March 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:0794-1: important: Security update for sudo
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0794-1 Rating: important References: * bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: * CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-794=1 openSUSE-SLE-15.5-2024-794=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-794=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-794=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * sudo-test-1.9.12p1-150500.7.7.1 * sudo-plugin-python-debuginfo-1.9.12p1-150500.7.7.1 * sudo-plugin-python-1.9.12p1-150500.7.7.1 * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-devel-1.9.12p1-150500.7.7.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-debuginfo-1.9.12p1-150500.7.7.1 * sudo-plugin-python-1.9.12p1-150500.7.7.1 * sudo-debuginfo-1.9.12p1-150500.7.7.1 * sudo-1.9.12p1-150500.7.7.1 * sudo-debugsource-1.9.12p1-150500.7.7.1 * sudo-devel-1.9.12p1-150500.7.7.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1219026 * https://bugzilla.suse.com/show_bug.cgi?id=1220389

1 0

SUSE-SU-2024:0795-1: important: Security update for sudo
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Security update for sudo Announcement ID: SUSE-SU-2024:0795-1 Rating: important References: * bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465 CVSS scores: * CVE-2023-42465 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-42465 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for sudo fixes the following issues: * CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-795=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-795=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-795=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-795=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-795=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-795=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-795=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-795=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-795=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-795=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-795=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-795=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-795=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Proxy 4.3 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * sudo-test-1.9.9-150400.4.33.1 * sudo-plugin-python-1.9.9-150400.4.33.1 * sudo-debuginfo-1.9.9-150400.4.33.1 * sudo-debugsource-1.9.9-150400.4.33.1 * sudo-plugin-python-debuginfo-1.9.9-150400.4.33.1 * sudo-1.9.9-150400.4.33.1 * sudo-devel-1.9.9-150400.4.33.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42465.html * https://bugzilla.suse.com/show_bug.cgi?id=1219026 * https://bugzilla.suse.com/show_bug.cgi?id=1220389

1 0

SUSE-OU-2024:0801-1: low: Optional update for grpc
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Optional update for grpc Announcement ID: SUSE-OU-2024:0801-1 Rating: low References: * bsc#1220732 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for grpc fixes the following issue: * Add grpc-devel packages (bsc#1220732). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-801=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-801=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-801=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-801=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-801=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * upb-devel-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * grpc-devel-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * openSUSE Leap 15.4 (noarch) * grpc-source-1.60.0-150400.8.5.2 * openSUSE Leap 15.4 (x86_64) * libre2-11-32bit-debuginfo-20240201-150400.9.5.1 * libre2-11-32bit-20240201-150400.9.5.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libre2-11-64bit-20240201-150400.9.5.1 * libre2-11-64bit-debuginfo-20240201-150400.9.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * upb-devel-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * grpc-devel-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * openSUSE Leap 15.5 (noarch) * grpc-source-1.60.0-150400.8.5.2 * openSUSE Leap 15.5 (x86_64) * libre2-11-32bit-debuginfo-20240201-150400.9.5.1 * libre2-11-32bit-20240201-150400.9.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgrpc++1_60-1.60.0-150400.8.5.2 * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * re2-devel-20240201-150400.9.5.1 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * grpc-devel-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libgrpc++1_60-debuginfo-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * grpc-debuginfo-1.60.0-150400.8.5.2 * grpc-debugsource-1.60.0-150400.8.5.2 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgrpc37-1.60.0-150400.8.5.2 * re2-debugsource-20240201-150400.9.5.1 * grpc-debuginfo-1.60.0-150400.8.5.2 * libre2-11-20240201-150400.9.5.1 * libgrpc1_60-debuginfo-1.60.0-150400.8.5.2 * libre2-11-debuginfo-20240201-150400.9.5.1 * grpc-debugsource-1.60.0-150400.8.5.2 * libgrpc37-debuginfo-1.60.0-150400.8.5.2 * libgrpc1_60-1.60.0-150400.8.5.2 * libupb37-debuginfo-1.60.0-150400.8.5.2 * libupb37-1.60.0-150400.8.5.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220732

