June 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:1961-1: moderate: Security update for squid
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Security update for squid Announcement ID: SUSE-SU-2024:1961-1 Rating: moderate References: * bsc#1225417 Cross-References: * CVE-2024-33427 CVSS scores: * CVE-2024-33427 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service (bsc#1225417). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1961=1 openSUSE-SLE-15.6-2024-1961=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-1961=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * squid-debuginfo-6.9-150600.3.3.2 * squid-debugsource-6.9-150600.3.3.2 * squid-6.9-150600.3.3.2 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * squid-debuginfo-6.9-150600.3.3.2 * squid-debugsource-6.9-150600.3.3.2 * squid-6.9-150600.3.3.2 ## References: * https://www.suse.com/security/cve/CVE-2024-33427.html * https://bugzilla.suse.com/show_bug.cgi?id=1225417

1 0

SUSE-SU-2024:1963-1: important: Security update for apache2
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Security update for apache2 Announcement ID: SUSE-SU-2024:1963-1 Rating: important References: * bsc#1221401 * bsc#1222330 * bsc#1222332 Cross-References: * CVE-2023-38709 * CVE-2024-24795 * CVE-2024-27316 CVSS scores: * CVE-2023-38709 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-24795 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-27316 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27316 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for apache2 fixes the following issues: * CVE-2023-38709: Fixed HTTP response splitting (bsc#1222330). * CVE-2024-24795: Fixed HTTP response splitting in multiple modules (bsc#1222332). * CVE-2024-27316: Fixed HTTP/2 CONTINUATION frames can be utilized for DoS attacks (bsc#1221401). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1963=1 openSUSE-SLE-15.6-2024-1963=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1963=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1963=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-1963=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * apache2-prefork-debuginfo-2.4.58-150600.5.3.1 * apache2-event-2.4.58-150600.5.3.1 * apache2-debuginfo-2.4.58-150600.5.3.1 * apache2-debugsource-2.4.58-150600.5.3.1 * apache2-utils-2.4.58-150600.5.3.1 * apache2-worker-2.4.58-150600.5.3.1 * apache2-2.4.58-150600.5.3.1 * apache2-utils-debugsource-2.4.58-150600.5.3.1 * apache2-devel-2.4.58-150600.5.3.1 * apache2-event-debugsource-2.4.58-150600.5.3.1 * apache2-utils-debuginfo-2.4.58-150600.5.3.1 * apache2-prefork-debugsource-2.4.58-150600.5.3.1 * apache2-worker-debugsource-2.4.58-150600.5.3.1 * apache2-event-debuginfo-2.4.58-150600.5.3.1 * apache2-prefork-2.4.58-150600.5.3.1 * apache2-worker-debuginfo-2.4.58-150600.5.3.1 * openSUSE Leap 15.6 (noarch) * apache2-manual-2.4.58-150600.5.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-prefork-debuginfo-2.4.58-150600.5.3.1 * apache2-debuginfo-2.4.58-150600.5.3.1 * apache2-debugsource-2.4.58-150600.5.3.1 * apache2-2.4.58-150600.5.3.1 * apache2-prefork-debugsource-2.4.58-150600.5.3.1 * apache2-prefork-2.4.58-150600.5.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-event-2.4.58-150600.5.3.1 * apache2-debuginfo-2.4.58-150600.5.3.1 * apache2-debugsource-2.4.58-150600.5.3.1 * apache2-event-debugsource-2.4.58-150600.5.3.1 * apache2-event-debuginfo-2.4.58-150600.5.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-utils-2.4.58-150600.5.3.1 * apache2-worker-2.4.58-150600.5.3.1 * apache2-utils-debugsource-2.4.58-150600.5.3.1 * apache2-devel-2.4.58-150600.5.3.1 * apache2-utils-debuginfo-2.4.58-150600.5.3.1 * apache2-worker-debugsource-2.4.58-150600.5.3.1 * apache2-worker-debuginfo-2.4.58-150600.5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38709.html * https://www.suse.com/security/cve/CVE-2024-24795.html * https://www.suse.com/security/cve/CVE-2024-27316.html * https://bugzilla.suse.com/show_bug.cgi?id=1221401 * https://bugzilla.suse.com/show_bug.cgi?id=1222330 * https://bugzilla.suse.com/show_bug.cgi?id=1222332

