May 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:1634-1: moderate: Security update for openssl-3
by OPENSUSE-UPDATES 14 May '24

14 May '24

# Security update for openssl-3 Announcement ID: SUSE-SU-2024:1634-1 Rating: moderate References: * bsc#1222548 Cross-References: * CVE-2024-2511 CVSS scores: * CVE-2024-2511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1634=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1634=1 openSUSE-SLE-15.5-2024-1634=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libopenssl3-3.0.8-150500.5.30.1 * openssl-3-3.0.8-150500.5.30.1 * libopenssl3-debuginfo-3.0.8-150500.5.30.1 * openssl-3-debugsource-3.0.8-150500.5.30.1 * libopenssl-3-devel-3.0.8-150500.5.30.1 * openssl-3-debuginfo-3.0.8-150500.5.30.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libopenssl3-3.0.8-150500.5.30.1 * openssl-3-3.0.8-150500.5.30.1 * libopenssl3-debuginfo-3.0.8-150500.5.30.1 * openssl-3-debugsource-3.0.8-150500.5.30.1 * libopenssl-3-devel-3.0.8-150500.5.30.1 * openssl-3-debuginfo-3.0.8-150500.5.30.1 * openSUSE Leap 15.5 (x86_64) * libopenssl3-32bit-3.0.8-150500.5.30.1 * libopenssl3-32bit-debuginfo-3.0.8-150500.5.30.1 * libopenssl-3-devel-32bit-3.0.8-150500.5.30.1 * openSUSE Leap 15.5 (noarch) * openssl-3-doc-3.0.8-150500.5.30.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl-3-devel-64bit-3.0.8-150500.5.30.1 * libopenssl3-64bit-3.0.8-150500.5.30.1 * libopenssl3-64bit-debuginfo-3.0.8-150500.5.30.1 ## References: * https://www.suse.com/security/cve/CVE-2024-2511.html * https://bugzilla.suse.com/show_bug.cgi?id=1222548

1 0

SUSE-SU-2024:1635-1: moderate: Security update for tpm2-0-tss
by OPENSUSE-UPDATES 14 May '24

14 May '24

# Security update for tpm2-0-tss Announcement ID: SUSE-SU-2024:1635-1 Rating: moderate References: * bsc#1223690 Cross-References: * CVE-2024-29040 CVSS scores: * CVE-2024-29040 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for tpm2-0-tss fixes the following issues: * CVE-2024-29040: Fixed quote data validation by Fapi_VerifyQuote (bsc#1223690). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1635=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1635=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1635=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1635=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1635=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1635=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1635=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1635=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1635=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1635=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libtss2-sys1-debuginfo-3.1.0-150400.3.6.1 * tpm2-0-tss-devel-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-3.1.0-150400.3.6.1 * tpm2-0-tss-3.1.0-150400.3.6.1 * libtss2-tctildr0-3.1.0-150400.3.6.1 * tpm2-0-tss-debugsource-3.1.0-150400.3.6.1 * libtss2-tctildr0-debuginfo-3.1.0-150400.3.6.1 * libtss2-esys0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-device0-3.1.0-150400.3.6.1 * libtss2-esys0-3.1.0-150400.3.6.1 * libtss2-rc0-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-3.1.0-150400.3.6.1 * libtss2-tcti-pcap0-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-3.1.0-150400.3.6.1 * libtss2-fapi1-debuginfo-3.1.0-150400.3.6.1 * libtss2-rc0-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-3.1.0-150400.3.6.1 * libtss2-mu0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-3.1.0-150400.3.6.1 * libtss2-fapi1-3.1.0-150400.3.6.1 * libtss2-tcti-device0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-pcap0-debuginfo-3.1.0-150400.3.6.1 * openSUSE Leap 15.4 (x86_64) * libtss2-rc0-32bit-3.1.0-150400.3.6.1 * libtss2-esys0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-32bit-3.1.0-150400.3.6.1 * libtss2-rc0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-32bit-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-32bit-3.1.0-150400.3.6.1 * libtss2-tctildr0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-32bit-3.1.0-150400.3.6.1 * libtss2-tcti-device0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-device0-32bit-3.1.0-150400.3.6.1 * libtss2-mu0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-32bit-3.1.0-150400.3.6.1 * libtss2-esys0-32bit-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tctildr0-32bit-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-32bit-3.1.0-150400.3.6.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libtss2-rc0-64bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-device0-64bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-64bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-64bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-64bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-esys0-64bit-3.1.0-150400.3.6.1 * libtss2-tctildr0-64bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-64bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-64bit-3.1.0-150400.3.6.1 * libtss2-tctildr0-64bit-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-64bit-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-64bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-64bit-3.1.0-150400.3.6.1 * libtss2-esys0-64bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-64bit-3.1.0-150400.3.6.1 * libtss2-rc0-64bit-3.1.0-150400.3.6.1 * libtss2-mu0-64bit-3.1.0-150400.3.6.1 * libtss2-sys1-64bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-device0-64bit-3.1.0-150400.3.6.1 * libtss2-sys1-64bit-3.1.0-150400.3.6.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libtss2-mu0-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-3.1.0-150400.3.6.1 * libtss2-tctildr0-3.1.0-150400.3.6.1 * tpm2-0-tss-debugsource-3.1.0-150400.3.6.1 * libtss2-rc0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tctildr0-debuginfo-3.1.0-150400.3.6.1 * libtss2-esys0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-3.1.0-150400.3.6.1 * libtss2-tcti-device0-3.1.0-150400.3.6.1 * libtss2-esys0-3.1.0-150400.3.6.1 * libtss2-sys1-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-3.1.0-150400.3.6.1 * libtss2-rc0-3.1.0-150400.3.6.1 * libtss2-tcti-device0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-debuginfo-3.1.0-150400.3.6.1 * tpm2-0-tss-3.1.0-150400.3.6.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libtss2-mu0-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-3.1.0-150400.3.6.1 * libtss2-tctildr0-3.1.0-150400.3.6.1 * tpm2-0-tss-debugsource-3.1.0-150400.3.6.1 * libtss2-rc0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tctildr0-debuginfo-3.1.0-150400.3.6.1 * libtss2-esys0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-3.1.0-150400.3.6.1 * libtss2-tcti-device0-3.1.0-150400.3.6.1 * libtss2-esys0-3.1.0-150400.3.6.1 * libtss2-sys1-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-3.1.0-150400.3.6.1 * libtss2-rc0-3.1.0-150400.3.6.1 * libtss2-tcti-device0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-debuginfo-3.1.0-150400.3.6.1 * tpm2-0-tss-3.1.0-150400.3.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libtss2-sys1-debuginfo-3.1.0-150400.3.6.1 * tpm2-0-tss-devel-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-3.1.0-150400.3.6.1 * tpm2-0-tss-3.1.0-150400.3.6.1 * libtss2-tctildr0-3.1.0-150400.3.6.1 * tpm2-0-tss-debugsource-3.1.0-150400.3.6.1 * libtss2-tctildr0-debuginfo-3.1.0-150400.3.6.1 * libtss2-esys0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-device0-3.1.0-150400.3.6.1 * libtss2-esys0-3.1.0-150400.3.6.1 * libtss2-rc0-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-3.1.0-150400.3.6.1 * libtss2-tcti-pcap0-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-3.1.0-150400.3.6.1 * libtss2-fapi1-debuginfo-3.1.0-150400.3.6.1 * libtss2-rc0-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-3.1.0-150400.3.6.1 * libtss2-mu0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-3.1.0-150400.3.6.1 * libtss2-fapi1-3.1.0-150400.3.6.1 * libtss2-tcti-device0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-pcap0-debuginfo-3.1.0-150400.3.6.1 * openSUSE Leap 15.5 (x86_64) * libtss2-rc0-32bit-3.1.0-150400.3.6.1 * libtss2-esys0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-32bit-3.1.0-150400.3.6.1 * libtss2-rc0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-32bit-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-32bit-3.1.0-150400.3.6.1 * libtss2-tctildr0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-32bit-3.1.0-150400.3.6.1 * libtss2-tcti-device0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-device0-32bit-3.1.0-150400.3.6.1 * libtss2-mu0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-32bit-3.1.0-150400.3.6.1 * libtss2-esys0-32bit-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-32bit-debuginfo-3.1.0-150400.3.6.1 * libtss2-tctildr0-32bit-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-32bit-3.1.0-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libtss2-mu0-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-3.1.0-150400.3.6.1 * libtss2-tctildr0-3.1.0-150400.3.6.1 * tpm2-0-tss-debugsource-3.1.0-150400.3.6.1 * libtss2-rc0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tctildr0-debuginfo-3.1.0-150400.3.6.1 * libtss2-esys0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-3.1.0-150400.3.6.1 * libtss2-tcti-device0-3.1.0-150400.3.6.1 * libtss2-esys0-3.1.0-150400.3.6.1 * libtss2-sys1-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-3.1.0-150400.3.6.1 * libtss2-rc0-3.1.0-150400.3.6.1 * libtss2-tcti-device0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-debuginfo-3.1.0-150400.3.6.1 * tpm2-0-tss-3.1.0-150400.3.6.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libtss2-mu0-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-3.1.0-150400.3.6.1 * libtss2-tctildr0-3.1.0-150400.3.6.1 * tpm2-0-tss-debugsource-3.1.0-150400.3.6.1 * libtss2-rc0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tctildr0-debuginfo-3.1.0-150400.3.6.1 * libtss2-esys0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-3.1.0-150400.3.6.1 * libtss2-tcti-device0-3.1.0-150400.3.6.1 * libtss2-esys0-3.1.0-150400.3.6.1 * libtss2-sys1-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-3.1.0-150400.3.6.1 * libtss2-rc0-3.1.0-150400.3.6.1 * libtss2-tcti-device0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-debuginfo-3.1.0-150400.3.6.1 * tpm2-0-tss-3.1.0-150400.3.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libtss2-mu0-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-3.1.0-150400.3.6.1 * libtss2-tctildr0-3.1.0-150400.3.6.1 * tpm2-0-tss-debugsource-3.1.0-150400.3.6.1 * libtss2-rc0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tctildr0-debuginfo-3.1.0-150400.3.6.1 * libtss2-esys0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-3.1.0-150400.3.6.1 * libtss2-tcti-device0-3.1.0-150400.3.6.1 * libtss2-esys0-3.1.0-150400.3.6.1 * libtss2-sys1-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-3.1.0-150400.3.6.1 * libtss2-rc0-3.1.0-150400.3.6.1 * libtss2-tcti-device0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-debuginfo-3.1.0-150400.3.6.1 * tpm2-0-tss-3.1.0-150400.3.6.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libtss2-mu0-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-3.1.0-150400.3.6.1 * libtss2-tctildr0-3.1.0-150400.3.6.1 * tpm2-0-tss-debugsource-3.1.0-150400.3.6.1 * libtss2-rc0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tctildr0-debuginfo-3.1.0-150400.3.6.1 * libtss2-esys0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-3.1.0-150400.3.6.1 * libtss2-tcti-device0-3.1.0-150400.3.6.1 * libtss2-esys0-3.1.0-150400.3.6.1 * libtss2-sys1-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-3.1.0-150400.3.6.1 * libtss2-rc0-3.1.0-150400.3.6.1 * libtss2-tcti-device0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-debuginfo-3.1.0-150400.3.6.1 * tpm2-0-tss-3.1.0-150400.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libtss2-mu0-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-3.1.0-150400.3.6.1 * libtss2-tctildr0-3.1.0-150400.3.6.1 * tpm2-0-tss-debugsource-3.1.0-150400.3.6.1 * libtss2-rc0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tctildr0-debuginfo-3.1.0-150400.3.6.1 * libtss2-esys0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-3.1.0-150400.3.6.1 * libtss2-tcti-device0-3.1.0-150400.3.6.1 * libtss2-esys0-3.1.0-150400.3.6.1 * libtss2-sys1-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-3.1.0-150400.3.6.1 * libtss2-rc0-3.1.0-150400.3.6.1 * libtss2-tcti-device0-debuginfo-3.1.0-150400.3.6.1 * libtss2-fapi1-debuginfo-3.1.0-150400.3.6.1 * tpm2-0-tss-3.1.0-150400.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libtss2-sys1-debuginfo-3.1.0-150400.3.6.1 * tpm2-0-tss-devel-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-3.1.0-150400.3.6.1 * tpm2-0-tss-3.1.0-150400.3.6.1 * libtss2-tctildr0-3.1.0-150400.3.6.1 * tpm2-0-tss-debugsource-3.1.0-150400.3.6.1 * libtss2-tctildr0-debuginfo-3.1.0-150400.3.6.1 * libtss2-esys0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-device0-3.1.0-150400.3.6.1 * libtss2-esys0-3.1.0-150400.3.6.1 * libtss2-rc0-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-3.1.0-150400.3.6.1 * libtss2-tcti-pcap0-3.1.0-150400.3.6.1 * libtss2-tcti-swtpm0-3.1.0-150400.3.6.1 * libtss2-fapi1-debuginfo-3.1.0-150400.3.6.1 * libtss2-rc0-debuginfo-3.1.0-150400.3.6.1 * libtss2-mu0-3.1.0-150400.3.6.1 * libtss2-mu0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-cmd0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-mssim0-debuginfo-3.1.0-150400.3.6.1 * libtss2-sys1-3.1.0-150400.3.6.1 * libtss2-fapi1-3.1.0-150400.3.6.1 * libtss2-tcti-device0-debuginfo-3.1.0-150400.3.6.1 * libtss2-tcti-pcap0-debuginfo-3.1.0-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-29040.html * https://bugzilla.suse.com/show_bug.cgi?id=1223690

1 0

SUSE-SU-2024:1636-1: moderate: Security update for tpm2.0-tools
by OPENSUSE-UPDATES 14 May '24

14 May '24

# Security update for tpm2.0-tools Announcement ID: SUSE-SU-2024:1636-1 Rating: moderate References: * bsc#1223687 * bsc#1223689 Cross-References: * CVE-2024-29038 * CVE-2024-29039 CVSS scores: * CVE-2024-29038 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2024-29039 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for tpm2.0-tools fixes the following issues: * CVE-2024-29038: Fixed arbitrary quote data validation by tpm2_checkquote (bsc#1223687). * CVE-2024-29039: Fixed pcr selection value to be compared with the attest (bsc#1223689). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1636=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1636=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1636=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1636=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1636=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1636=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1636=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1636=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1636=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1636=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * tpm2.0-tools-debugsource-5.2-150400.6.3.1 * tpm2.0-tools-5.2-150400.6.3.1 * tpm2.0-tools-debuginfo-5.2-150400.6.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * tpm2.0-tools-debugsource-5.2-150400.6.3.1 * tpm2.0-tools-5.2-150400.6.3.1 * tpm2.0-tools-debuginfo-5.2-150400.6.3.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * tpm2.0-tools-debugsource-5.2-150400.6.3.1 * tpm2.0-tools-5.2-150400.6.3.1 * tpm2.0-tools-debuginfo-5.2-150400.6.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * tpm2.0-tools-debugsource-5.2-150400.6.3.1 * tpm2.0-tools-5.2-150400.6.3.1 * tpm2.0-tools-debuginfo-5.2-150400.6.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * tpm2.0-tools-debugsource-5.2-150400.6.3.1 * tpm2.0-tools-5.2-150400.6.3.1 * tpm2.0-tools-debuginfo-5.2-150400.6.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * tpm2.0-tools-debugsource-5.2-150400.6.3.1 * tpm2.0-tools-5.2-150400.6.3.1 * tpm2.0-tools-debuginfo-5.2-150400.6.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * tpm2.0-tools-debugsource-5.2-150400.6.3.1 * tpm2.0-tools-5.2-150400.6.3.1 * tpm2.0-tools-debuginfo-5.2-150400.6.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * tpm2.0-tools-debugsource-5.2-150400.6.3.1 * tpm2.0-tools-5.2-150400.6.3.1 * tpm2.0-tools-debuginfo-5.2-150400.6.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * tpm2.0-tools-debugsource-5.2-150400.6.3.1 * tpm2.0-tools-5.2-150400.6.3.1 * tpm2.0-tools-debuginfo-5.2-150400.6.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * tpm2.0-tools-debugsource-5.2-150400.6.3.1 * tpm2.0-tools-5.2-150400.6.3.1 * tpm2.0-tools-debuginfo-5.2-150400.6.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-29038.html * https://www.suse.com/security/cve/CVE-2024-29039.html * https://bugzilla.suse.com/show_bug.cgi?id=1223687 * https://bugzilla.suse.com/show_bug.cgi?id=1223689

1 0

openSUSE-SU-2024:0125-1: important: Security update for python-Pillow
by opensuse-security＠opensuse.org 13 May '24

13 May '24

openSUSE Security Update: Security update for python-Pillow ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0125-1 Rating: important References: #1219048 Cross-References: CVE-2023-50447 CVSS scores: CVE-2023-50447 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2023-50447 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Pillow fixes the following issues: - CVE-2023-50447: Fixed arbitrary code execution via the environment parameter (boo#1219048) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-125=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): python3-Pillow-8.4.0-bp155.3.3.1 python3-Pillow-tk-8.4.0-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2023-50447.html https://bugzilla.suse.com/1219048

1 0

SUSE-RU-2024:1623-1: moderate: Recommended update for libcontainers-common
by OPENSUSE-UPDATES 13 May '24

13 May '24

# Recommended update for libcontainers-common Announcement ID: SUSE-RU-2024:1623-1 Rating: moderate References: * bsc#1197030 * bsc#1213556 * bsc#1216443 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has three fixes can now be installed. ## Description: This update for libcontainers-common fixes the following issues: New release 20240206: * bump bundled c/common to 0.57.4 * bump bundled c/image to 0.29.2 * conditionally require libcontainers-sles-mounds for product(SLE-Micro) as well (SLE Micro 6.0 now no longer provides product(SUSE_SLE) and instead only provides product(SLE-Micro)), fixes bsc#1216443 New release 20231204: * bump c/common to 0.57.0 * Fix specification of unix:///run * libimage/layer_tree: if parent is empty and a manifest list then ignore check. * Split up util package into pkg/password, pkg/copy, pkg/version * Remove ActiveDestination method to move into podman * Default machine CPUs to Cores/2 * pkg/config: do NOT set StaticDir and VolumeDir * Implement negated label match function * chore: import packages only once * bump c/storage to 1.51.0 * overlay, composefs: mount loop device RO * Run codespell on code * store: serialize container deletion * pkg/system: reduce retry timeout for EnsureRemoveAll * overlay, composefs: use data-only lower layers * store: call RecordWrite() before graphDriver Cleanup() * bump c/image to 5.29.0 * Use constants and types from opencontainers/image-spec/specs-go/v1 * progress: set Current before Refill * copy: fix nil pointer dereference when checking compression algorithm * ociarchive: Add new ArchiveFileNotFoundError New release 20230913: * bump c/image to 5.28.0 * Adding IO decorator to copy progress bar * Ensure we close HTTP connections on all paths * manifest: ListUpdate add imgspecv1.Platform field * pkg/docker: use the same default auth path as macOS on FreeBSD * blob: TryReusingBlobWithOptions consider RequiredCompression if set * Fix tests of the ostree transport * helpers_test,cleanup: correct argument order * Make temporary names container/image specific * listupdate,oci: instance show read-only annotations and CompressionAlgorithmNames * Fix TestOCI1IndexChooseInstanc * Refactor data passing in c/image/copy * Update module github.com/sigstore/fulcio to v1.4.0 * copy/multiple: instanceCopyCopy honor UpdateCompressionAlgorithms * Update vendor of containers/storage * copy/single: accept custom *Options and wrap arguments in copySingleImageOptions * Improve transport documentation * copy: implement instanceCopyClone for zstd compression * copy/multiple: priority of instanceCopyCopy must be higher than instanceCopyClone * Clarify where mirrors are used * Update x/exp/slices, and some small slice-related cleanups * Use consistent example domains in #2069 * copy: add support for ForceCompressionFormat * storage.storageImageDestination.Commit(): leverage image options * Rename SKOPEO_CI_TAG to SKOPEO_CI_BRANCH * [CI:DOCS] Add cirrus-cron retry/monitor jobs * [release-5.27] Fix the branch we use for determining a git-validation starting point * OCI image-spec / distribution-spec v1.1 updates, first round * Merge release branch into main * BREAKING: Update for move of github.com/theupdateframework/go-tuf/encrypted * Update module github.com/containers/ocicrypt to v1.1.8 * fix removal of temp file in GetBlob on Windows * Fix build with golangci-lint 1.54.2 * Implement, and default to, a SQLite BlobInfoCache instead of BoltDB * Update dependencies of docker/docker * Correctly handle encryption/decryption changes in non-OCI formats New release 20230814: * bump c/storage to 1.48.0 * Fix error if continueWrite/continueRead pipe open fails * pkg/regexp: make sure that &Regexp implements the interfaces * Remove use of fillGo18FileTypeBits * bump c/image to 5.27.0 * Don't completely silently ignore non-OCI manifests in OCI layouts * bump c/common to 0.55.3 * Change default image volume mode to "nullfs" on FreeBSD * [v0.55][CI-DOCS] remove zstd:chunked from docs * libimage: harden lookup by digest * libimage: HasDifferentDigest: add InsecureSkipTLSVerify option * Disable CNI related configs on ALP (bsc#1213556) (https://github.com/containers/podman/issues/19327) * Resolve choice on openSUSE distributions for libcontainer-policy by suggesting the libcontainers-openSUSE-policy explicitly. * Enforce BCI verification via Podman on openSUSE distributions using the already shipped container signing keys. (bsc#1197030) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1623=1 openSUSE-SLE-15.5-2024-1623=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1623=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1623=1 ## Package List: * openSUSE Leap 15.5 (noarch) * libcontainers-openSUSE-policy-20240206-150500.4.9.2 * libcontainers-common-20240206-150500.4.9.2 * libcontainers-sles-mounts-20240206-150500.4.9.2 * libcontainers-default-policy-20240206-150500.4.9.2 * SUSE Linux Enterprise Micro 5.5 (noarch) * libcontainers-openSUSE-policy-20240206-150500.4.9.2 * libcontainers-common-20240206-150500.4.9.2 * libcontainers-sles-mounts-20240206-150500.4.9.2 * libcontainers-default-policy-20240206-150500.4.9.2 * Basesystem Module 15-SP5 (noarch) * libcontainers-openSUSE-policy-20240206-150500.4.9.2 * libcontainers-common-20240206-150500.4.9.2 * libcontainers-sles-mounts-20240206-150500.4.9.2 * libcontainers-default-policy-20240206-150500.4.9.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1197030 * https://bugzilla.suse.com/show_bug.cgi?id=1213556 * https://bugzilla.suse.com/show_bug.cgi?id=1216443

1 0

SUSE-SU-2024:1624-1: important: Security update for python-Werkzeug
by OPENSUSE-UPDATES 13 May '24

13 May '24

# Security update for python-Werkzeug Announcement ID: SUSE-SU-2024:1624-1 Rating: important References: * bsc#1223979 Cross-References: * CVE-2024-34069 CVSS scores: * CVE-2024-34069 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python-Werkzeug fixes the following issues: * CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1624=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1624=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1624=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1624=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1624=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1624=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1624=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1624=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1624=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1624=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1624=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1624=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1624=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1624=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1624=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1624=1 ## Package List: * openSUSE Leap 15.3 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * python2-Werkzeug-1.0.1-150300.3.8.1 * openSUSE Leap 15.5 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * Basesystem Module 15-SP5 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Package Hub 15 15-SP5 (noarch) * python2-Werkzeug-1.0.1-150300.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Manager Proxy 4.3 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Manager Server 4.3 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 * SUSE Enterprise Storage 7.1 (noarch) * python3-Werkzeug-1.0.1-150300.3.8.1 ## References: * https://www.suse.com/security/cve/CVE-2024-34069.html * https://bugzilla.suse.com/show_bug.cgi?id=1223979

