June 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:2245-1: important: Security update for frr
by OPENSUSE-UPDATES 28 Jun '24

28 Jun '24

# Security update for frr Announcement ID: SUSE-SU-2024:2245-1 Rating: important References: * bsc#1216896 * bsc#1216897 * bsc#1216899 * bsc#1216900 Cross-References: * CVE-2023-38406 * CVE-2023-38407 * CVE-2023-47234 * CVE-2023-47235 CVSS scores: * CVE-2023-38406 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-38407 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38407 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47234 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47234 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47235 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47235 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for frr fixes the following issues: * CVE-2023-38406: Fixed nlri length of zero mishandling, aka "flowspec overflow". (bsc#1216900) * CVE-2023-47235: Fixed a crash on malformed BGP UPDATE message with an EOR, because the presence of EOR does not lead to a treat-as-withdraw outcome. (bsc#1216896) * CVE-2023-47234: Fixed a crash on crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data. (bsc#1216897) * CVE-2023-38407: Fixed attempts to read beyond the end of the stream during labeled unicast parsing. (bsc#1216899) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2245=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2245=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2245=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2245=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2245=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2245=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2245=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2245=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2245=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2245=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2245=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2245=1 ## Package List: * SUSE Manager Proxy 4.3 (x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38406.html * https://www.suse.com/security/cve/CVE-2023-38407.html * https://www.suse.com/security/cve/CVE-2023-47234.html * https://www.suse.com/security/cve/CVE-2023-47235.html * https://bugzilla.suse.com/show_bug.cgi?id=1216896 * https://bugzilla.suse.com/show_bug.cgi?id=1216897 * https://bugzilla.suse.com/show_bug.cgi?id=1216899 * https://bugzilla.suse.com/show_bug.cgi?id=1216900

1 0

openSUSE-RU-2024:0179-1: moderate: Recommended update for python-Routes
by maintenance＠opensuse.org 26 Jun '24

26 Jun '24

openSUSE Recommended Update: Recommended update for python-Routes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0179-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-Routes fixes the following issues: Update to 2.5.1: * Add compatibility for Python 3.7+. * Add graceful fallback for invalid character encoding from request object. * Enhanced performance for matching routes that share the same static prefix. * Fixed issue with child routes not passing route conditions to the Mapper.connect call. * Fixed documentation to reflect default value for minimization. * Allow backslash to escape special characters in route paths. * Resolve invalid escape sequences. * Remove support for Python 2.6, 3.3, and 3.4. * Remove obsolete Python 2.3 compat code. - update to 2.4.1: * Release as a universal wheel. PR #75. * Convert readthedocs links for their .org -> .io migration for hosted projects. - update to 2.3.1: * Backwards compatability fix - connect should work with mandatory routename and optional path. Patch by Davanum Srinivas (PR #65). * Fix sub_domain equivalence check. Patch by Nikita Uvarov * Add support for protocol-relative URLs generation (i.e. starting with double slash ``//``). PR #60. Patch by Sviatoslav Sydorenko. * Add support for the ``middleware`` extra requirement, making possible to depend on ``webob`` optionally. PR #59. Patch by Sviatoslav Sydorenko. * Fix matching of an empty string route, which led to exception in earlier versions. PR #58. Patch by Sviatoslav Sydorenko. * Add support for the ``requirements`` option when using mapper.resource to create routes. PR #57. Patch by Sean Dague. * Concatenation fix when using submappers with path prefixes. Multiple submappers combined the path prefix inside the controller argument in non-obvious ways. The controller argument will now be properly carried through when using submappers. PR #28. - update to 2.2: * Fix Python 3 support. Patch by Victor Stinner. - update to 2.1: * Fix 3 other route matching groups in route.py to use anonymous groups for optional sections to avoid exceeding regex limits. Fixes #15. * Printing a mapper now includes the Controller/action parameters from the route. Fixes #11. * Fix regression that didn't allow passing in params 'host', 'protocol', or 'anchor'. They can now be passed in with a trailing '_' as was possible before commit d1d1742903fa5ca24ef848a6ae895303f2661b2a. Fixes #7. * URL generation with/without SCRIPT_NAME was resulting in the URL cache failing to return the appropriate cached URL generation. The URL cache should always include the SCRIPT_NAME, even if its empty, in the cache to avoid this, and now does. Fixes #6. * Extract Route creation into separate method in Mapper. Subclasses of Route can be created by Mappers now. * Use the first X_FORWARDED_FOR value if there are multiple proxies in the path. Fixes #5. * Python 3.2/3.3 Support. Fixes Issue #2. Thanks to Alejandro Sánchez for the pull request! - Update to version 1.13: * Fix bug with dots forcing extension by default. The portion with the dot can now be recognized. Patch by Michael Basnight. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-179=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-Routes-2.5.1-bp155.2.1 References:

1 0

SUSE-RU-2024:2240-1: important: Recommended update for wicked
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:2240-1 Rating: important References: * bsc#1218668 Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that has one fix can now be installed. ## Description: This update for wicked fixes the following issues: * Fix VLANs/bonds randomly not coming up after reboot or wicked restart. [bsc#1218668] ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2240=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2240=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2240=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2240=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2240=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-2240=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2240=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2240=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218668

1 0

SUSE-RU-2024:2241-1: important: Recommended update for wicked
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:2241-1 Rating: important References: * bsc#1218668 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for wicked fixes the following issues: * Fix VLANs/bonds randomly not coming up after reboot or wicked restart. [bsc#1218668] ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2241=1 openSUSE-SLE-15.6-2024-2241=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2241=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * wicked-0.6.75-150600.11.6.1 * wicked-debuginfo-0.6.75-150600.11.6.1 * wicked-nbft-0.6.75-150600.11.6.1 * wicked-service-0.6.75-150600.11.6.1 * wicked-debugsource-0.6.75-150600.11.6.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * wicked-0.6.75-150600.11.6.1 * wicked-debuginfo-0.6.75-150600.11.6.1 * wicked-nbft-0.6.75-150600.11.6.1 * wicked-service-0.6.75-150600.11.6.1 * wicked-debugsource-0.6.75-150600.11.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218668

1 0

SUSE-RU-2024:2242-1: important: Recommended update for wicked
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:2242-1 Rating: important References: * bsc#1218668 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for wicked fixes the following issues: * Fix VLANs/bonds randomly not coming up after reboot or wicked restart. [bsc#1218668] ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2242=1 SUSE-2024-2242=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2242=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2242=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * wicked-0.6.75-150500.3.29.1 * wicked-service-0.6.75-150500.3.29.1 * wicked-nbft-0.6.75-150500.3.29.1 * wicked-debugsource-0.6.75-150500.3.29.1 * wicked-debuginfo-0.6.75-150500.3.29.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * wicked-service-0.6.75-150500.3.29.1 * wicked-0.6.75-150500.3.29.1 * wicked-debuginfo-0.6.75-150500.3.29.1 * wicked-debugsource-0.6.75-150500.3.29.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wicked-0.6.75-150500.3.29.1 * wicked-service-0.6.75-150500.3.29.1 * wicked-nbft-0.6.75-150500.3.29.1 * wicked-debugsource-0.6.75-150500.3.29.1 * wicked-debuginfo-0.6.75-150500.3.29.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218668