1 0

SUSE-RU-2024:1956-1: moderate: Recommended update for google-errorprone, guava
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Recommended update for google-errorprone, guava Announcement ID: SUSE-RU-2024:1956-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for google-errorprone, guava fixes the following issues: guava: * guava was updated to version 33.1.0: * Changes of version 33.1.0: * Updated our Error Prone dependency to 2.26.1, which includes a JPMS-ready jar of annotations. If you use the Error Prone annotations in a modular build of your own code, you may need to add a requires line for them. * base: Added a Duration overload for Suppliers.memoizeWithExpiration. * base: Deprecated the remaining two overloads of Throwables.propagateIfPossible. They won't be deleted, but we recommend migrating off them. * cache: Fixed a bug that could cause false "recursive load" reports during refresh. * graph: Changed the return types of transitiveClosure() and reachableNodes() to Immutable* types. reachableNodes() already returned an immutable object (even though that was not reflected in the declared return type); transitiveClosure() used to return a mutable object. The old signatures remain available, so this change does not break binary compatibility. * graph: Changed the behavior of views returned by graph accessor methods that take a graph element as input: They now throw IllegalStateException when that element is removed from the graph. * hash: Optimized Checksum-based hash functions for Java 9+. * testing: Exposed FakeTicker Duration methods to Android users. * util.concurrent: Deprecated the constructors of UncheckedExecutionException and ExecutionError that don't accept a cause. We won't remove these constructors, but we recommend migrating off them, as users of those classes often assume that instances will contain a cause. * util.concurrent: Improved the correctness of racy accesses for J2ObjC users. * Changes of version 33.0.0: * This version of guava-android contains some package-private methods whose signature includes the Java 8 Collector API. This is a test to identify any problems before we expose those methods publicly to users. Please report any problems that you encounter. * Changed various classes to catch Exception instead of RuntimeException even when only RuntimeException is theoretically possible. This can help code that throws undeclared exceptions, as some bytecode rewriters (e.g., Robolectric) and languages (e.g., Kotlin) do. * Added an Automatic-Module-Name to failureaccess, Guava's one strong runtime dependency. * reflect: In guava-android only, removed Invokable.getAnnotatedReturnType() and Parameter.getAnnotatedType(). These methods never worked in an Android VM, and to reflect that, they were born @Deprecated, @Beta, and @DoNotCall. They're now preventing us from rolling out some new Android compatibility testing. This is the only binary-incompatible change in this release, and it should have no effect in practice. Still, we bump the major version number to follow Semantic Versioning. * util.concurrent: Changed our implementations to avoid eagerly initializing loggers during class loading. This can help performance, especially under Android. * Changes of version 32.1.3: * Changed Gradle Metadata to include dependency versions directly. This may address "Could not find some-dependency" errors that some users have reported (which might be a result of users' excluding guava-parent). * collect: Changed Multisets.unmodifiableMultiset(set) .removeIf(predicate) to throw an exception always, even if nothing matches predicate. * graph: Fixed the behavior of Graph/ValueGraph views for a node when that node is removed from the graph. * io: Fixed Files.createTempDir and FileBackedOutputStream under Windows services, a rare use case. (The fix actually covers only Java 9+ because Java 8 would require an additional approach. Let us know if you need support under Java 8.) * net: Made MediaType.parse allow and skip over whitespace around the / and = separator tokens in addition to the ; separator, for which it was already being allowed. * util.concurrent: Tweaked Futures.getChecked constructor-selection behavior: The method continues to prefer to call constructors with a String parameter, but now it breaks ties based on whether the constructor has a Throwable parameter. Beyond that, the choice of constructor remains undefined. (For this and other reasons, we discourage the use of getChecked.) * Changes of version 32.1.2: * Removed the section of our Gradle metadata that caused Gradle to report conflicts with listenablefuture. * Changed our Maven project to avoid affecting which version of Mockito our Gradle users see. * collect: Under J2CL, exposed ImmutableList and ImmutableSet methods copyOf and of for JavaScript usage. * net: Optimized InternetDomainName construction. * Changes of version 32.1.1: * Fixed our broken Gradle metadata from 32.1.0. Sorry again for the trouble. If you use Gradle, please still read the release notes from that version: You may still see errors from the new checking that the metadata enables, and the release notes discuss how to fix those errors. * Changes of version 32.1.0: * collect: Tweaked more nullness annotations. * hash: Enhanced crc32c() to use Java's hardware-accelerated implementation where available. * util.concurrent: Added Duration-based default methods to ListeningExecutorService. * Began updating Javadoc to focus less on APIs that have been superseded by additions to the JDK. We're also looking to add more documentation that directs users to JDK equivalents for our APIs. Further PRs welcome! * Fixed some problems with using Guava from a Java Agent. (But we don't test that configuration, and we don't know how well we'll be able to keep it working.) * Fixed BootstrapMethodError when using CacheBuilder from a custom system class loader. (As with the previous item, we're not sure how well we'll be able to keep this use case working.) * Suppressed a harmless unusable-by-js warning seen by users of guava-gwt. * Fix version mismatch in the ant build files. * The binaries are compatible with java 1.8 google-errorprone, google-errorprone-annotations: * google-errorprone and google-errorprone-annotations were updated to version 2.26.1: * Changes of version 2.26.1: * Fixes the module name: from 'com.google.errorprone.annotation' to 'com.google.errorprone.annotations'. Amends the OSGi build not to include 'Automatic-Module-Name' in the MANIFEST.MF for the 'annotations' project. * Changes of version 2.26.0: * The 'annotations' artifact now includes a module-info.java for Java Platform Module System support. * Disabled checks passed to -XepPatchChecks are now ignored, instead of causing a crash. * New checks: * SystemConsoleNull: Null-checking System.console() is not a reliable way to detect if the console is connected to a terminal. * EnumOrdinal: Discourage uses of Enum.ordinal() * Closed issues: * Add module-info.java * 2.19.x: Exception thrown when a disabled check is passed to -XepPatchChecks * Ignore disabled checks passed to -XepPatchChecks * feat: add jpms definition for annotations * Add the 'compile' goal for 'compile-java9' * Changes of version 2.25.0: * New checks: * JUnitIncompatibleType: Detects incompatible types passed to an assertion, similar to TruthIncompatibleType * RedundantSetterCall: Detects fields set twice in the same chained expression. Generalization of previous ProtoRedundantSet check to also handle AutoValue. * Closed issues: * Crash in UnnecessaryStringBuilder * Fix typos * Add support for specifying badEnclosingTypes for BadImport via flags * Some BugPattern docs are missing code examples * Remove incorrect statement from BugPattern index doc * Do not report NonFinalStaticField findings for fields modified in @BeforeAll methods * Changes of version 2.24.1: * Add an assertion to try to help debug * Changes of version 2.24.0: * New checks: * MultipleNullnessAnnotations: Discourage multiple nullness annotations * NullableTypeParameter: Discourage nullness annotations on type parameters * NullableWildcard: Discourage nullness annotations on wildcards * SuperCallToObjectMethod: Generalization of SuperEqualsIsObjectEquals, now covers hashCode * Changes of version 2.23.0: * New checks: DuplicateDateFormatField, NonFinalStaticField, StringCharset, StringFormatWithLiteral, SuperEqualsIsObjectEquals * Bug fixes and improvements * Changes of version 2.22.0: * New checks: * ClosingStandardOutputStreams: Prevents accidentally closing System.{out,err} with try-with-resources * TruthContainsExactlyElementsInUsage: containsExactly is preferred over containsExactlyElementsIn when creating new iterables * UnnecessaryAsync: detects unnecessary use of async primitives in local (and hence single-threaded) scopes * ReturnAtTheEndOfVoidFunction: detects unnecessary return statements at the end of void functions * MultimapKeys: Suggests using keySet() instead of iterating over Multimap.keys(), which does not collapse duplicates * Bug fixes and improvements: * Don't complain about literal IP addresses in AddressSelection * Prevent SuggestedFixes#renameMethod from modifying return type declaration * Fix UnusedVariable false positives for private record parameters * When running in conservative mode, no longer assume that implementations of Map.get, etc. return null * CanIgnoreReturnValueSuggester: Support additional exempting method annotations * UnusedVariable: exclude junit5's @RegisterExtension * Support running all available patch checks * Upgrade java-diff-utils 4.0 -> 4.12 * Flag unused Refaster template parameters * Support @SuppressWarnings("all") * Prevent Refaster UMemberSelect from matching method parameters * MissingDefault : Don't require // fall out comments on expression switches * Skip UnnecessaryLambda findings for usages in enhanced for loops * Fix bug where nested MissingBraces violations' suggested fixes result in broken code * Add support for specifying exemptPrefixes/exemptNames for UnusedVariable via flags * UnusedMethod: Added exempting variable annotations * Changes of version 2.21.1: * Handle overlapping ranges in suppressedRegions * Add AddressSelection to discourage APIs that convert a hostname to a single address * Changes of version 2.21.0: * New Checkers: * AttemptedNegativeZero: Prevents accidental use of -0, which is the same as 0. The floating-point negative zero is -0.0. * ICCProfileGetInstance: Warns on uses of ICC_Profile.getInstance(String), due to JDK-8191622. * MutableGuiceModule: Fields in Guice modules should be final. * NullableOptional: Discourages @Nullable-annotated Optionals. * OverridingMethodInconsistentArgumentNamesChecker: Arguments of overriding method are inconsistent with overridden method. * Fixed issues: * Avoid MemberName IOOBE on lambda parameters inside overriding methods * Improve LockOnNonEnclosingClassLiteral documentation * Security scan reported high CVE for com.google.guava:guava:31.1-jre * Upgrade guava to 32.0.1 * Proposal: checker to prevent other checkers from calling javac methods that changed across JDKs * Add support in ASTHelpersSuggestions for getEnclosedElements * Changes of version 2.20.0: * This release is compatible with early-access builds of JDK 21. * New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder, BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain, LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation, NamedLikeContextualKeyword, NonApiType * Fixes issues: * Introduce MissingRefasterAnnotation checker * Fix minor typo in URepeated * Drop unused constant Template#AUTOBOXING_DEFAULT * Introduce command-line flag -XepAllSuggestionsAsWarnings * JDK21 compatibility * Add OSGi runtime metadata to error-prone's MANIFEST.MF files * Use EISOP Checker Framework version 3.34.0-eisop1 * NotJavadoc pattern does not allow Javadoc on module declarations * ErrorProneInjector incorrectly picks up the no-args constructor * Several high CVEs related to dependency com.google.protobuf:protobuf-java:3.19.2 * Upgrade protobuf-java to 3.19.6 * Changes of version 2.19.1: * This release fixes a binary compatibility issue when running on JDK 11 * Changes of version 2.19.0: * New Checkers: NotJavadoc, StringCaseLocaleUsage, UnnecessaryTestMethodPrefix * Fixes issues: * Exclude inner classes annotated with @Nested from ClassCanBeStatic rule * Optimize VisitorState#getSymbolFromName * ClassCanBeStatic: Exclude JUnit @Nested classes * BadImport: flag static import of newInstance methods * Support given for enforcing DirectInvocationOnMock: issue 3396 * Handle yield statement case in ASTHelpers#targetType * Should ASTHelpers.getSymbol(Tree) be annotated with @Nullable? * Fix '@' character in javadoc code snippets * Replace guava cache with caffeine * Discourage APIs locale-dependent APIs like String.to{Lower,Upper}Case * Introduce StringCaseLocaleUsage check * Changes of version 2.18.0: * New Checkers: InjectOnBugCheckers, LabelledBreakTarget, UnusedLabel, YodaCondition * Fixes issues: * @SuppressWarnings("InlineFormatString") doesn't work * Refaster: support method invocation type argument inlining * java.lang.IllegalArgumentException: Cannot edit synthetic AST nodes with specific record constructor * Rename class to match filename * Optimize VisitorState#getSymbolFromName * refactor: refactor bad smell UnusedLabel * LambdaFunctionalInterface crash with IllegalArgumentException when processing an enum constructor taking a lambda * Fix JDK 20-ea build compatibility * UngroupedOverloads: ignore generated constructors * [errorprone 2.17.0] NPE in StatementSwitchToExpressionSwitch.analyzeSwitchTree * StatementSwitchToExpressionSwitch: handle empty statement blocks * StatementSwitchToExpressionSwitch: only trigger on compatible target versions * Fix Finalize bugpattern to match protected finalize() * Make MemoizeConstantVisitorStateLookups check suppressible * Changes of version 2.17.0: * New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter, ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem, StatementSwitchToExpressionSwitch, UnqualifiedYield * Fixed issues: * InvalidParam warning on Javadoc for Java record components * UnusedMethod flags @JsonValue methods as unused * UnusedMethod: Add more JPA lifecycle annotations or make annotations configurable * UnusedMethod: Support additional exempting method annotations * Have InvalidParam support records * Fix -XepDisableAllWarnings flag when passed on its own * ASTHelpersSuggestions does not flag call to packge() on com.sun.tools.javac.code.Symbol.ClassSymbol * @SupressWarnings on record compact constructor causes crash * Changes of version 2.16.0: * New Checkers: ASTHelpersSuggestions, CanIgnoreReturnValueSuggester, LenientFormatStringValidation, UnnecessarilyUsedValue * Fixed issues: * Avoid using non-ASCII Unicode characters outside of comments and literals * NullPointerException thrown during analysis * NPE analysing new style switch statement (2.14.0) * ImmutableChecker handles null types * Drop pre-JDK 11 logic from Refaster's Inliner class * Changes of version 2.15.0: * New Checkers: BuilderReturnThis, CanIgnoreReturnValueSuggester, CannotMockFinalClass, CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject, MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses, NullArgumentForNonNullParameter, SelfAlwaysReturnsThis, UnsafeWildcard, UnusedTypeParameter * Changes of version 2.14.0: * New checkers: BanJNDI, EmptyTopLevelDeclaration, ErroneousBitwiseExpression, FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption, NullableOnContainingClass * Changes of version 2.13.1: * Fix a crash in UnnecessaryBoxedVariable * Include the unicode character in the diagnostic message * Changes of version 2.13.0: * Handle all annotations with the simple name Generated in -XepDisableWarningsInGeneratedCode * Reconcile BugChecker#isSuppressed with suppression handling in ErrorProneScanner * Fix a bug in enclosingPackage * Improve performance of fix application * Implicitly treat @AutoBuilder setter methods as @CanIgnoreReturnValue. * Remove some obsolete checks (PublicConstructorForAbstractClass, HashCodeToString) * Changes of version 2.12.1: * This release adds an infrastructure optimization to AppliedFix source code processing. * Changes of version 2.12.0: * New checks: BoxedPrimitiveEquality, DoubleBraceInitialization, IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod, LongDoubleConversion, RobolectricShadowDirectlyOn, StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion, Varifier * Do not require maven-javadoc-plugin as it's not being used ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1956=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1956=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1956=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1956=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1956=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1956=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1956=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1956=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1956=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1956=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1956=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-1956=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1956=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1956=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1956=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1956=1 ## Package List: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Enterprise Storage 7.1 (noarch) * guava-33.1.0-150200.3.10.1 * openSUSE Leap 15.5 (noarch) * guava-javadoc-33.1.0-150200.3.10.1 * google-errorprone-annotation-2.26.1-150200.5.6.1 * google-errorprone-parent-2.26.1-150200.5.6.1 * google-errorprone-docgen_processor-2.26.1-150200.5.6.1 * google-errorprone-javadoc-2.26.1-150200.5.6.1 * guava-33.1.0-150200.3.10.1 * google-errorprone-type_annotations-2.26.1-150200.5.6.1 * guava-testlib-33.1.0-150200.3.10.1 * openSUSE Leap 15.6 (noarch) * guava-javadoc-33.1.0-150200.3.10.1 * google-errorprone-annotation-2.26.1-150200.5.6.1 * google-errorprone-parent-2.26.1-150200.5.6.1 * google-errorprone-docgen_processor-2.26.1-150200.5.6.1 * google-errorprone-javadoc-2.26.1-150200.5.6.1 * guava-33.1.0-150200.3.10.1 * google-errorprone-type_annotations-2.26.1-150200.5.6.1 * guava-testlib-33.1.0-150200.3.10.1 * Development Tools Module 15-SP5 (noarch) * guava-33.1.0-150200.3.10.1 * Development Tools Module 15-SP6 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * guava-33.1.0-150200.3.10.1

