May 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:1779-1: moderate: Recommended update for bpftool
by OPENSUSE-UPDATES 27 May '24

27 May '24

# Recommended update for bpftool Announcement ID: SUSE-RU-2024:1779-1 Rating: moderate References: * jsc#PED-8375 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature can now be installed. ## Description: This update for bpftool fixes the following issue: * Enable showing info for processes holding BPF map/prog/link/btf FDs (jsc#PED-8375) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1779=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1779=1 openSUSE-SLE-15.5-2024-1779=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * bpftool-debuginfo-5.14.21-150500.12.6.2 * bpftool-debugsource-5.14.21-150500.12.6.2 * bpftool-5.14.21-150500.12.6.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * bpftool-debuginfo-5.14.21-150500.12.6.2 * bpftool-debugsource-5.14.21-150500.12.6.2 * bpftool-5.14.21-150500.12.6.2 ## References: * https://jira.suse.com/browse/PED-8375

1 0

openSUSE-SU-2024:0141-1: critical: Security update for chromium
by opensuse-security＠opensuse.org 26 May '24

26 May '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0141-1 Rating: critical References: #1225199 Cross-References: CVE-2024-5274 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: - Chromium 125.0.6422.112 * CVE-2024-5274: Type Confusion in V8 (boo#1225199) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-141=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-125.0.6422.112-bp155.2.88.1 chromium-125.0.6422.112-bp155.2.88.1 References: https://www.suse.com/security/cve/CVE-2024-5274.html https://bugzilla.suse.com/1225199

1 0

openSUSE-SU-2024:0139-1: important: Security update for cJSON
by opensuse-security＠opensuse.org 25 May '24

25 May '24

openSUSE Security Update: Security update for cJSON ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0139-1 Rating: important References: #1218098 #1218099 #1223420 Cross-References: CVE-2023-50471 CVE-2023-50472 CVE-2024-31755 CVSS scores: CVE-2023-50471 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-50472 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-31755 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for cJSON fixes the following issues: - Update to 1.7.18: * CVE-2024-31755: NULL pointer dereference via cJSON_SetValuestring() (boo#1223420) * Remove non-functional list handling of compiler flags * Fix heap buffer overflow * remove misused optimization flag -01 * Set free'd pointers to NULL whenever they are not reassigned immediately after - Update to version 1.7.17 (boo#1218098, CVE-2023-50472, boo#1218099, CVE-2023-50471): * Fix null reference in cJSON_SetValuestring (CVE-2023-50472). * Fix null reference in cJSON_InsertItemInArray (CVE-2023-50471). - Update to 1.7.16: * Add an option for ENABLE_CJSON_VERSION_SO in CMakeLists.txt * Add cmake_policy to CMakeLists.txt * Add cJSON_SetBoolValue * Add meson documentation * Fix memory leak in merge_patch * Fix conflicting target names 'uninstall' * Bump cmake version to 3.0 and use new version syntax * Print int without decimal places * Fix 'cjson_utils-static' target not exist * Add allocate check for replace_item_in_object * Fix a null pointer crash in cJSON_ReplaceItemViaPointer Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-139=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): cJSON-devel-1.7.18-bp155.3.3.1 libcjson1-1.7.18-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2023-50471.html https://www.suse.com/security/cve/CVE-2023-50472.html https://www.suse.com/security/cve/CVE-2024-31755.html https://bugzilla.suse.com/1218098 https://bugzilla.suse.com/1218099 https://bugzilla.suse.com/1223420

1 0

openSUSE-SU-2024:0138-1: moderate: Security update for qt6-networkauth
by opensuse-security＠opensuse.org 24 May '24

24 May '24

openSUSE Security Update: Security update for qt6-networkauth ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0138-1 Rating: moderate References: #1224782 Cross-References: CVE-2024-36048 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for qt6-networkauth fixes the following issues: - CVE-2024-36048: Fixed data race and poor seeding in generateRandomString() (boo#1224782). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-138=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libQt6NetworkAuth6-6.4.2-bp155.2.3.1 qt6-networkauth-devel-6.4.2-bp155.2.3.1 qt6-networkauth-docs-html-6.4.2-bp155.2.3.1 qt6-networkauth-docs-qch-6.4.2-bp155.2.3.1 qt6-networkauth-examples-6.4.2-bp155.2.3.1 qt6-networkauth-private-devel-6.4.2-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-36048.html https://bugzilla.suse.com/1224782

1 0

SUSE-RU-2024:1776-1: moderate: Recommended update for cargo-packaging
by OPENSUSE-UPDATES 24 May '24

