June 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:2245-1: important: Security update for frr
by OPENSUSE-UPDATES 28 Jun '24

28 Jun '24

# Security update for frr Announcement ID: SUSE-SU-2024:2245-1 Rating: important References: * bsc#1216896 * bsc#1216897 * bsc#1216899 * bsc#1216900 Cross-References: * CVE-2023-38406 * CVE-2023-38407 * CVE-2023-47234 * CVE-2023-47235 CVSS scores: * CVE-2023-38406 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-38407 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38407 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47234 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47234 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47235 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47235 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for frr fixes the following issues: * CVE-2023-38406: Fixed nlri length of zero mishandling, aka "flowspec overflow". (bsc#1216900) * CVE-2023-47235: Fixed a crash on malformed BGP UPDATE message with an EOR, because the presence of EOR does not lead to a treat-as-withdraw outcome. (bsc#1216896) * CVE-2023-47234: Fixed a crash on crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data. (bsc#1216897) * CVE-2023-38407: Fixed attempts to read beyond the end of the stream during labeled unicast parsing. (bsc#1216899) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2245=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2245=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2245=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2245=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2245=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2245=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2245=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2245=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2245=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2245=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2245=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2245=1 ## Package List: * SUSE Manager Proxy 4.3 (x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libfrrcares0-debuginfo-7.4-150300.4.26.1 * frr-7.4-150300.4.26.1 * frr-debugsource-7.4-150300.4.26.1 * libfrrospfapiclient0-debuginfo-7.4-150300.4.26.1 * libfrrfpm_pb0-7.4-150300.4.26.1 * libfrrsnmp0-7.4-150300.4.26.1 * libfrr0-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-7.4-150300.4.26.1 * frr-devel-7.4-150300.4.26.1 * libmlag_pb0-7.4-150300.4.26.1 * libfrrgrpc_pb0-7.4-150300.4.26.1 * libfrrcares0-7.4-150300.4.26.1 * libfrrzmq0-debuginfo-7.4-150300.4.26.1 * libfrr0-7.4-150300.4.26.1 * libmlag_pb0-debuginfo-7.4-150300.4.26.1 * frr-debuginfo-7.4-150300.4.26.1 * libfrr_pb0-debuginfo-7.4-150300.4.26.1 * libfrrsnmp0-debuginfo-7.4-150300.4.26.1 * libfrrospfapiclient0-7.4-150300.4.26.1 * libfrrzmq0-7.4-150300.4.26.1 * libfrrfpm_pb0-debuginfo-7.4-150300.4.26.1 * libfrrgrpc_pb0-debuginfo-7.4-150300.4.26.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38406.html * https://www.suse.com/security/cve/CVE-2023-38407.html * https://www.suse.com/security/cve/CVE-2023-47234.html * https://www.suse.com/security/cve/CVE-2023-47235.html * https://bugzilla.suse.com/show_bug.cgi?id=1216896 * https://bugzilla.suse.com/show_bug.cgi?id=1216897 * https://bugzilla.suse.com/show_bug.cgi?id=1216899 * https://bugzilla.suse.com/show_bug.cgi?id=1216900

1 0

openSUSE-RU-2024:0179-1: moderate: Recommended update for python-Routes
by maintenance＠opensuse.org 26 Jun '24

26 Jun '24

openSUSE Recommended Update: Recommended update for python-Routes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0179-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-Routes fixes the following issues: Update to 2.5.1: * Add compatibility for Python 3.7+. * Add graceful fallback for invalid character encoding from request object. * Enhanced performance for matching routes that share the same static prefix. * Fixed issue with child routes not passing route conditions to the Mapper.connect call. * Fixed documentation to reflect default value for minimization. * Allow backslash to escape special characters in route paths. * Resolve invalid escape sequences. * Remove support for Python 2.6, 3.3, and 3.4. * Remove obsolete Python 2.3 compat code. - update to 2.4.1: * Release as a universal wheel. PR #75. * Convert readthedocs links for their .org -> .io migration for hosted projects. - update to 2.3.1: * Backwards compatability fix - connect should work with mandatory routename and optional path. Patch by Davanum Srinivas (PR #65). * Fix sub_domain equivalence check. Patch by Nikita Uvarov * Add support for protocol-relative URLs generation (i.e. starting with double slash ``//``). PR #60. Patch by Sviatoslav Sydorenko. * Add support for the ``middleware`` extra requirement, making possible to depend on ``webob`` optionally. PR #59. Patch by Sviatoslav Sydorenko. * Fix matching of an empty string route, which led to exception in earlier versions. PR #58. Patch by Sviatoslav Sydorenko. * Add support for the ``requirements`` option when using mapper.resource to create routes. PR #57. Patch by Sean Dague. * Concatenation fix when using submappers with path prefixes. Multiple submappers combined the path prefix inside the controller argument in non-obvious ways. The controller argument will now be properly carried through when using submappers. PR #28. - update to 2.2: * Fix Python 3 support. Patch by Victor Stinner. - update to 2.1: * Fix 3 other route matching groups in route.py to use anonymous groups for optional sections to avoid exceeding regex limits. Fixes #15. * Printing a mapper now includes the Controller/action parameters from the route. Fixes #11. * Fix regression that didn't allow passing in params 'host', 'protocol', or 'anchor'. They can now be passed in with a trailing '_' as was possible before commit d1d1742903fa5ca24ef848a6ae895303f2661b2a. Fixes #7. * URL generation with/without SCRIPT_NAME was resulting in the URL cache failing to return the appropriate cached URL generation. The URL cache should always include the SCRIPT_NAME, even if its empty, in the cache to avoid this, and now does. Fixes #6. * Extract Route creation into separate method in Mapper. Subclasses of Route can be created by Mappers now. * Use the first X_FORWARDED_FOR value if there are multiple proxies in the path. Fixes #5. * Python 3.2/3.3 Support. Fixes Issue #2. Thanks to Alejandro Sánchez for the pull request! - Update to version 1.13: * Fix bug with dots forcing extension by default. The portion with the dot can now be recognized. Patch by Michael Basnight. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-179=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-Routes-2.5.1-bp155.2.1 References:

1 0

SUSE-RU-2024:2240-1: important: Recommended update for wicked
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:2240-1 Rating: important References: * bsc#1218668 Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that has one fix can now be installed. ## Description: This update for wicked fixes the following issues: * Fix VLANs/bonds randomly not coming up after reboot or wicked restart. [bsc#1218668] ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2240=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2240=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2240=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2240=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2240=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-2240=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2240=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2240=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * wicked-0.6.75-150300.4.32.1 * wicked-debugsource-0.6.75-150300.4.32.1 * wicked-debuginfo-0.6.75-150300.4.32.1 * wicked-service-0.6.75-150300.4.32.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218668

1 0

SUSE-RU-2024:2241-1: important: Recommended update for wicked
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:2241-1 Rating: important References: * bsc#1218668 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for wicked fixes the following issues: * Fix VLANs/bonds randomly not coming up after reboot or wicked restart. [bsc#1218668] ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2241=1 openSUSE-SLE-15.6-2024-2241=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2241=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * wicked-0.6.75-150600.11.6.1 * wicked-debuginfo-0.6.75-150600.11.6.1 * wicked-nbft-0.6.75-150600.11.6.1 * wicked-service-0.6.75-150600.11.6.1 * wicked-debugsource-0.6.75-150600.11.6.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * wicked-0.6.75-150600.11.6.1 * wicked-debuginfo-0.6.75-150600.11.6.1 * wicked-nbft-0.6.75-150600.11.6.1 * wicked-service-0.6.75-150600.11.6.1 * wicked-debugsource-0.6.75-150600.11.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218668

1 0

SUSE-RU-2024:2242-1: important: Recommended update for wicked
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:2242-1 Rating: important References: * bsc#1218668 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for wicked fixes the following issues: * Fix VLANs/bonds randomly not coming up after reboot or wicked restart. [bsc#1218668] ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2242=1 SUSE-2024-2242=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2242=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2242=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * wicked-0.6.75-150500.3.29.1 * wicked-service-0.6.75-150500.3.29.1 * wicked-nbft-0.6.75-150500.3.29.1 * wicked-debugsource-0.6.75-150500.3.29.1 * wicked-debuginfo-0.6.75-150500.3.29.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * wicked-service-0.6.75-150500.3.29.1 * wicked-0.6.75-150500.3.29.1 * wicked-debuginfo-0.6.75-150500.3.29.1 * wicked-debugsource-0.6.75-150500.3.29.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wicked-0.6.75-150500.3.29.1 * wicked-service-0.6.75-150500.3.29.1 * wicked-nbft-0.6.75-150500.3.29.1 * wicked-debugsource-0.6.75-150500.3.29.1 * wicked-debuginfo-0.6.75-150500.3.29.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218668

1 0

SUSE-RU-2024:2237-1: important: Recommended update for sysconfig
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for sysconfig Announcement ID: SUSE-RU-2024:2237-1 Rating: important References: * bsc#1185882 * bsc#1194557 * bsc#1199093 Affected Products: * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that has three fixes can now be installed. ## Description: This update for sysconfig fixes the following issues: * Update to version 0.85.9 * Revert to recommend wicked-service on <= 15.4 * netconfig: remove sed dependency * netconfig/dns-resolver: remove search limit of 6 domains (bsc#1199093) * netconfig: cleanup /var/run leftovers (bsc#1194557) * netconfig: update ntp man page documentation, fix typos * spec: drop legacy migration (from sle11) and rpm-utils * netconfig: revert NM default policy change change (bsc#1185882) With the change to the default policy, netconfig with NetworkManager as network.service accepted settings from all services/programs directly instead only from NetworkManager, where plugins/services have to deliver their settings to apply them ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2237=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2237=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2237=1 ## Package List: * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * sysconfig-debugsource-0.85.9-150400.3.4.1 * sysconfig-netconfig-0.85.9-150400.3.4.1 * sysconfig-0.85.9-150400.3.4.1 * sysconfig-debuginfo-0.85.9-150400.3.4.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sysconfig-debugsource-0.85.9-150400.3.4.1 * sysconfig-netconfig-0.85.9-150400.3.4.1 * sysconfig-0.85.9-150400.3.4.1 * sysconfig-debuginfo-0.85.9-150400.3.4.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sysconfig-debugsource-0.85.9-150400.3.4.1 * sysconfig-netconfig-0.85.9-150400.3.4.1 * sysconfig-0.85.9-150400.3.4.1 * sysconfig-debuginfo-0.85.9-150400.3.4.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1185882 * https://bugzilla.suse.com/show_bug.cgi?id=1194557 * https://bugzilla.suse.com/show_bug.cgi?id=1199093

1 0

SUSE-RU-2024:2238-1: low: Recommended update for libpanel
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for libpanel Announcement ID: SUSE-RU-2024:2238-1 Rating: low References: Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for libpanel fixes the following issues: * Choose higher gcc version to build on SLE and Leap 15 * Update the name of libpanel-1-1 to be compliant with https://en.opensuse.org/openSUSE:Shared_library_packaging_policy ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2238=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2238=1 openSUSE-SLE-15.6-2024-2238=1 ## Package List: * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libpanel-1-1-debuginfo-1.4.0-150600.3.3.1 * libpanel-1-1-1.4.0-150600.3.3.1 * libpanel-debugsource-1.4.0-150600.3.3.1 * typelib-1_0-Panel-1-1.4.0-150600.3.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libpanel-1-1-1.4.0-150600.3.3.1 * libpanel-1-1-debuginfo-1.4.0-150600.3.3.1 * libpanel-debugsource-1.4.0-150600.3.3.1 * libpanel-devel-1.4.0-150600.3.3.1 * typelib-1_0-Panel-1-1.4.0-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * libpanel-lang-1.4.0-150600.3.3.1

1 0

SUSE-RU-2024:2224-1: important: Recommended update for java-1_8_0-openjdk
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for java-1_8_0-openjdk Announcement ID: SUSE-RU-2024:2224-1 Rating: important References: * bsc#1226274 Affected Products: * Legacy Module 15-SP5 * Legacy Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for java-1_8_0-openjdk fixes the following issues: * Fix condition enabling shenandoah GC (bsc#1226274) * Disable shenandoah for all distributions, since the shenandoah hotspot tarball is rather out of sync ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2224=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2224=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-2224=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-2224=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2224=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2224=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2224=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2224=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2224=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2224=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2224=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2224=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-src-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-accessibility-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * openSUSE Leap 15.5 (noarch) * java-1_8_0-openjdk-javadoc-1.8.0.412-150000.3.94.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-src-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-accessibility-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * openSUSE Leap 15.6 (noarch) * java-1_8_0-openjdk-javadoc-1.8.0.412-150000.3.94.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * java-1_8_0-openjdk-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-debugsource-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-demo-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-devel-debuginfo-1.8.0.412-150000.3.94.1 * java-1_8_0-openjdk-headless-1.8.0.412-150000.3.94.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226274

1 0

SUSE-RU-2024:2225-1: important: Recommended update for kdump
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for kdump Announcement ID: SUSE-RU-2024:2225-1 Rating: important References: * bsc#1191410 * bsc#1222228 * bsc#1224214 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has three fixes can now be installed. ## Description: This update for kdump fixes the following issues: * Use fadump=nocma when user data not filtered out (bsc#1224214) * Differentiate between uninstall and upgrade in postun/preun (bsc#1191410) * Return success from pre, post, preun and postun scriplets (bsc#1222228) * Update calibrate values for SLE-15-SP6 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2225=1 openSUSE-SLE-15.6-2024-2225=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2225=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kdump-debugsource-2.0.6+git18.g6fc4531-150600.3.3.1 * kdump-2.0.6+git18.g6fc4531-150600.3.3.1 * kdump-debuginfo-2.0.6+git18.g6fc4531-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * kdump-debugsource-2.0.6+git18.g6fc4531-150600.3.3.1 * kdump-2.0.6+git18.g6fc4531-150600.3.3.1 * kdump-debuginfo-2.0.6+git18.g6fc4531-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1191410 * https://bugzilla.suse.com/show_bug.cgi?id=1222228 * https://bugzilla.suse.com/show_bug.cgi?id=1224214

1 0

SUSE-RU-2024:2226-1: important: Recommended update for apache2
by OPENSUSE-UPDATES 26 Jun '24

26 Jun '24

# Recommended update for apache2 Announcement ID: SUSE-RU-2024:2226-1 Rating: important References: * bsc#1226217 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update for apache2 fixes the following issues: * Apache ignores headers sent by CGI scripts (bsc#1226217) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2226=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2226=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2226=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2226=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2226=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2226=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2226=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2226=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2226=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2226=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2226=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2226=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2226=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-2226=1 ## Package List: * Server Applications Module 15-SP6 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Manager Proxy 4.3 (x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Manager Proxy 4.3 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Manager Server 4.3 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * apache2-event-2.4.51-150400.6.20.1 * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-event-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * apache2-example-pages-2.4.51-150400.6.20.1 * openSUSE Leap 15.4 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-event-2.4.51-150400.6.20.1 * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-event-debuginfo-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * apache2-example-pages-2.4.51-150400.6.20.1 * openSUSE Leap 15.5 (noarch) * apache2-doc-2.4.51-150400.6.20.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-utils-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-utils-debuginfo-2.4.51-150400.6.20.1 * apache2-prefork-debuginfo-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-2.4.51-150400.6.20.1 * apache2-prefork-2.4.51-150400.6.20.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * apache2-event-2.4.51-150400.6.20.1 * apache2-event-debuginfo-2.4.51-150400.6.20.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-devel-2.4.51-150400.6.20.1 * apache2-worker-debuginfo-2.4.51-150400.6.20.1 * apache2-debugsource-2.4.51-150400.6.20.1 * apache2-worker-2.4.51-150400.6.20.1 * apache2-debuginfo-2.4.51-150400.6.20.1 * Server Applications Module 15-SP5 (noarch) * apache2-doc-2.4.51-150400.6.20.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226217

1 0

SUSE-RU-2024:2222-1: important: Recommended update for cloud-init
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Recommended update for cloud-init Announcement ID: SUSE-RU-2024:2222-1 Rating: important References: * bsc#1219680 * bsc#1223469 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for cloud-init fixes the following issues: * Brute force approach to skip renames if the device is already present (bsc#1219680) * Handle the existence of /usr/etc/sudoers to search for the expected include location (bsc#1223469) * Do not enable cloud-init on systems where there is no DMI just because no data source has been found. No data source means cloud-init will not run. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2222=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2222=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2222=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-2222=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-2222=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-2222=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2222=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2222=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cloud-init-doc-23.3-150100.8.82.3 * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * cloud-init-doc-23.3-150100.8.82.3 * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * cloud-init-config-suse-23.3-150100.8.82.3 * cloud-init-23.3-150100.8.82.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219680 * https://bugzilla.suse.com/show_bug.cgi?id=1223469

1 0

SUSE-RU-2024:2212-1: moderate: Recommended update for release-notes-sled
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Recommended update for release-notes-sled Announcement ID: SUSE-RU-2024:2212-1 Rating: moderate References: * bsc#933411 * jsc#PED-7339 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 An update that contains one feature and has one fix can now be installed. ## Description: This update for release-notes-sled fixes the following issues: * Version update (bsc#933411) * Added note about intel-gpu-tools removal (jsc#PED-7339) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Desktop 15 SP6 zypper in -t patch SUSE-SLE-Product-SLED-15-SP6-2024-2212=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2212=1 openSUSE-SLE-15.6-2024-2212=1 ## Package List: * SUSE Linux Enterprise Desktop 15 SP6 (noarch) * release-notes-sled-15.6.20240612-150600.3.3.3 * openSUSE Leap 15.6 (noarch) * release-notes-sled-15.6.20240612-150600.3.3.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=933411 * https://jira.suse.com/browse/PED-7339

1 0

SUSE-SU-2024:2221-1: important: Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2221-1 Rating: important References: * bsc#1223059 Cross-References: * CVE-2024-26852 CVSS scores: * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_44 fixes one issue. The following security issue was fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2221=1 SUSE-2024-2204=1 SUSE-2024-2206=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2221=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-2204=1 SUSE-SLE-Module-Live- Patching-15-SP5-2024-2206=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_31-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_7-debugsource-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_31-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_6-debugsource-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-8-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-7-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_31-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_7-debugsource-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_31-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_6-debugsource-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-8-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-7-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2205-1: important: Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2205-1 Rating: important References: * bsc#1218259 * bsc#1223059 Cross-References: * CVE-2023-6931 * CVE-2024-26852 CVSS scores: * CVE-2023-6931 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6931 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_39 fixes several issues. The following security issues were fixed: * CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218259). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2205=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2205=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_39-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-8-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_8-debugsource-8-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_39-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-8-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_8-debugsource-8-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6931.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1218259 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2207-1: important: Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2207-1 Rating: important References: * bsc#1219296 * bsc#1220211 * bsc#1220828 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52340 * CVE-2023-52502 * CVE-2023-6546 * CVE-2024-26585 * CVE-2024-26610 * CVE-2024-26622 * CVE-2024-26766 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). * CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2207=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2207=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-5-150500.11.8.1 * kernel-livepatch-SLE15-SP5_Update_10-debugsource-5-150500.11.8.1 * kernel-livepatch-5_14_21-150500_55_49-default-5-150500.11.8.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-5-150500.11.8.1 * kernel-livepatch-SLE15-SP5_Update_10-debugsource-5-150500.11.8.1 * kernel-livepatch-5_14_21-150500_55_49-default-5-150500.11.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1219296 * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220828 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:2208-1: important: Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2208-1 Rating: important References: * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52502 * CVE-2023-6546 * CVE-2024-26610 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2208=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2208=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_52-default-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_52-default-debuginfo-3-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_11-debugsource-3-150500.11.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_52-default-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_52-default-debuginfo-3-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_11-debugsource-3-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:2209-1: important: Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2209-1 Rating: important References: * bsc#1221302 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2024-26610 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2209=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2209=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_59-default-debuginfo-3-150500.11.10.1 * kernel-livepatch-SLE15-SP5_Update_12-debugsource-3-150500.11.10.1 * kernel-livepatch-5_14_21-150500_55_59-default-3-150500.11.10.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_59-default-debuginfo-3-150500.11.10.1 * kernel-livepatch-SLE15-SP5_Update_12-debugsource-3-150500.11.10.1 * kernel-livepatch-5_14_21-150500_55_59-default-3-150500.11.10.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:2216-1: important: Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2216-1 Rating: important References: * bsc#1222118 * bsc#1223059 * bsc#1224043 Cross-References: * CVE-2022-48687 * CVE-2023-52628 * CVE-2024-26852 CVSS scores: * CVE-2022-48687 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2022-48687 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-52628 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: * CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). * CVE-2022-48687: Fixed fix out-of-bounds read when setting HMAC data (bsc#1224043). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2216=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2216=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_0-debugsource-13-150500.9.1 * kernel-livepatch-5_14_21-150500_53-default-debuginfo-13-150500.9.1 * kernel-livepatch-5_14_21-150500_53-default-13-150500.9.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_0-debugsource-13-150500.9.1 * kernel-livepatch-5_14_21-150500_53-default-debuginfo-13-150500.9.1 * kernel-livepatch-5_14_21-150500_53-default-13-150500.9.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48687.html * https://www.suse.com/security/cve/CVE-2023-52628.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1222118 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1224043

1 0

SUSE-SU-2024:2217-1: important: Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2217-1 Rating: important References: * bsc#1222118 * bsc#1223059 Cross-References: * CVE-2023-52628 * CVE-2024-26852 CVSS scores: * CVE-2023-52628 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: * CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2220=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-2217=1 SUSE-SLE-Module-Live- Patching-15-SP5-2024-2218=1 SUSE-SLE-Module-Live-Patching-15-SP5-2024-2219=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2217=1 SUSE-2024-2218=1 SUSE-2024-2219=1 SUSE-2024-2220=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_3-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-debuginfo-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_5-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_7-default-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_1-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_7-default-debuginfo-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_2-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-10-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_3-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-debuginfo-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_5-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-11-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_1-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_7-default-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_19-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_7-default-debuginfo-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_12-default-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_2-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-10-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52628.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1222118 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-RU-2024:2192-1: moderate: Recommended update for certification-sles-eal4
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Recommended update for certification-sles-eal4 Announcement ID: SUSE-RU-2024:2192-1 Rating: moderate References: * bsc#1221928 Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for certification-sles-eal4 fixes the following issues: Update to version 15.6+git20240502.420b237: * fix permissions * remove the rootlogin * set the crypto policies to FIPS (bsc#1221928) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2192=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2192=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * certification-sles-eal4-15.6+git20240502.420b237-150600.14.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * certification-sles-eal4-15.6+git20240502.420b237-150600.14.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221928

1 0

SUSE-FU-2024:2194-1: moderate: Feature update for openldap2_5
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Feature update for openldap2_5 Announcement ID: SUSE-FU-2024:2194-1 Rating: moderate References: * jsc#PED-7178 * jsc#PED-7240 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains two features can now be installed. ## Description: This update for openldap2_5 fixes the following issues: Added initial OpenLDAP 2.5 version 2.5.17+50, (jsc#PED-7178,jsc#PED-7240) This version is in parallel to the existing openldap 2.4 version. The openldap 2.5 server is also shipped in the openldap2_5 package. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2194=1 SUSE-2024-2194=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2194=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2194=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2194=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-2194=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2194=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 * openSUSE Leap 15.5 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 * openSUSE Leap 15.6 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP5 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openldap2_5-devel-2.5.17+50-150500.11.3.1 * libldap-2_5-0-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-client-2.5.17+50-150500.11.3.1 * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * libldap-2_5-0-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * Basesystem Module 15-SP6 (noarch) * openldap2_5-doc-2.5.17+50-150500.11.3.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openldap2_5-debugsource-2.5.17+50-150500.11.3.1 * openldap2_5-2.5.17+50-150500.11.3.1 * openldap2_5-debuginfo-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-2.5.17+50-150500.11.3.1 * openldap2_5-contrib-debuginfo-2.5.17+50-150500.11.3.1 ## References: * https://jira.suse.com/browse/PED-7178 * https://jira.suse.com/browse/PED-7240

1 0

SUSE-SU-2024:2197-1: important: Security update for openssl-1_1-livepatches
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for openssl-1_1-livepatches Announcement ID: SUSE-SU-2024:2197-1 Rating: important References: * bsc#1224458 * bsc#1225552 Cross-References: * CVE-2024-4741 CVSS scores: * CVE-2024-4741 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for openssl-1_1-livepatches fixes the following issues: * CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2197=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2197=1 ## Package List: * openSUSE Leap 15.4 (x86_64) * openssl-1_1-livepatches-debuginfo-0.4-150400.3.11.1 * openssl-1_1-livepatches-0.4-150400.3.11.1 * openssl-1_1-livepatches-debugsource-0.4-150400.3.11.1 * SUSE Linux Enterprise Live Patching 15-SP4 (x86_64) * openssl-1_1-livepatches-0.4-150400.3.11.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4741.html * https://bugzilla.suse.com/show_bug.cgi?id=1224458 * https://bugzilla.suse.com/show_bug.cgi?id=1225552

1 0

SUSE-SU-2024:2198-1: important: Security update for ghostscript
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for ghostscript Announcement ID: SUSE-SU-2024:2198-1 Rating: important References: * bsc#1225491 Cross-References: * CVE-2024-33871 CVSS scores: * CVE-2024-33871 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issues: * CVE-2024-33871: Prevent OPVP device arbitrary code execution via custom Driver library. (bsc#1225491) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2198=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2198=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2198=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2198=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2198=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2198=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2198=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2198=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2198=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2198=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2198=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2198=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2198=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2198=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2198=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2198=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2198=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2198=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2198=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Manager Proxy 4.3 (x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * ghostscript-9.52-150000.191.1 * ghostscript-devel-9.52-150000.191.1 * ghostscript-x11-debuginfo-9.52-150000.191.1 * ghostscript-debugsource-9.52-150000.191.1 * ghostscript-debuginfo-9.52-150000.191.1 * ghostscript-x11-9.52-150000.191.1 ## References: * https://www.suse.com/security/cve/CVE-2024-33871.html * https://bugzilla.suse.com/show_bug.cgi?id=1225491

1 0

SUSE-SU-2024:2200-1: moderate: Security update for avahi
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for avahi Announcement ID: SUSE-SU-2024:2200-1 Rating: moderate References: * bsc#1216594 * bsc#1216598 * bsc#1226586 Cross-References: * CVE-2023-38469 * CVE-2023-38471 CVSS scores: * CVE-2023-38469 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38469 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38471 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-38471 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for avahi fixes the following issues: * CVE-2023-38471: Fixed a reachable assertion in dbus_set_host_name. (bsc#1216594) * CVE-2023-38469: Fixed a reachable assertion in avahi_dns_packet_append_record. (bsc#1216598) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2200=1 SUSE-2024-2200=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2200=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2200=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2200=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python3-avahi-0.8-150600.15.3.1 * libavahi-qt5-devel-0.8-150600.15.3.1 * avahi-debugsource-0.8-150600.15.3.1 * libavahi-client3-0.8-150600.15.3.1 * libavahi-glib-devel-0.8-150600.15.3.1 * typelib-1_0-Avahi-0_6-0.8-150600.15.3.1 * libdns_sd-debuginfo-0.8-150600.15.3.1 * avahi-autoipd-0.8-150600.15.3.1 * libavahi-gobject0-debuginfo-0.8-150600.15.3.1 * libavahi-gobject-devel-0.8-150600.15.3.1 * avahi-debuginfo-0.8-150600.15.3.1 * python3-avahi-gtk-0.8-150600.15.3.1 * libavahi-gobject0-0.8-150600.15.3.1 * libavahi-devel-0.8-150600.15.3.1 * avahi-0.8-150600.15.3.1 * libavahi-core7-0.8-150600.15.3.1 * libdns_sd-0.8-150600.15.3.1 * libavahi-common3-debuginfo-0.8-150600.15.3.1 * avahi-compat-howl-devel-0.8-150600.15.3.1 * libavahi-libevent1-0.8-150600.15.3.1 * avahi-utils-debuginfo-0.8-150600.15.3.1 * libavahi-qt5-1-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150600.15.3.1 * libhowl0-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-0.8-150600.15.3.1 * avahi-utils-0.8-150600.15.3.1 * libavahi-glib1-debuginfo-0.8-150600.15.3.1 * avahi-glib2-debugsource-0.8-150600.15.3.1 * libavahi-client3-debuginfo-0.8-150600.15.3.1 * libhowl0-debuginfo-0.8-150600.15.3.1 * libavahi-core7-debuginfo-0.8-150600.15.3.1 * libavahi-common3-0.8-150600.15.3.1 * libavahi-qt5-1-debuginfo-0.8-150600.15.3.1 * avahi-utils-gtk-debuginfo-0.8-150600.15.3.1 * avahi-autoipd-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-0.8-150600.15.3.1 * libavahi-libevent1-debuginfo-0.8-150600.15.3.1 * avahi-qt5-debugsource-0.8-150600.15.3.1 * avahi-compat-mDNSResponder-devel-0.8-150600.15.3.1 * avahi-utils-gtk-0.8-150600.15.3.1 * openSUSE Leap 15.6 (x86_64) * libavahi-glib1-32bit-debuginfo-0.8-150600.15.3.1 * avahi-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-32bit-0.8-150600.15.3.1 * libdns_sd-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-common3-32bit-0.8-150600.15.3.1 * libavahi-client3-32bit-debuginfo-0.8-150600.15.3.1 * libdns_sd-32bit-0.8-150600.15.3.1 * libavahi-client3-32bit-0.8-150600.15.3.1 * libavahi-common3-32bit-debuginfo-0.8-150600.15.3.1 * openSUSE Leap 15.6 (noarch) * avahi-lang-0.8-150600.15.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libavahi-common3-64bit-debuginfo-0.8-150600.15.3.1 * libdns_sd-64bit-0.8-150600.15.3.1 * avahi-64bit-debuginfo-0.8-150600.15.3.1 * libdns_sd-64bit-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-64bit-debuginfo-0.8-150600.15.3.1 * libavahi-glib1-64bit-0.8-150600.15.3.1 * libavahi-client3-64bit-debuginfo-0.8-150600.15.3.1 * libavahi-common3-64bit-0.8-150600.15.3.1 * libavahi-client3-64bit-0.8-150600.15.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * avahi-debugsource-0.8-150600.15.3.1 * libavahi-client3-0.8-150600.15.3.1 * libavahi-glib-devel-0.8-150600.15.3.1 * typelib-1_0-Avahi-0_6-0.8-150600.15.3.1 * libdns_sd-debuginfo-0.8-150600.15.3.1 * libavahi-gobject0-debuginfo-0.8-150600.15.3.1 * avahi-debuginfo-0.8-150600.15.3.1 * libavahi-gobject0-0.8-150600.15.3.1 * libavahi-devel-0.8-150600.15.3.1 * avahi-0.8-150600.15.3.1 * libavahi-core7-0.8-150600.15.3.1 * libdns_sd-0.8-150600.15.3.1 * libavahi-common3-debuginfo-0.8-150600.15.3.1 * avahi-compat-howl-devel-0.8-150600.15.3.1 * libavahi-libevent1-0.8-150600.15.3.1 * avahi-utils-debuginfo-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150600.15.3.1 * libhowl0-0.8-150600.15.3.1 * libavahi-ui-gtk3-0-0.8-150600.15.3.1 * avahi-utils-0.8-150600.15.3.1 * libavahi-glib1-debuginfo-0.8-150600.15.3.1 * avahi-glib2-debugsource-0.8-150600.15.3.1 * libavahi-client3-debuginfo-0.8-150600.15.3.1 * libhowl0-debuginfo-0.8-150600.15.3.1 * libavahi-core7-debuginfo-0.8-150600.15.3.1 * libavahi-common3-0.8-150600.15.3.1 * libavahi-glib1-0.8-150600.15.3.1 * libavahi-libevent1-debuginfo-0.8-150600.15.3.1 * avahi-compat-mDNSResponder-devel-0.8-150600.15.3.1 * Basesystem Module 15-SP6 (noarch) * avahi-lang-0.8-150600.15.3.1 * Basesystem Module 15-SP6 (x86_64) * avahi-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-common3-32bit-0.8-150600.15.3.1 * libavahi-client3-32bit-debuginfo-0.8-150600.15.3.1 * libavahi-client3-32bit-0.8-150600.15.3.1 * libavahi-common3-32bit-debuginfo-0.8-150600.15.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * avahi-autoipd-debuginfo-0.8-150600.15.3.1 * avahi-debuginfo-0.8-150600.15.3.1 * avahi-debugsource-0.8-150600.15.3.1 * avahi-glib2-debugsource-0.8-150600.15.3.1 * avahi-autoipd-0.8-150600.15.3.1 * avahi-utils-gtk-0.8-150600.15.3.1 * libavahi-gobject-devel-0.8-150600.15.3.1 * avahi-utils-gtk-debuginfo-0.8-150600.15.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * avahi-debuginfo-0.8-150600.15.3.1 * python3-avahi-0.8-150600.15.3.1 * avahi-debugsource-0.8-150600.15.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38469.html * https://www.suse.com/security/cve/CVE-2023-38471.html * https://bugzilla.suse.com/show_bug.cgi?id=1216594 * https://bugzilla.suse.com/show_bug.cgi?id=1216598 * https://bugzilla.suse.com/show_bug.cgi?id=1226586

1 0

SUSE-SU-2024:2201-1: moderate: Security update for wget
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for wget Announcement ID: SUSE-SU-2024:2201-1 Rating: moderate References: * bsc#1226419 Cross-References: * CVE-2024-38428 CVSS scores: * CVE-2024-38428 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for wget fixes the following issues: * CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2201=1 openSUSE-SLE-15.6-2024-2201=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2201=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * wget-1.20.3-150600.19.3.1 * wget-debugsource-1.20.3-150600.19.3.1 * wget-debuginfo-1.20.3-150600.19.3.1 * openSUSE Leap 15.6 (noarch) * wget-lang-1.20.3-150600.19.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * wget-1.20.3-150600.19.3.1 * wget-debugsource-1.20.3-150600.19.3.1 * wget-debuginfo-1.20.3-150600.19.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-38428.html * https://bugzilla.suse.com/show_bug.cgi?id=1226419

1 0

SUSE-SU-2024:2191-1: important: Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
by OPENSUSE-UPDATES 25 Jun '24

25 Jun '24

# Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:2191-1 Rating: important References: * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2024-26610 * CVE-2024-26766 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2191=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2191=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_25-debugsource-3-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-3-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-3-150400.9.8.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_25-debugsource-3-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-3-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-3-150400.9.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-RU-2024:1531-2: moderate: Recommended update for golang-github-prometheus-alertmanager, golang-github-prometheus-node_exporter
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for golang-github-prometheus-alertmanager, golang-github- prometheus-node_exporter Announcement ID: SUSE-RU-2024:1531-2 Rating: moderate References: * jsc#MSQA-760 * jsc#PED-7893 * jsc#PED-7928 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that contains three features can now be installed. ## Description: This update for golang-github-prometheus-alertmanager, golang-github-prometheus- node_exporter fixes the following issues: * update to 1.7.0 (jsc#PED-7893, jsc#PED-7928): * [FEATURE] Add ZFS freebsd per dataset stats #2753 * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721 * [ENHANCEMENT] Parallelize stat calls in Linux filesystem collector #1772 * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711 * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric #2778 * [ENHANCEMENT] Improve qdisc collector performance #2779 * [ENHANCEMENT] Add include and exclude filter for hwmon collector #2699 * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead of procfs #2777 * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754 * [BUGFIX] Fallback to 32-bit stats in netdev #2757 * [BUGFIX] Close btrfs.FS handle after use #2780 * [BUGFIX] Move RO status before error return #2807 * [BUFFIX] Fix promhttp_metric_handler_errors_total being always active #2808 * [BUGFIX] Fix nfsd v4 index miss #2824 * update to 1.6.1: (no source code changes in this release) * BuildRequire go1.20 * update to 1.6.0: * [CHANGE] Fix cpustat when some cpus are offline #2318 * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605 * [CHANGE] Deprecate ntp collector #2603 * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583 * [CHANGE] Deprecate supervisord collector #2685 * [FEATURE] Enable uname collector on NetBSD #2559 * [FEATURE] NetBSD support for the meminfo collector #2570 * [FEATURE] NetBSD support for CPU collector #2626 * [FEATURE] Add FreeBSD collector for netisr subsystem #2668 * [FEATURE] Add softirqs collector #2669 * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449 * [ENHANCEMENT] Add administrative state of Linux network interfaces #2515 * [ENHANCEMENT] Log current value of GOMAXPROCS #2537 * [ENHANCEMENT] Add profiler options for perf collector #2542 * [ENHANCEMENT] Allow root path as metrics path #2590 * [ENHANCEMENT] Add cpu frequency governor metrics #2569 * [ENHANCEMENT] Add new landing page #2622 * [ENHANCEMENT] Reduce privileges needed for btrfs device stats #2634 * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687 * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats #2612 * [ENHANCEMENT] Read missing from netlink netclass attributes from sysfs #2669 * [BUGFIX] perf: fixes for automatically detecting the correct tracefs mountpoints #2553 * [BUGFIX] Fix `thermal_zone` collector noise @2554 * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD 2584 * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631 * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605 * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637 * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in OpenBSD #2663 * change go_modules archive in _service to use obscpio file ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1531=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1531=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1531=1 ## Package List: * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-node_exporter-1.7.0-150100.3.29.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-alertmanager-debuginfo-0.26.0-150100.4.22.1 * golang-github-prometheus-alertmanager-0.26.0-150100.4.22.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-alertmanager-debuginfo-0.26.0-150100.4.22.1 * golang-github-prometheus-node_exporter-1.7.0-150100.3.29.1 * golang-github-prometheus-alertmanager-0.26.0-150100.4.22.1 ## References: * https://jira.suse.com/browse/MSQA-760 * https://jira.suse.com/browse/PED-7893 * https://jira.suse.com/browse/PED-7928

1 0

SUSE-SU-2024:1530-2: moderate: Security update for grafana and mybatis
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for grafana and mybatis Announcement ID: SUSE-SU-2024:1530-2 Rating: moderate References: * bsc#1219912 * bsc#1222155 * jsc#MSQA-760 Cross-References: * CVE-2023-6152 * CVE-2024-1313 CVSS scores: * CVE-2023-6152 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2024-1313 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities and contains one feature can now be installed. ## Description: This update for grafana and mybatis fixes the following issues: grafana was updated to version 9.5.18: * Grafana now requires Go 1.20 * Security issues fixed: * CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155) * CVE-2023-6152: Add email verification when updating user email (bsc#1219912) * Other non-security related changes: * Version 9.5.17: * [FEATURE] Alerting: Backport use Alertmanager API v2 * Version 9.5.16: * [BUGFIX] Annotations: Split cleanup into separate queries and deletes to avoid deadlocks on MySQL * Version 9.5.15: * [FEATURE] Alerting: Attempt to retry retryable errors * Version 9.5.14: * [BUGFIX] Alerting: Fix state manager to not keep datasource_uid and ref_id labels in state after Error * [BUGFIX] Transformations: Config overrides being lost when config from query transform is applied * [BUGFIX] LDAP: Fix enable users on successfull login * Version 9.5.13: * [BUGFIX] BrowseDashboards: Only remember the most recent expanded folder * [BUGFIX] Licensing: Pass func to update env variables when starting plugin * Version 9.5.12: * [FEATURE] Azure: Add support for Workload Identity authentication * Version 9.5.9: * [FEATURE] SSE: Fix DSNode to not panic when response has empty response * [FEATURE] Prometheus: Handle the response with different field key order * [BUGFIX] LDAP: Fix user disabling mybatis: * `apache-commons-ognl` is now a non-optional dependency * Fixed building with log4j v1 and v2 dependencies ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1530=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1530=1 ## Package List: * openSUSE Leap 15.6 (noarch) * mybatis-javadoc-3.5.6-150200.5.6.1 * mybatis-3.5.6-150200.5.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * grafana-9.5.18-150200.3.56.1 * grafana-debuginfo-9.5.18-150200.3.56.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * grafana-9.5.18-150200.3.56.1 * grafana-debuginfo-9.5.18-150200.3.56.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6152.html * https://www.suse.com/security/cve/CVE-2024-1313.html * https://bugzilla.suse.com/show_bug.cgi?id=1219912 * https://bugzilla.suse.com/show_bug.cgi?id=1222155 * https://jira.suse.com/browse/MSQA-760

1 0

SUSE-RU-2024:2181-1: moderate: Recommended update for sles15-image
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for sles15-image Announcement ID: SUSE-RU-2024:2181-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 An update that can now be installed. ## Description: This update for sles15-image fixes the following issues: * restore procps in 15.5, will be gone with 15.6 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2181=1 ## Package List: * openSUSE Leap 15.5 (noarch) * container:sles15-image-15.0.0-36.12.1

1 0

SUSE-RU-2024:0950-2: important: Recommended update for spack
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for spack Announcement ID: SUSE-RU-2024:0950-2 Rating: important References: * bsc#1221471 * bsc#1221503 Affected Products: * HPC Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 An update that has two fixes can now be installed. ## Description: This update for spack fixes the following issues: * Spack was updated to version 0.21.2: * Bugs fixed: * Containerize: accommodate nested or pre-existing `spack-env` paths. * Fix `setup-env` script, when going back and forth between instances. * Fix using fully-qualified namespaces from root specs. * Fix a bug when a required provider is requested for multiple virtuals. * OCI buildcaches: * only push in parallel when forking. * use pickleable errors (#42160) * Fix using sticky variants in externals. * Fix a rare issue with conditional requirements and multi-valued variants. * Recipy updates: * `rust`: add v1.75, rework a few variants. * `py-transformers`: add v4.35.2. * Fix path to setup-env.sh in the Apptainer template (bsc#1221471). * Add libgfortran, libfl2 and libzip5 to the Spack runtime container as the Spack build container has the corresponding devel packages but these libraries are not installed in a BCI-style base container by default (bsc#1221503). * Make python version used configurable. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-950=1 * HPC Module 15-SP6 zypper in -t patch SUSE-SLE-Module-HPC-15-SP6-2024-950=1 ## Package List: * openSUSE Leap 15.6 (noarch) * spack-info-0.21.2-150400.15.2 * spack-recipes-0.21.2-150400.15.2 * spack-man-0.21.2-150400.15.2 * spack-0.21.2-150400.15.2 * HPC Module 15-SP6 (noarch) * spack-info-0.21.2-150400.15.2 * spack-recipes-0.21.2-150400.15.2 * spack-man-0.21.2-150400.15.2 * spack-0.21.2-150400.15.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221471 * https://bugzilla.suse.com/show_bug.cgi?id=1221503