1 0

SUSE-FU-2024:1957-1: moderate: Feature update for sap-convergent-resource-agents
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Feature update for sap-convergent-resource-agents Announcement ID: SUSE-FU-2024:1957-1 Rating: moderate References: * jsc#PED-7175 * jsc#PED-7176 Affected Products: * openSUSE Leap 15.4 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SAP Applications Module 15-SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains two features can now be installed. ## Description: This update for sap-convergent-resource-agents fixes the following issues: * Implementation of `sap-convergent-resource-agents` a new resource agent to control the Convergent Mediation control zone components. This package is supported only in the context of SAP RISE (jsc#PED-7175, jsc#PED-7176) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1957=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-1957=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-1957=1 * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2024-1957=1 ## Package List: * openSUSE Leap 15.4 (noarch) * sap-convergent-resource-agents-1.0.0-150400.9.3.2 * SAP Applications Module 15-SP4 (noarch) * sap-convergent-resource-agents-1.0.0-150400.9.3.2 * SAP Applications Module 15-SP5 (noarch) * sap-convergent-resource-agents-1.0.0-150400.9.3.2 * SAP Applications Module 15-SP6 (noarch) * sap-convergent-resource-agents-1.0.0-150400.9.3.2 ## References: * https://jira.suse.com/browse/PED-7175 * https://jira.suse.com/browse/PED-7176

