May 2024 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2024:0144-1: moderate: Recommended update for ksh
by maintenance＠opensuse.org 27 May '24

27 May '24

openSUSE Recommended Update: Recommended update for ksh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0144-1 Rating: moderate References: #1206798 #1224057 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ksh fixes the following issues: - remove no longer needed qemu workaround - do not use posix_spawn as it lacks proper job handling [boo#1224057] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-144=1 Package List: - openSUSE Backports SLE-15-SP5 (i586 ppc64le s390x x86_64): ksh-93vu-bp155.3.3.1 ksh-devel-93vu-bp155.3.3.1 References: https://bugzilla.suse.com/1206798 https://bugzilla.suse.com/1224057

1 0

SUSE-SU-2024:1787-1: important: Security update for the Linux Kernel
by OPENSUSE-UPDATES 27 May '24

27 May '24

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2024:1787-1 Rating: important References: * bsc#1223858 * bsc#1224169 * bsc#1224340 Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * Legacy Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that has three security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. This update fixes a regression with kerberized nfs4 shares in the previous update (bsc#1223858). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1787=1 openSUSE-SLE-15.5-2024-1787=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1787=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1787=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1787=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-1787=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-1787=1 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-1787=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1787=1 ## Package List: * openSUSE Leap 15.5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (noarch) * kernel-source-vanilla-5.14.21-150500.55.65.1 * kernel-macros-5.14.21-150500.55.65.1 * kernel-docs-html-5.14.21-150500.55.65.1 * kernel-source-5.14.21-150500.55.65.1 * kernel-devel-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (nosrc ppc64le x86_64) * kernel-debug-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (ppc64le x86_64) * kernel-debug-devel-5.14.21-150500.55.65.1 * kernel-debug-devel-debuginfo-5.14.21-150500.55.65.1 * kernel-debug-debugsource-5.14.21-150500.55.65.1 * kernel-debug-debuginfo-5.14.21-150500.55.65.1 * kernel-debug-livepatch-devel-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (x86_64) * kernel-debug-vdso-5.14.21-150500.55.65.1 * kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.65.1 * kernel-default-vdso-5.14.21-150500.55.65.1 * kernel-kvmsmall-vdso-5.14.21-150500.55.65.1 * kernel-debug-vdso-debuginfo-5.14.21-150500.55.65.1 * kernel-default-vdso-debuginfo-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debuginfo-5.14.21-150500.55.65.1 * kernel-kvmsmall-debugsource-5.14.21-150500.55.65.1 * kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1 * kernel-kvmsmall-livepatch-devel-5.14.21-150500.55.65.1 * kernel-kvmsmall-devel-5.14.21-150500.55.65.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.65.1 * kernel-default-base-rebuild-5.14.21-150500.55.65.1.150500.6.29.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-obs-qa-5.14.21-150500.55.65.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.65.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.65.1 * kselftests-kmp-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-livepatch-devel-5.14.21-150500.55.65.1 * kernel-default-debugsource-5.14.21-150500.55.65.1 * kernel-default-optional-debuginfo-5.14.21-150500.55.65.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.65.1 * kernel-obs-build-debugsource-5.14.21-150500.55.65.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.65.1 * gfs2-kmp-default-5.14.21-150500.55.65.1 * reiserfs-kmp-default-5.14.21-150500.55.65.1 * kernel-default-extra-5.14.21-150500.55.65.1 * dlm-kmp-default-5.14.21-150500.55.65.1 * kernel-default-devel-5.14.21-150500.55.65.1 * kselftests-kmp-default-5.14.21-150500.55.65.1 * kernel-obs-build-5.14.21-150500.55.65.1 * kernel-default-livepatch-5.14.21-150500.55.65.1 * kernel-default-optional-5.14.21-150500.55.65.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.65.1 * cluster-md-kmp-default-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.65.