June 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-FU-2024:2194-1: moderate: Feature update for openldap2_5
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Feature update for openldap2_5 Announcement ID: SUSE-FU-2024:2194-1 Rating: moderate References: * jsc#PED-7178 * jsc#PED-7240 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains two features can now be installed. ## Description: This update for openldap2_5 fixes the following issues: Added initial OpenLDAP 2.5 version 2.5.17+50, (jsc#PED-7178,jsc#PED-7240) This version is in parallel to the existing openldap 2.4 version. The openldap 2.5 server is also shipped in the openldap2_5 package. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2194=1 SUSE-2024-2194=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2194=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2194=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2194=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-2194=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2194=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 * openSUSE Leap 15.5 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 * openSUSE Leap 15.6 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP5 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP6 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 ## References: * https://jira.suse.com/browse/PED-7178 * https://jira.suse.com/browse/PED-7240

1 0

SUSE-SU-2024:2197-1: important: Security update for openssl-1_1-livepatches
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for openssl-1_1-livepatches Announcement ID: SUSE-SU-2024:2197-1 Rating: important References: * bsc#1224458 * bsc#1225552 Cross-References: * CVE-2024-4741 CVSS scores: * CVE-2024-4741 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for openssl-1_1-livepatches fixes the following issues: * CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2197=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2197=1 ## Package List: * openSUSE Leap 15.4 (x86_64) * openssl-1_1-livepatches-debuginfo-0.4-150400.3.11.1 * openssl-1_1-livepatches-0.4-150400.3.11.1 * openssl-1_1-livepatches-debugsource-0.4-150400.3.11.1 * SUSE Linux Enterprise Live Patching 15-SP4 (x86_64) * openssl-1_1-livepatches-0.4-150400.3.11.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4741.html * https://bugzilla.suse.com/show_bug.cgi?id=1224458 * https://bugzilla.suse.com/show_bug.cgi?id=1225552

1 0

SUSE-SU-2024:2198-1: important: Security update for ghostscript
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for ghostscript Announcement ID: SUSE-SU-2024:2198-1 Rating: important References: * bsc#1225491 Cross-References: * CVE-2024-33871 CVSS scores: * CVE-2024-33871 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issues: * CVE-2024-33871: Prevent OPVP device arbitrary code execution via custom Driver library. (bsc#1225491) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2198=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2198=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2198=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2198=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2198=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2198=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2198=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2198=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2198=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2198=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2198=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2198=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2198=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2198=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2198=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2198=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2198=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2198=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2198=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Manager Proxy 4.3 (x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 ## References: * https://www.suse.com/security/cve/CVE-2024-33871.html * https://bugzilla.suse.com/show_bug.cgi?id=1225491