1 0

SUSE-RU-2024:1958-1: moderate: Recommended update for bcc
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Recommended update for bcc Announcement ID: SUSE-RU-2024:1958-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for bcc fixes the following issue: * Remove bcc-devel's requirement on llvm-devel ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1958=1 openSUSE-SLE-15.6-2024-1958=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-1958=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * bcc-tools-0.29.1-150600.5.3.2 * bcc-debugsource-0.29.1-150600.5.3.2 * bcc-debuginfo-0.29.1-150600.5.3.2 * libbcc0-debuginfo-0.29.1-150600.5.3.2 * bcc-devel-0.29.1-150600.5.3.2 * libbcc0-0.29.1-150600.5.3.2 * bcc-tools-debuginfo-0.29.1-150600.5.3.2 * openSUSE Leap 15.6 (noarch) * bcc-docs-0.29.1-150600.5.3.2 * python3-bcc-0.29.1-150600.5.3.2 * bcc-examples-0.29.1-150600.5.3.2 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * bcc-tools-0.29.1-150600.5.3.2 * bcc-debugsource-0.29.1-150600.5.3.2 * bcc-debuginfo-0.29.1-150600.5.3.2 * libbcc0-debuginfo-0.29.1-150600.5.3.2 * bcc-devel-0.29.1-150600.5.3.2 * libbcc0-0.29.1-150600.5.3.2 * bcc-tools-debuginfo-0.29.1-150600.5.3.2 * Development Tools Module 15-SP6 (noarch) * bcc-docs-0.29.1-150600.5.3.2 * python3-bcc-0.29.1-150600.5.3.2 * bcc-examples-0.29.1-150600.5.3.2

1 0

SUSE-RU-2024:1959-1: moderate: Recommended update for libserf
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Recommended update for libserf Announcement ID: SUSE-RU-2024:1959-1 Rating: moderate References: * bsc#1221211 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for libserf fixes the following issues: * Fix build with openSSL 3 by removing usage of ERR_GET_FUNC (bsc#1221211) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1959=1 SUSE-2024-1959=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1959=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libserf-devel-1.3.9-150600.18.3.2 * libserf-1-1-1.3.9-150600.18.3.2 * libserf-1-1-debuginfo-1.3.9-150600.18.3.2 * libserf-debugsource-1.3.9-150600.18.3.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libserf-devel-1.3.9-150600.18.3.2 * libserf-1-1-1.3.9-150600.18.3.2 * libserf-1-1-debuginfo-1.3.9-150600.18.3.2 * libserf-debugsource-1.3.9-150600.18.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221211

1 0

openSUSE-RU-2024:0154-1: important: Recommended update for glib2-branding-openSUSE
by maintenance＠opensuse.org 08 Jun '24

08 Jun '24

openSUSE Recommended Update: Recommended update for glib2-branding-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0154-1 Rating: important References: Affected Products: openSUSE Leap 15.6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for glib2-branding-openSUSE rebuilds it due to the last glib2 version upgrade. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6: zypper in -t patch openSUSE-2024-154=1 Package List: - openSUSE Leap 15.6 (noarch): gio-branding-openSUSE-42.1-lp156.9.2.2 References:

1 0

SUSE-SU-2024:1947-1: moderate: Security update for openssl-3
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Security update for openssl-3 Announcement ID: SUSE-SU-2024:1947-1 Rating: moderate References: * bsc#1222548 * bsc#1224388 Cross-References: * CVE-2024-2511 * CVE-2024-4603 CVSS scores: * CVE-2024-2511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-4603 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548). * CVE-2024-4603: Fixed DSA parameter checks for excessive sizes before validating (bsc#1224388). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1947=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1947=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1947=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1947=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1947=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1947=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1947=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1947=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1947=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1947=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1947=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1947=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1947=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1947=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1947=1 ## Package List: * SUSE Manager Proxy 4.3 (x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * openSUSE Leap 15.4 (x86_64) * libopenssl-3-devel-32bit-3.0.8-150400.4.54.1 * libopenssl3-32bit-3.0.8-150400.4.54.1 * libopenssl3-32bit-debuginfo-3.0.8-150400.4.54.1 * openSUSE Leap 15.4 (noarch) * openssl-3-doc-3.0.8-150400.4.54.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl3-64bit-3.0.8-150400.4.54.1 * libopenssl-3-devel-64bit-3.0.8-150400.4.54.1 * libopenssl3-64bit-debuginfo-3.0.8-150400.4.54.1 * openSUSE Leap Micro 5.3 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * openSUSE Leap Micro 5.4 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 ## References: * https://www.suse.com/security/cve/CVE-2024-2511.html * https://www.suse.com/security/cve/CVE-2024-4603.html * https://bugzilla.suse.com/show_bug.cgi?id=1222548 * https://bugzilla.suse.com/show_bug.cgi?id=1224388

1 0

SUSE-SU-2024:1949-1: moderate: Security update for openssl-1_1
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2024:1949-1 Rating: moderate References: * bsc#1222548 Cross-References: * CVE-2024-2511 CVSS scores: * CVE-2024-2511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1949=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1949=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1949=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1949=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1949=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1949=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1949=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1949=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1949=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1949=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1949=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1949=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1949=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1949=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1949=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * openSUSE Leap 15.4 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * openSUSE Leap 15.4 (noarch) * openssl-1_1-doc-1.1.1l-150400.7.66.2 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl-1_1-devel-64bit-1.1.1l-150400.7.66.2 * libopenssl1_1-64bit-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-64bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-64bit-1.1.1l-150400.7.66.2 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Manager Proxy 4.3 (x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Manager Server 4.3 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 ## References: * https://www.suse.com/security/cve/CVE-2024-2511.html * https://bugzilla.suse.com/show_bug.cgi?id=1222548

