May 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:1763-1: moderate: Recommended update for ant, hamcrest, junit
by OPENSUSE-UPDATES 23 May '24

23 May '24

# Recommended update for ant, hamcrest, junit Announcement ID: SUSE-RU-2024:1763-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that can now be installed. ## Description: This update for ant, hamcrest, junit fixes the following issues: ant, ant-antlr, ant-junit5, ant-junit: * Put hamcrest on the classpath of ant-junit module hamcrest was updated to version 2.2: * Version 2.2: * This version simplifies the packaging of Hamcrest into a single jar. Other big changes include Java 9 module compatibility, along with numerous other improvements and bug fixes. * Breaking Changes: * Although the class API has not changed since Hamcrest 1.3, the way that the project is packaged has changed. Refer to the Hamcrest Distributables documentation for more information, and in particular the section on Upgrading from Hamcrest 1.x * The org.hamcrest.Factory annotation has been removed (it should not be used in client code) * Improvements: * AllOf/AnyOf: Pass the matchers to constructor using varargs * Matchers.anyOf: Fixed generic bounds compatibility for JDK 11 * AssertionError message is unhelpful when match fails for byte type * Use platform specific line breaks * The build now checks for consistent use of spaces * Bugs fixed and other changes: * Fixed compatibility issue for development with Android D8 * Fixed typo in license name * 1.3 compatible constructors for string matchers * Fixed for split packages with Java 9 modules * Documentation updates * Added implementation for CharSequence length matcher * Fixed for TypeSafeDiagnosingMatcher can't detect generic types for subclass * Renamed IsCollectionContaining to IsIterableContaining * Make Hamcrest an OSGI bundle * Added StringRegularExpression matcher * Fixed StringContainsInOrder to detect if a repeated pattern is missing * Added ArrayAsIterableMatcher * Fixed description for IsEqualIgnoringCase * Fixed JavaDoc examples * Upgraded to Java 7 * Build with Gradle * Deprecate IsCollectionContaining and IsArrayContainingXXX * Removed deprecated methods from previous release * Improve mismatch description of hasItem/hasItems * General improvements to mismatch descriptions * Several JavaDoc improvements and corrections * Deprecated several matcher factory methods of the for "isXyz" * Fixed address doclint errors reported in JDK 1.8 * Fixed Iterable contains in order is null-safe * Added equalToObject() (i.e. unchecked) method * Fixed arrayContaining(null, null) cause NullPointerException * Fixed string matching on regular expressions * Fixed isCloseTo() shows wrong delta in mismatch description * Fixed add untyped version of equalTo, named equalToObject * Implement IsEmptyMap, IsMapWithSize * Fixed IsArray.describeMismatchSafely() should use Matcher.describeMismatch * Added Matcher implementation for files * Fixed NPE in IsIterableContainingInOrder junit: * Generate anew the ant build system using the maven pom.xml * Fetch sources from github by source service and filter out stale hamcrest binaries. * Port to hamcrest 2.2 unconditionally * Removed deprecated assertThat * Let ant build with --release 8 if the compiler knows that option. This allows us to avoid incompatible exception declarations in ObjectInputStream.GetField.get(String,Object) in java >= 20 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1763=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1763=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1763=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1763=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1763=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1763=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1763=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1763=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-1763=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1763=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1763=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1763=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1763=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1763=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1763=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1763=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1763=1 ## Package List: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * SUSE Enterprise Storage 7.1 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * openSUSE Leap 15.5 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-imageio-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit5-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jsch-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-commons-net-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * ant-jmf-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * hamcrest-javadoc-2.2-150200.12.13.2 * ant-junit-1.10.14-150200.4.25.1 * junit-javadoc-4.13.2-150200.3.11.2 * ant-apache-xalan2-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * junit-manual-4.13.2-150200.3.11.2 * ant-scripts-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * hamcrest-2.2-150200.12.13.2 * ant-testutil-1.10.14-150200.4.25.1 * ant-xz-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * openSUSE Leap 15.6 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-imageio-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit5-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jsch-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-commons-net-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * ant-jmf-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * hamcrest-javadoc-2.2-150200.12.13.2 * ant-junit-1.10.14-150200.4.25.1 * junit-javadoc-4.13.2-150200.3.11.2 * ant-apache-xalan2-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * junit-manual-4.13.2-150200.3.11.2 * ant-scripts-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * hamcrest-2.2-150200.12.13.2 * ant-testutil-1.10.14-150200.4.25.1 * ant-xz-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * Development Tools Module 15-SP5 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * Development Tools Module 15-SP6 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * SUSE Package Hub 15 15-SP6 (noarch) * ant-jsch-1.10.14-150200.4.25.1 * ant-testutil-1.10.14-150200.4.25.1 * ant-junit5-1.10.14-150200.4.25.1 * ant-xz-1.10.14-150200.4.25.1 * ant-commons-net-1.10.14-150200.4.25.1 * ant-apache-xalan2-1.10.14-150200.4.25.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * ant-antlr-1.10.14-150200.4.25.1 * ant-apache-regexp-1.10.14-150200.4.25.1 * ant-jdepend-1.10.14-150200.4.25.1 * ant-scripts-1.10.14-150200.4.25.1 * ant-swing-1.10.14-150200.4.25.1 * ant-1.10.14-150200.4.25.1 * ant-apache-log4j-1.10.14-150200.4.25.1 * ant-commons-logging-1.10.14-150200.4.25.1 * ant-junit-1.10.14-150200.4.25.1 * ant-apache-bcel-1.10.14-150200.4.25.1 * ant-apache-bsf-1.10.14-150200.4.25.1 * ant-apache-resolver-1.10.14-150200.4.25.1 * ant-jakartamail-1.10.14-150200.4.25.1 * ant-apache-oro-1.10.14-150200.4.25.1 * ant-javamail-1.10.14-150200.4.25.1 * ant-manual-1.10.14-150200.4.25.1 * junit-4.13.2-150200.3.11.2 * ant-jmf-1.10.14-150200.4.25.1