1 0

SUSE-SU-2024:2200-1: moderate: Security update for avahi
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for avahi Announcement ID: SUSE-SU-2024:2200-1 Rating: moderate References: * bsc#1216594 * bsc#1216598 * bsc#1226586 Cross-References: * CVE-2023-38469 * CVE-2023-38471 CVSS scores: * CVE-2023-38469 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38469 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38471 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38471 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for avahi fixes the following issues: * CVE-2023-38471: Fixed a reachable assertion in dbus_set_host_name. (bsc#1216594) * CVE-2023-38469: Fixed a reachable assertion in avahi_dns_packet_append_record. (bsc#1216598) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2200=1 SUSE-2024-2200=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2200=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2200=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2200=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python3-avahi-0.8-150600.15.3.1 * libavahi-qt5-devel-0.8-150600.15.3.1 * avahi-debugsource-0.8-150600.15.3.1 * libavahi-client3-0.8-150600.15.3.1 * libavahi-glib-devel-0.8-150600.15.3.1 * typelib-1_0-Avahi-0_6-0.8-150600.15.3.1 * libdns_sd-debuginfo-0.8-150600.15.3.1 * avahi-autoipd-0.8-150600.15.3.1 * libavahi-gobject0-debuginfo-0.8-150600.15.3.1 * libavahi-gobject-devel-0.8-150600.15.3.1 * avahi-debuginfo-0.8-150600.15.3.1 * python3-avahi-gtk-0.8-150600.15.3.1 * libavahi-gobject0-0.8-150600.15.3.1 * libavahi-devel-0.8-150600.15.3.1 * avahi-0.8-150600.15.3.1 * libavahi-core7-0.8-150600.15.3.1 * libdns_sd-0.8-150600.15.3.1 * libavahi-common3-debuginfo-0.8-150600.15.3.1 * avahi-compat-howl-devel-0.8-150600.15.3.1 * libavahi-libevent1-0.8-150600.15.3.1 * avahi-utils-debuginfo-0.8-150600.15.3.1 * libavahi-qt5-1-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150600.15.3.1 * libhowl0-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-0.8-150600.15.3.1 * avahi-utils-0.8-150600.15.3.1 * libavahi-glib1-debuginfo-0.8-150600.15.3.1 * avahi-glib2-debugsource-0.8-150600.15.3.1 * libavahi-client3-debuginfo-0.8-150600.15.3.1 * libhowl0-debuginfo-0.8-150600.15.3.1 * libavahi-core7-debuginfo-0.8-150600.15.3.1 * libavahi-common3-0.8-150600.15.3.1 * libavahi-qt5-1-debuginfo-0.8-150600.15.3.1 * avahi-utils-gtk-debuginfo-0.8-150600.15.3.1 * avahi-autoipd-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-0.8-150600.15.3.1 * libavahi-libevent1-debuginfo-0.8-150600.15.3.1 * avahi-qt5-debugsource-0.8-150600.15.3.1 * avahi-compat-mDNSResponder-devel-0.8-150600.15.3.1 * avahi-utils-gtk-0.8-150600.15.3.1 * openSUSE Leap 15.6 (x86_64) * libavahi-glib1-32bit-debuginfo-0.8-150600.15.3.1 * avahi-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-32bit-0.8-150600.15.3.1 * libdns_sd-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-common3-32bit-0.8-150600.15.3.1 * libavahi-client3-32bit-debuginfo-0.8-150600.15.3.1 * libdns_sd-32bit-0.8-150600.15.3.1 * libavahi-client3-32bit-0.8-150600.15.3.1 * libavahi-common3-32bit-debuginfo-0.8-150600.15.3.1 * openSUSE Leap 15.6 (noarch) * avahi-lang-0.8-150600.15.