24 May '24

# Recommended update for cargo-packaging Announcement ID: SUSE-RU-2024:1776-1 Rating: moderate References: * bsc#1212226 * bsc#1222175 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 An update that has two fixes can now be installed. ## Description: This update for cargo-packaging fixes the following issues: * Remove cargo_config that is now part of vendor.tar * Prevent stripping debug info (bsc#1222175) * macros.cargo: Drop bashisms * Rename variable for bitwarden * Add rust-packaging compat (bsc#1212226) * Default flags * Add buildflags ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1776=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1776=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * cargo-packaging-1.2.0+5-150400.3.6.2 * cargo-packaging-debuginfo-1.2.0+5-150400.3.6.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cargo-packaging-1.2.0+5-150400.3.6.2 * cargo-packaging-debuginfo-1.2.0+5-150400.3.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212226 * https://bugzilla.suse.com/show_bug.cgi?id=1222175

1 0

SUSE-SU-2024:1777-1: moderate: Security update for postgresql15
by OPENSUSE-UPDATES 24 May '24

24 May '24

# Security update for postgresql15 Announcement ID: SUSE-SU-2024:1777-1 Rating: moderate References: * bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317 CVSS scores: * CVE-2024-4317 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for postgresql15 fixes the following issues: PostgreSQL upgrade to version 15.7 (bsc#1224051): * CVE-2024-4317: Fixed visibility restriction of pg_stats_ext and pg_stats_ext_exprs entries to the table owner (bsc#1224038). Bug fixes: * Fix incompatibility with LLVM 18. * Prepare for PostgreSQL 17. * Make sure all compilation and doc generation happens in %build. * Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work. * Remove constraints file because improved memory usage for s390x * Use %patch -P N instead of deprecated %patchN. Release notes: * https://www.postgresql.org/docs/release/15.7/ ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1777=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1777=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1777=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * postgresql15-plpython-15.7-150200.5.27.1 * postgresql15-server-devel-15.7-150200.5.27.1 * postgresql15-llvmjit-debuginfo-15.7-150200.5.27.1 * postgresql15-devel-15.7-150200.5.27.1 * postgresql15-contrib-15.7-150200.5.27.1 * postgresql15-pltcl-15.7-150200.5.27.1 * postgresql15-pltcl-debuginfo-15.7-150200.5.27.1 * postgresql15-debuginfo-15.7-150200.5.27.1 * postgresql15-devel-debuginfo-15.7-150200.5.27.1 * postgresql15-plperl-debuginfo-15.7-150200.5.27.1 * postgresql15-plperl-15.7-150200.5.27.1 * postgresql15-server-15.7-150200.5.27.1 * postgresql15-plpython-debuginfo-15.7-150200.5.27.1 * postgresql15-llvmjit-15.7-150200.5.27.1 * postgresql15-contrib-debuginfo-15.7-150200.5.27.1 * postgresql15-15.7-150200.5.27.1 * postgresql15-llvmjit-devel-15.7-150200.5.27.1 * postgresql15-server-debuginfo-15.7-150200.5.27.1 * postgresql15-debugsource-15.7-150200.5.27.1 * postgresql15-test-15.7-150200.5.27.1 * postgresql15-server-devel-debuginfo-15.7-150200.5.27.1 * openSUSE Leap 15.5 (noarch) * postgresql15-docs-15.7-150200.5.27.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * postgresql15-15.7-150200.5.27.1 * postgresql15-debuginfo-15.7-150200.5.27.1 * postgresql15-debugsource-15.7-150200.5.27.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * postgresql15-plperl-debuginfo-15.7-150200.5.27.1 * postgresql15-pltcl-15.7-150200.5.27.1 * postgresql15-pltcl-debuginfo-15.7-150200.5.27.1 * postgresql15-devel-15.7-150200.5.27.1 * postgresql15-plperl-15.7-150200.5.27.1 * postgresql15-plpython-15.7-150200.5.27.1 * postgresql15-server-devel-15.7-150200.5.27.1 * postgresql15-server-15.7-150200.5.27.1 * postgresql15-plpython-debuginfo-15.7-150200.5.27.1 * postgresql15-debuginfo-15.7-150200.5.27.1 * postgresql15-contrib-debuginfo-15.7-150200.5.27.1 * postgresql15-debugsource-15.7-150200.5.27.1 * postgresql15-devel-debuginfo-15.7-150200.5.27.1 * postgresql15-contrib-15.7-150200.5.27.1 * postgresql15-server-debuginfo-15.7-150200.5.27.1 * postgresql15-server-devel-debuginfo-15.7-150200.5.27.1 * Server Applications Module 15-SP5 (noarch) * postgresql15-docs-15.7-150200.5.27.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4317.html * https://bugzilla.suse.com/show_bug.cgi?id=1224038 * https://bugzilla.suse.com/show_bug.cgi?id=1224051

1 0

SUSE-RU-2024:1778-1: moderate: Recommended update for systemd-presets-branding-SLE
by OPENSUSE-UPDATES 24 May '24