1 0

SUSE-RU-2024:2237-1: important: Recommended update for sysconfig
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for sysconfig Announcement ID: SUSE-RU-2024:2237-1 Rating: important References: * bsc#1185882 * bsc#1194557 * bsc#1199093 Affected Products: * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that has three fixes can now be installed. ## Description: This update for sysconfig fixes the following issues: * Update to version 0.85.9 * Revert to recommend wicked-service on <= 15.4 * netconfig: remove sed dependency * netconfig/dns-resolver: remove search limit of 6 domains (bsc#1199093) * netconfig: cleanup /var/run leftovers (bsc#1194557) * netconfig: update ntp man page documentation, fix typos * spec: drop legacy migration (from sle11) and rpm-utils * netconfig: revert NM default policy change change (bsc#1185882) With the change to the default policy, netconfig with NetworkManager as network.service accepted settings from all services/programs directly instead only from NetworkManager, where plugins/services have to deliver their settings to apply them ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2237=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2237=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2237=1 ## Package List: * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sysconfig-debugsource-0.85.9-150400.3.4.1 * sysconfig-netconfig-0.85.9-150400.3.4.1 * sysconfig-0.85.9-150400.3.4.1 * sysconfig-debuginfo-0.85.9-150400.3.4.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sysconfig-debugsource-0.85.9-150400.3.4.1 * sysconfig-netconfig-0.85.9-150400.3.4.1 * sysconfig-0.85.9-150400.3.4.1 * sysconfig-debuginfo-0.85.9-150400.3.4.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sysconfig-debugsource-0.85.9-150400.3.4.1 * sysconfig-netconfig-0.85.9-150400.3.4.1 * sysconfig-0.85.9-150400.3.4.1 * sysconfig-debuginfo-0.85.9-150400.3.4.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1185882 * https://bugzilla.suse.com/show_bug.cgi?id=1194557 * https://bugzilla.suse.com/show_bug.cgi?id=1199093

1 0

SUSE-RU-2024:2238-1: low: Recommended update for libpanel
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for libpanel Announcement ID: SUSE-RU-2024:2238-1 Rating: low References: Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for libpanel fixes the following issues: * Choose higher gcc version to build on SLE and Leap 15 * Update the name of libpanel-1-1 to be compliant with https://en.opensuse.org/openSUSE:Shared_library_packaging_policy ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2238=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2238=1 openSUSE-SLE-15.6-2024-2238=1 ## Package List: * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libpanel-1-1-debuginfo-1.4.0-150600.3.3.1 * libpanel-1-1-1.4.0-150600.3.3.1 * libpanel-debugsource-1.4.0-150600.3.3.1 * typelib-1_0-Panel-1-1.4.0-150600.3.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libpanel-1-1-1.4.0-150600.3.3.1 * libpanel-1-1-debuginfo-1.4.0-150600.3.3.1 * libpanel-debugsource-1.4.0-150600.3.3.1 * libpanel-devel-1.4.0-150600.3.3.1 * typelib-1_0-Panel-1-1.4.0-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * libpanel-lang-1.4.0-150600.3.3.1

1 0

SUSE-RU-2024:2224-1: important: Recommended update for java-1_8_0-openjdk
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for java-1_8_0-openjdk Announcement ID: SUSE-RU-2024:2224-1 Rating: important References: * bsc#1226274 Affected Products: * Legacy Module 15-SP5 * Legacy Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for java-1_8_0-openjdk fixes the following issues: * Fix condition enabling shenandoah GC (bsc#1226274) * Disable shenandoah for all distributions, since the shenandoah hotspot tarball is rather out of sync ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2224=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2224=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-2224=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-2224=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2224=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2224=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2224=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2224=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2224=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2224=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2224=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-src-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-accessibility-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * openSUSE Leap 15.5 (noarch) * java-1_8_0-openjdk-javadoc-1.8.0.412-150000.3.94.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-src-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-accessibility-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * openSUSE Leap 15.6 (noarch) * java-1_8_0-openjdk-javadoc-1.8.0.412-150000.3.94.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226274