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.65.1 * ocfs2-kmp-default-5.14.21-150500.55.65.1 * kernel-syms-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_65-default-1-150500.11.3.1 * kernel-livepatch-5_14_21-150500_55_65-default-debuginfo-1-150500.11.3.1 * kernel-livepatch-SLE15-SP5_Update_14-debugsource-1-150500.11.3.1 * openSUSE Leap 15.5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150500.55.65.1 * kernel-zfcpdump-debuginfo-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (nosrc) * dtb-aarch64-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (aarch64) * dlm-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * kernel-64kb-extra-5.14.21-150500.55.65.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * kernel-64kb-debugsource-5.14.21-150500.55.65.1 * dtb-amd-5.14.21-150500.55.65.1 * dtb-exynos-5.14.21-150500.55.65.1 * dtb-apple-5.14.21-150500.55.65.1 * dtb-broadcom-5.14.21-150500.55.65.1 * kernel-64kb-debuginfo-5.14.21-150500.55.65.1 * dtb-marvell-5.14.21-150500.55.65.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * reiserfs-kmp-64kb-5.14.21-150500.55.65.1 * kernel-64kb-optional-debuginfo-5.14.21-150500.55.65.1 * ocfs2-kmp-64kb-5.14.21-150500.55.65.1 * dlm-kmp-64kb-5.14.21-150500.55.65.1 * kernel-64kb-optional-5.14.21-150500.55.65.1 * dtb-nvidia-5.14.21-150500.55.65.1 * dtb-sprd-5.14.21-150500.55.65.1 * kernel-64kb-devel-5.14.21-150500.55.65.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.65.1 * dtb-xilinx-5.14.21-150500.55.65.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.65.1 * dtb-amazon-5.14.21-150500.55.65.1 * dtb-mediatek-5.14.21-150500.55.65.1 * dtb-lg-5.14.21-150500.55.65.1 * dtb-amlogic-5.14.21-150500.55.65.1 * dtb-rockchip-5.14.21-150500.55.65.1 * cluster-md-kmp-64kb-5.14.21-150500.55.65.1 * dtb-allwinner-5.14.21-150500.55.65.1 * kselftests-kmp-64kb-5.14.21-150500.55.65.1 * dtb-hisilicon-5.14.21-150500.55.65.1 * dtb-freescale-5.14.21-150500.55.65.1 * gfs2-kmp-64kb-5.14.21-150500.55.65.1 * dtb-socionext-5.14.21-150500.55.65.1 * dtb-altera-5.14.21-150500.55.65.1 * dtb-renesas-5.14.21-150500.55.65.1 * dtb-arm-5.14.21-150500.55.65.1 * dtb-apm-5.14.21-150500.55.65.1 * kernel-64kb-extra-debuginfo-5.14.21-150500.55.65.1 * dtb-qcom-5.14.21-150500.55.65.1 * kernel-64kb-livepatch-devel-5.14.21-150500.55.65.1 * dtb-cavium-5.14.21-150500.55.65.1 * openSUSE Leap 15.5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.65.1 * kernel-64kb-devel-5.14.21-150500.55.65.1 * kernel-64kb-debuginfo-5.14.21-150500.55.65.1 * kernel-64kb-debugsource-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.65.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-devel-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (noarch) * kernel-macros-5.14.21-150500.55.65.1 * kernel-devel-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.65.1 * Basesystem Module 15-SP5 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150500.55.65.1 * kernel-zfcpdump-debuginfo-5.14.21-150500.55.65.1 * Development Tools Module 15-SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.65.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kernel-obs-build-5.14.21-150500.55.65.1 * kernel-obs-build-debugsource-5.14.21-150500.55.65.1 * kernel-syms-5.14.21-150500.55.65.1 * Development Tools Module 15-SP5 (noarch) * kernel-source-5.14.21-150500.55.65.1 * Legacy Module 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.65.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.65.1 * reiserfs-kmp-default-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Live Patching 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_65-default-1-150500.11.3.1 * kernel-default-livepatch-devel-5.14.21-150500.55.65.1 * kernel-livepatch-SLE15-SP5_Update_14-debugsource-1-150500.11.3.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-debugsource-5.14.21-150500.55.65.1 * kernel-livepatch-5_14_21-150500_55_65-default-debuginfo-1-150500.11.3.1 * kernel-default-livepatch-5.14.21-150500.55.65.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-debugsource-5.14.21-150500.55.65.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.65.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.65.1 * gfs2-kmp-default-5.14.21-150500.55.65.1 * ocfs2-kmp-default-5.14.21-150500.55.65.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.65.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.65.1 * dlm-kmp-default-5.14.21-150500.55.65.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (nosrc) * kernel-default-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (nosrc) * kernel-default-5.14.21-150500.55.65.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * kernel-default-debugsource-5.14.21-150500.55.65.1 * kernel-default-extra-5.14.21-150500.55.65.1 * kernel-default-debuginfo-5.14.21-150500.55.65.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.65.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223858 * https://bugzilla.suse.com/show_bug.cgi?id=1224169 * https://bugzilla.suse.com/show_bug.cgi?id=1224340