1 0

SUSE-RU-2024:2179-1: moderate: Recommended update for sssd
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for sssd Announcement ID: SUSE-RU-2024:2179-1 Rating: moderate References: * bsc#1226407 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for sssd fixes the following issue: * Reenable pam_sss after upgrade, was removed by sssd-common postun (bsc#1226407) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2179=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2179=1 openSUSE-SLE-15.6-2024-2179=1 ## Package List: * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * sssd-ad-2.9.3-150600.3.6.2 * sssd-ldap-2.9.3-150600.3.6.2 * sssd-ipa-2.9.3-150600.3.6.2 * sssd-kcm-2.9.3-150600.3.6.2 * libipa_hbac-devel-2.9.3-150600.3.6.2 * sssd-ipa-debuginfo-2.9.3-150600.3.6.2 * sssd-2.9.3-150600.3.6.2 * sssd-dbus-2.9.3-150600.3.6.2 * sssd-tools-2.9.3-150600.3.6.2 * sssd-ad-debuginfo-2.9.3-150600.3.6.2 * libsss_simpleifp0-2.9.3-150600.3.6.2 * libipa_hbac0-2.9.3-150600.3.6.2 * python3-sssd-config-2.9.3-150600.3.6.2 * libsss_idmap-devel-2.9.3-150600.3.6.2 * libsss_nss_idmap0-debuginfo-2.9.3-150600.3.6.2 * libsss_idmap0-2.9.3-150600.3.6.2 * libsss_simpleifp-devel-2.9.3-150600.3.6.2 * sssd-dbus-debuginfo-2.9.3-150600.3.6.2 * sssd-debugsource-2.9.3-150600.3.6.2 * libsss_idmap0-debuginfo-2.9.3-150600.3.6.2 * sssd-proxy-debuginfo-2.9.3-150600.3.6.2 * libsss_nss_idmap-devel-2.9.3-150600.3.6.2 * sssd-krb5-common-debuginfo-2.9.3-150600.3.6.2 * sssd-winbind-idmap-2.9.3-150600.3.6.2 * libipa_hbac0-debuginfo-2.9.3-150600.3.6.2 * libsss_nss_idmap0-2.9.3-150600.3.6.2 * sssd-ldap-debuginfo-2.9.3-150600.3.6.2 * libsss_certmap-devel-2.9.3-150600.3.6.2 * libsss_simpleifp0-debuginfo-2.9.3-150600.3.6.2 * python3-sssd-config-debuginfo-2.9.3-150600.3.6.2 * sssd-debuginfo-2.9.3-150600.3.6.2 * sssd-krb5-common-2.9.3-150600.3.6.2 * sssd-kcm-debuginfo-2.9.3-150600.3.6.2 * libsss_certmap0-2.9.3-150600.3.6.2 * sssd-krb5-2.9.3-150600.3.6.2 * libsss_certmap0-debuginfo-2.9.3-150600.3.6.2 * sssd-winbind-idmap-debuginfo-2.9.3-150600.3.6.2 * sssd-tools-debuginfo-2.9.3-150600.3.6.2 * sssd-proxy-2.9.3-150600.3.6.2 * sssd-krb5-debuginfo-2.9.3-150600.3.6.2 * Basesystem Module 15-SP6 (x86_64) * sssd-32bit-2.9.3-150600.3.6.2 * sssd-32bit-debuginfo-2.9.3-150600.3.6.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * sssd-ad-2.9.3-150600.3.6.2 * sssd-ldap-2.9.3-150600.3.6.2 * python3-ipa_hbac-debuginfo-2.9.3-150600.3.6.2 * sssd-ipa-2.9.3-150600.3.6.2 * sssd-kcm-2.9.3-150600.3.6.2 * python3-sss_nss_idmap-2.9.3-150600.3.6.2 * libipa_hbac-devel-2.9.3-150600.3.6.2 * python3-sss-murmur-2.9.3-150600.3.6.2 * sssd-ipa-debuginfo-2.9.3-150600.3.6.2 * sssd-2.9.3-150600.3.6.2 * sssd-dbus-2.9.3-150600.3.6.2 * sssd-tools-2.9.3-150600.3.6.2 * libnfsidmap-sss-debuginfo-2.9.3-150600.3.6.2 * sssd-ad-debuginfo-2.9.3-150600.3.6.2 * libsss_simpleifp0-2.9.3-150600.3.6.2 * libipa_hbac0-2.9.3-150600.3.6.2 * python3-sssd-config-2.9.3-150600.3.6.2 * libsss_idmap-devel-2.9.3-150600.3.6.2 * libsss_nss_idmap0-debuginfo-2.9.3-150600.3.6.2 * libsss_idmap0-2.9.3-150600.3.6.2 * libsss_simpleifp-devel-2.9.3-150600.3.6.2 * sssd-dbus-debuginfo-2.9.3-150600.3.6.2 * sssd-debugsource-2.9.3-150600.3.6.2 * libsss_idmap0-debuginfo-2.9.3-150600.3.6.2 * sssd-proxy-debuginfo-2.9.3-150600.3.6.2 * libsss_nss_idmap-devel-2.9.3-150600.3.6.2 * sssd-krb5-common-debuginfo-2.9.3-150600.3.6.2 * sssd-winbind-idmap-2.9.3-150600.3.6.2 * libipa_hbac0-debuginfo-2.9.3-150600.3.6.2 * libnfsidmap-sss-2.9.3-150600.3.6.2 * libsss_nss_idmap0-2.9.3-150600.3.6.2 * sssd-ldap-debuginfo-2.9.3-150600.3.6.2 * libsss_certmap-devel-2.9.3-150600.3.6.2 * libsss_simpleifp0-debuginfo-2.9.3-150600.3.6.2 * python3-sssd-config-debuginfo-2.9.3-150600.3.6.2 * python3-ipa_hbac-2.9.3-150600.3.6.2 * sssd-debuginfo-2.9.3-150600.3.6.2 * sssd-krb5-common-2.9.3-150600.3.6.2 * sssd-kcm-debuginfo-2.9.3-150600.3.6.2 * libsss_certmap0-2.9.3-150600.3.6.2 * python3-sss_nss_idmap-debuginfo-2.9.3-150600.3.6.2 * sssd-krb5-2.9.3-150600.3.6.2 * libsss_certmap0-debuginfo-2.9.3-150600.3.6.2 * sssd-winbind-idmap-debuginfo-2.9.3-150600.3.6.2 * sssd-tools-debuginfo-2.9.3-150600.3.6.2 * python3-sss-murmur-debuginfo-2.9.3-150600.3.6.2 * sssd-proxy-2.9.3-150600.3.6.2 * sssd-krb5-debuginfo-2.9.3-150600.3.6.2 * openSUSE Leap 15.6 (x86_64) * sssd-32bit-2.9.3-150600.3.6.2 * sssd-32bit-debuginfo-2.9.3-150600.3.6.2 * openSUSE Leap 15.6 (aarch64_ilp32) * sssd-64bit-debuginfo-2.9.3-150600.3.6.2 * sssd-64bit-2.9.3-150600.3.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226407

1 0

SUSE-SU-2024:2180-1: important: Security update for vte
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for vte Announcement ID: SUSE-SU-2024:2180-1 Rating: important References: * bsc#1226134 Cross-References: * CVE-2024-37535 CVSS scores: * CVE-2024-37535 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for vte fixes the following issues: * CVE-2024-37535: Fixed a bug that allowed an attacker to cause a denial of service (memory consumption) via a window resize escape. (bsc#1226134) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2180=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2180=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2180=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2180=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2180=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2180=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2180=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2180=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-2180=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2180=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2180=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2180=1 ## Package List: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * vte-lang-0.66.2-150400.3.5.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * vte-lang-0.66.2-150400.3.5.1 * SUSE Manager Proxy 4.3 (x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * vte-debugsource-0.66.2-150400.3.5.1 * vte-tools-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * glade-catalog-vte-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * vte-tools-debuginfo-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * openSUSE Leap 15.4 (noarch) * vte-lang-0.66.2-150400.3.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * vte-tools-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * glade-catalog-vte-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * vte-tools-debuginfo-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * openSUSE Leap 15.5 (noarch) * vte-lang-0.66.2-150400.3.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * Desktop Applications Module 15-SP5 (noarch) * vte-lang-0.66.2-150400.3.5.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * vte-lang-0.66.2-150400.3.5.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * vte-lang-0.66.2-150400.3.5.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * vte-lang-0.66.2-150400.3.5.1 ## References: * https://www.suse.com/security/cve/CVE-2024-37535.html * https://bugzilla.suse.com/show_bug.cgi?id=1226134

1 0

SUSE-SU-2024:2168-1: important: Security update for gnome-settings-daemon
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for gnome-settings-daemon Announcement ID: SUSE-SU-2024:2168-1 Rating: important References: * bsc#1226423 Cross-References: * CVE-2024-38394 CVSS scores: * CVE-2024-38394 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for gnome-settings-daemon fixes the following issues: * CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy (bsc#1226423). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2168=1 SUSE-2024-2168=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-2168=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * gnome-settings-daemon-debugsource-41.0-150500.4.3.1 * gnome-settings-daemon-devel-41.0-150500.4.3.1 * gnome-settings-daemon-41.0-150500.4.3.1 * gnome-settings-daemon-debuginfo-41.0-150500.4.3.1 * openSUSE Leap 15.5 (noarch) * gnome-settings-daemon-lang-41.0-150500.4.3.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gnome-settings-daemon-debugsource-41.0-150500.4.3.1 * gnome-settings-daemon-devel-41.0-150500.4.3.1 * gnome-settings-daemon-41.0-150500.4.3.1 * gnome-settings-daemon-debuginfo-41.0-150500.4.3.1 * Desktop Applications Module 15-SP5 (noarch) * gnome-settings-daemon-lang-41.0-150500.4.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-38394.html * https://bugzilla.suse.com/show_bug.cgi?id=1226423

1 0

SUSE-SU-2024:2170-1: important: Security update for gnome-settings-daemon
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for gnome-settings-daemon Announcement ID: SUSE-SU-2024:2170-1 Rating: important References: * bsc#1226423 Cross-References: * CVE-2024-38394 CVSS scores: * CVE-2024-38394 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for gnome-settings-daemon fixes the following issues: * CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy (bsc#1226423). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2170=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2170=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2170=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2170=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2170=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2170=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-38394.html * https://bugzilla.suse.com/show_bug.cgi?id=1226423

1 0

SUSE-SU-2024:2171-1: important: Security update for libarchive
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for libarchive Announcement ID: SUSE-SU-2024:2171-1 Rating: important References: * bsc#1225971 Cross-References: * CVE-2024-20696 CVSS scores: * CVE-2024-20696 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for libarchive fixes the following issues: * CVE-2024-20696: Fixed heap based out-of-bounds write (bsc#1225971). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2171=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2171=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2171=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2171=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2171=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2171=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2171=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2171=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2171=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2171=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2171=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2171=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2171=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2171=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2171=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2171=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2171=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2171=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2171=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * openSUSE Leap 15.4 (x86_64) * libarchive13-32bit-3.5.1-150400.3.15.1 * libarchive13-32bit-debuginfo-3.5.1-150400.3.15.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libarchive13-64bit-3.5.1-150400.3.15.1 * libarchive13-64bit-debuginfo-3.5.1-150400.3.15.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * openSUSE Leap 15.5 (x86_64) * libarchive13-32bit-3.5.1-150400.3.15.1 * libarchive13-32bit-debuginfo-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libarchive-devel-3.5.1-150400.3.15.1 * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Manager Proxy 4.3 (x86_64) * libarchive-devel-3.5.1-150400.3.15.1 * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libarchive-devel-3.5.1-150400.3.15.1 * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libarchive-devel-3.5.1-150400.3.15.1 * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2024-20696.html * https://bugzilla.suse.com/show_bug.cgi?id=1225971

1 0

SUSE-RU-2024:2172-1: moderate: Recommended update for iproute2
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for iproute2 Announcement ID: SUSE-RU-2024:2172-1 Rating: moderate References: * bsc#1204562 * jsc#PED-6820 * jsc#PED-6844 * jsc#PED-8358 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains three features and has one fix can now be installed. ## Description: This update for iproute2 fixes the following issues: iproute2 was updated to version 6.4 (jsc#PED-6820 jsc#PED-6844, jsc#PED-8358): * Fixed display of bound but unconnected sockets (bsc#1204562) * Changes in version 6.4: * bridge: mdb: added underlay destination IP support, UDP destination port support, destination VNI support, source VNI support, outgoing interface support * macvlan: added the "bclim" parameter * Changes in version 6.3: * New release of iproute2 corresponding to the 6.3 kernel. No large feature improvements only incremental improvements to the bridge mdb support, mostly just bug fixes. * Changes in version 6.2: * f_flower: Introduce L2TPv3 support * bridge: fdb: Add support for locked FDB entries * bridge: link: Add MAC Authentication Bypass (MAB) support * ip: Support --json on `ip neigh get` * tc: Add JSON output to tc-class * Changes in version 6.1: * man: ss.8: fix a typo * testsuite: fix build failure * genl: remove unused vars in Makefile * json: do not escape single quotes * ip-monitor: Do not error out when RTNLGRP_STATS is not available * ip-link: man: Document existence of netns argument in add command * macsec: add Extended Packet Number support * macsec: add user manual description for extended packet number feature * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes * ip: add NLM_F_ECHO support * libnetlink: add offset for nl_dump_ext_ack_done * tc/tc_monitor: print netlink extack message * rtnetlink: add new function rtnl_echo_talk() * ip: fix return value for rtnl_talk failures * iplink_bridge: Add no_linklocal_learn option support * devlink: use dl_no_arg instead of checking dl_argc == 0 * devlink: remove dl_argv_parse_put * mnlg: remove unnused mnlg_socket structure * utils: extract CTRL_ATTR_MAXATTR and save it * devlink: expose nested devlink for a line card object * devlink: load port-ifname map on demand * devlink: fix parallel flash notifications processing * devlink: move use_iec into struct dl * devlink: fix typo in variable name in ifname_map_cb() * devlink: load ifname map on demand from ifname_map_rev_lookup() as well * dcb: unblock mnl_socket_recvfrom if not message received * libnetlink: Fix memory leak in __rtnl_talk_iov() * tc_util: Fix no error return when large parent id used * tc_util: Change datatype for maj to avoid overflow issue * ss: man: add missing entries for MPTCP * ss: man: add missing entries for TIPC * ss: usage: add missing parameters * ss: re-add TIPC query support * devlink: Fix setting parent for 'rate add' * link: display 'allmulti' counter * seg6: add support for flavors in SRv6 End* behaviors * tc: ct: Fix invalid pointer dereference * uapi: update from 6.1 pre rc1 * u32: fix json formatting of flowid * tc_stab: remove dead code * uapi: update for in.h and ip.h * remove #if 0 code * tc: add json support to size table * tc: put size table options in json object * tc/basic: fix json output filter * iplink: support JSON in MPLS output * tc: print errors on stderr * ip: print mpls errors on stderr * tc: make prefix const * man: add missing tc class show * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays * ip link: add sub-command to view and change DSA conduit interface * Changes in version 6.0: * ipstats: Add param.h for musl * Update kernel headers * libbpf: add xdp program name support * iplink: bond_slave: add per port prio support * seg6: add support for SRv6 Headend Reduced Encapsulation * lib: Introduce ppp protocols * f_flower: Introduce PPPoE support * Changes in version 5.19: * ip/iplink_virt_wifi: add support for virt_wifi * Update kernel headers * libnetlink: Add filtering to rtnl_statsdump_req_filter() * ipstats: Add a "set" command * ipstats: Add a group "link" * libbpf: Use bpf_object__load instead of bpf_object__load_xattr * uapi: change name for zerocopy sendfile in tls * bridge: vxlan device vnifilter support * f_flower: Add num of vlans parameter * Changes in version 5.18: * The build issues with libbpf should be fixed now. * Building with clang is now supported. * There are still some warnings with gcc-12 that will need to be fixed in the upstream kernel headers. * Changes in version 5.17: * lib/fs: fix memory leak in get_task_name() * bridge: Remove vlan listing from `bridge link` * bond: add arp_missed_max option * libnetlink: fix socket leak in rtnl_open_byproto() * dcb: Fix error reporting when accessing "dcb app" * tc_util: Fix parsing action control with space and slash * lib: fix ax25.h include for musl * uapi: add missing rose and ax25 files * rdma: Fix res_print_uint() and add res_print_u64() * tc: Add support for ce_threshold_value/mask in fq_codel * Add tmpfiles.d conf for /run/netns * Changes in version 5.16: * devlink: Fix cmd_dev_param_set() to check configuration mode * ip: add AMT support * iplink_can: fix configuration ranges in print_usage() and add unit * tc: flower: Fix buffer overflow on large labels * ip/ipnexthop: fix unsigned overflow in parse_nh_group_type_res() * tc/m_vlan: fix print_vlan() conditional on TCA_VLAN_ACT_PUSH_ETH * iplink_can: add new CAN FD bittiming parameters: Transmitter Delay Compensation (TDC) * Changes in version 5.15: * lib: bpf_legacy: fix bpffs mount when /sys/fs/bpf exists * man: devlink-port: fix the devlink port add synopsis * man: devlink-port: fix pfnum for devlink port add * iptuntap: fix multi-queue flag display * mptcp: unbreak JSON endpoint list * ipneigh: add support to print brief output of neigh cache in tabular format * ip/bond: add LACP active support * ip/tunnel: always print all known attributes * Add, show, link, remove IOAM namespaces and schemas * New IOAM6 encap type for routes * tc/skbmod: Introduce SKBMOD_F_ECN option * tc/f_flower: fix port range parsing ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2172=1 openSUSE-SLE-15.6-2024-2172=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2172=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * iproute2-arpd-debuginfo-6.4-150600.7.3.1 * libnetlink-devel-6.4-150600.7.3.1 * iproute2-debugsource-6.4-150600.7.3.1 * iproute2-arpd-6.4-150600.7.3.1 * iproute2-6.4-150600.7.3.1 * iproute2-bash-completion-6.4-150600.7.3.1 * iproute2-debuginfo-6.4-150600.7.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * iproute2-arpd-debuginfo-6.4-150600.7.3.1 * libnetlink-devel-6.4-150600.7.3.1 * iproute2-debugsource-6.4-150600.7.3.1 * iproute2-arpd-6.4-150600.7.3.1 * iproute2-6.4-150600.7.3.1 * iproute2-bash-completion-6.4-150600.7.3.1 * iproute2-debuginfo-6.4-150600.7.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1204562 * https://jira.suse.com/browse/PED-6820 * https://jira.suse.com/browse/PED-6844 * https://jira.suse.com/browse/PED-8358

1 0

SUSE-SU-2024:2174-1: moderate: Security update for wget
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for wget Announcement ID: SUSE-SU-2024:2174-1 Rating: moderate References: * bsc#1226419 Cross-References: * CVE-2024-38428 CVSS scores: * CVE-2024-38428 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for wget fixes the following issues: * CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2174=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2174=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2174=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.20.1 * wget-debuginfo-1.20.3-150000.3.20.1 * wget-1.20.3-150000.3.20.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.20.1 * wget-debuginfo-1.20.3-150000.3.20.1 * wget-1.20.3-150000.3.20.1 * openSUSE Leap 15.5 (noarch) * wget-lang-1.20.3-150000.3.20.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * wget-debugsource-1.20.3-150000.3.20.1 * wget-debuginfo-1.20.3-150000.3.20.1 * wget-1.20.3-150000.3.20.1 ## References: * https://www.suse.com/security/cve/CVE-2024-38428.html * https://bugzilla.suse.com/show_bug.cgi?id=1226419

1 0

SUSE-RU-2024:2176-1: moderate: Recommended update for grpc, libzypp, protobuf, python-grpcio. re2, zypper
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for grpc, libzypp, protobuf, python-grpcio. re2, zypper Announcement ID: SUSE-RU-2024:2176-1 Rating: moderate References: * bsc#1222261 * bsc#1222343 * bsc#1222348 Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that has three fixes can now be installed. ## Description: This update for grpc, libzypp, protobuf, python-grpcio, re2, zypper fixes the following issues: * rebuild packages using protobuf against newer protobuf and abseil-cpp libraries. (bsc#1222261) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2176=1 openSUSE-SLE-15.5-2024-2176=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2176=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2176=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2176=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2176=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2176=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2176=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2176=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2176=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2176=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2176=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2176=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-2176=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-2176=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * protobuf-debugsource-25.1-150500.12.2.2 * libphonenumber-devel-8.12.23-150500.6.2.1 * libre2-11-debuginfo-20240201-150500.12.2.1 * libgrpc37-debuginfo-1.60.0-150500.11.5.16 * libprotobuf25_1_0-25.1-150500.12.2.2 * zypper-debugsource-1.14.73-150500.6.2.1 * abseil-cpp-devel-20240116.1-150500.13.7.8 * libgrpc1_60-1.60.0-150500.11.5.16 * libupb37-1.60.0-150500.11.5.16 * re2-debugsource-20240201-150500.12.2.1 * protobuf-devel-25.1-150500.12.2.2 * libgrpc++1_60-debuginfo-1.60.0-150500.11.5.16 * protobuf-java-25.1-150500.12.2.2 * python311-grpcio-debuginfo-1.60.1-150500.12.3.16 * libgrpc1_60-debuginfo-1.60.0-150500.11.5.16 * zypper-1.14.73-150500.6.2.1 * libphonenumber8-8.12.23-150500.6.2.1 * libprotoc25_1_0-25.1-150500.12.2.2 * libzypp-17.34.1-150500.6.2.1 * libprotobuf25_1_0-debuginfo-25.1-150500.12.2.2 * re2-devel-20240201-150500.12.2.1 * libupb37-debuginfo-1.60.0-150500.11.5.16 * libzypp-debuginfo-17.34.1-150500.6.2.1 * libphonenumber8-debuginfo-8.12.23-150500.6.2.1 * libzypp-debugsource-17.34.1-150500.6.2.1 * libabsl2401_0_0-debuginfo-20240116.1-150500.13.7.8 * grpc-devel-1.60.0-150500.11.5.16 * libgrpc37-1.60.0-150500.11.5.16 * libgrpc++1_60-1.60.0-150500.11.5.16 * grpc-debuginfo-1.60.0-150500.11.5.16 * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * libzypp-devel-17.34.1-150500.6.2.1 * libprotoc25_1_0-debuginfo-25.1-150500.12.2.2 * libzypp-devel-doc-17.34.1-150500.6.2.1 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * python-grpcio-debugsource-1.60.1-150500.12.3.16 * libabsl2401_0_0-20240116.1-150500.13.7.8 * grpc-debugsource-1.60.0-150500.11.5.16 * python311-protobuf-4.25.1-150500.12.2.2 * grpc-devel-debuginfo-1.60.0-150500.11.5.16 * python311-grpcio-1.60.1-150500.12.3.16 * upb-devel-1.60.0-150500.11.5.16 * libphonenumber-debugsource-8.12.23-150500.6.2.1 * libre2-11-20240201-150500.12.2.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.2.2 * protobuf-devel-debuginfo-25.1-150500.12.2.2 * zypper-debuginfo-1.14.73-150500.6.2.1 * openSUSE Leap 15.5 (x86_64) * libprotoc25_1_0-32bit-25.1-150500.12.2.2 * libabsl2401_0_0-32bit-20240116.1-150500.13.7.8 * libre2-11-32bit-20240201-150500.12.2.1 * libprotobuf25_1_0-32bit-debuginfo-25.1-150500.12.2.2 * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150500.12.2.2 * libprotobuf25_1_0-32bit-25.1-150500.12.2.2 * libre2-11-32bit-debuginfo-20240201-150500.12.2.1 * libprotoc25_1_0-32bit-debuginfo-25.1-150500.12.2.2 * libabsl2401_0_0-32bit-debuginfo-20240116.1-150500.13.7.8 * libprotobuf-lite25_1_0-32bit-25.1-150500.12.2.2 * openSUSE Leap 15.5 (noarch) * zypper-log-1.14.73-150500.6.2.1 * grpc-source-1.60.0-150500.11.5.16 * zypper-aptitude-1.14.73-150500.6.2.1 * zypper-needs-restarting-1.14.73-150500.6.2.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libprotobuf25_1_0-64bit-25.1-150500.12.2.2 * libre2-11-64bit-20240201-150500.12.2.1 * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150500.12.2.2 * libprotoc25_1_0-64bit-debuginfo-25.1-150500.12.2.2 * libprotobuf-lite25_1_0-64bit-25.1-150500.12.2.2 * libabsl2401_0_0-64bit-20240116.1-150500.13.7.8 * libre2-11-64bit-debuginfo-20240201-150500.12.2.1 * libprotobuf25_1_0-64bit-debuginfo-25.1-150500.12.2.2 * libabsl2401_0_0-64bit-debuginfo-20240116.1-150500.13.7.8 * libprotoc25_1_0-64bit-25.1-150500.12.2.2 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libzypp-17.34.1-150500.6.2.1 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libzypp-17.34.1-150500.6.2.1 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libzypp-17.34.1-150500.6.2.1 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libzypp-17.34.1-150500.6.2.1 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * protobuf-debugsource-25.1-150500.12.2.2 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * libzypp-debuginfo-17.34.1-150500.6.2.1 * libzypp-debugsource-17.34.1-150500.6.2.1 * zypper-debugsource-1.14.73-150500.6.2.1 * zypper-1.14.73-150500.6.2.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.2.2 * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * zypper-debuginfo-1.14.73-150500.6.2.1 * libzypp-17.34.1-150500.6.2.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * zypper-needs-restarting-1.14.73-150500.6.2.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.2.2 * libre2-11-debuginfo-20240201-150500.12.2.1 * libgrpc37-debuginfo-1.60.0-150500.11.5.16 * libprotobuf25_1_0-25.1-150500.12.2.2 * zypper-debugsource-1.14.73-150500.6.2.1 * abseil-cpp-devel-20240116.1-150500.13.7.8 * libgrpc1_60-1.60.0-150500.11.5.16 * libupb37-1.60.0-150500.11.5.16 * re2-debugsource-20240201-150500.12.2.1 * libgrpc++1_60-debuginfo-1.60.0-150500.11.5.16 * libgrpc1_60-debuginfo-1.60.0-150500.11.5.16 * zypper-1.14.73-150500.6.2.1 * libprotoc25_1_0-25.1-150500.12.2.2 * libzypp-17.34.1-150500.6.2.1 * libprotobuf25_1_0-debuginfo-25.1-150500.12.2.2 * re2-devel-20240201-150500.12.2.1 * libupb37-debuginfo-1.60.0-150500.11.5.16 * libzypp-debuginfo-17.34.1-150500.6.2.1 * libzypp-debugsource-17.34.1-150500.6.2.1 * grpc-devel-1.60.0-150500.11.5.16 * libabsl2401_0_0-debuginfo-20240116.1-150500.13.7.8 * libgrpc37-1.60.0-150500.11.5.16 * libgrpc++1_60-1.60.0-150500.11.5.16 * grpc-debuginfo-1.60.0-150500.11.5.16 * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * libzypp-devel-17.34.1-150500.6.2.1 * libprotoc25_1_0-debuginfo-25.1-150500.12.2.2 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * grpc-debugsource-1.60.0-150500.11.5.16 * libre2-11-20240201-150500.12.2.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.2.2 * zypper-debuginfo-1.14.73-150500.6.2.1 * Basesystem Module 15-SP5 (noarch) * zypper-log-1.14.73-150500.6.2.1 * zypper-needs-restarting-1.14.73-150500.6.2.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * protobuf-devel-25.1-150500.12.2.2 * libabsl2401_0_0-debuginfo-20240116.1-150500.13.7.8 * abseil-cpp-devel-20240116.1-150500.13.7.8 * protobuf-devel-debuginfo-25.1-150500.12.2.2 * libprotoc25_1_0-25.1-150500.12.2.2 * libprotoc25_1_0-debuginfo-25.1-150500.12.2.2 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * libabsl2401_0_0-debuginfo-20240116.1-150500.13.7.8 * libabsl2401_0_0-20240116.1-150500.13.7.8 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.2.2 * libphonenumber8-8.12.23-150500.6.2.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.2.2 * python-grpcio-debugsource-1.60.1-150500.12.3.16 * re2-debugsource-20240201-150500.12.2.1 * libre2-11-debuginfo-20240201-150500.12.2.1 * libupb37-debuginfo-1.60.0-150500.11.5.16 * libgrpc37-debuginfo-1.60.0-150500.11.5.16 * grpc-debugsource-1.60.0-150500.11.5.16 * python311-grpcio-1.60.1-150500.12.3.16 * libgrpc37-1.60.0-150500.11.5.16 * libre2-11-20240201-150500.12.2.1 * python311-grpcio-debuginfo-1.60.1-150500.12.3.16 * libgrpc1_60-debuginfo-1.60.0-150500.11.5.16 * libgrpc1_60-1.60.0-150500.11.5.16 * grpc-debuginfo-1.60.0-150500.11.5.16 * libprotoc25_1_0-25.1-150500.12.2.2 * libprotoc25_1_0-debuginfo-25.1-150500.12.2.2 * libupb37-1.60.0-150500.11.5.16 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-grpcio-1.60.1-150500.12.3.16 * python311-grpcio-debuginfo-1.60.1-150500.12.3.16 * python-grpcio-debugsource-1.60.1-150500.12.3.16 * python311-protobuf-4.25.1-150500.12.2.2 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * libabsl2401_0_0-20240116.1-150500.13.7.8 * libphonenumber8-debuginfo-8.12.23-150500.6.2.1 * libabsl2401_0_0-debuginfo-20240116.1-150500.13.7.8 * libphonenumber-debugsource-8.12.23-150500.6.2.1 * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * libphonenumber8-8.12.23-150500.6.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222261 * https://bugzilla.suse.com/show_bug.cgi?id=1222343 * https://bugzilla.suse.com/show_bug.cgi?id=1222348

1 0

SUSE-SU-2024:2164-1: important: Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP4)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:2164-1 Rating: important References: * bsc#1222118 * bsc#1223059 Cross-References: * CVE-2023-52628 * CVE-2024-26852 CVSS scores: * CVE-2023-52628 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_74 fixes several issues. The following security issues were fixed: * CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2164=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2164=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_15-debugsource-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-debuginfo-12-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_15-debugsource-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-debuginfo-12-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52628.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1222118 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2165-1: important: Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:2165-1 Rating: important References: * bsc#1223059 Cross-References: * CVE-2024-26852 CVSS scores: * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_119 fixes one issue. The following security issue was fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2165=1 SUSE-2024-2167=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2165=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-2167=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_26-debugsource-2-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-2-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_92-default-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_119-default-debuginfo-2-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-9-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_26-debugsource-2-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-2-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_92-default-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_119-default-debuginfo-2-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-9-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2166-1: important: Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:2166-1 Rating: important References: * bsc#1218259 * bsc#1223059 Cross-References: * CVE-2023-6931 * CVE-2024-26852 CVSS scores: * CVE-2023-6931 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6931 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_100 fixes several issues. The following security issues were fixed: * CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218259). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2166=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2166=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-8-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_100-default-8-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-8-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_100-default-8-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6931.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1218259 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-RU-2024:2142-1: moderate: Recommended update for scap-security-guide
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Recommended update for scap-security-guide Announcement ID: SUSE-RU-2024:2142-1 Rating: moderate References: * jsc#ECO-3319 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.0 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Client Tools for SLE Micro 5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for scap-security-guide fixes the following issues: scap-security-guid was updated to 0.1.73 (jsc#ECO-3319) * CMP 2417: Implement PCI-DSS v4.0 outline for OpenShift (#11651) * Update all RHEL ANSSI BP028 profiles to be aligned with configuration recommendations version 2.0 * Generate rule references from control files (#11540) * Initial implementation of STIG V1R1 profile for Ubuntu 22.04 LTS (#11820) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2142=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2142=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2142=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2142=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2142=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2142=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2142=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2142=1 * SUSE Manager Client Tools for SLE Micro 5 zypper in -t patch SUSE-SLE-Manager-Tools-For-Micro-5-2024-2142=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2142=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2142=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2142=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2142=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2142=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2142=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2142=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2142=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2142=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2142=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2142=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Manager Proxy 4.3 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Manager Server 4.3 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Enterprise Storage 7.1 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * openSUSE Leap 15.5 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * openSUSE Leap 15.6 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Manager Client Tools for SLE Micro 5 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * Basesystem Module 15-SP5 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * Basesystem Module 15-SP6 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * scap-security-guide-0.1.73-150000.1.81.1 * scap-security-guide-ubuntu-0.1.73-150000.1.81.1 * scap-security-guide-redhat-0.1.73-150000.1.81.1 * scap-security-guide-debian-0.1.73-150000.1.81.1 ## References: * https://jira.suse.com/browse/ECO-3319

1 0

SUSE-SU-2024:2153-1: important: Security update for vte
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for vte Announcement ID: SUSE-SU-2024:2153-1 Rating: important References: * bsc#1226134 Cross-References: * CVE-2024-37535 CVSS scores: * CVE-2024-37535 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for vte fixes the following issues: * CVE-2024-37535: Fixed a bug that allowed an attacker to cause a denial of service (memory consumption) via a window resize escape. (bsc#1226134) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2153=1 SUSE-2024-2153=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2153=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2153=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * typelib-1_0-Vte-3_91-0.74.2-150600.3.3.1 * typelib-1_0-Vte-2_91-0.74.2-150600.3.3.1 * libvte-2_91-0-0.74.2-150600.3.3.1 * vte-tools-gtk4-0.74.2-150600.3.3.1 * vte-devel-0.74.2-150600.3.3.1 * vte-tools-0.74.2-150600.3.3.1 * libvte-2_91-0-debuginfo-0.74.2-150600.3.3.1 * vte-debuginfo-0.74.2-150600.3.3.1 * vte-tools-debuginfo-0.74.2-150600.3.3.1 * vte-tools-gtk4-debuginfo-0.74.2-150600.3.3.1 * vte-debugsource-0.74.2-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * vte-lang-0.74.2-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * typelib-1_0-Vte-2_91-0.74.2-150600.3.3.1 * libvte-2_91-0-0.74.2-150600.3.3.1 * libvte-2_91-0-debuginfo-0.74.2-150600.3.3.1 * vte-debuginfo-0.74.2-150600.3.3.1 * vte-debugsource-0.74.2-150600.3.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * vte-debuginfo-0.74.2-150600.3.3.1 * vte-devel-0.74.2-150600.3.3.1 * typelib-1_0-Vte-3_91-0.74.2-150600.3.3.1 * vte-debugsource-0.74.2-150600.3.3.1 * Desktop Applications Module 15-SP6 (noarch) * vte-lang-0.74.2-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-37535.html * https://bugzilla.suse.com/show_bug.cgi?id=1226134

1 0

SUSE-RU-2024:2155-1: moderate: Recommended update for libserf
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Recommended update for libserf Announcement ID: SUSE-RU-2024:2155-1 Rating: moderate References: * bsc#1221211 * bsc#1222854 * bsc#1224089 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has three fixes can now be installed. ## Description: This update for libserf fixes the following issues: * The following bugs were affecting SLE but not Tumbleweed: * Fix build with openSSL 3 by removing usage of ERR_GET_FUNC (bsc#1221211) * Fix hanging in subversion by updating libserf (bsc#1224089, bsc#1222854) * general update with these fixes: * Fix handling of invalid chunk lengths in the dechunk bucket * Fix an endless loop in the deflate bucket with truncated input * Fix BIO control handlers to support BIO_CTRL_EOF * Fix a CRT mismatch issue caused by using certain OpenSSL functions * dropping upstream patches * fix Leap 15.4/15.4 build with krb5 GSSAPI * remove superfluous build dependencies * add patch to avoid using removed functionality in an irrelvant place * Autodetect krb5/mit prefix using krb5-config: prepare for future changes on krb5 packaging. * Use %license for license install ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2155=1 openSUSE-SLE-15.6-2024-2155=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2155=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libserf-debugsource-1.3.10-150600.18.8.2 * libserf-1-1-1.3.10-150600.18.8.2 * libserf-devel-1.3.10-150600.18.8.2 * libserf-1-1-debuginfo-1.3.10-150600.18.8.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libserf-debugsource-1.3.10-150600.18.8.2 * libserf-1-1-1.3.10-150600.18.8.2 * libserf-devel-1.3.10-150600.18.8.2 * libserf-1-1-debuginfo-1.3.10-150600.18.8.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221211 * https://bugzilla.suse.com/show_bug.cgi?id=1222854 * https://bugzilla.suse.com/show_bug.cgi?id=1224089

1 0

SUSE-SU-2024:2143-1: important: Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:2143-1 Rating: important References: * bsc#1220537 * bsc#1223059 Cross-References: * CVE-2021-46955 * CVE-2024-26852 CVSS scores: * CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_150 fixes several issues. The following security issues were fixed: * CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2144=1 SUSE-2024-2141=1 SUSE-2024-2146=1 SUSE-2024-2143=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-2143=1 SUSE-SLE- Module-Live-Patching-15-SP3-2024-2144=1 SUSE-SLE-Module-Live- Patching-15-SP3-2024-2141=1 SUSE-SLE-Module-Live-Patching-15-SP3-2024-2146=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_141-default-9-150300.2.2 * kernel-livepatch-5_3_18-150300_59_138-default-debuginfo-10-150300.2.2 * kernel-livepatch-SLE15-SP3_Update_37-debugsource-10-150300.2.2 * kernel-livepatch-SLE15-SP3_Update_38-debugsource-9-150300.2.2 * kernel-livepatch-5_3_18-150300_59_150-default-7-150300.2.2 * kernel-livepatch-5_3_18-150300_59_141-default-debuginfo-9-150300.2.2 * kernel-livepatch-5_3_18-150300_59_150-default-debuginfo-7-150300.2.2 * kernel-livepatch-SLE15-SP3_Update_41-debugsource-7-150300.2.2 * kernel-livepatch-5_3_18-150300_59_147-default-debuginfo-8-150300.2.2 * kernel-livepatch-SLE15-SP3_Update_40-debugsource-8-150300.2.2 * kernel-livepatch-5_3_18-150300_59_138-default-10-150300.2.2 * kernel-livepatch-5_3_18-150300_59_147-default-8-150300.2.2 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_141-preempt-9-150300.2.2 * kernel-livepatch-5_3_18-150300_59_141-preempt-debuginfo-9-150300.2.2 * kernel-livepatch-5_3_18-150300_59_147-preempt-debuginfo-8-150300.2.2 * kernel-livepatch-5_3_18-150300_59_147-preempt-8-150300.2.2 * kernel-livepatch-5_3_18-150300_59_138-preempt-debuginfo-10-150300.2.2 * kernel-livepatch-5_3_18-150300_59_150-preempt-7-150300.2.2 * kernel-livepatch-5_3_18-150300_59_150-preempt-debuginfo-7-150300.2.2 * kernel-livepatch-5_3_18-150300_59_138-preempt-10-150300.2.2 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_141-default-9-150300.2.2 * kernel-livepatch-5_3_18-150300_59_138-default-10-150300.2.2 * kernel-livepatch-5_3_18-150300_59_150-default-7-150300.2.2 * kernel-livepatch-5_3_18-150300_59_147-default-8-150300.2.2 ## References: * https://www.suse.com/security/cve/CVE-2021-46955.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1220537 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2145-1: important: Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:2145-1 Rating: important References: * bsc#1218259 * bsc#1220537 * bsc#1223059 Cross-References: * CVE-2021-46955 * CVE-2023-6931 * CVE-2024-26852 CVSS scores: * CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-6931 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6931 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_144 fixes several issues. The following security issues were fixed: * CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). * CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218259). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-2145=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2145=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_144-default-8-150300.2.2 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_39-debugsource-8-150300.2.2 * kernel-livepatch-5_3_18-150300_59_144-default-debuginfo-8-150300.2.2 * kernel-livepatch-5_3_18-150300_59_144-default-8-150300.2.2 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_144-preempt-8-150300.2.2 * kernel-livepatch-5_3_18-150300_59_144-preempt-debuginfo-8-150300.2.2 ## References: * https://www.suse.com/security/cve/CVE-2021-46955.html * https://www.suse.com/security/cve/CVE-2023-6931.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1218259 * https://bugzilla.suse.com/show_bug.cgi?id=1220537 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2148-1: important: Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:2148-1 Rating: important References: * bsc#1210619 * bsc#1218487 * bsc#1220537 * bsc#1221302 * bsc#1222685 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2021-46955 * CVE-2022-48651 * CVE-2023-1829 * CVE-2023-6531 * CVE-2023-6546 * CVE-2024-26610 * CVE-2024-26852 CVSS scores: * CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: * CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2148=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-2148=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_153-default-4-150300.7.6.2 * kernel-livepatch-5_3_18-150300_59_153-default-debuginfo-4-150300.7.6.2 * kernel-livepatch-SLE15-SP3_Update_42-debugsource-4-150300.7.6.2 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_153-preempt-4-150300.7.6.2 * kernel-livepatch-5_3_18-150300_59_153-preempt-debuginfo-4-150300.7.6.2 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_153-default-4-150300.7.6.2 ## References: * https://www.suse.com/security/cve/CVE-2021-46955.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2023-6531.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1218487 * https://bugzilla.suse.com/show_bug.cgi?id=1220537 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:2149-1: important: Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:2149-1 Rating: important References: * bsc#1210619 Cross-References: * CVE-2023-1829 CVSS scores: * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_161 fixes one issue. The following security issue was fixed: * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-2149=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2150=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-2150=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150200_24_191-default-2-150200.5.6.2 * kernel-livepatch-5_3_18-150200_24_191-default-debuginfo-2-150200.5.6.2 * kernel-livepatch-SLE15-SP2_Update_48-debugsource-2-150200.5.6.2 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_161-default-2-150300.7.6.2 * kernel-livepatch-SLE15-SP3_Update_44-debugsource-2-150300.7.6.2 * kernel-livepatch-5_3_18-150300_59_161-default-debuginfo-2-150300.7.6.2 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_161-preempt-2-150300.7.6.2 * kernel-livepatch-5_3_18-150300_59_161-preempt-debuginfo-2-150300.7.6.2 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_161-default-2-150300.7.6.2 ## References: * https://www.suse.com/security/cve/CVE-2023-1829.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619

1 0

SUSE-SU-2024:2156-1: important: Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:2156-1 Rating: important References: * bsc#1222118 * bsc#1223059 Cross-References: * CVE-2023-52628 * CVE-2024-26852 CVSS scores: * CVE-2023-52628 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_88 fixes several issues. The following security issues were fixed: * CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2157=1 SUSE-2024-2158=1 SUSE-2024-2159=1 SUSE-2024-2156=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2156=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-2157=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-2158=1 SUSE-SLE-Module-Live-Patching-15-SP4-2024-2159=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_18-debugsource-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_14-debugsource-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_69-default-debuginfo-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_81-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_81-default-debuginfo-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_69-default-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_16-debugsource-11-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_18-debugsource-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_14-debugsource-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_69-default-debuginfo-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_66-default-debuginfo-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_81-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_81-default-debuginfo-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_13-debugsource-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_69-default-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_16-debugsource-11-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52628.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1222118 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2160-1: important: Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP4)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:2160-1 Rating: important References: * bsc#1223059 Cross-References: * CVE-2024-26852 CVSS scores: * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_103 fixes one issue. The following security issue was fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2160=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-2161=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2161=1 SUSE-2024-2160=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_20-debugsource-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-debuginfo-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_22-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_97-default-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-8-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_20-debugsource-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-debuginfo-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_22-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_97-default-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-8-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2162-1: important: Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:2162-1 Rating: important References: * bsc#1219296 * bsc#1220211 * bsc#1220828 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52340 * CVE-2023-52502 * CVE-2023-6546 * CVE-2024-26585 * CVE-2024-26610 * CVE-2024-26622 * CVE-2024-26766 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). * CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2162=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2162=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_108-default-debuginfo-5-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_108-default-5-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_23-debugsource-5-150400.9.8.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_108-default-debuginfo-5-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_108-default-5-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_23-debugsource-5-150400.9.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1219296 * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220828 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:2163-1: important: Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:2163-1 Rating: important References: * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52502 * CVE-2023-6546 * CVE-2024-26610 * CVE-2024-26766 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves six vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2163=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2163=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_111-default-3-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-debuginfo-3-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_24-debugsource-3-150400.9.6.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_111-default-3-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-debuginfo-3-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_24-debugsource-3-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-RU-2024:2118-1: moderate: Recommended update for rpmlint
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Recommended update for rpmlint Announcement ID: SUSE-RU-2024:2118-1 Rating: moderate References: * bsc#1225343 Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for rpmlint fixes the following issues: * Support python >= 3.7 pyc parsing. (bsc#1225343) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2118=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2118=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2118=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2118=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2118=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2118=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2118=1 openSUSE-SLE-15.5-2024-2118=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2118=1 openSUSE-SLE-15.6-2024-2118=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2118=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2118=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2118=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2118=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2118=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2118=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2118=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2118=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2118=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2118=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * rpmlint-mini-debugsource-1.10-150200.13.13.3 * rpmlint-mini-1.10-150200.13.13.3 * rpmlint-mini-debuginfo-1.10-150200.13.13.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * rpmlint-mini-1.10-150300.18.19.2 * rpmlint-mini-debuginfo-1.10-150300.18.19.2 * rpmlint-mini-debugsource-1.10-150300.18.19.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rpmlint-mini-debuginfo-1.10-150400.23.22.5 * rpmlint-mini-1.10-150400.23.22.5 * rpmlint-mini-debugsource-1.10-150400.23.22.5 * SUSE Enterprise Storage 7.1 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * rpmlint-mini-1.10-150300.18.19.2 * rpmlint-mini-debuginfo-1.10-150300.18.19.2 * rpmlint-mini-debugsource-1.10-150300.18.19.2 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * rpmlint-mini-1.10-150300.18.19.2 * rpmlint-mini-debuginfo-1.10-150300.18.19.2 * rpmlint-mini-debugsource-1.10-150300.18.19.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * rpmlint-mini-debuginfo-1.10-150400.23.22.5 * rpmlint-mini-1.10-150400.23.22.5 * rpmlint-mini-debugsource-1.10-150400.23.22.5 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * rpmlint-mini-1.10-150500.26.7.3 * rpmlint-mini-debuginfo-1.10-150500.26.7.3 * rpmlint-mini-debugsource-1.10-150500.26.7.3 * openSUSE Leap 15.5 (noarch) * rpmlint-1.10-150000.7.87.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * rpmlint-mini-debuginfo-1.10-150600.31.2.2 * rpmlint-mini-1.10-150600.31.2.2 * rpmlint-mini-debugsource-1.10-150600.31.2.2 * openSUSE Leap 15.6 (noarch) * rpmlint-1.10-150000.7.87.1 * Development Tools Module 15-SP5 (noarch) * rpmlint-1.10-150000.7.87.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rpmlint-mini-1.10-150500.26.7.3 * rpmlint-mini-debuginfo-1.10-150500.26.7.3 * rpmlint-mini-debugsource-1.10-150500.26.7.3 * Development Tools Module 15-SP6 (noarch) * rpmlint-1.10-150000.7.87.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * rpmlint-mini-debuginfo-1.10-150600.31.2.2 * rpmlint-mini-1.10-150600.31.2.2 * rpmlint-mini-debugsource-1.10-150600.31.2.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * rpmlint-mini-debugsource-1.10-150200.13.13.3 * rpmlint-mini-1.10-150200.13.13.3 * rpmlint-mini-debuginfo-1.10-150200.13.13.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * rpmlint-mini-1.10-150300.18.19.2 * rpmlint-mini-debuginfo-1.10-150300.18.19.2 * rpmlint-mini-debugsource-1.10-150300.18.19.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rpmlint-mini-debuginfo-1.10-150400.23.22.5 * rpmlint-mini-1.10-150400.23.22.5 * rpmlint-mini-debugsource-1.10-150400.23.22.5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rpmlint-mini-debuginfo-1.10-150400.23.22.5 * rpmlint-mini-1.10-150400.23.22.5 * rpmlint-mini-debugsource-1.10-150400.23.22.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * rpmlint-mini-debuginfo-1.10-150400.23.22.5 * rpmlint-mini-1.10-150400.23.22.5 * rpmlint-mini-debugsource-1.10-150400.23.22.5 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * rpmlint-mini-debugsource-1.10-150200.13.13.3 * rpmlint-mini-1.10-150200.13.13.3 * rpmlint-mini-debuginfo-1.10-150200.13.13.3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * rpmlint-mini-1.10-150300.18.19.2 * rpmlint-mini-debuginfo-1.10-150300.18.19.2 * rpmlint-mini-debugsource-1.10-150300.18.19.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * rpmlint-1.10-150000.7.87.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * rpmlint-mini-debuginfo-1.10-150400.23.22.5 * rpmlint-mini-1.10-150400.23.22.5 * rpmlint-mini-debugsource-1.10-150400.23.22.5 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1225343