1 0

SUSE-RU-2024:2225-1: important: Recommended update for kdump
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for kdump Announcement ID: SUSE-RU-2024:2225-1 Rating: important References: * bsc#1191410 * bsc#1222228 * bsc#1224214 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has three fixes can now be installed. ## Description: This update for kdump fixes the following issues: * Use fadump=nocma when user data not filtered out (bsc#1224214) * Differentiate between uninstall and upgrade in postun/preun (bsc#1191410) * Return success from pre, post, preun and postun scriplets (bsc#1222228) * Update calibrate values for SLE-15-SP6 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2225=1 openSUSE-SLE-15.6-2024-2225=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2225=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kdump-debugsource-2.0.6+git18.g6fc4531-150600.3.3.1 * kdump-2.0.6+git18.g6fc4531-150600.3.3.1 * kdump-debuginfo-2.0.6+git18.g6fc4531-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * kdump-debugsource-2.0.6+git18.g6fc4531-150600.3.3.1 * kdump-2.0.6+git18.g6fc4531-150600.3.3.1 * kdump-debuginfo-2.0.6+git18.g6fc4531-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1191410 * https://bugzilla.suse.com/show_bug.cgi?id=1222228 * https://bugzilla.suse.com/show_bug.cgi?id=1224214

1 0

SUSE-RU-2024:2226-1: important: Recommended update for apache2
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for apache2 Announcement ID: SUSE-RU-2024:2226-1 Rating: important References: * bsc#1226217 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update for apache2 fixes the following issues: * Apache ignores headers sent by CGI scripts (bsc#1226217) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2226=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2226=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2226=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2226=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2226=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2226=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2226=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2226=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2226=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2226=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2226=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2226=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2226=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-2226=1 ## Package List: * Server Applications Module 15-SP6 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Manager Proxy 4.3 (x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Manager Proxy 4.3 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Manager Server 4.3 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * apache2-event-2.4.51-150400.6.20.1 * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-event-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * apache2-example-pages-2.4.51-150400.6.20.1 * openSUSE Leap 15.4 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-event-2.4.51-150400.6.20.1 * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-event-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * apache2-example-pages-2.4.51-150400.6.20.1 * openSUSE Leap 15.5 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-event-2.4.51-150400.6.20.1 * apache2-event-debuginfo-2.4.51-150400.6.20.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * Server Applications Module 15-SP5 (noarch) * apache2-doc-2.4.51-150400.6.20.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226217

1 0

SUSE-RU-2024:2222-1: important: Recommended update for cloud-init
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Recommended update for cloud-init Announcement ID: SUSE-RU-2024:2222-1 Rating: important References: * bsc#1219680 * bsc#1223469 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for cloud-init fixes the following issues: * Brute force approach to skip renames if the device is already present (bsc#1219680) * Handle the existence of /usr/etc/sudoers to search for the expected include location (bsc#1223469) * Do not enable cloud-init on systems where there is no DMI just because no data source has been found. No data source means cloud-init will not run. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2222=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2222=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2222=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-2222=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-2222=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-2222=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2222=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2222=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cloud-init-doc-23.3-150100.8.82.3 * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * cloud-init-doc-23.3-150100.8.82.3 * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219680 * https://bugzilla.suse.com/show_bug.cgi?id=1223469

1 0

SUSE-RU-2024:2212-1: moderate: Recommended update for release-notes-sled
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Recommended update for release-notes-sled Announcement ID: SUSE-RU-2024:2212-1 Rating: moderate References: * bsc#933411 * jsc#PED-7339 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 An update that contains one feature and has one fix can now be installed. ## Description: This update for release-notes-sled fixes the following issues: * Version update (bsc#933411) * Added note about intel-gpu-tools removal (jsc#PED-7339) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Desktop 15 SP6 zypper in -t patch SUSE-SLE-Product-SLED-15-SP6-2024-2212=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2212=1 openSUSE-SLE-15.6-2024-2212=1 ## Package List: * SUSE Linux Enterprise Desktop 15 SP6 (noarch) * release-notes-sled-15.6.20240612-150600.3.3.3 * openSUSE Leap 15.6 (noarch) * release-notes-sled-15.6.20240612-150600.3.3.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=933411 * https://jira.suse.com/browse/PED-7339