1 0

openSUSE-SU-2024:0122-1: important: Security update for opera
by opensuse-security＠opensuse.org 13 May '24

13 May '24

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0122-1 Rating: important References: Cross-References: CVE-2024-2883 CVE-2024-2885 CVE-2024-2886 CVE-2024-2887 Affected Products: openSUSE Leap 15.6:NonFree ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Opera was updated to fix the following issues: Update to 109.0.5097.45 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-114737 [Search box] It's getting blurred when click on it, also lower corners are not rounded sometimes * DNA-115042 '+' button is not responsive when 30+ tabs opened * DNA-115326 Wrong fonts and padding after intake * DNA-115392 [Badges] Text displayed in red * DNA-115501 'Review your payment' native popup has wrong colors * DNA-115809 Enable #show-duplicate-indicator-on-link on all streams Update to 109.0.5097.38 * CHR-9695 Update Chromium on desktop-stable-123-5097 to 123.0.6312.87 * DNA-115156 [Login and Password suggestion] Suggestions are bolded and highlight doesn`t fill all area * DNA-115313 No video playback on skyshowtime.com * DNA-115639 [Version 109][Detached window] Missing functions names in light mode * DNA-115812 Enable #startpage-opening-animation on all streams * DNA-115836 Lucid mode visual issues on H264 videos - The update to chromium 109.0.5097.38 fixes following issues: CVE-2024-2883, CVE-2024-2885, CVE-2024-2886, CVE-2024-2887 Update to 109.0.5097.33 * CHR-9674 Update Chromium on desktop-stable-123-5097 to 123.0.6312.46 * DNA-115357 [Settings] Search toolbar has wrong position * DNA-115396 Bolded camera icon when camera access is allowed * DNA-115478 AI Prompts in text highlight popup not displayed properly * DNA-115563 Wallet selector not working * DNA-115601 Remove 'moving text' animation in the tab cycler * DNA-115645 Internal pages icons unreadable when highlight * DNA-115717 'Your extension was disabled because it is corrupted' message is displayed to user * DNA-115770 Promote 109 to stable - Complete Opera 109 changelog at: https://blogs.opera.com/desktop/changelog-for-109/ Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6:NonFree: zypper in -t patch openSUSE-2024-122=1 Package List: - openSUSE Leap 15.6:NonFree (x86_64): opera-109.0.5097.45-lp156.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-2883.html https://www.suse.com/security/cve/CVE-2024-2885.html https://www.suse.com/security/cve/CVE-2024-2886.html https://www.suse.com/security/cve/CVE-2024-2887.html

1 0

openSUSE-SU-2024:0123-1: important: Security update for chromium
by opensuse-security＠opensuse.org 13 May '24

13 May '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0123-1 Rating: important References: #1221732 #1222035 #1222260 #1222707 #1222958 #1223845 #1223846 #1224045 Cross-References: CVE-2024-2625 CVE-2024-2626 CVE-2024-2627 CVE-2024-2628 CVE-2024-2883 CVE-2024-2885 CVE-2024-2886 CVE-2024-2887 CVE-2024-3156 CVE-2024-3157 CVE-2024-3158 CVE-2024-3159 CVE-2024-3515 CVE-2024-3516 CVE-2024-3832 CVE-2024-3833 CVE-2024-3834 CVE-2024-3837 CVE-2024-3838 CVE-2024-3839 CVE-2024-3840 CVE-2024-3841 CVE-2024-3843 CVE-2024-3844 CVE-2024-3845 CVE-2024-3846 CVE-2024-3847 CVE-2024-4058 CVE-2024-4059 CVE-2024-4060 CVE-2024-4331 CVE-2024-4368 CVE-2024-4558 CVE-2024-4559 CVE-2024-4671 CVSS scores: CVE-2024-2625 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-2626 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2024-2627 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-2628 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2024-3156 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-3158 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-3834 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-3837 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-3838 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2024-3839 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 35 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium 124.0.6367.201 * CVE-2024-4671: Use after free in Visuals - Chromium 124.0.6367.155 (boo#1224045) * CVE-2024-4558: Use after free in ANGLE * CVE-2024-4559: Heap buffer overflow in WebAudio - Chromium 124.0.6367.118 (boo#1223846) * CVE-2024-4331: Use after free in Picture In Picture * CVE-2024-4368: Use after free in Dawn - Chromium 124.0.6367.78 (boo#1223845) * CVE-2024-4058: Type Confusion in ANGLE * CVE-2024-4059: Out of bounds read in V8 API * CVE-2024-4060: Use after free in Dawn - Chromium 124.0.6367.60 (boo#1222958) * CVE-2024-3832: Object corruption in V8. * CVE-2024-3833: Object corruption in WebAssembly. * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang * CVE-2024-3837: Use after free in QUIC. * CVE-2024-3838: Inappropriate implementation in Autofill. * CVE-2024-3839: Out of bounds read in Fonts. * CVE-2024-3840: Insufficient policy enforcement in Site Isolation. * CVE-2024-3841: Insufficient data validation in Browser Switcher. * CVE-2024-3843: Insufficient data validation in Downloads. * CVE-2024-3844: Inappropriate implementation in Extensions. * CVE-2024-3845: Inappropriate implementation in Network. * CVE-2024-3846: Inappropriate implementation in Prompts. * CVE-2024-3847: Insufficient policy enforcement in WebUI. - Chromium 123.0.6312.122 (boo#1222707) * CVE-2024-3157: Out of bounds write in Compositing * CVE-2024-3516: Heap buffer overflow in ANGLE * CVE-2024-3515: Use after free in Dawn - Chromium 123.0.6312.105 (boo#1222260) * CVE-2024-3156: Inappropriate implementation in V8 * CVE-2024-3158: Use after free in Bookmarks * CVE-2024-3159: Out of bounds memory access in V8 - Chromium 123.0.6312.86 (boo#1222035) * CVE-2024-2883: Use after free in ANGLE * CVE-2024-2885: Use after free in Dawn * CVE-2024-2886: Use after free in WebCodecs * CVE-2024-2887: Type Confusion in WebAssembly - Chromium 123.0.6312.58 (boo#1221732) * CVE-2024-2625: Object lifecycle issue in V8 * CVE-2024-2626: Out of bounds read in Swiftshader * CVE-2024-2627: Use after free in Canvas * CVE-2024-2628: Inappropriate implementation in Downloads Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-123=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-124.0.6367.201-bp155.2.78.1 chromium-124.0.6367.201-bp155.2.78.1 References: https://www.suse.com/security/cve/CVE-2024-2625.html https://www.suse.com/security/cve/CVE-2024-2626.html https://www.suse.com/security/cve/CVE-2024-2627.html https://www.suse.com/security/cve/CVE-2024-2628.html https://www.suse.com/security/cve/CVE-2024-2883.html https://www.suse.com/security/cve/CVE-2024-2885.html https://www.suse.com/security/cve/CVE-2024-2886.html https://www.suse.com/security/cve/CVE-2024-2887.html https://www.suse.com/security/cve/CVE-2024-3156.html https://www.suse.com/security/cve/CVE-2024-3157.html https://www.suse.com/security/cve/CVE-2024-3158.html https://www.suse.com/security/cve/CVE-2024-3159.html https://www.suse.com/security/cve/CVE-2024-3515.html https://www.suse.com/security/cve/CVE-2024-3516.html https://www.suse.com/security/cve/CVE-2024-3832.html https://www.suse.com/security/cve/CVE-2024-3833.html https://www.suse.com/security/cve/CVE-2024-3834.html https://www.suse.com/security/cve/CVE-2024-3837.html https://www.suse.com/security/cve/CVE-2024-3838.html https://www.suse.com/security/cve/CVE-2024-3839.html https://www.suse.com/security/cve/CVE-2024-3840.html https://www.suse.com/security/cve/CVE-2024-3841.html https://www.suse.com/security/cve/CVE-2024-3843.html https://www.suse.com/security/cve/CVE-2024-3844.html https://www.suse.com/security/cve/CVE-2024-3845.html https://www.suse.com/security/cve/CVE-2024-3846.html https://www.suse.com/security/cve/CVE-2024-3847.html https://www.suse.com/security/cve/CVE-2024-4058.html https://www.suse.com/security/cve/CVE-2024-4059.html https://www.suse.com/security/cve/CVE-2024-4060.html https://www.suse.com/security/cve/CVE-2024-4331.html https://www.suse.com/security/cve/CVE-2024-4368.html https://www.suse.com/security/cve/CVE-2024-4558.html https://www.suse.com/security/cve/CVE-2024-4559.html https://www.suse.com/security/cve/CVE-2024-4671.html https://bugzilla.suse.com/1221732 https://bugzilla.suse.com/1222035 https://bugzilla.suse.com/1222260 https://bugzilla.suse.com/1222707 https://bugzilla.suse.com/1222958 https://bugzilla.suse.com/1223845 https://bugzilla.suse.com/1223846 https://bugzilla.suse.com/1224045

1 0

SUSE-RU-2024:1606-1: moderate: Recommended update for crmsh
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Recommended update for crmsh Announcement ID: SUSE-RU-2024:1606-1 Rating: moderate References: * bsc#1205925 * bsc#1212080 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for crmsh fixes the following issues: * Version update: * Fix: bootstrap: Remove unused -i option when calling csync2_remote and ssh_remote stage (bsc#1212080) * Fix: utils: pass env to child process explicitly (bsc#1205925) * Fix: utils: set env `CIB_shadow` using `os.environ` (bsc#1205925) * Fix: pass env to child process explicitly (bsc#1205925) * Fix: term: unset env `COLUMNS` and `ROWS` (bsc#1205925) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1606=1 openSUSE-SLE-15.5-2024-1606=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-1606=1 ## Package List: * openSUSE Leap 15.5 (noarch) * crmsh-scripts-4.5.1+20240422.f23940c3-150500.3.25.2 * crmsh-test-4.5.1+20240422.f23940c3-150500.3.25.2 * crmsh-4.5.1+20240422.f23940c3-150500.3.25.2 * SUSE Linux Enterprise High Availability Extension 15 SP5 (noarch) * crmsh-scripts-4.5.1+20240422.f23940c3-150500.3.25.2 * crmsh-4.5.1+20240422.f23940c3-150500.3.25.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1205925 * https://bugzilla.suse.com/show_bug.cgi?id=1212080

1 0

SUSE-SU-2024:1607-1: important: Security update for python-Pillow
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for python-Pillow Announcement ID: SUSE-SU-2024:1607-1 Rating: important References: * bsc#1185784 * bsc#1185785 * bsc#1185786 * bsc#1185803 * bsc#1185804 * bsc#1185805 Cross-References: * CVE-2021-25287 * CVE-2021-25288 * CVE-2021-28675 * CVE-2021-28676 * CVE-2021-28677 * CVE-2021-28678 CVSS scores: * CVE-2021-25287 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2021-25287 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2021-25288 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2021-25288 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2021-28675 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2021-28675 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2021-28676 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2021-28676 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2021-28677 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2021-28677 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2021-28678 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2021-28678 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 An update that solves six vulnerabilities can now be installed. ## Description: This update for python-Pillow fixes the following issues: * CVE-2021-25287: out-of-bounds read in J2kDecode in j2ku_graya_la (bsc#1185805) * CVE-2021-25288: out-of-bounds read in J2kDecode in j2ku_gray_i (bsc#1185803) * CVE-2021-28675: DoS in PsdImagePlugin (bsc#1185804) * CVE-2021-28676: infinite loop in FliDecode.c can lead to DoS (bsc#1185786) * CVE-2021-28677: DoS in the open phase via a malicious EPS file (bsc#1185785) * CVE-2021-28678: improper check in BlpImagePlugin can lead to DoS (bsc#1185784) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1607=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1607=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python-Pillow-debuginfo-7.2.0-150300.3.12.1 * python3-Pillow-tk-7.2.0-150300.3.12.1 * python-Pillow-debugsource-7.2.0-150300.3.12.1 * python3-Pillow-7.2.0-150300.3.12.1 * python3-Pillow-tk-debuginfo-7.2.0-150300.3.12.1 * python3-Pillow-debuginfo-7.2.0-150300.3.12.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-Pillow-debuginfo-7.2.0-150300.3.12.1 * python3-Pillow-tk-7.2.0-150300.3.12.1 * python-Pillow-debugsource-7.2.0-150300.3.12.1 * python3-Pillow-7.2.0-150300.3.12.1 * python3-Pillow-tk-debuginfo-7.2.0-150300.3.12.1 * python3-Pillow-debuginfo-7.2.0-150300.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2021-25287.html * https://www.suse.com/security/cve/CVE-2021-25288.html * https://www.suse.com/security/cve/CVE-2021-28675.html * https://www.suse.com/security/cve/CVE-2021-28676.html * https://www.suse.com/security/cve/CVE-2021-28677.html * https://www.suse.com/security/cve/CVE-2021-28678.html * https://bugzilla.suse.com/show_bug.cgi?id=1185784 * https://bugzilla.suse.com/show_bug.cgi?id=1185785 * https://bugzilla.suse.com/show_bug.cgi?id=1185786 * https://bugzilla.suse.com/show_bug.cgi?id=1185803 * https://bugzilla.suse.com/show_bug.cgi?id=1185804 * https://bugzilla.suse.com/show_bug.cgi?id=1185805

1 0

SUSE-SU-2024:1608-1: important: Security update for python-Werkzeug
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for python-Werkzeug Announcement ID: SUSE-SU-2024:1608-1 Rating: important References: * bsc#1223979 Cross-References: * CVE-2024-34069 CVSS scores: * CVE-2024-34069 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 An update that solves one vulnerability can now be installed. ## Description: This update for python-Werkzeug fixes the following issues: * CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1608=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1608=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1608=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1608=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1608=1 ## Package List: * openSUSE Leap 15.5 (noarch) * python-Werkzeug-doc-0.14.1-150100.6.9.1 * openSUSE Leap 15.6 (noarch) * python-Werkzeug-doc-0.14.1-150100.6.9.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * python3-Werkzeug-0.14.1-150100.6.9.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * python3-Werkzeug-0.14.1-150100.6.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * python3-Werkzeug-0.14.1-150100.6.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-34069.html * https://bugzilla.suse.com/show_bug.cgi?id=1223979

1 0

SUSE-SU-2024:1610-1: important: Security update for freerdp
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for freerdp Announcement ID: SUSE-SU-2024:1610-1 Rating: important References: * bsc#1223293 * bsc#1223294 * bsc#1223295 * bsc#1223296 * bsc#1223297 * bsc#1223298 Cross-References: * CVE-2024-32039 * CVE-2024-32040 * CVE-2024-32041 * CVE-2024-32458 * CVE-2024-32459 * CVE-2024-32460 CVSS scores: * CVE-2024-32039 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-32040 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-32041 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-32458 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-32459 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-32460 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for freerdp fixes the following issues: * CVE-2024-32039: Fixed an out-of-bounds write with variables of type uint32 (bsc#1223293) * CVE-2024-32040: Fixed a integer underflow when using the 'NSC' codec (bsc#1223294) * CVE-2024-32041: Fixed an out-of-bounds read in Stream_GetRemainingLength() (bsc#1223295) * CVE-2024-32458: Fixed an out-of-bounds read on pSrcData[] (bsc#1223296) * CVE-2024-32459: Fixed an out-of-bounds read in case SrcSize less than 4 (bsc#1223297) * CVE-2024-32460: Fixed an out-of-bounds read when using '/bpp:32' legacy 'GDI' drawing path (bsc#1223298) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1610=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1610=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1610=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1610=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1610=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * freerdp-debugsource-2.4.0-150400.3.29.1 * libfreerdp2-2.4.0-150400.3.29.1 * freerdp-server-debuginfo-2.4.0-150400.3.29.1 * libwinpr2-debuginfo-2.4.0-150400.3.29.1 * libuwac0-0-2.4.0-150400.3.29.1 * freerdp-debuginfo-2.4.0-150400.3.29.1 * winpr2-devel-2.4.0-150400.3.29.1 * freerdp-2.4.0-150400.3.29.1 * freerdp-wayland-2.4.0-150400.3.29.1 * libuwac0-0-debuginfo-2.4.0-150400.3.29.1 * freerdp-proxy-2.4.0-150400.3.29.1 * freerdp-server-2.4.0-150400.3.29.1 * freerdp-wayland-debuginfo-2.4.0-150400.3.29.1 * libwinpr2-2.4.0-150400.3.29.1 * libfreerdp2-debuginfo-2.4.0-150400.3.29.1 * freerdp-devel-2.4.0-150400.3.29.1 * freerdp-proxy-debuginfo-2.4.0-150400.3.29.1 * uwac0-0-devel-2.4.0-150400.3.29.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * freerdp-debugsource-2.4.0-150400.3.29.1 * libfreerdp2-2.4.0-150400.3.29.1 * freerdp-server-debuginfo-2.4.0-150400.3.29.1 * libwinpr2-debuginfo-2.4.0-150400.3.29.1 * libuwac0-0-2.4.0-150400.3.29.1 * freerdp-debuginfo-2.4.0-150400.3.29.1 * winpr2-devel-2.4.0-150400.3.29.1 * freerdp-2.4.0-150400.3.29.1 * freerdp-wayland-2.4.0-150400.3.29.1 * libuwac0-0-debuginfo-2.4.0-150400.3.29.1 * freerdp-proxy-2.4.0-150400.3.29.1 * freerdp-server-2.4.0-150400.3.29.1 * freerdp-wayland-debuginfo-2.4.0-150400.3.29.1 * libwinpr2-2.4.0-150400.3.29.1 * libfreerdp2-debuginfo-2.4.0-150400.3.29.1 * freerdp-devel-2.4.0-150400.3.29.1 * freerdp-proxy-debuginfo-2.4.0-150400.3.29.1 * uwac0-0-devel-2.4.0-150400.3.29.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * freerdp-debugsource-2.4.0-150400.3.29.1 * libfreerdp2-2.4.0-150400.3.29.1 * freerdp-server-debuginfo-2.4.0-150400.3.29.1 * libwinpr2-debuginfo-2.4.0-150400.3.29.1 * libuwac0-0-2.4.0-150400.3.29.1 * freerdp-debuginfo-2.4.0-150400.3.29.1 * winpr2-devel-2.4.0-150400.3.29.1 * freerdp-2.4.0-150400.3.29.1 * freerdp-wayland-2.4.0-150400.3.29.1 * libuwac0-0-debuginfo-2.4.0-150400.3.29.1 * freerdp-proxy-2.4.0-150400.3.29.1 * freerdp-server-2.4.0-150400.3.29.1 * freerdp-wayland-debuginfo-2.4.0-150400.3.29.1 * libwinpr2-2.4.0-150400.3.29.1 * libfreerdp2-debuginfo-2.4.0-150400.3.29.1 * freerdp-devel-2.4.0-150400.3.29.1 * freerdp-proxy-debuginfo-2.4.0-150400.3.29.1 * uwac0-0-devel-2.4.0-150400.3.29.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * freerdp-debugsource-2.4.0-150400.3.29.1 * libfreerdp2-2.4.0-150400.3.29.1 * libwinpr2-debuginfo-2.4.0-150400.3.29.1 * freerdp-debuginfo-2.4.0-150400.3.29.1 * winpr2-devel-2.4.0-150400.3.29.1 * freerdp-2.4.0-150400.3.29.1 * freerdp-proxy-2.4.0-150400.3.29.1 * libwinpr2-2.4.0-150400.3.29.1 * libfreerdp2-debuginfo-2.4.0-150400.3.29.1 * freerdp-devel-2.4.0-150400.3.29.1 * freerdp-proxy-debuginfo-2.4.0-150400.3.29.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * freerdp-debugsource-2.4.0-150400.3.29.1 * libfreerdp2-2.4.0-150400.3.29.1 * libwinpr2-debuginfo-2.4.0-150400.3.29.1 * freerdp-debuginfo-2.4.0-150400.3.29.1 * winpr2-devel-2.4.0-150400.3.29.1 * freerdp-2.4.0-150400.3.29.1 * freerdp-proxy-2.4.0-150400.3.29.1 * libwinpr2-2.4.0-150400.3.29.1 * libfreerdp2-debuginfo-2.4.0-150400.3.29.1 * freerdp-devel-2.4.0-150400.3.29.1 * freerdp-proxy-debuginfo-2.4.0-150400.3.29.1 ## References: * https://www.suse.com/security/cve/CVE-2024-32039.html * https://www.suse.com/security/cve/CVE-2024-32040.html * https://www.suse.com/security/cve/CVE-2024-32041.html * https://www.suse.com/security/cve/CVE-2024-32458.html * https://www.suse.com/security/cve/CVE-2024-32459.html * https://www.suse.com/security/cve/CVE-2024-32460.html * https://bugzilla.suse.com/show_bug.cgi?id=1223293 * https://bugzilla.suse.com/show_bug.cgi?id=1223294 * https://bugzilla.suse.com/show_bug.cgi?id=1223295 * https://bugzilla.suse.com/show_bug.cgi?id=1223296 * https://bugzilla.suse.com/show_bug.cgi?id=1223297 * https://bugzilla.suse.com/show_bug.cgi?id=1223298

1 0

openSUSE-RU-2024:0121-1: moderate: Recommended update for emacs-auctex
by maintenance＠opensuse.org 10 May '24

10 May '24

openSUSE Recommended Update: Recommended update for emacs-auctex ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0121-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for emacs-auctex fixes the following issues: - Modernize dinbrief class to use UTF-8 by default - (Re)enable initial buffer reset at creation time of the document class Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-121=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): emacs-auctex-13.1-bp155.2.3.1 References:

1 0

SUSE-RU-2024:1603-1: important: Recommended update for salt
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Recommended update for salt Announcement ID: SUSE-RU-2024:1603-1 Rating: important References: * jsc#MSQA-779 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for salt fixes the following issues: * Make "man" a recommended package instead of required to fix installation issues with SLE Micro ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1603=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1603=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1603=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1603=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1603=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1603=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1603=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1603=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1603=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1603=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1603=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1603=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1603=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1603=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1603=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * salt-doc-3006.0-150400.8.60.1 * python3-salt-testsuite-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * salt-transactional-update-3006.0-150400.8.60.1 * salt-master-3006.0-150400.8.60.1 * salt-syndic-3006.0-150400.8.60.1 * salt-proxy-3006.0-150400.8.60.1 * salt-api-3006.0-150400.8.60.1 * salt-ssh-3006.0-150400.8.60.1 * salt-3006.0-150400.8.60.1 * salt-cloud-3006.0-150400.8.60.1 * salt-standalone-formulas-configuration-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * openSUSE Leap 15.4 (noarch) * salt-bash-completion-3006.0-150400.8.60.1 * salt-zsh-completion-3006.0-150400.8.60.1 * salt-fish-completion-3006.0-150400.8.60.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * salt-3006.0-150400.8.60.1 * salt-transactional-update-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * salt-3006.0-150400.8.60.1 * salt-transactional-update-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * salt-3006.0-150400.8.60.1 * salt-transactional-update-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * salt-3006.0-150400.8.60.1 * salt-transactional-update-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * salt-3006.0-150400.8.60.1 * salt-transactional-update-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * salt-3006.0-150400.8.60.1 * salt-transactional-update-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * salt-doc-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * salt-master-3006.0-150400.8.60.1 * salt-syndic-3006.0-150400.8.60.1 * salt-proxy-3006.0-150400.8.60.1 * salt-api-3006.0-150400.8.60.1 * salt-ssh-3006.0-150400.8.60.1 * salt-3006.0-150400.8.60.1 * salt-cloud-3006.0-150400.8.60.1 * salt-standalone-formulas-configuration-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * salt-bash-completion-3006.0-150400.8.60.1 * salt-zsh-completion-3006.0-150400.8.60.1 * salt-fish-completion-3006.0-150400.8.60.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * salt-doc-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * salt-master-3006.0-150400.8.60.1 * salt-syndic-3006.0-150400.8.60.1 * salt-proxy-3006.0-150400.8.60.1 * salt-api-3006.0-150400.8.60.1 * salt-ssh-3006.0-150400.8.60.1 * salt-3006.0-150400.8.60.1 * salt-cloud-3006.0-150400.8.60.1 * salt-standalone-formulas-configuration-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * salt-bash-completion-3006.0-150400.8.60.1 * salt-zsh-completion-3006.0-150400.8.60.1 * salt-fish-completion-3006.0-150400.8.60.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * salt-doc-3006.0-150400.8.60.1 * salt-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * salt-bash-completion-3006.0-150400.8.60.1 * salt-zsh-completion-3006.0-150400.8.60.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * salt-doc-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * salt-transactional-update-3006.0-150400.8.60.1 * salt-master-3006.0-150400.8.60.1 * salt-syndic-3006.0-150400.8.60.1 * salt-proxy-3006.0-150400.8.60.1 * salt-api-3006.0-150400.8.60.1 * salt-ssh-3006.0-150400.8.60.1 * salt-3006.0-150400.8.60.1 * salt-cloud-3006.0-150400.8.60.1 * salt-standalone-formulas-configuration-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * salt-bash-completion-3006.0-150400.8.60.1 * salt-zsh-completion-3006.0-150400.8.60.1 * salt-fish-completion-3006.0-150400.8.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * salt-doc-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * salt-master-3006.0-150400.8.60.1 * salt-syndic-3006.0-150400.8.60.1 * salt-proxy-3006.0-150400.8.60.1 * salt-api-3006.0-150400.8.60.1 * salt-ssh-3006.0-150400.8.60.1 * salt-3006.0-150400.8.60.1 * salt-cloud-3006.0-150400.8.60.1 * salt-standalone-formulas-configuration-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * salt-bash-completion-3006.0-150400.8.60.1 * salt-zsh-completion-3006.0-150400.8.60.1 * salt-fish-completion-3006.0-150400.8.60.1 * SUSE Manager Proxy 4.3 (x86_64) * salt-doc-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * salt-master-3006.0-150400.8.60.1 * salt-syndic-3006.0-150400.8.60.1 * salt-proxy-3006.0-150400.8.60.1 * salt-api-3006.0-150400.8.60.1 * salt-ssh-3006.0-150400.8.60.1 * salt-3006.0-150400.8.60.1 * salt-cloud-3006.0-150400.8.60.1 * salt-standalone-formulas-configuration-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Manager Proxy 4.3 (noarch) * salt-bash-completion-3006.0-150400.8.60.1 * salt-zsh-completion-3006.0-150400.8.60.1 * salt-fish-completion-3006.0-150400.8.60.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * salt-doc-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * salt-master-3006.0-150400.8.60.1 * salt-syndic-3006.0-150400.8.60.1 * salt-proxy-3006.0-150400.8.60.1 * salt-api-3006.0-150400.8.60.1 * salt-ssh-3006.0-150400.8.60.1 * salt-3006.0-150400.8.60.1 * salt-cloud-3006.0-150400.8.60.1 * salt-standalone-formulas-configuration-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * salt-bash-completion-3006.0-150400.8.60.1 * salt-zsh-completion-3006.0-150400.8.60.1 * salt-fish-completion-3006.0-150400.8.60.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * salt-doc-3006.0-150400.8.60.1 * salt-minion-3006.0-150400.8.60.1 * salt-master-3006.0-150400.8.60.1 * salt-syndic-3006.0-150400.8.60.1 * salt-proxy-3006.0-150400.8.60.1 * salt-api-3006.0-150400.8.60.1 * salt-ssh-3006.0-150400.8.60.1 * salt-3006.0-150400.8.60.1 * salt-cloud-3006.0-150400.8.60.1 * salt-standalone-formulas-configuration-3006.0-150400.8.60.1 * python3-salt-3006.0-150400.8.60.1 * SUSE Manager Server 4.3 (noarch) * salt-bash-completion-3006.0-150400.8.60.1 * salt-zsh-completion-3006.0-150400.8.60.1 * salt-fish-completion-3006.0-150400.8.60.1 ## References: * https://jira.suse.com/browse/MSQA-779

1 0

SUSE-SU-2024:1605-1: moderate: Security update for tpm2-0-tss
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for tpm2-0-tss Announcement ID: SUSE-SU-2024:1605-1 Rating: moderate References: * bsc#1223690 Cross-References: * CVE-2024-29040 CVSS scores: * CVE-2024-29040 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.3 An update that solves one vulnerability can now be installed. ## Description: This update for tpm2-0-tss fixes the following issues: * CVE-2024-29040: Fixed quote data validation by Fapi_VerifyQuote (bsc#1223690). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1605=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libtss2-sys0-2.4.5-150300.3.9.1 * libtss2-esys0-2.4.5-150300.3.9.1 * libtss2-tcti-device0-debuginfo-2.4.5-150300.3.9.1 * tpm2-0-tss-debugsource-2.4.5-150300.3.9.1 * libtss2-fapi0-debuginfo-2.4.5-150300.3.9.1 * libtss2-sys0-debuginfo-2.4.5-150300.3.9.1 * libtss2-tctildr0-debuginfo-2.4.5-150300.3.9.1 * tpm2-0-tss-devel-2.4.5-150300.3.9.1 * tpm2-0-tss-2.4.5-150300.3.9.1 * libtss2-rc0-2.4.5-150300.3.9.1 * libtss2-rc0-debuginfo-2.4.5-150300.3.9.1 * libtss2-esys0-debuginfo-2.4.5-150300.3.9.1 * libtss2-tcti-mssim0-2.4.5-150300.3.9.1 * libtss2-tcti-device0-2.4.5-150300.3.9.1 * libtss2-mu0-debuginfo-2.4.5-150300.3.9.1 * libtss2-tcti-mssim0-debuginfo-2.4.5-150300.3.9.1 * libtss2-fapi0-2.4.5-150300.3.9.1 * libtss2-tctildr0-2.4.5-150300.3.9.1 * libtss2-mu0-2.4.5-150300.3.9.1 * openSUSE Leap 15.3 (x86_64) * libtss2-tcti-device0-32bit-2.4.5-150300.3.9.1 * libtss2-esys0-32bit-2.4.5-150300.3.9.1 * libtss2-tcti-mssim0-32bit-2.4.5-150300.3.9.1 * libtss2-tcti-mssim0-32bit-debuginfo-2.4.5-150300.3.9.1 * libtss2-sys0-32bit-2.4.5-150300.3.9.1 * libtss2-sys0-32bit-debuginfo-2.4.5-150300.3.9.1 * libtss2-mu0-32bit-2.4.5-150300.3.9.1 * libtss2-esys0-32bit-debuginfo-2.4.5-150300.3.9.1 * libtss2-mu0-32bit-debuginfo-2.4.5-150300.3.9.1 * libtss2-tcti-device0-32bit-debuginfo-2.4.5-150300.3.9.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libtss2-tcti-device0-64bit-debuginfo-2.4.5-150300.3.9.1 * libtss2-esys0-64bit-2.4.5-150300.3.9.1 * libtss2-mu0-64bit-debuginfo-2.4.5-150300.3.9.1 * libtss2-esys0-64bit-debuginfo-2.4.5-150300.3.9.1 * libtss2-mu0-64bit-2.4.5-150300.3.9.1 * libtss2-tcti-mssim0-64bit-debuginfo-2.4.5-150300.3.9.1 * libtss2-sys0-64bit-debuginfo-2.4.5-150300.3.9.1 * libtss2-tcti-mssim0-64bit-2.4.5-150300.3.9.1 * libtss2-tcti-device0-64bit-2.4.5-150300.3.9.1 * libtss2-sys0-64bit-2.4.5-150300.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-29040.html * https://bugzilla.suse.com/show_bug.cgi?id=1223690

1 0

openSUSE-SU-2024:0119-1: important: Security update for tinyproxy
by opensuse-security＠opensuse.org 10 May '24

10 May '24

openSUSE Security Update: Security update for tinyproxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0119-1 Rating: important References: #1200028 #1203553 #1223743 #1223746 Cross-References: CVE-2012-3505 CVE-2017-11747 CVE-2022-40468 CVE-2023-40533 CVE-2023-49606 CVSS scores: CVE-2017-11747 (NVD) : 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-40468 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-40468 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2023-40533 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for tinyproxy fixes the following issues: - Update to release 1.11.2 * Fix potential use-after-free in header handling [CVE-2023-49606, boo#1223746] * Prevent junk from showing up in error page in invalid requests [CVE-2022-40468, CVE-2023-40533, boo#1223743] - Move tinyproxy program to /usr/bin. - Update to release 1.11.1 * New fnmatch based filtertype - Update to release 1.11 * Support for multiple bind directives. - update to 1.10.0: * Configuration file has moved from /etc/tinyproxy.conf to /etc/tinyproxy/tinyproxy.conf. * Add support for basic HTTP authentication * Add socks upstream support * Log to stdout if no logfile is specified * Activate reverse proxy by default * Support bind with transparent mode * Allow multiple listen statements in the configuration * Fix CVE-2017-11747: Create PID file before dropping privileges. * Fix CVE-2012-3505: algorithmic complexity DoS in hashmap * Bugfixes * BB#110: fix algorithmic complexity DoS in hashmap * BB#106: fix CONNECT requests with IPv6 literal addresses as host * BB#116: fix invalid free for GET requests to ipv6 literal address * BB#115: Drop supplementary groups * BB#109: Fix crash (infinite loop) when writing to log file fails * BB#74: Create log and pid files after we drop privs * BB#83: Use output of id instead of $USER Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-119=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): tinyproxy-1.11.2-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2012-3505.html https://www.suse.com/security/cve/CVE-2017-11747.html https://www.suse.com/security/cve/CVE-2022-40468.html https://www.suse.com/security/cve/CVE-2023-40533.html https://www.suse.com/security/cve/CVE-2023-49606.html https://bugzilla.suse.com/1200028 https://bugzilla.suse.com/1203553 https://bugzilla.suse.com/1223743 https://bugzilla.suse.com/1223746

1 0

openSUSE-RU-2024:0120-1: moderate: Recommended update for python-pyodbc
by maintenance＠opensuse.org 10 May '24

10 May '24

openSUSE Recommended Update: Recommended update for python-pyodbc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0120-1 Rating: moderate References: #1210567 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pyodbc fixes the following issues: - Update to v5.1.0 * Mac M1 & M2 binary builds - from v5.0.1 * bug fix for 5.0.0 that restores the ability to pass bytes objects in the attrs_before parameter when connecting. This is often used for Azure with a token. - from 5.0.0 * The API is backwards compatible. * Dropped support for Python 2. - update to 4.0.39 (boo#1210567): * Version 4.0.38 had a serious bug in Row.__repr__ which could cause crashes (#1196 ). * Version 5.0 is on its way and will drop support for Python 2. This release is a (hopefully final) bug fix release for the 4.x line. * added typing for Connection, Cursor, and connect parameters. * corrected the install location of the pyi file. * fixed Unicode errors in repr(row) * fixed more typing related issues by removing TypeAlias * arturxedex128 opened a security advisory for a buffer overflow if selecting a decimal more * than 100 digits long. Fixed by Michael Kleehammer. - Update to version 4.0.35 * This release provides Python 3.11 wheels, plus some other wheel fixes. * There is also an import memory fix when using fast_execute_many. - Changes from version 4.0.34 * Mac wheels are finally here. Thanks to all that worked on the code for that. Please let us know if there are any problems with the wheels on PyPI * Python 3.10 wheels are also available * Fix for DSNs with non-ASCII characters. * Memory leak fix with Decimal parameters. * PostgreSQL dates of -Infinity/+Infinity changed to year 1 and 9999 instead of raising an error. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-120=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): python3-pyodbc-5.1.0-bp155.4.3.1 References: https://bugzilla.suse.com/1210567

1 0

SUSE-SU-2024:1598-1: important: Security update for less
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for less Announcement ID: SUSE-SU-2024:1598-1 Rating: important References: * bsc#1222849 Cross-References: * CVE-2024-32487 CVSS scores: * CVE-2024-32487 ( SUSE ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for less fixes the following issues: * CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1598=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1598=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1598=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1598=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1598=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1598=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1598=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1598=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1598=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1598=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1598=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1598=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1598=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1598=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1598=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1598=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1598=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1598=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Manager Proxy 4.3 (x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * less-debuginfo-590-150400.3.9.1 * less-590-150400.3.9.1 * less-debugsource-590-150400.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-32487.html * https://bugzilla.suse.com/show_bug.cgi?id=1222849

1 0

SUSE-SU-2024:1596-1: important: Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP4)
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:1596-1 Rating: important References: * bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828 Cross-References: * CVE-2023-5717 * CVE-2024-0775 * CVE-2024-1086 * CVE-2024-26622 CVSS scores: * CVE-2023-5717 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5717 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-0775 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-0775 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-1086 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-1086 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_63 fixes several issues. The following security issues were fixed: * CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). * CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability perf component (bsc#1216644). * CVE-2024-26622: Fixed a use-after-free bug in tomoyo_write_control() (bsc#1220828). * CVE-2024-1086: Fixed a use-after-free vulnerability related to nft_verdict_init() (bsc#1219435). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-1595=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1596=1 SUSE-2024-1597=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-1596=1 SUSE-SLE- Module-Live-Patching-15-SP3-2024-1597=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1595=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_63-default-debuginfo-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_12-debugsource-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_63-default-13-150400.2.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_138-default-8-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-default-debuginfo-7-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-default-debuginfo-8-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_38-debugsource-7-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_37-debugsource-8-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-default-7-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_141-preempt-7-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-preempt-debuginfo-8-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-preempt-8-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-preempt-debuginfo-7-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_138-default-8-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-default-7-150300.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_63-default-debuginfo-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_12-debugsource-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_63-default-13-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5717.html * https://www.suse.com/security/cve/CVE-2024-0775.html * https://www.suse.com/security/cve/CVE-2024-1086.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://bugzilla.suse.com/show_bug.cgi?id=1216644 * https://bugzilla.suse.com/show_bug.cgi?id=1219079 * https://bugzilla.suse.com/show_bug.cgi?id=1219435 * https://bugzilla.suse.com/show_bug.cgi?id=1220828

1 0

SUSE-SU-2024:1588-1: moderate: Security update for go1.21
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for go1.21 Announcement ID: SUSE-SU-2024:1588-1 Rating: moderate References: * bsc#1212475 * bsc#1224017 Cross-References: * CVE-2024-24787 CVSS scores: * CVE-2024-24787 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for go1.21 fixes the following issues: Update to go1.21.10: * CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin (bsc#1224017) * net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net(a)v0.23.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1588=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1588=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1588=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1588=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1588=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1588=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1588=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1588=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.21-doc-1.21.10-150000.1.33.1 * go1.21-race-1.21.10-150000.1.33.1 * go1.21-1.21.10-150000.1.33.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * go1.21-doc-1.21.10-150000.1.33.1 * go1.21-race-1.21.10-150000.1.33.1 * go1.21-1.21.10-150000.1.33.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.21-doc-1.21.10-150000.1.33.1 * go1.21-race-1.21.10-150000.1.33.1 * go1.21-1.21.10-150000.1.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.21-doc-1.21.10-150000.1.33.1 * go1.21-race-1.21.10-150000.1.33.1 * go1.21-1.21.10-150000.1.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.21-doc-1.21.10-150000.1.33.1 * go1.21-race-1.21.10-150000.1.33.1 * go1.21-1.21.10-150000.1.33.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * go1.21-doc-1.21.10-150000.1.33.1 * go1.21-race-1.21.10-150000.1.33.1 * go1.21-1.21.10-150000.1.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * go1.21-doc-1.21.10-150000.1.33.1 * go1.21-1.21.10-150000.1.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * go1.21-race-1.21.10-150000.1.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.21-doc-1.21.10-150000.1.33.1 * go1.21-1.21.10-150000.1.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * go1.21-race-1.21.10-150000.1.33.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24787.html * https://bugzilla.suse.com/show_bug.cgi?id=1212475 * https://bugzilla.suse.com/show_bug.cgi?id=1224017

1 0

SUSE-SU-2024:1590-1: moderate: Security update for ghostscript
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for ghostscript Announcement ID: SUSE-SU-2024:1590-1 Rating: moderate References: * bsc#1223852 Cross-References: * CVE-2023-52722 CVSS scores: * CVE-2023-52722 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issues: * CVE-2023-52722: Do not allow eexec seeds other than the Type 1 standard while using SAFER mode (bsc#1223852). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1590=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1590=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.188.1 * ghostscript-x11-9.52-150000.188.1 * ghostscript-debuginfo-9.52-150000.188.1 * ghostscript-x11-debuginfo-9.52-150000.188.1 * ghostscript-devel-9.52-150000.188.1 * ghostscript-9.52-150000.188.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.188.1 * ghostscript-x11-9.52-150000.188.1 * ghostscript-debuginfo-9.52-150000.188.1 * ghostscript-x11-debuginfo-9.52-150000.188.1 * ghostscript-devel-9.52-150000.188.1 * ghostscript-9.52-150000.188.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52722.html * https://bugzilla.suse.com/show_bug.cgi?id=1223852

1 0

SUSE-SU-2024:1591-1: important: Security update for python-Werkzeug
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for python-Werkzeug Announcement ID: SUSE-SU-2024:1591-1 Rating: important References: * bsc#1223979 Cross-References: * CVE-2024-34069 CVSS scores: * CVE-2024-34069 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python-Werkzeug fixes the following issues: * CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1591=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1591=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1591=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1591=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1591=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1591=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-1591=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1591=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1591=1 ## Package List: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * python311-Werkzeug-2.3.6-150400.6.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * python311-Werkzeug-2.3.6-150400.6.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-Werkzeug-2.3.6-150400.6.9.1 * openSUSE Leap 15.4 (noarch) * python311-Werkzeug-2.3.6-150400.6.9.1 * openSUSE Leap 15.5 (noarch) * python311-Werkzeug-2.3.6-150400.6.9.1 * openSUSE Leap 15.6 (noarch) * python311-Werkzeug-2.3.6-150400.6.9.1 * Python 3 Module 15-SP5 (noarch) * python311-Werkzeug-2.3.6-150400.6.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-Werkzeug-2.3.6-150400.6.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-Werkzeug-2.3.6-150400.6.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-34069.html * https://bugzilla.suse.com/show_bug.cgi?id=1223979