1 0

SUSE-SU-2024:2137-1: moderate: Security update for podofo
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for podofo Announcement ID: SUSE-SU-2024:2137-1 Rating: moderate References: * bsc#1127514 * bsc#1127855 * bsc#1131544 Cross-References: * CVE-2018-20797 * CVE-2019-10723 * CVE-2019-9199 CVSS scores: * CVE-2018-20797 ( SUSE ): 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2018-20797 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2019-10723 ( SUSE ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2019-10723 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2019-9199 ( SUSE ): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2019-9199 ( NVD ): 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for podofo fixes the following issues: * CVE-2019-9199: Fixed a NULL pointer dereference in podofoimpose (bsc#1127855) * CVE-2018-20797: Fixed an excessive memory allocation in PoDoFo:podofo_calloc (bsc#1127514) * CVE-2019-10723: Fixed a memory leak in PdfPagesTreeCache (bsc#1131544) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2137=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2137=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2137=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2137=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2137=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libpodofo0_9_6-debuginfo-0.9.6-150300.3.9.1 * libpodofo0_9_6-0.9.6-150300.3.9.1 * libpodofo-devel-0.9.6-150300.3.9.1 * podofo-0.9.6-150300.3.9.1 * podofo-debuginfo-0.9.6-150300.3.9.1 * podofo-debugsource-0.9.6-150300.3.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libpodofo0_9_6-debuginfo-0.9.6-150300.3.9.1 * libpodofo0_9_6-0.9.6-150300.3.9.1 * libpodofo-devel-0.9.6-150300.3.9.1 * podofo-0.9.6-150300.3.9.1 * podofo-debuginfo-0.9.6-150300.3.9.1 * podofo-debugsource-0.9.6-150300.3.9.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libpodofo0_9_6-debuginfo-0.9.6-150300.3.9.1 * libpodofo0_9_6-0.9.6-150300.3.9.1 * libpodofo-devel-0.9.6-150300.3.9.1 * podofo-0.9.6-150300.3.9.1 * podofo-debuginfo-0.9.6-150300.3.9.1 * podofo-debugsource-0.9.6-150300.3.9.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libpodofo0_9_6-debuginfo-0.9.6-150300.3.9.1 * libpodofo0_9_6-0.9.6-150300.3.9.1 * libpodofo-devel-0.9.6-150300.3.9.1 * podofo-0.9.6-150300.3.9.1 * podofo-debuginfo-0.9.6-150300.3.9.1 * podofo-debugsource-0.9.6-150300.3.9.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * libpodofo0_9_6-debuginfo-0.9.6-150300.3.9.1 * libpodofo0_9_6-0.9.6-150300.3.9.1 * libpodofo-devel-0.9.6-150300.3.9.1 * podofo-0.9.6-150300.3.9.1 * podofo-debuginfo-0.9.6-150300.3.9.1 * podofo-debugsource-0.9.6-150300.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2018-20797.html * https://www.suse.com/security/cve/CVE-2019-10723.html * https://www.suse.com/security/cve/CVE-2019-9199.html * https://bugzilla.suse.com/show_bug.cgi?id=1127514 * https://bugzilla.suse.com/show_bug.cgi?id=1127855 * https://bugzilla.suse.com/show_bug.cgi?id=1131544

1 0

SUSE-SU-2024:2138-1: moderate: Security update for python-cryptography
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for python-cryptography Announcement ID: SUSE-SU-2024:2138-1 Rating: moderate References: * bsc#1220210 Cross-References: * CVE-2024-26130 CVSS scores: * CVE-2024-26130 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for python-cryptography fixes the following issues: * CVE-2024-26130: Fix a NULL pointer dereference in pkcs12.serialize_key_and_certificates(). (bsc#1220210) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2138=1 openSUSE-SLE-15.6-2024-2138=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-2138=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python311-cryptography-41.0.3-150600.23.3.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-cryptography-41.0.3-150600.23.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26130.html * https://bugzilla.suse.com/show_bug.cgi?id=1220210

1 0

SUSE-SU-2024:2124-1: important: Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:2124-1 Rating: important References: * bsc#1220537 * bsc#1222118 * bsc#1223059 Cross-References: * CVE-2021-46955 * CVE-2023-52628 * CVE-2024-26852 CVSS scores: * CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-52628 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_133 fixes several issues. The following security issues were fixed: * CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). * CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2024-2124=1 SUSE-SLE-Live- Patching-12-SP5-2024-2136=1 SUSE-SLE-Live-Patching-12-SP5-2024-2125=1 SUSE-SLE- Live-Patching-12-SP5-2024-2126=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2132=1 SUSE-2024-2133=1 SUSE-2024-2134=1 SUSE-2024-2131=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-2131=1 SUSE-SLE- Module-Live-Patching-15-SP3-2024-2132=1 SUSE-SLE-Module-Live- Patching-15-SP3-2024-2133=1 SUSE-SLE-Module-Live-Patching-15-SP3-2024-2134=1 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_162-default-14-2.1 * kgraft-patch-4_12_14-122_173-default-11-2.1 * kgraft-patch-4_12_14-122_176-default-10-2.1 * kgraft-patch-4_12_14-122_165-default-13-2.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_127-default-12-150300.2.2 * kernel-livepatch-5_3_18-150300_59_124-default-debuginfo-13-150300.2.2 * kernel-livepatch-5_3_18-150300_59_130-default-debuginfo-11-150300.2.2 * kernel-livepatch-5_3_18-150300_59_127-default-debuginfo-12-150300.2.2 * kernel-livepatch-SLE15-SP3_Update_36-debugsource-10-150300.2.2 * kernel-livepatch-SLE15-SP3_Update_33-debugsource-13-150300.2.2 * kernel-livepatch-5_3_18-150300_59_130-default-11-150300.2.2 * kernel-livepatch-SLE15-SP3_Update_35-debugsource-11-150300.2.2 * kernel-livepatch-5_3_18-150300_59_124-default-13-150300.2.2 * kernel-livepatch-5_3_18-150300_59_133-default-debuginfo-10-150300.2.2 * kernel-livepatch-SLE15-SP3_Update_34-debugsource-12-150300.2.2 * kernel-livepatch-5_3_18-150300_59_133-default-10-150300.2.2 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_133-preempt-debuginfo-10-150300.2.2 * kernel-livepatch-5_3_18-150300_59_130-preempt-11-150300.2.2 * kernel-livepatch-5_3_18-150300_59_127-preempt-debuginfo-12-150300.2.2 * kernel-livepatch-5_3_18-150300_59_124-preempt-13-150300.2.2 * kernel-livepatch-5_3_18-150300_59_133-preempt-10-150300.2.2 * kernel-livepatch-5_3_18-150300_59_124-preempt-debuginfo-13-150300.2.2 * kernel-livepatch-5_3_18-150300_59_127-preempt-12-150300.2.2 * kernel-livepatch-5_3_18-150300_59_130-preempt-debuginfo-11-150300.2.2 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_130-default-11-150300.2.2 * kernel-livepatch-5_3_18-150300_59_133-default-10-150300.2.2 * kernel-livepatch-5_3_18-150300_59_127-default-12-150300.2.2 * kernel-livepatch-5_3_18-150300_59_124-default-13-150300.2.2 ## References: * https://www.suse.com/security/cve/CVE-2021-46955.html * https://www.suse.com/security/cve/CVE-2023-52628.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1220537 * https://bugzilla.suse.com/show_bug.cgi?id=1222118 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2139-1: important: Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:2139-1 Rating: important References: * bsc#1210619 * bsc#1220537 * bsc#1221302 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2021-46955 * CVE-2022-48651 * CVE-2023-1829 * CVE-2024-26610 * CVE-2024-26852 CVSS scores: * CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves five vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: * CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2139=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-2139=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_158-default-3-150300.7.6.2 * kernel-livepatch-SLE15-SP3_Update_43-debugsource-3-150300.7.6.2 * kernel-livepatch-5_3_18-150300_59_158-default-debuginfo-3-150300.7.6.2 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_158-preempt-debuginfo-3-150300.7.6.2 * kernel-livepatch-5_3_18-150300_59_158-preempt-3-150300.7.6.2 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_158-default-3-150300.7.6.2 ## References: * https://www.suse.com/security/cve/CVE-2021-46955.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1220537 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-RU-2024:1637-2: moderate: Recommended update for google-cloud SDK
by OPENSUSE-UPDATES 20 Jun '24

20 Jun '24

# Recommended update for google-cloud SDK Announcement ID: SUSE-RU-2024:1637-2 Rating: moderate References: * bsc#1210617 * jsc#PED-6697 * jsc#PED-7987 Cross-References: * CVE-2023-30608 CVSS scores: * CVE-2023-30608 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-30608 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Public Cloud Module 15-SP6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and contains two features can now be installed. ## Description: This update for google-cloud SDK fixes the following issues: * Add python311 cloud services packages and dependencies (jsc#PED-7987, jsc#PED-6697) * Bellow 5 binaries Obsolete the python3.6 counterpart: python311-google- resumable-media python311-google-api-core python311-google-cloud-storage python311-google-cloud-core python311-googleapis-common-protos * Regular python311 updates (without Obsoletes): python-google-auth python- grpcio python-sqlparse * New python311 packages: libcrc32c python-google-cloud-appengine-logging python-google-cloud-artifact-registry python-google-cloud-audit-log python- google-cloud-build python-google-cloud-compute python-google-cloud-dns python-google-cloud-domains python-google-cloud-iam python-google-cloud-kms- inventory python-google-cloud-kms python-google-cloud-logging python-google- cloud-run python-google-cloud-secret-manager python-google-cloud-service- directory python-google-cloud-spanner python-google-cloud-vpc-access python- google-crc32c python-grpc-google-iam-v1 python-grpcio-status python-proto- plus In python-sqlparse this security issue was fixed: CVE-2023-30608: Fixed parser that contained a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) (bsc#1210617) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1637=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-1637=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-1637=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python-google-crc32c-debugsource-1.5.0-150400.9.3.1 * python-cffi-debugsource-1.15.1-150400.8.7.2 * libcrc32c-debugsource-1.1.2-150400.9.3.1 * python311-cffi-1.15.1-150400.8.7.2 * python311-google-crc32c-debuginfo-1.5.0-150400.9.3.1 * libcrc32c1-debuginfo-1.1.2-150400.9.3.1 * python311-cffi-debuginfo-1.15.1-150400.8.7.2 * libcrc32c1-1.1.2-150400.9.3.1 * libcrc32c-devel-1.1.2-150400.9.3.1 * python311-google-crc32c-1.5.0-150400.9.3.1 * openSUSE Leap 15.6 (noarch) * python311-google-cloud-spanner-3.40.1-150400.9.3.1 * python311-google-cloud-kms-2.21.0-150400.9.3.1 * python311-google-cloud-audit-log-0.2.5-150400.9.3.1 * python311-apipkg-3.0.1-150400.12.6.1 * python311-google-cloud-logging-3.9.0-150400.9.3.1 * python311-google-cloud-service-directory-1.11.1-150400.9.3.1 * python311-google-cloud-storage-2.14.0-150400.10.3.1 * python311-charset-normalizer-3.1.0-150400.9.7.2 * python311-google-cloud-compute-1.15.0-150400.9.3.1 * python311-google-cloud-kms-inventory-0.2.2-150400.9.3.1 * python311-certifi-2023.7.22-150400.12.6.2 * python311-sqlparse-0.4.4-150400.6.4.2 * python311-google-cloud-vpc-access-1.10.0-150400.9.3.1 * python311-urllib3-2.0.7-150400.7.14.1 * python311-grpcio-status-1.60.1-150400.9.3.1 * python311-grpc-google-iam-v1-0.13.0-150400.9.3.1 * python311-google-cloud-run-0.10.1-150400.9.3.1 * python311-google-auth-2.27.0-150400.6.7.1 * python311-idna-3.4-150400.11.6.1 * python311-setuptools-67.7.2-150400.3.12.1 * python311-pyasn1-modules-0.3.0-150400.12.7.1 * python311-google-cloud-appengine-logging-1.4.0-150400.9.3.1 * python311-rsa-4.9-150400.12.7.1 * python311-requests-2.31.0-150400.6.8.1 * python311-pycparser-2.21-150400.12.7.2 * python311-iniconfig-2.0.0-150400.10.6.1 * python311-pytz-2023.3-150400.6.6.1 * python311-googleapis-common-protos-1.62.0-150400.10.4.1 * python311-setuptools-wheel-67.7.2-150400.3.12.1 * python311-google-cloud-iam-2.13.0-150400.9.3.1 * python311-proto-plus-1.23.0-150400.9.3.1 * python311-cachetools-5.3.1-150400.8.6.1 * python311-google-cloud-dns-0.35.0-150400.9.3.1 * python311-google-cloud-secret-manager-2.17.0-150400.9.3.1 * python311-google-resumable-media-2.7.0-150400.10.4.1 * python311-google-cloud-domains-1.7.1-150400.9.3.1 * python311-pyasn1-0.5.0-150400.12.7.2 * python311-google-cloud-build-3.22.0-150400.9.3.1 * python311-py-1.11.0-150400.12.7.2 * python311-google-cloud-core-2.4.1-150400.5.4.1 * python311-google-api-core-2.15.0-150400.5.4.1 * python311-google-cloud-artifact-registry-1.11.0-150400.9.3.1 * python311-pyOpenSSL-23.2.0-150400.3.10.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python-google-crc32c-debugsource-1.5.0-150400.9.3.1 * libcrc32c-debugsource-1.1.2-150400.9.3.1 * python311-google-crc32c-debuginfo-1.5.0-150400.9.3.1 * libcrc32c1-debuginfo-1.1.2-150400.9.3.1 * libcrc32c1-1.1.2-150400.9.3.1 * libcrc32c-devel-1.1.2-150400.9.3.1 * python311-google-crc32c-1.5.0-150400.9.3.1 * Public Cloud Module 15-SP6 (noarch) * python311-google-cloud-spanner-3.40.1-150400.9.3.1 * python311-google-cloud-kms-2.21.0-150400.9.3.1 * python311-google-cloud-audit-log-0.2.5-150400.9.3.1 * python311-google-cloud-logging-3.9.0-150400.9.3.1 * python311-google-cloud-service-directory-1.11.1-150400.9.3.1 * python311-google-cloud-storage-2.14.0-150400.10.3.1 * python311-google-cloud-compute-1.15.0-150400.9.3.1 * python311-google-cloud-kms-inventory-0.2.2-150400.9.3.1 * python311-sqlparse-0.4.4-150400.6.4.2 * python311-google-cloud-vpc-access-1.10.0-150400.9.3.1 * python311-grpcio-status-1.60.1-150400.9.3.1 * python311-grpc-google-iam-v1-0.13.0-150400.9.3.1 * python311-google-cloud-run-0.10.1-150400.9.3.1 * python311-google-auth-2.27.0-150400.6.7.1 * python311-google-cloud-appengine-logging-1.4.0-150400.9.3.1 * python311-googleapis-common-protos-1.62.0-150400.10.4.1 * python311-google-cloud-iam-2.13.0-150400.9.3.1 * python311-proto-plus-1.23.0-150400.9.3.1 * python311-google-cloud-dns-0.35.0-150400.9.3.1 * python311-google-cloud-secret-manager-2.17.0-150400.9.3.1 * python311-google-resumable-media-2.7.0-150400.10.4.1 * python311-google-cloud-domains-1.7.1-150400.9.3.1 * python311-google-cloud-build-3.22.0-150400.9.3.1 * python311-google-cloud-core-2.4.1-150400.5.4.1 * python311-google-api-core-2.15.0-150400.5.4.1 * python311-google-cloud-artifact-registry-1.11.0-150400.9.3.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-cffi-1.15.1-150400.8.7.2 * python311-cffi-debuginfo-1.15.1-150400.8.7.2 * python-cffi-debugsource-1.15.1-150400.8.7.2 * Python 3 Module 15-SP6 (noarch) * python311-rsa-4.9-150400.12.7.1 * python311-requests-2.31.0-150400.6.8.1 * python311-pycparser-2.21-150400.12.7.2 * python311-iniconfig-2.0.0-150400.10.6.1 * python311-pyasn1-0.5.0-150400.12.7.2 * python311-setuptools-67.7.2-150400.3.12.1 * python311-py-1.11.0-150400.12.7.2 * python311-pytz-2023.3-150400.6.6.1 * python311-idna-3.4-150400.11.6.1 * python311-urllib3-2.0.7-150400.7.14.1 * python311-apipkg-3.0.1-150400.12.6.1 * python311-google-auth-2.27.0-150400.6.7.1 * python311-charset-normalizer-3.1.0-150400.9.7.2 * python311-cachetools-5.3.1-150400.8.6.1 * python311-pyOpenSSL-23.2.0-150400.3.10.1 * python311-certifi-2023.7.22-150400.12.6.2 * python311-pyasn1-modules-0.3.0-150400.12.7.1 ## References: * https://www.suse.com/security/cve/CVE-2023-30608.html * https://bugzilla.suse.com/show_bug.cgi?id=1210617 * https://jira.suse.com/browse/PED-6697 * https://jira.suse.com/browse/PED-7987

1 0

openSUSE-RU-2024:0172-1: moderate: Recommended update for python-python-sql
by maintenance＠opensuse.org 20 Jun '24

20 Jun '24

openSUSE Recommended Update: Recommended update for python-python-sql ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0172-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-python-sql fixes the following issues: - update to 1.5.1: * Use parameter for start and end of WINDOW FRAME * Use parameter for limit and offset - version 1.5.0 * naming scheme broken upstream * Add MERGE query * Support “UPSERT” with ON CONFLICT clause on INSERT query * Remove default escape char on LIKE and ILIKE * Add GROUPING SETS, CUBE, and ROLLUP clauses for GROUP BY. - update to 1.4.3: * Render common table expression in combining query * Add support for Python 3.12 * Restore usage of alias in returning expression * Do not use alias in returning expression - version 1.4.0 * Use unittest discover * Use only column name for INSERT and UPDATE * Add escape to Like operators * Add default literal ‘*’ expression to Count * Add support for Python 3.10 - Version 1.3.0 * Add GROUPS frame to Window * Add exclude to Window * Add method for each type of join * Remove support for Python older than 3.5 * Support Select queries in conditionals and functions - version update to 1.2.2 Version 1.2.2 - 2021-05-16 * Escape table and column names containing double quote * Use alias on the main table used in UPDATE and INSERT * Add support for Python 3.9 Version 1.2.1 - 2020-10-08 * Fix AttributeError in Select.params with windows - Version 1.2.0 * Add explicit Windows to Select * Fix missing Windows definitions in nested expressions Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-172=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-python-sql-1.5.1-bp155.3.3.1 python311-python-sql-1.5.1-bp155.3.3.1 References:

1 0

SUSE-SU-2024:2106-1: important: Security update for php-composer2
by OPENSUSE-UPDATES 20 Jun '24

20 Jun '24

# Security update for php-composer2 Announcement ID: SUSE-SU-2024:2106-1 Rating: important References: * bsc#1226181 * bsc#1226182 Cross-References: * CVE-2024-35241 * CVE-2024-35242 CVSS scores: * CVE-2024-35241 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-35242 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Server 4.3 * Web and Scripting Module 15-SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for php-composer2 fixes the following issues: * CVE-2024-35241: Fixed code execution when installing packages in repository with specially crafted branch names (bsc#1226181). * CVE-2024-35242: Fixed command injection via specially crafted branch names during repository cloning (bsc#1226182). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2106=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2106=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-2106=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2106=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2106=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2106=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2106=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2106=1 ## Package List: * openSUSE Leap 15.4 (noarch) * php-composer2-2.2.3-150400.3.12.1 * openSUSE Leap 15.5 (noarch) * php-composer2-2.2.3-150400.3.12.1 * Web and Scripting Module 15-SP5 (noarch) * php-composer2-2.2.3-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * php-composer2-2.2.3-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * php-composer2-2.2.3-150400.3.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * php-composer2-2.2.3-150400.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * php-composer2-2.2.3-150400.3.12.1 * SUSE Manager Server 4.3 (noarch) * php-composer2-2.2.3-150400.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35241.html * https://www.suse.com/security/cve/CVE-2024-35242.html * https://bugzilla.suse.com/show_bug.cgi?id=1226181 * https://bugzilla.suse.com/show_bug.cgi?id=1226182

1 0

SUSE-SU-2024:2107-1: important: Security update for php-composer2
by OPENSUSE-UPDATES 20 Jun '24

20 Jun '24

# Security update for php-composer2 Announcement ID: SUSE-SU-2024:2107-1 Rating: important References: * bsc#1226181 * bsc#1226182 Cross-References: * CVE-2024-35241 * CVE-2024-35242 CVSS scores: * CVE-2024-35241 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-35242 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for php-composer2 fixes the following issues: * CVE-2024-35241: Fixed code execution when installing packages in repository with specially crafted branch names (bsc#1226181). * CVE-2024-35242: Fixed command injection via specially crafted branch names during repository cloning (bsc#1226182). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2107=1 openSUSE-SLE-15.6-2024-2107=1 * Web and Scripting Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP6-2024-2107=1 ## Package List: * openSUSE Leap 15.6 (noarch) * php-composer2-2.6.4-150600.3.3.1 * Web and Scripting Module 15-SP6 (noarch) * php-composer2-2.6.4-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35241.html * https://www.suse.com/security/cve/CVE-2024-35242.html * https://bugzilla.suse.com/show_bug.cgi?id=1226181 * https://bugzilla.suse.com/show_bug.cgi?id=1226182

1 0

SUSE-RU-2024:2104-1: moderate: Recommended update for google-cloud SDK
by OPENSUSE-UPDATES 20 Jun '24

20 Jun '24

# Recommended update for google-cloud SDK Announcement ID: SUSE-RU-2024:2104-1 Rating: moderate References: Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * Public Cloud Module 15-SP6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that can now be installed. ## Description: This update for protobuf and python-grpcio fixes the following issue: * Add python311 binaries to Python Module. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2104=1 openSUSE-SLE-15.6-2024-2104=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2104=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2104=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2104=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2104=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-2104=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libprotobuf-lite25_1_0-debuginfo-25.1-150600.16.4.2 * libprotobuf-lite25_1_0-25.1-150600.16.4.2 * protobuf-debugsource-25.1-150600.16.4.2 * protobuf-java-25.1-150600.16.4.2 * libprotobuf25_1_0-debuginfo-25.1-150600.16.4.2 * libprotoc25_1_0-25.1-150600.16.4.2 * python311-grpcio-1.60.1-150600.16.5.1 * python311-protobuf-4.25.1-150600.16.4.2 * python311-grpcio-debuginfo-1.60.1-150600.16.5.1 * protobuf-devel-debuginfo-25.1-150600.16.4.2 * protobuf-devel-25.1-150600.16.4.2 * python-grpcio-debugsource-1.60.1-150600.16.5.1 * libprotobuf25_1_0-25.1-150600.16.4.2 * libprotoc25_1_0-debuginfo-25.1-150600.16.4.2 * openSUSE Leap 15.6 (x86_64) * libprotobuf25_1_0-32bit-debuginfo-25.1-150600.16.4.2 * libprotobuf25_1_0-32bit-25.1-150600.16.4.2 * libprotoc25_1_0-32bit-debuginfo-25.1-150600.16.4.2 * libprotoc25_1_0-32bit-25.1-150600.16.4.2 * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150600.16.4.2 * libprotobuf-lite25_1_0-32bit-25.1-150600.16.4.2 * openSUSE Leap 15.6 (aarch64_ilp32) * libprotobuf-lite25_1_0-64bit-25.1-150600.16.4.2 * libprotoc25_1_0-64bit-25.1-150600.16.4.2 * libprotoc25_1_0-64bit-debuginfo-25.1-150600.16.4.2 * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150600.16.4.2 * libprotobuf25_1_0-64bit-25.1-150600.16.4.2 * libprotobuf25_1_0-64bit-debuginfo-25.1-150600.16.4.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite25_1_0-debuginfo-25.1-150600.16.4.2 * libprotobuf-lite25_1_0-25.1-150600.16.4.2 * protobuf-debugsource-25.1-150600.16.4.2 * libprotobuf25_1_0-debuginfo-25.1-150600.16.4.2 * libprotoc25_1_0-25.1-150600.16.4.2 * libprotobuf25_1_0-25.1-150600.16.4.2 * libprotoc25_1_0-debuginfo-25.1-150600.16.4.2 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-devel-25.1-150600.16.4.2 * protobuf-devel-debuginfo-25.1-150600.16.4.2 * protobuf-debugsource-25.1-150600.16.4.2 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150600.16.4.2 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-grpcio-1.60.1-150600.16.5.1 * python311-grpcio-debuginfo-1.60.1-150600.16.5.1 * python-grpcio-debugsource-1.60.1-150600.16.5.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-protobuf-4.25.1-150600.16.4.2

1 0

SUSE-SU-2024:2102-1: moderate: Security update for opencc
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for opencc Announcement ID: SUSE-SU-2024:2102-1 Rating: moderate References: * bsc#1108310 Cross-References: * CVE-2018-16982 CVSS scores: * CVE-2018-16982 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2018-16982 ( SUSE ): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2018-16982 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for opencc fixes the following issues: * CVE-2018-16982: Check offset bounds in BinaryDict::NewFromFile method. (bsc#1108310) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2102=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-2102=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2102=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * opencc-data-1.0.5-150000.5.3.1 * opencc-debuginfo-1.0.5-150000.5.3.1 * opencc-devel-1.0.5-150000.5.3.1 * libopencc2-1.0.5-150000.5.3.1 * libopencc2-debuginfo-1.0.5-150000.5.3.1 * opencc-1.0.5-150000.5.3.1 * opencc-debugsource-1.0.5-150000.5.3.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * opencc-data-1.0.5-150000.5.3.1 * opencc-debuginfo-1.0.5-150000.5.3.1 * opencc-devel-1.0.5-150000.5.3.1 * libopencc2-1.0.5-150000.5.3.1 * libopencc2-debuginfo-1.0.5-150000.5.3.1 * opencc-1.0.5-150000.5.3.1 * opencc-debugsource-1.0.5-150000.5.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libopencc2-1.0.5-150000.5.3.1 * opencc-debugsource-1.0.5-150000.5.3.1 * libopencc2-debuginfo-1.0.5-150000.5.3.1 * opencc-debuginfo-1.0.5-150000.5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2018-16982.html * https://bugzilla.suse.com/show_bug.cgi?id=1108310

1 0

SUSE-SU-2024:2091-1: important: Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2091-1 Rating: important References: * bsc#1222118 * bsc#1223059 * bsc#1224043 Cross-References: * CVE-2022-48687 * CVE-2023-52628 * CVE-2024-26852 CVSS scores: * CVE-2022-48687 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2022-48687 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-52628 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: * CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). * CVE-2022-48687: Fixed fix out-of-bounds read when setting HMAC data (bsc#1224043). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2091=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2091=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_11-rt-14-150500.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_0-debugsource-14-150500.6.1 * kernel-livepatch-5_14_21-150500_11-rt-debuginfo-14-150500.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_11-rt-14-150500.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_0-debugsource-14-150500.6.1 * kernel-livepatch-5_14_21-150500_11-rt-debuginfo-14-150500.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48687.html * https://www.suse.com/security/cve/CVE-2023-52628.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1222118 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1224043

1 0

SUSE-SU-2024:2092-1: important: Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2092-1 Rating: important References: * bsc#1219296 * bsc#1220211 * bsc#1220828 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52340 * CVE-2023-52502 * CVE-2023-6546 * CVE-2024-26585 * CVE-2024-26610 * CVE-2024-26622 * CVE-2024-26766 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). * CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2092=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2092=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_10-debugsource-5-150500.11.8.1 * kernel-livepatch-5_14_21-150500_13_35-rt-5-150500.11.8.1 * kernel-livepatch-5_14_21-150500_13_35-rt-debuginfo-5-150500.11.8.1 * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_10-debugsource-5-150500.11.8.1 * kernel-livepatch-5_14_21-150500_13_35-rt-5-150500.11.8.1 * kernel-livepatch-5_14_21-150500_13_35-rt-debuginfo-5-150500.11.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1219296 * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220828 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:2094-1: important: Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2094-1 Rating: important References: * bsc#1222118 * bsc#1223059 Cross-References: * CVE-2023-52628 * CVE-2024-26852 CVSS scores: * CVE-2023-52628 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_11 fixes several issues. The following security issues were fixed: * CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2094=1 SUSE-2024-2095=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2094=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-2095=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_1-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_5-rt-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_5-rt-debuginfo-13-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_3-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_13_11-rt-11-150500.2.1 * kernel-livepatch-5_14_21-150500_13_11-rt-debuginfo-11-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_1-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_5-rt-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_5-rt-debuginfo-13-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_3-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_13_11-rt-11-150500.2.1 * kernel-livepatch-5_14_21-150500_13_11-rt-debuginfo-11-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52628.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1222118 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2096-1: important: Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP5)
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2096-1 Rating: important References: * bsc#1223059 Cross-References: * CVE-2024-26852 CVSS scores: * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_30 fixes one issue. The following security issue was fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2098=1 SUSE-2024-2103=1 SUSE-2024-2096=1 SUSE-2024-2097=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2097=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-2098=1 SUSE-SLE-Module-Live- Patching-15-SP5-2024-2103=1 SUSE-SLE-Module-Live-Patching-15-SP5-2024-2096=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_13_24-rt-debuginfo-9-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_5-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_13_24-rt-9-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_6-debugsource-9-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_7-debugsource-9-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-10-150500.2.1 * kernel-livepatch-5_14_21-150500_13_30-rt-debuginfo-7-150500.2.1 * kernel-livepatch-5_14_21-150500_13_30-rt-7-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-debuginfo-10-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_9-debugsource-7-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-9-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_24-rt-debuginfo-9-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_5-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_13_24-rt-9-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_6-debugsource-9-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_7-debugsource-9-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-10-150500.2.1 * kernel-livepatch-5_14_21-150500_13_30-rt-debuginfo-7-150500.2.1 * kernel-livepatch-5_14_21-150500_13_30-rt-7-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-debuginfo-10-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_9-debugsource-7-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-9-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2099-1: important: Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5)
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2099-1 Rating: important References: * bsc#1218259 * bsc#1223059 Cross-References: * CVE-2023-6931 * CVE-2024-26852 CVSS scores: * CVE-2023-6931 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6931 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_27 fixes several issues. The following security issues were fixed: * CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218259). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2099=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2099=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_13_27-rt-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_13_27-rt-8-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_8-debugsource-8-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_27-rt-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_13_27-rt-8-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_8-debugsource-8-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6931.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1218259 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2100-1: important: Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2100-1 Rating: important References: * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2023-52502 * CVE-2023-6546 * CVE-2024-26610 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2100=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2100=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_38-rt-debuginfo-3-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_11-debugsource-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_38-rt-3-150500.11.6.1 * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_13_38-rt-debuginfo-3-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_11-debugsource-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_38-rt-3-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-SU-2024:2101-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:2101-1 Rating: important References: * bsc#1221302 * bsc#1223059 * bsc#1223514 Cross-References: * CVE-2022-48651 * CVE-2024-26610 * CVE-2024-26852 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues. The following security issues were fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2101=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2101=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_47-rt-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo-3-150500.11.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_47-rt-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo-3-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223514

1 0

SUSE-RU-2024:1665-2: moderate: Recommended update for coreutils
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Recommended update for coreutils Announcement ID: SUSE-RU-2024:1665-2 Rating: moderate References: * bsc#1221632 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for coreutils fixes the following issues: * ls: avoid triggering automounts (bsc#1221632) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1665=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1665=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * coreutils-8.32-150400.9.6.1 * coreutils-debugsource-8.32-150400.9.6.1 * coreutils-testsuite-8.32-150400.9.6.2 * coreutils-single-debugsource-8.32-150400.9.6.1 * coreutils-single-8.32-150400.9.6.1 * coreutils-debuginfo-8.32-150400.9.6.1 * coreutils-single-debuginfo-8.32-150400.9.6.1 * openSUSE Leap 15.6 (noarch) * coreutils-doc-8.32-150400.9.6.1 * coreutils-lang-8.32-150400.9.6.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * coreutils-8.32-150400.9.6.1 * coreutils-debugsource-8.32-150400.9.6.1 * coreutils-debuginfo-8.32-150400.9.6.1 * Basesystem Module 15-SP6 (noarch) * coreutils-doc-8.32-150400.9.6.1 * coreutils-lang-8.32-150400.9.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221632

1 0

SUSE-RU-2024:2085-1: moderate: recommended update for python-requests
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# recommended update for python-requests Announcement ID: SUSE-RU-2024:2085-1 Rating: moderate References: * bsc#1225912 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for python-requests fixes the following issue: * Allow the usage of "verify" parameter as a directory. (bsc#1225912) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2085=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2085=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2085=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2085=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2085=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2085=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2085=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2085=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2085=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2085=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2085=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2085=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2085=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2085=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2085=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2085=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2085=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2085=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2085=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2085=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2085=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2085=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2085=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-2085=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2085=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2085=1 ## Package List: * openSUSE Leap 15.3 (noarch) * python3-requests-2.25.1-150300.3.12.2 * python2-requests-2.25.1-150300.3.12.2 * openSUSE Leap Micro 5.3 (noarch) * python3-requests-2.25.1-150300.3.12.2 * openSUSE Leap Micro 5.4 (noarch) * python3-requests-2.25.1-150300.3.12.2 * openSUSE Leap 15.5 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-requests-2.25.1-150300.3.12.2 * Basesystem Module 15-SP5 (noarch) * python3-requests-2.25.1-150300.3.12.2 * Basesystem Module 15-SP6 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Manager Proxy 4.3 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Manager Retail Branch Server 4.3 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Manager Server 4.3 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Enterprise Storage 7.1 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Micro 5.1 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Micro 5.2 (noarch) * python3-requests-2.25.1-150300.3.12.2 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * python3-requests-2.25.1-150300.3.12.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1225912