1 0

SUSE-SU-2024:2221-1: important: Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2221-1 Rating: important References: * bsc#1223059 Cross-References: * CVE-2024-26852 CVSS scores: * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_44 fixes one issue. The following security issue was fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2221=1 SUSE-2024-2204=1 SUSE-2024-2206=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2221=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-2204=1 SUSE-SLE-Module-Live- Patching-15-SP5-2024-2206=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_31-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_7-debugsource-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_31-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_6-debugsource-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-8-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-7-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_31-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_7-debugsource-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_31-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_6-debugsource-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-8-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-7-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2205-1: important: Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2205-1 Rating: important References: * bsc#1218259 * bsc#1223059 Cross-References: * CVE-2023-6931 * CVE-2024-26852 CVSS scores: * CVE-2023-6931 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6931 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_39 fixes several issues. The following security issues were fixed: * CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218259). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2205=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2205=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_39-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-8-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_8-debugsource-8-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_39-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-8-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_8-debugsource-8-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6931.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1218259 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2207-1: important: Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2207-1 Rating: important References: * bsc#1219296 * bsc#1220211 * bsc#1220828 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52340 * CVE-2023-52502 * CVE-2023-6546 * CVE-2024-26585 * CVE-2024-26610 * CVE-2024-26622 * CVE-2024-26766 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). * CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2207=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2207=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-5-150500.11.8.1 * kernel-livepatch-SLE15-SP5_Update_10-debugsource-5-150500.11.8.1 * kernel-livepatch-5_14_21-150500_55_49-default-5-150500.11.8.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-5-150500.11.8.1 * kernel-livepatch-SLE15-SP5_Update_10-debugsource-5-150500.11.8.1 * kernel-livepatch-5_14_21-150500_55_49-default-5-150500.11.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1219296 * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220828 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:2208-1: important: Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2208-1 Rating: important References: * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52502 * CVE-2023-6546 * CVE-2024-26610 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2208=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2208=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_52-default-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_52-default-debuginfo-3-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_11-debugsource-3-150500.11.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_52-default-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_52-default-debuginfo-3-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_11-debugsource-3-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:2209-1: important: Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2209-1 Rating: important References: * bsc#1221302 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2024-26610 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2209=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2209=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_59-default-debuginfo-3-150500.11.10.1 * kernel-livepatch-SLE15-SP5_Update_12-debugsource-3-150500.11.10.1 * kernel-livepatch-5_14_21-150500_55_59-default-3-150500.11.10.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_59-default-debuginfo-3-150500.11.10.1 * kernel-livepatch-SLE15-SP5_Update_12-debugsource-3-150500.11.10.1 * kernel-livepatch-5_14_21-150500_55_59-default-3-150500.11.10.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:2216-1: important: Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2216-1 Rating: important References: * bsc#1222118 * bsc#1223059 * bsc#1224043 Cross-References: * CVE-2022-48687 * CVE-2023-52628 * CVE-2024-26852 CVSS scores: * CVE-2022-48687 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2022-48687 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-52628 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: * CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). * CVE-2022-48687: Fixed fix out-of-bounds read when setting HMAC data (bsc#1224043). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2216=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2216=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_0-debugsource-13-150500.9.1 * kernel-livepatch-5_14_21-150500_53-default-debuginfo-13-150500.9.1 * kernel-livepatch-5_14_21-150500_53-default-13-150500.9.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_0-debugsource-13-150500.9.1 * kernel-livepatch-5_14_21-150500_53-default-debuginfo-13-150500.9.1 * kernel-livepatch-5_14_21-150500_53-default-13-150500.9.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48687.html * https://www.suse.com/security/cve/CVE-2023-52628.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1222118 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1224043