1 0

SUSE-SU-2024:1592-1: important: Security update for ffmpeg-4
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for ffmpeg-4 Announcement ID: SUSE-SU-2024:1592-1 Rating: important References: * bsc#1223256 Cross-References: * CVE-2023-50010 CVSS scores: * CVE-2023-50010 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for ffmpeg-4 fixes the following issues: * CVE-2023-50010: Fixed an arbitrary code execution via the set_encoder_id() (bsc#1223256). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1592=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1592=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1592=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1592=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1592=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1592=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1592=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1592=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1592=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * ffmpeg-4-libpostproc-devel-4.4-150400.3.27.1 * libavresample4_0-4.4-150400.3.27.1 * libswscale5_9-4.4-150400.3.27.1 * libavutil56_70-4.4-150400.3.27.1 * libswresample3_9-4.4-150400.3.27.1 * libavutil56_70-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.27.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.27.1 * libavfilter7_110-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-private-devel-4.4-150400.3.27.1 * libswresample3_9-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-4.4-150400.3.27.1 * libavdevice58_13-4.4-150400.3.27.1 * ffmpeg-4-4.4-150400.3.27.1 * ffmpeg-4-debuginfo-4.4-150400.3.27.1 * libavdevice58_13-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-debuginfo-4.4-150400.3.27.1 * libpostproc55_9-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-debugsource-4.4-150400.3.27.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.27.1 * libavfilter7_110-4.4-150400.3.27.1 * libpostproc55_9-4.4-150400.3.27.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.27.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.27.1 * ffmpeg-4-libavutil-devel-4.4-150400.3.27.1 * libavresample4_0-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.27.1 * libswscale5_9-debuginfo-4.4-150400.3.27.1 * libavformat58_76-4.4-150400.3.27.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.27.1 * libavformat58_76-debuginfo-4.4-150400.3.27.1 * openSUSE Leap 15.4 (x86_64) * libavfilter7_110-32bit-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-32bit-debuginfo-4.4-150400.3.27.1 * libavfilter7_110-32bit-4.4-150400.3.27.1 * libpostproc55_9-32bit-debuginfo-4.4-150400.3.27.1 * libavutil56_70-32bit-4.4-150400.3.27.1 * libavformat58_76-32bit-4.4-150400.3.27.1 * libswscale5_9-32bit-4.4-150400.3.27.1 * libavresample4_0-32bit-4.4-150400.3.27.1 * libswscale5_9-32bit-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-32bit-4.4-150400.3.27.1 * libavformat58_76-32bit-debuginfo-4.4-150400.3.27.1 * libavdevice58_13-32bit-debuginfo-4.4-150400.3.27.1 * libswresample3_9-32bit-debuginfo-4.4-150400.3.27.1 * libavdevice58_13-32bit-4.4-150400.3.27.1 * libswresample3_9-32bit-4.4-150400.3.27.1 * libpostproc55_9-32bit-4.4-150400.3.27.1 * libavresample4_0-32bit-debuginfo-4.4-150400.3.27.1 * libavutil56_70-32bit-debuginfo-4.4-150400.3.27.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libavfilter7_110-64bit-4.4-150400.3.27.1 * libavresample4_0-64bit-4.4-150400.3.27.1 * libavcodec58_134-64bit-debuginfo-4.4-150400.3.27.1 * libavutil56_70-64bit-4.4-150400.3.27.1 * libavdevice58_13-64bit-4.4-150400.3.27.1 * libavformat58_76-64bit-debuginfo-4.4-150400.3.27.1 * libpostproc55_9-64bit-4.4-150400.3.27.1 * libavcodec58_134-64bit-4.4-150400.3.27.1 * libswresample3_9-64bit-debuginfo-4.4-150400.3.27.1 * libavfilter7_110-64bit-debuginfo-4.4-150400.3.27.1 * libavresample4_0-64bit-debuginfo-4.4-150400.3.27.1 * libswscale5_9-64bit-4.4-150400.3.27.1 * libavformat58_76-64bit-4.4-150400.3.27.1 * libswscale5_9-64bit-debuginfo-4.4-150400.3.27.1 * libavutil56_70-64bit-debuginfo-4.4-150400.3.27.1 * libpostproc55_9-64bit-debuginfo-4.4-150400.3.27.1 * libavdevice58_13-64bit-debuginfo-4.4-150400.3.27.1 * libswresample3_9-64bit-4.4-150400.3.27.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ffmpeg-4-libpostproc-devel-4.4-150400.3.27.1 * libavresample4_0-4.4-150400.3.27.1 * libswscale5_9-4.4-150400.3.27.1 * libavutil56_70-4.4-150400.3.27.1 * libswresample3_9-4.4-150400.3.27.1 * libavutil56_70-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.27.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.27.1 * libavfilter7_110-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-private-devel-4.4-150400.3.27.1 * libswresample3_9-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-4.4-150400.3.27.1 * libavdevice58_13-4.4-150400.3.27.1 * ffmpeg-4-4.4-150400.3.27.1 * ffmpeg-4-debuginfo-4.4-150400.3.27.1 * libavdevice58_13-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-debuginfo-4.4-150400.3.27.1 * libpostproc55_9-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-debugsource-4.4-150400.3.27.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.27.1 * libavfilter7_110-4.4-150400.3.27.1 * libpostproc55_9-4.4-150400.3.27.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.27.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.27.1 * ffmpeg-4-libavutil-devel-4.4-150400.3.27.1 * libavresample4_0-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.27.1 * libswscale5_9-debuginfo-4.4-150400.3.27.1 * libavformat58_76-4.4-150400.3.27.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.27.1 * libavformat58_76-debuginfo-4.4-150400.3.27.1 * openSUSE Leap 15.5 (x86_64) * libavfilter7_110-32bit-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-32bit-debuginfo-4.4-150400.3.27.1 * libavfilter7_110-32bit-4.4-150400.3.27.1 * libpostproc55_9-32bit-debuginfo-4.4-150400.3.27.1 * libavutil56_70-32bit-4.4-150400.3.27.1 * libavformat58_76-32bit-4.4-150400.3.27.1 * libswscale5_9-32bit-4.4-150400.3.27.1 * libavresample4_0-32bit-4.4-150400.3.27.1 * libswscale5_9-32bit-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-32bit-4.4-150400.3.27.1 * libavformat58_76-32bit-debuginfo-4.4-150400.3.27.1 * libavdevice58_13-32bit-debuginfo-4.4-150400.3.27.1 * libswresample3_9-32bit-debuginfo-4.4-150400.3.27.1 * libavdevice58_13-32bit-4.4-150400.3.27.1 * libswresample3_9-32bit-4.4-150400.3.27.1 * libpostproc55_9-32bit-4.4-150400.3.27.1 * libavresample4_0-32bit-debuginfo-4.4-150400.3.27.1 * libavutil56_70-32bit-debuginfo-4.4-150400.3.27.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * ffmpeg-4-libpostproc-devel-4.4-150400.3.27.1 * libavresample4_0-4.4-150400.3.27.1 * libswscale5_9-4.4-150400.3.27.1 * libavutil56_70-4.4-150400.3.27.1 * libswresample3_9-4.4-150400.3.27.1 * libavutil56_70-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.27.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.27.1 * libavfilter7_110-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-private-devel-4.4-150400.3.27.1 * libswresample3_9-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-4.4-150400.3.27.1 * libavdevice58_13-4.4-150400.3.27.1 * ffmpeg-4-4.4-150400.3.27.1 * ffmpeg-4-debuginfo-4.4-150400.3.27.1 * libavdevice58_13-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-debuginfo-4.4-150400.3.27.1 * libpostproc55_9-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-debugsource-4.4-150400.3.27.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.27.1 * libavfilter7_110-4.4-150400.3.27.1 * libpostproc55_9-4.4-150400.3.27.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.27.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.27.1 * ffmpeg-4-libavutil-devel-4.4-150400.3.27.1 * libavresample4_0-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.27.1 * libswscale5_9-debuginfo-4.4-150400.3.27.1 * libavformat58_76-4.4-150400.3.27.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.27.1 * libavformat58_76-debuginfo-4.4-150400.3.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libpostproc55_9-4.4-150400.3.27.1 * ffmpeg-4-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-debuginfo-4.4-150400.3.27.1 * libpostproc55_9-debuginfo-4.4-150400.3.27.1 * libswresample3_9-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-debugsource-4.4-150400.3.27.1 * libavcodec58_134-4.4-150400.3.27.1 * libavformat58_76-4.4-150400.3.27.1 * libavutil56_70-4.4-150400.3.27.1 * libswresample3_9-4.4-150400.3.27.1 * libavutil56_70-debuginfo-4.4-150400.3.27.1 * libavformat58_76-debuginfo-4.4-150400.3.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libpostproc55_9-4.4-150400.3.27.1 * ffmpeg-4-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-debuginfo-4.4-150400.3.27.1 * libpostproc55_9-debuginfo-4.4-150400.3.27.1 * libswresample3_9-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-debugsource-4.4-150400.3.27.1 * libavcodec58_134-4.4-150400.3.27.1 * libavformat58_76-4.4-150400.3.27.1 * libavutil56_70-4.4-150400.3.27.1 * libswresample3_9-4.4-150400.3.27.1 * libavutil56_70-debuginfo-4.4-150400.3.27.1 * libavformat58_76-debuginfo-4.4-150400.3.27.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libpostproc55_9-4.4-150400.3.27.1 * ffmpeg-4-debuginfo-4.4-150400.3.27.1 * libswscale5_9-4.4-150400.3.27.1 * libavcodec58_134-debuginfo-4.4-150400.3.27.1 * libpostproc55_9-debuginfo-4.4-150400.3.27.1 * libswscale5_9-debuginfo-4.4-150400.3.27.1 * libswresample3_9-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-debugsource-4.4-150400.3.27.1 * libavcodec58_134-4.4-150400.3.27.1 * libavformat58_76-4.4-150400.3.27.1 * libavutil56_70-4.4-150400.3.27.1 * libswresample3_9-4.4-150400.3.27.1 * libavutil56_70-debuginfo-4.4-150400.3.27.1 * libavformat58_76-debuginfo-4.4-150400.3.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libpostproc55_9-4.4-150400.3.27.1 * ffmpeg-4-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-debuginfo-4.4-150400.3.27.1 * libpostproc55_9-debuginfo-4.4-150400.3.27.1 * libswresample3_9-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-debugsource-4.4-150400.3.27.1 * libavcodec58_134-4.4-150400.3.27.1 * libavformat58_76-4.4-150400.3.27.1 * libavutil56_70-4.4-150400.3.27.1 * libswresample3_9-4.4-150400.3.27.1 * libavutil56_70-debuginfo-4.4-150400.3.27.1 * libavformat58_76-debuginfo-4.4-150400.3.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libpostproc55_9-4.4-150400.3.27.1 * ffmpeg-4-debuginfo-4.4-150400.3.27.1 * libavcodec58_134-debuginfo-4.4-150400.3.27.1 * libpostproc55_9-debuginfo-4.4-150400.3.27.1 * libswresample3_9-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-debugsource-4.4-150400.3.27.1 * libavcodec58_134-4.4-150400.3.27.1 * libavformat58_76-4.4-150400.3.27.1 * libavutil56_70-4.4-150400.3.27.1 * libswresample3_9-4.4-150400.3.27.1 * libavutil56_70-debuginfo-4.4-150400.3.27.1 * libavformat58_76-debuginfo-4.4-150400.3.27.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * ffmpeg-4-debuginfo-4.4-150400.3.27.1 * libswscale5_9-4.4-150400.3.27.1 * libavcodec58_134-debuginfo-4.4-150400.3.27.1 * libswscale5_9-debuginfo-4.4-150400.3.27.1 * libswresample3_9-debuginfo-4.4-150400.3.27.1 * ffmpeg-4-debugsource-4.4-150400.3.27.1 * libavcodec58_134-4.4-150400.3.27.1 * libavformat58_76-4.4-150400.3.27.1 * libavutil56_70-4.4-150400.3.27.1 * libswresample3_9-4.4-150400.3.27.1 * libavutil56_70-debuginfo-4.4-150400.3.27.1 * libavformat58_76-debuginfo-4.4-150400.3.27.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50010.html * https://bugzilla.suse.com/show_bug.cgi?id=1223256

1 0

SUSE-SU-2024:1593-1: important: Security update for ffmpeg
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for ffmpeg Announcement ID: SUSE-SU-2024:1593-1 Rating: important References: * bsc#1223256 Cross-References: * CVE-2023-50010 CVSS scores: * CVE-2023-50010 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for ffmpeg fixes the following issues: * CVE-2023-50010: Fixed an arbitrary code execution via the set_encoder_id() (bsc#1223256). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1593=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1593=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-1593=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1593=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1593=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1593=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1593=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1593=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1593=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1593=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1593=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1593=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1593=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1593=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1593=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1593=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1593=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libavdevice57-debuginfo-3.4.2-150200.11.44.1 * libavdevice57-3.4.2-150200.11.44.1 * libavresample-devel-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * ffmpeg-private-devel-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavdevice-devel-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libavfilter6-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libavfilter6-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavcodec-devel-3.4.2-150200.11.44.1 * libavfilter-devel-3.4.2-150200.11.44.1 * libavformat-devel-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * openSUSE Leap 15.5 (x86_64) * libavfilter6-32bit-debuginfo-3.4.2-150200.11.44.1 * libavdevice57-32bit-3.4.2-150200.11.44.1 * libavutil55-32bit-debuginfo-3.4.2-150200.11.44.1 * libavresample3-32bit-3.4.2-150200.11.44.1 * libavcodec57-32bit-debuginfo-3.4.2-150200.11.44.1 * libswresample2-32bit-3.4.2-150200.11.44.1 * libavresample3-32bit-debuginfo-3.4.2-150200.11.44.1 * libavutil55-32bit-3.4.2-150200.11.44.1 * libpostproc54-32bit-3.4.2-150200.11.44.1 * libswscale4-32bit-debuginfo-3.4.2-150200.11.44.1 * libavdevice57-32bit-debuginfo-3.4.2-150200.11.44.1 * libavformat57-32bit-3.4.2-150200.11.44.1 * libswscale4-32bit-3.4.2-150200.11.44.1 * libavcodec57-32bit-3.4.2-150200.11.44.1 * libavformat57-32bit-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-32bit-debuginfo-3.4.2-150200.11.44.1 * libswresample2-32bit-debuginfo-3.4.2-150200.11.44.1 * libavfilter6-32bit-3.4.2-150200.11.44.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libavdevice57-debuginfo-3.4.2-150200.11.44.1 * libavdevice57-3.4.2-150200.11.44.1 * libavresample-devel-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * ffmpeg-private-devel-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavdevice-devel-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libavfilter6-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libavfilter6-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavcodec-devel-3.4.2-150200.11.44.1 * libavfilter-devel-3.4.2-150200.11.44.1 * libavformat-devel-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * openSUSE Leap 15.6 (x86_64) * libavfilter6-32bit-debuginfo-3.4.2-150200.11.44.1 * libavdevice57-32bit-3.4.2-150200.11.44.1 * libavutil55-32bit-debuginfo-3.4.2-150200.11.44.1 * libavresample3-32bit-3.4.2-150200.11.44.1 * libavcodec57-32bit-debuginfo-3.4.2-150200.11.44.1 * libswresample2-32bit-3.4.2-150200.11.44.1 * libavresample3-32bit-debuginfo-3.4.2-150200.11.44.1 * libavutil55-32bit-3.4.2-150200.11.44.1 * libpostproc54-32bit-3.4.2-150200.11.44.1 * libswscale4-32bit-debuginfo-3.4.2-150200.11.44.1 * libavdevice57-32bit-debuginfo-3.4.2-150200.11.44.1 * libavformat57-32bit-3.4.2-150200.11.44.1 * libswscale4-32bit-3.4.2-150200.11.44.1 * libavcodec57-32bit-3.4.2-150200.11.44.1 * libavformat57-32bit-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-32bit-debuginfo-3.4.2-150200.11.44.1 * libswresample2-32bit-debuginfo-3.4.2-150200.11.44.1 * libavfilter6-32bit-3.4.2-150200.11.44.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libswscale4-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * libavfilter6-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libavfilter6-debuginfo-3.4.2-150200.11.44.1 * libavdevice57-debuginfo-3.4.2-150200.11.44.1 * libavdevice57-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * ffmpeg-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libavresample-devel-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libavresample-devel-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libavresample-devel-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavcodec-devel-3.4.2-150200.11.44.1 * libavformat-devel-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libavresample-devel-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libavresample-devel-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libavresample-devel-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libavresample-devel-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libavcodec-devel-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libavresample-devel-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libavformat-devel-3.4.2-150200.11.44.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libavresample3-debuginfo-3.4.2-150200.11.44.1 * ffmpeg-debuginfo-3.4.2-150200.11.44.1 * libpostproc-devel-3.4.2-150200.11.44.1 * libavresample-devel-3.4.2-150200.11.44.1 * libswresample-devel-3.4.2-150200.11.44.1 * ffmpeg-debugsource-3.4.2-150200.11.44.1 * libpostproc54-debuginfo-3.4.2-150200.11.44.1 * libavcodec57-3.4.2-150200.11.44.1 * libavutil55-debuginfo-3.4.2-150200.11.44.1 * libavformat57-debuginfo-3.4.2-150200.11.44.1 * libpostproc54-3.4.2-150200.11.44.1 * libavformat57-3.4.2-150200.11.44.1 * libswscale-devel-3.4.2-150200.11.44.1 * libavutil55-3.4.2-150200.11.44.1 * libavutil-devel-3.4.2-150200.11.44.1 * libswresample2-debuginfo-3.4.2-150200.11.44.1 * libswscale4-debuginfo-3.4.2-150200.11.44.1 * libavresample3-3.4.2-150200.11.44.1 * libswresample2-3.4.2-150200.11.44.1 * libswscale4-3.4.2-150200.11.44.1 * libavcodec57-debuginfo-3.4.2-150200.11.44.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50010.html * https://bugzilla.suse.com/show_bug.cgi?id=1223256

1 0

SUSE-SU-2024:1582-1: important: Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
by OPENSUSE-UPDATES 10 May '24

10 May '24

# Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:1582-1 Rating: important References: * bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828 Cross-References: * CVE-2023-5717 * CVE-2024-0775 * CVE-2024-1086 * CVE-2024-26622 CVSS scores: * CVE-2023-5717 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5717 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-0775 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-0775 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-1086 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-1086 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: * CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). * CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability perf component (bsc#1216644). * CVE-2024-26622: Fixed a use-after-free bug in tomoyo_write_control() (bsc#1220828). * CVE-2024-1086: Fixed a use-after-free vulnerability related to nft_verdict_init() (bsc#1219435). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-1594=1 SUSE-SLE- Module-Live-Patching-15-SP3-2024-1582=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1583=1 SUSE-2024-1586=1 SUSE-2024-1584=1 SUSE-2024-1585=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-1585=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-1583=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-1586=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-1584=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1589=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-1589=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1582=1 SUSE-2024-1594=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_118-default-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_121-default-13-150300.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_60-default-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_55-default-debuginfo-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_10-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_69-default-debuginfo-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_60-default-debuginfo-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_55-default-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_69-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_11-debugsource-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_14-debugsource-10-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_60-default-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_55-default-debuginfo-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_10-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_69-default-debuginfo-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_60-default-debuginfo-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_55-default-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_69-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_11-debugsource-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_14-debugsource-10-150400.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_0-debugsource-11-150500.3.1 * kernel-livepatch-5_14_21-150500_53-default-debuginfo-11-150500.3.1 * kernel-livepatch-5_14_21-150500_53-default-11-150500.3.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_0-debugsource-11-150500.3.1 * kernel-livepatch-5_14_21-150500_53-default-debuginfo-11-150500.3.1 * kernel-livepatch-5_14_21-150500_53-default-11-150500.3.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_32-debugsource-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_118-default-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_121-default-debuginfo-13-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_31-debugsource-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_121-default-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_118-default-debuginfo-13-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_121-preempt-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_118-preempt-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_121-preempt-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_118-preempt-13-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5717.html * https://www.suse.com/security/cve/CVE-2024-0775.html * https://www.suse.com/security/cve/CVE-2024-1086.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://bugzilla.suse.com/show_bug.cgi?id=1216644 * https://bugzilla.suse.com/show_bug.cgi?id=1219079 * https://bugzilla.suse.com/show_bug.cgi?id=1219435 * https://bugzilla.suse.com/show_bug.cgi?id=1220828

1 0

SUSE-SU-2024:1578-1: important: Security update for sssd
by OPENSUSE-UPDATES 09 May '24

09 May '24

# Security update for sssd Announcement ID: SUSE-SU-2024:1578-1 Rating: important References: * bsc#1223100 Cross-References: * CVE-2023-3758 CVSS scores: * CVE-2023-3758 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for sssd fixes the following issues: * CVE-2023-3758: Fixed race condition during authorization that lead to GPO policies functioning inconsistently (bsc#1223100) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1578=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1578=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1578=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1578=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1578=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1578=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1578=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1578=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1578=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1578=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1578=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1578=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1578=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1578=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1578=1 ## Package List: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libipa_hbac0-2.5.2-150400.4.27.1 * sssd-dbus-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * sssd-tools-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap-devel-2.5.2-150400.4.27.1 * sssd-proxy-2.5.2-150400.4.27.1 * sssd-common-32bit-2.5.2-150400.4.27.1 * sssd-krb5-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * libsss_simpleifp0-2.5.2-150400.4.27.1 * sssd-tools-2.5.2-150400.4.27.1 * libsss_certmap-devel-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-ipa-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-kcm-2.5.2-150400.4.27.1 * libipa_hbac-devel-2.5.2-150400.4.27.1 * python3-sssd-config-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp-devel-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * python3-sssd-config-2.5.2-150400.4.27.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-common-32bit-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-debuginfo-2.5.2-150400.4.27.1 * sssd-ad-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * sssd-dbus-2.5.2-150400.4.27.1 * sssd-ipa-2.5.2-150400.4.27.1 * libsss_idmap-devel-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-proxy-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp0-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * sssd-ad-2.5.2-150400.4.27.1 * sssd-kcm-debuginfo-2.5.2-150400.4.27.1 * libipa_hbac0-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-2.5.2-150400.4.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libipa_hbac0-2.5.2-150400.4.27.1 * sssd-dbus-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * sssd-tools-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap-devel-2.5.2-150400.4.27.1 * sssd-proxy-2.5.2-150400.4.27.1 * sssd-krb5-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * libsss_simpleifp0-2.5.2-150400.4.27.1 * sssd-tools-2.5.2-150400.4.27.1 * libsss_certmap-devel-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-ipa-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-kcm-2.5.2-150400.4.27.1 * libipa_hbac-devel-2.5.2-150400.4.27.1 * python3-sssd-config-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp-devel-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * python3-sssd-config-2.5.2-150400.4.27.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-krb5-debuginfo-2.5.2-150400.4.27.1 * sssd-ad-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * sssd-dbus-2.5.2-150400.4.27.1 * sssd-ipa-2.5.2-150400.4.27.1 * libsss_idmap-devel-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-proxy-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp0-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * sssd-ad-2.5.2-150400.4.27.1 * sssd-kcm-debuginfo-2.5.2-150400.4.27.1 * libipa_hbac0-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-2.5.2-150400.4.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * sssd-common-32bit-2.5.2-150400.4.27.1 * sssd-common-32bit-debuginfo-2.5.2-150400.4.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libipa_hbac0-2.5.2-150400.4.27.1 * sssd-dbus-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * sssd-tools-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap-devel-2.5.2-150400.4.27.1 * sssd-proxy-2.5.2-150400.4.27.1 * sssd-krb5-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * libsss_simpleifp0-2.5.2-150400.4.27.1 * sssd-tools-2.5.2-150400.4.27.1 * libsss_certmap-devel-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-ipa-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-kcm-2.5.2-150400.4.27.1 * libipa_hbac-devel-2.5.2-150400.4.27.1 * python3-sssd-config-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp-devel-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * python3-sssd-config-2.5.2-150400.4.27.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-krb5-debuginfo-2.5.2-150400.4.27.1 * sssd-ad-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * sssd-dbus-2.5.2-150400.4.27.1 * sssd-ipa-2.5.2-150400.4.27.1 * libsss_idmap-devel-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-proxy-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp0-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * sssd-ad-2.5.2-150400.4.27.1 * sssd-kcm-debuginfo-2.5.2-150400.4.27.1 * libipa_hbac0-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-2.5.2-150400.4.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * sssd-common-32bit-2.5.2-150400.4.27.1 * sssd-common-32bit-debuginfo-2.5.2-150400.4.27.1 * SUSE Manager Proxy 4.3 (x86_64) * libipa_hbac0-2.5.2-150400.4.27.1 * sssd-dbus-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * sssd-tools-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap-devel-2.5.2-150400.4.27.1 * sssd-proxy-2.5.2-150400.4.27.1 * sssd-common-32bit-2.5.2-150400.4.27.1 * sssd-krb5-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * libsss_simpleifp0-2.5.2-150400.4.27.1 * sssd-tools-2.5.2-150400.4.27.1 * libsss_certmap-devel-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-ipa-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-kcm-2.5.2-150400.4.27.1 * libipa_hbac-devel-2.5.2-150400.4.27.1 * python3-sssd-config-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp-devel-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * python3-sssd-config-2.5.2-150400.4.27.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-common-32bit-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-debuginfo-2.5.2-150400.4.27.1 * sssd-ad-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * sssd-dbus-2.5.2-150400.4.27.1 * sssd-ipa-2.5.2-150400.4.27.1 * libsss_idmap-devel-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-proxy-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp0-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * sssd-ad-2.5.2-150400.4.27.1 * sssd-kcm-debuginfo-2.5.2-150400.4.27.1 * libipa_hbac0-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-2.5.2-150400.4.27.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libipa_hbac0-2.5.2-150400.4.27.1 * sssd-dbus-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * sssd-tools-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap-devel-2.5.2-150400.4.27.1 * sssd-proxy-2.5.2-150400.4.27.1 * sssd-common-32bit-2.5.2-150400.4.27.1 * sssd-krb5-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * libsss_simpleifp0-2.5.2-150400.4.27.1 * sssd-tools-2.5.2-150400.4.27.1 * libsss_certmap-devel-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-ipa-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-kcm-2.5.2-150400.4.27.1 * libipa_hbac-devel-2.5.2-150400.4.27.1 * python3-sssd-config-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp-devel-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * python3-sssd-config-2.5.2-150400.4.27.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-common-32bit-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-debuginfo-2.5.2-150400.4.27.1 * sssd-ad-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * sssd-dbus-2.5.2-150400.4.27.1 * sssd-ipa-2.5.2-150400.4.27.1 * libsss_idmap-devel-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-proxy-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp0-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * sssd-ad-2.5.2-150400.4.27.1 * sssd-kcm-debuginfo-2.5.2-150400.4.27.1 * libipa_hbac0-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-2.5.2-150400.4.27.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libipa_hbac0-2.5.2-150400.4.27.1 * sssd-dbus-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * sssd-tools-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap-devel-2.5.2-150400.4.27.1 * sssd-proxy-2.5.2-150400.4.27.1 * sssd-krb5-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * libsss_simpleifp0-2.5.2-150400.4.27.1 * sssd-tools-2.5.2-150400.4.27.1 * libsss_certmap-devel-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-ipa-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-kcm-2.5.2-150400.4.27.1 * libipa_hbac-devel-2.5.2-150400.4.27.1 * python3-sssd-config-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp-devel-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * python3-sssd-config-2.5.2-150400.4.27.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-krb5-debuginfo-2.5.2-150400.4.27.1 * sssd-ad-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * sssd-dbus-2.5.2-150400.4.27.1 * sssd-ipa-2.5.2-150400.4.27.1 * libsss_idmap-devel-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-proxy-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp0-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * sssd-ad-2.5.2-150400.4.27.1 * sssd-kcm-debuginfo-2.5.2-150400.4.27.1 * libipa_hbac0-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-2.5.2-150400.4.27.1 * SUSE Manager Server 4.3 (x86_64) * sssd-common-32bit-2.5.2-150400.4.27.1 * sssd-common-32bit-debuginfo-2.5.2-150400.4.27.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libipa_hbac0-2.5.2-150400.4.27.1 * python3-ipa_hbac-debuginfo-2.5.2-150400.4.27.1 * python3-sss_nss_idmap-debuginfo-2.5.2-150400.4.27.1 * sssd-dbus-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * sssd-tools-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap-devel-2.5.2-150400.4.27.1 * sssd-proxy-2.5.2-150400.4.27.1 * sssd-krb5-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * libsss_simpleifp0-2.5.2-150400.4.27.1 * sssd-tools-2.5.2-150400.4.27.1 * libsss_certmap-devel-2.5.2-150400.4.27.1 * python3-ipa_hbac-2.5.2-150400.4.27.1 * libnfsidmap-sss-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-ipa-debuginfo-2.5.2-150400.4.27.1 * python3-sss-murmur-2.5.2-150400.4.27.1 * python3-sss-murmur-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-kcm-2.5.2-150400.4.27.1 * libipa_hbac-devel-2.5.2-150400.4.27.1 * libsss_simpleifp-devel-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * python3-sssd-config-debuginfo-2.5.2-150400.4.27.1 * python3-sssd-config-2.5.2-150400.4.27.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-krb5-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * sssd-dbus-2.5.2-150400.4.27.1 * sssd-ipa-2.5.2-150400.4.27.1 * python3-sss_nss_idmap-2.5.2-150400.4.27.1 * libsss_idmap-devel-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-proxy-debuginfo-2.5.2-150400.4.27.1 * libnfsidmap-sss-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * libsss_simpleifp0-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-ad-debuginfo-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * sssd-ad-2.5.2-150400.4.27.1 * sssd-kcm-debuginfo-2.5.2-150400.4.27.1 * libipa_hbac0-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-2.5.2-150400.4.27.1 * openSUSE Leap 15.4 (x86_64) * sssd-common-32bit-2.5.2-150400.4.27.1 * sssd-common-32bit-debuginfo-2.5.2-150400.4.27.1 * openSUSE Leap 15.4 (aarch64_ilp32) * sssd-common-64bit-debuginfo-2.5.2-150400.4.27.1 * sssd-common-64bit-2.5.2-150400.4.27.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libipa_hbac0-2.5.2-150400.4.27.1 * sssd-dbus-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * sssd-tools-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap-devel-2.5.2-150400.4.27.1 * sssd-proxy-2.5.2-150400.4.27.1 * sssd-krb5-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * libsss_simpleifp0-2.5.2-150400.4.27.1 * sssd-tools-2.5.2-150400.4.27.1 * libsss_certmap-devel-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-ipa-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-kcm-2.5.2-150400.4.27.1 * libipa_hbac-devel-2.5.2-150400.4.27.1 * python3-sssd-config-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp-devel-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * python3-sssd-config-2.5.2-150400.4.27.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-krb5-debuginfo-2.5.2-150400.4.27.1 * sssd-ad-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * sssd-dbus-2.5.2-150400.4.27.1 * sssd-ipa-2.5.2-150400.4.27.1 * libsss_idmap-devel-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-proxy-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp0-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * sssd-ad-2.5.2-150400.4.27.1 * sssd-kcm-debuginfo-2.5.2-150400.4.27.1 * libipa_hbac0-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-2.5.2-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * sssd-common-32bit-2.5.2-150400.4.27.1 * sssd-common-32bit-debuginfo-2.5.2-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libipa_hbac0-2.5.2-150400.4.27.1 * sssd-dbus-debuginfo-2.5.2-150400.4.27.1 * sssd-krb5-common-debuginfo-2.5.2-150400.4.27.1 * sssd-tools-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap-devel-2.5.2-150400.4.27.1 * sssd-proxy-2.5.2-150400.4.27.1 * sssd-krb5-2.5.2-150400.4.27.1 * libsss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_idmap0-2.5.2-150400.4.27.1 * libsss_simpleifp0-2.5.2-150400.4.27.1 * sssd-tools-2.5.2-150400.4.27.1 * libsss_certmap-devel-2.5.2-150400.4.27.1 * sssd-ldap-debuginfo-2.5.2-150400.4.27.1 * sssd-ipa-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-debuginfo-2.5.2-150400.4.27.1 * libsss_certmap0-2.5.2-150400.4.27.1 * sssd-kcm-2.5.2-150400.4.27.1 * libipa_hbac-devel-2.5.2-150400.4.27.1 * python3-sssd-config-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp-devel-2.5.2-150400.4.27.1 * libsss_certmap0-debuginfo-2.5.2-150400.4.27.1 * python3-sssd-config-2.5.2-150400.4.27.1 * libsss_nss_idmap0-debuginfo-2.5.2-150400.4.27.1 * libsss_nss_idmap0-2.5.2-150400.4.27.1 * sssd-krb5-debuginfo-2.5.2-150400.4.27.1 * sssd-ad-debuginfo-2.5.2-150400.4.27.1 * sssd-ldap-2.5.2-150400.4.27.1 * sssd-dbus-2.5.2-150400.4.27.1 * sssd-ipa-2.5.2-150400.4.27.1 * libsss_idmap-devel-2.5.2-150400.4.27.1 * sssd-krb5-common-2.5.2-150400.4.27.1 * sssd-proxy-debuginfo-2.5.2-150400.4.27.1 * libsss_simpleifp0-debuginfo-2.5.2-150400.4.27.1 * sssd-2.5.2-150400.4.27.1 * sssd-common-debuginfo-2.5.2-150400.4.27.1 * sssd-common-2.5.2-150400.4.27.1 * sssd-debugsource-2.5.2-150400.4.27.1 * sssd-ad-2.5.2-150400.4.27.1 * sssd-kcm-debuginfo-2.5.2-150400.4.27.1 * libipa_hbac0-debuginfo-2.5.2-150400.4.27.1 * sssd-winbind-idmap-2.5.2-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * sssd-common-32bit-2.5.2-150400.4.27.1 * sssd-common-32bit-debuginfo-2.5.2-150400.4.27.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3758.html * https://bugzilla.suse.com/show_bug.cgi?id=1223100