1 0

SUSE-RU-2024:1764-1: moderate: Recommended update for jackson
by OPENSUSE-UPDATES 23 May '24

23 May '24

# Recommended update for jackson Announcement ID: SUSE-RU-2024:1764-1 Rating: moderate References: Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 An update that can now be installed. ## Description: This update for jackson fixes the following issues: jackson-annotations was upgraded to version 2.16.1: * Added new OptBoolean valued property in @JsonTypeInfo to allow per-type configuration of strict type id handling * Allow per-type configuration of strict type id handling * Added JsonTypeInfo.Value object (backport from 3.0) * Added new JsonTypeInfo.Id.SIMPLE_NAME jackson-bom was upgraded to version 2.16.1: * Added dependency for jackson-module-android-record. This new module offers support for Record type on Android platform, where Java records are supported through "de-sugaring" jackson-core was upgraded to version 2.16.1: * NPE in Version.equals() if snapshot-info null * NPE in "FastDoubleParser", method "JavaBigDecimalParser.parseBigDecimal()" * JsonPointer.append(JsonPointer.tail()) includes the original pointer * Change StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION default to false in Jackson 2.16 * Improve error message for StreamReadConstraints violations * JsonFactory implementations should respect CANONICALIZE_FIELD_NAMES * Root cause for failing test for testMangledIntsBytes() in ParserErrorHandlingTest * Allow all array elements in JsonPointerBasedFilter * Indicate explicitly blocked sources as "REDACTED" instead of "UNKNOWN" in JsonLocation * Start using AssertJ in unit tests * Allow configuring spaces before and/or after the colon in DefaultPrettyPrinter (for Canonical JSON) * Add configurable limit for the maximum number of bytes/chars of content to parse before failing * Add configurable limit for the maximum length of Object property names to parse before failing * Add configurable processing limits for JSON generator (StreamWriteConstraints) * Compare _snapshotInfo in Version * Add JsonGeneratorDecorator to allow decorating JsonGenerators * Add full set of BufferRecyclerPool implementations * Add configurable error report behavior via ErrorReportConfiguration * Make ByteSourceJsonBootstrapper use StringReader for < 8KiB byte[] inputs * Allow pluggable buffer recycling via new RecyclerPool extension point * Change parsing error message to mention -INF jackson-databind was upgraded to version 2.16.1: * JsonSetter(contentNulls = FAIL) is ignored in delegating @JsonCreator argument * Primitive array deserializer not being captured by DeserializerModifier * JsonNode.findValues() and findParents() missing expected values in 2.16.0 * Incorrect deserialization for BigDecimal numbers * Add a way to configure caches Jackson uses * Mix-ins do not work for Enums * Map deserialization results in different numeric classes based on json ordering (BigDecimal / Double) when used in combination with @JsonSubTypes * Generic class with generic field of runtime type Double is deserialized as BigDecimal when used with @JsonTypeInfo and JsonTypeInfo.As.EXISTING_PROPERTY * Combination of @JsonUnwrapped and @JsonAnySetter results in BigDecimal instead of Double * @JsonIgnoreProperties not working with @JsonValue * Deprecated JsonNode.with(String) suggests using JsonNode.withObject(String) but it is not the same thing * Difference in the handling of ObjectId-property inJsonIdentityInfo depending on the deserialization route * Add new OptBoolean valued property in @JsonTypeInfo, handling, to allow per- polymorphic type loose Type Id handling * Fixed regression in 2.15.0 that reaks deserialization for records when mapper.setVisibility(PropertyAccessor.ALL, Visibility.NONE) * Incorrect target type when disabling