1 0

SUSE-RU-2024:2086-1: moderate: Recommended update for gcc13
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Recommended update for gcc13 Announcement ID: SUSE-RU-2024:2086-1 Rating: moderate References: * bsc#1188441 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that has one fix can now be installed. ## Description: This update for gcc13 fixes the following issues: Update to GCC 13.3 release * Removed Fiji support from the GCN offload compiler as that is requiring Code Object version 3 which is no longer supported by llvm18. * Avoid combine spending too much compile-time and memory doing nothing on s390x. [bsc#1188441] * Make requirement to lld version specific to avoid requiring the meta- package. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-2086=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2086=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2086=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2086=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2086=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2086=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2086=1 * SUSE Linux Enterprise Server 15 SP2 zypper in -t patch SUSE-SLE-INSTALLER-15-SP2-2024-2086=1 * SUSE Linux Enterprise Server 15 SP3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP3-2024-2086=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-2086=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-2086=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-2086=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-2086=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-2086=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-2086=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-2086=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2086=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2086=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2086=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2086=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2086=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2086=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2086=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2086=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2086=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2086=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2086=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2086=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2086=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2086=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2086=1 ## Package List: * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap Micro 5.3 (aarch64 ppc64le s390x x86_64) * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap Micro 5.4 (aarch64 ppc64le s390x x86_64) * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libobjc4-debuginfo-13.3.0+git8781-150000.1.12.1 * libobjc4-13.3.0+git8781-150000.1.12.1 * libgfortran5-13.3.0+git8781-150000.1.12.1 * libgo22-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * gcc13-locale-13.3.0+git8781-150000.1.12.1 * libm2min18-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-c++-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2log18-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libgo22-debuginfo-13.3.0+git8781-150000.1.12.1 * libada13-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-debuginfo-13.3.0+git8781-150000.1.12.1 * libgomp1-13.3.0+git8781-150000.1.12.1 * libitm1-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2iso18-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-objc-debuginfo-13.3.0+git8781-150000.1.12.1 * libtsan2-13.3.0+git8781-150000.1.12.1 * libstdc++6-locale-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * libgfortran5-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-go-13.3.0+git8781-150000.1.12.1 * liblsan0-debuginfo-13.3.0+git8781-150000.1.12.1 * libasan8-13.3.0+git8781-150000.1.12.1 * libm2cor18-13.3.0+git8781-150000.1.12.1 * liblsan0-13.3.0+git8781-150000.1.12.1 * libm2iso18-13.3.0+git8781-150000.1.12.1 * gcc13-m2-13.3.0+git8781-150000.1.12.1 * cpp13-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-debuginfo-13.3.0+git8781-150000.1.12.1 * cpp13-13.3.0+git8781-150000.1.12.1 * libstdc++6-pp-13.3.0+git8781-150000.1.12.1 * gcc13-objc-13.3.0+git8781-150000.1.12.1 * libatomic1-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-ada-13.3.0+git8781-150000.1.12.1 * libm2log18-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-13.3.0+git8781-150000.1.12.1 * libtsan2-debuginfo-13.3.0+git8781-150000.1.12.1 * libubsan1-13.3.0+git8781-150000.1.12.1 * libm2cor18-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-13.3.0+git8781-150000.1.12.1 * libasan8-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-go-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2min18-13.3.0+git8781-150000.1.12.1 * libada13-13.3.0+git8781-150000.1.12.1 * libstdc++6-devel-gcc13-13.3.0+git8781-150000.1.12.1 * libubsan1-debuginfo-13.3.0+git8781-150000.1.12.1 * libitm1-13.3.0+git8781-150000.1.12.1 * gcc13-c++-13.3.0+git8781-150000.1.12.1 * gcc13-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-13.3.0+git8781-150000.1.12.1 * gcc13-obj-c++-13.3.0+git8781-150000.1.12.1 * libgomp1-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-obj-c++-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-13.3.0+git8781-150000.1.12.1 * gcc13-m2-debuginfo-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-PIE-13.3.0+git8781-150000.1.12.1 * gcc13-ada-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.5 (x86_64) * cross-nvptx-gcc13-13.3.0+git8781-150000.1.12.1 * cross-nvptx-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * cross-nvptx-newlib13-devel-13.3.0+git8781-150000.1.12.1 * libquadmath0-32bit-13.3.0+git8781-150000.1.12.1 * cross-nvptx-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libquadmath0-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.5 (s390x x86_64) * libstdc++6-devel-gcc13-32bit-13.3.0+git8781-150000.1.12.1 * libm2iso18-32bit-13.3.0+git8781-150000.1.12.1 * libstdc++6-32bit-13.3.0+git8781-150000.1.12.1 * libgomp1-32bit-13.3.0+git8781-150000.1.12.1 * libgphobos4-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2cor18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libubsan1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-go-32bit-13.3.0+git8781-150000.1.12.1 * libgcc_s1-32bit-13.3.0+git8781-150000.1.12.1 * libgo22-32bit-13.3.0+git8781-150000.1.12.1 * libm2log18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-32bit-13.3.0+git8781-150000.1.12.1 * libgo22-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgomp1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-32bit-13.3.0+git8781-150000.1.12.1 * libm2min18-32bit-13.3.0+git8781-150000.1.12.1 * libobjc4-32bit-13.3.0+git8781-150000.1.12.1 * libm2iso18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-32bit-13.3.0+git8781-150000.1.12.1 * gcc13-d-32bit-13.3.0+git8781-150000.1.12.1 * libitm1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgfortran5-32bit-13.3.0+git8781-150000.1.12.1 * libobjc4-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2log18-32bit-13.3.0+git8781-150000.1.12.1 * libgfortran5-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-objc-32bit-13.3.0+git8781-150000.1.12.1 * gcc13-m2-32bit-13.3.0+git8781-150000.1.12.1 * libstdc++6-pp-32bit-13.3.0+git8781-150000.1.12.1 * libitm1-32bit-13.3.0+git8781-150000.1.12.1 * libgdruntime4-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-obj-c++-32bit-13.3.0+git8781-150000.1.12.1 * libgcc_s1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgphobos4-32bit-13.3.0+git8781-150000.1.12.1 * libada13-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgdruntime4-32bit-13.3.0+git8781-150000.1.12.1 * libada13-32bit-13.3.0+git8781-150000.1.12.1 * libasan8-32bit-13.3.0+git8781-150000.1.12.1 * libasan8-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-ada-32bit-13.3.0+git8781-150000.1.12.1 * gcc13-c++-32bit-13.3.0+git8781-150000.1.12.1 * libm2pim18-32bit-13.3.0+git8781-150000.1.12.1 * libubsan1-32bit-13.3.0+git8781-150000.1.12.1 * libm2cor18-32bit-13.3.0+git8781-150000.1.12.1 * libm2min18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.5 (aarch64 s390x x86_64) * libgphobos4-13.3.0+git8781-150000.1.12.1 * gcc13-d-13.3.0+git8781-150000.1.12.1 * gcc13-d-debuginfo-13.3.0+git8781-150000.1.12.1 * libgdruntime4-debuginfo-13.3.0+git8781-150000.1.12.1 * libgphobos4-debuginfo-13.3.0+git8781-150000.1.12.1 * libgdruntime4-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.5 (noarch) * gcc13-info-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.5 (aarch64 x86_64) * libhwasan0-debuginfo-13.3.0+git8781-150000.1.12.1 * libhwasan0-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.5 (ppc64le x86_64) * libquadmath0-13.3.0+git8781-150000.1.12.1 * libquadmath0-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * cross-pru-gcc13-bootstrap-13.3.0+git8781-150000.1.12.1 * cross-arm-none-gcc13-bootstrap-debugsource-13.3.0+git8781-150000.1.12.1 * cross-mips-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libobjc4-13.3.0+git8781-150000.1.12.1 * cross-avr-gcc13-bootstrap-debuginfo-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * gcc13-locale-13.3.0+git8781-150000.1.12.1 * libm2min18-debuginfo-13.3.0+git8781-150000.1.12.1 * libada13-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2iso18-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-objc-debuginfo-13.3.0+git8781-150000.1.12.1 * libtsan2-13.3.0+git8781-150000.1.12.1 * cross-rx-gcc13-bootstrap-13.3.0+git8781-150000.1.12.1 * libgfortran5-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-rx-gcc13-bootstrap-debugsource-13.3.0+git8781-150000.1.12.1 * libasan8-13.3.0+git8781-150000.1.12.1 * libm2iso18-13.3.0+git8781-150000.1.12.1 * cross-sparc64-gcc13-13.3.0+git8781-150000.1.12.1 * cross-hppa-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * libstdc++6-pp-13.3.0+git8781-150000.1.12.1 * cross-ppc64-gcc13-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libtsan2-debuginfo-13.3.0+git8781-150000.1.12.1 * libubsan1-13.3.0+git8781-150000.1.12.1 * cross-hppa-gcc13-bootstrap-debugsource-13.3.0+git8781-150000.1.12.1 * cross-hppa-gcc13-icecream-backend-13.3.0+git8781-150000.1.12.1 * libm2pim18-13.3.0+git8781-150000.1.12.1 * libada13-13.3.0+git8781-150000.1.12.1 * libstdc++6-devel-gcc13-13.3.0+git8781-150000.1.12.1 * libubsan1-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-13.3.0+git8781-150000.1.12.1 * gcc13-PIE-13.3.0+git8781-150000.1.12.1 * cross-mips-gcc13-icecream-backend-13.3.0+git8781-150000.1.12.1 * cross-pru-gcc13-bootstrap-debugsource-13.3.0+git8781-150000.1.12.1 * cross-sparc-gcc13-13.3.0+git8781-150000.1.12.1 * libobjc4-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-mips-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * cross-mips-gcc13-13.3.0+git8781-150000.1.12.1 * libgfortran5-13.3.0+git8781-150000.1.12.1 * cross-riscv64-elf-gcc13-bootstrap-debugsource-13.3.0+git8781-150000.1.12.1 * cross-arm-gcc13-icecream-backend-13.3.0+git8781-150000.1.12.1 * cross-epiphany-gcc13-bootstrap-debugsource-13.3.0+git8781-150000.1.12.1 * cross-arm-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * libm2log18-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-sparc-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * liblsan0-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2cor18-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-debuginfo-13.3.0+git8781-150000.1.12.1 * cpp13-13.3.0+git8781-150000.1.12.1 * gcc13-ada-13.3.0+git8781-150000.1.12.1 * libm2log18-13.3.0+git8781-150000.1.12.1 * libatomic1-13.3.0+git8781-150000.1.12.1 * libasan8-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-13.3.0+git8781-150000.1.12.1 * cross-bpf-gcc13-13.3.0+git8781-150000.1.12.1 * gcc13-obj-c++-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-m2-debuginfo-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-riscv64-elf-gcc13-bootstrap-13.3.0+git8781-150000.1.12.1 * gcc13-ada-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-arm-gcc13-13.3.0+git8781-150000.1.12.1 * cross-m68k-gcc13-13.3.0+git8781-150000.1.12.1 * cross-ppc64-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * cross-riscv64-gcc13-bootstrap-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-hppa-gcc13-bootstrap-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-arm-none-gcc13-bootstrap-13.3.0+git8781-150000.1.12.1 * libgo22-debuginfo-13.3.0+git8781-150000.1.12.1 * libgomp1-13.3.0+git8781-150000.1.12.1 * cross-bpf-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * cross-avr-gcc13-bootstrap-debugsource-13.3.0+git8781-150000.1.12.1 * cross-m68k-gcc13-icecream-backend-13.3.0+git8781-150000.1.12.1 * cross-sparcv9-gcc13-icecream-backend-13.3.0+git8781-150000.1.12.1 * liblsan0-13.3.0+git8781-150000.1.12.1 * cross-bpf-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * cpp13-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-sparc64-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-rx-gcc13-bootstrap-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-objc-13.3.0+git8781-150000.1.12.1 * libitm1-13.3.0+git8781-150000.1.12.1 * cross-riscv64-gcc13-bootstrap-debugsource-13.3.0+git8781-150000.1.12.1 * cross-ppc64-gcc13-icecream-backend-13.3.0+git8781-150000.1.12.1 * cross-m68k-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * cross-sparc64-gcc13-icecream-backend-13.3.0+git8781-150000.1.12.1 * libgo22-13.3.0+git8781-150000.1.12.1 * cross-hppa-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-c++-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libitm1-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-locale-13.3.0+git8781-150000.1.12.1 * cross-epiphany-gcc13-bootstrap-13.3.0+git8781-150000.1.12.1 * cross-arm-none-gcc13-bootstrap-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-go-13.3.0+git8781-150000.1.12.1 * gcc13-m2-13.3.0+git8781-150000.1.12.1 * cross-riscv64-gcc13-bootstrap-13.3.0+git8781-150000.1.12.1 * gcc13-testresults-13.3.0+git8781-150000.1.12.1 * cross-riscv64-elf-gcc13-bootstrap-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-ppc64-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-pru-gcc13-bootstrap-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2cor18-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-go-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-hppa-gcc13-13.3.0+git8781-150000.1.12.1 * libm2min18-13.3.0+git8781-150000.1.12.1 * cross-arm-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-sparc-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-hppa-gcc13-bootstrap-13.3.0+git8781-150000.1.12.1 * gcc13-c++-13.3.0+git8781-150000.1.12.1 * cross-sparc64-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-13.3.0+git8781-150000.1.12.1 * gcc13-obj-c++-13.3.0+git8781-150000.1.12.1 * libgomp1-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-epiphany-gcc13-bootstrap-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-avr-gcc13-bootstrap-13.3.0+git8781-150000.1.12.1 * cross-m68k-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * cross-aarch64-gcc13-bootstrap-debugsource-13.3.0+git8781-150000.1.12.1 * cross-aarch64-gcc13-bootstrap-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-aarch64-gcc13-bootstrap-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.6 (x86_64) * cross-nvptx-gcc13-13.3.0+git8781-150000.1.12.1 * cross-nvptx-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * cross-nvptx-newlib13-devel-13.3.0+git8781-150000.1.12.1 * libquadmath0-32bit-13.3.0+git8781-150000.1.12.1 * cross-nvptx-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libquadmath0-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.6 (aarch64 s390x x86_64) * libgphobos4-13.3.0+git8781-150000.1.12.1 * gcc13-d-13.3.0+git8781-150000.1.12.1 * gcc13-d-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-ppc64le-gcc13-bootstrap-debuginfo-13.3.0+git8781-150000.1.12.1 * libgdruntime4-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-ppc64le-gcc13-bootstrap-debugsource-13.3.0+git8781-150000.1.12.1 * libgphobos4-debuginfo-13.3.0+git8781-150000.1.12.1 * libgdruntime4-13.3.0+git8781-150000.1.12.1 * cross-ppc64le-gcc13-bootstrap-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.6 (aarch64 ppc64le x86_64) * cross-s390x-gcc13-bootstrap-debugsource-13.3.0+git8781-150000.1.12.1 * cross-s390x-gcc13-bootstrap-13.3.0+git8781-150000.1.12.1 * cross-s390x-gcc13-bootstrap-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.6 (s390x x86_64) * libstdc++6-devel-gcc13-32bit-13.3.0+git8781-150000.1.12.1 * libm2iso18-32bit-13.3.0+git8781-150000.1.12.1 * libstdc++6-32bit-13.3.0+git8781-150000.1.12.1 * libgomp1-32bit-13.3.0+git8781-150000.1.12.1 * libgphobos4-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2cor18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libubsan1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-go-32bit-13.3.0+git8781-150000.1.12.1 * libgcc_s1-32bit-13.3.0+git8781-150000.1.12.1 * libgo22-32bit-13.3.0+git8781-150000.1.12.1 * libm2log18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-32bit-13.3.0+git8781-150000.1.12.1 * libgo22-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgomp1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-32bit-13.3.0+git8781-150000.1.12.1 * libm2min18-32bit-13.3.0+git8781-150000.1.12.1 * libobjc4-32bit-13.3.0+git8781-150000.1.12.1 * libm2iso18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-32bit-13.3.0+git8781-150000.1.12.1 * gcc13-d-32bit-13.3.0+git8781-150000.1.12.1 * libitm1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgfortran5-32bit-13.3.0+git8781-150000.1.12.1 * libobjc4-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2log18-32bit-13.3.0+git8781-150000.1.12.1 * libgfortran5-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-objc-32bit-13.3.0+git8781-150000.1.12.1 * gcc13-m2-32bit-13.3.0+git8781-150000.1.12.1 * libstdc++6-pp-32bit-13.3.0+git8781-150000.1.12.1 * libitm1-32bit-13.3.0+git8781-150000.1.12.1 * libgdruntime4-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-obj-c++-32bit-13.3.0+git8781-150000.1.12.1 * libgcc_s1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgphobos4-32bit-13.3.0+git8781-150000.1.12.1 * libada13-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgdruntime4-32bit-13.3.0+git8781-150000.1.12.1 * libada13-32bit-13.3.0+git8781-150000.1.12.1 * libasan8-32bit-13.3.0+git8781-150000.1.12.1 * libasan8-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-ada-32bit-13.3.0+git8781-150000.1.12.1 * gcc13-c++-32bit-13.3.0+git8781-150000.1.12.1 * libm2pim18-32bit-13.3.0+git8781-150000.1.12.1 * libubsan1-32bit-13.3.0+git8781-150000.1.12.1 * libm2cor18-32bit-13.3.0+git8781-150000.1.12.1 * libm2min18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.6 (noarch) * gcc13-info-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.6 (aarch64 x86_64) * libhwasan0-debuginfo-13.3.0+git8781-150000.1.12.1 * libhwasan0-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.6 (ppc64le x86_64) * libquadmath0-13.3.0+git8781-150000.1.12.1 * libquadmath0-debuginfo-13.3.0+git8781-150000.1.12.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x) * cross-x86_64-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * cross-x86_64-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * cross-x86_64-gcc13-icecream-backend-13.3.0+git8781-150000.1.12.1 * cross-x86_64-gcc13-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Server 15 SP2 (aarch64 ppc64le s390x x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Server 15 SP3 (aarch64 ppc64le s390x x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Manager Proxy 4.3 (x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libstdc++6-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-13.3.0+git8781-150000.1.12.1 * libatomic1-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-13.3.0+git8781-150000.1.12.1 * libatomic1-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-13.3.0+git8781-150000.1.12.1 * libatomic1-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-13.3.0+git8781-150000.1.12.1 * libatomic1-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-13.3.0+git8781-150000.1.12.1 * libatomic1-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libobjc4-debuginfo-13.3.0+git8781-150000.1.12.1 * libobjc4-13.3.0+git8781-150000.1.12.1 * libgfortran5-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libgomp1-13.3.0+git8781-150000.1.12.1 * libitm1-debuginfo-13.3.0+git8781-150000.1.12.1 * libtsan2-13.3.0+git8781-150000.1.12.1 * libstdc++6-locale-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * libgfortran5-debuginfo-13.3.0+git8781-150000.1.12.1 * liblsan0-debuginfo-13.3.0+git8781-150000.1.12.1 * libasan8-13.3.0+git8781-150000.1.12.1 * liblsan0-13.3.0+git8781-150000.1.12.1 * libstdc++6-pp-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-debuginfo-13.3.0+git8781-150000.1.12.1 * libtsan2-debuginfo-13.3.0+git8781-150000.1.12.1 * libubsan1-13.3.0+git8781-150000.1.12.1 * libatomic1-13.3.0+git8781-150000.1.12.1 * libasan8-debuginfo-13.3.0+git8781-150000.1.12.1 * libubsan1-debuginfo-13.3.0+git8781-150000.1.12.1 * libitm1-13.3.0+git8781-150000.1.12.1 * libgomp1-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * libhwasan0-debuginfo-13.3.0+git8781-150000.1.12.1 * libhwasan0-13.3.0+git8781-150000.1.12.1 * Basesystem Module 15-SP5 (ppc64le x86_64) * libquadmath0-13.3.0+git8781-150000.1.12.1 * libquadmath0-debuginfo-13.3.0+git8781-150000.1.12.1 * Basesystem Module 15-SP5 (x86_64) * libstdc++6-32bit-13.3.0+git8781-150000.1.12.1 * libgomp1-32bit-13.3.0+git8781-150000.1.12.1 * libubsan1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgcc_s1-32bit-13.3.0+git8781-150000.1.12.1 * libquadmath0-32bit-13.3.0+git8781-150000.1.12.1 * libstdc++6-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgomp1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libobjc4-32bit-13.3.0+git8781-150000.1.12.1 * libquadmath0-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-32bit-13.3.0+git8781-150000.1.12.1 * libitm1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgfortran5-32bit-13.3.0+git8781-150000.1.12.1 * libobjc4-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgfortran5-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-pp-32bit-13.3.0+git8781-150000.1.12.1 * libitm1-32bit-13.3.0+git8781-150000.1.12.1 * libgcc_s1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libasan8-32bit-13.3.0+git8781-150000.1.12.1 * libasan8-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libubsan1-32bit-13.3.0+git8781-150000.1.12.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libobjc4-debuginfo-13.3.0+git8781-150000.1.12.1 * libobjc4-13.3.0+git8781-150000.1.12.1 * libgfortran5-13.3.0+git8781-150000.1.12.1 * libgcc_s1-13.3.0+git8781-150000.1.12.1 * libm2min18-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2log18-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-debuginfo-13.3.0+git8781-150000.1.12.1 * libgomp1-13.3.0+git8781-150000.1.12.1 * libitm1-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2iso18-debuginfo-13.3.0+git8781-150000.1.12.1 * libtsan2-13.3.0+git8781-150000.1.12.1 * libstdc++6-locale-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * libgfortran5-debuginfo-13.3.0+git8781-150000.1.12.1 * liblsan0-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2cor18-13.3.0+git8781-150000.1.12.1 * libasan8-13.3.0+git8781-150000.1.12.1 * libm2iso18-13.3.0+git8781-150000.1.12.1 * liblsan0-13.3.0+git8781-150000.1.12.1 * libstdc++6-pp-13.3.0+git8781-150000.1.12.1 * libstdc++6-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-debuginfo-13.3.0+git8781-150000.1.12.1 * libtsan2-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2log18-13.3.0+git8781-150000.1.12.1 * libubsan1-13.3.0+git8781-150000.1.12.1 * libatomic1-13.3.0+git8781-150000.1.12.1 * libm2cor18-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-13.3.0+git8781-150000.1.12.1 * libasan8-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2min18-13.3.0+git8781-150000.1.12.1 * libubsan1-debuginfo-13.3.0+git8781-150000.1.12.1 * libitm1-13.3.0+git8781-150000.1.12.1 * libgomp1-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-13.3.0+git8781-150000.1.12.1 * libgcc_s1-debuginfo-13.3.0+git8781-150000.1.12.1 * Basesystem Module 15-SP6 (aarch64 x86_64) * libhwasan0-debuginfo-13.3.0+git8781-150000.1.12.1 * libhwasan0-13.3.0+git8781-150000.1.12.1 * Basesystem Module 15-SP6 (ppc64le x86_64) * libquadmath0-13.3.0+git8781-150000.1.12.1 * libquadmath0-debuginfo-13.3.0+git8781-150000.1.12.1 * Basesystem Module 15-SP6 (x86_64) * libm2iso18-32bit-13.3.0+git8781-150000.1.12.1 * libstdc++6-32bit-13.3.0+git8781-150000.1.12.1 * libgomp1-32bit-13.3.0+git8781-150000.1.12.1 * libm2cor18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libubsan1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgcc_s1-32bit-13.3.0+git8781-150000.1.12.1 * libm2log18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libquadmath0-32bit-13.3.0+git8781-150000.1.12.1 * libstdc++6-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgomp1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2min18-32bit-13.3.0+git8781-150000.1.12.1 * libobjc4-32bit-13.3.0+git8781-150000.1.12.1 * libm2iso18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libatomic1-32bit-13.3.0+git8781-150000.1.12.1 * libquadmath0-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libitm1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgfortran5-32bit-13.3.0+git8781-150000.1.12.1 * libobjc4-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2log18-32bit-13.3.0+git8781-150000.1.12.1 * libgfortran5-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libstdc++6-pp-32bit-13.3.0+git8781-150000.1.12.1 * libitm1-32bit-13.3.0+git8781-150000.1.12.1 * libgcc_s1-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libasan8-32bit-13.3.0+git8781-150000.1.12.1 * libasan8-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-32bit-13.3.0+git8781-150000.1.12.1 * libubsan1-32bit-13.3.0+git8781-150000.1.12.1 * libm2cor18-32bit-13.3.0+git8781-150000.1.12.1 * libm2min18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * cpp13-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-debuginfo-13.3.0+git8781-150000.1.12.1 * cpp13-13.3.0+git8781-150000.1.12.1 * gcc13-c++-13.3.0+git8781-150000.1.12.1 * gcc13-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * gcc13-PIE-13.3.0+git8781-150000.1.12.1 * gcc13-locale-13.3.0+git8781-150000.1.12.1 * libstdc++6-devel-gcc13-13.3.0+git8781-150000.1.12.1 * gcc13-c++-debuginfo-13.3.0+git8781-150000.1.12.1 * Development Tools Module 15-SP5 (noarch) * gcc13-info-13.3.0+git8781-150000.1.12.1 * Development Tools Module 15-SP5 (x86_64) * libstdc++6-devel-gcc13-32bit-13.3.0+git8781-150000.1.12.1 * cross-nvptx-gcc13-13.3.0+git8781-150000.1.12.1 * cross-nvptx-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * cross-nvptx-newlib13-devel-13.3.0+git8781-150000.1.12.1 * gcc13-32bit-13.3.0+git8781-150000.1.12.1 * gcc13-c++-32bit-13.3.0+git8781-150000.1.12.1 * cross-nvptx-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-32bit-13.3.0+git8781-150000.1.12.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * cpp13-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-debuginfo-13.3.0+git8781-150000.1.12.1 * cpp13-13.3.0+git8781-150000.1.12.1 * gcc13-c++-13.3.0+git8781-150000.1.12.1 * gcc13-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * gcc13-PIE-13.3.0+git8781-150000.1.12.1 * gcc13-locale-13.3.0+git8781-150000.1.12.1 * libstdc++6-devel-gcc13-13.3.0+git8781-150000.1.12.1 * gcc13-c++-debuginfo-13.3.0+git8781-150000.1.12.1 * Development Tools Module 15-SP6 (noarch) * gcc13-info-13.3.0+git8781-150000.1.12.1 * Development Tools Module 15-SP6 (x86_64) * libstdc++6-devel-gcc13-32bit-13.3.0+git8781-150000.1.12.1 * cross-nvptx-gcc13-13.3.0+git8781-150000.1.12.1 * cross-nvptx-gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * cross-nvptx-newlib13-devel-13.3.0+git8781-150000.1.12.1 * gcc13-32bit-13.3.0+git8781-150000.1.12.1 * gcc13-c++-32bit-13.3.0+git8781-150000.1.12.1 * cross-nvptx-gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-fortran-32bit-13.3.0+git8781-150000.1.12.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libgo22-13.3.0+git8781-150000.1.12.1 * libm2min18-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2log18-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * libgo22-debuginfo-13.3.0+git8781-150000.1.12.1 * libada13-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2iso18-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-objc-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * gcc13-go-13.3.0+git8781-150000.1.12.1 * libm2cor18-13.3.0+git8781-150000.1.12.1 * libm2iso18-13.3.0+git8781-150000.1.12.1 * gcc13-m2-13.3.0+git8781-150000.1.12.1 * gcc13-objc-13.3.0+git8781-150000.1.12.1 * gcc13-ada-13.3.0+git8781-150000.1.12.1 * libm2log18-13.3.0+git8781-150000.1.12.1 * libm2cor18-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-13.3.0+git8781-150000.1.12.1 * gcc13-go-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2min18-13.3.0+git8781-150000.1.12.1 * libada13-13.3.0+git8781-150000.1.12.1 * gcc13-obj-c++-13.3.0+git8781-150000.1.12.1 * gcc13-obj-c++-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-m2-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-ada-debuginfo-13.3.0+git8781-150000.1.12.1 * SUSE Package Hub 15 15-SP5 (aarch64 s390x x86_64) * libgphobos4-13.3.0+git8781-150000.1.12.1 * gcc13-d-13.3.0+git8781-150000.1.12.1 * gcc13-d-debuginfo-13.3.0+git8781-150000.1.12.1 * libgdruntime4-debuginfo-13.3.0+git8781-150000.1.12.1 * libgphobos4-debuginfo-13.3.0+git8781-150000.1.12.1 * libgdruntime4-13.3.0+git8781-150000.1.12.1 * SUSE Package Hub 15 15-SP5 (x86_64) * libm2iso18-32bit-13.3.0+git8781-150000.1.12.1 * libm2cor18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgphobos4-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-go-32bit-13.3.0+git8781-150000.1.12.1 * libm2log18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgo22-32bit-13.3.0+git8781-150000.1.12.1 * libgo22-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2min18-32bit-13.3.0+git8781-150000.1.12.1 * libm2iso18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libm2pim18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-d-32bit-13.3.0+git8781-150000.1.12.1 * libm2log18-32bit-13.3.0+git8781-150000.1.12.1 * gcc13-objc-32bit-13.3.0+git8781-150000.1.12.1 * gcc13-m2-32bit-13.3.0+git8781-150000.1.12.1 * libgdruntime4-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-obj-c++-32bit-13.3.0+git8781-150000.1.12.1 * libgphobos4-32bit-13.3.0+git8781-150000.1.12.1 * libada13-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * libgdruntime4-32bit-13.3.0+git8781-150000.1.12.1 * libada13-32bit-13.3.0+git8781-150000.1.12.1 * gcc13-ada-32bit-13.3.0+git8781-150000.1.12.1 * libm2pim18-32bit-13.3.0+git8781-150000.1.12.1 * libm2cor18-32bit-13.3.0+git8781-150000.1.12.1 * libm2min18-32bit-debuginfo-13.3.0+git8781-150000.1.12.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * gcc13-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-objc-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-obj-c++-13.3.0+git8781-150000.1.12.1 * gcc13-objc-13.3.0+git8781-150000.1.12.1 * gcc13-ada-13.3.0+git8781-150000.1.12.1 * gcc13-obj-c++-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-m2-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-debugsource-13.3.0+git8781-150000.1.12.1 * gcc13-go-13.3.0+git8781-150000.1.12.1 * gcc13-go-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-ada-debuginfo-13.3.0+git8781-150000.1.12.1 * gcc13-m2-13.3.0+git8781-150000.1.12.1 * SUSE Package Hub 15 15-SP6 (aarch64 s390x x86_64) * gcc13-d-13.3.0+git8781-150000.1.12.1 * gcc13-d-debuginfo-13.3.0+git8781-150000.1.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1188441

1 0

SUSE-SU-2024:2088-1: important: Security update for openssl-3
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for openssl-3 Announcement ID: SUSE-SU-2024:2088-1 Rating: important References: * bsc#1225551 Cross-References: * CVE-2024-4741 CVSS scores: * CVE-2024-4741 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2088=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2088=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2088=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2088=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2088=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2088=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2088=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2088=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2088=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2088=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2088=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2088=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2088=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2088=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2088=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl-3-devel-3.0.8-150400.4.57.1 * openssl-3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-3.0.8-150400.4.57.1 * openSUSE Leap 15.4 (x86_64) * libopenssl3-32bit-debuginfo-3.0.8-150400.4.57.1 * libopenssl-3-devel-32bit-3.0.8-150400.4.57.1 * libopenssl3-32bit-3.0.8-150400.4.57.1 * openSUSE Leap 15.4 (noarch) * openssl-3-doc-3.0.8-150400.4.57.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl3-64bit-3.0.8-150400.4.57.1 * libopenssl-3-devel-64bit-3.0.8-150400.4.57.1 * libopenssl3-64bit-debuginfo-3.0.8-150400.4.57.1 * openSUSE Leap Micro 5.3 (aarch64 ppc64le s390x x86_64) * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * openSUSE Leap Micro 5.4 (aarch64 ppc64le s390x x86_64) * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl-3-devel-3.0.8-150400.4.57.1 * openssl-3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-3.0.8-150400.4.57.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl-3-devel-3.0.8-150400.4.57.1 * openssl-3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-3.0.8-150400.4.57.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl-3-devel-3.0.8-150400.4.57.1 * openssl-3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-3.0.8-150400.4.57.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl-3-devel-3.0.8-150400.4.57.1 * openssl-3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-3.0.8-150400.4.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl-3-devel-3.0.8-150400.4.57.1 * openssl-3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-3.0.8-150400.4.57.1 * SUSE Manager Proxy 4.3 (x86_64) * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl-3-devel-3.0.8-150400.4.57.1 * openssl-3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-3.0.8-150400.4.57.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl-3-devel-3.0.8-150400.4.57.1 * openssl-3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-3.0.8-150400.4.57.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * openssl-3-debugsource-3.0.8-150400.4.57.1 * libopenssl-3-devel-3.0.8-150400.4.57.1 * openssl-3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-debuginfo-3.0.8-150400.4.57.1 * libopenssl3-3.0.8-150400.4.57.1 * openssl-3-3.0.8-150400.4.57.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4741.html * https://bugzilla.suse.com/show_bug.cgi?id=1225551

1 0

SUSE-SU-2024:2089-1: important: Security update for openssl-1_1
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2024:2089-1 Rating: important References: * bsc#1225551 Cross-References: * CVE-2024-4741 CVSS scores: * CVE-2024-4741 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2089=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2089=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2089=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2089=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2089=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2089=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2089=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2089=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2089=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2089=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2089=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2089=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2089=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2089=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2089=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * openSUSE Leap 15.4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * openSUSE Leap 15.4 (noarch) * openssl-1_1-doc-1.1.1l-150400.7.69.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl-1_1-devel-64bit-1.1.1l-150400.7.69.1 * libopenssl1_1-64bit-1.1.1l-150400.7.69.1 * libopenssl1_1-64bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-64bit-1.1.1l-150400.7.69.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Manager Proxy 4.3 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Manager Server 4.3 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4741.html * https://bugzilla.suse.com/show_bug.cgi?id=1225551

1 0

SUSE-SU-2024:2090-1: important: Security update for podman
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for podman Announcement ID: SUSE-SU-2024:2090-1 Rating: important References: * bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786 * CVE-2024-3727 CVSS scores: * CVE-2024-24786 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-3727 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for podman fixes the following issues: * Update to version 4.9.5 * CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122) * CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2090=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2090=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2090=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2090=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2090=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2090=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2090=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2090=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2090=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2090=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2090=1 ## Package List: * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * podman-remote-4.9.5-150400.4.27.1 * podman-4.9.5-150400.4.27.1 * podman-remote-debuginfo-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * podman-remote-4.9.5-150400.4.27.1 * podman-4.9.5-150400.4.27.1 * podman-remote-debuginfo-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * podman-remote-4.9.5-150400.4.27.1 * podman-4.9.5-150400.4.27.1 * podman-remote-debuginfo-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * podman-docker-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * podman-remote-4.9.5-150400.4.27.1 * podman-4.9.5-150400.4.27.1 * podman-remote-debuginfo-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.27.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * podman-remote-4.9.5-150400.4.27.1 * podman-remote-debuginfo-4.9.5-150400.4.27.1 * podmansh-4.9.5-150400.4.27.1 * openSUSE Leap 15.4 (noarch) * podman-docker-4.9.5-150400.4.27.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24786.html * https://www.suse.com/security/cve/CVE-2024-3727.html * https://bugzilla.suse.com/show_bug.cgi?id=1224122 * https://bugzilla.suse.com/show_bug.cgi?id=1226136

1 0

SUSE-SU-2024:2076-1: important: Security update for gdk-pixbuf
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for gdk-pixbuf Announcement ID: SUSE-SU-2024:2076-1 Rating: important References: * bsc#1195391 * bsc#1219276 * bsc#1223903 Cross-References: * CVE-2022-48622 CVSS scores: * CVE-2022-48622 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2022-48622 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has two security fixes can now be installed. ## Description: This update for gdk-pixbuf fixes the following issues: gdk-pixbuf was updated to version 2.42.12: * Security issues fixed: * CVE-2022-48622: Fixed vulnerability where a crafted .ani file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack to a denial of service or code execution attack (bsc#1219276) * Changes in version 2.42.12: * ani: Reject files with multiple INA or IART chunks, * ani: validate chunk size, * Updated translations. * Enable other image loaders such as xpm and xbm (bsc#1223903) * Changes in version 2.42.11: * Disable fringe loaders by default. * Introspection fixes. * Updated translations. * Changes in version 2.42.10: * Search for rst2man.py. * Update the memory size limit for JPEG images. * Updated translations. * Fixed loading of larger images * Avoid Bash specific syntax in baselibs postscript (bsc#1195391) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2076=1 openSUSE-SLE-15.6-2024-2076=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2076=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * gdk-pixbuf-devel-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150600.3.3.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150600.3.3.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-thumbnailer-2.42.12-150600.3.3.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-2.42.12-150600.3.3.1 * gdk-pixbuf-debugsource-2.42.12-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * gdk-pixbuf-devel-32bit-debuginfo-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150600.3.3.1 * gdk-pixbuf-devel-32bit-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * gdk-pixbuf-lang-2.42.12-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * gdk-pixbuf-devel-64bit-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-64bit-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-64bit-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-64bit-debuginfo-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-64bit-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-devel-64bit-debuginfo-2.42.12-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-devel-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150600.3.3.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150600.3.3.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-thumbnailer-2.42.12-150600.3.3.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-2.42.12-150600.3.3.1 * gdk-pixbuf-debugsource-2.42.12-150600.3.3.1 * Basesystem Module 15-SP6 (noarch) * gdk-pixbuf-lang-2.42.12-150600.3.3.1 * Basesystem Module 15-SP6 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48622.html * https://bugzilla.suse.com/show_bug.cgi?id=1195391 * https://bugzilla.suse.com/show_bug.cgi?id=1219276 * https://bugzilla.suse.com/show_bug.cgi?id=1223903

1 0

SUSE-SU-2024:2077-1: important: Security update for gdk-pixbuf
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for gdk-pixbuf Announcement ID: SUSE-SU-2024:2077-1 Rating: important References: * bsc#1195391 * bsc#1219276 * bsc#1223903 Cross-References: * CVE-2022-48622 CVSS scores: * CVE-2022-48622 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2022-48622 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has two security fixes can now be installed. ## Description: This update for gdk-pixbuf fixes the following issues: gdk-pixbuf was updated to version 2.42.12: * Security issues fixed: * CVE-2022-48622: Fixed heap memory corruption on gdk-pixbuf (bsc#1219276) * Changes in version 2.42.12: * ani: Reject files with multiple INA or IART chunks, * ani: validate chunk size, * Updated translations. * Enable other image loaders such as xpm and xbm (bsc#1223903) * Changes in version 2.42.11: * Disable fringe loaders by default. * Introspection fixes. * Updated translations. * Changes in version 2.42.10: * Search for rst2man.py. * Update the memory size limit for JPEG images. * Updated translations. * Fixed loading of larger images * Avoid Bash specific syntax in baselibs postscript (bsc#1195391) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2077=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2077=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2077=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2077=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2077=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2077=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2077=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2077=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2077=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2077=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2077=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2077=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2077=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2077=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2077=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2077=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2077=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2077=1 ## Package List: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * SUSE Manager Proxy 4.3 (x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Manager Proxy 4.3 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Manager Server 4.3 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Manager Server 4.3 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * openSUSE Leap 15.4 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-32bit-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * openSUSE Leap 15.4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * openSUSE Leap 15.4 (aarch64_ilp32) * gdk-pixbuf-query-loaders-64bit-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-64bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-64bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-64bit-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-64bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-64bit-debuginfo-2.42.12-150400.5.9.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * openSUSE Leap 15.5 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-32bit-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * openSUSE Leap 15.5 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * Basesystem Module 15-SP5 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * Basesystem Module 15-SP5 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48622.html * https://bugzilla.suse.com/show_bug.cgi?id=1195391 * https://bugzilla.suse.com/show_bug.cgi?id=1219276 * https://bugzilla.suse.com/show_bug.cgi?id=1223903

1 0

SUSE-FU-2024:2078-1: important: Feature update for rabbitmq-server313, erlang26, elixir115
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Feature update for rabbitmq-server313, erlang26, elixir115 Announcement ID: SUSE-FU-2024:2078-1 Rating: important References: * bsc#1181400 * bsc#1185075 * bsc#1186203 * bsc#1187818 * bsc#1187819 * bsc#1199431 * bsc#1205267 * bsc#1216582 * bsc#1219532 * bsc#1222591 * jsc#PED-8414 Cross-References: * CVE-2021-22116 * CVE-2021-32718 * CVE-2021-32719 * CVE-2022-31008 * CVE-2023-46118 CVSS scores: * CVE-2021-22116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2021-22116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2021-32718 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N * CVE-2021-32718 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2021-32719 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N * CVE-2021-32719 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N * CVE-2022-31008 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2022-31008 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-46118 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2023-46118 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities, contains one feature and has five fixes can now be installed. ## Description: This update for rabbitmq-server313, erlang26, elixir115 fixes the following issues: rabbitmq-server was implemented with a parallel versioned RPM package at version 3.13.1 (jsc#PED-8414): * Security issues fixed: * CVE-2021-22116: Fixed improper input validation that may lead to Denial of Sercice (DoS) attacks (bsc#1186203) * CVE-2021-32718, CVE-2021-32719: Fixed potential for JavaScript code execution in the management UI (bsc#1187818, bsc#1187819) * CVE-2022-31008: Fixed encryption key used to encrypt the URI was seeded with a predictable secret (bsc#1205267) * CVE-2023-46118: Fixed HTTP API vulnerability for denial of service (DoS) attacks with very large messages (bsc#1216582) * Other bugs fixed: * Fixed RabbitMQ maintenance status issue (bsc#1199431) * Provide user/group for RPM 4.19 (bsc#1219532) * Fixed `rabbitmqctl` command for `add_user` (bsc#1222591) * Added hardening to systemd service(s) (bsc#1181400) * Use /run instead of deprecated /var/run in tmpfiles.conf (bsc#1185075) * For the full list of upstream changes of this update between version 3.8.11 and 3.13.1 please consult: * https://www.rabbitmq.com/release-information erlang26: * Provide RPM package as it's a dependency of rabbitmq-server313 (jsc#PED-8414) elixir115: * Provide RPM package as needed in some cases by rabbitmq-server313 (jsc#PED-8414) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2078=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2078=1 openSUSE-SLE-15.6-2024-2078=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2078=1 ## Package List: * openSUSE Leap 15.3 (noarch) * elixir115-doc-1.15.7-150300.7.5.1 * elixir115-1.15.7-150300.7.5.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * erlang26-debugger-26.2.1-150300.7.5.1 * erlang26-dialyzer-debuginfo-26.2.1-150300.7.5.1 * erlang26-diameter-26.2.1-150300.7.5.1 * erlang26-epmd-26.2.1-150300.7.5.1 * erlang26-jinterface-src-26.2.1-150300.7.5.1 * erlang26-reltool-src-26.2.1-150300.7.5.1 * erlang26-et-src-26.2.1-150300.7.5.1 * erlang26-debuginfo-26.2.1-150300.7.5.1 * erlang26-reltool-26.2.1-150300.7.5.1 * erlang26-et-26.2.1-150300.7.5.1 * erlang26-jinterface-26.2.1-150300.7.5.1 * erlang26-epmd-debuginfo-26.2.1-150300.7.5.1 * erlang26-observer-26.2.1-150300.7.5.1 * erlang26-diameter-src-26.2.1-150300.7.5.1 * erlang26-src-26.2.1-150300.7.5.1 * erlang26-debugger-src-26.2.1-150300.7.5.1 * erlang26-debugsource-26.2.1-150300.7.5.1 * erlang26-observer-src-26.2.1-150300.7.5.1 * erlang26-wx-src-26.2.1-150300.7.5.1 * erlang26-dialyzer-src-26.2.1-150300.7.5.1 * erlang26-doc-26.2.1-150300.7.5.1 * erlang26-wx-26.2.1-150300.7.5.1 * erlang26-26.2.1-150300.7.5.1 * erlang26-dialyzer-26.2.1-150300.7.5.1 * erlang26-wx-debuginfo-26.2.1-150300.7.5.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * rabbitmq-server313-plugins-3.13.1-150600.13.5.3 * erlang-rabbitmq-client313-3.13.1-150600.13.5.3 * rabbitmq-server313-3.13.1-150600.13.5.3 * openSUSE Leap 15.6 (noarch) * elixir115-doc-1.15.7-150300.7.5.1 * rabbitmq-server313-bash-completion-3.13.1-150600.13.5.3 * rabbitmq-server313-zsh-completion-3.13.1-150600.13.5.3 * elixir115-1.15.7-150300.7.5.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * erlang26-debugger-26.2.1-150300.7.5.1 * erlang26-dialyzer-debuginfo-26.2.1-150300.7.5.1 * erlang26-diameter-26.2.1-150300.7.5.1 * erlang26-epmd-26.2.1-150300.7.5.1 * erlang26-jinterface-src-26.2.1-150300.7.5.1 * erlang26-reltool-src-26.2.1-150300.7.5.1 * erlang26-et-src-26.2.1-150300.7.5.1 * erlang26-debuginfo-26.2.1-150300.7.5.1 * erlang26-reltool-26.2.1-150300.7.5.1 * erlang26-et-26.2.1-150300.7.5.1 * erlang26-jinterface-26.2.1-150300.7.5.1 * erlang26-epmd-debuginfo-26.2.1-150300.7.5.1 * erlang26-observer-26.2.1-150300.7.5.1 * erlang26-diameter-src-26.2.1-150300.7.5.1 * erlang26-src-26.2.1-150300.7.5.1 * erlang26-debugger-src-26.2.1-150300.7.5.1 * erlang26-debugsource-26.2.1-150300.7.5.1 * erlang26-observer-src-26.2.1-150300.7.5.1 * erlang26-wx-src-26.2.1-150300.7.5.1 * erlang26-dialyzer-src-26.2.1-150300.7.5.1 * erlang26-doc-26.2.1-150300.7.5.1 * erlang26-wx-26.2.1-150300.7.5.1 * erlang26-26.2.1-150300.7.5.1 * erlang26-dialyzer-26.2.1-150300.7.5.1 * erlang26-wx-debuginfo-26.2.1-150300.7.5.1 * Server Applications Module 15-SP6 (noarch) * elixir115-1.15.7-150300.7.5.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * rabbitmq-server313-plugins-3.13.1-150600.13.5.3 * rabbitmq-server313-3.13.1-150600.13.5.3 * erlang26-debugsource-26.2.1-150300.7.5.1 * erlang-rabbitmq-client313-3.13.1-150600.13.5.3 * erlang26-debuginfo-26.2.1-150300.7.5.1 * erlang26-epmd-26.2.1-150300.7.5.1 * erlang26-epmd-debuginfo-26.2.1-150300.7.5.1 * erlang26-26.2.1-150300.7.5.1 ## References: * https://www.suse.com/security/cve/CVE-2021-22116.html * https://www.suse.com/security/cve/CVE-2021-32718.html * https://www.suse.com/security/cve/CVE-2021-32719.html * https://www.suse.com/security/cve/CVE-2022-31008.html * https://www.suse.com/security/cve/CVE-2023-46118.html * https://bugzilla.suse.com/show_bug.cgi?id=1181400 * https://bugzilla.suse.com/show_bug.cgi?id=1185075 * https://bugzilla.suse.com/show_bug.cgi?id=1186203 * https://bugzilla.suse.com/show_bug.cgi?id=1187818 * https://bugzilla.suse.com/show_bug.cgi?id=1187819 * https://bugzilla.suse.com/show_bug.cgi?id=1199431 * https://bugzilla.suse.com/show_bug.cgi?id=1205267 * https://bugzilla.suse.com/show_bug.cgi?id=1216582 * https://bugzilla.suse.com/show_bug.cgi?id=1219532 * https://bugzilla.suse.com/show_bug.cgi?id=1222591 * https://jira.suse.com/browse/PED-8414

1 0

SUSE-RU-2024:2079-1: moderate: Recommended update for Java
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Recommended update for Java Announcement ID: SUSE-RU-2024:2079-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for Gradle and Maven fixes the following issues: gradle-bootstrap: * Regenerate to account for the new plexus-xml dependency gradle: * Fixed build with the `plexus-xml` split from plexus-utils maven-artifact-transfer: * Added dependency on `plexus-xml` where relevant * Removed unnecessary dependency on xmvn tools and parent pom maven-assembly-plugin, maven-doxia, maven-doxia-sitetools, maven-install-plugin, maven-javadoc-plugin, maven-plugin-testing, maven-resolver, maven: * Added dependency on `plexus-xml` where relevant ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2079=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2079=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2079=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2079=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2079=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2079=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2079=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2079=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2079=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2079=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2079=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2079=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2079=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2079=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2079=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2079=1 ## Package List: * openSUSE Leap 15.5 (noarch) * maven-plugin-testing-javadoc-3.3.0-150200.3.7.1 * maven-javadoc-plugin-bootstrap-3.6.0-150200.4.13.1 * maven-assembly-plugin-3.6.0-150200.3.13.2 * maven-javadoc-plugin-3.6.0-150200.4.13.2 * groovy-bootstrap-2.4.21-150200.3.12.5 * maven-resolver-1.9.18-150200.3.20.1 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-test-tools-3.3.0-150200.3.7.1 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-install-plugin-javadoc-3.1.1-150200.3.11.1 * maven-doxia-module-confluence-1.12.0-150200.4.10.5 * maven-plugin-testing-tools-3.3.0-150200.3.7.1 * maven-doxia-module-twiki-1.12.0-150200.4.10.5 * maven-doxia-module-latex-1.12.0-150200.4.10.5 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-doxia-sitetools-javadoc-1.11.1-150200.3.10.2 * maven-install-plugin-3.1.1-150200.3.11.1 * maven-plugin-testing-harness-3.3.0-150200.3.7.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-doxia-test-docs-1.12.0-150200.4.10.5 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-javadoc-3.9.6-150200.4.24.2 * maven-resolver-transport-classpath-1.9.18-150200.3.20.1 * maven-artifact-transfer-javadoc-0.13.1-150200.3.7.1 * maven-javadoc-plugin-javadoc-3.6.0-150200.4.13.2 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-doxia-javadoc-1.12.0-150200.4.10.5 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-assembly-plugin-javadoc-3.6.0-150200.3.13.2 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * gpars-bootstrap-1.2.1-150200.3.12.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-docbook-simple-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-plugin-testing-3.3.0-150200.3.7.1 * maven-resolver-test-util-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * maven-resolver-javadoc-1.9.18-150200.3.20.1 * maven-doxia-module-rtf-1.12.0-150200.4.10.5 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * gradle-bootstrap-4.4.1-150200.3.12.5 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * maven-lib-3.9.6-150200.4.24.2 * openSUSE Leap 15.6 (noarch) * maven-plugin-testing-javadoc-3.3.0-150200.3.7.1 * maven-javadoc-plugin-bootstrap-3.6.0-150200.4.13.1 * maven-assembly-plugin-3.6.0-150200.3.13.2 * maven-javadoc-plugin-3.6.0-150200.4.13.2 * groovy-bootstrap-2.4.21-150200.3.12.5 * maven-resolver-1.9.18-150200.3.20.1 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-test-tools-3.3.0-150200.3.7.1 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-install-plugin-javadoc-3.1.1-150200.3.11.1 * maven-doxia-module-confluence-1.12.0-150200.4.10.5 * maven-plugin-testing-tools-3.3.0-150200.3.7.1 * maven-doxia-module-twiki-1.12.0-150200.4.10.5 * maven-doxia-module-latex-1.12.0-150200.4.10.5 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-doxia-sitetools-javadoc-1.11.1-150200.3.10.2 * maven-install-plugin-3.1.1-150200.3.11.1 * maven-plugin-testing-harness-3.3.0-150200.3.7.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-doxia-test-docs-1.12.0-150200.4.10.5 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-javadoc-3.9.6-150200.4.24.2 * maven-resolver-transport-classpath-1.9.18-150200.3.20.1 * maven-artifact-transfer-javadoc-0.13.1-150200.3.7.1 * maven-javadoc-plugin-javadoc-3.6.0-150200.4.13.2 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-doxia-javadoc-1.12.0-150200.4.10.5 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-assembly-plugin-javadoc-3.6.0-150200.3.13.2 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * gpars-bootstrap-1.2.1-150200.3.12.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-docbook-simple-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-plugin-testing-3.3.0-150200.3.7.1 * maven-resolver-test-util-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * maven-resolver-javadoc-1.9.18-150200.3.20.1 * maven-doxia-module-rtf-1.12.0-150200.4.10.5 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * gradle-bootstrap-4.4.1-150200.3.12.5 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * maven-lib-3.9.6-150200.4.24.2 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * Development Tools Module 15-SP5 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * Development Tools Module 15-SP6 (noarch) * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * maven-lib-3.9.6-150200.4.24.2 * gradle-4.4.1-150200.3.18.1 * maven-3.9.6-150200.4.24.2 * SUSE Enterprise Storage 7.1 (noarch) * maven-javadoc-plugin-3.6.0-150200.4.13.2 * maven-doxia-core-1.12.0-150200.4.10.5 * maven-doxia-module-apt-1.12.0-150200.4.10.5 * maven-resolver-api-1.9.18-150200.3.20.1 * maven-resolver-impl-1.9.18-150200.3.20.1 * maven-doxia-module-fml-1.12.0-150200.4.10.5 * maven-resolver-named-locks-1.9.18-150200.3.20.1 * maven-resolver-util-1.9.18-150200.3.20.1 * maven-resolver-spi-1.9.18-150200.3.20.1 * maven-doxia-sink-api-1.12.0-150200.4.10.5 * maven-doxia-sitetools-1.11.1-150200.3.10.2 * maven-resolver-transport-file-1.9.18-150200.3.20.1 * maven-doxia-logging-api-1.12.0-150200.4.10.5 * maven-resolver-transport-wagon-1.9.18-150200.3.20.1 * maven-resolver-connector-basic-1.9.18-150200.3.20.1 * maven-artifact-transfer-0.13.1-150200.3.7.1 * maven-doxia-module-fo-1.12.0-150200.4.10.5 * maven-doxia-module-xdoc-1.12.0-150200.4.10.5 * maven-resolver-transport-http-1.9.18-150200.3.20.1 * maven-doxia-module-xhtml-1.12.0-150200.4.10.5 * maven-doxia-module-xhtml5-1.12.0-150200.4.10.5

1 0

SUSE-SU-2024:2083-1: important: Security update for libarchive
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Security update for libarchive Announcement ID: SUSE-SU-2024:2083-1 Rating: important References: * bsc#1225971 * bsc#1225972 Cross-References: * CVE-2024-20696 * CVE-2024-20697 CVSS scores: * CVE-2024-20696 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2024-20697 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for libarchive fixes the following issues: * CVE-2024-20697: Fixed Out of bounds Remote Code Execution Vulnerability (bsc#1225972). * CVE-2024-20696: Fixed heap based out-of-bounds write (bsc#1225971). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2083=1 openSUSE-SLE-15.6-2024-2083=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2083=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2083=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * bsdtar-debuginfo-3.7.2-150600.3.3.1 * libarchive13-debuginfo-3.7.2-150600.3.3.1 * libarchive-devel-3.7.2-150600.3.3.1 * libarchive-debugsource-3.7.2-150600.3.3.1 * libarchive13-3.7.2-150600.3.3.1 * bsdtar-3.7.2-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * libarchive13-32bit-3.7.2-150600.3.3.1 * libarchive13-32bit-debuginfo-3.7.2-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libarchive13-64bit-3.7.2-150600.3.3.1 * libarchive13-64bit-debuginfo-3.7.2-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libarchive-devel-3.7.2-150600.3.3.1 * libarchive13-debuginfo-3.7.2-150600.3.3.1 * libarchive-debugsource-3.7.2-150600.3.3.1 * libarchive13-3.7.2-150600.3.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * bsdtar-debuginfo-3.7.2-150600.3.3.1 * libarchive-debugsource-3.7.2-150600.3.3.1 * bsdtar-3.7.2-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-20696.html * https://www.suse.com/security/cve/CVE-2024-20697.html * https://bugzilla.suse.com/show_bug.cgi?id=1225971 * https://bugzilla.suse.com/show_bug.cgi?id=1225972