1 0

SUSE-SU-2024:1789-1: moderate: Security update for openssl-3
by OPENSUSE-UPDATES 27 May '24

27 May '24

# Security update for openssl-3 Announcement ID: SUSE-SU-2024:1789-1 Rating: moderate References: * bsc#1224388 Cross-References: * CVE-2024-4603 CVSS scores: * CVE-2024-4603 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2024-4603: Fixed DSA parameter checks for excessive sizes before validating (bsc#1224388). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1789=1 openSUSE-SLE-15.5-2024-1789=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1789=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libopenssl3-3.0.8-150500.5.33.1 * openssl-3-debugsource-3.0.8-150500.5.33.1 * libopenssl-3-devel-3.0.8-150500.5.33.1 * openssl-3-3.0.8-150500.5.33.1 * libopenssl3-debuginfo-3.0.8-150500.5.33.1 * openssl-3-debuginfo-3.0.8-150500.5.33.1 * openSUSE Leap 15.5 (x86_64) * libopenssl-3-devel-32bit-3.0.8-150500.5.33.1 * libopenssl3-32bit-3.0.8-150500.5.33.1 * libopenssl3-32bit-debuginfo-3.0.8-150500.5.33.1 * openSUSE Leap 15.5 (noarch) * openssl-3-doc-3.0.8-150500.5.33.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl-3-devel-64bit-3.0.8-150500.5.33.1 * libopenssl3-64bit-3.0.8-150500.5.33.1 * libopenssl3-64bit-debuginfo-3.0.8-150500.5.33.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libopenssl3-3.0.8-150500.5.33.1 * openssl-3-debugsource-3.0.8-150500.5.33.1 * libopenssl-3-devel-3.0.8-150500.5.33.1 * openssl-3-3.0.8-150500.5.33.1 * libopenssl3-debuginfo-3.0.8-150500.5.33.1 * openssl-3-debuginfo-3.0.8-150500.5.33.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4603.html * https://bugzilla.suse.com/show_bug.cgi?id=1224388

1 0

SUSE-RU-2024:1790-1: moderate: Recommended update for libbpf
by OPENSUSE-UPDATES 27 May '24

27 May '24

# Recommended update for libbpf Announcement ID: SUSE-RU-2024:1790-1 Rating: moderate References: * bsc#1221101 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for libbpf fixes the following issues: * Fixed potential null pointer dereference in bpf_object__collect_prog_relos() (bsc#1221101) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1790=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1790=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libbpf0-debuginfo-0.5.0-150400.3.6.1 * libbpf0-0.5.0-150400.3.6.1 * libbpf-devel-0.5.0-150400.3.6.1 * libbpf-debugsource-0.5.0-150400.3.6.1 * openSUSE Leap 15.4 (x86_64) * libbpf0-32bit-0.5.0-150400.3.6.1 * libbpf0-32bit-debuginfo-0.5.0-150400.3.6.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libbpf0-64bit-debuginfo-0.5.0-150400.3.6.1 * libbpf0-64bit-0.5.0-150400.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libbpf0-debuginfo-0.5.0-150400.3.6.1 * libbpf0-0.5.0-150400.3.6.1 * libbpf-debugsource-0.5.0-150400.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221101