1 0

SUSE-SU-2024:1950-1: moderate: Security update for glib2
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Security update for glib2 Announcement ID: SUSE-SU-2024:1950-1 Rating: moderate References: * bsc#1224044 Cross-References: * CVE-2024-34397 CVSS scores: * CVE-2024-34397 ( SUSE ): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for glib2 fixes the following issues: Update to version 2.78.6: * Fix a regression with IBus caused by the fix for CVE-2024-34397 Changes in version 2.78.5: * Fix CVE-2024-34397: GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing. (bsc#1224044) * Bugs fixed: * gvfs-udisks2-volume-monitor SIGSEGV in g_content_type_guess_for_tree() due to filename with bad encoding * gcontenttype: Make filename valid utf-8 string before processing. * gdbusconnection: Don't deliver signals if the sender doesn't match. Changes in version 2.78.4: * Bugs fixed: * Fix generated RST anchors for methods, signals and properties. * docs/reference: depend on a native gtk-doc. * gobject_gdb.py: Do not break bt on optimized build. * gregex: clean up usage of _GRegex.jit_status. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1950=1 openSUSE-SLE-15.6-2024-1950=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1950=1 ## Package List: * openSUSE Leap 15.6 (noarch) * gio-branding-upstream-2.78.6-150600.4.3.1 * gio-branding-SLE-15-150600.35.2.1 * glib2-lang-2.78.6-150600.4.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * glib2-devel-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-2.78.6-150600.4.3.1 * libgobject-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgthread-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgio-2_0-0-2.78.6-150600.4.3.1 * libgmodule-2_0-0-2.78.6-150600.4.3.1 * libglib-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgobject-2_0-0-2.78.6-150600.4.3.1 * glib2-tests-devel-debuginfo-2.78.6-150600.4.3.1 * glib2-devel-2.78.6-150600.4.3.1 * libglib-2_0-0-2.78.6-150600.4.3.1 * libgthread-2_0-0-2.78.6-150600.4.3.1 * glib2-tests-devel-2.78.6-150600.4.3.1 * glib2-debugsource-2.78.6-150600.4.3.1 * libgio-2_0-0-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-debuginfo-2.78.6-150600.4.3.1 * glib2-devel-static-2.78.6-150600.4.3.1 * glib2-doc-2.78.6-150600.4.3.1 * openSUSE Leap 15.6 (x86_64) * glib2-devel-32bit-2.78.6-150600.4.3.1 * libgio-2_0-0-32bit-2.78.6-150600.4.3.1 * libgthread-2_0-0-32bit-2.78.6-150600.4.3.1 * libgobject-2_0-0-32bit-2.78.6-150600.4.3.1 * libgio-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libgobject-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * glib2-devel-32bit-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-32bit-2.78.6-150600.4.3.1 * glib2-tools-32bit-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-32bit-2.78.6-150600.4.3.1 * libglib-2_0-0-32bit-2.78.6-150600.4.3.1 * libgthread-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libglib-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * glib2-devel-64bit-2.78.6-150600.4.3.1 * libgmodule-2_0-0-64bit-debuginfo-2.78.6-150600.4.3.1 * libglib-2_0-0-64bit-2.78.6-150600.4.3.1 * glib2-devel-64bit-debuginfo-2.78.6-150600.4.3.1 * libgio-2_0-0-64bit-2.78.6-150600.4.3.1 * libgthread-2_0-0-64bit-debuginfo-2.78.6-150600.4.3.1 * libglib-2_0-0-64bit-debuginfo-2.78.6-150600.4.3.1 * libgio-2_0-0-64bit-debuginfo-2.78.6-150600.4.3.1 * libgthread-2_0-0-64bit-2.78.6-150600.4.3.1 * glib2-tools-64bit-debuginfo-2.78.6-150600.4.3.1 * libgobject-2_0-0-64bit-2.78.6-150600.4.3.1 * libgobject-2_0-0-64bit-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-64bit-2.78.6-150600.4.3.1 * libgmodule-2_0-0-64bit-2.78.6-150600.4.3.1 * Basesystem Module 15-SP6 (noarch) * gio-branding-SLE-15-150600.35.2.1 * glib2-lang-2.78.6-150600.4.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * glib2-devel-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-2.78.6-150600.4.3.1 * libgobject-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgthread-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgio-2_0-0-2.78.6-150600.4.3.1 * libgmodule-2_0-0-2.78.6-150600.4.3.1 * libglib-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgobject-2_0-0-2.78.6-150600.4.3.1 * libglib-2_0-0-2.78.6-150600.4.3.1 * glib2-devel-2.78.6-150600.4.3.1 * libgthread-2_0-0-2.78.6-150600.4.3.1 * glib2-debugsource-2.78.6-150600.4.3.1 * libgio-2_0-0-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-debuginfo-2.78.6-150600.4.3.1 * Basesystem Module 15-SP6 (x86_64) * libgio-2_0-0-32bit-2.78.6-150600.4.3.1 * libgobject-2_0-0-32bit-2.78.6-150600.4.3.1 * libgio-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libgobject-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-32bit-2.78.6-150600.4.3.1 * libglib-2_0-0-32bit-2.78.6-150600.4.3.1 * libglib-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-34397.html * https://bugzilla.suse.com/show_bug.cgi?id=1224044

1 0

SUSE-RU-2024:1952-1: moderate: Recommended update for socat
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Recommended update for socat Announcement ID: SUSE-RU-2024:1952-1 Rating: moderate References: * bsc#1160293 * jsc#PED-8413 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature and has one fix can now be installed. ## Description: This update for socat fixes the following issues: Update to 1.8.0.0: * Support for network namespaces (option netns) * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following) * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL * New script socat-mux.sh allows n-to-1 / 1-to-n communications * New script socat-broker.sh allows group communications * Experimental socks5 client feature * Address ACCEPT-FD for systemd "inetd" mode * UDP-Lite and DCCP address types * Addresses SOCKETPAIR and SHELL * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets * Simple statistics output with Socat option --statistics and with SIGUSR1 * A couple of new options, many fixes and corrections, see file CHANGES * Note: This version introduces "socat1", linking to "socat" Update to 1.7.4.4: * FIX: In error.c msg2() there was a stack overflow on long messages: The terminating \0 Byte was written behind the last position. * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets arrived. * FIX: a couple of weaknesses and errors when accessing invalid or incompatible file system entries with UNIX domain, file, and generic addresses. * FIX: bad parser error message on "socat /tmp/x\"x/x -" Update to 1.7.4.3: * fixes the TCP_INFO issue that broke building on non-Linux platforms. Update to version 1.7.4.2: * Fixes a lot of bugs, e.g., for options -r and -R. * Further bugfixes, see the CHANGES file Update to 1.7.4.1: Security: * Buffer size option (-b) is internally doubled for CR-CRLF conversion, but not checked for integer overflow. This could lead to heap based buffer overflow, assuming the attacker could provide this parameter. * Many further bugfixes and new features, see the CHANGES file Update to version 1.7.3.4: * bugfix release, see the CHANGES file for all changes Update to version 1.7.3.3: * bugfix release, see the CHANGES file for all changes * We HAVE_SSLv23_*_method, just not as functions, but macros add the relevant defines in the command line so support for autonegotiation of the highest TLS version is restored. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1952=1 openSUSE-SLE-15.6-2024-1952=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1952=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * socat-debugsource-1.8.0.0-150600.20.3.1 * socat-1.8.0.0-150600.20.3.1 * socat-debuginfo-1.8.0.0-150600.20.3.1 * socat-extra-1.8.0.0-150600.20.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * socat-debugsource-1.8.0.0-150600.20.3.1 * socat-1.8.0.0-150600.20.3.1 * socat-debuginfo-1.8.0.0-150600.20.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1160293 * https://jira.suse.com/browse/PED-8413