1 0

SUSE-RU-2024:2084-1: moderate: Recommended update for perf
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Recommended update for perf Announcement ID: SUSE-RU-2024:2084-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for perf fixes the following issues: * perf ui browser: Avoid SEGV on title (git fixes) * perf pmu: Count sys and cpuid JSON events separately (git fixes) * perf stat: Don't display metric header for non-leader uncore events (git- fixes) * perf daemon: Fix file leak in daemon_session__control (git-fixes) * perf symbols: Fix ownership of string in dso__load_vmlinux() (git-fixes) * perf thread: Fixes to thread__new() related to initializing comm (git-fixes) * perf report: Avoid SEGV in report__setup_sample_type() (git-fixes) * perf ui browser: Don't save pointer to stack memory (git-fixes) * perf bench internals inject-build-id: Fix trap divide when collecting just one DSO (git-fixes) * perf intel-pt: Fix unassigned instruction op (discovered by MemorySanitizer) (git-fixes) * perf test shell arm_coresight: Increase buffer size for Coresight basic tests (git-fixes) * perf docs: Document bpf event modifier (git-fixes) * perf bench uprobe: Remove lib64 from libc.so.6 binary path (git-fixes) * perf record: Fix debug message placement for test consumption (git-fixes) * perf tests: Apply attributes to all events in object code reading test (git- fixes) * perf tests: Make "test data symbol" more robust on Neoverse N1 (git-fixes) * perf annotate: Fix annotation_calc_lines() to pass correct address to get_srcline() (git-fixes) * perf stat: Do not fail on metrics on s390 z/VM systems (git-fixes) * perf sched timehist: Fix -g/--call-graph option failure (git-fixes) * perf annotate: Get rid of duplicate --group option item (git-fixes) * perf probe: Add missing libgen.h header needed for using basename() (git- fixes) * perf record: Delete session after stopping sideband thread (git-fixes) * perf auxtrace: Fix multiple use of --itrace option (git-fixes) * perf script: Show also errors for --insn-trace option (git-fixes) * perf lock contention: Add a missing NULL check (git-fixes) * perf vendor events amd: Fix Zen 4 cache latency events (git-fixes) * libperf evlist: Avoid out-of-bounds access (git-fixes) * perf pmu: Fix a potential memory leak in perf_pmu__lookup() (git-fixes) * perf print-events: make is_event_supported() more robust (git-fixes) * perf list: fix short description for some cache events (git-fixes) * perf metric: Don't remove scale from counts (git-fixes) * perf stat: Avoid metric-only segv (git-fixes) * perf expr: Fix "has_event" function for metric style events (git-fixes) * perf srcline: Add missed addr2line closes (git-fixes) * perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() (git-fixes) * perf bpf: Clean up the generated/copied vmlinux.h (git-fixes) * perf jevents: Drop or simplify small integer values (git-fixes) * perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() (git-fixes) * perf pmu: Treat the msr pmu as software (git-fixes). * perf record: Check conflict between '\--timestamp-filename' option and pipe mode before recording (git-fixes) * perf record: Fix possible incorrect free in record__switch_output() (git- fixes) * perf vendor events amd: Add Zen 4 memory controller events (git-fixes) * perf top: Uniform the event name for the hybrid machine (git-fixes) * perf top: Use evsel's cpus to replace user_requested_cpus (git-fixes) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2084=1 SUSE-2024-2084=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2084=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * perf-bash-completion-6.4.0.git22305.596cd3fdbd-150600.3.3.2 * perf-6.4.0.git22305.596cd3fdbd-150600.3.3.2 * perf-devel-6.4.0.git22305.596cd3fdbd-150600.3.3.2 * perf-debuginfo-6.4.0.git22305.596cd3fdbd-150600.3.3.2 * perf-debugsource-6.4.0.git22305.596cd3fdbd-150600.3.3.2 * perf-gtk-6.4.0.git22305.596cd3fdbd-150600.3.3.2 * perf-gtk-debuginfo-6.4.0.git22305.596cd3fdbd-150600.3.3.2 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * perf-debuginfo-6.4.0.git22305.596cd3fdbd-150600.3.3.2 * perf-debugsource-6.4.0.git22305.596cd3fdbd-150600.3.3.2 * perf-6.4.0.git22305.596cd3fdbd-150600.3.3.2 * perf-devel-6.4.0.git22305.596cd3fdbd-150600.3.3.2

1 0

SUSE-RU-2024:33666-1: important: Recommended update for libsolv, libzypp, zypper
by OPENSUSE-UPDATES 19 Jun '24

19 Jun '24

# Recommended update for libsolv, libzypp, zypper Announcement ID: SUSE-RU-2024:33666-1 Rating: important References: * bsc#1222086 * bsc#1223430 * bsc#1223766 * jsc#PED-8153 Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that contains one feature and has three fixes can now be installed. ## Description: This update for libsolv, libzypp, zypper fixes the following issues: * Improve updating of installed multiversion packages * Fix decision introspection going into an endless loop in some cases * Split libsolv-tools into libsolv-tools-base [jsc#PED-8153] * Improve checks against corrupt rpm * Fixed check for outdated repo metadata as non-root user (bsc#1222086) * Add ZYPP_API for exported functions and switch to visibility=hidden (jsc#PED-8153) * Dynamically resolve libproxy (jsc#PED-8153) * Fix download from gpgkey URL (bsc#1223430) * Delay zypp lock until command options are parsed (bsc#1223766) * Unify message format ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch 33666=1 * SUSE Linux Enterprise Server 15 SP2 zypper in -t patch SUSE-SLE-INSTALLER-15-SP2-2024-33666=1 * SUSE Linux Enterprise Server 15 SP3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP3-2024-33666=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-33666=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-33666=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-33666=1 SUSE-SLE- Product-SLES_SAP-15-SP2-2024-33666=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-33666=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-Storage-7.1-2024-33666=1 SUSE-SLE-Product- SLES-15-SP3-LTSS-2024-33666=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-33666=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-33666=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-33666=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-33666=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-33666=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * perl-yui-4.1.5-150300.3.12.4 * libyui-qt-debugsource-4.1.5-150300.3.12.4 * libyui-bindings-debuginfo-4.1.5-150300.3.12.4 * libyui-ncurses-debugsource-4.1.5-150300.3.12.4 * libyui-ncurses-pkg-debugsource-4.1.5-150300.3.12.5 * libyui-qt-pkg15-4.1.5-150300.3.12.5 * libyui-rest-api-debugsource-4.1.5-150300.3.12.4 * ruby-yui-4.1.5-150300.3.12.4 * libyui-ncurses-pkg15-debuginfo-4.1.5-150300.3.12.5 * libyui-ncurses-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libyui-ncurses-tools-4.1.5-150300.3.12.4 * libyui-ncurses15-debuginfo-4.1.5-150300.3.12.4 * libyui-qt15-4.1.5-150300.3.12.4 * libyui15-4.1.5-150300.3.12.4 * libyui-ncurses-pkg15-4.1.5-150300.3.12.5 * libyui-rest-api-devel-4.1.5-150300.3.12.4 * libyui15-debuginfo-4.1.5-150300.3.12.4 * libyui-ncurses-rest-api-debugsource-4.1.5-150300.3.12.4 * yast2-pkg-bindings-debugsource-4.3.13-150300.3.10.11 * yast2-pkg-bindings-4.3.13-150300.3.10.11 * libyui-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libyui-qt15-debuginfo-4.1.5-150300.3.12.4 * python3-yui-debuginfo-4.1.5-150300.3.12.4 * libyui-ncurses-pkg-devel-4.1.5-150300.3.12.5 * libyui-ncurses-devel-4.1.5-150300.3.12.4 * libyui-qt-graph15-4.1.5-150300.3.12.4 * libyui-qt-graph-devel-4.1.5-150300.3.12.4 * libyui-qt-graph-debugsource-4.1.5-150300.3.12.4 * libyui-bindings-debugsource-4.1.5-150300.3.12.4 * perl-yui-debuginfo-4.1.5-150300.3.12.4 * libyui-qt-rest-api-devel-4.1.5-150300.3.12.4 * python3-yui-4.1.5-150300.3.12.4 * libyui-rest-api15-4.1.5-150300.3.12.4 * libyui-ncurses15-4.1.5-150300.3.12.4 * libyui-ncurses-rest-api15-4.1.5-150300.3.12.4 * libyui-qt-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libyui-ncurses-rest-api-devel-4.1.5-150300.3.12.4 * libyui-qt-rest-api-debugsource-4.1.5-150300.3.12.4 * libyui-qt-rest-api15-4.1.5-150300.3.12.4 * libyui-qt-pkg15-debuginfo-4.1.5-150300.3.12.5 * libyui-qt-pkg-debugsource-4.1.5-150300.3.12.5 * ruby-yui-debuginfo-4.1.5-150300.3.12.4 * libyui-qt-graph15-debuginfo-4.1.5-150300.3.12.4 * libyui-devel-4.1.5-150300.3.12.4 * libyui-qt-devel-4.1.5-150300.3.12.4 * yast2-pkg-bindings-debuginfo-4.3.13-150300.3.10.11 * libyui-qt-pkg-devel-4.1.5-150300.3.12.5 * libyui-debugsource-4.1.5-150300.3.12.4 * SUSE Linux Enterprise Server 15 SP2 (aarch64 ppc64le s390x x86_64) * yast2-pkg-bindings-4.2.17-150200.3.26.6 * libzypp-17.34.1-150200.106.2 * libsolv-tools-0.7.29-150200.34.1 * libyui-qt-pkg11-2.47.5-150200.3.6.6 * libyui-ncurses-pkg11-2.50.8-150200.3.7.5 * libsolv-tools-base-0.7.29-150200.34.1 * SUSE Linux Enterprise Server 15 SP3 (aarch64 ppc64le s390x x86_64) * libyui-ncurses-pkg15-4.1.5-150300.3.12.5 * libyui-qt-pkg15-4.1.5-150300.3.12.5 * libzypp-17.34.1-150200.106.2 * libsolv-tools-0.7.29-150200.34.1 * yast2-pkg-bindings-4.3.13-150300.3.10.11 * libsolv-tools-base-0.7.29-150200.34.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * yast2-pkg-bindings-debugsource-4.2.17-150200.3.26.6 * yast2-pkg-bindings-debuginfo-4.2.17-150200.3.26.6 * libzypp-17.34.1-150200.106.2 * libsolv-debugsource-0.7.29-150200.34.1 * zypper-1.14.73-150200.81.6 * libsolv-devel-debuginfo-0.7.29-150200.34.1 * libyui-ncurses-pkg-devel-2.50.8-150200.3.7.5 * libsolv-devel-0.7.29-150200.34.1 * PackageKit-devel-1.1.13-150200.4.33.6 * perl-solv-0.7.29-150200.34.1 * python3-solv-debuginfo-0.7.29-150200.34.1 * libsolv-tools-base-0.7.29-150200.34.1 * libyui-ncurses-pkg11-debuginfo-2.50.8-150200.3.7.5 * libyui-qt-pkg-debugsource-2.47.5-150200.3.6.6 * libyui-rest-api-debugsource-0.3.0-150200.3.4.5 * PackageKit-debuginfo-1.1.13-150200.4.33.6 * libyui11-3.9.3-150200.3.4.5 * libyui-qt-pkg11-debuginfo-2.47.5-150200.3.6.6 * typelib-1_0-PackageKitGlib-1_0-1.1.13-150200.4.33.6 * libyui-ncurses-pkg11-2.50.8-150200.3.7.5 * libyui-rest-api-devel-0.3.0-150200.3.4.5 * libyui-rest-api11-debuginfo-0.3.0-150200.3.4.5 * libyui-rest-api11-0.3.0-150200.3.4.5 * libpackagekit-glib2-18-1.1.13-150200.4.33.6 * libsolv-tools-debuginfo-0.7.29-150200.34.1 * libzypp-debugsource-17.34.1-150200.106.2 * ruby-solv-debuginfo-0.7.29-150200.34.1 * PackageKit-debugsource-1.1.13-150200.4.33.6 * zypper-debuginfo-1.14.73-150200.81.6 * libsolv-debuginfo-0.7.29-150200.34.1 * ruby-solv-0.7.29-150200.34.1 * zypper-debugsource-1.14.73-150200.81.6 * libpackagekit-glib2-18-debuginfo-1.1.13-150200.4.33.6 * libpackagekit-glib2-devel-1.1.13-150200.4.33.6 * yast2-pkg-bindings-4.2.17-150200.3.26.6 * PackageKit-backend-zypp-debuginfo-1.1.13-150200.4.33.6 * PackageKit-1.1.13-150200.4.33.6 * libyui11-debuginfo-3.9.3-150200.3.4.5 * libsolv-tools-0.7.29-150200.34.1 * libyui-qt-pkg-devel-2.47.5-150200.3.6.6 * perl-solv-debuginfo-0.7.29-150200.34.1 * libyui-qt-pkg11-2.47.5-150200.3.6.6 * PackageKit-devel-debuginfo-1.1.13-150200.4.33.6 * libsolv-tools-base-debuginfo-0.7.29-150200.34.1 * libzypp-devel-17.34.1-150200.106.2 * python3-solv-0.7.29-150200.34.1 * libzypp-debuginfo-17.34.1-150200.106.2 * libyui-debugsource-3.9.3-150200.3.4.5 * PackageKit-backend-zypp-1.1.13-150200.4.33.6 * libyui-devel-3.9.3-150200.3.4.5 * libyui-ncurses-pkg-debugsource-2.50.8-150200.3.7.5 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * zypper-log-1.14.73-150200.81.6 * PackageKit-branding-SLE-12.0-150200.9.4.5 * PackageKit-lang-1.1.13-150200.4.33.6 * zypper-needs-restarting-1.14.73-150200.81.6 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libyui-qt-debugsource-4.1.5-150300.3.12.4 * libyui-ncurses-debugsource-4.1.5-150300.3.12.4 * libyui-ncurses-pkg-debugsource-4.1.5-150300.3.12.5 * libyui-qt-pkg15-4.1.5-150300.3.12.5 * libyui-rest-api-debugsource-4.1.5-150300.3.12.4 * libzypp-17.34.1-150200.106.2 * libsolv-debugsource-0.7.29-150200.34.1 * libyui-ncurses-pkg15-debuginfo-4.1.5-150300.3.12.5 * zypper-1.14.73-150200.81.6 * libyui-ncurses-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libsolv-devel-debuginfo-0.7.29-150200.34.1 * libyui-ncurses-tools-4.1.5-150300.3.12.4 * libsolv-devel-0.7.29-150200.34.1 * libyui-ncurses15-debuginfo-4.1.5-150300.3.12.4 * PackageKit-devel-1.1.13-150200.4.33.6 * perl-solv-0.7.29-150200.34.1 * python3-solv-debuginfo-0.7.29-150200.34.1 * libsolv-tools-base-0.7.29-150200.34.1 * libyui-qt15-4.1.5-150300.3.12.4 * libyui15-4.1.5-150300.3.12.4 * libyui-ncurses-pkg15-4.1.5-150300.3.12.5 * libyui-rest-api-devel-4.1.5-150300.3.12.4 * libyui15-debuginfo-4.1.5-150300.3.12.4 * PackageKit-debuginfo-1.1.13-150200.4.33.6 * libyui-ncurses-rest-api-debugsource-4.1.5-150300.3.12.4 * yast2-pkg-bindings-debugsource-4.3.13-150300.3.10.11 * yast2-pkg-bindings-4.3.13-150300.3.10.11 * typelib-1_0-PackageKitGlib-1_0-1.1.13-150200.4.33.6 * libyui-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libyui-qt15-debuginfo-4.1.5-150300.3.12.4 * libyui-ncurses-pkg-devel-4.1.5-150300.3.12.5 * libpackagekit-glib2-18-1.1.13-150200.4.33.6 * libyui-ncurses-devel-4.1.5-150300.3.12.4 * libyui-qt-graph15-4.1.5-150300.3.12.4 * libsolv-tools-debuginfo-0.7.29-150200.34.1 * libyui-qt-graph-devel-4.1.5-150300.3.12.4 * libzypp-debugsource-17.34.1-150200.106.2 * libyui-qt-graph-debugsource-4.1.5-150300.3.12.4 * libyui-qt-rest-api-devel-4.1.5-150300.3.12.4 * ruby-solv-debuginfo-0.7.29-150200.34.1 * PackageKit-debugsource-1.1.13-150200.4.33.6 * libyui-rest-api15-4.1.5-150300.3.12.4 * libyui-ncurses-rest-api15-4.1.5-150300.3.12.4 * libyui-ncurses15-4.1.5-150300.3.12.4 * libyui-qt-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libsolv-debuginfo-0.7.29-150200.34.1 * yast2-pkg-bindings-debuginfo-4.3.13-150300.3.10.11 * libyui-ncurses-rest-api-devel-4.1.5-150300.3.12.4 * zypper-debuginfo-1.14.73-150200.81.6 * ruby-solv-0.7.29-150200.34.1 * zypper-debugsource-1.14.73-150200.81.6 * libyui-qt-rest-api-debugsource-4.1.5-150300.3.12.4 * libpackagekit-glib2-18-debuginfo-1.1.13-150200.4.33.6 * libpackagekit-glib2-devel-1.1.13-150200.4.33.6 * libyui-qt-pkg15-debuginfo-4.1.5-150300.3.12.5 * libyui-qt-rest-api15-4.1.5-150300.3.12.4 * PackageKit-backend-zypp-debuginfo-1.1.13-150200.4.33.6 * PackageKit-1.1.13-150200.4.33.6 * libsolv-tools-0.7.29-150200.34.1 * perl-solv-debuginfo-0.7.29-150200.34.1 * libyui-qt-pkg-debugsource-4.1.5-150300.3.12.5 * PackageKit-devel-debuginfo-1.1.13-150200.4.33.6 * libsolv-tools-base-debuginfo-0.7.29-150200.34.1 * libzypp-devel-17.34.1-150200.106.2 * python3-solv-0.7.29-150200.34.1 * libyui-qt-graph15-debuginfo-4.1.5-150300.3.12.4 * libyui-devel-4.1.5-150300.3.12.4 * libyui-qt-devel-4.1.5-150300.3.12.4 * libzypp-debuginfo-17.34.1-150200.106.2 * libyui-qt-pkg-devel-4.1.5-150300.3.12.5 * PackageKit-backend-zypp-1.1.13-150200.4.33.6 * libyui-debugsource-4.1.5-150300.3.12.4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * zypper-log-1.14.73-150200.81.6 * PackageKit-branding-SLE-12.0-150200.9.4.5 * PackageKit-lang-1.1.13-150200.4.33.6 * zypper-needs-restarting-1.14.73-150200.81.6 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * yast2-pkg-bindings-debugsource-4.2.17-150200.3.26.6 * yast2-pkg-bindings-debuginfo-4.2.17-150200.3.26.6 * libzypp-17.34.1-150200.106.2 * libsolv-debugsource-0.7.29-150200.34.1 * zypper-1.14.73-150200.81.6 * libsolv-devel-debuginfo-0.7.29-150200.34.1 * libyui-ncurses-pkg-devel-2.50.8-150200.3.7.5 * libsolv-devel-0.7.29-150200.34.1 * PackageKit-devel-1.1.13-150200.4.33.6 * perl-solv-0.7.29-150200.34.1 * python3-solv-debuginfo-0.7.29-150200.34.1 * libsolv-tools-base-0.7.29-150200.34.1 * libyui-ncurses-pkg11-debuginfo-2.50.8-150200.3.7.5 * libyui-qt-pkg-debugsource-2.47.5-150200.3.6.6 * libyui-rest-api-debugsource-0.3.0-150200.3.4.5 * PackageKit-debuginfo-1.1.13-150200.4.33.6 * libyui11-3.9.3-150200.3.4.5 * libyui-qt-pkg11-debuginfo-2.47.5-150200.3.6.6 * typelib-1_0-PackageKitGlib-1_0-1.1.13-150200.4.33.6 * libyui-ncurses-pkg11-2.50.8-150200.3.7.5 * libyui-rest-api-devel-0.3.0-150200.3.4.5 * libyui-rest-api11-debuginfo-0.3.0-150200.3.4.5 * libyui-rest-api11-0.3.0-150200.3.4.5 * libpackagekit-glib2-18-1.1.13-150200.4.33.6 * libsolv-tools-debuginfo-0.7.29-150200.34.1 * libzypp-debugsource-17.34.1-150200.106.2 * ruby-solv-debuginfo-0.7.29-150200.34.1 * PackageKit-debugsource-1.1.13-150200.4.33.6 * zypper-debuginfo-1.14.73-150200.81.6 * libsolv-debuginfo-0.7.29-150200.34.1 * ruby-solv-0.7.29-150200.34.1 * zypper-debugsource-1.14.73-150200.81.6 * libpackagekit-glib2-18-debuginfo-1.1.13-150200.4.33.6 * libpackagekit-glib2-devel-1.1.13-150200.4.33.6 * yast2-pkg-bindings-4.2.17-150200.3.26.6 * PackageKit-backend-zypp-debuginfo-1.1.13-150200.4.33.6 * PackageKit-1.1.13-150200.4.33.6 * libyui11-debuginfo-3.9.3-150200.3.4.5 * libsolv-tools-0.7.29-150200.34.1 * libyui-qt-pkg-devel-2.47.5-150200.3.6.6 * perl-solv-debuginfo-0.7.29-150200.34.1 * libyui-qt-pkg11-2.47.5-150200.3.6.6 * PackageKit-devel-debuginfo-1.1.13-150200.4.33.6 * libsolv-tools-base-debuginfo-0.7.29-150200.34.1 * libzypp-devel-17.34.1-150200.106.2 * python3-solv-0.7.29-150200.34.1 * libzypp-debuginfo-17.34.1-150200.106.2 * libyui-debugsource-3.9.3-150200.3.4.5 * PackageKit-backend-zypp-1.1.13-150200.4.33.6 * libyui-devel-3.9.3-150200.3.4.5 * libyui-ncurses-pkg-debugsource-2.50.8-150200.3.7.5 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * zypper-log-1.14.73-150200.81.6 * PackageKit-branding-SLE-12.0-150200.9.4.5 * PackageKit-lang-1.1.13-150200.4.33.6 * zypper-needs-restarting-1.14.73-150200.81.6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * yast2-pkg-bindings-debugsource-4.2.17-150200.3.26.6 * yast2-pkg-bindings-debuginfo-4.2.17-150200.3.26.6 * libzypp-17.34.1-150200.106.2 * libsolv-debugsource-0.7.29-150200.34.1 * zypper-1.14.73-150200.81.6 * libsolv-devel-debuginfo-0.7.29-150200.34.1 * libyui-ncurses-pkg-devel-2.50.8-150200.3.7.5 * libsolv-devel-0.7.29-150200.34.1 * PackageKit-devel-1.1.13-150200.4.33.6 * perl-solv-0.7.29-150200.34.1 * python3-solv-debuginfo-0.7.29-150200.34.1 * libsolv-tools-base-0.7.29-150200.34.1 * libyui-ncurses-pkg11-debuginfo-2.50.8-150200.3.7.5 * libyui-qt-pkg-debugsource-2.47.5-150200.3.6.6 * libyui-rest-api-debugsource-0.3.0-150200.3.4.5 * PackageKit-debuginfo-1.1.13-150200.4.33.6 * libyui11-3.9.3-150200.3.4.5 * libyui-qt-pkg11-debuginfo-2.47.5-150200.3.6.6 * typelib-1_0-PackageKitGlib-1_0-1.1.13-150200.4.33.6 * libyui-ncurses-pkg11-2.50.8-150200.3.7.5 * libyui-rest-api-devel-0.3.0-150200.3.4.5 * libyui-rest-api11-debuginfo-0.3.0-150200.3.4.5 * libyui-rest-api11-0.3.0-150200.3.4.5 * libpackagekit-glib2-18-1.1.13-150200.4.33.6 * libsolv-tools-debuginfo-0.7.29-150200.34.1 * libzypp-debugsource-17.34.1-150200.106.2 * ruby-solv-debuginfo-0.7.29-150200.34.1 * PackageKit-debugsource-1.1.13-150200.4.33.6 * zypper-debuginfo-1.14.73-150200.81.6 * libsolv-debuginfo-0.7.29-150200.34.1 * ruby-solv-0.7.29-150200.34.1 * zypper-debugsource-1.14.73-150200.81.6 * libpackagekit-glib2-18-debuginfo-1.1.13-150200.4.33.6 * libpackagekit-glib2-devel-1.1.13-150200.4.33.6 * yast2-pkg-bindings-4.2.17-150200.3.26.6 * PackageKit-backend-zypp-debuginfo-1.1.13-150200.4.33.6 * PackageKit-1.1.13-150200.4.33.6 * libyui11-debuginfo-3.9.3-150200.3.4.5 * libsolv-tools-0.7.29-150200.34.1 * libyui-qt-pkg-devel-2.47.5-150200.3.6.6 * perl-solv-debuginfo-0.7.29-150200.34.1 * libyui-qt-pkg11-2.47.5-150200.3.6.6 * PackageKit-devel-debuginfo-1.1.13-150200.4.33.6 * libsolv-tools-base-debuginfo-0.7.29-150200.34.1 * libzypp-devel-17.34.1-150200.106.2 * python3-solv-0.7.29-150200.34.1 * libzypp-debuginfo-17.34.1-150200.106.2 * libyui-debugsource-3.9.3-150200.3.4.5 * PackageKit-backend-zypp-1.1.13-150200.4.33.6 * libyui-devel-3.9.3-150200.3.4.5 * libyui-ncurses-pkg-debugsource-2.50.8-150200.3.7.5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * zypper-log-1.14.73-150200.81.6 * PackageKit-branding-SLE-12.0-150200.9.4.5 * PackageKit-lang-1.1.13-150200.4.33.6 * zypper-needs-restarting-1.14.73-150200.81.6 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libyui-qt-debugsource-4.1.5-150300.3.12.4 * libyui-ncurses-debugsource-4.1.5-150300.3.12.4 * libyui-ncurses-pkg-debugsource-4.1.5-150300.3.12.5 * libyui-qt-pkg15-4.1.5-150300.3.12.5 * libyui-rest-api-debugsource-4.1.5-150300.3.12.4 * libzypp-17.34.1-150200.106.2 * libsolv-debugsource-0.7.29-150200.34.1 * libyui-ncurses-pkg15-debuginfo-4.1.5-150300.3.12.5 * zypper-1.14.73-150200.81.6 * libyui-ncurses-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libsolv-devel-debuginfo-0.7.29-150200.34.1 * libyui-ncurses-tools-4.1.5-150300.3.12.4 * libsolv-devel-0.7.29-150200.34.1 * libyui-ncurses15-debuginfo-4.1.5-150300.3.12.4 * PackageKit-devel-1.1.13-150200.4.33.6 * perl-solv-0.7.29-150200.34.1 * python3-solv-debuginfo-0.7.29-150200.34.1 * libsolv-tools-base-0.7.29-150200.34.1 * libyui-qt15-4.1.5-150300.3.12.4 * libyui15-4.1.5-150300.3.12.4 * libyui-ncurses-pkg15-4.1.5-150300.3.12.5 * libyui-rest-api-devel-4.1.5-150300.3.12.4 * libyui15-debuginfo-4.1.5-150300.3.12.4 * PackageKit-debuginfo-1.1.13-150200.4.33.6 * libyui-ncurses-rest-api-debugsource-4.1.5-150300.3.12.4 * yast2-pkg-bindings-debugsource-4.3.13-150300.3.10.11 * yast2-pkg-bindings-4.3.13-150300.3.10.11 * typelib-1_0-PackageKitGlib-1_0-1.1.13-150200.4.33.6 * libyui-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libyui-qt15-debuginfo-4.1.5-150300.3.12.4 * libyui-ncurses-pkg-devel-4.1.5-150300.3.12.5 * libpackagekit-glib2-18-1.1.13-150200.4.33.6 * libyui-ncurses-devel-4.1.5-150300.3.12.4 * libyui-qt-graph15-4.1.5-150300.3.12.4 * libsolv-tools-debuginfo-0.7.29-150200.34.1 * libyui-qt-graph-devel-4.1.5-150300.3.12.4 * libzypp-debugsource-17.34.1-150200.106.2 * libyui-qt-graph-debugsource-4.1.5-150300.3.12.4 * libyui-qt-rest-api-devel-4.1.5-150300.3.12.4 * ruby-solv-debuginfo-0.7.29-150200.34.1 * PackageKit-debugsource-1.1.13-150200.4.33.6 * libyui-rest-api15-4.1.5-150300.3.12.4 * libyui-ncurses-rest-api15-4.1.5-150300.3.12.4 * libyui-ncurses15-4.1.5-150300.3.12.4 * libyui-qt-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libsolv-debuginfo-0.7.29-150200.34.1 * yast2-pkg-bindings-debuginfo-4.3.13-150300.3.10.11 * libyui-ncurses-rest-api-devel-4.1.5-150300.3.12.4 * zypper-debuginfo-1.14.73-150200.81.6 * ruby-solv-0.7.29-150200.34.1 * zypper-debugsource-1.14.73-150200.81.6 * libyui-qt-rest-api-debugsource-4.1.5-150300.3.12.4 * libpackagekit-glib2-18-debuginfo-1.1.13-150200.4.33.6 * libpackagekit-glib2-devel-1.1.13-150200.4.33.6 * libyui-qt-pkg15-debuginfo-4.1.5-150300.3.12.5 * libyui-qt-rest-api15-4.1.5-150300.3.12.4 * PackageKit-backend-zypp-debuginfo-1.1.13-150200.4.33.6 * PackageKit-1.1.13-150200.4.33.6 * libsolv-tools-0.7.29-150200.34.1 * perl-solv-debuginfo-0.7.29-150200.34.1 * libyui-qt-pkg-debugsource-4.1.5-150300.3.12.5 * PackageKit-devel-debuginfo-1.1.13-150200.4.33.6 * libsolv-tools-base-debuginfo-0.7.29-150200.34.1 * libzypp-devel-17.34.1-150200.106.2 * python3-solv-0.7.29-150200.34.1 * libyui-qt-graph15-debuginfo-4.1.5-150300.3.12.4 * libyui-devel-4.1.5-150300.3.12.4 * libyui-qt-devel-4.1.5-150300.3.12.4 * libzypp-debuginfo-17.34.1-150200.106.2 * libyui-qt-pkg-devel-4.1.5-150300.3.12.5 * PackageKit-backend-zypp-1.1.13-150200.4.33.6 * libyui-debugsource-4.1.5-150300.3.12.4 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * zypper-log-1.14.73-150200.81.6 * PackageKit-branding-SLE-12.0-150200.9.4.5 * PackageKit-lang-1.1.13-150200.4.33.6 * zypper-needs-restarting-1.14.73-150200.81.6 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libyui-qt-debugsource-4.1.5-150300.3.12.4 * libyui-ncurses-debugsource-4.1.5-150300.3.12.4 * libyui-ncurses-pkg-debugsource-4.1.5-150300.3.12.5 * libyui-qt-pkg15-4.1.5-150300.3.12.5 * libyui-rest-api-debugsource-4.1.5-150300.3.12.4 * libzypp-17.34.1-150200.106.2 * libsolv-debugsource-0.7.29-150200.34.1 * libyui-ncurses-pkg15-debuginfo-4.1.5-150300.3.12.5 * zypper-1.14.73-150200.81.6 * libyui-ncurses-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libsolv-devel-debuginfo-0.7.29-150200.34.1 * libyui-ncurses-tools-4.1.5-150300.3.12.4 * libsolv-devel-0.7.29-150200.34.1 * libyui-ncurses15-debuginfo-4.1.5-150300.3.12.4 * PackageKit-devel-1.1.13-150200.4.33.6 * perl-solv-0.7.29-150200.34.1 * python3-solv-debuginfo-0.7.29-150200.34.1 * libsolv-tools-base-0.7.29-150200.34.1 * libyui-qt15-4.1.5-150300.3.12.4 * libyui15-4.1.5-150300.3.12.4 * libyui-ncurses-pkg15-4.1.5-150300.3.12.5 * libyui-rest-api-devel-4.1.5-150300.3.12.4 * libyui15-debuginfo-4.1.5-150300.3.12.4 * PackageKit-debuginfo-1.1.13-150200.4.33.6 * libyui-ncurses-rest-api-debugsource-4.1.5-150300.3.12.4 * yast2-pkg-bindings-debugsource-4.3.13-150300.3.10.11 * yast2-pkg-bindings-4.3.13-150300.3.10.11 * typelib-1_0-PackageKitGlib-1_0-1.1.13-150200.4.33.6 * libyui-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libyui-qt15-debuginfo-4.1.5-150300.3.12.4 * libyui-ncurses-pkg-devel-4.1.5-150300.3.12.5 * libpackagekit-glib2-18-1.1.13-150200.4.33.6 * libyui-ncurses-devel-4.1.5-150300.3.12.4 * libyui-qt-graph15-4.1.5-150300.3.12.4 * libsolv-tools-debuginfo-0.7.29-150200.34.1 * libyui-qt-graph-devel-4.1.5-150300.3.12.4 * libzypp-debugsource-17.34.1-150200.106.2 * libyui-qt-graph-debugsource-4.1.5-150300.3.12.4 * libyui-qt-rest-api-devel-4.1.5-150300.3.12.4 * ruby-solv-debuginfo-0.7.29-150200.34.1 * PackageKit-debugsource-1.1.13-150200.4.33.6 * libyui-rest-api15-4.1.5-150300.3.12.4 * libyui-ncurses-rest-api15-4.1.5-150300.3.12.4 * libyui-ncurses15-4.1.5-150300.3.12.4 * libyui-qt-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libsolv-debuginfo-0.7.29-150200.34.1 * yast2-pkg-bindings-debuginfo-4.3.13-150300.3.10.11 * libyui-ncurses-rest-api-devel-4.1.5-150300.3.12.4 * zypper-debuginfo-1.14.73-150200.81.6 * ruby-solv-0.7.29-150200.34.1 * zypper-debugsource-1.14.73-150200.81.6 * libyui-qt-rest-api-debugsource-4.1.5-150300.3.12.4 * libpackagekit-glib2-18-debuginfo-1.1.13-150200.4.33.6 * libpackagekit-glib2-devel-1.1.13-150200.4.33.6 * libyui-qt-pkg15-debuginfo-4.1.5-150300.3.12.5 * libyui-qt-rest-api15-4.1.5-150300.3.12.4 * PackageKit-backend-zypp-debuginfo-1.1.13-150200.4.33.6 * PackageKit-1.1.13-150200.4.33.6 * libsolv-tools-0.7.29-150200.34.1 * perl-solv-debuginfo-0.7.29-150200.34.1 * libyui-qt-pkg-debugsource-4.1.5-150300.3.12.5 * PackageKit-devel-debuginfo-1.1.13-150200.4.33.6 * libsolv-tools-base-debuginfo-0.7.29-150200.34.1 * libzypp-devel-17.34.1-150200.106.2 * python3-solv-0.7.29-150200.34.1 * libyui-qt-graph15-debuginfo-4.1.5-150300.3.12.4 * libyui-devel-4.1.5-150300.3.12.4 * libyui-qt-devel-4.1.5-150300.3.12.4 * libzypp-debuginfo-17.34.1-150200.106.2 * libyui-qt-pkg-devel-4.1.5-150300.3.12.5 * PackageKit-backend-zypp-1.1.13-150200.4.33.6 * libyui-debugsource-4.1.5-150300.3.12.4 * SUSE Enterprise Storage 7.1 (noarch) * zypper-log-1.14.73-150200.81.6 * PackageKit-branding-SLE-12.0-150200.9.4.5 * PackageKit-lang-1.1.13-150200.4.33.6 * zypper-needs-restarting-1.14.73-150200.81.6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libyui-qt-debugsource-4.1.5-150300.3.12.4 * libyui-ncurses-debugsource-4.1.5-150300.3.12.4 * libyui-ncurses-pkg-debugsource-4.1.5-150300.3.12.5 * libyui-qt-pkg15-4.1.5-150300.3.12.5 * libyui-rest-api-debugsource-4.1.5-150300.3.12.4 * libzypp-17.34.1-150200.106.2 * libsolv-debugsource-0.7.29-150200.34.1 * libyui-ncurses-pkg15-debuginfo-4.1.5-150300.3.12.5 * zypper-1.14.73-150200.81.6 * libyui-ncurses-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libsolv-devel-debuginfo-0.7.29-150200.34.1 * libyui-ncurses-tools-4.1.5-150300.3.12.4 * libsolv-devel-0.7.29-150200.34.1 * libyui-ncurses15-debuginfo-4.1.5-150300.3.12.4 * PackageKit-devel-1.1.13-150200.4.33.6 * perl-solv-0.7.29-150200.34.1 * python3-solv-debuginfo-0.7.29-150200.34.1 * libsolv-tools-base-0.7.29-150200.34.1 * libyui-qt15-4.1.5-150300.3.12.4 * libyui15-4.1.5-150300.3.12.4 * libyui-ncurses-pkg15-4.1.5-150300.3.12.5 * libyui-rest-api-devel-4.1.5-150300.3.12.4 * libyui15-debuginfo-4.1.5-150300.3.12.4 * PackageKit-debuginfo-1.1.13-150200.4.33.6 * libyui-ncurses-rest-api-debugsource-4.1.5-150300.3.12.4 * yast2-pkg-bindings-debugsource-4.3.13-150300.3.10.11 * yast2-pkg-bindings-4.3.13-150300.3.10.11 * typelib-1_0-PackageKitGlib-1_0-1.1.13-150200.4.33.6 * libyui-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libyui-qt15-debuginfo-4.1.5-150300.3.12.4 * libyui-ncurses-pkg-devel-4.1.5-150300.3.12.5 * libpackagekit-glib2-18-1.1.13-150200.4.33.6 * libyui-ncurses-devel-4.1.5-150300.3.12.4 * libyui-qt-graph15-4.1.5-150300.3.12.4 * libsolv-tools-debuginfo-0.7.29-150200.34.1 * libyui-qt-graph-devel-4.1.5-150300.3.12.4 * libzypp-debugsource-17.34.1-150200.106.2 * libyui-qt-graph-debugsource-4.1.5-150300.3.12.4 * libyui-qt-rest-api-devel-4.1.5-150300.3.12.4 * ruby-solv-debuginfo-0.7.29-150200.34.1 * PackageKit-debugsource-1.1.13-150200.4.33.6 * libyui-rest-api15-4.1.5-150300.3.12.4 * libyui-ncurses-rest-api15-4.1.5-150300.3.12.4 * libyui-ncurses15-4.1.5-150300.3.12.4 * libyui-qt-rest-api15-debuginfo-4.1.5-150300.3.12.4 * libsolv-debuginfo-0.7.29-150200.34.1 * yast2-pkg-bindings-debuginfo-4.3.13-150300.3.10.11 * libyui-ncurses-rest-api-devel-4.1.5-150300.3.12.4 * zypper-debuginfo-1.14.73-150200.81.6 * ruby-solv-0.7.29-150200.34.1 * zypper-debugsource-1.14.73-150200.81.6 * libyui-qt-rest-api-debugsource-4.1.5-150300.3.12.4 * libpackagekit-glib2-18-debuginfo-1.1.13-150200.4.33.6 * libpackagekit-glib2-devel-1.1.13-150200.4.33.6 * libyui-qt-pkg15-debuginfo-4.1.5-150300.3.12.5 * libyui-qt-rest-api15-4.1.5-150300.3.12.4 * PackageKit-backend-zypp-debuginfo-1.1.13-150200.4.33.6 * PackageKit-1.1.13-150200.4.33.6 * libsolv-tools-0.7.29-150200.34.1 * perl-solv-debuginfo-0.7.29-150200.34.1 * libyui-qt-pkg-debugsource-4.1.5-150300.3.12.5 * PackageKit-devel-debuginfo-1.1.13-150200.4.33.6 * libsolv-tools-base-debuginfo-0.7.29-150200.34.1 * libzypp-devel-17.34.1-150200.106.2 * python3-solv-0.7.29-150200.34.1 * libyui-qt-graph15-debuginfo-4.1.5-150300.3.12.4 * libyui-devel-4.1.5-150300.3.12.4 * libyui-qt-devel-4.1.5-150300.3.12.4 * libzypp-debuginfo-17.34.1-150200.106.2 * libyui-qt-pkg-devel-4.1.5-150300.3.12.5 * PackageKit-backend-zypp-1.1.13-150200.4.33.6 * libyui-debugsource-4.1.5-150300.3.12.4 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * zypper-log-1.14.73-150200.81.6 * PackageKit-branding-SLE-12.0-150200.9.4.5 * PackageKit-lang-1.1.13-150200.4.33.6 * zypper-needs-restarting-1.14.73-150200.81.6 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libsolv-tools-debuginfo-0.7.29-150200.34.1 * libzypp-debugsource-17.34.1-150200.106.2 * libzypp-17.34.1-150200.106.2 * libsolv-debugsource-0.7.29-150200.34.1 * libsolv-tools-0.7.29-150200.34.1 * zypper-debuginfo-1.14.73-150200.81.6 * zypper-1.14.73-150200.81.6 * libsolv-tools-base-debuginfo-0.7.29-150200.34.1 * libsolv-debuginfo-0.7.29-150200.34.1 * libzypp-debuginfo-17.34.1-150200.106.2 * zypper-debugsource-1.14.73-150200.81.6 * libsolv-tools-base-0.7.29-150200.34.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * zypper-needs-restarting-1.14.73-150200.81.6 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libsolv-tools-debuginfo-0.7.29-150200.34.1 * libzypp-debugsource-17.34.1-150200.106.2 * libzypp-17.34.1-150200.106.2 * libsolv-debugsource-0.7.29-150200.34.1 * libsolv-tools-0.7.29-150200.34.1 * zypper-debuginfo-1.14.73-150200.81.6 * zypper-1.14.73-150200.81.6 * libsolv-tools-base-debuginfo-0.7.29-150200.34.1 * libsolv-debuginfo-0.7.29-150200.34.1 * libzypp-debuginfo-17.34.1-150200.106.2 * zypper-debugsource-1.14.73-150200.81.6 * libsolv-tools-base-0.7.29-150200.34.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * zypper-needs-restarting-1.14.73-150200.81.6 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libsolv-tools-debuginfo-0.7.29-150200.34.1 * libzypp-debugsource-17.34.1-150200.106.2 * libzypp-17.34.1-150200.106.2 * libsolv-debugsource-0.7.29-150200.34.1 * libsolv-tools-0.7.29-150200.34.1 * zypper-debuginfo-1.14.73-150200.81.6 * zypper-1.14.73-150200.81.6 * libsolv-tools-base-debuginfo-0.7.29-150200.34.1 * libsolv-debuginfo-0.7.29-150200.34.1 * libzypp-debuginfo-17.34.1-150200.106.2 * zypper-debugsource-1.14.73-150200.81.6 * libsolv-tools-base-0.7.29-150200.34.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * zypper-needs-restarting-1.14.73-150200.81.6 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222086 * https://bugzilla.suse.com/show_bug.cgi?id=1223430 * https://bugzilla.suse.com/show_bug.cgi?id=1223766 * https://jira.suse.com/browse/PED-8153

1 0

openSUSE-SU-2024:0167-1: important: Security update for gdcm
by opensuse-security＠opensuse.org 18 Jun '24

18 Jun '24

openSUSE Security Update: Security update for gdcm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0167-1 Rating: important References: #1223398 Cross-References: CVE-2024-22373 CVSS scores: CVE-2024-22373 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gdcm fixes the following issues: - CVE-2024-22373: Fixed out-of-bounds write vulnerability in JPEG2000Codec::DecodeByStreamsCommon (boo#1223398). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-167=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): gdcm-3.0.24-bp155.2.4.1 gdcm-applications-3.0.24-bp155.2.4.1 gdcm-devel-3.0.24-bp155.2.4.1 gdcm-examples-3.0.24-bp155.2.4.1 libgdcm3_0-3.0.24-bp155.2.4.1 libsocketxx1_2-3.0.24-bp155.2.4.1 python3-gdcm-3.0.24-bp155.2.4.1 References: https://www.suse.com/security/cve/CVE-2024-22373.html https://bugzilla.suse.com/1223398

1 0

SUSE-RU-2024:2069-1: moderate: Recommended update for mksusecd
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Recommended update for mksusecd Announcement ID: SUSE-RU-2024:2069-1 Rating: moderate References: * bsc#1213185 * bsc#1213606 * bsc#1214789 * bsc#1218706 * bsc#1221603 * bsc#1226047 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that has six fixes can now be installed. ## Description: This update for mksusecd fixes the following issues: * Fix --no-joliet option and add warning about too long Joliet file names * Add more mkisofs log output in verbosity level 3 * Ensure mksusecd error code is preserved * Add info about Joliet file name limit to man page * Fix integrating software modules containing debuginfo packages (bsc#1226047) * Increase initrd xz compression level * Enforce de-duplication in mkisofs * Deal with systems where /tmp is a symlink (bsc#1221603) * Support usrmerged kmod package (bsc#1221603) * Handle compressed firmware files (bsc#1214789) * Allow also xz and zstd compression in repodata (bsc#1218706) * Allow --instsys option for Live media * Calculate EFI boot image size correctly * If initrd/kernel are in two different location on the medium, update in both locations * isohybrid: remove outdated 1024 cylinders warning * Default to GPT if source ISO uses it * Add --signature-file option and rewrite signature embedding * Fix --instsys option handling (bsc#1213606) * Add --rescue option to allow modifying the rescue system * Add --volume1 option to allow setting separate labels for both ISO file systems (bsc#1213185) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2069=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2069=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2069=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2069=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2069=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2069=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * mksusecd-debuginfo-2.18-150400.3.18.2 * mksusecd-debugsource-2.18-150400.3.18.2 * mksusecd-2.18-150400.3.18.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * mksusecd-debuginfo-2.18-150400.3.18.2 * mksusecd-debugsource-2.18-150400.3.18.2 * mksusecd-2.18-150400.3.18.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * mksusecd-debuginfo-2.18-150400.3.18.2 * mksusecd-debugsource-2.18-150400.3.18.2 * mksusecd-2.18-150400.3.18.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * mksusecd-debuginfo-2.18-150400.3.18.2 * mksusecd-debugsource-2.18-150400.3.18.2 * mksusecd-2.18-150400.3.18.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * mksusecd-debuginfo-2.18-150400.3.18.2 * mksusecd-debugsource-2.18-150400.3.18.2 * mksusecd-2.18-150400.3.18.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * mksusecd-debuginfo-2.18-150400.3.18.2 * mksusecd-debugsource-2.18-150400.3.18.2 * mksusecd-2.18-150400.3.18.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213185 * https://bugzilla.suse.com/show_bug.cgi?id=1213606 * https://bugzilla.suse.com/show_bug.cgi?id=1214789 * https://bugzilla.suse.com/show_bug.cgi?id=1218706 * https://bugzilla.suse.com/show_bug.cgi?id=1221603 * https://bugzilla.suse.com/show_bug.cgi?id=1226047