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libavahi-common3-64bit-debuginfo-0.8-150600.15.3.1 * libdns_sd-64bit-0.8-150600.15.3.1 * avahi-64bit-debuginfo-0.8-150600.15.3.1 * libdns_sd-64bit-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-64bit-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-64bit-0.8-150600.15.3.1 * libavahi-client3-64bit-debuginfo-0.8-150600.15.3.1 * libavahi-common3-64bit-0.8-150600.15.3.1 * libavahi-client3-64bit-0.8-150600.15.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * avahi-debugsource-0.8-150600.15.3.1 * libavahi-client3-0.8-150600.15.3.1 * libavahi-glib-devel-0.8-150600.15.3.1 * typelib-1_0-Avahi-0_6-0.8-150600.15.3.1 * libdns_sd-debuginfo-0.8-150600.15.3.1 * libavahi-gobject0-debuginfo-0.8-150600.15.3.1 * avahi-debuginfo-0.8-150600.15.3.1 * libavahi-gobject0-0.8-150600.15.3.1 * libavahi-devel-0.8-150600.15.3.1 * avahi-0.8-150600.15.3.1 * libavahi-core7-0.8-150600.15.3.1 * libdns_sd-0.8-150600.15.3.1 * libavahi-common3-debuginfo-0.8-150600.15.3.1 * avahi-compat-howl-devel-0.8-150600.15.3.1 * libavahi-libevent1-0.8-150600.15.3.1 * avahi-utils-debuginfo-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150600.15.3.1 * libhowl0-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-0.8-150600.15.3.1 * avahi-utils-0.8-150600.15.3.1 * libavahi-glib1-debuginfo-0.8-150600.15.3.1 * avahi-glib2-debugsource-0.8-150600.15.3.1 * libavahi-client3-debuginfo-0.8-150600.15.3.1 * libhowl0-debuginfo-0.8-150600.15.3.1 * libavahi-core7-debuginfo-0.8-150600.15.3.1 * libavahi-common3-0.8-150600.15.3.1 * libavahi-glib1-0.8-150600.15.3.1 * libavahi-libevent1-debuginfo-0.8-150600.15.3.1 * avahi-compat-mDNSResponder-devel-0.8-150600.15.3.1 * Basesystem Module 15-SP6 (noarch) * avahi-lang-0.8-150600.15.3.1 * Basesystem Module 15-SP6 (x86_64) * avahi-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-common3-32bit-0.8-150600.15.3.1 * libavahi-client3-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-client3-32bit-0.8-150600.15.3.1 * libavahi-common3-32bit-debuginfo-0.8-150600.15.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * avahi-autoipd-debuginfo-0.8-150600.15.3.1 * avahi-debuginfo-0.8-150600.15.3.1 * avahi-debugsource-0.8-150600.15.3.1 * avahi-glib2-debugsource-0.8-150600.15.3.1 * avahi-autoipd-0.8-150600.15.3.1 * avahi-utils-gtk-0.8-150600.15.3.1 * libavahi-gobject-devel-0.8-150600.15.3.1 * avahi-utils-gtk-debuginfo-0.8-150600.15.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * avahi-debuginfo-0.8-150600.15.3.1 * python3-avahi-0.8-150600.15.3.1 * avahi-debugsource-0.8-150600.15.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38469.html * https://www.suse.com/security/cve/CVE-2023-38471.html * https://bugzilla.suse.com/show_bug.cgi?id=1216594 * https://bugzilla.suse.com/show_bug.cgi?id=1216598 * https://bugzilla.suse.com/show_bug.cgi?id=1226586