1 0

openSUSE-RU-2024:0153-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 07 Jun '24

07 Jun '24

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0153-1 Rating: moderate References: Affected Products: openSUSE Leap 15.6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for yast2-theme is a source rebuild only. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6: zypper in -t patch openSUSE-2024-153=1 Package List: - openSUSE Leap 15.6 (noarch): yast2-theme-4.6.0-lp156.2.2.1 yast2-theme-breeze-4.6.0-lp156.2.2.1 yast2-theme-oxygen-4.6.0-lp156.2.2.1 References:

1 0

SUSE-SU-2024:1937-1: moderate: Security update for python-docker
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Security update for python-docker Announcement ID: SUSE-SU-2024:1937-1 Rating: moderate References: * bsc#1224788 Cross-References: * CVE-2024-35195 CVSS scores: * CVE-2024-35195 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-docker fixes the following issues: * CVE-2024-35195: Fixed missing certificate verification (bsc#1224788). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1937=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1937=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1937=1 ## Package List: * Public Cloud Module 15-SP5 (noarch) * python311-docker-7.0.0-150400.8.7.1 * openSUSE Leap 15.4 (noarch) * python311-docker-7.0.0-150400.8.7.1 * Public Cloud Module 15-SP4 (noarch) * python311-docker-7.0.0-150400.8.7.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35195.html * https://bugzilla.suse.com/show_bug.cgi?id=1224788

1 0

openSUSE-SU-2024:0152-1: important: Security update for plasma5-workspace
by opensuse-security＠opensuse.org 06 Jun '24

06 Jun '24

openSUSE Security Update: Security update for plasma5-workspace ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0152-1 Rating: important References: #1225774 Cross-References: CVE-2024-36041 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for plasma5-workspace fixes the following issues: - CVE-2024-36041: Fixed an authentication issue where unauthorized users can access session manager (boo#1225774). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-152=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): gmenudbusmenuproxy-5.27.9-bp155.2.6.1 plasma5-session-wayland-5.27.9-bp155.2.6.1 plasma5-workspace-5.27.9-bp155.2.6.1 plasma5-workspace-devel-5.27.9-bp155.2.6.1 plasma5-workspace-libs-5.27.9-bp155.2.6.1 xembedsniproxy-5.27.9-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): plasma5-session-5.27.9-bp155.2.6.1 plasma5-workspace-lang-5.27.9-bp155.2.6.1 References: https://www.suse.com/security/cve/CVE-2024-36041.html https://bugzilla.suse.com/1225774

1 0

SUSE-RU-2024:1934-1: moderate: Recommended update for sles15-image
by OPENSUSE-UPDATES 06 Jun '24

06 Jun '24

# Recommended update for sles15-image Announcement ID: SUSE-RU-2024:1934-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.6 An update that can now be installed. ## Description: This update for sles15-image fixes the following issues: * update to SUSE LLC and use https (it's 2024) * use more specific lifecycle url * remove deprecated label duplication as those labels are inherited into all derived containers as well causing confusion * set supportlevel to released and L3 * use the base-container-images landing page * rename kiwi file to match package name * move artifacthub.io labels outside labelling helper to avoid duplication ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1934=1 ## Package List: * openSUSE Leap 15.6 (noarch) * container:sles15-image-15.0.0-47.3.1

1 0

SUSE-RU-2024:1933-1: moderate: Recommended update for libvirt
by OPENSUSE-UPDATES 06 Jun '24

06 Jun '24

# Recommended update for libvirt Announcement ID: SUSE-RU-2024:1933-1 Rating: moderate References: * bsc#1220714 * bsc#1224327 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for libvirt fixes the following issues: * rpc: Don't warn about "max_client_requests" in single-threaded daemons (bsc#1224327) * security: Ensure file exists before attempting to restore label (bsc#1220714) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1933=1 openSUSE-SLE-15.5-2024-1933=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1933=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1933=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1933=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libvirt-daemon-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-lxc-9.0.0-150500.6.23.1 * libvirt-nss-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-config-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-lxc-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-debuginfo-9.0.0-150500.6.23.1 * libvirt-client-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-lxc-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1 * libvirt-daemon-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-hooks-9.0.0-150500.6.23.1 * libvirt-client-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-debuginfo-9.0.0-150500.6.23.1 * wireshark-plugin-libvirt-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1 * libvirt-libs-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1 * libvirt-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-gluster-debuginfo-9.0.0-150500.6.23.1 * libvirt-libs-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-9.0.0-150500.6.23.1 * libvirt-nss-9.0.0-150500.6.23.1 * libvirt-daemon-config-nwfilter-9.0.0-150500.6.23.1 * libvirt-devel-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1 * wireshark-plugin-libvirt-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-gluster-9.0.0-150500.6.23.1 * libvirt-client-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (x86_64) * libvirt-devel-32bit-9.0.0-150500.6.23.1 * libvirt-daemon-driver-libxl-9.0.0-150500.6.23.1 * libvirt-client-32bit-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-libxl-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-xen-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (noarch) * libvirt-doc-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-rbd-debuginfo-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libvirt-client-64bit-debuginfo-9.0.0-150500.6.23.1 * libvirt-devel-64bit-9.0.0-150500.6.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libvirt-daemon-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1 * libvirt-daemon-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-debuginfo-9.0.0-150500.6.23.1 * libvirt-client-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1 * libvirt-libs-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1 * libvirt-libs-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1 * libvirt-client-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-rbd-debuginfo-9.0.0-150500.6.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libvirt-libs-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-libs-debuginfo-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libvirt-daemon-debuginfo-9.0.0-150500.6.23.1 * libvirt-nss-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-config-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-debuginfo-9.0.0-150500.6.23.1 * libvirt-client-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1 * libvirt-daemon-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-hooks-9.0.0-150500.6.23.1 * libvirt-client-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1 * libvirt-nss-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1 * libvirt-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-9.0.0-150500.6.23.1 * libvirt-daemon-config-nwfilter-9.0.0-150500.6.23.1 * libvirt-devel-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1 * libvirt-client-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-rbd-debuginfo-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (noarch) * libvirt-doc-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (x86_64) * libvirt-daemon-driver-libxl-9.0.0-150500.6.23.1 * libvirt-daemon-driver-libxl-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-xen-9.0.0-150500.6.23.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220714 * https://bugzilla.suse.com/show_bug.cgi?id=1224327

1 0

openSUSE-RU-2024:0151-1: moderate: Recommended update for kanidm
by maintenance＠opensuse.org 05 Jun '24

05 Jun '24

openSUSE Recommended Update: Recommended update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0151-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kanidm fixes the following issues: - Update to version 1.2.2~git0.c4153c9: * Resolve incorrect handling of tokens in logout flow (#2795) (#2803) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-151=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.2.2~git0.c4153c9-bp155.26.1 kanidm-clients-1.2.2~git0.c4153c9-bp155.26.1 kanidm-docs-1.2.2~git0.c4153c9-bp155.26.1 kanidm-server-1.2.2~git0.c4153c9-bp155.26.1 kanidm-unixd-clients-1.2.2~git0.c4153c9-bp155.26.1 References:

1 0

SUSE-RU-2024:1928-1: moderate: Recommended update for SAPHanaSR
by OPENSUSE-UPDATES 05 Jun '24

05 Jun '24

# Recommended update for SAPHanaSR Announcement ID: SUSE-RU-2024:1928-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SAP Applications Module 15-SP2 * SAP Applications Module 15-SP3 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SAP Applications Module 15-SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for SAPHanaSR fixes the following issues: SAPHanaSR was updated to version 0.162.4: * Version 0.162.4: * Unified `global.ini` examples * Added demo script SAPHanaSR-upgrade-to-angi-demo * Updated `man` pages: * SAPHanaSR_basic_cluster.7 * SAPHanaSR_maintenance_examples.7 * SAPHanaSR_upgrade_to_angi.7 * SAPHanaSR-manageProvider.8 * SAPHanaSR-upgrade-to-angi-demo.8 * SAPHanaSR.py.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1928=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1928=1 * SAP Applications Module 15-SP2 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2024-1928=1 * SAP Applications Module 15-SP3 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2024-1928=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-1928=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-1928=1 * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2024-1928=1 ## Package List: * openSUSE Leap 15.5 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * openSUSE Leap 15.6 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP2 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP3 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP4 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP5 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP6 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1

1 0

SUSE-SU-2024:1925-1: important: Security update for python-PyMySQL
by OPENSUSE-UPDATES 05 Jun '24

05 Jun '24

# Security update for python-PyMySQL Announcement ID: SUSE-SU-2024:1925-1 Rating: important References: * bsc#1225070 Cross-References: * CVE-2024-36039 CVSS scores: * CVE-2024-36039 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability can now be installed. ## Description: This update for python-PyMySQL fixes the following issues: * CVE-2024-36039: Fixed SQL injection when used with untrusted JSON input (bsc#1225070). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1925=1 SUSE-2024-1925=1 ## Package List: * openSUSE Leap 15.6 (noarch) * python311-PyMySQL-1.1.0-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-36039.html * https://bugzilla.suse.com/show_bug.cgi?id=1225070

1 0

SUSE-RU-2024:1924-1: moderate: Recommended update for obs-service-replace_using_package_version
by OPENSUSE-UPDATES 05 Jun '24

05 Jun '24

# Recommended update for obs-service-replace_using_package_version Announcement ID: SUSE-RU-2024:1924-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 An update that can now be installed. ## Description: This update for obs-service-replace_using_package_version fixes the following issues: obs-service-replace_using_package_version was updated to version 1702495728.72fe58b: * Changes in version 1702495728.72fe58b: * Bump version: 0.0.8 to 0.0.9 * Bump actions/setup-python from 4.7.1 to 5.0.0 * Workaround integration test failures due to PEP 668 marker * Bump actions/setup-python from 4.6.1 to 4.7.1 * Bump actions/checkout from 3 to 4 * Report the package name that is missing (#56) * Bump pytest-container from 0.1.1 to 0.2.0 * Drop mock dependency, stdlib has it * Bump actions/setup-python from 4.5.0 to 4.6.1 * Bump version: 0.0.7 to 0.0.8 * Changes in version 1681202780.6d8bb3c: * Run unit & install test only for the system python * Add python 3.11 tox environment * Switch to using rpm.labelCompare instead of parse_version * Fix copyright strings * Fix test_find_package_version * Bump mock from 4.0.3 to 5.0.1 * Bump pytest-xdist from 2.5.0 to 3.0.2 * Bump tox from 3.25.1 to 3.28.0 * Bump Gr1N/setup-poetry from 7 to 8 * Bump pytest-container from 0.0.2 to 0.1.1 * Bump actions/setup-python from 4.3.0 to 4.5.0 * Changes in version 1680160876.6dcaef0: * Bump version: 0.0.6 to 0.0.7 * Fix default value for empty or missing version * Bump flake8 from 5.0.1 to 5.0.4 * Changes in version 1668090256.71deb28: * Bump version: 0.0.5 to 0.0.6 * Link to the official poetry installation guide * Update replace_using_package_version.service * Update README.md * Update integration_tests/test_version_extraction.py * Update replace_using_package_version.service * Attempt to read version from obsinfo if no version is found * Add Leap 15.4 & SLE 15 SP4 to the CI * Changes in version 1668085498.ab6de1e: * Bump version: 0.0.4 to 0.0.5 * Remove the rpm signkeys in the CI environment * Adapt tests to mock subprocess.check_output * Ignore stderr on successful command executions * Changes in version 1667988064.d72b7ba: * Bump version: 0.0.3 to 0.0.4 * Update obs-service-replace_using_package_version.spec * Adapt spec to the current project setup * Bump actions/setup-python from 3 to 4.3.0 * Bump pytest-cov from 3.0.0 to 4.0.0 * Bump flake8 from 4.0.1 to 5.0.1 * Bump tox from 3.24.5 to 3.25.1 * Bump actions/cache from 2 to 3 * Bump actions/checkout from 2 to 3 * Bump actions/setup-python from 2 to 3 * Bump pytest from 6.2.5 to 7.0.1 * Switch from custom run_command to using check_output * Remove additional space from pyproject.toml * Replace travis CI badge with GitHub Actions badge * Make the file parameter default to the build recipe * Add integration tests using pytest_container * Bump coverage from 6.3 to 6.3.1 * Switch from travis-ci to github actions * Remove trailing whitespace * Switch to poetry instead of using setup.py * Correct spelling & gramar in .service * Add missing closing description element to .service * Follow the python package naming conventions ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1924=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1924=1 ## Package List: * openSUSE Leap 15.5 (noarch) * obs-service-replace_using_package_version-0.0.9-150000.3.9.1 * openSUSE Leap 15.6 (noarch) * obs-service-replace_using_package_version-0.0.9-150000.3.9.1

1 0

SUSE-SU-2024:1922-1: moderate: Security update for mariadb104
by OPENSUSE-UPDATES 04 Jun '24

04 Jun '24

# Security update for mariadb104 Announcement ID: SUSE-SU-2024:1922-1 Rating: moderate References: * bsc#1217405 Cross-References: * CVE-2023-22084 CVSS scores: * CVE-2023-22084 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2023-22084 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability can now be installed. ## Description: This update for mariadb104 fixes the following issues: * Update to 10.4.33: * CVE-2023-22084: Fixed a bug that allowed high privileged attackers with network access via multiple protocols to compromise the server. (bsc#1217405) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1922=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * mariadb104-debuginfo-10.4.33-150100.3.8.1 * mariadb104-bench-debuginfo-10.4.33-150100.3.8.1 * mariadb104-10.4.33-150100.3.8.1 * mariadb104-bench-10.4.33-150100.3.8.1 * mariadb104-client-debuginfo-10.4.33-150100.3.8.1 * mariadb104-rpm-macros-10.4.33-150100.3.8.1 * mariadb104-test-10.4.33-150100.3.8.1 * mariadb104-client-10.4.33-150100.3.8.1 * mariadb104-test-debuginfo-10.4.33-150100.3.8.1 * mariadb104-galera-10.4.33-150100.3.8.1 * mariadb104-debugsource-10.4.33-150100.3.8.1 * mariadb104-tools-10.4.33-150100.3.8.1 * mariadb104-tools-debuginfo-10.4.33-150100.3.8.1 * libmariadbd104-devel-10.4.33-150100.3.8.1 * openSUSE Leap 15.6 (noarch) * mariadb104-errormessages-10.4.33-150100.3.8.1 ## References: * https://www.suse.com/security/cve/CVE-2023-22084.html * https://bugzilla.suse.com/show_bug.cgi?id=1217405