1 0

SUSE-SU-2024:1579-1: important: Security update for sssd
by OPENSUSE-UPDATES 09 May '24

09 May '24

# Security update for sssd Announcement ID: SUSE-SU-2024:1579-1 Rating: important References: * bsc#1223100 Cross-References: * CVE-2023-3758 CVSS scores: * CVE-2023-3758 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for sssd fixes the following issues: * CVE-2023-3758: Fixed race condition during authorization that lead to GPO policies functioning inconsistently (bsc#1223100) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1579=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1579=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1579=1 openSUSE-SLE-15.5-2024-1579=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libsss_idmap0-debuginfo-2.5.2-150500.10.17.1 * sssd-common-2.5.2-150500.10.17.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.17.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.17.1 * sssd-ldap-2.5.2-150500.10.17.1 * sssd-debugsource-2.5.2-150500.10.17.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.17.1 * sssd-2.5.2-150500.10.17.1 * sssd-common-debuginfo-2.5.2-150500.10.17.1 * sssd-ldap-debuginfo-2.5.2-150500.10.17.1 * sssd-krb5-common-2.5.2-150500.10.17.1 * libsss_idmap0-2.5.2-150500.10.17.1 * libsss_certmap0-2.5.2-150500.10.17.1 * libsss_nss_idmap0-2.5.2-150500.10.17.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libsss_certmap0-debuginfo-2.5.2-150500.10.17.1 * sssd-proxy-debuginfo-2.5.2-150500.10.17.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.17.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.17.1 * libsss_idmap-devel-2.5.2-150500.10.17.1 * sssd-dbus-debuginfo-2.5.2-150500.10.17.1 * libsss_certmap0-2.5.2-150500.10.17.1 * libsss_nss_idmap0-2.5.2-150500.10.17.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.17.1 * libipa_hbac-devel-2.5.2-150500.10.17.1 * libsss_simpleifp-devel-2.5.2-150500.10.17.1 * sssd-common-2.5.2-150500.10.17.1 * sssd-ipa-2.5.2-150500.10.17.1 * sssd-debugsource-2.5.2-150500.10.17.1 * sssd-ad-2.5.2-150500.10.17.1 * python3-sssd-config-2.5.2-150500.10.17.1 * libsss_certmap-devel-2.5.2-150500.10.17.1 * sssd-krb5-common-2.5.2-150500.10.17.1 * sssd-ad-debuginfo-2.5.2-150500.10.17.1 * sssd-krb5-2.5.2-150500.10.17.1 * sssd-krb5-debuginfo-2.5.2-150500.10.17.1 * sssd-tools-2.5.2-150500.10.17.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.17.1 * sssd-winbind-idmap-2.5.2-150500.10.17.1 * sssd-ipa-debuginfo-2.5.2-150500.10.17.1 * libsss_nss_idmap-devel-2.5.2-150500.10.17.1 * sssd-tools-debuginfo-2.5.2-150500.10.17.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.17.1 * sssd-kcm-2.5.2-150500.10.17.1 * sssd-ldap-2.5.2-150500.10.17.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.17.1 * sssd-dbus-2.5.2-150500.10.17.1 * sssd-proxy-2.5.2-150500.10.17.1 * sssd-2.5.2-150500.10.17.1 * sssd-common-debuginfo-2.5.2-150500.10.17.1 * sssd-ldap-debuginfo-2.5.2-150500.10.17.1 * sssd-kcm-debuginfo-2.5.2-150500.10.17.1 * libsss_simpleifp0-2.5.2-150500.10.17.1 * libsss_idmap0-2.5.2-150500.10.17.1 * libipa_hbac0-2.5.2-150500.10.17.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.17.1 * Basesystem Module 15-SP5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.17.1 * sssd-common-32bit-debuginfo-2.5.2-150500.10.17.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libsss_certmap0-debuginfo-2.5.2-150500.10.17.1 * sssd-proxy-debuginfo-2.5.2-150500.10.17.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.17.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.17.1 * libsss_idmap-devel-2.5.2-150500.10.17.1 * python3-sss_nss_idmap-2.5.2-150500.10.17.1 * sssd-dbus-debuginfo-2.5.2-150500.10.17.1 * libsss_certmap0-2.5.2-150500.10.17.1 * libsss_nss_idmap0-2.5.2-150500.10.17.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.17.1 * libipa_hbac-devel-2.5.2-150500.10.17.1 * libsss_simpleifp-devel-2.5.2-150500.10.17.1 * sssd-common-2.5.2-150500.10.17.1 * sssd-ipa-2.5.2-150500.10.17.1 * python3-ipa_hbac-debuginfo-2.5.2-150500.10.17.1 * sssd-debugsource-2.5.2-150500.10.17.1 * libnfsidmap-sss-2.5.2-150500.10.17.1 * sssd-ad-2.5.2-150500.10.17.1 * python3-sssd-config-2.5.2-150500.10.17.1 * libsss_certmap-devel-2.5.2-150500.10.17.1 * sssd-krb5-common-2.5.2-150500.10.17.1 * sssd-ad-debuginfo-2.5.2-150500.10.17.1 * python3-ipa_hbac-2.5.2-150500.10.17.1 * sssd-krb5-2.5.2-150500.10.17.1 * sssd-krb5-debuginfo-2.5.2-150500.10.17.1 * sssd-tools-2.5.2-150500.10.17.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.17.1 * sssd-winbind-idmap-2.5.2-150500.10.17.1 * sssd-ipa-debuginfo-2.5.2-150500.10.17.1 * libsss_nss_idmap-devel-2.5.2-150500.10.17.1 * sssd-tools-debuginfo-2.5.2-150500.10.17.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.17.1 * sssd-kcm-2.5.2-150500.10.17.1 * sssd-ldap-2.5.2-150500.10.17.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.17.1 * sssd-dbus-2.5.2-150500.10.17.1 * sssd-proxy-2.5.2-150500.10.17.1 * libnfsidmap-sss-debuginfo-2.5.2-150500.10.17.1 * sssd-2.5.2-150500.10.17.1 * sssd-common-debuginfo-2.5.2-150500.10.17.1 * sssd-ldap-debuginfo-2.5.2-150500.10.17.1 * sssd-kcm-debuginfo-2.5.2-150500.10.17.1 * python3-sss_nss_idmap-debuginfo-2.5.2-150500.10.17.1 * libsss_simpleifp0-2.5.2-150500.10.17.1 * python3-sss-murmur-2.5.2-150500.10.17.1 * python3-sss-murmur-debuginfo-2.5.2-150500.10.17.1 * libsss_idmap0-2.5.2-150500.10.17.1 * libipa_hbac0-2.5.2-150500.10.17.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.17.1 * openSUSE Leap 15.5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.17.1 * sssd-common-32bit-debuginfo-2.5.2-150500.10.17.1 * openSUSE Leap 15.5 (aarch64_ilp32) * sssd-common-64bit-debuginfo-2.5.2-150500.10.17.1 * sssd-common-64bit-2.5.2-150500.10.17.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3758.html * https://bugzilla.suse.com/show_bug.cgi?id=1223100

1 0

SUSE-SU-2024:1580-1: important: Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3)
by OPENSUSE-UPDATES 09 May '24

09 May '24

# Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:1580-1 Rating: important References: * bsc#1219079 * bsc#1219435 * bsc#1220828 Cross-References: * CVE-2024-0775 * CVE-2024-1086 * CVE-2024-26622 CVSS scores: * CVE-2024-0775 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-0775 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-1086 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-1086 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_144 fixes several issues. The following security issues were fixed: * CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). * CVE-2024-26622: Fixed a use-after-free bug in tomoyo_write_control() (bsc#1220828). * CVE-2024-1086: Fixed a use-after-free vulnerability related to nft_verdict_init() (bsc#1219435). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1580=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-1580=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_39-debugsource-6-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-default-debuginfo-6-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-default-6-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_144-preempt-debuginfo-6-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-preempt-6-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_144-default-6-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0775.html * https://www.suse.com/security/cve/CVE-2024-1086.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://bugzilla.suse.com/show_bug.cgi?id=1219079 * https://bugzilla.suse.com/show_bug.cgi?id=1219435 * https://bugzilla.suse.com/show_bug.cgi?id=1220828

1 0

SUSE-RU-2024:1564-1: moderate: Recommended update for powerpc-utils
by OPENSUSE-UPDATES 09 May '24

09 May '24

# Recommended update for powerpc-utils Announcement ID: SUSE-RU-2024:1564-1 Rating: moderate References: * bsc#1200731 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for powerpc-utils fixes the following issue: * Use separate hcn-init service for wicked and NM (bsc#1200731) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1564=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1564=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1564=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1564=1 ## Package List: * openSUSE Leap 15.4 (ppc64le) * powerpc-utils-debugsource-1.3.10-150400.19.18.2 * powerpc-utils-1.3.10-150400.19.18.2 * powerpc-utils-debuginfo-1.3.10-150400.19.18.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (ppc64le) * powerpc-utils-debugsource-1.3.10-150400.19.18.2 * powerpc-utils-1.3.10-150400.19.18.2 * powerpc-utils-debuginfo-1.3.10-150400.19.18.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le) * powerpc-utils-debugsource-1.3.10-150400.19.18.2 * powerpc-utils-1.3.10-150400.19.18.2 * powerpc-utils-debuginfo-1.3.10-150400.19.18.2 * SUSE Manager Server 4.3 (ppc64le) * powerpc-utils-debugsource-1.3.10-150400.19.18.2 * powerpc-utils-1.3.10-150400.19.18.2 * powerpc-utils-debuginfo-1.3.10-150400.19.18.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1200731

1 0

SUSE-RU-2024:1566-1: moderate: Recommended update for catatonit
by OPENSUSE-UPDATES 09 May '24

09 May '24

# Recommended update for catatonit Announcement ID: SUSE-RU-2024:1566-1 Rating: moderate References: Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for catatonit fixes the following issues: * Update to catatonit v0.2.0 * Change license to GPL-2.0-or-later ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1566=1 openSUSE-SLE-15.5-2024-1566=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1566=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-1566=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * catatonit-debugsource-0.2.0-150500.3.3.1 * catatonit-debuginfo-0.2.0-150500.3.3.1 * catatonit-0.2.0-150500.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * catatonit-debugsource-0.2.0-150500.3.3.1 * catatonit-debuginfo-0.2.0-150500.3.3.1 * catatonit-0.2.0-150500.3.3.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * catatonit-debugsource-0.2.0-150500.3.3.1 * catatonit-debuginfo-0.2.0-150500.3.3.1 * catatonit-0.2.0-150500.3.3.1

1 0

SUSE-RU-2024:1567-1: moderate: Recommended update for catatonit
by OPENSUSE-UPDATES 09 May '24

09 May '24

# Recommended update for catatonit Announcement ID: SUSE-RU-2024:1567-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.3 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP3 An update that can now be installed. ## Description: This update for catatonit fixes the following issues: * Update to catatonit v0.2.0 * Change license to GPL-2.0-or-later ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1567=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1567=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1567=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1567=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1567=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1567=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1567=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1567=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1567=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1567=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1567=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * catatonit-debuginfo-0.2.0-150300.10.8.1 * catatonit-debugsource-0.2.0-150300.10.8.1 * catatonit-0.2.0-150300.10.8.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * catatonit-debuginfo-0.2.0-150300.10.8.1 * catatonit-debugsource-0.2.0-150300.10.8.1 * catatonit-0.2.0-150300.10.8.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * catatonit-debuginfo-0.2.0-150300.10.8.1 * catatonit-debugsource-0.2.0-150300.10.8.1 * catatonit-0.2.0-150300.10.8.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * catatonit-debuginfo-0.2.0-150300.10.8.1 * catatonit-debugsource-0.2.0-150300.10.8.1 * catatonit-0.2.0-150300.10.8.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * catatonit-debuginfo-0.2.0-150300.10.8.1 * catatonit-debugsource-0.2.0-150300.10.8.1 * catatonit-0.2.0-150300.10.8.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * catatonit-debuginfo-0.2.0-150300.10.8.1 * catatonit-debugsource-0.2.0-150300.10.8.1 * catatonit-0.2.0-150300.10.8.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * catatonit-debuginfo-0.2.0-150300.10.8.1 * catatonit-debugsource-0.2.0-150300.10.8.1 * catatonit-0.2.0-150300.10.8.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * catatonit-debuginfo-0.2.0-150300.10.8.1 * catatonit-debugsource-0.2.0-150300.10.8.1 * catatonit-0.2.0-150300.10.8.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * catatonit-debuginfo-0.2.0-150300.10.8.1 * catatonit-debugsource-0.2.0-150300.10.8.1 * catatonit-0.2.0-150300.10.8.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * catatonit-debuginfo-0.2.0-150300.10.8.1 * catatonit-debugsource-0.2.0-150300.10.8.1 * catatonit-0.2.0-150300.10.8.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * catatonit-debuginfo-0.2.0-150300.10.8.1 * catatonit-debugsource-0.2.0-150300.10.8.1 * catatonit-0.2.0-150300.10.8.1

1 0

SUSE-SU-2024:1571-1: important: Security update for python-pymongo
by OPENSUSE-UPDATES 09 May '24

09 May '24

# Security update for python-pymongo Announcement ID: SUSE-SU-2024:1571-1 Rating: important References: * bsc#1222492 Cross-References: * CVE-2024-21506 CVSS scores: * CVE-2024-21506 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python-pymongo fixes the following issues: * CVE-2024-21506: Fixed out-of-bounds read in the BSON module (bsc#1222492) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1571=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1571=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1571=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python2-pymongo-3.11.0-150300.3.3.1 * python3-pymongo-3.11.0-150300.3.3.1 * python2-pymongo-debuginfo-3.11.0-150300.3.3.1 * python-pymongo-debugsource-3.11.0-150300.3.3.1 * python-pymongo-debuginfo-3.11.0-150300.3.3.1 * python3-pymongo-debuginfo-3.11.0-150300.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-pymongo-debugsource-3.11.0-150300.3.3.1 * python3-pymongo-debuginfo-3.11.0-150300.3.3.1 * python3-pymongo-3.11.0-150300.3.3.1 * python-pymongo-debuginfo-3.11.0-150300.3.3.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * python-pymongo-debugsource-3.11.0-150300.3.3.1 * python3-pymongo-debuginfo-3.11.0-150300.3.3.1 * python3-pymongo-3.11.0-150300.3.3.1 * python-pymongo-debuginfo-3.11.0-150300.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21506.html * https://bugzilla.suse.com/show_bug.cgi?id=1222492

1 0

SUSE-RU-2024:1575-1: moderate: Recommended update for bcc
by OPENSUSE-UPDATES 09 May '24

09 May '24

# Recommended update for bcc Announcement ID: SUSE-RU-2024:1575-1 Rating: moderate References: * bsc#1219096 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for bcc fixes the following issue: * Fix incorrect offset calculation when consecutive bitfields are present (bsc#1219096) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1575=1 openSUSE-SLE-15.5-2024-1575=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1575=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libbcc0-0.26.0-150500.3.6.1 * bcc-devel-0.26.0-150500.3.6.1 * libbcc0-debuginfo-0.26.0-150500.3.6.1 * bcc-tools-0.26.0-150500.3.6.1 * bcc-tools-debuginfo-0.26.0-150500.3.6.1 * bcc-debuginfo-0.26.0-150500.3.6.1 * bcc-debugsource-0.26.0-150500.3.6.1 * openSUSE Leap 15.5 (noarch) * bcc-docs-0.26.0-150500.3.6.1 * bcc-examples-0.26.0-150500.3.6.1 * python3-bcc-0.26.0-150500.3.6.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libbcc0-0.26.0-150500.3.6.1 * bcc-devel-0.26.0-150500.3.6.1 * libbcc0-debuginfo-0.26.0-150500.3.6.1 * bcc-tools-0.26.0-150500.3.6.1 * bcc-tools-debuginfo-0.26.0-150500.3.6.1 * bcc-debuginfo-0.26.0-150500.3.6.1 * bcc-debugsource-0.26.0-150500.3.6.1 * Development Tools Module 15-SP5 (noarch) * bcc-docs-0.26.0-150500.3.6.1 * bcc-examples-0.26.0-150500.3.6.1 * python3-bcc-0.26.0-150500.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219096

1 0

SUSE-SU-2024:1558-1: important: Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3)
by OPENSUSE-UPDATES 08 May '24

08 May '24

# Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:1558-1 Rating: important References: * bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828 Cross-References: * CVE-2023-5717 * CVE-2024-0775 * CVE-2024-1086 * CVE-2024-26622 CVSS scores: * CVE-2023-5717 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5717 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-0775 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-0775 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-1086 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-1086 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_133 fixes several issues. The following security issues were fixed: * CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). * CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability perf component (bsc#1216644). * CVE-2024-26622: Fixed a use-after-free bug in tomoyo_write_control() (bsc#1220828). * CVE-2024-1086: Fixed a use-after-free vulnerability related to nft_verdict_init() (bsc#1219435). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1561=1 SUSE-2024-1560=1 SUSE-2024-1558=1 SUSE-2024-1559=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-1559=1 SUSE-SLE- Module-Live-Patching-15-SP3-2024-1561=1 SUSE-SLE-Module-Live- Patching-15-SP3-2024-1560=1 SUSE-SLE-Module-Live-Patching-15-SP3-2024-1558=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_33-debugsource-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_127-default-10-150300.2.1 * kernel-livepatch-5_3_18-150300_59_130-default-debuginfo-9-150300.2.1 * kernel-livepatch-5_3_18-150300_59_133-default-debuginfo-8-150300.2.1 * kernel-livepatch-5_3_18-150300_59_124-default-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_130-default-9-150300.2.1 * kernel-livepatch-5_3_18-150300_59_133-default-8-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_34-debugsource-10-150300.2.1 * kernel-livepatch-5_3_18-150300_59_124-default-debuginfo-11-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_35-debugsource-9-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_36-debugsource-8-150300.2.1 * kernel-livepatch-5_3_18-150300_59_127-default-debuginfo-10-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_124-preempt-debuginfo-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_127-preempt-debuginfo-10-150300.2.1 * kernel-livepatch-5_3_18-150300_59_124-preempt-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_130-preempt-debuginfo-9-150300.2.1 * kernel-livepatch-5_3_18-150300_59_133-preempt-8-150300.2.1 * kernel-livepatch-5_3_18-150300_59_133-preempt-debuginfo-8-150300.2.1 * kernel-livepatch-5_3_18-150300_59_130-preempt-9-150300.2.1 * kernel-livepatch-5_3_18-150300_59_127-preempt-10-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_133-default-8-150300.2.1 * kernel-livepatch-5_3_18-150300_59_124-default-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_127-default-10-150300.2.1 * kernel-livepatch-5_3_18-150300_59_130-default-9-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5717.html * https://www.suse.com/security/cve/CVE-2024-0775.html * https://www.suse.com/security/cve/CVE-2024-1086.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://bugzilla.suse.com/show_bug.cgi?id=1216644 * https://bugzilla.suse.com/show_bug.cgi?id=1219079 * https://bugzilla.suse.com/show_bug.cgi?id=1219435 * https://bugzilla.suse.com/show_bug.cgi?id=1220828

1 0

SUSE-SU-2024:1562-1: important: Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)
by OPENSUSE-UPDATES 08 May '24