1 0

SUSE-RU-2024:2070-1: moderate: Recommended update for mksusecd
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Recommended update for mksusecd Announcement ID: SUSE-RU-2024:2070-1 Rating: moderate References: * bsc#1213185 * bsc#1213606 * bsc#1214789 * bsc#1218706 * bsc#1221603 * bsc#1226047 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has six fixes can now be installed. ## Description: This update for mksusecd fixes the following issues: * Fix --no-joliet option and add warning about too long Joliet file names * Add more mkisofs log output in verbosity level 3 * Ensure mksusecd error code is preserved * Add info about Joliet file name limit to man page * Fix integrating software modules containing debuginfo packages (bsc#1226047) * Increase initrd xz compression level * Enforce de-duplication in mkisofs * Deal with systems where /tmp is a symlink (bsc#1221603) * Support usrmerged kmod package (bsc#1221603) * Handle compressed firmware files (bsc#1214789) * Allow also xz and zstd compression in repodata (bsc#1218706) * Allow --instsys option for Live media * Calculate EFI boot image size correctly * If initrd/kernel are in two different location on the medium, update in both locations * isohybrid: remove outdated 1024 cylinders warning * Default to GPT if source ISO uses it * Add --signature-file option and rewrite signature embedding * Fix --instsys option handling (bsc#1213606) * Add --rescue option to allow modifying the rescue system * Add --volume1 option to allow setting separate labels for both ISO file systems (bsc#1213185) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2070=1 openSUSE-SLE-15.5-2024-2070=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2070=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * mksusecd-2.18-150500.3.3.1 * mksusecd-debuginfo-2.18-150500.3.3.1 * mksusecd-debugsource-2.18-150500.3.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * mksusecd-2.18-150500.3.3.1 * mksusecd-debuginfo-2.18-150500.3.3.1 * mksusecd-debugsource-2.18-150500.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213185 * https://bugzilla.suse.com/show_bug.cgi?id=1213606 * https://bugzilla.suse.com/show_bug.cgi?id=1214789 * https://bugzilla.suse.com/show_bug.cgi?id=1218706 * https://bugzilla.suse.com/show_bug.cgi?id=1221603 * https://bugzilla.suse.com/show_bug.cgi?id=1226047

1 0

SUSE-RU-2024:2071-1: moderate: Recommended update for mksusecd
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Recommended update for mksusecd Announcement ID: SUSE-RU-2024:2071-1 Rating: moderate References: * bsc#1213185 * bsc#1213606 * bsc#1214789 * bsc#1218706 * bsc#1221603 * bsc#1226047 Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has six fixes can now be installed. ## Description: This update for mksusecd fixes the following issues: * Fix --no-joliet option and add warning about too long Joliet file names * Add more mkisofs log output in verbosity level 3 * Ensure mksusecd error code is preserved * Add info about Joliet file name limit to man page * Fix integrating software modules containing debuginfo packages (bsc#1226047) * Increase initrd xz compression level * Enforce de-duplication in mkisofs * Deal with systems where /tmp is a symlink (bsc#1221603) * Support usrmerged kmod package (bsc#1221603) * Handle compressed firmware files (bsc#1214789) * Allow also xz and zstd compression in repodata (bsc#1218706) * Allow --instsys option for Live media * Calculate EFI boot image size correctly * If initrd/kernel are in two different location on the medium, update in both locations * isohybrid: remove outdated 1024 cylinders warning * Default to GPT if source ISO uses it * Add --signature-file option and rewrite signature embedding * Fix --instsys option handling (bsc#1213606) * Add --rescue option to allow modifying the rescue system * Add --volume1 option to allow setting separate labels for both ISO file systems (bsc#1213185) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2071=1 SUSE-2024-2071=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2071=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * mksusecd-debuginfo-2.18-150600.3.3.1 * mksusecd-debugsource-2.18-150600.3.3.1 * mksusecd-2.18-150600.3.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * mksusecd-debuginfo-2.18-150600.3.3.1 * mksusecd-debugsource-2.18-150600.3.3.1 * mksusecd-2.18-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213185 * https://bugzilla.suse.com/show_bug.cgi?id=1213606 * https://bugzilla.suse.com/show_bug.cgi?id=1214789 * https://bugzilla.suse.com/show_bug.cgi?id=1218706 * https://bugzilla.suse.com/show_bug.cgi?id=1221603 * https://bugzilla.suse.com/show_bug.cgi?id=1226047

1 0

SUSE-RU-2024:2072-1: moderate: Recommended update for mutter
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Recommended update for mutter Announcement ID: SUSE-RU-2024:2072-1 Rating: moderate References: * bsc#1223393 Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for mutter fixes the following issue: * With Qt 6.7 some apps cannot shown on launch, this fixes the initial suspended state to make those windows visible (bsc#1223393) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2072=1 openSUSE-SLE-15.6-2024-2072=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2072=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * mutter-devel-45.3-150600.5.6.2 * mutter-45.3-150600.5.6.2 * mutter-debuginfo-45.3-150600.5.6.2 * mutter-debugsource-45.3-150600.5.6.2 * openSUSE Leap 15.6 (noarch) * mutter-lang-45.3-150600.5.6.2 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * mutter-devel-45.3-150600.5.6.2 * mutter-45.3-150600.5.6.2 * mutter-debuginfo-45.3-150600.5.6.2 * mutter-debugsource-45.3-150600.5.6.2 * Desktop Applications Module 15-SP6 (noarch) * mutter-lang-45.3-150600.5.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223393

1 0

SUSE-RU-2024:2075-1: moderate: Recommended update for sudo
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Recommended update for sudo Announcement ID: SUSE-RU-2024:2075-1 Rating: moderate References: * bsc#1222104 * bsc#1226008 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed. ## Description: This update for sudo fixes the following issues: * Revert the "Match using canonicalized directories where possible." feature just for SLE-15 This causes a breaking change in behavior for some customers (bsc#1222104, bsc#1226008) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2075=1 openSUSE-SLE-15.6-2024-2075=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2075=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * sudo-policy-wheel-auth-self-1.9.15p5-150600.3.3.2 * sudo-devel-1.9.15p5-150600.3.3.2 * sudo-test-1.9.15p5-150600.3.3.2 * sudo-1.9.15p5-150600.3.3.2 * sudo-plugin-python-debuginfo-1.9.15p5-150600.3.3.2 * system-group-sudo-1.9.15p5-150600.3.3.2 * sudo-debuginfo-1.9.15p5-150600.3.3.2 * sudo-plugin-python-1.9.15p5-150600.3.3.2 * sudo-policy-sudo-auth-self-1.9.15p5-150600.3.3.2 * sudo-debugsource-1.9.15p5-150600.3.3.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * sudo-policy-wheel-auth-self-1.9.15p5-150600.3.3.2 * sudo-devel-1.9.15p5-150600.3.3.2 * sudo-1.9.15p5-150600.3.3.2 * sudo-plugin-python-debuginfo-1.9.15p5-150600.3.3.2 * system-group-sudo-1.9.15p5-150600.3.3.2 * sudo-debuginfo-1.9.15p5-150600.3.3.2 * sudo-plugin-python-1.9.15p5-150600.3.3.2 * sudo-policy-sudo-auth-self-1.9.15p5-150600.3.3.2 * sudo-debugsource-1.9.15p5-150600.3.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222104 * https://bugzilla.suse.com/show_bug.cgi?id=1226008

1 0

SUSE-SU-2024:1539-2: moderate: Security update for bouncycastle
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for bouncycastle Announcement ID: SUSE-SU-2024:1539-2 Rating: moderate References: * bsc#1223252 Cross-References: * CVE-2024-30171 CVSS scores: * CVE-2024-30171 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for bouncycastle fixes the following issues: Update to version 1.78.1, including fixes for: * CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-1539=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1539=1 ## Package List: * Development Tools Module 15-SP6 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * openSUSE Leap 15.6 (noarch) * bouncycastle-javadoc-1.78.1-150200.3.29.1 * bouncycastle-jmail-1.78.1-150200.3.29.1 * bouncycastle-tls-1.78.1-150200.3.29.1 * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-mail-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 ## References: * https://www.suse.com/security/cve/CVE-2024-30171.html * https://bugzilla.suse.com/show_bug.cgi?id=1223252

1 0

SUSE-SU-2024:1590-2: moderate: Security update for ghostscript
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for ghostscript Announcement ID: SUSE-SU-2024:1590-2 Rating: moderate References: * bsc#1223852 Cross-References: * CVE-2023-52722 CVSS scores: * CVE-2023-52722 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issues: * CVE-2023-52722: Do not allow eexec seeds other than the Type 1 standard while using SAFER mode (bsc#1223852). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1590=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1590=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ghostscript-debuginfo-9.52-150000.188.1 * ghostscript-x11-debuginfo-9.52-150000.188.1 * ghostscript-devel-9.52-150000.188.1 * ghostscript-9.52-150000.188.1 * ghostscript-debugsource-9.52-150000.188.1 * ghostscript-x11-9.52-150000.188.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * ghostscript-debuginfo-9.52-150000.188.1 * ghostscript-x11-debuginfo-9.52-150000.188.1 * ghostscript-devel-9.52-150000.188.1 * ghostscript-9.52-150000.188.1 * ghostscript-debugsource-9.52-150000.188.1 * ghostscript-x11-9.52-150000.188.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52722.html * https://bugzilla.suse.com/show_bug.cgi?id=1223852

1 0

SUSE-SU-2024:2056-1: important: Security update for libaom
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for libaom Announcement ID: SUSE-SU-2024:2056-1 Rating: important References: * bsc#1226020 Cross-References: * CVE-2024-5171 CVSS scores: * CVE-2024-5171 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for libaom fixes the following issues: * CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow (bsc#1226020). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2056=1 openSUSE-SLE-15.6-2024-2056=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2056=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libaom3-debuginfo-3.7.1-150600.3.3.1 * libaom3-3.7.1-150600.3.3.1 * aom-tools-debuginfo-3.7.1-150600.3.3.1 * libaom-debugsource-3.7.1-150600.3.3.1 * libaom-devel-3.7.1-150600.3.3.1 * aom-tools-3.7.1-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * libaom3-32bit-debuginfo-3.7.1-150600.3.3.1 * libaom3-32bit-3.7.1-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * libaom-devel-doc-3.7.1-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libaom3-64bit-3.7.1-150600.3.3.1 * libaom3-64bit-debuginfo-3.7.1-150600.3.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libaom3-debuginfo-3.7.1-150600.3.3.1 * libaom-debugsource-3.7.1-150600.3.3.1 * libaom3-3.7.1-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-5171.html * https://bugzilla.suse.com/show_bug.cgi?id=1226020

1 0

SUSE-SU-2024:2059-1: important: Security update for openssl-1_1
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2024:2059-1 Rating: important References: * bsc#1225551 Cross-References: * CVE-2024-4741 CVSS scores: * CVE-2024-4741 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * Legacy Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2059=1 openSUSE-SLE-15.6-2024-2059=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2059=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2059=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-2059=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libopenssl1_1-1.1.1w-150600.5.3.1 * libopenssl-1_1-devel-1.1.1w-150600.5.3.1 * openssl-1_1-debuginfo-1.1.1w-150600.5.3.1 * openssl-1_1-1.1.1w-150600.5.3.1 * openssl-1_1-debugsource-1.1.1w-150600.5.3.1 * libopenssl1_1-debuginfo-1.1.1w-150600.5.3.1 * openSUSE Leap 15.6 (x86_64) * libopenssl1_1-32bit-1.1.1w-150600.5.3.1 * libopenssl1_1-32bit-debuginfo-1.1.1w-150600.5.3.1 * libopenssl-1_1-devel-32bit-1.1.1w-150600.5.3.1 * openSUSE Leap 15.6 (noarch) * openssl-1_1-doc-1.1.1w-150600.5.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libopenssl1_1-64bit-1.1.1w-150600.5.3.1 * libopenssl1_1-64bit-debuginfo-1.1.1w-150600.5.3.1 * libopenssl-1_1-devel-64bit-1.1.1w-150600.5.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libopenssl1_1-1.1.1w-150600.5.3.1 * openssl-1_1-debugsource-1.1.1w-150600.5.3.1 * openssl-1_1-debuginfo-1.1.1w-150600.5.3.1 * libopenssl1_1-debuginfo-1.1.1w-150600.5.3.1 * Basesystem Module 15-SP6 (x86_64) * libopenssl1_1-32bit-1.1.1w-150600.5.3.1 * libopenssl1_1-32bit-debuginfo-1.1.1w-150600.5.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssl-1_1-debugsource-1.1.1w-150600.5.3.1 * openssl-1_1-debuginfo-1.1.1w-150600.5.3.1 * libopenssl-1_1-devel-1.1.1w-150600.5.3.1 * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssl-1_1-debugsource-1.1.1w-150600.5.3.1 * openssl-1_1-1.1.1w-150600.5.3.1 * openssl-1_1-debuginfo-1.1.1w-150600.5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4741.html * https://bugzilla.suse.com/show_bug.cgi?id=1225551

1 0

SUSE-SU-2024:2060-1: important: Security update for less
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for less Announcement ID: SUSE-SU-2024:2060-1 Rating: important References: * bsc#1222849 Cross-References: * CVE-2024-32487 CVSS scores: * CVE-2024-32487 ( SUSE ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for less fixes the following issues: * CVE-2024-32487: Fixed OS command injection via a newline character in the file name. (bsc#1222849) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2060=1 openSUSE-SLE-15.6-2024-2060=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2060=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * less-643-150600.3.3.1 * less-debugsource-643-150600.3.3.1 * less-debuginfo-643-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * less-643-150600.3.3.1 * less-debugsource-643-150600.3.3.1 * less-debuginfo-643-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-32487.html * https://bugzilla.suse.com/show_bug.cgi?id=1222849

1 0

SUSE-SU-2024:2062-1: important: Security update for booth
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for booth Announcement ID: SUSE-SU-2024:2062-1 Rating: important References: * bsc#1226032 Cross-References: * CVE-2024-3049 CVSS scores: * CVE-2024-3049 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-3049 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Availability Extension 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves one vulnerability can now be installed. ## Description: This update for booth fixes the following issues: * CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2062=1 * SUSE Linux Enterprise High Availability Extension 15 SP3 zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2024-2062=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * booth-debugsource-1.0-150300.18.6.1 * booth-debuginfo-1.0-150300.18.6.1 * booth-1.0-150300.18.6.1 * booth-test-1.0-150300.18.6.1 * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le s390x x86_64) * booth-debugsource-1.0-150300.18.6.1 * booth-debuginfo-1.0-150300.18.6.1 * booth-1.0-150300.18.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-3049.html * https://bugzilla.suse.com/show_bug.cgi?id=1226032

1 0

SUSE-SU-2024:2063-1: important: Security update for booth
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for booth Announcement ID: SUSE-SU-2024:2063-1 Rating: important References: * bsc#1226032 Cross-References: * CVE-2024-3049 CVSS scores: * CVE-2024-3049 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-3049 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for booth fixes the following issues: * CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2063=1 openSUSE-SLE-15.5-2024-2063=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-2063=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * booth-debuginfo-1.0+20220815.f40c2d5-150500.3.3.1 * booth-debugsource-1.0+20220815.f40c2d5-150500.3.3.1 * booth-1.0+20220815.f40c2d5-150500.3.3.1 * booth-test-1.0+20220815.f40c2d5-150500.3.3.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * booth-debuginfo-1.0+20220815.f40c2d5-150500.3.3.1 * booth-debugsource-1.0+20220815.f40c2d5-150500.3.3.1 * booth-1.0+20220815.f40c2d5-150500.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-3049.html * https://bugzilla.suse.com/show_bug.cgi?id=1226032

1 0

SUSE-SU-2024:2064-1: important: Security update for python-Authlib
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for python-Authlib Announcement ID: SUSE-SU-2024:2064-1 Rating: important References: * bsc#1226138 Cross-References: * CVE-2024-37568 CVSS scores: * CVE-2024-37568 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-37568 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for python-Authlib fixes the following issues: * Update to version 1.3.1 * CVE-2024-37568: Fixed algorithm confusion with asymmetric public keys. (bsc#1226138) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2064=1 openSUSE-SLE-15.6-2024-2064=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-2064=1 ## Package List: * openSUSE Leap 15.6 (noarch) * python311-Authlib-1.3.1-150600.3.3.1 * Python 3 Module 15-SP6 (noarch) * python311-Authlib-1.3.1-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-37568.html * https://bugzilla.suse.com/show_bug.cgi?id=1226138

1 0

SUSE-SU-2024:2065-1: important: Security update for webkit2gtk3
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for webkit2gtk3 Announcement ID: SUSE-SU-2024:2065-1 Rating: important References: * bsc#1222905 * bsc#1225071 Cross-References: * CVE-2024-23226 * CVE-2024-27834 CVSS scores: * CVE-2024-23226 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27834 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: * Update to version 2.44.2 * CVE-2024-27834: Fixed a vulnerability where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. (bsc#1225071) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2065=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2065=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2065=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-2065=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2065=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2065=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2065=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2065=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2065=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2065=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2065=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2065=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2065=1 ## Package List: * openSUSE Leap 15.4 (noarch) * WebKitGTK-4.0-lang-2.44.2-150400.4.83.2 * WebKitGTK-4.1-lang-2.44.2-150400.4.83.2 * WebKitGTK-6.0-lang-2.44.2-150400.4.83.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * webkit-jsc-4.1-debuginfo-2.44.2-150400.4.83.2 * webkitgtk-6_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_0-2.44.2-150400.4.83.2 * webkit2gtk3-minibrowser-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-debugsource-2.44.2-150400.4.83.2 * webkit2gtk3-debugsource-2.44.2-150400.4.83.2 * typelib-1_0-WebKitWebProcessExtension-6_0-2.44.2-150400.4.83.2 * webkit-jsc-6.0-2.44.2-150400.4.83.2 * webkit2gtk4-debugsource-2.44.2-150400.4.83.2 * webkit2gtk4-minibrowser-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_1-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150400.4.83.2 * typelib-1_0-WebKit-6_0-2.44.2-150400.4.83.2 * webkit-jsc-4-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-devel-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk4-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-minibrowser-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk4-minibrowser-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-6_0-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * webkit-jsc-4.1-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-minibrowser-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_1-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_1-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-minibrowser-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-2.44.2-150400.4.83.2 * webkitgtk-6_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit-jsc-4-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit-jsc-6.0-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-devel-2.44.2-150400.4.83.2 * openSUSE Leap 15.4 (x86_64) * libjavascriptcoregtk-4_0-18-32bit-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-32bit-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-32bit-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-32bit-2.44.2-150400.4.83.2 * openSUSE Leap 15.4 (aarch64_ilp32) * libwebkit2gtk-4_0-37-64bit-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-64bit-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-64bit-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-64bit-2.44.2-150400.4.83.2 * openSUSE Leap 15.5 (noarch) * WebKitGTK-4.0-lang-2.44.2-150400.4.83.2 * WebKitGTK-4.1-lang-2.44.2-150400.4.83.2 * WebKitGTK-6.0-lang-2.44.2-150400.4.83.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * webkit-jsc-4.1-debuginfo-2.44.2-150400.4.83.2 * webkitgtk-6_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150400.4.83.2 * webkit2gtk3-minibrowser-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-WebKitWebProcessExtension-6_0-2.44.2-150400.4.83.2 * webkit-jsc-6.0-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk3-debugsource-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-debugsource-2.44.2-150400.4.83.2 * webkit2gtk4-debugsource-2.44.2-150400.4.83.2 * webkit2gtk4-minibrowser-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_1-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150400.4.83.2 * typelib-1_0-WebKit-6_0-2.44.2-150400.4.83.2 * webkit-jsc-4-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk4-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-minibrowser-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk4-minibrowser-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-6_0-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * webkit-jsc-4.1-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-minibrowser-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_1-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_1-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-minibrowser-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-2.44.2-150400.4.83.2 * webkitgtk-6_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit-jsc-4-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit-jsc-6.0-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-devel-2.44.2-150400.4.83.2 * openSUSE Leap 15.5 (x86_64) * libjavascriptcoregtk-4_0-18-32bit-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-32bit-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-32bit-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-32bit-2.44.2-150400.4.83.2 * Basesystem Module 15-SP5 (noarch) * WebKitGTK-4.0-lang-2.44.2-150400.4.83.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libwebkit2gtk-4_0-37-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_0-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-debugsource-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150400.4.83.2 * Desktop Applications Module 15-SP5 (noarch) * WebKitGTK-4.1-lang-2.44.2-150400.4.83.2 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libwebkit2gtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_1-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-debugsource-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_1-2.44.2-150400.4.83.2 * webkit2gtk3-devel-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_1-2.44.2-150400.4.83.2 * Development Tools Module 15-SP5 (noarch) * WebKitGTK-6.0-lang-2.44.2-150400.4.83.2 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * webkitgtk-6_0-injected-bundles-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk4-debugsource-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.44.2-150400.4.83.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * WebKitGTK-4.0-lang-2.44.2-150400.4.83.2 * WebKitGTK-4.1-lang-2.44.2-150400.4.83.2 * WebKitGTK-6.0-lang-2.44.2-150400.4.83.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * webkitgtk-6_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-debugsource-2.44.2-150400.4.83.2 * webkit2gtk3-debugsource-2.44.2-150400.4.83.2 * webkit2gtk4-debugsource-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_1-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_1-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_1-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-devel-2.44.2-150400.4.83.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * WebKitGTK-4.0-lang-2.44.2-150400.4.83.2 * WebKitGTK-4.1-lang-2.44.2-150400.4.83.2 * WebKitGTK-6.0-lang-2.44.2-150400.4.83.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * webkitgtk-6_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-debugsource-2.44.2-150400.4.83.2 * webkit2gtk3-debugsource-2.44.2-150400.4.83.2 * webkit2gtk4-debugsource-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_1-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_1-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_1-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-devel-2.44.2-150400.4.83.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * WebKitGTK-4.0-lang-2.44.2-150400.4.83.2 * WebKitGTK-4.1-lang-2.44.2-150400.4.83.2 * WebKitGTK-6.0-lang-2.44.2-150400.4.83.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * webkitgtk-6_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-debugsource-2.44.2-150400.4.83.2 * webkit2gtk3-debugsource-2.44.2-150400.4.83.2 * webkit2gtk4-debugsource-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_1-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_1-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_1-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-devel-2.44.2-150400.4.83.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * WebKitGTK-4.0-lang-2.44.2-150400.4.83.2 * WebKitGTK-4.1-lang-2.44.2-150400.4.83.2 * WebKitGTK-6.0-lang-2.44.2-150400.4.83.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * webkitgtk-6_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-debugsource-2.44.2-150400.4.83.2 * webkit2gtk3-debugsource-2.44.2-150400.4.83.2 * webkit2gtk4-debugsource-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_1-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_1-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_1-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-devel-2.44.2-150400.4.83.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * WebKitGTK-4.0-lang-2.44.2-150400.4.83.2 * WebKitGTK-4.1-lang-2.44.2-150400.4.83.2 * WebKitGTK-6.0-lang-2.44.2-150400.4.83.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * webkitgtk-6_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150400.4.83.2 * libwebkitgtk-6_0-4-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk-4_1-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-debugsource-2.44.2-150400.4.83.2 * webkit2gtk3-debugsource-2.44.2-150400.4.83.2 * webkit2gtk4-debugsource-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_1-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_1-0-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.44.2-150400.4.83.2 * libjavascriptcoregtk-6_0-1-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_1-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_1-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-devel-2.44.2-150400.4.83.2 * SUSE Manager Proxy 4.3 (noarch) * WebKitGTK-4.0-lang-2.44.2-150400.4.83.2 * SUSE Manager Proxy 4.3 (x86_64) * libwebkit2gtk-4_0-37-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_0-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-debugsource-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150400.4.83.2 * SUSE Manager Retail Branch Server 4.3 (noarch) * WebKitGTK-4.0-lang-2.44.2-150400.4.83.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libwebkit2gtk-4_0-37-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_0-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-debugsource-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150400.4.83.2 * SUSE Manager Server 4.3 (noarch) * WebKitGTK-4.0-lang-2.44.2-150400.4.83.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libwebkit2gtk-4_0-37-2.44.2-150400.4.83.2 * typelib-1_0-JavaScriptCore-4_0-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2-4_0-2.44.2-150400.4.83.2 * typelib-1_0-WebKit2WebExtension-4_0-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-2.44.2-150400.4.83.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-debugsource-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-2.44.2-150400.4.83.2 * webkit2gtk3-soup2-devel-2.44.2-150400.4.83.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.44.2-150400.4.83.2 * libwebkit2gtk-4_0-37-debuginfo-2.44.2-150400.4.83.2 ## References: * https://www.suse.com/security/cve/CVE-2024-23226.html * https://www.suse.com/security/cve/CVE-2024-27834.html * https://bugzilla.suse.com/show_bug.cgi?id=1222905 * https://bugzilla.suse.com/show_bug.cgi?id=1225071

1 0

SUSE-SU-2024:2066-1: important: Security update for openssl-3
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for openssl-3 Announcement ID: SUSE-SU-2024:2066-1 Rating: important References: * bsc#1223428 * bsc#1224388 * bsc#1225291 * bsc#1225551 Cross-References: * CVE-2024-4603 * CVE-2024-4741 CVSS scores: * CVE-2024-4603 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-4741 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities and has two security fixes can now be installed. ## Description: This update for openssl-3 fixes the following issues: Security issues fixed: * CVE-2024-4603: Check DSA parameters for excessive sizes before validating (bsc#1224388) * CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551) Other issues fixed: * Enable livepatching support (bsc#1223428) * Fix HDKF key derivation (bsc#1225291, gh#openssl/openssl#23448, + gh#openssl/openssl#23456) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2066=1 openSUSE-SLE-15.6-2024-2066=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2066=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * openssl-3-debugsource-3.1.4-150600.5.7.1 * openssl-3-debuginfo-3.1.4-150600.5.7.1 * openssl-3-3.1.4-150600.5.7.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.7.1 * libopenssl3-3.1.4-150600.5.7.1 * libopenssl-3-fips-provider-3.1.4-150600.5.7.1 * libopenssl-3-devel-3.1.4-150600.5.7.1 * libopenssl3-debuginfo-3.1.4-150600.5.7.1 * openSUSE Leap 15.6 (x86_64) * libopenssl-3-devel-32bit-3.1.4-150600.5.7.1 * libopenssl-3-fips-provider-32bit-3.1.4-150600.5.7.1 * libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.7.1 * libopenssl3-32bit-debuginfo-3.1.4-150600.5.7.1 * libopenssl3-32bit-3.1.4-150600.5.7.1 * openSUSE Leap 15.6 (noarch) * openssl-3-doc-3.1.4-150600.5.7.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libopenssl3-64bit-debuginfo-3.1.4-150600.5.7.1 * libopenssl-3-fips-provider-64bit-debuginfo-3.1.4-150600.5.7.1 * libopenssl-3-devel-64bit-3.1.4-150600.5.7.1 * libopenssl3-64bit-3.1.4-150600.5.7.1 * libopenssl-3-fips-provider-64bit-3.1.4-150600.5.7.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssl-3-debugsource-3.1.4-150600.5.7.1 * openssl-3-debuginfo-3.1.4-150600.5.7.1 * openssl-3-3.1.4-150600.5.7.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.7.1 * libopenssl3-3.1.4-150600.5.7.1 * libopenssl-3-fips-provider-3.1.4-150600.5.7.1 * libopenssl-3-devel-3.1.4-150600.5.7.1 * libopenssl3-debuginfo-3.1.4-150600.5.7.1 * Basesystem Module 15-SP6 (x86_64) * libopenssl3-32bit-debuginfo-3.1.4-150600.5.7.1 * libopenssl-3-fips-provider-32bit-3.1.4-150600.5.7.1 * libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.7.1 * libopenssl3-32bit-3.1.4-150600.5.7.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4603.html * https://www.suse.com/security/cve/CVE-2024-4741.html * https://bugzilla.suse.com/show_bug.cgi?id=1223428 * https://bugzilla.suse.com/show_bug.cgi?id=1224388 * https://bugzilla.suse.com/show_bug.cgi?id=1225291 * https://bugzilla.suse.com/show_bug.cgi?id=1225551

1 0

SUSE-SU-2024:2067-1: important: Security update for xdg-desktop-portal
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for xdg-desktop-portal Announcement ID: SUSE-SU-2024:2067-1 Rating: important References: * bsc#1223110 Cross-References: * CVE-2024-32462 CVSS scores: * CVE-2024-32462 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for xdg-desktop-portal fixes the following issues: * CVE-2024-32462: Fix arbitrary code execution outside bwrap sandbox by checking that the first commandline item doesn't start with whitespaces or a hyphen. (bsc#1223110) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2067=1 openSUSE-SLE-15.6-2024-2067=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2067=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * xdg-desktop-portal-1.18.2-150600.4.3.1 * xdg-desktop-portal-devel-1.18.2-150600.4.3.1 * xdg-desktop-portal-debugsource-1.18.2-150600.4.3.1 * xdg-desktop-portal-debuginfo-1.18.2-150600.4.3.1 * openSUSE Leap 15.6 (noarch) * xdg-desktop-portal-lang-1.18.2-150600.4.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * xdg-desktop-portal-1.18.2-150600.4.3.1 * xdg-desktop-portal-devel-1.18.2-150600.4.3.1 * xdg-desktop-portal-debugsource-1.18.2-150600.4.3.1 * xdg-desktop-portal-debuginfo-1.18.2-150600.4.3.1 * Desktop Applications Module 15-SP6 (noarch) * xdg-desktop-portal-lang-1.18.2-150600.4.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-32462.html * https://bugzilla.suse.com/show_bug.cgi?id=1223110

1 0

SUSE-SU-2024:2050-1: important: Security update for podman
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for podman Announcement ID: SUSE-SU-2024:2050-1 Rating: important References: * bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786 * CVE-2024-3727 CVSS scores: * CVE-2024-3727 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for podman fixes the following issues: * Update to version 4.9.5 * CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122) * CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2050=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2050=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2050=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2050=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2050=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-2050=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2050=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2050=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * podman-4.9.5-150300.9.31.1 * podmansh-4.9.5-150300.9.31.1 * podman-debuginfo-4.9.5-150300.9.31.1 * podman-remote-debuginfo-4.9.5-150300.9.31.1 * podman-remote-4.9.5-150300.9.31.1 * openSUSE Leap 15.3 (noarch) * podman-docker-4.9.5-150300.9.31.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * podman-4.9.5-150300.9.31.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * podman-4.9.5-150300.9.31.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * podman-4.9.5-150300.9.31.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * podman-4.9.5-150300.9.31.1 * podman-debuginfo-4.9.5-150300.9.31.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * podman-4.9.5-150300.9.31.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * podman-4.9.5-150300.9.31.1 * podman-debuginfo-4.9.5-150300.9.31.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * podman-4.9.5-150300.9.31.1 * podman-debuginfo-4.9.5-150300.9.31.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24786.html * https://www.suse.com/security/cve/CVE-2024-3727.html * https://bugzilla.suse.com/show_bug.cgi?id=1224122 * https://bugzilla.suse.com/show_bug.cgi?id=1226136

1 0

SUSE-SU-2024:2051-1: important: Security update for openssl-1_1
by OPENSUSE-UPDATES 18 Jun '24

18 Jun '24

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2024:2051-1 Rating: important References: * bsc#1225551 Cross-References: * CVE-2024-4741 CVSS scores: * CVE-2024-4741 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2051=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2051=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2051=1 openSUSE-SLE-15.5-2024-2051=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libopenssl-1_1-devel-1.1.1l-150500.17.31.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.31.1 * openssl-1_1-debugsource-1.1.1l-150500.17.31.1 * libopenssl1_1-1.1.1l-150500.17.31.1 * libopenssl1_1-hmac-1.1.1l-150500.17.31.1 * openssl-1_1-1.1.1l-150500.17.31.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.31.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libopenssl-1_1-devel-1.1.1l-150500.17.31.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.31.1 * openssl-1_1-debugsource-1.1.1l-150500.17.31.1 * libopenssl1_1-1.1.1l-150500.17.31.1 * libopenssl1_1-hmac-1.1.1l-150500.17.31.1 * openssl-1_1-1.1.1l-150500.17.31.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.31.1 * Basesystem Module 15-SP5 (x86_64) * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.31.1 * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.31.1 * libopenssl1_1-32bit-1.1.1l-150500.17.31.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libopenssl-1_1-devel-1.1.1l-150500.17.31.1 * libopenssl1_1-debuginfo-1.1.1l-150500.17.31.1 * openssl-1_1-debugsource-1.1.1l-150500.17.31.1 * libopenssl1_1-1.1.1l-150500.17.31.1 * libopenssl1_1-hmac-1.1.1l-150500.17.31.1 * openssl-1_1-1.1.1l-150500.17.31.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.31.1 * openSUSE Leap 15.5 (x86_64) * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.31.1 * libopenssl-1_1-devel-32bit-1.1.1l-150500.17.31.1 * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.31.1 * libopenssl1_1-32bit-1.1.1l-150500.17.31.1 * openSUSE Leap 15.5 (noarch) * openssl-1_1-doc-1.1.1l-150500.17.31.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl1_1-hmac-64bit-1.1.1l-150500.17.31.1 * libopenssl1_1-64bit-debuginfo-1.1.1l-150500.17.31.1 * libopenssl-1_1-devel-64bit-1.1.1l-150500.17.31.1 * libopenssl1_1-64bit-1.1.1l-150500.17.31.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4741.html * https://bugzilla.suse.com/show_bug.cgi?id=1225551

1 0

openSUSE-RU-2024:0165-1: moderate: Recommended update for vlc
by maintenance＠opensuse.org 17 Jun '24

17 Jun '24

openSUSE Recommended Update: Recommended update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0165-1 Rating: moderate References: #1219494 #1223909 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for vlc fixes the following issues: Update to version 3.0.21: + Decoders: * Improve Opus ambisonic support * Fix some ASS subtitle rendering issues * Fix Opus in MP4 behaviour * Fix VAAPI hw decoding with some drivers + Input: * Add support for HTTP content range handling according to RFC 9110 * Fix some HLS Adaptive Streaming not working in audio-only mode + Video Output: * Super Resolution scaling with AMD GPUs * The D3D11 HDR option can also turn on/off HDR for all sources regardless of the display * Improve subtitles rendering on Apple platforms of notably Asian languages by correcting font fallback lookups + Video Filter: * New AMD VQ Enhancer filter * Add D3D11 option to use NVIDIA TrueHDR to generate HDR from SDR sources + Audio Output: * Fix regression on macOS causing crashes when using audio devices with more than 9 channels + Services Discovery: * Fix exposed UPnP directory URL schemes to be compliant with RFC 3986 + libVLC: * the HWND passed to libvlc_media_player_set_hwnd must have the WS_CLIPCHILDREN style set. * Fix crashes when using caopengllayer + Misc: * Fix various warnings, leaks and potential crashes * Fix security integer overflow in MMS module Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-165=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): libvlc5-3.0.21-bp155.2.6.1 libvlccore9-3.0.21-bp155.2.6.1 vlc-3.0.21-bp155.2.6.1 vlc-codec-fluidsynth-3.0.21-bp155.2.6.1 vlc-codec-gstreamer-3.0.21-bp155.2.6.1 vlc-devel-3.0.21-bp155.2.6.1 vlc-jack-3.0.21-bp155.2.6.1 vlc-noX-3.0.21-bp155.2.6.1 vlc-opencv-3.0.21-bp155.2.6.1 vlc-qt-3.0.21-bp155.2.6.1 vlc-vdpau-3.0.21-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): vlc-lang-3.0.21-bp155.2.6.1 References: https://bugzilla.suse.com/1219494 https://bugzilla.suse.com/1223909

1 0

SUSE-RU-2024:2046-1: moderate: Recommended update for php8
by OPENSUSE-UPDATES 17 Jun '24

17 Jun '24

# Recommended update for php8 Announcement ID: SUSE-RU-2024:2046-1 Rating: moderate References: * bsc#1211301 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP6 An update that has one fix can now be installed. ## Description: This update for php8 fixes the following issues: * version update and bug fix release * Use the system default cipher list instead of hardcoded values by using crypto-policies (bsc#1211301) * modified patches ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2046=1 openSUSE-SLE-15.6-2024-2046=1 * Web and Scripting Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP6-2024-2046=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * php8-exif-8.2.20-150600.3.3.1 * php8-mysql-debuginfo-8.2.20-150600.3.3.1 * php8-ctype-8.2.20-150600.3.3.1 * php8-gettext-8.2.20-150600.3.3.1 * apache2-mod_php8-debugsource-8.2.20-150600.3.3.1 * php8-exif-debuginfo-8.2.20-150600.3.3.1 * php8-embed-debuginfo-8.2.20-150600.3.3.1 * php8-pcntl-debuginfo-8.2.20-150600.3.3.1 * php8-calendar-debuginfo-8.2.20-150600.3.3.1 * php8-fpm-8.2.20-150600.3.3.1 * php8-ffi-8.2.20-150600.3.3.1 * php8-shmop-debuginfo-8.2.20-150600.3.3.1 * php8-soap-debuginfo-8.2.20-150600.3.3.1 * php8-snmp-debuginfo-8.2.20-150600.3.3.1 * php8-tokenizer-debuginfo-8.2.20-150600.3.3.1 * apache2-mod_php8-8.2.20-150600.3.3.1 * php8-cli-debuginfo-8.2.20-150600.3.3.1 * php8-fastcgi-8.2.20-150600.3.3.1 * php8-ffi-debuginfo-8.2.20-150600.3.3.1 * php8-ctype-debuginfo-8.2.20-150600.3.3.1 * php8-openssl-debuginfo-8.2.20-150600.3.3.1 * php8-readline-debuginfo-8.2.20-150600.3.3.1 * php8-bz2-8.2.20-150600.3.3.1 * php8-odbc-8.2.20-150600.3.3.1 * php8-sysvsem-8.2.20-150600.3.3.1 * php8-calendar-8.2.20-150600.3.3.1 * php8-sysvmsg-debuginfo-8.2.20-150600.3.3.1 * php8-sodium-8.2.20-150600.3.3.1 * php8-xsl-8.2.20-150600.3.3.1 * php8-dom-8.2.20-150600.3.3.1 * php8-pdo-8.2.20-150600.3.3.1 * php8-sysvmsg-8.2.20-150600.3.3.1 * php8-tokenizer-8.2.20-150600.3.3.1 * php8-enchant-8.2.20-150600.3.3.1 * php8-pcntl-8.2.20-150600.3.3.1 * php8-opcache-8.2.20-150600.3.3.1 * php8-cli-8.2.20-150600.3.3.1 * php8-iconv-debuginfo-8.2.20-150600.3.3.1 * php8-fastcgi-debuginfo-8.2.20-150600.3.3.1 * php8-dba-debuginfo-8.2.20-150600.3.3.1 * php8-tidy-8.2.20-150600.3.3.1 * php8-readline-8.2.20-150600.3.3.1 * php8-curl-debuginfo-8.2.20-150600.3.3.1 * php8-fpm-debugsource-8.2.20-150600.3.3.1 * php8-embed-debugsource-8.2.20-150600.3.3.1 * php8-zlib-debuginfo-8.2.20-150600.3.3.1 * php8-zlib-8.2.20-150600.3.3.1 * php8-devel-8.2.20-150600.3.3.1 * php8-odbc-debuginfo-8.2.20-150600.3.3.1 * php8-enchant-debuginfo-8.2.20-150600.3.3.1 * php8-sysvshm-debuginfo-8.2.20-150600.3.3.1 * php8-gettext-debuginfo-8.2.20-150600.3.3.1 * php8-bcmath-debuginfo-8.2.20-150600.3.3.1 * php8-fileinfo-debuginfo-8.2.20-150600.3.3.1 * php8-gmp-8.2.20-150600.3.3.1 * php8-shmop-8.2.20-150600.3.3.1 * php8-gd-debuginfo-8.2.20-150600.3.3.1 * php8-bcmath-8.2.20-150600.3.3.1 * php8-fastcgi-debugsource-8.2.20-150600.3.3.1 * php8-pdo-debuginfo-8.2.20-150600.3.3.1 * php8-debugsource-8.2.20-150600.3.3.1 * php8-ftp-debuginfo-8.2.20-150600.3.3.1 * php8-fileinfo-8.2.20-150600.3.3.1 * php8-ftp-8.2.20-150600.3.3.1 * php8-phar-8.2.20-150600.3.3.1 * php8-posix-8.2.20-150600.3.3.1 * php8-openssl-8.2.20-150600.3.3.1 * php8-posix-debuginfo-8.2.20-150600.3.3.1 * php8-pgsql-debuginfo-8.2.20-150600.3.3.1 * php8-zip-8.2.20-150600.3.3.1 * php8-debuginfo-8.2.20-150600.3.3.1 * php8-phar-debuginfo-8.2.20-150600.3.3.1 * php8-curl-8.2.20-150600.3.3.1 * php8-xmlreader-debuginfo-8.2.20-150600.3.3.1 * php8-snmp-8.2.20-150600.3.3.1 * php8-opcache-debuginfo-8.2.20-150600.3.3.1 * php8-dom-debuginfo-8.2.20-150600.3.3.1 * php8-sysvsem-debuginfo-8.2.20-150600.3.3.1 * php8-zip-debuginfo-8.2.20-150600.3.3.1 * php8-soap-8.2.20-150600.3.3.1 * php8-test-8.2.20-150600.3.3.1 * php8-embed-8.2.20-150600.3.3.1 * php8-sockets-debuginfo-8.2.20-150600.3.3.1 * php8-gmp-debuginfo-8.2.20-150600.3.3.1 * php8-sodium-debuginfo-8.2.20-150600.3.3.1 * php8-sqlite-8.2.20-150600.3.3.1 * php8-intl-8.2.20-150600.3.3.1 * php8-pgsql-8.2.20-150600.3.3.1 * php8-bz2-debuginfo-8.2.20-150600.3.3.1 * php8-ldap-8.2.20-150600.3.3.1 * php8-xmlwriter-debuginfo-8.2.20-150600.3.3.1 * php8-gd-8.2.20-150600.3.3.1 * php8-sockets-8.2.20-150600.3.3.1 * apache2-mod_php8-debuginfo-8.2.20-150600.3.3.1 * php8-sqlite-debuginfo-8.2.20-150600.3.3.1 * php8-dba-8.2.20-150600.3.3.1 * php8-tidy-debuginfo-8.2.20-150600.3.3.1 * php8-xmlwriter-8.2.20-150600.3.3.1 * php8-xmlreader-8.2.20-150600.3.3.1 * php8-iconv-8.2.20-150600.3.3.1 * php8-mbstring-8.2.20-150600.3.3.1 * php8-mbstring-debuginfo-8.2.20-150600.3.3.1 * php8-mysql-8.2.20-150600.3.3.1 * php8-intl-debuginfo-8.2.20-150600.3.3.1 * php8-sysvshm-8.2.20-150600.3.3.1 * php8-ldap-debuginfo-8.2.20-150600.3.3.1 * php8-xsl-debuginfo-8.2.20-150600.3.3.1 * php8-8.2.20-150600.3.3.1 * php8-fpm-debuginfo-8.2.20-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * php8-fpm-apache-8.2.20-150600.3.3.1 * Web and Scripting Module 15-SP6 (aarch64 ppc64le s390x x86_64) * php8-exif-8.2.20-150600.3.3.1 * php8-mysql-debuginfo-8.2.20-150600.3.3.1 * php8-ctype-8.2.20-150600.3.3.1 * php8-gettext-8.2.20-150600.3.3.1 * apache2-mod_php8-debugsource-8.2.20-150600.3.3.1 * php8-exif-debuginfo-8.2.20-150600.3.3.1 * php8-embed-debuginfo-8.2.20-150600.3.3.1 * php8-pcntl-debuginfo-8.2.20-150600.3.3.1 * php8-calendar-debuginfo-8.2.20-150600.3.3.1 * php8-fpm-8.2.20-150600.3.3.1 * php8-shmop-debuginfo-8.2.20-150600.3.3.1 * php8-soap-debuginfo-8.2.20-150600.3.3.1 * php8-snmp-debuginfo-8.2.20-150600.3.3.1 * php8-tokenizer-debuginfo-8.2.20-150600.3.3.1 * apache2-mod_php8-8.2.20-150600.3.3.1 * php8-cli-debuginfo-8.2.20-150600.3.3.1 * php8-fastcgi-8.2.20-150600.3.3.1 * php8-ctype-debuginfo-8.2.20-150600.3.3.1 * php8-openssl-debuginfo-8.2.20-150600.3.3.1 * php8-readline-debuginfo-8.2.20-150600.3.3.1 * php8-bz2-8.2.20-150600.3.3.1 * php8-odbc-8.2.20-150600.3.3.1 * php8-sysvsem-8.2.20-150600.3.3.1 * php8-calendar-8.2.20-150600.3.3.1 * php8-sysvmsg-debuginfo-8.2.20-150600.3.3.1 * php8-sodium-8.2.20-150600.3.3.1 * php8-xsl-8.2.20-150600.3.3.1 * php8-dom-8.2.20-150600.3.3.1 * php8-pdo-8.2.20-150600.3.3.1 * php8-sysvmsg-8.2.20-150600.3.3.1 * php8-tokenizer-8.2.20-150600.3.3.1 * php8-enchant-8.2.20-150600.3.3.1 * php8-pcntl-8.2.20-150600.3.3.1 * php8-opcache-8.2.20-150600.3.3.1 * php8-cli-8.2.20-150600.3.3.1 * php8-fastcgi-debuginfo-8.2.20-150600.3.3.1 * php8-iconv-debuginfo-8.2.20-150600.3.3.1 * php8-dba-debuginfo-8.2.20-150600.3.3.1 * php8-tidy-8.2.20-150600.3.3.1 * php8-readline-8.2.20-150600.3.3.1 * php8-curl-debuginfo-8.2.20-150600.3.3.1 * php8-fpm-debugsource-8.2.20-150600.3.3.1 * php8-embed-debugsource-8.2.20-150600.3.3.1 * php8-zlib-debuginfo-8.2.20-150600.3.3.1 * php8-zlib-8.2.20-150600.3.3.1 * php8-devel-8.2.20-150600.3.3.1 * php8-odbc-debuginfo-8.2.20-150600.3.3.1 * php8-enchant-debuginfo-8.2.20-150600.3.3.1 * php8-sysvshm-debuginfo-8.2.20-150600.3.3.1 * php8-gettext-debuginfo-8.2.20-150600.3.3.1 * php8-bcmath-debuginfo-8.2.20-150600.3.3.1 * php8-fileinfo-debuginfo-8.2.20-150600.3.3.1 * php8-gmp-8.2.20-150600.3.3.1 * php8-shmop-8.2.20-150600.3.3.1 * php8-gd-debuginfo-8.2.20-150600.3.3.1 * php8-bcmath-8.2.20-150600.3.3.1 * php8-fastcgi-debugsource-8.2.20-150600.3.3.1 * php8-pdo-debuginfo-8.2.20-150600.3.3.1 * php8-debugsource-8.2.20-150600.3.3.1 * php8-ftp-debuginfo-8.2.20-150600.3.3.1 * php8-fileinfo-8.2.20-150600.3.3.1 * php8-ftp-8.2.20-150600.3.3.1 * php8-phar-8.2.20-150600.3.3.1 * php8-posix-8.2.20-150600.3.3.1 * php8-openssl-8.2.20-150600.3.3.1 * php8-posix-debuginfo-8.2.20-150600.3.3.1 * php8-pgsql-debuginfo-8.2.20-150600.3.3.1 * php8-zip-8.2.20-150600.3.3.1 * php8-debuginfo-8.2.20-150600.3.3.1 * php8-phar-debuginfo-8.2.20-150600.3.3.1 * php8-curl-8.2.20-150600.3.3.1 * php8-xmlreader-debuginfo-8.2.20-150600.3.3.1 * php8-snmp-8.2.20-150600.3.3.1 * php8-opcache-debuginfo-8.2.20-150600.3.3.1 * php8-dom-debuginfo-8.2.20-150600.3.3.1 * php8-sysvsem-debuginfo-8.2.20-150600.3.3.1 * php8-test-8.2.20-150600.3.3.1 * php8-soap-8.2.20-150600.3.3.1 * php8-zip-debuginfo-8.2.20-150600.3.3.1 * php8-embed-8.2.20-150600.3.3.1 * php8-sockets-debuginfo-8.2.20-150600.3.3.1 * php8-gmp-debuginfo-8.2.20-150600.3.3.1 * php8-sodium-debuginfo-8.2.20-150600.3.3.1 * php8-sqlite-8.2.20-150600.3.3.1 * php8-intl-8.2.20-150600.3.3.1 * php8-pgsql-8.2.20-150600.3.3.1 * php8-bz2-debuginfo-8.2.20-150600.3.3.1 * php8-ldap-8.2.20-150600.3.3.1 * php8-xmlwriter-debuginfo-8.2.20-150600.3.3.1 * php8-gd-8.2.20-150600.3.3.1 * php8-sockets-8.2.20-150600.3.3.1 * apache2-mod_php8-debuginfo-8.2.20-150600.3.3.1 * php8-sqlite-debuginfo-8.2.20-150600.3.3.1 * php8-dba-8.2.20-150600.3.3.1 * php8-tidy-debuginfo-8.2.20-150600.3.3.1 * php8-xmlwriter-8.2.20-150600.3.3.1 * php8-xmlreader-8.2.20-150600.3.3.1 * php8-iconv-8.2.20-150600.3.3.1 * php8-mbstring-8.2.20-150600.3.3.1 * php8-mbstring-debuginfo-8.2.20-150600.3.3.1 * php8-mysql-8.2.20-150600.3.3.1 * php8-intl-debuginfo-8.2.20-150600.3.3.1 * php8-sysvshm-8.2.20-150600.3.3.1 * php8-ldap-debuginfo-8.2.20-150600.3.3.1 * php8-xsl-debuginfo-8.2.20-150600.3.3.1 * php8-8.2.20-150600.3.3.1 * php8-fpm-debuginfo-8.2.20-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1211301