coercion, trying to deserialize String from Array/Object * @JsonProperty on constructor parameter changes default field serialization order * Create new JavaType subtype IterationType (extending SimpleType) * Use JsonTypeInfo.Value for annotation handling * Add JsonNodeFeature.WRITE_PROPERTIES_SORTED for sorting ObjectNode properties on serialization (for Canonical JSON) * Optimize ObjectNode findValue(s) and findParent(s) fast paths * Locale "" is deserialised as null if ACCEPT_EMPTY_STRING_AS_NULL_OBJECT is enabled * Add guardrail setting for TypeParser handling of type parameters * Use @JsonProperty for Enum values also when READ_ENUMS USING_TO_STRING enabled * Fix Enum deserialization to use @JsonProperty, @JsonAlias even if EnumNamingStrategy used * Use @JsonProperty and lowercase feature when serializing Enums despite using toString() * Use @JsonProperty over EnumNamingStrategy for Enum serialization * Actually cache EnumValues#internalMap * ObjectMapper.valueToTree() will ignore the configuration SerializationFeature.WRAP_ROOT_VALUE * Provide the "ObjectMapper.treeToValue(TreeNode, TypeReference)" method * Expose NativeImageUtil.isRunningInNativeImage() method * Add JsonTypeInfo.Id.SIMPLE_NAME which defaults type id to Class.getSimpleName() * Impossible to deserialize custom Throwable sub-classes that do not have single-String constructors * java.desktop module is no longer optional * ClassUtil fails with java.lang.reflect.InaccessibleObjectException trying to setAccessible on OptionalInt with JDK 17+ * Support sequenced collections (JDK 21) * Add withObjectProperty(String), withArrayProperty(String) in JsonNode * Change JsonNode.withObject(String) to work similar to withArray() wrt argument * Log WARN if deprecated subclasses of PropertyNamingStrategy is used * NPE when transforming a tree to a model class object, at ArrayNode.elements() * Deprecated ObjectReader.withType(Type) has no direct replacement; need forType(Type) * Add new DefaultTyping.NON_FINAL_AND_ENUMS to allow Default Typing for Enums * Do not rewind position when serializing direct ByteBuffer * Exception when deserialization of private record with default constructor * BeanDeserializer updates currentValue incorrectly when deserialising empty Object jackson-dataformats-binary was upgraded to version 2.16.1: * (ion) NullPointerException in IonParser.nextToken() * (smile) Remove Smile-specific buffer-recycling jackson-modules-base was upgraded to version 2.16.1: * (afterburner) Disable when running in native-image * (afterburner) IncompatibleClassChangeError when deserializing a class implementing an interface with default get/set implementations * (blackbird) BlackBird proxy object error in Java 17 * (blackbird) Disable when running in native-image * (guice) Add guice7 (jakarta.inject) module jackson-parent was upgraded to version 2.16: * Upgrade to oss-parent 56 (tons of plugin updates to resolve Maven warnings, new Moditect plugin) jackson-parent, fasterxml-oss-parent: * Added to SUSE Manager 4.3 as it is needed by `jackson-modules-base` ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1764=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1764=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1764=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-1764=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1764=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1764=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1764=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1764=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1764=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1764=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1764=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1764=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1764=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1764=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1764=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1764=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1764=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1764=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1764=1 ## Package List: * openSUSE Leap 15.5 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * jackson-module-osgi-2.16.1-150200.5.11.1 * jackson-module-mrbean-2.16.1-150200.5.11.1 * jackson-module-blackbird-2.16.1-150200.5.11.1 * jackson-module-no-ctor-deser-2.16.1-150200.5.11.1 * jackson-annotations-javadoc-2.16.1-150200.3.14.4 * jackson-core-2.16.1-150200.3.14.7 * jackson-dataformats-binary-javadoc-2.16.1-150200.3.13.6 * fasterxml-oss-parent-38-150200.3.2.1 * jackson-module-paranamer-2.16.1-150200.5.11.1 * jackson-module-afterburner-2.16.1-150200.5.11.1 * jackson-databind-2.16.1-150200.3.18.1 * jackson-bom-2.16.1-150200.3.11.1 * jackson-core-javadoc-2.16.1-150200.3.14.7 * jackson-parent-2.16-150200.3.10.1 * jackson-databind-javadoc-2.16.1-150200.3.18.1 * jackson-dataformat-smile-2.16.1-150200.3.13.6 * jackson-modules-base-2.16.1-150200.5.11.1 * jackson-module-guice-2.16.1-150200.5.11.1 * jackson-modules-base-javadoc-2.16.1-150200.5.11.1 * jackson-dataformats-binary-2.16.1-150200.3.13.6 * jackson-module-jaxb-annotations-2.16.1-150200.5.11.1 * Basesystem Module 15-SP5 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * Development Tools Module 15-SP5 (noarch) * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * SUSE Manager Server 4.3 Module 4.3 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-module-afterburner-2.16.1-150200.5.11.1 * jackson-modules-base-2.16.1-150200.5.11.1 * jackson-module-no-ctor-deser-2.16.1-150200.5.11.1 * jackson-databind-2.16.1-150200.3.18.1 * jackson-module-guice-2.16.1-150200.5.11.1 * jackson-core-2.16.1-150200.3.14.7 * jackson-module-osgi-2.16.1-150200.5.11.1 * jackson-parent-2.16-150200.3.10.1 * fasterxml-oss-parent-38-150200.3.2.1 * jackson-module-mrbean-2.16.1-150200.5.11.1 * jackson-module-paranamer-2.16.1-150200.5.11.1 * jackson-module-jaxb-annotations-2.16.1-150200.5.11.1 * jackson-module-blackbird-2.16.1-150200.5.11.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * jackson-databind-2.16.1-150200.3.18.1 * jackson-annotations-javadoc-2.16.1-150200.3.14.4 * jackson-core-2.16.1-150200.3.14.7 * jackson-databind-javadoc-2.16.1-150200.3.18.1 * jackson-core-javadoc-2.16.1-150200.3.14.7 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * jackson-databind-2.16.1-150200.3.18.1 * jackson-annotations-javadoc-2.16.1-150200.3.14.4 * jackson-core-2.16.1-150200.3.14.7 * jackson-databind-javadoc-2.16.1-150200.3.18.1 * jackson-core-javadoc-2.16.1-150200.3.14.7 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * jackson-databind-2.16.1-150200.3.18.1 * jackson-annotations-javadoc-2.16.1-150200.3.14.4 * jackson-core-2.16.1-150200.3.14.7 * jackson-databind-javadoc-2.16.1-150200.3.18.1 * jackson-core-javadoc-2.16.1-150200.3.14.7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * SUSE Manager Proxy 4.3 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * SUSE Manager Retail Branch Server 4.3 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * SUSE Manager Server 4.3 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-databind-2.16.1-150200.3.18.1 * jackson-core-2.16.1-150200.3.14.7 * SUSE Enterprise Storage 7.1 (noarch) * jackson-annotations-2.16.1-150200.3.14.4 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * jackson-databind-2.16.1-150200.3.18.1 * jackson-annotations-javadoc-2.16.1-150200.3.14.4 * jackson-core-2.16.1-150200.3.14.7 * jackson-databind-javadoc-2.16.1-150200.3.18.1 * jackson-core-javadoc-2.16.1-150200.3.14.7