08 May '24

# Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:1562-1 Rating: important References: * bsc#1219079 * bsc#1219435 * bsc#1220828 Cross-References: * CVE-2024-0775 * CVE-2024-1086 * CVE-2024-26622 CVSS scores: * CVE-2024-0775 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-0775 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-1086 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-1086 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_147 fixes several issues. The following security issues were fixed: * CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). * CVE-2024-26622: Fixed a use-after-free bug in tomoyo_write_control() (bsc#1220828). * CVE-2024-1086: Fixed a use-after-free vulnerability related to nft_verdict_init() (bsc#1219435). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1562=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-1562=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_147-default-6-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-default-debuginfo-6-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_40-debugsource-6-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_147-preempt-debuginfo-6-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-preempt-6-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_147-default-6-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0775.html * https://www.suse.com/security/cve/CVE-2024-1086.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://bugzilla.suse.com/show_bug.cgi?id=1219079 * https://bugzilla.suse.com/show_bug.cgi?id=1219435 * https://bugzilla.suse.com/show_bug.cgi?id=1220828

1 0

SUSE-SU-2024:1557-1: moderate: Security update for rpm
by OPENSUSE-UPDATES 08 May '24

08 May '24

# Security update for rpm Announcement ID: SUSE-SU-2024:1557-1 Rating: moderate References: * bsc#1189495 * bsc#1191175 * bsc#1218686 Cross-References: * CVE-2021-3521 CVSS scores: * CVE-2021-3521 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N * CVE-2021-3521 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Proxy 4.3 Module 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 An update that solves one vulnerability and has two security fixes can now be installed. ## Description: This update for rpm fixes the following issues: Security fixes: \- CVE-2021-3521: Fixed missing subkey binding signature checking (bsc#1191175) Other fixes: * accept more signature subpackets marked as critical (bsc#1218686) * backport limit support for the autopatch macro (bsc#1189495) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1557=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1557=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1557=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1557=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1557=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1557=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1557=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1557=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1557=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1557=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1557=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1557=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1557=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1557=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1557=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-1557=1 * SUSE Manager Proxy 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2024-1557=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-1557=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1557=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1557=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1557=1 ## Package List: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * rpm-4.14.3-150400.59.16.1 * python311-rpm-debuginfo-4.14.3-150400.59.16.1 * rpm-build-4.14.3-150400.59.16.1 * python311-rpm-4.14.3-150400.59.16.1 * rpm-devel-4.14.3-150400.59.16.1 * rpm-build-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * rpm-32bit-4.14.3-150400.59.16.1 * rpm-32bit-debuginfo-4.14.3-150400.59.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rpm-4.14.3-150400.59.16.1 * python311-rpm-debuginfo-4.14.3-150400.59.16.1 * rpm-build-4.14.3-150400.59.16.1 * python311-rpm-4.14.3-150400.59.16.1 * rpm-devel-4.14.3-150400.59.16.1 * rpm-build-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * rpm-32bit-4.14.3-150400.59.16.1 * rpm-32bit-debuginfo-4.14.3-150400.59.16.1 * SUSE Manager Proxy 4.3 (x86_64) * rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * rpm-32bit-4.14.3-150400.59.16.1 * rpm-devel-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-32bit-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * rpm-32bit-4.14.3-150400.59.16.1 * rpm-devel-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-32bit-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * rpm-4.14.3-150400.59.16.1 * rpm-devel-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * SUSE Manager Server 4.3 (x86_64) * rpm-32bit-4.14.3-150400.59.16.1 * rpm-32bit-debuginfo-4.14.3-150400.59.16.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * rpm-4.14.3-150400.59.16.1 * python311-rpm-debuginfo-4.14.3-150400.59.16.1 * rpm-build-4.14.3-150400.59.16.1 * python311-rpm-4.14.3-150400.59.16.1 * rpm-ndb-4.14.3-150400.59.16.1 * rpm-ndb-debugsource-4.14.3-150400.59.16.1 * rpm-build-debuginfo-4.14.3-150400.59.16.1 * rpm-devel-4.14.3-150400.59.16.1 * rpm-ndb-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-imaevmsign-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * rpm-imaevmsign-debuginfo-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * openSUSE Leap 15.4 (x86_64) * rpm-ndb-32bit-debuginfo-4.14.3-150400.59.16.1 * rpm-32bit-4.14.3-150400.59.16.1 * rpm-ndb-32bit-4.14.3-150400.59.16.1 * rpm-32bit-debuginfo-4.14.3-150400.59.16.1 * openSUSE Leap 15.4 (aarch64_ilp32) * rpm-64bit-4.14.3-150400.59.16.1 * rpm-64bit-debuginfo-4.14.3-150400.59.16.1 * rpm-ndb-64bit-4.14.3-150400.59.16.1 * rpm-ndb-64bit-debuginfo-4.14.3-150400.59.16.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * rpm-4.14.3-150400.59.16.1 * rpm-ndb-4.14.3-150400.59.16.1 * rpm-ndb-debugsource-4.14.3-150400.59.16.1 * rpm-ndb-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rpm-4.14.3-150400.59.16.1 * python311-rpm-debuginfo-4.14.3-150400.59.16.1 * rpm-build-4.14.3-150400.59.16.1 * python311-rpm-4.14.3-150400.59.16.1 * rpm-devel-4.14.3-150400.59.16.1 * rpm-ndb-4.14.3-150400.59.16.1 * rpm-build-debuginfo-4.14.3-150400.59.16.1 * rpm-ndb-debugsource-4.14.3-150400.59.16.1 * rpm-ndb-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * openSUSE Leap 15.5 (x86_64) * rpm-ndb-32bit-debuginfo-4.14.3-150400.59.16.1 * rpm-32bit-4.14.3-150400.59.16.1 * rpm-ndb-32bit-4.14.3-150400.59.16.1 * rpm-32bit-debuginfo-4.14.3-150400.59.16.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * rpm-4.14.3-150400.59.16.1 * rpm-ndb-4.14.3-150400.59.16.1 * rpm-ndb-debugsource-4.14.3-150400.59.16.1 * rpm-ndb-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * rpm-4.14.3-150400.59.16.1 * rpm-ndb-4.14.3-150400.59.16.1 * rpm-ndb-debugsource-4.14.3-150400.59.16.1 * rpm-ndb-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * rpm-4.14.3-150400.59.16.1 * rpm-ndb-4.14.3-150400.59.16.1 * rpm-ndb-debugsource-4.14.3-150400.59.16.1 * rpm-ndb-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rpm-4.14.3-150400.59.16.1 * rpm-devel-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * Basesystem Module 15-SP5 (x86_64) * rpm-32bit-4.14.3-150400.59.16.1 * rpm-32bit-debuginfo-4.14.3-150400.59.16.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rpm-build-4.14.3-150400.59.16.1 * rpm-build-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * rpm-ndb-debugsource-4.14.3-150400.59.16.1 * rpm-ndb-debuginfo-4.14.3-150400.59.16.1 * rpm-ndb-4.14.3-150400.59.16.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rpm-ndb-debugsource-4.14.3-150400.59.16.1 * rpm-ndb-debuginfo-4.14.3-150400.59.16.1 * rpm-ndb-4.14.3-150400.59.16.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-rpm-debuginfo-4.14.3-150400.59.16.1 * python311-rpm-4.14.3-150400.59.16.1 * SUSE Manager Proxy 4.3 Module 4.3 (aarch64 ppc64le s390x x86_64) * rpm-build-4.14.3-150400.59.16.1 * rpm-build-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * SUSE Manager Server 4.3 Module 4.3 (aarch64 ppc64le s390x x86_64) * rpm-build-4.14.3-150400.59.16.1 * rpm-build-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rpm-4.14.3-150400.59.16.1 * python311-rpm-debuginfo-4.14.3-150400.59.16.1 * rpm-build-4.14.3-150400.59.16.1 * python311-rpm-4.14.3-150400.59.16.1 * rpm-devel-4.14.3-150400.59.16.1 * rpm-build-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * rpm-32bit-4.14.3-150400.59.16.1 * rpm-32bit-debuginfo-4.14.3-150400.59.16.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rpm-4.14.3-150400.59.16.1 * python311-rpm-debuginfo-4.14.3-150400.59.16.1 * rpm-build-4.14.3-150400.59.16.1 * python311-rpm-4.14.3-150400.59.16.1 * rpm-devel-4.14.3-150400.59.16.1 * rpm-build-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * rpm-32bit-4.14.3-150400.59.16.1 * rpm-32bit-debuginfo-4.14.3-150400.59.16.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * rpm-4.14.3-150400.59.16.1 * rpm-debuginfo-4.14.3-150400.59.16.1 * python311-rpm-debuginfo-4.14.3-150400.59.16.1 * rpm-build-4.14.3-150400.59.16.1 * rpm-32bit-4.14.3-150400.59.16.1 * python311-rpm-4.14.3-150400.59.16.1 * rpm-devel-4.14.3-150400.59.16.1 * rpm-build-debuginfo-4.14.3-150400.59.16.1 * rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-4.14.3-150400.59.16.1 * rpm-32bit-debuginfo-4.14.3-150400.59.16.1 * python-rpm-debugsource-4.14.3-150400.59.16.1 * python3-rpm-debuginfo-4.14.3-150400.59.16.1 ## References: * https://www.suse.com/security/cve/CVE-2021-3521.html * https://bugzilla.suse.com/show_bug.cgi?id=1189495 * https://bugzilla.suse.com/show_bug.cgi?id=1191175 * https://bugzilla.suse.com/show_bug.cgi?id=1218686

1 0

openSUSE-SU-2024:0118-1: important: Security update for python-python-jose
by opensuse-security＠opensuse.org 07 May '24

07 May '24

openSUSE Security Update: Security update for python-python-jose ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0118-1 Rating: important References: #1223417 Cross-References: CVE-2024-33663 CVSS scores: CVE-2024-33663 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-python-jose fixes the following issues: CVE-2024-33663: Fixed algorithm confusion with OpenSSH ECDSA keys and other key formats (boo#1223417). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-118=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-python-jose-3.0.1-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2024-33663.html https://bugzilla.suse.com/1223417

1 0

SUSE-RU-2024:1484-2: moderate: Recommended update for rmt-server
by OPENSUSE-UPDATES 07 May '24

07 May '24

# Recommended update for rmt-server Announcement ID: SUSE-RU-2024:1484-2 Rating: moderate References: * bsc#1222122 * jsc#PED-3684 Affected Products: * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has one fix can now be installed. ## Description: This update for rmt-server fixes the following issues: * Support bzip2 compressed repositories (bsc#1222122) * Remove automatic backup generation for repodata within repository * Add support for Debian repositories using flat or nested structures (jsc#PED-3684) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1484=1 openSUSE-SLE-15.5-2024-1484=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1484=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1484=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rmt-server-config-2.16-150500.3.12.1 * rmt-server-debuginfo-2.16-150500.3.12.1 * rmt-server-debugsource-2.16-150500.3.12.1 * rmt-server-2.16-150500.3.12.1 * rmt-server-pubcloud-2.16-150500.3.12.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rmt-server-debugsource-2.16-150500.3.12.1 * rmt-server-debuginfo-2.16-150500.3.12.1 * rmt-server-pubcloud-2.16-150500.3.12.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rmt-server-config-2.16-150500.3.12.1 * rmt-server-debuginfo-2.16-150500.3.12.1 * rmt-server-debugsource-2.16-150500.3.12.1 * rmt-server-2.16-150500.3.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222122 * https://jira.suse.com/browse/PED-3684

1 0

SUSE-RU-2024:1483-2: moderate: Recommended update for rmt-server
by OPENSUSE-UPDATES 07 May '24

07 May '24

# Recommended update for rmt-server Announcement ID: SUSE-RU-2024:1483-2 Rating: moderate References: * bsc#1222122 * jsc#PED-3684 Affected Products: * openSUSE Leap 15.3 * Public Cloud Module 15-SP3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that contains one feature and has one fix can now be installed. ## Description: This update for rmt-server fixes the following issues: * Support bzip2 compressed repositories (bsc#1222122) * Remove automatic backup generation for repodata within repository * Add support for Debian repositories using flat or nested structures (jsc#PED-3684) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1483=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-1483=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1483=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1483=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1483=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1483=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.16-150300.3.33.1 * rmt-server-pubcloud-2.16-150300.3.33.1 * rmt-server-config-2.16-150300.3.33.1 * rmt-server-2.16-150300.3.33.1 * rmt-server-debugsource-2.16-150300.3.33.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.16-150300.3.33.1 * rmt-server-pubcloud-2.16-150300.3.33.1 * rmt-server-debugsource-2.16-150300.3.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * rmt-server-debuginfo-2.16-150300.3.33.1 * rmt-server-config-2.16-150300.3.33.1 * rmt-server-debugsource-2.16-150300.3.33.1 * rmt-server-2.16-150300.3.33.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.16-150300.3.33.1 * rmt-server-config-2.16-150300.3.33.1 * rmt-server-debugsource-2.16-150300.3.33.1 * rmt-server-2.16-150300.3.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * rmt-server-debuginfo-2.16-150300.3.33.1 * rmt-server-config-2.16-150300.3.33.1 * rmt-server-debugsource-2.16-150300.3.33.1 * rmt-server-2.16-150300.3.33.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * rmt-server-debuginfo-2.16-150300.3.33.1 * rmt-server-config-2.16-150300.3.33.1 * rmt-server-debugsource-2.16-150300.3.33.1 * rmt-server-2.16-150300.3.33.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222122 * https://jira.suse.com/browse/PED-3684

1 0

SUSE-RU-2024:1481-2: moderate: Recommended update for rmt-server
by OPENSUSE-UPDATES 07 May '24

07 May '24

# Recommended update for rmt-server Announcement ID: SUSE-RU-2024:1481-2 Rating: moderate References: * bsc#1222122 * jsc#PED-3684 Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has one fix can now be installed. ## Description: This update for rmt-server fixes the following issues: * Support bzip2 compressed repositories (bsc#1222122) * Remove automatic backup generation for repodata within repository * Add support for Debian repositories using flat or nested structures (jsc#PED-3684) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1481=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1481=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1481=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1481=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1481=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1481=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1481=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1481=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1481=1 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * rmt-server-pubcloud-2.16-150400.3.21.1 * rmt-server-debugsource-2.16-150400.3.21.1 * rmt-server-debuginfo-2.16-150400.3.21.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rmt-server-debuginfo-2.16-150400.3.21.1 * rmt-server-debugsource-2.16-150400.3.21.1 * rmt-server-2.16-150400.3.21.1 * rmt-server-config-2.16-150400.3.21.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rmt-server-debuginfo-2.16-150400.3.21.1 * rmt-server-debugsource-2.16-150400.3.21.1 * rmt-server-2.16-150400.3.21.1 * rmt-server-config-2.16-150400.3.21.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.16-150400.3.21.1 * rmt-server-debugsource-2.16-150400.3.21.1 * rmt-server-2.16-150400.3.21.1 * rmt-server-config-2.16-150400.3.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rmt-server-debuginfo-2.16-150400.3.21.1 * rmt-server-debugsource-2.16-150400.3.21.1 * rmt-server-2.16-150400.3.21.1 * rmt-server-config-2.16-150400.3.21.1 * SUSE Manager Proxy 4.3 (x86_64) * rmt-server-debuginfo-2.16-150400.3.21.1 * rmt-server-debugsource-2.16-150400.3.21.1 * rmt-server-2.16-150400.3.21.1 * rmt-server-config-2.16-150400.3.21.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * rmt-server-debuginfo-2.16-150400.3.21.1 * rmt-server-debugsource-2.16-150400.3.21.1 * rmt-server-2.16-150400.3.21.1 * rmt-server-config-2.16-150400.3.21.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * rmt-server-debuginfo-2.16-150400.3.21.1 * rmt-server-debugsource-2.16-150400.3.21.1 * rmt-server-2.16-150400.3.21.1 * rmt-server-config-2.16-150400.3.21.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * rmt-server-debugsource-2.16-150400.3.21.1 * rmt-server-2.16-150400.3.21.1 * rmt-server-config-2.16-150400.3.21.1 * rmt-server-pubcloud-2.16-150400.3.21.1 * rmt-server-debuginfo-2.16-150400.3.21.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222122 * https://jira.suse.com/browse/PED-3684

1 0

SUSE-SU-2024:1549-1: important: Security update for sssd
by OPENSUSE-UPDATES 07 May '24