1 0

SUSE-RU-2024:0802-1: moderate: Recommended update for wicked
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:0802-1 Rating: moderate References: * bsc#1215692 * bsc#1218926 * bsc#1218927 * bsc#1219265 * bsc#1219751 * jsc#PED-7183 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that contains one feature and has five fixes can now be installed. ## Description: This update for wicked fixes the following issues: * ifreload: VLAN changes require device deletion (bsc#1218927) * ifcheck: fix config changed check (bsc#1218926) * client: fix exit code for no-carrier status (bsc#1219265) * dhcp6: omit the SO_REUSEPORT option (bsc#1215692) * duid: fix comment for v6time * rtnl: fix peer address parsing for non ptp-interfaces * system-updater: Parse updater format from XML configuration to ensure install calls can run * team: add new options like link_watch_policy (jsc#PED-7183) * Fix memory leaks in dbus variant destroy and fsm free * xpath: allow underscore in node identifier * vxlan: don't format unknown rtnl attrs (bsc#1219751) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-802=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-802=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-802=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-802=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-802=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-802=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-802=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * wicked-debugsource-0.6.74-150400.3.13.1 * wicked-0.6.74-150400.3.13.1 * wicked-debuginfo-0.6.74-150400.3.13.1 * wicked-service-0.6.74-150400.3.13.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215692 * https://bugzilla.suse.com/show_bug.cgi?id=1218926 * https://bugzilla.suse.com/show_bug.cgi?id=1218927 * https://bugzilla.suse.com/show_bug.cgi?id=1219265 * https://bugzilla.suse.com/show_bug.cgi?id=1219751 * https://jira.suse.com/browse/PED-7183

1 0

SUSE-RU-2024:0788-1: moderate: Recommended update for saptune
by OPENSUSE-UPDATES 07 Mar '24

07 Mar '24

# Recommended update for saptune Announcement ID: SUSE-RU-2024:0788-1 Rating: moderate References: * bsc#1219500 * jsc#PED-5025 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP2 * SAP Applications Module 15-SP3 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has one fix can now be installed. ## Description: This update for saptune fixes the following issues: * saptune was updated from version 3.1.1 to 3.1.2: * To support setups with saptune monitoring and heavy automation we limited the setting of our saptune lock to commands having the potential to change anything in the system. (bsc#1219500) * Fixed timestamp in log messages of saptune * Removed redundant version information in header comment of note definition files * SAP Note 1656250 updated to Version 63 SAP Note 1771258 updated to Version 8 SAP Note 2382421 updated to Version 45 SAP Note 3024346 updated to Version 10 but without parameter value changes, only house keeping of the version section and comment updates * SAP Note 1984787 updated to Version 42 SAP Note 2578899 updated to Version 47 * Added requirement of package `sysctl-logger` (jsc#PED-5025) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-788=1 * SAP Applications Module 15-SP2 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2024-788=1 * SAP Applications Module 15-SP3 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2024-788=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-788=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-788=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP2 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP3 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP4 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 * SAP Applications Module 15-SP5 (ppc64le x86_64) * saptune-debuginfo-3.1.2-150100.8.33.1 * saptune-3.1.2-150100.8.33.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219500 * https://jira.suse.com/browse/PED-5025

1 0

openSUSE-RU-2024:0074-1: moderate: Recommended update for sshfs
by maintenance＠opensuse.org 06 Mar '24

06 Mar '24

openSUSE Recommended Update: Recommended update for sshfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0074-1 Rating: moderate References: #1215574 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sshfs fixes the following issues: Update to 3.7.4a: - Reverting PR #1 from user-reported bug (boo#1215574). Update to 3.7.4: - Support request size negotiation and increased throughput on high-latency connections - Supports connecting to vsock (7) via shfs -o vsock=CID:PORT @g-easy - README in markdown instead of rst - Various test fixes @neunenak Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-74=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): sshfs-3.7.4a-bp155.2.3.1 References: https://bugzilla.suse.com/1215574