1 0

SUSE-SU-2024:1762-1: important: Security update for perl
by OPENSUSE-UPDATES 22 May '24

22 May '24

# Security update for perl Announcement ID: SUSE-SU-2024:1762-1 Rating: important References: * bsc#1082216 * bsc#1082233 * bsc#1213638 Cross-References: * CVE-2018-6798 * CVE-2018-6913 CVSS scores: * CVE-2018-6798 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2018-6913 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2018-6913 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for perl fixes the following issues: Security issues fixed: * CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216) * CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233) Non-security issue fixed: * make Net::FTP work with TLS 1.3 (bsc#1213638) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1762=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1762=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1762=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1762=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1762=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1762=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1762=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1762=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1762=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1762=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1762=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1762=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1762=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1762=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1762=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1762=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1762=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1762=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1762=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1762=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1762=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1762=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-1762=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1762=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1762=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1762=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1762=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1762=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1762=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1762=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1762=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Manager Proxy 4.3 (x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Manager Server 4.3 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Enterprise Storage 7.1 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Enterprise Storage 7.1 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap 15.3 (x86_64) * perl-base-32bit-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-5.26.1-150300.17.17.1 * perl-32bit-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap 15.3 (noarch) * perl-doc-5.26.1-150300.17.17.1 * openSUSE Leap 15.3 (aarch64_ilp32) * perl-core-DB_File-64bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-64bit-debuginfo-5.26.1-150300.17.17.1 * perl-64bit-5.26.1-150300.17.17.1 * perl-64bit-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-64bit-5.26.1-150300.17.17.1 * perl-base-64bit-5.26.1-150300.17.17.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap 15.5 (x86_64) * perl-base-32bit-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-5.26.1-150300.17.17.1 * perl-32bit-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap 15.5 (noarch) * perl-doc-5.26.1-150300.17.17.1 * openSUSE Leap 15.6 (x86_64) * perl-base-32bit-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-32bit-5.26.1-150300.17.17.1 * perl-32bit-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * openSUSE Leap 15.6 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * Basesystem Module 15-SP5 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * Basesystem Module 15-SP6 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * Development Tools Module 15-SP5 (noarch) * perl-doc-5.26.1-150300.17.17.1 * Development Tools Module 15-SP6 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Package Hub 15 15-SP5 (x86_64) * perl-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Package Hub 15 15-SP6 (x86_64) * perl-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * perl-5.26.1-150300.17.17.1 * perl-core-DB_File-5.26.1-150300.17.17.1 * perl-base-debuginfo-5.26.1-150300.17.17.1 * perl-debuginfo-5.26.1-150300.17.17.1 * perl-core-DB_File-debuginfo-5.26.1-150300.17.17.1 * perl-base-5.26.1-150300.17.17.1 * perl-debugsource-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * perl-doc-5.26.1-150300.17.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * perl-base-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-32bit-debuginfo-5.26.1-150300.17.17.1 * perl-base-32bit-5.26.1-150300.17.17.1 ## References: * https://www.suse.com/security/cve/CVE-2018-6798.html * https://www.suse.com/security/cve/CVE-2018-6913.html * https://bugzilla.suse.com/show_bug.cgi?id=1082216 * https://bugzilla.suse.com/show_bug.cgi?id=1082233 * https://bugzilla.suse.com/show_bug.cgi?id=1213638

1 0

SUSE-SU-2024:1759-1: important: Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)
by OPENSUSE-UPDATES 22 May '24

22 May '24

# Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:1759-1 Rating: important References: * bsc#1220211 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52502 * CVE-2023-6546 * CVE-2024-26585 * CVE-2024-26610 * CVE-2024-26766 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close for tls (bsc#1220211). * CVE-2023-6546: Fixed a race condition that could lead to a use-after-free in the GSM 0710 tty multiplexor (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1759=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-1759=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_9-debugsource-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-6-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_9-debugsource-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-6-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:1760-1: important: Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
by OPENSUSE-UPDATES 22 May '24

22 May '24

# Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:1760-1 Rating: important References: * bsc#1221302 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2024-26610 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1760=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-1760=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_59-default-debuginfo-2-150500.11.10.1 * kernel-livepatch-5_14_21-150500_55_59-default-2-150500.11.10.1 * kernel-livepatch-SLE15-SP5_Update_12-debugsource-2-150500.11.10.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_59-default-debuginfo-2-150500.11.10.1 * kernel-livepatch-5_14_21-150500_55_59-default-2-150500.11.10.1 * kernel-livepatch-SLE15-SP5_Update_12-debugsource-2-150500.11.10.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-RU-2024:0984-2: important: Recommended update for runc
by OPENSUSE-UPDATES 22 May '24