07 May '24

# Security update for sssd Announcement ID: SUSE-SU-2024:1549-1 Rating: important References: * bsc#1223100 Cross-References: * CVE-2023-3758 CVSS scores: * CVE-2023-3758 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for sssd fixes the following issues: * CVE-2023-3758: Fixed race condition during authorization that lead to GPO policies functioning inconsistently (bsc#1223100) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1549=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1549=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1549=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1549=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1549=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1549=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1549=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1549=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python3-sss_nss_idmap-1.16.1-150300.23.43.1 * sssd-krb5-common-1.16.1-150300.23.43.1 * sssd-wbclient-1.16.1-150300.23.43.1 * libsss_nss_idmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-ad-debuginfo-1.16.1-150300.23.43.1 * python3-sssd-config-1.16.1-150300.23.43.1 * libsss_certmap-devel-1.16.1-150300.23.43.1 * python3-sss-murmur-1.16.1-150300.23.43.1 * libsss_certmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-dbus-1.16.1-150300.23.43.1 * sssd-krb5-common-debuginfo-1.16.1-150300.23.43.1 * sssd-dbus-debuginfo-1.16.1-150300.23.43.1 * sssd-wbclient-devel-1.16.1-150300.23.43.1 * sssd-winbind-idmap-1.16.1-150300.23.43.1 * python3-sss_nss_idmap-debuginfo-1.16.1-150300.23.43.1 * libipa_hbac0-1.16.1-150300.23.43.1 * sssd-krb5-debuginfo-1.16.1-150300.23.43.1 * libipa_hbac0-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-1.16.1-150300.23.43.1 * sssd-winbind-idmap-debuginfo-1.16.1-150300.23.43.1 * sssd-ipa-1.16.1-150300.23.43.1 * libsss_simpleifp0-debuginfo-1.16.1-150300.23.43.1 * libsss_simpleifp-devel-1.16.1-150300.23.43.1 * libnfsidmap-sss-1.16.1-150300.23.43.1 * sssd-ad-1.16.1-150300.23.43.1 * sssd-proxy-1.16.1-150300.23.43.1 * libsss_nss_idmap0-1.16.1-150300.23.43.1 * libsss_idmap0-1.16.1-150300.23.43.1 * libsss_idmap-devel-1.16.1-150300.23.43.1 * sssd-proxy-debuginfo-1.16.1-150300.23.43.1 * sssd-tools-debuginfo-1.16.1-150300.23.43.1 * python3-sssd-config-debuginfo-1.16.1-150300.23.43.1 * python3-sss-murmur-debuginfo-1.16.1-150300.23.43.1 * sssd-1.16.1-150300.23.43.1 * libsss_idmap0-debuginfo-1.16.1-150300.23.43.1 * libipa_hbac-devel-1.16.1-150300.23.43.1 * python3-ipa_hbac-debuginfo-1.16.1-150300.23.43.1 * sssd-krb5-1.16.1-150300.23.43.1 * sssd-ldap-debuginfo-1.16.1-150300.23.43.1 * python3-ipa_hbac-1.16.1-150300.23.43.1 * sssd-common-debuginfo-1.16.1-150300.23.43.1 * sssd-debugsource-1.16.1-150300.23.43.1 * libsss_nss_idmap-devel-1.16.1-150300.23.43.1 * sssd-ipa-debuginfo-1.16.1-150300.23.43.1 * libnfsidmap-sss-debuginfo-1.16.1-150300.23.43.1 * sssd-common-1.16.1-150300.23.43.1 * sssd-wbclient-debuginfo-1.16.1-150300.23.43.1 * sssd-ldap-1.16.1-150300.23.43.1 * sssd-tools-1.16.1-150300.23.43.1 * libsss_simpleifp0-1.16.1-150300.23.43.1 * openSUSE Leap 15.3 (x86_64) * sssd-common-32bit-1.16.1-150300.23.43.1 * sssd-common-32bit-debuginfo-1.16.1-150300.23.43.1 * openSUSE Leap 15.3 (aarch64_ilp32) * sssd-common-64bit-debuginfo-1.16.1-150300.23.43.1 * sssd-common-64bit-1.16.1-150300.23.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * sssd-krb5-common-1.16.1-150300.23.43.1 * libsss_nss_idmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-ad-debuginfo-1.16.1-150300.23.43.1 * python3-sssd-config-1.16.1-150300.23.43.1 * libsss_certmap-devel-1.16.1-150300.23.43.1 * sssd-krb5-common-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-dbus-1.16.1-150300.23.43.1 * sssd-dbus-debuginfo-1.16.1-150300.23.43.1 * sssd-winbind-idmap-1.16.1-150300.23.43.1 * libipa_hbac0-1.16.1-150300.23.43.1 * sssd-krb5-debuginfo-1.16.1-150300.23.43.1 * libipa_hbac0-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-1.16.1-150300.23.43.1 * sssd-winbind-idmap-debuginfo-1.16.1-150300.23.43.1 * sssd-ipa-1.16.1-150300.23.43.1 * libsss_simpleifp0-debuginfo-1.16.1-150300.23.43.1 * libsss_simpleifp-devel-1.16.1-150300.23.43.1 * sssd-ad-1.16.1-150300.23.43.1 * sssd-proxy-1.16.1-150300.23.43.1 * libsss_nss_idmap0-1.16.1-150300.23.43.1 * libsss_idmap0-1.16.1-150300.23.43.1 * libsss_idmap-devel-1.16.1-150300.23.43.1 * sssd-proxy-debuginfo-1.16.1-150300.23.43.1 * sssd-tools-debuginfo-1.16.1-150300.23.43.1 * python3-sssd-config-debuginfo-1.16.1-150300.23.43.1 * sssd-1.16.1-150300.23.43.1 * libsss_idmap0-debuginfo-1.16.1-150300.23.43.1 * libipa_hbac-devel-1.16.1-150300.23.43.1 * sssd-krb5-1.16.1-150300.23.43.1 * sssd-ldap-debuginfo-1.16.1-150300.23.43.1 * sssd-common-debuginfo-1.16.1-150300.23.43.1 * sssd-debugsource-1.16.1-150300.23.43.1 * libsss_nss_idmap-devel-1.16.1-150300.23.43.1 * sssd-ipa-debuginfo-1.16.1-150300.23.43.1 * sssd-common-1.16.1-150300.23.43.1 * sssd-ldap-1.16.1-150300.23.43.1 * sssd-tools-1.16.1-150300.23.43.1 * libsss_simpleifp0-1.16.1-150300.23.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * sssd-common-32bit-1.16.1-150300.23.43.1 * sssd-common-32bit-debuginfo-1.16.1-150300.23.43.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * sssd-krb5-common-1.16.1-150300.23.43.1 * libsss_nss_idmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-ad-debuginfo-1.16.1-150300.23.43.1 * python3-sssd-config-1.16.1-150300.23.43.1 * libsss_certmap-devel-1.16.1-150300.23.43.1 * sssd-krb5-common-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-dbus-1.16.1-150300.23.43.1 * sssd-dbus-debuginfo-1.16.1-150300.23.43.1 * sssd-winbind-idmap-1.16.1-150300.23.43.1 * libipa_hbac0-1.16.1-150300.23.43.1 * sssd-krb5-debuginfo-1.16.1-150300.23.43.1 * libipa_hbac0-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-1.16.1-150300.23.43.1 * sssd-winbind-idmap-debuginfo-1.16.1-150300.23.43.1 * sssd-ipa-1.16.1-150300.23.43.1 * libsss_simpleifp0-debuginfo-1.16.1-150300.23.43.1 * libsss_simpleifp-devel-1.16.1-150300.23.43.1 * sssd-ad-1.16.1-150300.23.43.1 * sssd-proxy-1.16.1-150300.23.43.1 * libsss_nss_idmap0-1.16.1-150300.23.43.1 * libsss_idmap0-1.16.1-150300.23.43.1 * libsss_idmap-devel-1.16.1-150300.23.43.1 * sssd-proxy-debuginfo-1.16.1-150300.23.43.1 * sssd-tools-debuginfo-1.16.1-150300.23.43.1 * python3-sssd-config-debuginfo-1.16.1-150300.23.43.1 * sssd-1.16.1-150300.23.43.1 * libsss_idmap0-debuginfo-1.16.1-150300.23.43.1 * libipa_hbac-devel-1.16.1-150300.23.43.1 * sssd-krb5-1.16.1-150300.23.43.1 * sssd-ldap-debuginfo-1.16.1-150300.23.43.1 * sssd-common-debuginfo-1.16.1-150300.23.43.1 * sssd-debugsource-1.16.1-150300.23.43.1 * libsss_nss_idmap-devel-1.16.1-150300.23.43.1 * sssd-ipa-debuginfo-1.16.1-150300.23.43.1 * sssd-common-1.16.1-150300.23.43.1 * sssd-ldap-1.16.1-150300.23.43.1 * sssd-tools-1.16.1-150300.23.43.1 * libsss_simpleifp0-1.16.1-150300.23.43.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * sssd-common-32bit-1.16.1-150300.23.43.1 * sssd-common-32bit-debuginfo-1.16.1-150300.23.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * sssd-krb5-common-1.16.1-150300.23.43.1 * libsss_nss_idmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-ad-debuginfo-1.16.1-150300.23.43.1 * python3-sssd-config-1.16.1-150300.23.43.1 * libsss_certmap-devel-1.16.1-150300.23.43.1 * sssd-krb5-common-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-dbus-1.16.1-150300.23.43.1 * sssd-dbus-debuginfo-1.16.1-150300.23.43.1 * sssd-winbind-idmap-1.16.1-150300.23.43.1 * libipa_hbac0-1.16.1-150300.23.43.1 * sssd-krb5-debuginfo-1.16.1-150300.23.43.1 * libipa_hbac0-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-1.16.1-150300.23.43.1 * sssd-winbind-idmap-debuginfo-1.16.1-150300.23.43.1 * sssd-ipa-1.16.1-150300.23.43.1 * libsss_simpleifp0-debuginfo-1.16.1-150300.23.43.1 * libsss_simpleifp-devel-1.16.1-150300.23.43.1 * sssd-ad-1.16.1-150300.23.43.1 * sssd-proxy-1.16.1-150300.23.43.1 * libsss_nss_idmap0-1.16.1-150300.23.43.1 * libsss_idmap0-1.16.1-150300.23.43.1 * libsss_idmap-devel-1.16.1-150300.23.43.1 * sssd-proxy-debuginfo-1.16.1-150300.23.43.1 * sssd-tools-debuginfo-1.16.1-150300.23.43.1 * python3-sssd-config-debuginfo-1.16.1-150300.23.43.1 * sssd-1.16.1-150300.23.43.1 * libsss_idmap0-debuginfo-1.16.1-150300.23.43.1 * libipa_hbac-devel-1.16.1-150300.23.43.1 * sssd-krb5-1.16.1-150300.23.43.1 * sssd-ldap-debuginfo-1.16.1-150300.23.43.1 * sssd-common-debuginfo-1.16.1-150300.23.43.1 * sssd-debugsource-1.16.1-150300.23.43.1 * libsss_nss_idmap-devel-1.16.1-150300.23.43.1 * sssd-ipa-debuginfo-1.16.1-150300.23.43.1 * sssd-common-1.16.1-150300.23.43.1 * sssd-ldap-1.16.1-150300.23.43.1 * sssd-tools-1.16.1-150300.23.43.1 * libsss_simpleifp0-1.16.1-150300.23.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * sssd-common-32bit-1.16.1-150300.23.43.1 * sssd-common-32bit-debuginfo-1.16.1-150300.23.43.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * sssd-krb5-common-1.16.1-150300.23.43.1 * libsss_nss_idmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-ad-debuginfo-1.16.1-150300.23.43.1 * python3-sssd-config-1.16.1-150300.23.43.1 * libsss_certmap-devel-1.16.1-150300.23.43.1 * sssd-krb5-common-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-dbus-1.16.1-150300.23.43.1 * sssd-dbus-debuginfo-1.16.1-150300.23.43.1 * sssd-winbind-idmap-1.16.1-150300.23.43.1 * libipa_hbac0-1.16.1-150300.23.43.1 * sssd-krb5-debuginfo-1.16.1-150300.23.43.1 * libipa_hbac0-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-1.16.1-150300.23.43.1 * sssd-winbind-idmap-debuginfo-1.16.1-150300.23.43.1 * sssd-ipa-1.16.1-150300.23.43.1 * libsss_simpleifp0-debuginfo-1.16.1-150300.23.43.1 * libsss_simpleifp-devel-1.16.1-150300.23.43.1 * sssd-ad-1.16.1-150300.23.43.1 * sssd-proxy-1.16.1-150300.23.43.1 * libsss_nss_idmap0-1.16.1-150300.23.43.1 * libsss_idmap0-1.16.1-150300.23.43.1 * libsss_idmap-devel-1.16.1-150300.23.43.1 * sssd-proxy-debuginfo-1.16.1-150300.23.43.1 * sssd-tools-debuginfo-1.16.1-150300.23.43.1 * python3-sssd-config-debuginfo-1.16.1-150300.23.43.1 * sssd-1.16.1-150300.23.43.1 * libsss_idmap0-debuginfo-1.16.1-150300.23.43.1 * libipa_hbac-devel-1.16.1-150300.23.43.1 * sssd-krb5-1.16.1-150300.23.43.1 * sssd-ldap-debuginfo-1.16.1-150300.23.43.1 * sssd-common-debuginfo-1.16.1-150300.23.43.1 * sssd-debugsource-1.16.1-150300.23.43.1 * libsss_nss_idmap-devel-1.16.1-150300.23.43.1 * sssd-ipa-debuginfo-1.16.1-150300.23.43.1 * sssd-common-1.16.1-150300.23.43.1 * sssd-ldap-1.16.1-150300.23.43.1 * sssd-tools-1.16.1-150300.23.43.1 * libsss_simpleifp0-1.16.1-150300.23.43.1 * SUSE Enterprise Storage 7.1 (x86_64) * sssd-common-32bit-1.16.1-150300.23.43.1 * sssd-common-32bit-debuginfo-1.16.1-150300.23.43.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libsss_idmap0-1.16.1-150300.23.43.1 * libsss_certmap0-1.16.1-150300.23.43.1 * sssd-krb5-common-1.16.1-150300.23.43.1 * libsss_nss_idmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-ldap-debuginfo-1.16.1-150300.23.43.1 * sssd-common-debuginfo-1.16.1-150300.23.43.1 * sssd-debugsource-1.16.1-150300.23.43.1 * sssd-krb5-common-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-1.16.1-150300.23.43.1 * sssd-common-1.16.1-150300.23.43.1 * sssd-ldap-1.16.1-150300.23.43.1 * libsss_idmap0-debuginfo-1.16.1-150300.23.43.1 * libsss_nss_idmap0-1.16.1-150300.23.43.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libsss_idmap0-1.16.1-150300.23.43.1 * libsss_certmap0-1.16.1-150300.23.43.1 * sssd-krb5-common-1.16.1-150300.23.43.1 * libsss_nss_idmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-ldap-debuginfo-1.16.1-150300.23.43.1 * sssd-common-debuginfo-1.16.1-150300.23.43.1 * sssd-debugsource-1.16.1-150300.23.43.1 * sssd-krb5-common-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-1.16.1-150300.23.43.1 * sssd-common-1.16.1-150300.23.43.1 * sssd-ldap-1.16.1-150300.23.43.1 * libsss_idmap0-debuginfo-1.16.1-150300.23.43.1 * libsss_nss_idmap0-1.16.1-150300.23.43.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libsss_idmap0-1.16.1-150300.23.43.1 * libsss_certmap0-1.16.1-150300.23.43.1 * sssd-krb5-common-1.16.1-150300.23.43.1 * libsss_nss_idmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-ldap-debuginfo-1.16.1-150300.23.43.1 * sssd-common-debuginfo-1.16.1-150300.23.43.1 * sssd-debugsource-1.16.1-150300.23.43.1 * sssd-krb5-common-debuginfo-1.16.1-150300.23.43.1 * libsss_certmap0-debuginfo-1.16.1-150300.23.43.1 * sssd-1.16.1-150300.23.43.1 * sssd-common-1.16.1-150300.23.43.1 * sssd-ldap-1.16.1-150300.23.43.1 * libsss_idmap0-debuginfo-1.16.1-150300.23.43.1 * libsss_nss_idmap0-1.16.1-150300.23.43.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3758.html * https://bugzilla.suse.com/show_bug.cgi?id=1223100

1 0

SUSE-RU-2024:1538-1: moderate: Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by OPENSUSE-UPDATES 07 May '24

07 May '24

# Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-RU-2024:1538-1 Rating: moderate References: * bsc#1222972 * bsc#1223454 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Changes in kernel-firmware-nvidia-gspx-G06: * Update to 550.78 Changes in nvidia-open-driver-G06-signed: * Update to 550.78 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1538=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1538=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1538=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1538=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1538=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1538=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1538=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1538=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1538=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1538=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1538=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1538=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1538=1 ## Package List: * openSUSE Leap 15.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * openSUSE Leap 15.4 (x86_64) * nvidia-open-driver-G06-signed-azure-devel-550.78-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.78_k5.14.21_150400.14.75-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-azure-550.78_k5.14.21_150400.14.75-150400.9.59.1 * openSUSE Leap 15.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-default-devel-550.78-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * openSUSE Leap 15.4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-64kb-devel-550.78-150400.9.59.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-64kb-devel-550.78-150400.9.59.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-default-devel-550.78-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-64kb-devel-550.78-150400.9.59.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-default-devel-550.78-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * nvidia-open-driver-G06-signed-default-devel-550.78-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-64kb-devel-550.78-150400.9.59.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-default-devel-550.78-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * nvidia-open-driver-G06-signed-default-devel-550.78-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * SUSE Manager Proxy 4.3 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Manager Proxy 4.3 (x86_64) * nvidia-open-driver-G06-signed-default-devel-550.78-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * SUSE Manager Retail Branch Server 4.3 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * nvidia-open-driver-G06-signed-default-devel-550.78-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 * SUSE Manager Server 4.3 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.78-150400.9.30.1 * SUSE Manager Server 4.3 (x86_64) * nvidia-open-driver-G06-signed-default-devel-550.78-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150400.24.116-150400.9.59.1 * nvidia-open-driver-G06-signed-debugsource-550.78-150400.9.59.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222972 * https://bugzilla.suse.com/show_bug.cgi?id=1223454

1 0

SUSE-SU-2024:1539-1: moderate: Security update for bouncycastle
by OPENSUSE-UPDATES 07 May '24

07 May '24

# Security update for bouncycastle Announcement ID: SUSE-SU-2024:1539-1 Rating: moderate References: * bsc#1223252 Cross-References: * CVE-2024-30171 CVSS scores: * CVE-2024-30171 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for bouncycastle fixes the following issues: Update to version 1.78.1, including fixes for: * CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1539=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1539=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1539=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1539=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1539=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1539=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1539=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1539=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1539=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1539=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1539=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1539=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1539=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1539=1 ## Package List: * openSUSE Leap 15.5 (noarch) * bouncycastle-mail-1.78.1-150200.3.29.1 * bouncycastle-tls-1.78.1-150200.3.29.1 * bouncycastle-jmail-1.78.1-150200.3.29.1 * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-javadoc-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * Development Tools Module 15-SP5 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * SUSE Enterprise Storage 7.1 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 ## References: * https://www.suse.com/security/cve/CVE-2024-30171.html * https://bugzilla.suse.com/show_bug.cgi?id=1223252

1 0

SUSE-SU-2024:1540-1: moderate: Security update for xen
by OPENSUSE-UPDATES 07 May '24

07 May '24

# Security update for xen Announcement ID: SUSE-SU-2024:1540-1 Rating: moderate References: * bsc#1221984 * bsc#1222302 * bsc#1222453 Cross-References: * CVE-2023-46842 * CVE-2024-2201 * CVE-2024-31142 CVSS scores: * CVE-2023-46842 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2024-2201 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-31142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2024-2201: Mitigation for Native Branch History Injection (XSA-456, bsc#1222453) * CVE-2023-46842: HVM hypercalls may trigger Xen bug check (XSA-454, bsc#1221984) * CVE-2024-31142: Fixed incorrect logic for BTC/SRSO mitigations (XSA-455, bsc#1222302) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1540=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1540=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1540=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1540=1 ## Package List: * openSUSE Leap 15.3 (aarch64 x86_64 i586) * xen-debugsource-4.14.6_14-150300.3.72.1 * xen-tools-domU-4.14.6_14-150300.3.72.1 * xen-libs-debuginfo-4.14.6_14-150300.3.72.1 * xen-devel-4.14.6_14-150300.3.72.1 * xen-tools-domU-debuginfo-4.14.6_14-150300.3.72.1 * xen-libs-4.14.6_14-150300.3.72.1 * openSUSE Leap 15.3 (x86_64) * xen-libs-32bit-4.14.6_14-150300.3.72.1 * xen-libs-32bit-debuginfo-4.14.6_14-150300.3.72.1 * openSUSE Leap 15.3 (aarch64 x86_64) * xen-tools-debuginfo-4.14.6_14-150300.3.72.1 * xen-doc-html-4.14.6_14-150300.3.72.1 * xen-tools-4.14.6_14-150300.3.72.1 * xen-4.14.6_14-150300.3.72.1 * openSUSE Leap 15.3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_14-150300.3.72.1 * openSUSE Leap 15.3 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.14.6_14-150300.3.72.1 * xen-libs-64bit-4.14.6_14-150300.3.72.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * xen-debugsource-4.14.6_14-150300.3.72.1 * xen-libs-debuginfo-4.14.6_14-150300.3.72.1 * xen-libs-4.14.6_14-150300.3.72.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * xen-debugsource-4.14.6_14-150300.3.72.1 * xen-libs-debuginfo-4.14.6_14-150300.3.72.1 * xen-libs-4.14.6_14-150300.3.72.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * xen-debugsource-4.14.6_14-150300.3.72.1 * xen-libs-debuginfo-4.14.6_14-150300.3.72.1 * xen-libs-4.14.6_14-150300.3.72.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46842.html * https://www.suse.com/security/cve/CVE-2024-2201.html * https://www.suse.com/security/cve/CVE-2024-31142.html * https://bugzilla.suse.com/show_bug.cgi?id=1221984 * https://bugzilla.suse.com/show_bug.cgi?id=1222302 * https://bugzilla.suse.com/show_bug.cgi?id=1222453

1 0

SUSE-SU-2024:1535-1: important: Security update for flatpak
by OPENSUSE-UPDATES 06 May '24

06 May '24

# Security update for flatpak Announcement ID: SUSE-SU-2024:1535-1 Rating: important References: * bsc#1223110 Cross-References: * CVE-2024-32462 CVSS scores: * CVE-2024-32462 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for flatpak fixes the following issues: * CVE-2024-32462: Fixed arbitrary code execution outside sandbox via malicious app due to insufficient 'command' argument sanitization (bsc#1223110) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1535=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1535=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1535=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1535=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1535=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1535=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libflatpak0-1.12.8-150400.3.6.1 * flatpak-zsh-completion-1.12.8-150400.3.6.1 * flatpak-debugsource-1.12.8-150400.3.6.1 * typelib-1_0-Flatpak-1_0-1.12.8-150400.3.6.1 * system-user-flatpak-1.12.8-150400.3.6.1 * flatpak-devel-1.12.8-150400.3.6.1 * flatpak-debuginfo-1.12.8-150400.3.6.1 * flatpak-1.12.8-150400.3.6.1 * libflatpak0-debuginfo-1.12.8-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libflatpak0-1.12.8-150400.3.6.1 * flatpak-zsh-completion-1.12.8-150400.3.6.1 * flatpak-debugsource-1.12.8-150400.3.6.1 * typelib-1_0-Flatpak-1_0-1.12.8-150400.3.6.1 * system-user-flatpak-1.12.8-150400.3.6.1 * flatpak-devel-1.12.8-150400.3.6.1 * flatpak-debuginfo-1.12.8-150400.3.6.1 * flatpak-1.12.8-150400.3.6.1 * libflatpak0-debuginfo-1.12.8-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libflatpak0-1.12.8-150400.3.6.1 * flatpak-zsh-completion-1.12.8-150400.3.6.1 * flatpak-debugsource-1.12.8-150400.3.6.1 * typelib-1_0-Flatpak-1_0-1.12.8-150400.3.6.1 * system-user-flatpak-1.12.8-150400.3.6.1 * flatpak-devel-1.12.8-150400.3.6.1 * flatpak-debuginfo-1.12.8-150400.3.6.1 * flatpak-1.12.8-150400.3.6.1 * libflatpak0-debuginfo-1.12.8-150400.3.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libflatpak0-1.12.8-150400.3.6.1 * flatpak-zsh-completion-1.12.8-150400.3.6.1 * flatpak-debugsource-1.12.8-150400.3.6.1 * typelib-1_0-Flatpak-1_0-1.12.8-150400.3.6.1 * system-user-flatpak-1.12.8-150400.3.6.1 * flatpak-devel-1.12.8-150400.3.6.1 * flatpak-debuginfo-1.12.8-150400.3.6.1 * flatpak-1.12.8-150400.3.6.1 * libflatpak0-debuginfo-1.12.8-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libflatpak0-1.12.8-150400.3.6.1 * flatpak-zsh-completion-1.12.8-150400.3.6.1 * flatpak-debugsource-1.12.8-150400.3.6.1 * typelib-1_0-Flatpak-1_0-1.12.8-150400.3.6.1 * system-user-flatpak-1.12.8-150400.3.6.1 * flatpak-devel-1.12.8-150400.3.6.1 * flatpak-debuginfo-1.12.8-150400.3.6.1 * flatpak-1.12.8-150400.3.6.1 * libflatpak0-debuginfo-1.12.8-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libflatpak0-1.12.8-150400.3.6.1 * flatpak-zsh-completion-1.12.8-150400.3.6.1 * flatpak-debugsource-1.12.8-150400.3.6.1 * typelib-1_0-Flatpak-1_0-1.12.8-150400.3.6.1 * system-user-flatpak-1.12.8-150400.3.6.1 * flatpak-devel-1.12.8-150400.3.6.1 * flatpak-debuginfo-1.12.8-150400.3.6.1 * flatpak-1.12.8-150400.3.6.1 * libflatpak0-debuginfo-1.12.8-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-32462.html * https://bugzilla.suse.com/show_bug.cgi?id=1223110

1 0

SUSE-SU-2024:1536-1: important: Security update for flatpak
by OPENSUSE-UPDATES 06 May '24

06 May '24

# Security update for flatpak Announcement ID: SUSE-SU-2024:1536-1 Rating: important References: * bsc#1223110 Cross-References: * CVE-2024-32462 CVSS scores: * CVE-2024-32462 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for flatpak fixes the following issues: * CVE-2024-32462: Fixed arbitrary code execution outside sandbox via malicious app due to insufficient 'command' argument sanitization (bsc#1223110) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1536=1 openSUSE-SLE-15.5-2024-1536=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-1536=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * typelib-1_0-Flatpak-1_0-1.14.5-150500.3.9.1 * flatpak-debugsource-1.14.5-150500.3.9.1 * libflatpak0-debuginfo-1.14.5-150500.3.9.1 * flatpak-devel-1.14.5-150500.3.9.1 * flatpak-1.14.5-150500.3.9.1 * flatpak-debuginfo-1.14.5-150500.3.9.1 * libflatpak0-1.14.5-150500.3.9.1 * openSUSE Leap 15.5 (noarch) * system-user-flatpak-1.14.5-150500.3.9.1 * flatpak-remote-flathub-1.14.5-150500.3.9.1 * flatpak-zsh-completion-1.14.5-150500.3.9.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * typelib-1_0-Flatpak-1_0-1.14.5-150500.3.9.1 * flatpak-debugsource-1.14.5-150500.3.9.1 * libflatpak0-debuginfo-1.14.5-150500.3.9.1 * flatpak-devel-1.14.5-150500.3.9.1 * flatpak-1.14.5-150500.3.9.1 * flatpak-debuginfo-1.14.5-150500.3.9.1 * libflatpak0-1.14.5-150500.3.9.1 * Desktop Applications Module 15-SP5 (noarch) * system-user-flatpak-1.14.5-150500.3.9.1 * flatpak-remote-flathub-1.14.5-150500.3.9.1 * flatpak-zsh-completion-1.14.5-150500.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-32462.html * https://bugzilla.suse.com/show_bug.cgi?id=1223110

1 0

SUSE-OU-2024:1501-1: low: Optional update for update-test-trivial
by OPENSUSE-UPDATES 06 May '24

06 May '24

# Optional update for update-test-trivial Announcement ID: SUSE-OU-2024:1501-1 Rating: low References: Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for update-test-trivial fixes the following issue: * Test maintenance workflow for new products. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1501=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1501=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * update-test-32bit-pkg-32bit-5.1-150200.37.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * update-test-interactive-5.1-150200.37.1 * update-test-security-5.1-150200.37.1 * update-test-broken-5.1-150200.37.1 * update-test-feature-5.1-150200.37.1 * update-test-retracted-5.1-150200.37.1 * update-test-trivial-5.1-150200.37.1 * update-test-optional-5.1-150200.37.1 * update-test-affects-package-manager-5.1-150200.37.1 * update-test-32bit-pkg-5.1-150200.37.1 * update-test-reboot-needed-5.1-150200.37.1 * update-test-relogin-suggested-5.1-150200.37.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * update-test-interactive-5.1-150200.37.1 * update-test-security-5.1-150200.37.1 * update-test-broken-5.1-150200.37.1 * update-test-feature-5.1-150200.37.1 * update-test-retracted-5.1-150200.37.1 * update-test-trivial-5.1-150200.37.1 * update-test-optional-5.1-150200.37.1 * update-test-affects-package-manager-5.1-150200.37.1 * update-test-reboot-needed-5.1-150200.37.1 * update-test-relogin-suggested-5.1-150200.37.1

1 0

SUSE-SU-2024:1509-1: important: Security update for SUSE Manager Client Tools
by OPENSUSE-UPDATES 06 May '24