1 0

SUSE-SU-2024:0784-1: important: Security update for python39
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Security update for python39 Announcement ID: SUSE-SU-2024:0784-1 Rating: important References: * bsc#1196025 * bsc#1210638 * bsc#1212015 * bsc#1214692 * bsc#1215454 * bsc#1219666 * jsc#PED-7886 * jsc#SLE-21253 Cross-References: * CVE-2022-25236 * CVE-2023-27043 * CVE-2023-40217 * CVE-2023-6597 CVSS scores: * CVE-2022-25236 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-25236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-40217 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2023-40217 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2023-6597 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities, contains two features and has two security fixes can now be installed. ## Description: This update for python39 fixes the following issues: * CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). * CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). * CVE-2023-40217: Fixed a ssl.SSLSocket TLS bypass vulnerability where data is sent unencrypted (bsc#1214692). * CVE-2022-25236: Fixed an expat vulnerability by supporting expat >= 2.4.4 (bsc#1212015). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-784=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-784=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-784=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-784=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-784=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-784=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-doc-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tk-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * python39-doc-devhelp-3.9.18-150300.4.38.1 * python39-testsuite-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-testsuite-debuginfo-3.9.18-150300.4.38.1 * openSUSE Leap 15.3 (x86_64) * libpython3_9-1_0-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-3.9.18-150300.4.38.1 * libpython3_9-1_0-32bit-3.9.18-150300.4.38.1 * python39-base-32bit-3.9.18-150300.4.38.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libpython3_9-1_0-64bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-64bit-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-64bit-3.9.18-150300.4.38.1 * python39-64bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-64bit-3.9.18-150300.4.38.1 * python39-64bit-3.9.18-150300.4.38.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-doc-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tk-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * python39-doc-devhelp-3.9.18-150300.4.38.1 * python39-testsuite-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-testsuite-debuginfo-3.9.18-150300.4.38.1 * openSUSE Leap 15.5 (x86_64) * libpython3_9-1_0-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-base-32bit-debuginfo-3.9.18-150300.4.38.1 * python39-32bit-3.9.18-150300.4.38.1 * libpython3_9-1_0-32bit-3.9.18-150300.4.38.1 * python39-base-32bit-3.9.18-150300.4.38.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * python39-tk-3.9.18-150300.4.38.1 * python39-core-debugsource-3.9.18-150300.4.38.1 * python39-curses-3.9.18-150300.4.38.1 * python39-tk-debuginfo-3.9.18-150300.4.38.1 * python39-debuginfo-3.9.18-150300.4.38.1 * libpython3_9-1_0-debuginfo-3.9.18-150300.4.38.1 * python39-idle-3.9.18-150300.4.38.1 * python39-debugsource-3.9.18-150300.4.38.1 * python39-dbm-debuginfo-3.9.18-150300.4.38.1 * python39-3.9.18-150300.4.38.1 * python39-base-debuginfo-3.9.18-150300.4.38.1 * python39-curses-debuginfo-3.9.18-150300.4.38.1 * python39-devel-3.9.18-150300.4.38.1 * python39-dbm-3.9.18-150300.4.38.1 * libpython3_9-1_0-3.9.18-150300.4.38.1 * python39-base-3.9.18-150300.4.38.1 * python39-tools-3.9.18-150300.4.38.1 ## References: * https://www.suse.com/security/cve/CVE-2022-25236.html * https://www.suse.com/security/cve/CVE-2023-27043.html * https://www.suse.com/security/cve/CVE-2023-40217.html * https://www.suse.com/security/cve/CVE-2023-6597.html * https://bugzilla.suse.com/show_bug.cgi?id=1196025 * https://bugzilla.suse.com/show_bug.cgi?id=1210638 * https://bugzilla.suse.com/show_bug.cgi?id=1212015 * https://bugzilla.suse.com/show_bug.cgi?id=1214692 * https://bugzilla.suse.com/show_bug.cgi?id=1215454 * https://bugzilla.suse.com/show_bug.cgi?id=1219666 * https://jira.suse.com/browse/PED-7886 * https://jira.suse.com/browse/SLE-21253

1 0

openSUSE-RU-2024:0073-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 06 Mar '24

06 Mar '24

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0073-1 Rating: moderate References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update of yast2-theme just rebuilds the yast2-theme package against current updates. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2024-73=1 Package List: - openSUSE Leap 15.5 (noarch): yast2-theme-4.5.0-lp155.2.4.1 yast2-theme-breeze-4.5.0-lp155.2.4.1 yast2-theme-oxygen-4.5.0-lp155.2.4.1 References:

1 0

SUSE-SU-2024:0782-1: important: Security update for python311
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Security update for python311 Announcement ID: SUSE-SU-2024:0782-1 Rating: important References: * bsc#1196025 * bsc#1210638 * bsc#1219666 Cross-References: * CVE-2022-25236 * CVE-2023-27043 * CVE-2023-6597 CVSS scores: * CVE-2022-25236 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-25236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-6597 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). * CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). * CVE-2022-25236: Fixed an expat vulnerability by supporting expat >= 2.4.4 (bsc#1212015). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-782=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-782=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-782=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-782=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-782=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-782=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * python311-testsuite-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-testsuite-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * openSUSE Leap 15.4 (x86_64) * libpython3_11-1_0-32bit-3.11.8-150400.9.23.1 * python311-base-32bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-3.11.8-150400.9.23.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_11-1_0-64bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-64bit-3.11.8-150400.9.23.1 * python311-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-64bit-debuginfo-3.11.8-150400.9.23.1 * python311-64bit-3.11.8-150400.9.23.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * python311-testsuite-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-testsuite-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * openSUSE Leap 15.5 (x86_64) * libpython3_11-1_0-32bit-3.11.8-150400.9.23.1 * python311-base-32bit-3.11.8-150400.9.23.1 * libpython3_11-1_0-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-base-32bit-debuginfo-3.11.8-150400.9.23.1 * python311-32bit-3.11.8-150400.9.23.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python311-debuginfo-3.11.8-150400.9.23.1 * python311-base-debuginfo-3.11.8-150400.9.23.1 * python311-tools-3.11.8-150400.9.23.1 * python311-doc-3.11.8-150400.9.23.1 * python311-dbm-debuginfo-3.11.8-150400.9.23.1 * python311-debugsource-3.11.8-150400.9.23.1 * python311-doc-devhelp-3.11.8-150400.9.23.1 * python311-base-3.11.8-150400.9.23.1 * python311-core-debugsource-3.11.8-150400.9.23.1 * python311-dbm-3.11.8-150400.9.23.1 * python311-idle-3.11.8-150400.9.23.1 * python311-devel-3.11.8-150400.9.23.1 * python311-curses-debuginfo-3.11.8-150400.9.23.1 * python311-tk-3.11.8-150400.9.23.1 * python311-tk-debuginfo-3.11.8-150400.9.23.1 * python311-curses-3.11.8-150400.9.23.1 * python311-3.11.8-150400.9.23.1 * libpython3_11-1_0-debuginfo-3.11.8-150400.9.23.1 * libpython3_11-1_0-3.11.8-150400.9.23.1 ## References: * https://www.suse.com/security/cve/CVE-2022-25236.html * https://www.suse.com/security/cve/CVE-2023-27043.html * https://www.suse.com/security/cve/CVE-2023-6597.html * https://bugzilla.suse.com/show_bug.cgi?id=1196025 * https://bugzilla.suse.com/show_bug.cgi?id=1210638 * https://bugzilla.suse.com/show_bug.cgi?id=1219666

1 0

SUSE-OU-2024:0774-1: moderate: Optional update for warewulf4
by OPENSUSE-UPDATES 06 Mar '24

06 Mar '24

# Optional update for warewulf4 Announcement ID: SUSE-OU-2024:0774-1 Rating: moderate References: * bsc#1215583 * bsc#1220189 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 An update that has two fixes can now be installed. ## Description: This update for warewulf4 fixes the following issues: warewulf4 was updated to version 4.5.0rc2: * Changes in version 4.5.0rc2: * `wwctl node list` panics if a node uses a profile with a network which isn't present on this node (bsc#1220189) * Changes in version 4.5.0rc1: * All overlays reside now under a `rootfs` diretory e.g. the host overlays reside now under /var/lib/warewulf/host/rootfs. This has the advantage that the `rootfs` can be under a version control, without the effect that the meta files, e.g. `.git` will show up in the rendered overlays * Changes in version v4.5.0rc0: * Disks, partitions and file systems can set in the configuration and if ignition is present in the container, changes to the disks will be made * Grub can be used as alternative boot method instead of iPXE. The grub binary is extracted from the container and shim is executed before the grub. This enables secure boot * wwctl has now the genconfig subcommand which will print/create valid configurations * All paths e.g the overlay dir, can now be configured in warewulf.conf * Fixed a bug where profile tags were erroneously overridden by empty node values * Fixed bug where tags from profiles weren't rendered * Moved example templates for client overlays to example-templates/ in the package documentation * Renamed: `warewulf4-doc` to `warewulf4-man` * Renamed: `warewulf4-slurm` to `warewulf4-overlay-slurm` * Make only overlay dir being config files * Added documentation for replacing dhcpd and tftp with dnsmasq as README.dnsmasq (jira#HPC-65) * Check if automatic configured ip range doesn't contain ip address of ww4 host (bsc#1215583) * Removed the ipxe binaries * Set warewulf4-man and warewulf4-overlay-slurm to noarch * Use bash for config-warewulf.sh ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-774=1 openSUSE-SLE-15.5-2024-774=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2024-774=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * warewulf4-4.5.0~rc2-150500.6.5.1 * warewulf4-overlay-4.5.0~rc2-150500.6.5.1 * warewulf4-api-4.5.0~rc2-150500.6.5.1 * openSUSE Leap 15.5 (noarch) * warewulf4-overlay-slurm-4.5.0~rc2-150500.6.5.1 * warewulf4-man-4.5.0~rc2-150500.6.5.1 * HPC Module 15-SP5 (aarch64 x86_64) * warewulf4-4.5.0~rc2-150500.6.5.1 * warewulf4-overlay-4.5.0~rc2-150500.6.5.1 * warewulf4-api-4.5.0~rc2-150500.6.5.1 * HPC Module 15-SP5 (noarch) * warewulf4-overlay-slurm-4.5.0~rc2-150500.6.5.1 * warewulf4-man-4.5.0~rc2-150500.6.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215583 * https://bugzilla.suse.com/show_bug.cgi?id=1220189

1 0