22 May '24

# Recommended update for runc Announcement ID: SUSE-RU-2024:0984-2 Rating: important References: * bsc#1192051 * bsc#1221050 Affected Products: * Containers Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed. ## Description: This update for runc fixes the following issues: * Add upstream patch <https://github.com/opencontainers/runc/pull/4219> to properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050 This allows running 15 SP6 containers on older distributions. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-984=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-984=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * runc-1.1.12-150000.64.1 * runc-debuginfo-1.1.12-150000.64.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * runc-1.1.12-150000.64.1 * runc-debuginfo-1.1.12-150000.64.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1192051 * https://bugzilla.suse.com/show_bug.cgi?id=1221050

1 0

SUSE-SU-2024:1748-1: important: Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)
by OPENSUSE-UPDATES 22 May '24

22 May '24

# Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:1748-1 Rating: important References: * bsc#1216644 * bsc#1218259 * bsc#1220211 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52502 * CVE-2023-6546 * CVE-2023-6931 * CVE-2024-26585 * CVE-2024-26610 * CVE-2024-26766 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6931 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6931 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves seven vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_19 fixes several issues. The following security issues were fixed: * CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close for tls (bsc#1220211). * CVE-2023-6546: Fixed a race condition that could lead to a use-after-free in the GSM 0710 tty multiplexor (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1743=1 SUSE-2024-1744=1 SUSE-2024-1745=1 SUSE-2024-1748=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-1748=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-1743=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-1744=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-1745=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1754=1 SUSE-2024-1752=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-1752=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-1754=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_81-default-debuginfo-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_12-debugsource-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_16-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_63-default-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-debuginfo-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_81-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_63-default-debuginfo-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_15-debugsource-11-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_81-default-debuginfo-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_12-debugsource-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_16-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_63-default-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-debuginfo-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_81-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_63-default-debuginfo-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_15-debugsource-11-150400.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_2-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-debuginfo-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-debuginfo-11-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_3-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-10-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_2-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-debuginfo-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-debuginfo-11-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_3-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-10-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2023-6931.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://bugzilla.suse.com/show_bug.cgi?id=1216644 * https://bugzilla.suse.com/show_bug.cgi?id=1218259 * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:1746-1: important: Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)
by OPENSUSE-UPDATES 22 May '24

22 May '24

# Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:1746-1 Rating: important References: * bsc#1220211 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52502 * CVE-2023-6546 * CVE-2024-26585 * CVE-2024-26610 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves five vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_147 fixes several issues. The following security issues were fixed: * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close for tls (bsc#1220211). * CVE-2023-6546: Fixed a race condition that could lead to a use-after-free in the GSM 0710 tty multiplexor (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1746=1 SUSE-2024-1747=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-1746=1 SUSE-SLE- Module-Live-Patching-15-SP3-2024-1747=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_40-debugsource-7-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-default-7-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-default-debuginfo-7-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-default-debuginfo-7-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_39-debugsource-7-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-default-7-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_147-preempt-debuginfo-7-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-preempt-debuginfo-7-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-preempt-7-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-preempt-7-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_144-default-7-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-default-7-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:1749-1: important: Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
by OPENSUSE-UPDATES 22 May '24

22 May '24

# Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:1749-1 Rating: important References: * bsc#1219296 * bsc#1220211 * bsc#1220828 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52340 * CVE-2023-52502 * CVE-2023-6546 * CVE-2024-26585 * CVE-2024-26610 * CVE-2024-26622 * CVE-2024-26766 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves eight vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close for tls (bsc#1220211). * CVE-2023-6546: Fixed a race condition that could lead to a use-after-free in the GSM 0710 tty multiplexor (bsc#1222685). * CVE-2024-26622: Fixed a use-after-free with tomoyo_write_control() (bsc#1220828). * CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-1749=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1749=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_108-default-debuginfo-4-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_23-debugsource-4-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_108-default-4-150400.9.8.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_108-default-debuginfo-4-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_23-debugsource-4-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_108-default-4-150400.9.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://bugzilla.suse.com/show_bug.cgi?id=1219296 * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220828 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:1750-1: important: Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
by OPENSUSE-UPDATES 22 May '24

22 May '24

# Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:1750-1 Rating: important References: * bsc#1221302 * bsc#1222882 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2024-26610 * CVE-2024-26766 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1750=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-1750=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-2-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-2-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_25-debugsource-2-150400.9.8.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-2-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-2-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_25-debugsource-2-150400.9.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0