1 0

SUSE-SU-2024:2201-1: moderate: Security update for wget
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for wget Announcement ID: SUSE-SU-2024:2201-1 Rating: moderate References: * bsc#1226419 Cross-References: * CVE-2024-38428 CVSS scores: * CVE-2024-38428 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for wget fixes the following issues: * CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2201=1 openSUSE-SLE-15.6-2024-2201=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2201=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * wget-1.20.3-150600.19.3.1 * wget-debugsource-1.20.3-150600.19.3.1 * wget-debuginfo-1.20.3-150600.19.3.1 * openSUSE Leap 15.6 (noarch) * wget-lang-1.20.3-150600.19.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * wget-1.20.3-150600.19.3.1 * wget-debugsource-1.20.3-150600.19.3.1 * wget-debuginfo-1.20.3-150600.19.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-38428.html * https://bugzilla.suse.com/show_bug.cgi?id=1226419

1 0

SUSE-SU-2024:2191-1: important: Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:2191-1 Rating: important References: * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2024-26610 * CVE-2024-26766 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2191=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2191=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_25-debugsource-3-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-3-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-3-150400.9.8.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_25-debugsource-3-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-3-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-3-150400.9.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-RU-2024:1531-2: moderate: Recommended update for golang-github-prometheus-alertmanager, golang-github-prometheus-node_exporter
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for golang-github-prometheus-alertmanager, golang-github- prometheus-node_exporter Announcement ID: SUSE-RU-2024:1531-2 Rating: moderate References: * jsc#MSQA-760 * jsc#PED-7893 * jsc#PED-7928 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that contains three features can now be installed. ## Description: This update for golang-github-prometheus-alertmanager, golang-github-prometheus- node_exporter fixes the following issues: * update to 1.7.0 (jsc#PED-7893, jsc#PED-7928): * [FEATURE] Add ZFS freebsd per dataset stats #2753 * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721 * [ENHANCEMENT] Parallelize stat calls in Linux filesystem collector #1772 * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711 * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric #2778 * [ENHANCEMENT] Improve qdisc collector performance #2779 * [ENHANCEMENT] Add include and exclude filter for hwmon collector #2699 * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead of procfs #2777 * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754 * [BUGFIX] Fallback to 32-bit stats in netdev #2757 * [BUGFIX] Close btrfs.FS handle after use #2780 * [BUGFIX] Move RO status before error return #2807 * [BUFFIX] Fix promhttp_metric_handler_errors_total being always active #2808 * [BUGFIX] Fix nfsd v4 index miss #2824 * update to 1.6.1: (no source code changes in this release) * BuildRequire go1.20 * update to 1.6.0: * [CHANGE] Fix cpustat when some cpus are offline #2318 * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605 * [CHANGE] Deprecate ntp collector #2603 * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583 * [CHANGE] Deprecate supervisord collector #2685 * [FEATURE] Enable uname collector on NetBSD #2559 * [FEATURE] NetBSD support for the meminfo collector #2570 * [FEATURE] NetBSD support for CPU collector #2626 * [FEATURE] Add FreeBSD collector for netisr subsystem #2668 * [FEATURE] Add softirqs collector #2669 * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449 * [ENHANCEMENT] Add administrative state of Linux network interfaces #2515 * [ENHANCEMENT] Log current value of GOMAXPROCS #2537 * [ENHANCEMENT] Add profiler options for perf collector #2542 * [ENHANCEMENT] Allow root path as metrics path #2590 * [ENHANCEMENT] Add cpu frequency governor metrics #2569 * [ENHANCEMENT] Add new landing page #2622 * [ENHANCEMENT] Reduce privileges needed for btrfs device stats #2634 * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687 * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats #2612 * [ENHANCEMENT] Read missing from netlink netclass attributes from sysfs #2669 * [BUGFIX] perf: fixes for automatically detecting the correct tracefs mountpoints #2553 * [BUGFIX] Fix `thermal_zone` collector noise @2554 * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD 2584 * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631 * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605 * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637 * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in OpenBSD #2663 * change go_modules archive in _service to use obscpio file ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1531=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1531=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1531=1 ## Package List: * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-node_exporter-1.7.0-150100.3.29.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-alertmanager-debuginfo-0.26.0-150100.4.22.1 * golang-github-prometheus-alertmanager-0.26.0-150100.4.22.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-alertmanager-debuginfo-0.26.0-150100.4.22.1 * golang-github-prometheus-node_exporter-1.7.0-150100.3.29.1 * golang-github-prometheus-alertmanager-0.26.0-150100.4.22.1 ## References: * https://jira.suse.com/browse/MSQA-760 * https://jira.suse.com/browse/PED-7893 * https://jira.suse.com/browse/PED-7928