1 0

SUSE-RU-2024:2034-1: moderate: Recommended update for dpdk
by OPENSUSE-UPDATES 17 Jun '24

17 Jun '24

# Recommended update for dpdk Announcement ID: SUSE-RU-2024:2034-1 Rating: moderate References: * bsc#1219990 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for dpdk fixes the following issue: * Fix dpdk_nic_bind 'python': No such file or directory (bsc#1219990) * Add requires for 'which' as dpdk-tools has its dependency ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2034=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2034=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2034=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2034=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2034=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2034=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2034=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2034=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * libdpdk-20_0-debuginfo-19.11.10-150400.4.15.13 * dpdk-19.11.10-150400.4.15.13 * dpdk-devel-19.11.10-150400.4.15.13 * libdpdk-20_0-19.11.10-150400.4.15.13 * dpdk-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-examples-debuginfo-19.11.10-150400.4.15.13 * dpdk-examples-19.11.10-150400.4.15.13 * dpdk-debuginfo-19.11.10-150400.4.15.13 * dpdk-tools-19.11.10-150400.4.15.13 * dpdk-debugsource-19.11.10-150400.4.15.13 * dpdk-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-tools-debuginfo-19.11.10-150400.4.15.13 * dpdk-devel-debuginfo-19.11.10-150400.4.15.13 * openSUSE Leap 15.4 (noarch) * dpdk-thunderx-doc-19.11.10-150400.4.15.13 * dpdk-doc-19.11.10-150400.4.15.13 * openSUSE Leap 15.4 (aarch64) * dpdk-thunderx-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-thunderx-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-thunderx-devel-19.11.10-150400.4.15.13 * dpdk-thunderx-tools-19.11.10-150400.4.15.13 * dpdk-thunderx-devel-debuginfo-19.11.10-150400.4.15.13 * dpdk-thunderx-19.11.10-150400.4.15.13 * dpdk-thunderx-debugsource-19.11.10-150400.4.15.13 * dpdk-thunderx-examples-debuginfo-19.11.10-150400.4.15.13 * dpdk-thunderx-tools-debuginfo-19.11.10-150400.4.15.13 * dpdk-thunderx-debuginfo-19.11.10-150400.4.15.13 * dpdk-thunderx-examples-19.11.10-150400.4.15.13 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libdpdk-20_0-debuginfo-19.11.10-150400.4.15.13 * dpdk-19.11.10-150400.4.15.13 * dpdk-devel-19.11.10-150400.4.15.13 * libdpdk-20_0-19.11.10-150400.4.15.13 * dpdk-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-debuginfo-19.11.10-150400.4.15.13 * dpdk-tools-19.11.10-150400.4.15.13 * dpdk-debugsource-19.11.10-150400.4.15.13 * dpdk-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-tools-debuginfo-19.11.10-150400.4.15.13 * dpdk-devel-debuginfo-19.11.10-150400.4.15.13 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * dpdk-thunderx-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-thunderx-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-thunderx-devel-19.11.10-150400.4.15.13 * dpdk-thunderx-devel-debuginfo-19.11.10-150400.4.15.13 * dpdk-thunderx-19.11.10-150400.4.15.13 * dpdk-thunderx-debugsource-19.11.10-150400.4.15.13 * dpdk-thunderx-debuginfo-19.11.10-150400.4.15.13 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libdpdk-20_0-debuginfo-19.11.10-150400.4.15.13 * dpdk-19.11.10-150400.4.15.13 * dpdk-devel-19.11.10-150400.4.15.13 * libdpdk-20_0-19.11.10-150400.4.15.13 * dpdk-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-debuginfo-19.11.10-150400.4.15.13 * dpdk-tools-19.11.10-150400.4.15.13 * dpdk-debugsource-19.11.10-150400.4.15.13 * dpdk-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-tools-debuginfo-19.11.10-150400.4.15.13 * dpdk-devel-debuginfo-19.11.10-150400.4.15.13 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * dpdk-thunderx-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-thunderx-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-thunderx-devel-19.11.10-150400.4.15.13 * dpdk-thunderx-devel-debuginfo-19.11.10-150400.4.15.13 * dpdk-thunderx-19.11.10-150400.4.15.13 * dpdk-thunderx-debugsource-19.11.10-150400.4.15.13 * dpdk-thunderx-debuginfo-19.11.10-150400.4.15.13 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le x86_64) * libdpdk-20_0-debuginfo-19.11.10-150400.4.15.13 * dpdk-19.11.10-150400.4.15.13 * dpdk-devel-19.11.10-150400.4.15.13 * libdpdk-20_0-19.11.10-150400.4.15.13 * dpdk-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-debuginfo-19.11.10-150400.4.15.13 * dpdk-tools-19.11.10-150400.4.15.13 * dpdk-debugsource-19.11.10-150400.4.15.13 * dpdk-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-tools-debuginfo-19.11.10-150400.4.15.13 * dpdk-devel-debuginfo-19.11.10-150400.4.15.13 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64) * dpdk-thunderx-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-thunderx-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-thunderx-devel-19.11.10-150400.4.15.13 * dpdk-thunderx-devel-debuginfo-19.11.10-150400.4.15.13 * dpdk-thunderx-19.11.10-150400.4.15.13 * dpdk-thunderx-debugsource-19.11.10-150400.4.15.13 * dpdk-thunderx-debuginfo-19.11.10-150400.4.15.13 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libdpdk-20_0-debuginfo-19.11.10-150400.4.15.13 * dpdk-19.11.10-150400.4.15.13 * dpdk-devel-19.11.10-150400.4.15.13 * libdpdk-20_0-19.11.10-150400.4.15.13 * dpdk-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-debuginfo-19.11.10-150400.4.15.13 * dpdk-tools-19.11.10-150400.4.15.13 * dpdk-debugsource-19.11.10-150400.4.15.13 * dpdk-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-tools-debuginfo-19.11.10-150400.4.15.13 * dpdk-devel-debuginfo-19.11.10-150400.4.15.13 * SUSE Manager Proxy 4.3 (x86_64) * libdpdk-20_0-debuginfo-19.11.10-150400.4.15.13 * dpdk-19.11.10-150400.4.15.13 * dpdk-devel-19.11.10-150400.4.15.13 * libdpdk-20_0-19.11.10-150400.4.15.13 * dpdk-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-debuginfo-19.11.10-150400.4.15.13 * dpdk-tools-19.11.10-150400.4.15.13 * dpdk-debugsource-19.11.10-150400.4.15.13 * dpdk-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-tools-debuginfo-19.11.10-150400.4.15.13 * dpdk-devel-debuginfo-19.11.10-150400.4.15.13 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libdpdk-20_0-debuginfo-19.11.10-150400.4.15.13 * dpdk-19.11.10-150400.4.15.13 * dpdk-devel-19.11.10-150400.4.15.13 * libdpdk-20_0-19.11.10-150400.4.15.13 * dpdk-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-debuginfo-19.11.10-150400.4.15.13 * dpdk-tools-19.11.10-150400.4.15.13 * dpdk-debugsource-19.11.10-150400.4.15.13 * dpdk-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-tools-debuginfo-19.11.10-150400.4.15.13 * dpdk-devel-debuginfo-19.11.10-150400.4.15.13 * SUSE Manager Server 4.3 (ppc64le x86_64) * libdpdk-20_0-debuginfo-19.11.10-150400.4.15.13 * dpdk-19.11.10-150400.4.15.13 * dpdk-devel-19.11.10-150400.4.15.13 * libdpdk-20_0-19.11.10-150400.4.15.13 * dpdk-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-debuginfo-19.11.10-150400.4.15.13 * dpdk-tools-19.11.10-150400.4.15.13 * dpdk-debugsource-19.11.10-150400.4.15.13 * dpdk-kmp-default-19.11.10_k5.14.21_150400.24.119-150400.4.15.13 * dpdk-tools-debuginfo-19.11.10-150400.4.15.13 * dpdk-devel-debuginfo-19.11.10-150400.4.15.13 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219990

1 0

SUSE-SU-2024:2038-1: important: Security update for php8
by OPENSUSE-UPDATES 17 Jun '24

17 Jun '24

# Security update for php8 Announcement ID: SUSE-SU-2024:2038-1 Rating: important References: * bsc#1226073 Cross-References: * CVE-2024-5458 CVSS scores: * CVE-2024-5458 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2024-5458 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * Legacy Module 15-SP5 * Legacy Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2024-5458: Fixed an issue that allows to bypass filters in filter_var FILTER_VALIDATE_URL. (bsc#1226073) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-2038=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-2038=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2038=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2038=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2038=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2038=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2038=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2038=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2038=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2038=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2038=1 ## Package List: * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * php7-intl-debuginfo-7.4.33-150400.4.37.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.37.1 * php7-pdo-7.4.33-150400.4.37.1 * php7-zlib-7.4.33-150400.4.37.1 * php7-json-7.4.33-150400.4.37.1 * php7-tokenizer-7.4.33-150400.4.37.1 * php7-mbstring-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-debuginfo-7.4.33-150400.4.37.1 * php7-gmp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-7.4.33-150400.4.37.1 * php7-sodium-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.37.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.37.1 * php7-curl-7.4.33-150400.4.37.1 * php7-mysql-debuginfo-7.4.33-150400.4.37.1 * php7-7.4.33-150400.4.37.1 * php7-gettext-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-7.4.33-150400.4.37.1 * php7-zip-debuginfo-7.4.33-150400.4.37.1 * php7-debugsource-7.4.33-150400.4.37.1 * php7-fpm-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-7.4.33-150400.4.37.1 * php7-iconv-7.4.33-150400.4.37.1 * php7-openssl-7.4.33-150400.4.37.1 * php7-sqlite-7.4.33-150400.4.37.1 * php7-gd-7.4.33-150400.4.37.1 * php7-exif-debuginfo-7.4.33-150400.4.37.1 * php7-json-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-7.4.33-150400.4.37.1 * php7-readline-debuginfo-7.4.33-150400.4.37.1 * php7-cli-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-7.4.33-150400.4.37.1 * php7-sockets-7.4.33-150400.4.37.1 * php7-shmop-debuginfo-7.4.33-150400.4.37.1 * php7-zip-7.4.33-150400.4.37.1 * php7-dba-7.4.33-150400.4.37.1 * php7-pcntl-debuginfo-7.4.33-150400.4.37.1 * php7-tidy-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-7.4.33-150400.4.37.1 * apache2-mod_php7-7.4.33-150400.4.37.1 * php7-shmop-7.4.33-150400.4.37.1 * php7-sockets-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-debuginfo-7.4.33-150400.4.37.1 * php7-cli-7.4.33-150400.4.37.1 * php7-soap-7.4.33-150400.4.37.1 * php7-sodium-7.4.33-150400.4.37.1 * php7-fpm-debugsource-7.4.33-150400.4.37.1 * php7-ldap-debuginfo-7.4.33-150400.4.37.1 * php7-mysql-7.4.33-150400.4.37.1 * php7-xmlreader-7.4.33-150400.4.37.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-7.4.33-150400.4.37.1 * php7-sysvmsg-7.4.33-150400.4.37.1 * php7-fileinfo-7.4.33-150400.4.37.1 * php7-pcntl-7.4.33-150400.4.37.1 * php7-bz2-7.4.33-150400.4.37.1 * php7-gd-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-7.4.33-150400.4.37.1 * php7-fastcgi-debugsource-7.4.33-150400.4.37.1 * php7-ldap-7.4.33-150400.4.37.1 * php7-pdo-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-7.4.33-150400.4.37.1 * php7-mbstring-7.4.33-150400.4.37.1 * php7-pgsql-debuginfo-7.4.33-150400.4.37.1 * php7-bz2-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.37.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-7.4.33-150400.4.37.1 * php7-phar-7.4.33-150400.4.37.1 * php7-posix-debuginfo-7.4.33-150400.4.37.1 * php7-phar-debuginfo-7.4.33-150400.4.37.1 * php7-curl-debuginfo-7.4.33-150400.4.37.1 * php7-gettext-7.4.33-150400.4.37.1 * php7-ftp-7.4.33-150400.4.37.1 * php7-devel-7.4.33-150400.4.37.1 * php7-sqlite-debuginfo-7.4.33-150400.4.37.1 * php7-dba-debuginfo-7.4.33-150400.4.37.1 * php7-ftp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-debuginfo-7.4.33-150400.4.37.1 * php7-fpm-7.4.33-150400.4.37.1 * php7-pgsql-7.4.33-150400.4.37.1 * php7-gmp-7.4.33-150400.4.37.1 * php7-opcache-7.4.33-150400.4.37.1 * php7-posix-7.4.33-150400.4.37.1 * php7-intl-7.4.33-150400.4.37.1 * php7-sysvsem-7.4.33-150400.4.37.1 * php7-tidy-7.4.33-150400.4.37.1 * php7-readline-7.4.33-150400.4.37.1 * php7-soap-debuginfo-7.4.33-150400.4.37.1 * php7-openssl-debuginfo-7.4.33-150400.4.37.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.37.1 * php7-exif-7.4.33-150400.4.37.1 * php7-iconv-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-7.4.33-150400.4.37.1 * php7-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-7.4.33-150400.4.37.1 * php7-zlib-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-debuginfo-7.4.33-150400.4.37.1 * php7-opcache-debuginfo-7.4.33-150400.4.37.1 * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * php7-intl-debuginfo-7.4.33-150400.4.37.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.37.1 * php7-pdo-7.4.33-150400.4.37.1 * php7-zlib-7.4.33-150400.4.37.1 * php7-json-7.4.33-150400.4.37.1 * php7-tokenizer-7.4.33-150400.4.37.1 * php7-mbstring-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-debuginfo-7.4.33-150400.4.37.1 * php7-gmp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-7.4.33-150400.4.37.1 * php7-sodium-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.37.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.37.1 * php7-curl-7.4.33-150400.4.37.1 * php7-mysql-debuginfo-7.4.33-150400.4.37.1 * php7-7.4.33-150400.4.37.1 * php7-gettext-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-7.4.33-150400.4.37.1 * php7-zip-debuginfo-7.4.33-150400.4.37.1 * php7-debugsource-7.4.33-150400.4.37.1 * php7-fpm-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-7.4.33-150400.4.37.1 * php7-iconv-7.4.33-150400.4.37.1 * php7-openssl-7.4.33-150400.4.37.1 * php7-sqlite-7.4.33-150400.4.37.1 * php7-gd-7.4.33-150400.4.37.1 * php7-exif-debuginfo-7.4.33-150400.4.37.1 * php7-json-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-7.4.33-150400.4.37.1 * php7-readline-debuginfo-7.4.33-150400.4.37.1 * php7-cli-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-7.4.33-150400.4.37.1 * php7-sockets-7.4.33-150400.4.37.1 * php7-shmop-debuginfo-7.4.33-150400.4.37.1 * php7-zip-7.4.33-150400.4.37.1 * php7-dba-7.4.33-150400.4.37.1 * php7-pcntl-debuginfo-7.4.33-150400.4.37.1 * php7-tidy-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-7.4.33-150400.4.37.1 * apache2-mod_php7-7.4.33-150400.4.37.1 * php7-shmop-7.4.33-150400.4.37.1 * php7-sockets-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-debuginfo-7.4.33-150400.4.37.1 * php7-cli-7.4.33-150400.4.37.1 * php7-soap-7.4.33-150400.4.37.1 * php7-sodium-7.4.33-150400.4.37.1 * php7-fpm-debugsource-7.4.33-150400.4.37.1 * php7-ldap-debuginfo-7.4.33-150400.4.37.1 * php7-mysql-7.4.33-150400.4.37.1 * php7-xmlreader-7.4.33-150400.4.37.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-7.4.33-150400.4.37.1 * php7-sysvmsg-7.4.33-150400.4.37.1 * php7-fileinfo-7.4.33-150400.4.37.1 * php7-pcntl-7.4.33-150400.4.37.1 * php7-bz2-7.4.33-150400.4.37.1 * php7-gd-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-7.4.33-150400.4.37.1 * php7-fastcgi-debugsource-7.4.33-150400.4.37.1 * php7-ldap-7.4.33-150400.4.37.1 * php7-pdo-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-7.4.33-150400.4.37.1 * php7-mbstring-7.4.33-150400.4.37.1 * php7-pgsql-debuginfo-7.4.33-150400.4.37.1 * php7-bz2-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.37.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-7.4.33-150400.4.37.1 * php7-phar-7.4.33-150400.4.37.1 * php7-posix-debuginfo-7.4.33-150400.4.37.1 * php7-phar-debuginfo-7.4.33-150400.4.37.1 * php7-curl-debuginfo-7.4.33-150400.4.37.1 * php7-gettext-7.4.33-150400.4.37.1 * php7-ftp-7.4.33-150400.4.37.1 * php7-devel-7.4.33-150400.4.37.1 * php7-sqlite-debuginfo-7.4.33-150400.4.37.1 * php7-dba-debuginfo-7.4.33-150400.4.37.1 * php7-ftp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-debuginfo-7.4.33-150400.4.37.1 * php7-fpm-7.4.33-150400.4.37.1 * php7-pgsql-7.4.33-150400.4.37.1 * php7-gmp-7.4.33-150400.4.37.1 * php7-opcache-7.4.33-150400.4.37.1 * php7-posix-7.4.33-150400.4.37.1 * php7-intl-7.4.33-150400.4.37.1 * php7-sysvsem-7.4.33-150400.4.37.1 * php7-tidy-7.4.33-150400.4.37.1 * php7-readline-7.4.33-150400.4.37.1 * php7-soap-debuginfo-7.4.33-150400.4.37.1 * php7-openssl-debuginfo-7.4.33-150400.4.37.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.37.1 * php7-exif-7.4.33-150400.4.37.1 * php7-iconv-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-7.4.33-150400.4.37.1 * php7-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-7.4.33-150400.4.37.1 * php7-zlib-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-debuginfo-7.4.33-150400.4.37.1 * php7-opcache-debuginfo-7.4.33-150400.4.37.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * php7-embed-debugsource-7.4.33-150400.4.37.1 * php7-embed-7.4.33-150400.4.37.1 * php7-embed-debuginfo-7.4.33-150400.4.37.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * php7-embed-debugsource-7.4.33-150400.4.37.1 * php7-embed-7.4.33-150400.4.37.1 * php7-embed-debuginfo-7.4.33-150400.4.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * php7-intl-debuginfo-7.4.33-150400.4.37.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.37.1 * php7-pdo-7.4.33-150400.4.37.1 * php7-zlib-7.4.33-150400.4.37.1 * php7-json-7.4.33-150400.4.37.1 * php7-tokenizer-7.4.33-150400.4.37.1 * php7-mbstring-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-debuginfo-7.4.33-150400.4.37.1 * php7-gmp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-7.4.33-150400.4.37.1 * php7-sodium-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.37.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.37.1 * php7-curl-7.4.33-150400.4.37.1 * php7-mysql-debuginfo-7.4.33-150400.4.37.1 * php7-7.4.33-150400.4.37.1 * php7-gettext-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-7.4.33-150400.4.37.1 * php7-zip-debuginfo-7.4.33-150400.4.37.1 * php7-debugsource-7.4.33-150400.4.37.1 * php7-fpm-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-7.4.33-150400.4.37.1 * php7-iconv-7.4.33-150400.4.37.1 * php7-openssl-7.4.33-150400.4.37.1 * php7-sqlite-7.4.33-150400.4.37.1 * php7-gd-7.4.33-150400.4.37.1 * php7-exif-debuginfo-7.4.33-150400.4.37.1 * php7-json-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-7.4.33-150400.4.37.1 * php7-readline-debuginfo-7.4.33-150400.4.37.1 * php7-cli-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-7.4.33-150400.4.37.1 * php7-sockets-7.4.33-150400.4.37.1 * php7-shmop-debuginfo-7.4.33-150400.4.37.1 * php7-zip-7.4.33-150400.4.37.1 * php7-dba-7.4.33-150400.4.37.1 * php7-pcntl-debuginfo-7.4.33-150400.4.37.1 * php7-tidy-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-7.4.33-150400.4.37.1 * apache2-mod_php7-7.4.33-150400.4.37.1 * php7-shmop-7.4.33-150400.4.37.1 * php7-sockets-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-debuginfo-7.4.33-150400.4.37.1 * php7-cli-7.4.33-150400.4.37.1 * php7-soap-7.4.33-150400.4.37.1 * php7-sodium-7.4.33-150400.4.37.1 * php7-fpm-debugsource-7.4.33-150400.4.37.1 * php7-ldap-debuginfo-7.4.33-150400.4.37.1 * php7-mysql-7.4.33-150400.4.37.1 * php7-xmlreader-7.4.33-150400.4.37.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-7.4.33-150400.4.37.1 * php7-sysvmsg-7.4.33-150400.4.37.1 * php7-fileinfo-7.4.33-150400.4.37.1 * php7-pcntl-7.4.33-150400.4.37.1 * php7-bz2-7.4.33-150400.4.37.1 * php7-gd-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-7.4.33-150400.4.37.1 * php7-fastcgi-debugsource-7.4.33-150400.4.37.1 * php7-ldap-7.4.33-150400.4.37.1 * php7-pdo-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-7.4.33-150400.4.37.1 * php7-mbstring-7.4.33-150400.4.37.1 * php7-pgsql-debuginfo-7.4.33-150400.4.37.1 * php7-bz2-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.37.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-7.4.33-150400.4.37.1 * php7-phar-7.4.33-150400.4.37.1 * php7-posix-debuginfo-7.4.33-150400.4.37.1 * php7-phar-debuginfo-7.4.33-150400.4.37.1 * php7-curl-debuginfo-7.4.33-150400.4.37.1 * php7-gettext-7.4.33-150400.4.37.1 * php7-ftp-7.4.33-150400.4.37.1 * php7-devel-7.4.33-150400.4.37.1 * php7-sqlite-debuginfo-7.4.33-150400.4.37.1 * php7-dba-debuginfo-7.4.33-150400.4.37.1 * php7-ftp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-debuginfo-7.4.33-150400.4.37.1 * php7-fpm-7.4.33-150400.4.37.1 * php7-pgsql-7.4.33-150400.4.37.1 * php7-gmp-7.4.33-150400.4.37.1 * php7-opcache-7.4.33-150400.4.37.1 * php7-posix-7.4.33-150400.4.37.1 * php7-intl-7.4.33-150400.4.37.1 * php7-sysvsem-7.4.33-150400.4.37.1 * php7-tidy-7.4.33-150400.4.37.1 * php7-readline-7.4.33-150400.4.37.1 * php7-soap-debuginfo-7.4.33-150400.4.37.1 * php7-openssl-debuginfo-7.4.33-150400.4.37.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.37.1 * php7-exif-7.4.33-150400.4.37.1 * php7-iconv-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-7.4.33-150400.4.37.1 * php7-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-7.4.33-150400.4.37.1 * php7-zlib-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-debuginfo-7.4.33-150400.4.37.1 * php7-opcache-debuginfo-7.4.33-150400.4.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * php7-intl-debuginfo-7.4.33-150400.4.37.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.37.1 * php7-pdo-7.4.33-150400.4.37.1 * php7-zlib-7.4.33-150400.4.37.1 * php7-json-7.4.33-150400.4.37.1 * php7-tokenizer-7.4.33-150400.4.37.1 * php7-mbstring-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-debuginfo-7.4.33-150400.4.37.1 * php7-gmp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-7.4.33-150400.4.37.1 * php7-sodium-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.37.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.37.1 * php7-curl-7.4.33-150400.4.37.1 * php7-mysql-debuginfo-7.4.33-150400.4.37.1 * php7-7.4.33-150400.4.37.1 * php7-gettext-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-7.4.33-150400.4.37.1 * php7-zip-debuginfo-7.4.33-150400.4.37.1 * php7-debugsource-7.4.33-150400.4.37.1 * php7-fpm-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-7.4.33-150400.4.37.1 * php7-iconv-7.4.33-150400.4.37.1 * php7-openssl-7.4.33-150400.4.37.1 * php7-sqlite-7.4.33-150400.4.37.1 * php7-gd-7.4.33-150400.4.37.1 * php7-exif-debuginfo-7.4.33-150400.4.37.1 * php7-json-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-7.4.33-150400.4.37.1 * php7-readline-debuginfo-7.4.33-150400.4.37.1 * php7-cli-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-7.4.33-150400.4.37.1 * php7-sockets-7.4.33-150400.4.37.1 * php7-shmop-debuginfo-7.4.33-150400.4.37.1 * php7-zip-7.4.33-150400.4.37.1 * php7-dba-7.4.33-150400.4.37.1 * php7-pcntl-debuginfo-7.4.33-150400.4.37.1 * php7-tidy-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-7.4.33-150400.4.37.1 * apache2-mod_php7-7.4.33-150400.4.37.1 * php7-shmop-7.4.33-150400.4.37.1 * php7-sockets-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-debuginfo-7.4.33-150400.4.37.1 * php7-cli-7.4.33-150400.4.37.1 * php7-soap-7.4.33-150400.4.37.1 * php7-sodium-7.4.33-150400.4.37.1 * php7-fpm-debugsource-7.4.33-150400.4.37.1 * php7-ldap-debuginfo-7.4.33-150400.4.37.1 * php7-mysql-7.4.33-150400.4.37.1 * php7-xmlreader-7.4.33-150400.4.37.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-7.4.33-150400.4.37.1 * php7-sysvmsg-7.4.33-150400.4.37.1 * php7-fileinfo-7.4.33-150400.4.37.1 * php7-pcntl-7.4.33-150400.4.37.1 * php7-bz2-7.4.33-150400.4.37.1 * php7-gd-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-7.4.33-150400.4.37.1 * php7-fastcgi-debugsource-7.4.33-150400.4.37.1 * php7-ldap-7.4.33-150400.4.37.1 * php7-pdo-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-7.4.33-150400.4.37.1 * php7-mbstring-7.4.33-150400.4.37.1 * php7-pgsql-debuginfo-7.4.33-150400.4.37.1 * php7-bz2-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.37.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-7.4.33-150400.4.37.1 * php7-phar-7.4.33-150400.4.37.1 * php7-posix-debuginfo-7.4.33-150400.4.37.1 * php7-phar-debuginfo-7.4.33-150400.4.37.1 * php7-curl-debuginfo-7.4.33-150400.4.37.1 * php7-gettext-7.4.33-150400.4.37.1 * php7-ftp-7.4.33-150400.4.37.1 * php7-devel-7.4.33-150400.4.37.1 * php7-sqlite-debuginfo-7.4.33-150400.4.37.1 * php7-dba-debuginfo-7.4.33-150400.4.37.1 * php7-ftp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-debuginfo-7.4.33-150400.4.37.1 * php7-fpm-7.4.33-150400.4.37.1 * php7-pgsql-7.4.33-150400.4.37.1 * php7-gmp-7.4.33-150400.4.37.1 * php7-opcache-7.4.33-150400.4.37.1 * php7-posix-7.4.33-150400.4.37.1 * php7-intl-7.4.33-150400.4.37.1 * php7-sysvsem-7.4.33-150400.4.37.1 * php7-tidy-7.4.33-150400.4.37.1 * php7-readline-7.4.33-150400.4.37.1 * php7-soap-debuginfo-7.4.33-150400.4.37.1 * php7-openssl-debuginfo-7.4.33-150400.4.37.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.37.1 * php7-exif-7.4.33-150400.4.37.1 * php7-iconv-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-7.4.33-150400.4.37.1 * php7-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-7.4.33-150400.4.37.1 * php7-zlib-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-debuginfo-7.4.33-150400.4.37.1 * php7-opcache-debuginfo-7.4.33-150400.4.37.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * php7-intl-debuginfo-7.4.33-150400.4.37.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.37.1 * php7-pdo-7.4.33-150400.4.37.1 * php7-zlib-7.4.33-150400.4.37.1 * php7-json-7.4.33-150400.4.37.1 * php7-tokenizer-7.4.33-150400.4.37.1 * php7-mbstring-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-debuginfo-7.4.33-150400.4.37.1 * php7-gmp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-7.4.33-150400.4.37.1 * php7-sodium-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.37.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.37.1 * php7-curl-7.4.33-150400.4.37.1 * php7-mysql-debuginfo-7.4.33-150400.4.37.1 * php7-7.4.33-150400.4.37.1 * php7-gettext-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-7.4.33-150400.4.37.1 * php7-zip-debuginfo-7.4.33-150400.4.37.1 * php7-debugsource-7.4.33-150400.4.37.1 * php7-fpm-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-7.4.33-150400.4.37.1 * php7-iconv-7.4.33-150400.4.37.1 * php7-openssl-7.4.33-150400.4.37.1 * php7-sqlite-7.4.33-150400.4.37.1 * php7-gd-7.4.33-150400.4.37.1 * php7-exif-debuginfo-7.4.33-150400.4.37.1 * php7-json-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-7.4.33-150400.4.37.1 * php7-readline-debuginfo-7.4.33-150400.4.37.1 * php7-cli-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-7.4.33-150400.4.37.1 * php7-sockets-7.4.33-150400.4.37.1 * php7-shmop-debuginfo-7.4.33-150400.4.37.1 * php7-zip-7.4.33-150400.4.37.1 * php7-dba-7.4.33-150400.4.37.1 * php7-pcntl-debuginfo-7.4.33-150400.4.37.1 * php7-tidy-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-7.4.33-150400.4.37.1 * apache2-mod_php7-7.4.33-150400.4.37.1 * php7-shmop-7.4.33-150400.4.37.1 * php7-sockets-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-debuginfo-7.4.33-150400.4.37.1 * php7-cli-7.4.33-150400.4.37.1 * php7-soap-7.4.33-150400.4.37.1 * php7-sodium-7.4.33-150400.4.37.1 * php7-fpm-debugsource-7.4.33-150400.4.37.1 * php7-ldap-debuginfo-7.4.33-150400.4.37.1 * php7-mysql-7.4.33-150400.4.37.1 * php7-xmlreader-7.4.33-150400.4.37.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-7.4.33-150400.4.37.1 * php7-sysvmsg-7.4.33-150400.4.37.1 * php7-fileinfo-7.4.33-150400.4.37.1 * php7-pcntl-7.4.33-150400.4.37.1 * php7-bz2-7.4.33-150400.4.37.1 * php7-gd-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-7.4.33-150400.4.37.1 * php7-fastcgi-debugsource-7.4.33-150400.4.37.1 * php7-ldap-7.4.33-150400.4.37.1 * php7-pdo-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-7.4.33-150400.4.37.1 * php7-mbstring-7.4.33-150400.4.37.1 * php7-pgsql-debuginfo-7.4.33-150400.4.37.1 * php7-bz2-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.37.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-7.4.33-150400.4.37.1 * php7-phar-7.4.33-150400.4.37.1 * php7-posix-debuginfo-7.4.33-150400.4.37.1 * php7-phar-debuginfo-7.4.33-150400.4.37.1 * php7-curl-debuginfo-7.4.33-150400.4.37.1 * php7-gettext-7.4.33-150400.4.37.1 * php7-ftp-7.4.33-150400.4.37.1 * php7-devel-7.4.33-150400.4.37.1 * php7-sqlite-debuginfo-7.4.33-150400.4.37.1 * php7-dba-debuginfo-7.4.33-150400.4.37.1 * php7-ftp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-debuginfo-7.4.33-150400.4.37.1 * php7-fpm-7.4.33-150400.4.37.1 * php7-pgsql-7.4.33-150400.4.37.1 * php7-gmp-7.4.33-150400.4.37.1 * php7-opcache-7.4.33-150400.4.37.1 * php7-posix-7.4.33-150400.4.37.1 * php7-intl-7.4.33-150400.4.37.1 * php7-sysvsem-7.4.33-150400.4.37.1 * php7-tidy-7.4.33-150400.4.37.1 * php7-readline-7.4.33-150400.4.37.1 * php7-soap-debuginfo-7.4.33-150400.4.37.1 * php7-openssl-debuginfo-7.4.33-150400.4.37.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.37.1 * php7-exif-7.4.33-150400.4.37.1 * php7-iconv-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-7.4.33-150400.4.37.1 * php7-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-7.4.33-150400.4.37.1 * php7-zlib-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-debuginfo-7.4.33-150400.4.37.1 * php7-opcache-debuginfo-7.4.33-150400.4.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * php7-intl-debuginfo-7.4.33-150400.4.37.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.37.1 * php7-pdo-7.4.33-150400.4.37.1 * php7-zlib-7.4.33-150400.4.37.1 * php7-json-7.4.33-150400.4.37.1 * php7-tokenizer-7.4.33-150400.4.37.1 * php7-mbstring-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-debuginfo-7.4.33-150400.4.37.1 * php7-gmp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-7.4.33-150400.4.37.1 * php7-sodium-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.37.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.37.1 * php7-curl-7.4.33-150400.4.37.1 * php7-mysql-debuginfo-7.4.33-150400.4.37.1 * php7-7.4.33-150400.4.37.1 * php7-gettext-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-7.4.33-150400.4.37.1 * php7-zip-debuginfo-7.4.33-150400.4.37.1 * php7-debugsource-7.4.33-150400.4.37.1 * php7-fpm-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-7.4.33-150400.4.37.1 * php7-iconv-7.4.33-150400.4.37.1 * php7-openssl-7.4.33-150400.4.37.1 * php7-sqlite-7.4.33-150400.4.37.1 * php7-gd-7.4.33-150400.4.37.1 * php7-exif-debuginfo-7.4.33-150400.4.37.1 * php7-json-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-7.4.33-150400.4.37.1 * php7-readline-debuginfo-7.4.33-150400.4.37.1 * php7-cli-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-7.4.33-150400.4.37.1 * php7-sockets-7.4.33-150400.4.37.1 * php7-shmop-debuginfo-7.4.33-150400.4.37.1 * php7-zip-7.4.33-150400.4.37.1 * php7-dba-7.4.33-150400.4.37.1 * php7-pcntl-debuginfo-7.4.33-150400.4.37.1 * php7-tidy-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-7.4.33-150400.4.37.1 * apache2-mod_php7-7.4.33-150400.4.37.1 * php7-shmop-7.4.33-150400.4.37.1 * php7-sockets-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-debuginfo-7.4.33-150400.4.37.1 * php7-cli-7.4.33-150400.4.37.1 * php7-soap-7.4.33-150400.4.37.1 * php7-sodium-7.4.33-150400.4.37.1 * php7-fpm-debugsource-7.4.33-150400.4.37.1 * php7-ldap-debuginfo-7.4.33-150400.4.37.1 * php7-mysql-7.4.33-150400.4.37.1 * php7-xmlreader-7.4.33-150400.4.37.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-7.4.33-150400.4.37.1 * php7-sysvmsg-7.4.33-150400.4.37.1 * php7-fileinfo-7.4.33-150400.4.37.1 * php7-pcntl-7.4.33-150400.4.37.1 * php7-bz2-7.4.33-150400.4.37.1 * php7-gd-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-7.4.33-150400.4.37.1 * php7-fastcgi-debugsource-7.4.33-150400.4.37.1 * php7-ldap-7.4.33-150400.4.37.1 * php7-pdo-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-7.4.33-150400.4.37.1 * php7-mbstring-7.4.33-150400.4.37.1 * php7-pgsql-debuginfo-7.4.33-150400.4.37.1 * php7-bz2-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.37.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-7.4.33-150400.4.37.1 * php7-phar-7.4.33-150400.4.37.1 * php7-posix-debuginfo-7.4.33-150400.4.37.1 * php7-phar-debuginfo-7.4.33-150400.4.37.1 * php7-curl-debuginfo-7.4.33-150400.4.37.1 * php7-gettext-7.4.33-150400.4.37.1 * php7-ftp-7.4.33-150400.4.37.1 * php7-devel-7.4.33-150400.4.37.1 * php7-sqlite-debuginfo-7.4.33-150400.4.37.1 * php7-dba-debuginfo-7.4.33-150400.4.37.1 * php7-ftp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-debuginfo-7.4.33-150400.4.37.1 * php7-fpm-7.4.33-150400.4.37.1 * php7-pgsql-7.4.33-150400.4.37.1 * php7-gmp-7.4.33-150400.4.37.1 * php7-opcache-7.4.33-150400.4.37.1 * php7-posix-7.4.33-150400.4.37.1 * php7-intl-7.4.33-150400.4.37.1 * php7-sysvsem-7.4.33-150400.4.37.1 * php7-tidy-7.4.33-150400.4.37.1 * php7-readline-7.4.33-150400.4.37.1 * php7-soap-debuginfo-7.4.33-150400.4.37.1 * php7-openssl-debuginfo-7.4.33-150400.4.37.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.37.1 * php7-exif-7.4.33-150400.4.37.1 * php7-iconv-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-7.4.33-150400.4.37.1 * php7-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-7.4.33-150400.4.37.1 * php7-zlib-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-debuginfo-7.4.33-150400.4.37.1 * php7-opcache-debuginfo-7.4.33-150400.4.37.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * php7-intl-debuginfo-7.4.33-150400.4.37.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.37.1 * php7-embed-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.37.1 * php7-pdo-7.4.33-150400.4.37.1 * php7-zlib-7.4.33-150400.4.37.1 * php7-json-7.4.33-150400.4.37.1 * php7-tokenizer-7.4.33-150400.4.37.1 * php7-mbstring-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-debuginfo-7.4.33-150400.4.37.1 * php7-gmp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-7.4.33-150400.4.37.1 * php7-sodium-debuginfo-7.4.33-150400.4.37.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.37.1 * php7-curl-7.4.33-150400.4.37.1 * php7-mysql-debuginfo-7.4.33-150400.4.37.1 * php7-7.4.33-150400.4.37.1 * php7-gettext-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-7.4.33-150400.4.37.1 * php7-zip-debuginfo-7.4.33-150400.4.37.1 * php7-debugsource-7.4.33-150400.4.37.1 * php7-fpm-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-7.4.33-150400.4.37.1 * php7-iconv-7.4.33-150400.4.37.1 * php7-openssl-7.4.33-150400.4.37.1 * php7-sqlite-7.4.33-150400.4.37.1 * php7-gd-7.4.33-150400.4.37.1 * php7-exif-debuginfo-7.4.33-150400.4.37.1 * php7-json-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-7.4.33-150400.4.37.1 * php7-readline-debuginfo-7.4.33-150400.4.37.1 * php7-cli-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-7.4.33-150400.4.37.1 * php7-sockets-7.4.33-150400.4.37.1 * php7-test-7.4.33-150400.4.37.1 * php7-shmop-debuginfo-7.4.33-150400.4.37.1 * php7-zip-7.4.33-150400.4.37.1 * php7-dba-7.4.33-150400.4.37.1 * php7-pcntl-debuginfo-7.4.33-150400.4.37.1 * php7-tidy-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-7.4.33-150400.4.37.1 * apache2-mod_php7-7.4.33-150400.4.37.1 * php7-shmop-7.4.33-150400.4.37.1 * php7-sockets-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-debuginfo-7.4.33-150400.4.37.1 * php7-cli-7.4.33-150400.4.37.1 * php7-soap-7.4.33-150400.4.37.1 * php7-sodium-7.4.33-150400.4.37.1 * php7-fpm-debugsource-7.4.33-150400.4.37.1 * php7-ldap-debuginfo-7.4.33-150400.4.37.1 * php7-mysql-7.4.33-150400.4.37.1 * php7-xmlreader-7.4.33-150400.4.37.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-7.4.33-150400.4.37.1 * php7-sysvmsg-7.4.33-150400.4.37.1 * php7-fileinfo-7.4.33-150400.4.37.1 * php7-pcntl-7.4.33-150400.4.37.1 * php7-bz2-7.4.33-150400.4.37.1 * php7-gd-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-7.4.33-150400.4.37.1 * php7-ldap-7.4.33-150400.4.37.1 * php7-fastcgi-debugsource-7.4.33-150400.4.37.1 * php7-pdo-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-7.4.33-150400.4.37.1 * php7-mbstring-7.4.33-150400.4.37.1 * php7-pgsql-debuginfo-7.4.33-150400.4.37.1 * php7-bz2-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.37.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-7.4.33-150400.4.37.1 * php7-phar-7.4.33-150400.4.37.1 * php7-posix-debuginfo-7.4.33-150400.4.37.1 * php7-phar-debuginfo-7.4.33-150400.4.37.1 * php7-embed-debugsource-7.4.33-150400.4.37.1 * php7-curl-debuginfo-7.4.33-150400.4.37.1 * php7-gettext-7.4.33-150400.4.37.1 * php7-ftp-7.4.33-150400.4.37.1 * php7-devel-7.4.33-150400.4.37.1 * php7-sqlite-debuginfo-7.4.33-150400.4.37.1 * php7-dba-debuginfo-7.4.33-150400.4.37.1 * php7-ftp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-debuginfo-7.4.33-150400.4.37.1 * php7-fpm-7.4.33-150400.4.37.1 * php7-pgsql-7.4.33-150400.4.37.1 * php7-gmp-7.4.33-150400.4.37.1 * php7-opcache-7.4.33-150400.4.37.1 * php7-posix-7.4.33-150400.4.37.1 * php7-intl-7.4.33-150400.4.37.1 * php7-sysvsem-7.4.33-150400.4.37.1 * php7-embed-7.4.33-150400.4.37.1 * php7-tidy-7.4.33-150400.4.37.1 * php7-readline-7.4.33-150400.4.37.1 * php7-soap-debuginfo-7.4.33-150400.4.37.1 * php7-openssl-debuginfo-7.4.33-150400.4.37.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.37.1 * php7-exif-7.4.33-150400.4.37.1 * php7-iconv-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-7.4.33-150400.4.37.1 * php7-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-7.4.33-150400.4.37.1 * php7-zlib-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-debuginfo-7.4.33-150400.4.37.1 * php7-opcache-debuginfo-7.4.33-150400.4.37.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * php7-intl-debuginfo-7.4.33-150400.4.37.1 * php7-embed-debuginfo-7.4.33-150400.4.37.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.37.1 * php7-pdo-7.4.33-150400.4.37.1 * php7-zlib-7.4.33-150400.4.37.1 * php7-json-7.4.33-150400.4.37.1 * php7-tokenizer-7.4.33-150400.4.37.1 * php7-mbstring-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-debuginfo-7.4.33-150400.4.37.1 * php7-gmp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-7.4.33-150400.4.37.1 * php7-sodium-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.37.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.37.1 * php7-curl-7.4.33-150400.4.37.1 * php7-mysql-debuginfo-7.4.33-150400.4.37.1 * php7-7.4.33-150400.4.37.1 * php7-gettext-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-7.4.33-150400.4.37.1 * php7-zip-debuginfo-7.4.33-150400.4.37.1 * php7-debugsource-7.4.33-150400.4.37.1 * php7-fpm-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-7.4.33-150400.4.37.1 * php7-iconv-7.4.33-150400.4.37.1 * php7-openssl-7.4.33-150400.4.37.1 * php7-sqlite-7.4.33-150400.4.37.1 * php7-gd-7.4.33-150400.4.37.1 * php7-exif-debuginfo-7.4.33-150400.4.37.1 * php7-json-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-7.4.33-150400.4.37.1 * php7-readline-debuginfo-7.4.33-150400.4.37.1 * php7-cli-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-7.4.33-150400.4.37.1 * php7-sockets-7.4.33-150400.4.37.1 * php7-test-7.4.33-150400.4.37.1 * php7-shmop-debuginfo-7.4.33-150400.4.37.1 * php7-zip-7.4.33-150400.4.37.1 * php7-dba-7.4.33-150400.4.37.1 * php7-pcntl-debuginfo-7.4.33-150400.4.37.1 * php7-tidy-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-7.4.33-150400.4.37.1 * apache2-mod_php7-7.4.33-150400.4.37.1 * php7-shmop-7.4.33-150400.4.37.1 * php7-sockets-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-debuginfo-7.4.33-150400.4.37.1 * php7-cli-7.4.33-150400.4.37.1 * php7-soap-7.4.33-150400.4.37.1 * php7-sodium-7.4.33-150400.4.37.1 * php7-fpm-debugsource-7.4.33-150400.4.37.1 * php7-ldap-debuginfo-7.4.33-150400.4.37.1 * php7-mysql-7.4.33-150400.4.37.1 * php7-xmlreader-7.4.33-150400.4.37.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-7.4.33-150400.4.37.1 * php7-sysvmsg-7.4.33-150400.4.37.1 * php7-fileinfo-7.4.33-150400.4.37.1 * php7-pcntl-7.4.33-150400.4.37.1 * php7-bz2-7.4.33-150400.4.37.1 * php7-gd-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-7.4.33-150400.4.37.1 * php7-fastcgi-debugsource-7.4.33-150400.4.37.1 * php7-ldap-7.4.33-150400.4.37.1 * php7-pdo-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-7.4.33-150400.4.37.1 * php7-mbstring-7.4.33-150400.4.37.1 * php7-pgsql-debuginfo-7.4.33-150400.4.37.1 * php7-bz2-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.37.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-7.4.33-150400.4.37.1 * php7-phar-7.4.33-150400.4.37.1 * php7-posix-debuginfo-7.4.33-150400.4.37.1 * php7-phar-debuginfo-7.4.33-150400.4.37.1 * php7-embed-debugsource-7.4.33-150400.4.37.1 * php7-curl-debuginfo-7.4.33-150400.4.37.1 * php7-gettext-7.4.33-150400.4.37.1 * php7-ftp-7.4.33-150400.4.37.1 * php7-devel-7.4.33-150400.4.37.1 * php7-sqlite-debuginfo-7.4.33-150400.4.37.1 * php7-dba-debuginfo-7.4.33-150400.4.37.1 * php7-ftp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-debuginfo-7.4.33-150400.4.37.1 * php7-fpm-7.4.33-150400.4.37.1 * php7-pgsql-7.4.33-150400.4.37.1 * php7-gmp-7.4.33-150400.4.37.1 * php7-opcache-7.4.33-150400.4.37.1 * php7-posix-7.4.33-150400.4.37.1 * php7-intl-7.4.33-150400.4.37.1 * php7-sysvsem-7.4.33-150400.4.37.1 * php7-embed-7.4.33-150400.4.37.1 * php7-tidy-7.4.33-150400.4.37.1 * php7-readline-7.4.33-150400.4.37.1 * php7-soap-debuginfo-7.4.33-150400.4.37.1 * php7-openssl-debuginfo-7.4.33-150400.4.37.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.37.1 * php7-exif-7.4.33-150400.4.37.1 * php7-iconv-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-7.4.33-150400.4.37.1 * php7-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-7.4.33-150400.4.37.1 * php7-zlib-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-debuginfo-7.4.33-150400.4.37.1 * php7-opcache-debuginfo-7.4.33-150400.4.37.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * php7-intl-debuginfo-7.4.33-150400.4.37.1 * php7-embed-debuginfo-7.4.33-150400.4.37.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.37.1 * php7-pdo-7.4.33-150400.4.37.1 * php7-zlib-7.4.33-150400.4.37.1 * php7-json-7.4.33-150400.4.37.1 * php7-tokenizer-7.4.33-150400.4.37.1 * php7-mbstring-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-debuginfo-7.4.33-150400.4.37.1 * php7-gmp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-7.4.33-150400.4.37.1 * php7-sodium-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.37.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.37.1 * php7-curl-7.4.33-150400.4.37.1 * php7-mysql-debuginfo-7.4.33-150400.4.37.1 * php7-7.4.33-150400.4.37.1 * php7-gettext-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-7.4.33-150400.4.37.1 * php7-zip-debuginfo-7.4.33-150400.4.37.1 * php7-debugsource-7.4.33-150400.4.37.1 * php7-fpm-debuginfo-7.4.33-150400.4.37.1 * php7-xsl-7.4.33-150400.4.37.1 * php7-iconv-7.4.33-150400.4.37.1 * php7-openssl-7.4.33-150400.4.37.1 * php7-sqlite-7.4.33-150400.4.37.1 * php7-gd-7.4.33-150400.4.37.1 * php7-exif-debuginfo-7.4.33-150400.4.37.1 * php7-json-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-7.4.33-150400.4.37.1 * php7-readline-debuginfo-7.4.33-150400.4.37.1 * php7-cli-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-7.4.33-150400.4.37.1 * php7-sockets-7.4.33-150400.4.37.1 * php7-test-7.4.33-150400.4.37.1 * php7-shmop-debuginfo-7.4.33-150400.4.37.1 * php7-zip-7.4.33-150400.4.37.1 * php7-dba-7.4.33-150400.4.37.1 * php7-pcntl-debuginfo-7.4.33-150400.4.37.1 * php7-tidy-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-7.4.33-150400.4.37.1 * apache2-mod_php7-7.4.33-150400.4.37.1 * php7-shmop-7.4.33-150400.4.37.1 * php7-sockets-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-debuginfo-7.4.33-150400.4.37.1 * php7-cli-7.4.33-150400.4.37.1 * php7-soap-7.4.33-150400.4.37.1 * php7-sodium-7.4.33-150400.4.37.1 * php7-fpm-debugsource-7.4.33-150400.4.37.1 * php7-ldap-debuginfo-7.4.33-150400.4.37.1 * php7-mysql-7.4.33-150400.4.37.1 * php7-xmlreader-7.4.33-150400.4.37.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-7.4.33-150400.4.37.1 * php7-sysvmsg-7.4.33-150400.4.37.1 * php7-fileinfo-7.4.33-150400.4.37.1 * php7-pcntl-7.4.33-150400.4.37.1 * php7-bz2-7.4.33-150400.4.37.1 * php7-gd-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-7.4.33-150400.4.37.1 * php7-fastcgi-debugsource-7.4.33-150400.4.37.1 * php7-ldap-7.4.33-150400.4.37.1 * php7-pdo-debuginfo-7.4.33-150400.4.37.1 * php7-bcmath-7.4.33-150400.4.37.1 * php7-mbstring-7.4.33-150400.4.37.1 * php7-pgsql-debuginfo-7.4.33-150400.4.37.1 * php7-bz2-debuginfo-7.4.33-150400.4.37.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.37.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.37.1 * php7-snmp-debuginfo-7.4.33-150400.4.37.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.37.1 * php7-enchant-7.4.33-150400.4.37.1 * php7-phar-7.4.33-150400.4.37.1 * php7-posix-debuginfo-7.4.33-150400.4.37.1 * php7-phar-debuginfo-7.4.33-150400.4.37.1 * php7-embed-debugsource-7.4.33-150400.4.37.1 * php7-curl-debuginfo-7.4.33-150400.4.37.1 * php7-gettext-7.4.33-150400.4.37.1 * php7-ftp-7.4.33-150400.4.37.1 * php7-devel-7.4.33-150400.4.37.1 * php7-sqlite-debuginfo-7.4.33-150400.4.37.1 * php7-dba-debuginfo-7.4.33-150400.4.37.1 * php7-ftp-debuginfo-7.4.33-150400.4.37.1 * php7-calendar-debuginfo-7.4.33-150400.4.37.1 * php7-fpm-7.4.33-150400.4.37.1 * php7-pgsql-7.4.33-150400.4.37.1 * php7-gmp-7.4.33-150400.4.37.1 * php7-opcache-7.4.33-150400.4.37.1 * php7-posix-7.4.33-150400.4.37.1 * php7-intl-7.4.33-150400.4.37.1 * php7-sysvsem-7.4.33-150400.4.37.1 * php7-embed-7.4.33-150400.4.37.1 * php7-tidy-7.4.33-150400.4.37.1 * php7-readline-7.4.33-150400.4.37.1 * php7-soap-debuginfo-7.4.33-150400.4.37.1 * php7-openssl-debuginfo-7.4.33-150400.4.37.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.37.1 * php7-exif-7.4.33-150400.4.37.1 * php7-iconv-debuginfo-7.4.33-150400.4.37.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.37.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.37.1 * php7-dom-debuginfo-7.4.33-150400.4.37.1 * php7-fastcgi-7.4.33-150400.4.37.1 * php7-debuginfo-7.4.33-150400.4.37.1 * php7-odbc-7.4.33-150400.4.37.1 * php7-zlib-debuginfo-7.4.33-150400.4.37.1 * php7-ctype-debuginfo-7.4.33-150400.4.37.1 * php7-opcache-debuginfo-7.4.33-150400.4.37.1 ## References: * https://www.suse.com/security/cve/CVE-2024-5458.html * https://bugzilla.suse.com/show_bug.cgi?id=1226073