06 May '24

# Security update for SUSE Manager Client Tools Announcement ID: SUSE-SU-2024:1509-1 Rating: important References: * bsc#1008037 * bsc#1008038 * bsc#1010940 * bsc#1019021 * bsc#1038785 * bsc#1059235 * bsc#1099805 * bsc#1166389 * bsc#1171823 * bsc#1174145 * bsc#1174302 * bsc#1175993 * bsc#1177948 * bsc#1216854 * bsc#1219002 * bsc#1219912 * bsc#1221092 * bsc#1221465 * bsc#1222155 * jsc#MSQA-760 Cross-References: * CVE-2016-8614 * CVE-2016-8628 * CVE-2016-8647 * CVE-2016-9587 * CVE-2017-7550 * CVE-2018-10874 * CVE-2020-10744 * CVE-2020-14330 * CVE-2020-14332 * CVE-2020-14365 * CVE-2020-1753 * CVE-2023-5764 * CVE-2023-6152 * CVE-2024-0690 * CVE-2024-1313 CVSS scores: * CVE-2016-8614 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2016-8628 ( NVD ): 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2016-8647 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2016-8647 ( NVD ): 2.2 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2016-9587 ( NVD ): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2017-7550 ( SUSE ): 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2017-7550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2017-7550 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2018-10874 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2018-10874 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2020-10744 ( SUSE ): 5.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L * CVE-2020-10744 ( NVD ): 5.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L * CVE-2020-14330 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2020-14330 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2020-14332 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2020-14332 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2020-14365 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2020-14365 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2020-1753 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-5764 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2023-5764 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6152 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2024-0690 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-0690 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-1313 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 * SUSE Linux Enterprise Desktop 15 SP1 * SUSE Linux Enterprise Desktop 15 SP2 * SUSE Linux Enterprise Desktop 15 SP3 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.0 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP1 * SUSE Linux Enterprise Real Time 15 SP2 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Client Tools for SLE 15 * SUSE Manager Client Tools for SLE Micro 5 * SUSE Manager Proxy 4.3 * SUSE Manager Proxy 4.3 Module 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Package Hub 15 15-SP5 An update that solves 15 vulnerabilities, contains one feature and has four security fixes can now be installed. ## Description: This update fixes the following issues: POS_Image-Graphical7 was updated to version 0.1.1710765237.46af599: * Version 0.1.1710765237.46af599 * Moved image services to dracut-saltboot package * Use salt bundle * Version 0.1.1645440615.7f1328c * Removed deprecated kiwi functions POS_Image-JeOS7 was updated to version 0.1.1710765237.46af599: * Version 0.1.1710765237.46af599 * Moved image services to dracut-saltboot package * Use salt bundle * Version 0.1.1645440615.7f1328c * Removed deprecated kiwi functions ansible received the following fixes: * Security issues fixed: * CVE-2023-5764: Address issues where internal templating can cause unsafe variables to lose their unsafe designation (bsc#1216854) * Breaking changes: assert - Nested templating may result in an inability for the conditional to be evaluated. See the porting guide for more information. * CVE-2024-0690: Address issue where ANSIBLE_NO_LOG was ignored (bsc#1219002) * CVE-2020-14365: Ensure that packages are GPG validated (bsc#1175993) * CVE-2020-10744: Fixed insecure temporary directory creation (bsc#1171823) * CVE-2018-10874: Fixed inventory variables loading from current working directory when running ad-hoc command that can lead to code execution (bsc#1099805) * Bugs fixed: * Don't Require python-coverage, it is needed only for testing (bsc#1177948) dracut-saltboot was updated to version 0.1.1710765237.46af599: * Version 0.1.1710765237.46af599 * Load only first available leaseinfo (bsc#1221092) * Version 0.1.1681904360.84ef141 grafana was updated to version 9.5.18: * Grafana now requires Go 1.20 * Security issues fixed: * CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155) * CVE-2023-6152: Add email verification when updating user email (bsc#1219912) * Other non-security related changes: * Version 9.5.17: * [FEATURE] Alerting: Backport use Alertmanager API v2 * Version 9.5.16: * [BUGFIX] Annotations: Split cleanup into separate queries and deletes to avoid deadlocks on MySQL * Version 9.5.15: * [FEATURE] Alerting: Attempt to retry retryable errors * Version 9.5.14: * [BUGFIX] Alerting: Fix state manager to not keep datasource_uid and ref_id labels in state after Error * [BUGFIX] Transformations: Config overrides being lost when config from query transform is applied * [BUGFIX] LDAP: Fix enable users on successfull login * Version 9.5.13: * [BUGFIX] BrowseDashboards: Only remember the most recent expanded folder * [BUGFIX] Licensing: Pass func to update env variables when starting plugin * Version 9.5.12: * [FEATURE] Azure: Add support for Workload Identity authentication * Version 9.5.9: * [FEATURE] SSE: Fix DSNode to not panic when response has empty response * [FEATURE] Prometheus: Handle the response with different field key order * [BUGFIX] LDAP: Fix user disabling mgr-daemon was updated to version 4.3.9-0: * Version 4.3.9-0 * Update translation strings spacecmd was updated to version 4.3.27-0: * Version 4.3.27-0 * Update translation strings spacewalk-client-tools was updated to version 4.3.19-0: * Version 4.3.19-0 * Update translation strings spacewalk-koan was updated to version version 4.3.6-0: * Version 4.3.6-0 * Change Docker image location for test uyuni-common-libs was updated to version 4.3.10-0: * Version 4.3.10-0 * Add support for package signature type V4 RSA/SHA384 * Add support for package signature type V4 RSA/SHA512 (bsc#1221465) uyuni-proxy-systemd-services was updated to version 4.3.12-0: * Version 4.3.12-0 * Update to SUSE Manager 4.3.12 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1509=1 * SUSE Manager Client Tools for SLE 15 zypper in -t patch SUSE-SLE-Manager-Tools-15-2024-1509=1 * SUSE Manager Client Tools for SLE Micro 5 zypper in -t patch SUSE-SLE-Manager-Tools-For-Micro-5-2024-1509=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1509=1 * SUSE Manager Proxy 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2024-1509=1 ## Package List: * openSUSE Leap 15.5 (noarch) * POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2 * ansible-2.9.27-150000.1.17.2 * ansible-test-2.9.27-150000.1.17.2 * ansible-doc-2.9.27-150000.1.17.2 * spacecmd-4.3.27-150000.3.116.2 * POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2 * dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-promu-0.14.0-150000.3.18.2 * SUSE Manager Client Tools for SLE 15 (noarch) * python3-spacewalk-koan-4.3.6-150000.3.33.2 * POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2 * ansible-2.9.27-150000.1.17.2 * python3-spacewalk-client-setup-4.3.19-150000.3.89.2 * spacewalk-client-tools-4.3.19-150000.3.89.2 * uyuni-proxy-systemd-services-4.3.12-150000.1.21.2 * mgr-daemon-4.3.9-150000.1.47.2 * ansible-doc-2.9.27-150000.1.17.2 * spacewalk-koan-4.3.6-150000.3.33.2 * spacecmd-4.3.27-150000.3.116.2 * POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2 * spacewalk-client-setup-4.3.19-150000.3.89.2 * python3-spacewalk-check-4.3.19-150000.3.89.2 * python3-spacewalk-client-tools-4.3.19-150000.3.89.2 * dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2 * spacewalk-check-4.3.19-150000.3.89.2 * SUSE Manager Client Tools for SLE 15 (aarch64 ppc64le s390x x86_64) * grafana-debuginfo-9.5.18-150000.1.63.2 * python3-uyuni-common-libs-4.3.10-150000.1.39.2 * grafana-9.5.18-150000.1.63.2 * SUSE Manager Client Tools for SLE Micro 5 (noarch) * uyuni-proxy-systemd-services-4.3.12-150000.1.21.2 * dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-promu-0.14.0-150000.3.18.2 * SUSE Manager Proxy 4.3 Module 4.3 (noarch) * ansible-2.9.27-150000.1.17.2 * ansible-doc-2.9.27-150000.1.17.2 * uyuni-proxy-systemd-services-4.3.12-150000.1.21.2 ## References: * https://www.suse.com/security/cve/CVE-2016-8614.html * https://www.suse.com/security/cve/CVE-2016-8628.html * https://www.suse.com/security/cve/CVE-2016-8647.html * https://www.suse.com/security/cve/CVE-2016-9587.html * https://www.suse.com/security/cve/CVE-2017-7550.html * https://www.suse.com/security/cve/CVE-2018-10874.html * https://www.suse.com/security/cve/CVE-2020-10744.html * https://www.suse.com/security/cve/CVE-2020-14330.html * https://www.suse.com/security/cve/CVE-2020-14332.html * https://www.suse.com/security/cve/CVE-2020-14365.html * https://www.suse.com/security/cve/CVE-2020-1753.html * https://www.suse.com/security/cve/CVE-2023-5764.html * https://www.suse.com/security/cve/CVE-2023-6152.html * https://www.suse.com/security/cve/CVE-2024-0690.html * https://www.suse.com/security/cve/CVE-2024-1313.html * https://bugzilla.suse.com/show_bug.cgi?id=1008037 * https://bugzilla.suse.com/show_bug.cgi?id=1008038 * https://bugzilla.suse.com/show_bug.cgi?id=1010940 * https://bugzilla.suse.com/show_bug.cgi?id=1019021 * https://bugzilla.suse.com/show_bug.cgi?id=1038785 * https://bugzilla.suse.com/show_bug.cgi?id=1059235 * https://bugzilla.suse.com/show_bug.cgi?id=1099805 * https://bugzilla.suse.com/show_bug.cgi?id=1166389 * https://bugzilla.suse.com/show_bug.cgi?id=1171823 * https://bugzilla.suse.com/show_bug.cgi?id=1174145 * https://bugzilla.suse.com/show_bug.cgi?id=1174302 * https://bugzilla.suse.com/show_bug.cgi?id=1175993 * https://bugzilla.suse.com/show_bug.cgi?id=1177948 * https://bugzilla.suse.com/show_bug.cgi?id=1216854 * https://bugzilla.suse.com/show_bug.cgi?id=1219002 * https://bugzilla.suse.com/show_bug.cgi?id=1219912 * https://bugzilla.suse.com/show_bug.cgi?id=1221092 * https://bugzilla.suse.com/show_bug.cgi?id=1221465 * https://bugzilla.suse.com/show_bug.cgi?id=1222155 * https://jira.suse.com/browse/MSQA-760

1 0

SUSE-RU-2024:1527-1: moderate: Recommended update for salt
by OPENSUSE-UPDATES 06 May '24

06 May '24

# Recommended update for salt Announcement ID: SUSE-RU-2024:1527-1 Rating: moderate References: * bsc#1211649 * bsc#1211888 * bsc#1216850 * bsc#1218482 * bsc#1219001 * jsc#MSQA-760 Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that contains one feature and has five fixes can now be installed. ## Description: This update for salt fixes the following issues: * Convert oscap output to UTF-8 * Make Salt compatible with Python 3.11 * Ignore non-ascii chars in oscap output (bsc#1219001) * Fix detected issues in Salt tests when running on VMs * Make importing seco.range thread safe (bsc#1211649) * Fix problematic tests and allow smooth tests executions on containers * Discover Ansible playbook files as " _.yml " or "_.yaml" files (bsc#1211888) * Provide user(salt)/group(salt) capabilities for RPM 4.19 * Extend dependencies for python3-salt-testsuiteand python3-salt packages * Improve Salt and testsuite packages multibuild * Enable multibuilld and create test flavor * Prevent exceptions with fileserver.update when called via state (bsc#1218482) * Improve pip target override condition with VENV_PIP_TARGET environment variable (bsc#1216850) * Fixed KeyError in logs when running a state that fails ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1527=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1527=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1527=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1527=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1527=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1527=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1527=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1527=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * salt-3006.0-150300.53.73.2 * salt-cloud-3006.0-150300.53.73.2 * salt-ssh-3006.0-150300.53.73.2 * salt-standalone-formulas-configuration-3006.0-150300.53.73.2 * salt-transactional-update-3006.0-150300.53.73.2 * salt-doc-3006.0-150300.53.73.2 * python3-salt-3006.0-150300.53.73.2 * python3-salt-testsuite-3006.0-150300.53.73.1 * salt-minion-3006.0-150300.53.73.2 * salt-master-3006.0-150300.53.73.2 * salt-syndic-3006.0-150300.53.73.2 * salt-proxy-3006.0-150300.53.73.2 * salt-api-3006.0-150300.53.73.2 * openSUSE Leap 15.3 (noarch) * salt-fish-completion-3006.0-150300.53.73.2 * salt-zsh-completion-3006.0-150300.53.73.2 * salt-bash-completion-3006.0-150300.53.73.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * salt-3006.0-150300.53.73.2 * salt-cloud-3006.0-150300.53.73.2 * salt-ssh-3006.0-150300.53.73.2 * salt-standalone-formulas-configuration-3006.0-150300.53.73.2 * salt-doc-3006.0-150300.53.73.2 * python3-salt-3006.0-150300.53.73.2 * salt-minion-3006.0-150300.53.73.2 * salt-master-3006.0-150300.53.73.2 * salt-syndic-3006.0-150300.53.73.2 * salt-proxy-3006.0-150300.53.73.2 * salt-api-3006.0-150300.53.73.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * salt-fish-completion-3006.0-150300.53.73.2 * salt-zsh-completion-3006.0-150300.53.73.2 * salt-bash-completion-3006.0-150300.53.73.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * salt-3006.0-150300.53.73.2 * salt-cloud-3006.0-150300.53.73.2 * salt-ssh-3006.0-150300.53.73.2 * salt-standalone-formulas-configuration-3006.0-150300.53.73.2 * salt-transactional-update-3006.0-150300.53.73.2 * salt-doc-3006.0-150300.53.73.2 * python3-salt-3006.0-150300.53.73.2 * salt-minion-3006.0-150300.53.73.2 * salt-master-3006.0-150300.53.73.2 * salt-syndic-3006.0-150300.53.73.2 * salt-proxy-3006.0-150300.53.73.2 * salt-api-3006.0-150300.53.73.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * salt-fish-completion-3006.0-150300.53.73.2 * salt-zsh-completion-3006.0-150300.53.73.2 * salt-bash-completion-3006.0-150300.53.73.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * salt-3006.0-150300.53.73.2 * salt-cloud-3006.0-150300.53.73.2 * salt-ssh-3006.0-150300.53.73.2 * salt-standalone-formulas-configuration-3006.0-150300.53.73.2 * salt-doc-3006.0-150300.53.73.2 * python3-salt-3006.0-150300.53.73.2 * salt-minion-3006.0-150300.53.73.2 * salt-master-3006.0-150300.53.73.2 * salt-syndic-3006.0-150300.53.73.2 * salt-proxy-3006.0-150300.53.73.2 * salt-api-3006.0-150300.53.73.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * salt-fish-completion-3006.0-150300.53.73.2 * salt-zsh-completion-3006.0-150300.53.73.2 * salt-bash-completion-3006.0-150300.53.73.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * salt-3006.0-150300.53.73.2 * salt-cloud-3006.0-150300.53.73.2 * salt-ssh-3006.0-150300.53.73.2 * salt-standalone-formulas-configuration-3006.0-150300.53.73.2 * salt-transactional-update-3006.0-150300.53.73.2 * salt-doc-3006.0-150300.53.73.2 * python3-salt-3006.0-150300.53.73.2 * salt-minion-3006.0-150300.53.73.2 * salt-master-3006.0-150300.53.73.2 * salt-syndic-3006.0-150300.53.73.2 * salt-proxy-3006.0-150300.53.73.2 * salt-api-3006.0-150300.53.73.2 * SUSE Enterprise Storage 7.1 (noarch) * salt-fish-completion-3006.0-150300.53.73.2 * salt-zsh-completion-3006.0-150300.53.73.2 * salt-bash-completion-3006.0-150300.53.73.2 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * salt-3006.0-150300.53.73.2 * salt-minion-3006.0-150300.53.73.2 * salt-transactional-update-3006.0-150300.53.73.2 * python3-salt-3006.0-150300.53.73.2 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * salt-3006.0-150300.53.73.2 * salt-minion-3006.0-150300.53.73.2 * salt-transactional-update-3006.0-150300.53.73.2 * python3-salt-3006.0-150300.53.73.2 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * salt-3006.0-150300.53.73.2 * salt-minion-3006.0-150300.53.73.2 * salt-transactional-update-3006.0-150300.53.73.2 * python3-salt-3006.0-150300.53.73.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1211649 * https://bugzilla.suse.com/show_bug.cgi?id=1211888 * https://bugzilla.suse.com/show_bug.cgi?id=1216850 * https://bugzilla.suse.com/show_bug.cgi?id=1218482 * https://bugzilla.suse.com/show_bug.cgi?id=1219001 * https://jira.suse.com/browse/MSQA-760

1 0

SUSE-RU-2024:1528-1: moderate: Recommended update for salt
by OPENSUSE-UPDATES 06 May '24

06 May '24

# Recommended update for salt Announcement ID: SUSE-RU-2024:1528-1 Rating: moderate References: * bsc#1211649 * bsc#1211888 * bsc#1216850 * bsc#1218482 * bsc#1219001 * jsc#MSQA-760 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has five fixes can now be installed. ## Description: This update for salt fixes the following issues: * Convert oscap output to UTF-8 * Make Salt compatible with Python 3.11 * Ignore non-ascii chars in oscap output (bsc#1219001) * Fix detected issues in Salt tests when running on VMs * Make importing seco.range thread safe (bsc#1211649) * Fix problematic tests and allow smooth tests executions on containers * Discover Ansible playbook files as " _.yml " or "_.yaml" files (bsc#1211888) * Provide user(salt)/group(salt) capabilities for RPM 4.19 * Extend dependencies for python3-salt-testsuiteand python3-salt packages * Improve Salt and testsuite packages multibuild * Enable multibuilld and create test flavor * Prevent exceptions with fileserver.update when called via state (bsc#1218482) * Improve pip target override condition with VENV_PIP_TARGET environment variable (bsc#1216850) * Fixed KeyError in logs when running a state that fails ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1528=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1528=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1528=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1528=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1528=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1528=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1528=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1528=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1528=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1528=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1528=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1528=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1528=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1528=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1528=1 ## Package List: * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * salt-minion-3006.0-150400.8.57.2 * salt-master-3006.0-150400.8.57.2 * salt-syndic-3006.0-150400.8.57.2 * salt-ssh-3006.0-150400.8.57.2 * salt-cloud-3006.0-150400.8.57.2 * salt-api-3006.0-150400.8.57.2 * salt-proxy-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * salt-standalone-formulas-configuration-3006.0-150400.8.57.2 * salt-3006.0-150400.8.57.2 * salt-doc-3006.0-150400.8.57.2 * SUSE Manager Server 4.3 (noarch) * salt-zsh-completion-3006.0-150400.8.57.2 * salt-bash-completion-3006.0-150400.8.57.2 * salt-fish-completion-3006.0-150400.8.57.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python3-salt-testsuite-3006.0-150400.8.57.1 * salt-minion-3006.0-150400.8.57.2 * salt-master-3006.0-150400.8.57.2 * salt-syndic-3006.0-150400.8.57.2 * salt-ssh-3006.0-150400.8.57.2 * salt-cloud-3006.0-150400.8.57.2 * salt-api-3006.0-150400.8.57.2 * salt-transactional-update-3006.0-150400.8.57.2 * salt-proxy-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * salt-standalone-formulas-configuration-3006.0-150400.8.57.2 * salt-3006.0-150400.8.57.2 * salt-doc-3006.0-150400.8.57.2 * openSUSE Leap 15.4 (noarch) * salt-zsh-completion-3006.0-150400.8.57.2 * salt-bash-completion-3006.0-150400.8.57.2 * salt-fish-completion-3006.0-150400.8.57.2 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * salt-3006.0-150400.8.57.2 * salt-transactional-update-3006.0-150400.8.57.2 * salt-minion-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * salt-3006.0-150400.8.57.2 * salt-transactional-update-3006.0-150400.8.57.2 * salt-minion-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * salt-3006.0-150400.8.57.2 * salt-transactional-update-3006.0-150400.8.57.2 * salt-minion-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * salt-3006.0-150400.8.57.2 * salt-transactional-update-3006.0-150400.8.57.2 * salt-minion-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * salt-3006.0-150400.8.57.2 * salt-transactional-update-3006.0-150400.8.57.2 * salt-minion-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * salt-3006.0-150400.8.57.2 * salt-transactional-update-3006.0-150400.8.57.2 * salt-minion-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * salt-minion-3006.0-150400.8.57.2 * salt-master-3006.0-150400.8.57.2 * salt-syndic-3006.0-150400.8.57.2 * salt-ssh-3006.0-150400.8.57.2 * salt-cloud-3006.0-150400.8.57.2 * salt-api-3006.0-150400.8.57.2 * salt-proxy-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * salt-standalone-formulas-configuration-3006.0-150400.8.57.2 * salt-3006.0-150400.8.57.2 * salt-doc-3006.0-150400.8.57.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * salt-zsh-completion-3006.0-150400.8.57.2 * salt-bash-completion-3006.0-150400.8.57.2 * salt-fish-completion-3006.0-150400.8.57.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * salt-minion-3006.0-150400.8.57.2 * salt-master-3006.0-150400.8.57.2 * salt-syndic-3006.0-150400.8.57.2 * salt-ssh-3006.0-150400.8.57.2 * salt-cloud-3006.0-150400.8.57.2 * salt-api-3006.0-150400.8.57.2 * salt-proxy-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * salt-standalone-formulas-configuration-3006.0-150400.8.57.2 * salt-3006.0-150400.8.57.2 * salt-doc-3006.0-150400.8.57.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * salt-zsh-completion-3006.0-150400.8.57.2 * salt-bash-completion-3006.0-150400.8.57.2 * salt-fish-completion-3006.0-150400.8.57.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * salt-3006.0-150400.8.57.2 * salt-doc-3006.0-150400.8.57.2 * salt-minion-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * salt-zsh-completion-3006.0-150400.8.57.2 * salt-bash-completion-3006.0-150400.8.57.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * salt-minion-3006.0-150400.8.57.2 * salt-master-3006.0-150400.8.57.2 * salt-syndic-3006.0-150400.8.57.2 * salt-ssh-3006.0-150400.8.57.2 * salt-cloud-3006.0-150400.8.57.2 * salt-api-3006.0-150400.8.57.2 * salt-transactional-update-3006.0-150400.8.57.2 * salt-proxy-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * salt-standalone-formulas-configuration-3006.0-150400.8.57.2 * salt-3006.0-150400.8.57.2 * salt-doc-3006.0-150400.8.57.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * salt-zsh-completion-3006.0-150400.8.57.2 * salt-bash-completion-3006.0-150400.8.57.2 * salt-fish-completion-3006.0-150400.8.57.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * salt-minion-3006.0-150400.8.57.2 * salt-master-3006.0-150400.8.57.2 * salt-syndic-3006.0-150400.8.57.2 * salt-ssh-3006.0-150400.8.57.2 * salt-cloud-3006.0-150400.8.57.2 * salt-api-3006.0-150400.8.57.2 * salt-proxy-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * salt-standalone-formulas-configuration-3006.0-150400.8.57.2 * salt-3006.0-150400.8.57.2 * salt-doc-3006.0-150400.8.57.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * salt-zsh-completion-3006.0-150400.8.57.2 * salt-bash-completion-3006.0-150400.8.57.2 * salt-fish-completion-3006.0-150400.8.57.2 * SUSE Manager Proxy 4.3 (x86_64) * salt-minion-3006.0-150400.8.57.2 * salt-master-3006.0-150400.8.57.2 * salt-syndic-3006.0-150400.8.57.2 * salt-ssh-3006.0-150400.8.57.2 * salt-cloud-3006.0-150400.8.57.2 * salt-api-3006.0-150400.8.57.2 * salt-proxy-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * salt-standalone-formulas-configuration-3006.0-150400.8.57.2 * salt-3006.0-150400.8.57.2 * salt-doc-3006.0-150400.8.57.2 * SUSE Manager Proxy 4.3 (noarch) * salt-zsh-completion-3006.0-150400.8.57.2 * salt-bash-completion-3006.0-150400.8.57.2 * salt-fish-completion-3006.0-150400.8.57.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * salt-minion-3006.0-150400.8.57.2 * salt-master-3006.0-150400.8.57.2 * salt-syndic-3006.0-150400.8.57.2 * salt-ssh-3006.0-150400.8.57.2 * salt-cloud-3006.0-150400.8.57.2 * salt-api-3006.0-150400.8.57.2 * salt-proxy-3006.0-150400.8.57.2 * python3-salt-3006.0-150400.8.57.2 * salt-standalone-formulas-configuration-3006.0-150400.8.57.2 * salt-3006.0-150400.8.57.2 * salt-doc-3006.0-150400.8.57.2 * SUSE Manager Retail Branch Server 4.3 (noarch) * salt-zsh-completion-3006.0-150400.8.57.2 * salt-bash-completion-3006.0-150400.8.57.2 * salt-fish-completion-3006.0-150400.8.57.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1211649 * https://bugzilla.suse.com/show_bug.cgi?id=1211888 * https://bugzilla.suse.com/show_bug.cgi?id=1216850 * https://bugzilla.suse.com/show_bug.cgi?id=1218482 * https://bugzilla.suse.com/show_bug.cgi?id=1219001 * https://jira.suse.com/browse/MSQA-760

1 0