1 0

SUSE-SU-2024:1923-1: important: Security update for unbound
by OPENSUSE-UPDATES 04 Jun '24

04 Jun '24

# Security update for unbound Announcement ID: SUSE-SU-2024:1923-1 Rating: important References: * bsc#1202031 * bsc#1202033 * bsc#1203643 * bsc#1219823 * bsc#1219826 * jsc#PED-8333 Cross-References: * CVE-2022-30698 * CVE-2022-30699 * CVE-2022-3204 * CVE-2023-50387 * CVE-2023-50868 CVSS scores: * CVE-2022-30698 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2022-30698 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2022-30699 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2022-30699 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2022-3204 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-3204 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-50387 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-50387 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-50868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves five vulnerabilities and contains one feature can now be installed. ## Description: This update for unbound fixes the following issues: unbound was updated to 1.20.0: * A lot of bugfixes and added features. For a complete list take a look at the changelog located at: /usr/share/doc/packages/unbound/Changelog or https://www.nlnetlabs.nl/projects/unbound/download/ Some Noteworthy Changes: * Removed DLV. The DLV has been decommisioned since unbound 1.5.4 and has been advised to stop using it since. The use of dlv options displays a warning. * Remove EDNS lame procedure, do not re-query without EDNS after timeout. * Add DNS over HTTPS * libunbound has been upgraded to major version 8 Security Fixes: * CVE-2023-50387: DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers. [bsc#1219823] * CVE-2023-50868: NSEC3 closest encloser proof can exhaust CPU. [bsc#1219826] * CVE-2022-30698: Novel "ghost domain names" attack by introducing subdomain delegations. [bsc#1202033] * CVE-2022-30699: Novel "ghost domain names" attack by updating almost expired delegation information. [bsc#1202031] * CVE-2022-3204: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack). [bsc#1203643] Packaging Changes: * Use prefixes instead of sudo in unbound.service * Remove no longer necessary BuildRequires: libfstrm-devel and libprotobuf-c- devel ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1923=1 openSUSE-SLE-15.6-2024-1923=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1923=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1923=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libunbound-devel-mini-debugsource-1.20.0-150600.23.3.1 * unbound-1.20.0-150600.23.3.1 * libunbound8-1.20.0-150600.23.3.1 * libunbound-devel-mini-debuginfo-1.20.0-150600.23.3.1 * libunbound8-debuginfo-1.20.0-150600.23.3.1 * unbound-anchor-debuginfo-1.20.0-150600.23.3.1 * unbound-debugsource-1.20.0-150600.23.3.1 * unbound-debuginfo-1.20.0-150600.23.3.1 * unbound-devel-1.20.0-150600.23.3.1 * unbound-python-1.20.0-150600.23.3.1 * unbound-anchor-1.20.0-150600.23.3.1 * unbound-python-debuginfo-1.20.0-150600.23.3.1 * libunbound-devel-mini-1.20.0-150600.23.3.1 * openSUSE Leap 15.6 (noarch) * unbound-munin-1.20.0-150600.23.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.20.0-150600.23.3.1 * libunbound8-1.20.0-150600.23.3.1 * unbound-anchor-debuginfo-1.20.0-150600.23.3.1 * libunbound8-debuginfo-1.20.0-150600.23.3.1 * unbound-devel-1.20.0-150600.23.3.1 * unbound-debuginfo-1.20.0-150600.23.3.1 * unbound-anchor-1.20.0-150600.23.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * unbound-1.20.0-150600.23.3.1 * unbound-debugsource-1.20.0-150600.23.3.1 * unbound-python-1.20.0-150600.23.3.1 * unbound-debuginfo-1.20.0-150600.23.3.1 * unbound-python-debuginfo-1.20.0-150600.23.3.1 ## References: * https://www.suse.com/security/cve/CVE-2022-30698.html * https://www.suse.com/security/cve/CVE-2022-30699.html * https://www.suse.com/security/cve/CVE-2022-3204.html * https://www.suse.com/security/cve/CVE-2023-50387.html * https://www.suse.com/security/cve/CVE-2023-50868.html * https://bugzilla.suse.com/show_bug.cgi?id=1202031 * https://bugzilla.suse.com/show_bug.cgi?id=1202033 * https://bugzilla.suse.com/show_bug.cgi?id=1203643 * https://bugzilla.suse.com/show_bug.cgi?id=1219823 * https://bugzilla.suse.com/show_bug.cgi?id=1219826 * https://jira.suse.com/browse/PED-8333

1 0

SUSE-RU-2024:1921-1: important: Recommended update for azure-cli
by OPENSUSE-UPDATES 04 Jun '24

04 Jun '24

# Recommended update for azure-cli Announcement ID: SUSE-RU-2024:1921-1 Rating: important References: * bsc#1224326 Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for azure-cli fixes the following issues: * Add Obsoletes for deprecated azure-cli-taskhelp package to fix dependency issues (bsc#1224326) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1921=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1921=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1921=1 ## Package List: * openSUSE Leap 15.4 (noarch) * azure-cli-2.58.0-150400.14.9.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * azure-cli-test-2.58.0-150400.14.9.1 * Public Cloud Module 15-SP4 (noarch) * azure-cli-2.58.0-150400.14.9.1 * Public Cloud Module 15-SP5 (noarch) * azure-cli-2.58.0-150400.14.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1224326

1 0

openSUSE-SU-2024:0150-1: moderate: Security update for libhtp
by opensuse-security＠opensuse.org 04 Jun '24

04 Jun '24

openSUSE Security Update: Security update for libhtp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0150-1 Rating: moderate References: #1220403 Cross-References: CVE-2024-23837 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libhtp fixes the following issues: - CVE-2024-23837: excessive processing time of HTTP headers can lead to denial of service (boo#1220403) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-150=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libhtp-devel-0.5.42-bp155.2.3.1 libhtp2-0.5.42-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-23837.html https://bugzilla.suse.com/1220403

1 0

openSUSE-SU-2024:0149-1: important: Security update for python-python-jose
by opensuse-security＠opensuse.org 03 Jun '24

03 Jun '24

openSUSE Security Update: Security update for python-python-jose ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0149-1 Rating: important References: #1223422 Cross-References: CVE-2024-33664 CVSS scores: CVE-2024-33664 (SUSE): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-python-jose fixes the following issues: - CVE-2024-33664: Fixed a denial of service via decoding of a JSON Web Encryption token with a high compression ratio (boo#1223422) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-149=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-python-jose-3.0.1-bp155.3.6.1 References: https://www.suse.com/security/cve/CVE-2024-33664.html https://bugzilla.suse.com/1223422

1 0