1 0

SUSE-RU-2024:1791-1: moderate: Recommended update for bpftool
by OPENSUSE-UPDATES 27 May '24

27 May '24

# Recommended update for bpftool Announcement ID: SUSE-RU-2024:1791-1 Rating: moderate References: * jsc#PED-8375 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for bpftool fixes the following issue: * Enable showing info for processes holding BPF map/prog/link/btf FDs (jsc#PED-8375) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1791=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1791=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1791=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1791=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1791=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1791=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1791=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1791=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1791=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * bpftool-5.14.21-150400.9.7.2 * bpftool-debugsource-5.14.21-150400.9.7.2 * bpftool-debuginfo-5.14.21-150400.9.7.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * bpftool-5.14.21-150400.9.7.2 * bpftool-debugsource-5.14.21-150400.9.7.2 * bpftool-debuginfo-5.14.21-150400.9.7.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * bpftool-5.14.21-150400.9.7.2 * bpftool-debugsource-5.14.21-150400.9.7.2 * bpftool-debuginfo-5.14.21-150400.9.7.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * bpftool-5.14.21-150400.9.7.2 * bpftool-debugsource-5.14.21-150400.9.7.2 * bpftool-debuginfo-5.14.21-150400.9.7.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * bpftool-5.14.21-150400.9.7.2 * bpftool-debugsource-5.14.21-150400.9.7.2 * bpftool-debuginfo-5.14.21-150400.9.7.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * bpftool-5.14.21-150400.9.7.2 * bpftool-debugsource-5.14.21-150400.9.7.2 * bpftool-debuginfo-5.14.21-150400.9.7.2 * SUSE Manager Proxy 4.3 (x86_64) * bpftool-5.14.21-150400.9.7.2 * bpftool-debugsource-5.14.21-150400.9.7.2 * bpftool-debuginfo-5.14.21-150400.9.7.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * bpftool-5.14.21-150400.9.7.2 * bpftool-debugsource-5.14.21-150400.9.7.2 * bpftool-debuginfo-5.14.21-150400.9.7.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * bpftool-5.14.21-150400.9.7.2 * bpftool-debugsource-5.14.21-150400.9.7.2 * bpftool-debuginfo-5.14.21-150400.9.7.2 ## References: * https://jira.suse.com/browse/PED-8375

1 0

openSUSE-SU-2024:0143-1: moderate: Security update for libqt5-qtnetworkauth
by opensuse-security＠opensuse.org 27 May '24

27 May '24

openSUSE Security Update: Security update for libqt5-qtnetworkauth ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0143-1 Rating: moderate References: #1224782 Cross-References: CVE-2024-36048 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libqt5-qtnetworkauth fixes the following issues: - CVE-2024-36048: Fixed data race and poor seeding in generateRandomString() (boo#1224782). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-143=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libQt5NetworkAuth5-5.15.2+kde2-bp155.3.3.1 libqt5-qtnetworkauth-devel-5.15.2+kde2-bp155.3.3.1 libqt5-qtnetworkauth-examples-5.15.2+kde2-bp155.3.3.1 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): libQt5NetworkAuth5-64bit-5.15.2+kde2-bp155.3.3.1 libqt5-qtnetworkauth-devel-64bit-5.15.2+kde2-bp155.3.3.1 - openSUSE Backports SLE-15-SP5 (noarch): libqt5-qtnetworkauth-private-headers-devel-5.15.2+kde2-bp155.3.3.1 - openSUSE Backports SLE-15-SP5 (x86_64): libQt5NetworkAuth5-32bit-5.15.2+kde2-bp155.3.3.1 libqt5-qtnetworkauth-devel-32bit-5.15.2+kde2-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2024-36048.html https://bugzilla.suse.com/1224782

1 0

openSUSE-SU-2024:0142-1: important: Security update for opera
by opensuse-security＠opensuse.org 27 May '24