1 0

SUSE-SU-2024:2217-1: important: Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2217-1 Rating: important References: * bsc#1222118 * bsc#1223059 Cross-References: * CVE-2023-52628 * CVE-2024-26852 CVSS scores: * CVE-2023-52628 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: * CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2220=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-2217=1 SUSE-SLE-Module-Live- Patching-15-SP5-2024-2218=1 SUSE-SLE-Module-Live-Patching-15-SP5-2024-2219=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2217=1 SUSE-2024-2218=1 SUSE-2024-2219=1 SUSE-2024-2220=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_3-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-debuginfo-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_5-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_7-default-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_1-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_7-default-debuginfo-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_2-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-10-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_3-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-debuginfo-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_5-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-11-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_1-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_7-default-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_7-default-debuginfo-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_2-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-10-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52628.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1222118 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-RU-2024:2192-1: moderate: Recommended update for certification-sles-eal4
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Recommended update for certification-sles-eal4 Announcement ID: SUSE-RU-2024:2192-1 Rating: moderate References: * bsc#1221928 Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for certification-sles-eal4 fixes the following issues: Update to version 15.6+git20240502.420b237: * fix permissions * remove the rootlogin * set the crypto policies to FIPS (bsc#1221928) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2192=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2192=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * certification-sles-eal4-15.6+git20240502.420b237-150600.14.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * certification-sles-eal4-15.6+git20240502.420b237-150600.14.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221928

1 0

SUSE-FU-2024:2194-1: moderate: Feature update for openldap2_5
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Feature update for openldap2_5 Announcement ID: SUSE-FU-2024:2194-1 Rating: moderate References: * jsc#PED-7178 * jsc#PED-7240 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains two features can now be installed. ## Description: This update for openldap2_5 fixes the following issues: Added initial OpenLDAP 2.5 version 2.5.17+50, (jsc#PED-7178,jsc#PED-7240) This version is in parallel to the existing openldap 2.4 version. The openldap 2.5 server is also shipped in the openldap2_5 package. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2194=1 SUSE-2024-2194=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2194=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2194=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2194=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-2194=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2194=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 * openSUSE Leap 15.5 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 * openSUSE Leap 15.6 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP5 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP6 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 ## References: * https://jira.suse.com/browse/PED-7178 * https://jira.suse.com/browse/PED-7240

1 0

SUSE-SU-2024:2197-1: important: Security update for openssl-1_1-livepatches
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for openssl-1_1-livepatches Announcement ID: SUSE-SU-2024:2197-1 Rating: important References: * bsc#1224458 * bsc#1225552 Cross-References: * CVE-2024-4741 CVSS scores: * CVE-2024-4741 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for openssl-1_1-livepatches fixes the following issues: * CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2197=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2197=1 ## Package List: * openSUSE Leap 15.4 (x86_64) * openssl-1_1-livepatches-debuginfo-0.4-150400.3.11.1 * openssl-1_1-livepatches-0.4-150400.3.11.1 * openssl-1_1-livepatches-debugsource-0.4-150400.3.11.1 * SUSE Linux Enterprise Live Patching 15-SP4 (x86_64) * openssl-1_1-livepatches-0.4-150400.3.11.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4741.html * https://bugzilla.suse.com/show_bug.cgi?id=1224458 * https://bugzilla.suse.com/show_bug.cgi?id=1225552

1 0

SUSE-SU-2024:2198-1: important: Security update for ghostscript
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for ghostscript Announcement ID: SUSE-SU-2024:2198-1 Rating: important References: * bsc#1225491 Cross-References: * CVE-2024-33871 CVSS scores: * CVE-2024-33871 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issues: * CVE-2024-33871: Prevent OPVP device arbitrary code execution via custom Driver library. (bsc#1225491) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2198=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2198=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2198=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2198=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2198=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2198=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2198=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2198=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2198=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2198=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2198=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2198=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2198=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2198=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2198=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2198=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2198=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2198=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2198=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Manager Proxy 4.3 (x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 ## References: * https://www.suse.com/security/cve/CVE-2024-33871.html * https://bugzilla.suse.com/show_bug.cgi?id=1225491

