suse.com/security/cve/CVE-2024-22025.html * https://www.suse.com/security/cve/CVE-2024-24758.html * https://www.suse.com/security/cve/CVE-2024-24806.html * https://bugzilla.suse.com/show_bug.cgi?id=1219993 * https://bugzilla.suse.com/show_bug.cgi?id=1219997 * https://bugzilla.suse.com/show_bug.cgi?id=1220014 * https://bugzilla.suse.com/show_bug.cgi?id=1220017 * https://bugzilla.suse.com/show_bug.cgi?id=1220053

1 0