27 May '24

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0142-1 Rating: important References: Cross-References: CVE-2024-4671 CVE-2024-5274 CVSS scores: CVE-2024-4671 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 110.0.5130.39 * DNA-115603 [Rich Hints] Pass trigger source to the Rich Hint * DNA-116680 Import 0-day fix for CVE-2024-5274 - Update to 110.0.5130.35 * CHR-9721 Update Chromium on desktop-stable-124-5130 to 124.0.6367.202 * DNA-114787 Crash at views::View::DoRemoveChildView(views:: View*, bool, bool, views::View*) * DNA-115640 Tab island is not properly displayed after drag&drop in light theme * DNA-116191 Fix link in RTV Euro CoS * DNA-116218 Crash at SkGpuShaderImageFilter::onFilterImage (skif::Context const&) * DNA-116241 Update affiliation link for media expert "Continue On" * DNA-116256 Crash at TabHoverCardController::UpdateHoverCard (opera::TabDataView*, TabHoverCardController::UpdateType, bool) * DNA-116270 Show 'Suggestions' inside expanding Speed Dial field * DNA-116474 Implement the no dynamic hover approach * DNA-116493 Make sure that additional elements like (Sync your browser) etc. doesn’t shift content down on page * DNA-116515 Import 0-day fix from Chromium "[wasm-gc] Only normalize JSObject targets in SetOrCopyDataProperties" * DNA-116543 Twitter migrate to x.com * DNA-116552 Change max width of the banner * DNA-116569 Twitter in Panel loading for the first time opens two Tabs automatically * DNA-116587 Translate settings strings for every language - The update to chromium 124.0.6367.202 fixes following issues: CVE-2024-4671 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2024-142=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-110.0.5130.39-lp155.3.48.1 References: https://www.suse.com/security/cve/CVE-2024-4671.html https://www.suse.com/security/cve/CVE-2024-5274.html

1 0

SUSE-RU-2024:1781-1: moderate: Recommended update for ocfs2-tools
by OPENSUSE-UPDATES 27 May '24

27 May '24

# Recommended update for ocfs2-tools Announcement ID: SUSE-RU-2024:1781-1 Rating: moderate References: * bsc#1216834 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for ocfs2-tools fixes the following issues: * `fsck.ocfs2`: Added the ability to clear jbd2 errno (bsc#1216834) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1781=1 openSUSE-SLE-15.5-2024-1781=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-1781=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * ocfs2-tools-debugsource-1.8.7-150500.12.3.1 * ocfs2-tools-o2cb-1.8.7-150500.12.3.1 * ocfs2-tools-debuginfo-1.8.7-150500.12.3.1 * ocfs2-tools-devel-1.8.7-150500.12.3.1 * ocfs2-tools-devel-static-1.8.7-150500.12.3.1 * ocfs2-tools-o2cb-debuginfo-1.8.7-150500.12.3.1 * ocfs2-tools-1.8.7-150500.12.3.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * ocfs2-tools-debugsource-1.8.7-150500.12.3.1 * ocfs2-tools-o2cb-1.8.7-150500.12.3.1 * ocfs2-tools-debuginfo-1.8.7-150500.12.3.1 * ocfs2-tools-o2cb-debuginfo-1.8.7-150500.12.3.1 * ocfs2-tools-1.8.7-150500.12.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216834

1 0

SUSE-RU-2024:1782-1: moderate: Recommended update for ocfs2-tools
by OPENSUSE-UPDATES 27 May '24

27 May '24

# Recommended update for ocfs2-tools Announcement ID: SUSE-RU-2024:1782-1 Rating: moderate References: * bsc#1216834 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for ocfs2-tools fixes the following issues: * `fsck.ocfs2`: Added the ability to clear jbd2 errno (bsc#1216834) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1782=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-1782=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * ocfs2-tools-1.8.7-150400.6.9.1 * ocfs2-tools-debuginfo-1.8.7-150400.6.9.1 * ocfs2-tools-debugsource-1.8.7-150400.6.9.1 * ocfs2-tools-o2cb-debuginfo-1.8.7-150400.6.9.1 * ocfs2-tools-devel-1.8.7-150400.6.9.1 * ocfs2-tools-devel-static-1.8.7-150400.6.9.1 * ocfs2-tools-o2cb-1.8.7-150400.6.9.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * ocfs2-tools-1.8.7-150400.6.9.1 * ocfs2-tools-debuginfo-1.8.7-150400.6.9.1 * ocfs2-tools-debugsource-1.8.7-150400.6.9.1 * ocfs2-tools-o2cb-debuginfo-1.8.7-150400.6.9.1 * ocfs2-tools-o2cb-1.8.7-150400.6.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216834