1 0

SUSE-SU-2024:2200-1: moderate: Security update for avahi
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for avahi Announcement ID: SUSE-SU-2024:2200-1 Rating: moderate References: * bsc#1216594 * bsc#1216598 * bsc#1226586 Cross-References: * CVE-2023-38469 * CVE-2023-38471 CVSS scores: * CVE-2023-38469 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38469 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38471 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38471 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for avahi fixes the following issues: * CVE-2023-38471: Fixed a reachable assertion in dbus_set_host_name. (bsc#1216594) * CVE-2023-38469: Fixed a reachable assertion in avahi_dns_packet_append_record. (bsc#1216598) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2200=1 SUSE-2024-2200=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2200=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2200=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2200=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python3-avahi-0.8-150600.15.3.1 * libavahi-qt5-devel-0.8-150600.15.3.1 * avahi-debugsource-0.8-150600.15.3.1 * libavahi-client3-0.8-150600.15.3.1 * libavahi-glib-devel-0.8-150600.15.3.1 * typelib-1_0-Avahi-0_6-0.8-150600.15.3.1 * libdns_sd-debuginfo-0.8-150600.15.3.1 * avahi-autoipd-0.8-150600.15.3.1 * libavahi-gobject0-debuginfo-0.8-150600.15.3.1 * libavahi-gobject-devel-0.8-150600.15.3.1 * avahi-debuginfo-0.8-150600.15.3.1 * python3-avahi-gtk-0.8-150600.15.3.1 * libavahi-gobject0-0.8-150600.15.3.1 * libavahi-devel-0.8-150600.15.3.1 * avahi-0.8-150600.15.3.1 * libavahi-core7-0.8-150600.15.3.1 * libdns_sd-0.8-150600.15.3.1 * libavahi-common3-debuginfo-0.8-150600.15.3.1 * avahi-compat-howl-devel-0.8-150600.15.3.1 * libavahi-libevent1-0.8-150600.15.3.1 * avahi-utils-debuginfo-0.8-150600.15.3.1 * libavahi-qt5-1-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150600.15.3.1 * libhowl0-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-0.8-150600.15.3.1 * avahi-utils-0.8-150600.15.3.1 * libavahi-glib1-debuginfo-0.8-150600.15.3.1 * avahi-glib2-debugsource-0.8-150600.15.3.1 * libavahi-client3-debuginfo-0.8-150600.15.3.1 * libhowl0-debuginfo-0.8-150600.15.3.1 * libavahi-core7-debuginfo-0.8-150600.15.3.1 * libavahi-common3-0.8-150600.15.3.1 * libavahi-qt5-1-debuginfo-0.8-150600.15.3.1 * avahi-utils-gtk-debuginfo-0.8-150600.15.3.1 * avahi-autoipd-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-0.8-150600.15.3.1 * libavahi-libevent1-debuginfo-0.8-150600.15.3.1 * avahi-qt5-debugsource-0.8-150600.15.3.1 * avahi-compat-mDNSResponder-devel-0.8-150600.15.3.1 * avahi-utils-gtk-0.8-150600.15.3.1 * openSUSE Leap 15.6 (x86_64) * libavahi-glib1-32bit-debuginfo-0.8-150600.15.3.1 * avahi-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-32bit-0.8-150600.15.3.1 * libdns_sd-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-common3-32bit-0.8-150600.15.3.1 * libavahi-client3-32bit-debuginfo-0.8-150600.15.3.1 * libdns_sd-32bit-0.8-150600.15.3.1 * libavahi-client3-32bit-0.8-150600.15.3.1 * libavahi-common3-32bit-debuginfo-0.8-150600.15.3.1 * openSUSE Leap 15.6 (noarch) * avahi-lang-0.8-150600.15.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libavahi-common3-64bit-debuginfo-0.8-150600.15.3.1 * libdns_sd-64bit-0.8-150600.15.3.1 * avahi-64bit-debuginfo-0.8-150600.15.3.1 * libdns_sd-64bit-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-64bit-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-64bit-0.8-150600.15.3.1 * libavahi-client3-64bit-debuginfo-0.8-150600.15.3.1 * libavahi-common3-64bit-0.8-150600.15.3.1 * libavahi-client3-64bit-0.8-150600.15.