24 May '24

# Recommended update for systemd-presets-branding-SLE Announcement ID: SUSE-RU-2024:1778-1 Rating: moderate References: * jsc#PED-5024 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for systemd-presets-branding-SLE fixes the following issues: * Enable sysctl-logger (jsc#PED-5024) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1778=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1778=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1778=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1778=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1778=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1778=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1778=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1778=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1778=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1778=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1778=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1778=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1778=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1778=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1778=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1778=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1778=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Manager Proxy 4.3 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Manager Server 4.3 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Enterprise Storage 7.1 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * openSUSE Leap 15.5 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * Basesystem Module 15-SP5 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * systemd-presets-branding-SLE-15.1-150100.20.14.1 ## References: * https://jira.suse.com/browse/PED-5024

1 0

SUSE-SU-2024:1771-1: important: Security update for ucode-intel
by OPENSUSE-UPDATES 23 May '24

23 May '24

# Security update for ucode-intel Announcement ID: SUSE-SU-2024:1771-1 Rating: important References: * bsc#1224277 Cross-References: * CVE-2023-45733 * CVE-2023-45745 * CVE-2023-46103 * CVE-2023-47855 CVSS scores: * CVE-2023-45733 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N * CVE-2023-45745 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N * CVE-2023-46103 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47855 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20240514 release (bsc#1224277) * CVE-2023-45733: Fixed a potential security vulnerability in some Intel® Processors that may have allowed information disclosure. * CVE-2023-46103: Fixed a potential security vulnerability in Intel® Core™ Ultra Processors that may have allowed denial of service. * CVE-2023-45745,CVE-2023-47855: Fixed a potential security vulnerabilities in some Intel® Trust Domain Extensions (TDX) module software that may have allowed escalation of privilege. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1771=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1771=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1771=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1771=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1771=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1771=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1771=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1771=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1771=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1771=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1771=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1771=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1771=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1771=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1771=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1771=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1771=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1771=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1771=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1771=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1771=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1771=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1771=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1771=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1771=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1771=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1771=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1771=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1771=1 ## Package List: * openSUSE Leap Micro 5.3 (x86_64) * ucode-intel-20240514-150200.41.1 * openSUSE Leap Micro 5.4 (x86_64) * ucode-intel-20240514-150200.41.1 * openSUSE Leap 15.5 (x86_64) * ucode-intel-20240514-150200.41.1 * openSUSE Leap 15.6 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * ucode-intel-20240514-150200.41.1 * Basesystem Module 15-SP5 (x86_64) * ucode-intel-20240514-150200.41.1 * Basesystem Module 15-SP6 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Manager Proxy 4.3 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Manager Server 4.3 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Enterprise Storage 7.1 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * ucode-intel-20240514-150200.41.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * ucode-intel-20240514-150200.41.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45733.html * https://www.suse.com/security/cve/CVE-2023-45745.html * https://www.suse.com/security/cve/CVE-2023-46103.html * https://www.suse.com/security/cve/CVE-2023-47855.html * https://bugzilla.suse.com/show_bug.cgi?id=1224277

1 0

SUSE-SU-2024:1767-1: important: Security update for python-sqlparse
by OPENSUSE-UPDATES 23 May '24

23 May '24

# Security update for python-sqlparse Announcement ID: SUSE-SU-2024:1767-1 Rating: important References: * bsc#1223603 Cross-References: * CVE-2024-4340 CVSS scores: * CVE-2024-4340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-sqlparse fixes the following issues: * CVE-2024-4340: Catch RecursionError to avoid a denial of service. (bsc#1223603) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1767=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1767=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1767=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1767=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-sqlparse-0.4.4-150400.6.7.1 * openSUSE Leap 15.5 (noarch) * python311-sqlparse-0.4.4-150400.6.7.1 * Public Cloud Module 15-SP4 (noarch) * python311-sqlparse-0.4.4-150400.6.7.1 * Public Cloud Module 15-SP5 (noarch) * python311-sqlparse-0.4.4-150400.6.7.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4340.html * https://bugzilla.suse.com/show_bug.cgi?id=1223603

1 0

openSUSE-SU-2024:0137-1: important: Security update for chromium
by opensuse-security＠opensuse.org 23 May '24

23 May '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0137-1 Rating: important References: #1224818 Cross-References: CVE-2024-5157 CVE-2024-5158 CVE-2024-5159 CVE-2024-5160 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium 125.0.6422.76 (boo#1224818) * CVE-2024-5157: Use after free in Scheduling * CVE-2024-5158: Type Confusion in V8 * CVE-2024-5159: Heap buffer overflow in ANGLE * CVE-2024-5160: Heap buffer overflow in Dawn * Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-137=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-125.0.6422.76-bp155.2.85.2 chromium-125.0.6422.76-bp155.2.85.2 References: https://www.suse.com/security/cve/CVE-2024-5157.html https://www.suse.com/security/cve/CVE-2024-5158.html https://www.suse.com/security/cve/CVE-2024-5159.html https://www.suse.com/security/cve/CVE-2024-5160.html https://bugzilla.suse.com/1224818

1 0