1 0

SUSE-RU-2024:1785-1: moderate: Recommended update for libpulp
by OPENSUSE-UPDATES 27 May '24

27 May '24

# Recommended update for libpulp Announcement ID: SUSE-RU-2024:1785-1 Rating: moderate References: * bsc#1221763 * bsc#1223306 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed. ## Description: This update for libpulp fixes the following issues: * Disabled ptrace_scope when building the package (bsc#1221763) * Update package * Fixed a race condition when process list is empty * Removed "Unable to get section data" error message (bsc#1223306) * Bumped asunsafe_conversion attempts from 100 to 2000 * Fixed banner test on clang-18 * Check if ptrace_scope is enabled when attempting a ptrace operation (bsc#1221763) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1785=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1785=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1785=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-1785=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-1785=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2024-1785=1 ## Package List: * openSUSE Leap 15.4 (x86_64) * libpulp-debugsource-0.3.3-150400.3.26.2 * libpulp-tools-debuginfo-0.3.3-150400.3.26.2 * libpulp0-0.3.3-150400.3.26.2 * libpulp-debuginfo-0.3.3-150400.3.26.2 * libpulp-tools-0.3.3-150400.3.26.2 * libpulp0-debuginfo-0.3.3-150400.3.26.2 * openSUSE Leap 15.5 (x86_64) * libpulp-debugsource-0.3.3-150400.3.26.2 * libpulp-tools-debuginfo-0.3.3-150400.3.26.2 * libpulp0-0.3.3-150400.3.26.2 * libpulp-debuginfo-0.3.3-150400.3.26.2 * libpulp-tools-0.3.3-150400.3.26.2 * libpulp0-debuginfo-0.3.3-150400.3.26.2 * openSUSE Leap 15.6 (x86_64) * libpulp-debugsource-0.3.3-150400.3.26.2 * libpulp-tools-debuginfo-0.3.3-150400.3.26.2 * libpulp0-0.3.3-150400.3.26.2 * libpulp-debuginfo-0.3.3-150400.3.26.2 * libpulp-tools-0.3.3-150400.3.26.2 * libpulp0-debuginfo-0.3.3-150400.3.26.2 * SUSE Linux Enterprise Live Patching 15-SP4 (x86_64) * libpulp-debugsource-0.3.3-150400.3.26.2 * libpulp-tools-debuginfo-0.3.3-150400.3.26.2 * libpulp0-0.3.3-150400.3.26.2 * libpulp-debuginfo-0.3.3-150400.3.26.2 * libpulp-tools-0.3.3-150400.3.26.2 * libpulp0-debuginfo-0.3.3-150400.3.26.2 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * libpulp-debugsource-0.3.3-150400.3.26.2 * libpulp-tools-debuginfo-0.3.3-150400.3.26.2 * libpulp0-0.3.3-150400.3.26.2 * libpulp-debuginfo-0.3.3-150400.3.26.2 * libpulp-tools-0.3.3-150400.3.26.2 * libpulp0-debuginfo-0.3.3-150400.3.26.2 * SUSE Linux Enterprise Live Patching 15-SP6 (x86_64) * libpulp-debugsource-0.3.3-150400.3.26.2 * libpulp-tools-debuginfo-0.3.3-150400.3.26.2 * libpulp0-0.3.3-150400.3.26.2 * libpulp-debuginfo-0.3.3-150400.3.26.2 * libpulp-tools-0.3.3-150400.3.26.2 * libpulp0-debuginfo-0.3.3-150400.3.26.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221763 * https://bugzilla.suse.com/show_bug.cgi?id=1223306

1 0