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * avahi-debugsource-0.8-150600.15.3.1 * libavahi-client3-0.8-150600.15.3.1 * libavahi-glib-devel-0.8-150600.15.3.1 * typelib-1_0-Avahi-0_6-0.8-150600.15.3.1 * libdns_sd-debuginfo-0.8-150600.15.3.1 * libavahi-gobject0-debuginfo-0.8-150600.15.3.1 * avahi-debuginfo-0.8-150600.15.3.1 * libavahi-gobject0-0.8-150600.15.3.1 * libavahi-devel-0.8-150600.15.3.1 * avahi-0.8-150600.15.3.1 * libavahi-core7-0.8-150600.15.3.1 * libdns_sd-0.8-150600.15.3.1 * libavahi-common3-debuginfo-0.8-150600.15.3.1 * avahi-compat-howl-devel-0.8-150600.15.3.1 * libavahi-libevent1-0.8-150600.15.3.1 * avahi-utils-debuginfo-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150600.15.3.1 * libhowl0-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-0.8-150600.15.3.1 * avahi-utils-0.8-150600.15.3.1 * libavahi-glib1-debuginfo-0.8-150600.15.3.1 * avahi-glib2-debugsource-0.8-150600.15.3.1 * libavahi-client3-debuginfo-0.8-150600.15.3.1 * libhowl0-debuginfo-0.8-150600.15.3.1 * libavahi-core7-debuginfo-0.8-150600.15.3.1 * libavahi-common3-0.8-150600.15.3.1 * libavahi-glib1-0.8-150600.15.3.1 * libavahi-libevent1-debuginfo-0.8-150600.15.3.1 * avahi-compat-mDNSResponder-devel-0.8-150600.15.3.1 * Basesystem Module 15-SP6 (noarch) * avahi-lang-0.8-150600.15.3.1 * Basesystem Module 15-SP6 (x86_64) * avahi-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-common3-32bit-0.8-150600.15.3.1 * libavahi-client3-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-client3-32bit-0.8-150600.15.3.1 * libavahi-common3-32bit-debuginfo-0.8-150600.15.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * avahi-autoipd-debuginfo-0.8-150600.15.3.1 * avahi-debuginfo-0.8-150600.15.3.1 * avahi-debugsource-0.8-150600.15.3.1 * avahi-glib2-debugsource-0.8-150600.15.3.1 * avahi-autoipd-0.8-150600.15.3.1 * avahi-utils-gtk-0.8-150600.15.3.1 * libavahi-gobject-devel-0.8-150600.15.3.1 * avahi-utils-gtk-debuginfo-0.8-150600.15.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * avahi-debuginfo-0.8-150600.15.3.1 * python3-avahi-0.8-150600.15.3.1 * avahi-debugsource-0.8-150600.15.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38469.html * https://www.suse.com/security/cve/CVE-2023-38471.html * https://bugzilla.suse.com/show_bug.cgi?id=1216594 * https://bugzilla.suse.com/show_bug.cgi?id=1216598 * https://bugzilla.suse.com/show_bug.cgi?id=1226586

1 0

SUSE-SU-2024:2201-1: moderate: Security update for wget
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for wget Announcement ID: SUSE-SU-2024:2201-1 Rating: moderate References: * bsc#1226419 Cross-References: * CVE-2024-38428 CVSS scores: * CVE-2024-38428 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for wget fixes the following issues: * CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2201=1 openSUSE-SLE-15.6-2024-2201=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2201=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * wget-1.20.3-150600.19.3.1 * wget-debugsource-1.20.3-150600.19.3.1 * wget-debuginfo-1.20.3-150600.19.3.1 * openSUSE Leap 15.6 (noarch) * wget-lang-1.20.3-150600.19.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * wget-1.20.3-150600.19.3.1 * wget-debugsource-1.20.3-150600.19.3.1 * wget-debuginfo-1.20.3-150600.19.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-38428.html * https://bugzilla.suse.com/show_bug.cgi?id=1226419

1 0