1 0

SUSE-SU-2024:1530-2: moderate: Security update for grafana and mybatis
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for grafana and mybatis Announcement ID: SUSE-SU-2024:1530-2 Rating: moderate References: * bsc#1219912 * bsc#1222155 * jsc#MSQA-760 Cross-References: * CVE-2023-6152 * CVE-2024-1313 CVSS scores: * CVE-2023-6152 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2024-1313 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities and contains one feature can now be installed. ## Description: This update for grafana and mybatis fixes the following issues: grafana was updated to version 9.5.18: * Grafana now requires Go 1.20 * Security issues fixed: * CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155) * CVE-2023-6152: Add email verification when updating user email (bsc#1219912) * Other non-security related changes: * Version 9.5.17: * [FEATURE] Alerting: Backport use Alertmanager API v2 * Version 9.5.16: * [BUGFIX] Annotations: Split cleanup into separate queries and deletes to avoid deadlocks on MySQL * Version 9.5.15: * [FEATURE] Alerting: Attempt to retry retryable errors * Version 9.5.14: * [BUGFIX] Alerting: Fix state manager to not keep datasource_uid and ref_id labels in state after Error * [BUGFIX] Transformations: Config overrides being lost when config from query transform is applied * [BUGFIX] LDAP: Fix enable users on successfull login * Version 9.5.13: * [BUGFIX] BrowseDashboards: Only remember the most recent expanded folder * [BUGFIX] Licensing: Pass func to update env variables when starting plugin * Version 9.5.12: * [FEATURE] Azure: Add support for Workload Identity authentication * Version 9.5.9: * [FEATURE] SSE: Fix DSNode to not panic when response has empty response * [FEATURE] Prometheus: Handle the response with different field key order * [BUGFIX] LDAP: Fix user disabling mybatis: * `apache-commons-ognl` is now a non-optional dependency * Fixed building with log4j v1 and v2 dependencies ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1530=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1530=1 ## Package List: * openSUSE Leap 15.6 (noarch) * mybatis-javadoc-3.5.6-150200.5.6.1 * mybatis-3.5.6-150200.5.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * grafana-9.5.18-150200.3.56.1 * grafana-debuginfo-9.5.18-150200.3.56.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * grafana-9.5.18-150200.3.56.1 * grafana-debuginfo-9.5.18-150200.3.56.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6152.html * https://www.suse.com/security/cve/CVE-2024-1313.html * https://bugzilla.suse.com/show_bug.cgi?id=1219912 * https://bugzilla.suse.com/show_bug.cgi?id=1222155 * https://jira.suse.com/browse/MSQA-760

1 0

SUSE-RU-2024:2181-1: moderate: Recommended update for sles15-image
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for sles15-image Announcement ID: SUSE-RU-2024:2181-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 An update that can now be installed. ## Description: This update for sles15-image fixes the following issues: * restore procps in 15.5, will be gone with 15.6 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2181=1 ## Package List: * openSUSE Leap 15.5 (noarch) * container:sles15-image-15.0.0-36.12.1

1 0

SUSE-RU-2024:0950-2: important: Recommended update for spack
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for spack Announcement ID: SUSE-RU-2024:0950-2 Rating: important References: * bsc#1221471 * bsc#1221503 Affected Products: * HPC Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 An update that has two fixes can now be installed. ## Description: This update for spack fixes the following issues: * Spack was updated to version 0.21.2: * Bugs fixed: * Containerize: accommodate nested or pre-existing `spack-env` paths. * Fix `setup-env` script, when going back and forth between instances. * Fix using fully-qualified namespaces from root specs. * Fix a bug when a required provider is requested for multiple virtuals. * OCI buildcaches: * only push in parallel when forking. * use pickleable errors (#42160) * Fix using sticky variants in externals. * Fix a rare issue with conditional requirements and multi-valued variants. * Recipy updates: * `rust`: add v1.75, rework a few variants. * `py-transformers`: add v4.35.2. * Fix path to setup-env.sh in the Apptainer template (bsc#1221471). * Add libgfortran, libfl2 and libzip5 to the Spack runtime container as the Spack build container has the corresponding devel packages but these libraries are not installed in a BCI-style base container by default (bsc#1221503). * Make python version used configurable. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-950=1 * HPC Module 15-SP6 zypper in -t patch SUSE-SLE-Module-HPC-15-SP6-2024-950=1 ## Package List: * openSUSE Leap 15.6 (noarch) * spack-info-0.21.2-150400.15.2 * spack-recipes-0.21.2-150400.15.2 * spack-man-0.21.2-150400.15.2 * spack-0.21.2-150400.15.2 * HPC Module 15-SP6 (noarch) * spack-info-0.21.2-150400.15.2 * spack-recipes-0.21.2-150400.15.2 * spack-man-0.21.2-150400.15.2 * spack-0.21.2-150400.15.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221471 * https://bugzilla.suse.com/show_bug.cgi?id=1221503

1 0