1 0

SUSE-SU-2024:2039-1: important: Security update for php8
by OPENSUSE-UPDATES 17 Jun '24

17 Jun '24

# Security update for php8 Announcement ID: SUSE-SU-2024:2039-1 Rating: important References: * bsc#1226073 Cross-References: * CVE-2024-5458 CVSS scores: * CVE-2024-5458 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2024-5458 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Server 4.3 * Web and Scripting Module 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2024-5458: Fixed an issue that allows to bypass filters in filter_var FILTER_VALIDATE_URL. (bsc#1226073) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2039=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2039=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-2039=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2039=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2039=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2039=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2039=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2039=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * php8-sysvmsg-8.0.30-150400.4.43.1 * php8-xmlwriter-8.0.30-150400.4.43.1 * php8-openssl-8.0.30-150400.4.43.1 * php8-gd-8.0.30-150400.4.43.1 * php8-xsl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debuginfo-8.0.30-150400.4.43.1 * php8-zlib-8.0.30-150400.4.43.1 * php8-ldap-8.0.30-150400.4.43.1 * php8-debugsource-8.0.30-150400.4.43.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-8.0.30-150400.4.43.1 * php8-gettext-debuginfo-8.0.30-150400.4.43.1 * php8-tidy-8.0.30-150400.4.43.1 * php8-dom-8.0.30-150400.4.43.1 * php8-xmlreader-8.0.30-150400.4.43.1 * php8-curl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-8.0.30-150400.4.43.1 * php8-openssl-debuginfo-8.0.30-150400.4.43.1 * php8-sockets-8.0.30-150400.4.43.1 * php8-curl-8.0.30-150400.4.43.1 * php8-posix-8.0.30-150400.4.43.1 * php8-debuginfo-8.0.30-150400.4.43.1 * php8-fileinfo-8.0.30-150400.4.43.1 * php8-cli-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-8.0.30-150400.4.43.1 * php8-opcache-8.0.30-150400.4.43.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.43.1 * php8-dba-debuginfo-8.0.30-150400.4.43.1 * php8-tokenizer-8.0.30-150400.4.43.1 * php8-pcntl-debuginfo-8.0.30-150400.4.43.1 * php8-8.0.30-150400.4.43.1 * php8-calendar-8.0.30-150400.4.43.1 * php8-sysvshm-8.0.30-150400.4.43.1 * php8-pcntl-8.0.30-150400.4.43.1 * php8-zlib-debuginfo-8.0.30-150400.4.43.1 * php8-zip-8.0.30-150400.4.43.1 * php8-ftp-debuginfo-8.0.30-150400.4.43.1 * php8-iconv-debuginfo-8.0.30-150400.4.43.1 * php8-soap-8.0.30-150400.4.43.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.43.1 * php8-exif-8.0.30-150400.4.43.1 * php8-embed-8.0.30-150400.4.43.1 * php8-sodium-8.0.30-150400.4.43.1 * php8-intl-debuginfo-8.0.30-150400.4.43.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.43.1 * php8-pgsql-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-debuginfo-8.0.30-150400.4.43.1 * php8-soap-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-8.0.30-150400.4.43.1 * php8-readline-debuginfo-8.0.30-150400.4.43.1 * php8-devel-8.0.30-150400.4.43.1 * php8-ldap-debuginfo-8.0.30-150400.4.43.1 * php8-zip-debuginfo-8.0.30-150400.4.43.1 * php8-gd-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-8.0.30-150400.4.43.1 * php8-dba-8.0.30-150400.4.43.1 * php8-enchant-8.0.30-150400.4.43.1 * php8-fpm-debuginfo-8.0.30-150400.4.43.1 * php8-sqlite-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.43.1 * php8-bz2-debuginfo-8.0.30-150400.4.43.1 * php8-test-8.0.30-150400.4.43.1 * php8-iconv-8.0.30-150400.4.43.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.43.1 * php8-shmop-debuginfo-8.0.30-150400.4.43.1 * php8-enchant-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-debuginfo-8.0.30-150400.4.43.1 * php8-snmp-8.0.30-150400.4.43.1 * php8-tidy-debuginfo-8.0.30-150400.4.43.1 * php8-odbc-debuginfo-8.0.30-150400.4.43.1 * php8-phar-8.0.30-150400.4.43.1 * php8-snmp-debuginfo-8.0.30-150400.4.43.1 * php8-bcmath-8.0.30-150400.4.43.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-8.0.30-150400.4.43.1 * php8-sqlite-8.0.30-150400.4.43.1 * php8-fpm-8.0.30-150400.4.43.1 * php8-readline-8.0.30-150400.4.43.1 * php8-cli-8.0.30-150400.4.43.1 * php8-dom-debuginfo-8.0.30-150400.4.43.1 * php8-sysvsem-8.0.30-150400.4.43.1 * php8-posix-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-8.0.30-150400.4.43.1 * php8-exif-debuginfo-8.0.30-150400.4.43.1 * php8-calendar-debuginfo-8.0.30-150400.4.43.1 * php8-fpm-debugsource-8.0.30-150400.4.43.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debugsource-8.0.30-150400.4.43.1 * php8-shmop-8.0.30-150400.4.43.1 * php8-sockets-debuginfo-8.0.30-150400.4.43.1 * php8-xsl-8.0.30-150400.4.43.1 * php8-bcmath-debuginfo-8.0.30-150400.4.43.1 * php8-intl-8.0.30-150400.4.43.1 * php8-odbc-8.0.30-150400.4.43.1 * php8-bz2-8.0.30-150400.4.43.1 * php8-opcache-debuginfo-8.0.30-150400.4.43.1 * php8-gettext-8.0.30-150400.4.43.1 * php8-pgsql-8.0.30-150400.4.43.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.43.1 * php8-sodium-debuginfo-8.0.30-150400.4.43.1 * php8-phar-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debugsource-8.0.30-150400.4.43.1 * php8-ftp-8.0.30-150400.4.43.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * php8-sysvmsg-8.0.30-150400.4.43.1 * php8-xmlwriter-8.0.30-150400.4.43.1 * php8-openssl-8.0.30-150400.4.43.1 * php8-gd-8.0.30-150400.4.43.1 * php8-xsl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debuginfo-8.0.30-150400.4.43.1 * php8-zlib-8.0.30-150400.4.43.1 * php8-ldap-8.0.30-150400.4.43.1 * php8-debugsource-8.0.30-150400.4.43.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-8.0.30-150400.4.43.1 * php8-gettext-debuginfo-8.0.30-150400.4.43.1 * php8-tidy-8.0.30-150400.4.43.1 * php8-dom-8.0.30-150400.4.43.1 * php8-xmlreader-8.0.30-150400.4.43.1 * php8-curl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-8.0.30-150400.4.43.1 * php8-openssl-debuginfo-8.0.30-150400.4.43.1 * php8-sockets-8.0.30-150400.4.43.1 * php8-curl-8.0.30-150400.4.43.1 * php8-posix-8.0.30-150400.4.43.1 * php8-debuginfo-8.0.30-150400.4.43.1 * php8-fileinfo-8.0.30-150400.4.43.1 * php8-cli-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-8.0.30-150400.4.43.1 * php8-opcache-8.0.30-150400.4.43.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.43.1 * php8-dba-debuginfo-8.0.30-150400.4.43.1 * php8-pcntl-debuginfo-8.0.30-150400.4.43.1 * php8-8.0.30-150400.4.43.1 * php8-calendar-8.0.30-150400.4.43.1 * php8-tokenizer-8.0.30-150400.4.43.1 * php8-sysvshm-8.0.30-150400.4.43.1 * php8-pcntl-8.0.30-150400.4.43.1 * php8-zlib-debuginfo-8.0.30-150400.4.43.1 * php8-zip-8.0.30-150400.4.43.1 * php8-ftp-debuginfo-8.0.30-150400.4.43.1 * php8-iconv-debuginfo-8.0.30-150400.4.43.1 * php8-soap-8.0.30-150400.4.43.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-8.0.30-150400.4.43.1 * php8-exif-8.0.30-150400.4.43.1 * php8-sodium-8.0.30-150400.4.43.1 * php8-intl-debuginfo-8.0.30-150400.4.43.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.43.1 * php8-pgsql-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-debuginfo-8.0.30-150400.4.43.1 * php8-soap-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-8.0.30-150400.4.43.1 * php8-readline-debuginfo-8.0.30-150400.4.43.1 * php8-devel-8.0.30-150400.4.43.1 * php8-ldap-debuginfo-8.0.30-150400.4.43.1 * php8-zip-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-8.0.30-150400.4.43.1 * php8-gd-debuginfo-8.0.30-150400.4.43.1 * php8-dba-8.0.30-150400.4.43.1 * php8-enchant-8.0.30-150400.4.43.1 * php8-fpm-debuginfo-8.0.30-150400.4.43.1 * php8-sqlite-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.43.1 * php8-bz2-debuginfo-8.0.30-150400.4.43.1 * php8-test-8.0.30-150400.4.43.1 * php8-iconv-8.0.30-150400.4.43.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.43.1 * php8-shmop-debuginfo-8.0.30-150400.4.43.1 * php8-enchant-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-debuginfo-8.0.30-150400.4.43.1 * php8-snmp-8.0.30-150400.4.43.1 * php8-tidy-debuginfo-8.0.30-150400.4.43.1 * php8-odbc-debuginfo-8.0.30-150400.4.43.1 * php8-phar-8.0.30-150400.4.43.1 * php8-snmp-debuginfo-8.0.30-150400.4.43.1 * php8-bcmath-8.0.30-150400.4.43.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-8.0.30-150400.4.43.1 * php8-sqlite-8.0.30-150400.4.43.1 * php8-fpm-8.0.30-150400.4.43.1 * php8-readline-8.0.30-150400.4.43.1 * php8-cli-8.0.30-150400.4.43.1 * php8-dom-debuginfo-8.0.30-150400.4.43.1 * php8-sysvsem-8.0.30-150400.4.43.1 * php8-posix-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-8.0.30-150400.4.43.1 * php8-exif-debuginfo-8.0.30-150400.4.43.1 * php8-calendar-debuginfo-8.0.30-150400.4.43.1 * php8-fpm-debugsource-8.0.30-150400.4.43.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debugsource-8.0.30-150400.4.43.1 * php8-shmop-8.0.30-150400.4.43.1 * php8-sockets-debuginfo-8.0.30-150400.4.43.1 * php8-xsl-8.0.30-150400.4.43.1 * php8-bcmath-debuginfo-8.0.30-150400.4.43.1 * php8-intl-8.0.30-150400.4.43.1 * php8-odbc-8.0.30-150400.4.43.1 * php8-bz2-8.0.30-150400.4.43.1 * php8-opcache-debuginfo-8.0.30-150400.4.43.1 * php8-gettext-8.0.30-150400.4.43.1 * php8-pgsql-8.0.30-150400.4.43.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.43.1 * php8-sodium-debuginfo-8.0.30-150400.4.43.1 * php8-phar-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debugsource-8.0.30-150400.4.43.1 * php8-ftp-8.0.30-150400.4.43.1 * Web and Scripting Module 15-SP5 (aarch64 ppc64le s390x x86_64) * php8-sysvmsg-8.0.30-150400.4.43.1 * php8-xmlwriter-8.0.30-150400.4.43.1 * php8-openssl-8.0.30-150400.4.43.1 * php8-gd-8.0.30-150400.4.43.1 * php8-xsl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debuginfo-8.0.30-150400.4.43.1 * php8-zlib-8.0.30-150400.4.43.1 * php8-ldap-8.0.30-150400.4.43.1 * php8-debugsource-8.0.30-150400.4.43.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-8.0.30-150400.4.43.1 * php8-gettext-debuginfo-8.0.30-150400.4.43.1 * php8-tidy-8.0.30-150400.4.43.1 * php8-dom-8.0.30-150400.4.43.1 * php8-xmlreader-8.0.30-150400.4.43.1 * php8-curl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-8.0.30-150400.4.43.1 * php8-openssl-debuginfo-8.0.30-150400.4.43.1 * php8-sockets-8.0.30-150400.4.43.1 * php8-curl-8.0.30-150400.4.43.1 * php8-posix-8.0.30-150400.4.43.1 * php8-debuginfo-8.0.30-150400.4.43.1 * php8-fileinfo-8.0.30-150400.4.43.1 * php8-cli-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-8.0.30-150400.4.43.1 * php8-opcache-8.0.30-150400.4.43.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.43.1 * php8-dba-debuginfo-8.0.30-150400.4.43.1 * php8-pcntl-debuginfo-8.0.30-150400.4.43.1 * php8-8.0.30-150400.4.43.1 * php8-calendar-8.0.30-150400.4.43.1 * php8-tokenizer-8.0.30-150400.4.43.1 * php8-sysvshm-8.0.30-150400.4.43.1 * php8-pcntl-8.0.30-150400.4.43.1 * php8-zlib-debuginfo-8.0.30-150400.4.43.1 * php8-zip-8.0.30-150400.4.43.1 * php8-ftp-debuginfo-8.0.30-150400.4.43.1 * php8-iconv-debuginfo-8.0.30-150400.4.43.1 * php8-soap-8.0.30-150400.4.43.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-8.0.30-150400.4.43.1 * php8-exif-8.0.30-150400.4.43.1 * php8-sodium-8.0.30-150400.4.43.1 * php8-intl-debuginfo-8.0.30-150400.4.43.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.43.1 * php8-pgsql-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-debuginfo-8.0.30-150400.4.43.1 * php8-soap-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-8.0.30-150400.4.43.1 * php8-readline-debuginfo-8.0.30-150400.4.43.1 * php8-devel-8.0.30-150400.4.43.1 * php8-ldap-debuginfo-8.0.30-150400.4.43.1 * php8-zip-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-8.0.30-150400.4.43.1 * php8-gd-debuginfo-8.0.30-150400.4.43.1 * php8-dba-8.0.30-150400.4.43.1 * php8-enchant-8.0.30-150400.4.43.1 * php8-fpm-debuginfo-8.0.30-150400.4.43.1 * php8-sqlite-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.43.1 * php8-bz2-debuginfo-8.0.30-150400.4.43.1 * php8-test-8.0.30-150400.4.43.1 * php8-iconv-8.0.30-150400.4.43.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.43.1 * php8-shmop-debuginfo-8.0.30-150400.4.43.1 * php8-enchant-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-debuginfo-8.0.30-150400.4.43.1 * php8-snmp-8.0.30-150400.4.43.1 * php8-tidy-debuginfo-8.0.30-150400.4.43.1 * php8-odbc-debuginfo-8.0.30-150400.4.43.1 * php8-phar-8.0.30-150400.4.43.1 * php8-snmp-debuginfo-8.0.30-150400.4.43.1 * php8-bcmath-8.0.30-150400.4.43.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-8.0.30-150400.4.43.1 * php8-sqlite-8.0.30-150400.4.43.1 * php8-fpm-8.0.30-150400.4.43.1 * php8-readline-8.0.30-150400.4.43.1 * php8-cli-8.0.30-150400.4.43.1 * php8-dom-debuginfo-8.0.30-150400.4.43.1 * php8-sysvsem-8.0.30-150400.4.43.1 * php8-posix-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-8.0.30-150400.4.43.1 * php8-exif-debuginfo-8.0.30-150400.4.43.1 * php8-calendar-debuginfo-8.0.30-150400.4.43.1 * php8-fpm-debugsource-8.0.30-150400.4.43.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debugsource-8.0.30-150400.4.43.1 * php8-shmop-8.0.30-150400.4.43.1 * php8-sockets-debuginfo-8.0.30-150400.4.43.1 * php8-xsl-8.0.30-150400.4.43.1 * php8-bcmath-debuginfo-8.0.30-150400.4.43.1 * php8-intl-8.0.30-150400.4.43.1 * php8-odbc-8.0.30-150400.4.43.1 * php8-bz2-8.0.30-150400.4.43.1 * php8-opcache-debuginfo-8.0.30-150400.4.43.1 * php8-gettext-8.0.30-150400.4.43.1 * php8-pgsql-8.0.30-150400.4.43.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.43.1 * php8-sodium-debuginfo-8.0.30-150400.4.43.1 * php8-phar-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debugsource-8.0.30-150400.4.43.1 * php8-ftp-8.0.30-150400.4.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * php8-sysvmsg-8.0.30-150400.4.43.1 * php8-xmlwriter-8.0.30-150400.4.43.1 * php8-openssl-8.0.30-150400.4.43.1 * php8-gd-8.0.30-150400.4.43.1 * php8-xsl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debuginfo-8.0.30-150400.4.43.1 * php8-zlib-8.0.30-150400.4.43.1 * php8-ldap-8.0.30-150400.4.43.1 * php8-debugsource-8.0.30-150400.4.43.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-8.0.30-150400.4.43.1 * php8-gettext-debuginfo-8.0.30-150400.4.43.1 * php8-tidy-8.0.30-150400.4.43.1 * php8-dom-8.0.30-150400.4.43.1 * php8-xmlreader-8.0.30-150400.4.43.1 * php8-curl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-8.0.30-150400.4.43.1 * php8-openssl-debuginfo-8.0.30-150400.4.43.1 * php8-sockets-8.0.30-150400.4.43.1 * php8-curl-8.0.30-150400.4.43.1 * php8-posix-8.0.30-150400.4.43.1 * php8-debuginfo-8.0.30-150400.4.43.1 * php8-fileinfo-8.0.30-150400.4.43.1 * php8-cli-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-8.0.30-150400.4.43.1 * php8-opcache-8.0.30-150400.4.43.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.43.1 * php8-dba-debuginfo-8.0.30-150400.4.43.1 * php8-pcntl-debuginfo-8.0.30-150400.4.43.1 * php8-8.0.30-150400.4.43.1 * php8-calendar-8.0.30-150400.4.43.1 * php8-tokenizer-8.0.30-150400.4.43.1 * php8-sysvshm-8.0.30-150400.4.43.1 * php8-pcntl-8.0.30-150400.4.43.1 * php8-zlib-debuginfo-8.0.30-150400.4.43.1 * php8-zip-8.0.30-150400.4.43.1 * php8-ftp-debuginfo-8.0.30-150400.4.43.1 * php8-iconv-debuginfo-8.0.30-150400.4.43.1 * php8-soap-8.0.30-150400.4.43.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-8.0.30-150400.4.43.1 * php8-exif-8.0.30-150400.4.43.1 * php8-sodium-8.0.30-150400.4.43.1 * php8-intl-debuginfo-8.0.30-150400.4.43.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.43.1 * php8-pgsql-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-debuginfo-8.0.30-150400.4.43.1 * php8-soap-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-8.0.30-150400.4.43.1 * php8-readline-debuginfo-8.0.30-150400.4.43.1 * php8-devel-8.0.30-150400.4.43.1 * php8-ldap-debuginfo-8.0.30-150400.4.43.1 * php8-zip-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-8.0.30-150400.4.43.1 * php8-gd-debuginfo-8.0.30-150400.4.43.1 * php8-dba-8.0.30-150400.4.43.1 * php8-enchant-8.0.30-150400.4.43.1 * php8-fpm-debuginfo-8.0.30-150400.4.43.1 * php8-sqlite-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.43.1 * php8-bz2-debuginfo-8.0.30-150400.4.43.1 * php8-test-8.0.30-150400.4.43.1 * php8-iconv-8.0.30-150400.4.43.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.43.1 * php8-shmop-debuginfo-8.0.30-150400.4.43.1 * php8-enchant-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-debuginfo-8.0.30-150400.4.43.1 * php8-snmp-8.0.30-150400.4.43.1 * php8-tidy-debuginfo-8.0.30-150400.4.43.1 * php8-odbc-debuginfo-8.0.30-150400.4.43.1 * php8-phar-8.0.30-150400.4.43.1 * php8-snmp-debuginfo-8.0.30-150400.4.43.1 * php8-bcmath-8.0.30-150400.4.43.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-8.0.30-150400.4.43.1 * php8-sqlite-8.0.30-150400.4.43.1 * php8-fpm-8.0.30-150400.4.43.1 * php8-readline-8.0.30-150400.4.43.1 * php8-cli-8.0.30-150400.4.43.1 * php8-dom-debuginfo-8.0.30-150400.4.43.1 * php8-sysvsem-8.0.30-150400.4.43.1 * php8-posix-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-8.0.30-150400.4.43.1 * php8-exif-debuginfo-8.0.30-150400.4.43.1 * php8-calendar-debuginfo-8.0.30-150400.4.43.1 * php8-fpm-debugsource-8.0.30-150400.4.43.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debugsource-8.0.30-150400.4.43.1 * php8-shmop-8.0.30-150400.4.43.1 * php8-sockets-debuginfo-8.0.30-150400.4.43.1 * php8-xsl-8.0.30-150400.4.43.1 * php8-bcmath-debuginfo-8.0.30-150400.4.43.1 * php8-intl-8.0.30-150400.4.43.1 * php8-odbc-8.0.30-150400.4.43.1 * php8-bz2-8.0.30-150400.4.43.1 * php8-opcache-debuginfo-8.0.30-150400.4.43.1 * php8-gettext-8.0.30-150400.4.43.1 * php8-pgsql-8.0.30-150400.4.43.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.43.1 * php8-sodium-debuginfo-8.0.30-150400.4.43.1 * php8-phar-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debugsource-8.0.30-150400.4.43.1 * php8-ftp-8.0.30-150400.4.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * php8-sysvmsg-8.0.30-150400.4.43.1 * php8-xmlwriter-8.0.30-150400.4.43.1 * php8-openssl-8.0.30-150400.4.43.1 * php8-gd-8.0.30-150400.4.43.1 * php8-xsl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debuginfo-8.0.30-150400.4.43.1 * php8-zlib-8.0.30-150400.4.43.1 * php8-ldap-8.0.30-150400.4.43.1 * php8-debugsource-8.0.30-150400.4.43.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-8.0.30-150400.4.43.1 * php8-gettext-debuginfo-8.0.30-150400.4.43.1 * php8-tidy-8.0.30-150400.4.43.1 * php8-dom-8.0.30-150400.4.43.1 * php8-xmlreader-8.0.30-150400.4.43.1 * php8-curl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-8.0.30-150400.4.43.1 * php8-openssl-debuginfo-8.0.30-150400.4.43.1 * php8-sockets-8.0.30-150400.4.43.1 * php8-curl-8.0.30-150400.4.43.1 * php8-posix-8.0.30-150400.4.43.1 * php8-debuginfo-8.0.30-150400.4.43.1 * php8-fileinfo-8.0.30-150400.4.43.1 * php8-cli-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-8.0.30-150400.4.43.1 * php8-opcache-8.0.30-150400.4.43.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.43.1 * php8-dba-debuginfo-8.0.30-150400.4.43.1 * php8-pcntl-debuginfo-8.0.30-150400.4.43.1 * php8-8.0.30-150400.4.43.1 * php8-calendar-8.0.30-150400.4.43.1 * php8-tokenizer-8.0.30-150400.4.43.1 * php8-sysvshm-8.0.30-150400.4.43.1 * php8-pcntl-8.0.30-150400.4.43.1 * php8-zlib-debuginfo-8.0.30-150400.4.43.1 * php8-zip-8.0.30-150400.4.43.1 * php8-ftp-debuginfo-8.0.30-150400.4.43.1 * php8-iconv-debuginfo-8.0.30-150400.4.43.1 * php8-soap-8.0.30-150400.4.43.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-8.0.30-150400.4.43.1 * php8-exif-8.0.30-150400.4.43.1 * php8-sodium-8.0.30-150400.4.43.1 * php8-intl-debuginfo-8.0.30-150400.4.43.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.43.1 * php8-pgsql-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-debuginfo-8.0.30-150400.4.43.1 * php8-soap-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-8.0.30-150400.4.43.1 * php8-readline-debuginfo-8.0.30-150400.4.43.1 * php8-devel-8.0.30-150400.4.43.1 * php8-ldap-debuginfo-8.0.30-150400.4.43.1 * php8-zip-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-8.0.30-150400.4.43.1 * php8-gd-debuginfo-8.0.30-150400.4.43.1 * php8-dba-8.0.30-150400.4.43.1 * php8-enchant-8.0.30-150400.4.43.1 * php8-fpm-debuginfo-8.0.30-150400.4.43.1 * php8-sqlite-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.43.1 * php8-bz2-debuginfo-8.0.30-150400.4.43.1 * php8-test-8.0.30-150400.4.43.1 * php8-iconv-8.0.30-150400.4.43.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.43.1 * php8-shmop-debuginfo-8.0.30-150400.4.43.1 * php8-enchant-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-debuginfo-8.0.30-150400.4.43.1 * php8-snmp-8.0.30-150400.4.43.1 * php8-tidy-debuginfo-8.0.30-150400.4.43.1 * php8-odbc-debuginfo-8.0.30-150400.4.43.1 * php8-phar-8.0.30-150400.4.43.1 * php8-snmp-debuginfo-8.0.30-150400.4.43.1 * php8-bcmath-8.0.30-150400.4.43.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-8.0.30-150400.4.43.1 * php8-sqlite-8.0.30-150400.4.43.1 * php8-fpm-8.0.30-150400.4.43.1 * php8-readline-8.0.30-150400.4.43.1 * php8-cli-8.0.30-150400.4.43.1 * php8-dom-debuginfo-8.0.30-150400.4.43.1 * php8-sysvsem-8.0.30-150400.4.43.1 * php8-posix-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-8.0.30-150400.4.43.1 * php8-exif-debuginfo-8.0.30-150400.4.43.1 * php8-calendar-debuginfo-8.0.30-150400.4.43.1 * php8-fpm-debugsource-8.0.30-150400.4.43.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debugsource-8.0.30-150400.4.43.1 * php8-shmop-8.0.30-150400.4.43.1 * php8-sockets-debuginfo-8.0.30-150400.4.43.1 * php8-xsl-8.0.30-150400.4.43.1 * php8-bcmath-debuginfo-8.0.30-150400.4.43.1 * php8-intl-8.0.30-150400.4.43.1 * php8-odbc-8.0.30-150400.4.43.1 * php8-bz2-8.0.30-150400.4.43.1 * php8-opcache-debuginfo-8.0.30-150400.4.43.1 * php8-gettext-8.0.30-150400.4.43.1 * php8-pgsql-8.0.30-150400.4.43.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.43.1 * php8-sodium-debuginfo-8.0.30-150400.4.43.1 * php8-phar-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debugsource-8.0.30-150400.4.43.1 * php8-ftp-8.0.30-150400.4.43.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * php8-sysvmsg-8.0.30-150400.4.43.1 * php8-xmlwriter-8.0.30-150400.4.43.1 * php8-openssl-8.0.30-150400.4.43.1 * php8-gd-8.0.30-150400.4.43.1 * php8-xsl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debuginfo-8.0.30-150400.4.43.1 * php8-zlib-8.0.30-150400.4.43.1 * php8-ldap-8.0.30-150400.4.43.1 * php8-debugsource-8.0.30-150400.4.43.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-8.0.30-150400.4.43.1 * php8-gettext-debuginfo-8.0.30-150400.4.43.1 * php8-tidy-8.0.30-150400.4.43.1 * php8-dom-8.0.30-150400.4.43.1 * php8-xmlreader-8.0.30-150400.4.43.1 * php8-curl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-8.0.30-150400.4.43.1 * php8-openssl-debuginfo-8.0.30-150400.4.43.1 * php8-sockets-8.0.30-150400.4.43.1 * php8-curl-8.0.30-150400.4.43.1 * php8-posix-8.0.30-150400.4.43.1 * php8-debuginfo-8.0.30-150400.4.43.1 * php8-fileinfo-8.0.30-150400.4.43.1 * php8-cli-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-8.0.30-150400.4.43.1 * php8-opcache-8.0.30-150400.4.43.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.43.1 * php8-dba-debuginfo-8.0.30-150400.4.43.1 * php8-pcntl-debuginfo-8.0.30-150400.4.43.1 * php8-8.0.30-150400.4.43.1 * php8-calendar-8.0.30-150400.4.43.1 * php8-tokenizer-8.0.30-150400.4.43.1 * php8-sysvshm-8.0.30-150400.4.43.1 * php8-pcntl-8.0.30-150400.4.43.1 * php8-zlib-debuginfo-8.0.30-150400.4.43.1 * php8-zip-8.0.30-150400.4.43.1 * php8-ftp-debuginfo-8.0.30-150400.4.43.1 * php8-iconv-debuginfo-8.0.30-150400.4.43.1 * php8-soap-8.0.30-150400.4.43.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-8.0.30-150400.4.43.1 * php8-exif-8.0.30-150400.4.43.1 * php8-sodium-8.0.30-150400.4.43.1 * php8-intl-debuginfo-8.0.30-150400.4.43.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.43.1 * php8-pgsql-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-debuginfo-8.0.30-150400.4.43.1 * php8-soap-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-8.0.30-150400.4.43.1 * php8-readline-debuginfo-8.0.30-150400.4.43.1 * php8-devel-8.0.30-150400.4.43.1 * php8-ldap-debuginfo-8.0.30-150400.4.43.1 * php8-zip-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-8.0.30-150400.4.43.1 * php8-gd-debuginfo-8.0.30-150400.4.43.1 * php8-dba-8.0.30-150400.4.43.1 * php8-enchant-8.0.30-150400.4.43.1 * php8-fpm-debuginfo-8.0.30-150400.4.43.1 * php8-sqlite-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.43.1 * php8-bz2-debuginfo-8.0.30-150400.4.43.1 * php8-test-8.0.30-150400.4.43.1 * php8-iconv-8.0.30-150400.4.43.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.43.1 * php8-shmop-debuginfo-8.0.30-150400.4.43.1 * php8-enchant-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-debuginfo-8.0.30-150400.4.43.1 * php8-snmp-8.0.30-150400.4.43.1 * php8-tidy-debuginfo-8.0.30-150400.4.43.1 * php8-odbc-debuginfo-8.0.30-150400.4.43.1 * php8-phar-8.0.30-150400.4.43.1 * php8-snmp-debuginfo-8.0.30-150400.4.43.1 * php8-bcmath-8.0.30-150400.4.43.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-8.0.30-150400.4.43.1 * php8-sqlite-8.0.30-150400.4.43.1 * php8-fpm-8.0.30-150400.4.43.1 * php8-readline-8.0.30-150400.4.43.1 * php8-cli-8.0.30-150400.4.43.1 * php8-dom-debuginfo-8.0.30-150400.4.43.1 * php8-sysvsem-8.0.30-150400.4.43.1 * php8-posix-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-8.0.30-150400.4.43.1 * php8-exif-debuginfo-8.0.30-150400.4.43.1 * php8-calendar-debuginfo-8.0.30-150400.4.43.1 * php8-fpm-debugsource-8.0.30-150400.4.43.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debugsource-8.0.30-150400.4.43.1 * php8-shmop-8.0.30-150400.4.43.1 * php8-sockets-debuginfo-8.0.30-150400.4.43.1 * php8-xsl-8.0.30-150400.4.43.1 * php8-bcmath-debuginfo-8.0.30-150400.4.43.1 * php8-intl-8.0.30-150400.4.43.1 * php8-odbc-8.0.30-150400.4.43.1 * php8-bz2-8.0.30-150400.4.43.1 * php8-opcache-debuginfo-8.0.30-150400.4.43.1 * php8-gettext-8.0.30-150400.4.43.1 * php8-pgsql-8.0.30-150400.4.43.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.43.1 * php8-sodium-debuginfo-8.0.30-150400.4.43.1 * php8-phar-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debugsource-8.0.30-150400.4.43.1 * php8-ftp-8.0.30-150400.4.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * php8-sysvmsg-8.0.30-150400.4.43.1 * php8-xmlwriter-8.0.30-150400.4.43.1 * php8-openssl-8.0.30-150400.4.43.1 * php8-gd-8.0.30-150400.4.43.1 * php8-xsl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debuginfo-8.0.30-150400.4.43.1 * php8-zlib-8.0.30-150400.4.43.1 * php8-ldap-8.0.30-150400.4.43.1 * php8-debugsource-8.0.30-150400.4.43.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-8.0.30-150400.4.43.1 * php8-gettext-debuginfo-8.0.30-150400.4.43.1 * php8-tidy-8.0.30-150400.4.43.1 * php8-dom-8.0.30-150400.4.43.1 * php8-xmlreader-8.0.30-150400.4.43.1 * php8-curl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-8.0.30-150400.4.43.1 * php8-openssl-debuginfo-8.0.30-150400.4.43.1 * php8-sockets-8.0.30-150400.4.43.1 * php8-curl-8.0.30-150400.4.43.1 * php8-posix-8.0.30-150400.4.43.1 * php8-debuginfo-8.0.30-150400.4.43.1 * php8-fileinfo-8.0.30-150400.4.43.1 * php8-cli-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-8.0.30-150400.4.43.1 * php8-opcache-8.0.30-150400.4.43.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.43.1 * php8-dba-debuginfo-8.0.30-150400.4.43.1 * php8-pcntl-debuginfo-8.0.30-150400.4.43.1 * php8-8.0.30-150400.4.43.1 * php8-calendar-8.0.30-150400.4.43.1 * php8-tokenizer-8.0.30-150400.4.43.1 * php8-sysvshm-8.0.30-150400.4.43.1 * php8-pcntl-8.0.30-150400.4.43.1 * php8-zlib-debuginfo-8.0.30-150400.4.43.1 * php8-zip-8.0.30-150400.4.43.1 * php8-ftp-debuginfo-8.0.30-150400.4.43.1 * php8-iconv-debuginfo-8.0.30-150400.4.43.1 * php8-soap-8.0.30-150400.4.43.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-8.0.30-150400.4.43.1 * php8-exif-8.0.30-150400.4.43.1 * php8-sodium-8.0.30-150400.4.43.1 * php8-intl-debuginfo-8.0.30-150400.4.43.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.43.1 * php8-pgsql-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-debuginfo-8.0.30-150400.4.43.1 * php8-soap-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-8.0.30-150400.4.43.1 * php8-readline-debuginfo-8.0.30-150400.4.43.1 * php8-devel-8.0.30-150400.4.43.1 * php8-ldap-debuginfo-8.0.30-150400.4.43.1 * php8-zip-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-8.0.30-150400.4.43.1 * php8-gd-debuginfo-8.0.30-150400.4.43.1 * php8-dba-8.0.30-150400.4.43.1 * php8-enchant-8.0.30-150400.4.43.1 * php8-fpm-debuginfo-8.0.30-150400.4.43.1 * php8-sqlite-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.43.1 * php8-bz2-debuginfo-8.0.30-150400.4.43.1 * php8-test-8.0.30-150400.4.43.1 * php8-iconv-8.0.30-150400.4.43.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.43.1 * php8-shmop-debuginfo-8.0.30-150400.4.43.1 * php8-enchant-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-debuginfo-8.0.30-150400.4.43.1 * php8-snmp-8.0.30-150400.4.43.1 * php8-tidy-debuginfo-8.0.30-150400.4.43.1 * php8-odbc-debuginfo-8.0.30-150400.4.43.1 * php8-phar-8.0.30-150400.4.43.1 * php8-snmp-debuginfo-8.0.30-150400.4.43.1 * php8-bcmath-8.0.30-150400.4.43.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-8.0.30-150400.4.43.1 * php8-sqlite-8.0.30-150400.4.43.1 * php8-fpm-8.0.30-150400.4.43.1 * php8-readline-8.0.30-150400.4.43.1 * php8-cli-8.0.30-150400.4.43.1 * php8-dom-debuginfo-8.0.30-150400.4.43.1 * php8-sysvsem-8.0.30-150400.4.43.1 * php8-posix-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-8.0.30-150400.4.43.1 * php8-exif-debuginfo-8.0.30-150400.4.43.1 * php8-calendar-debuginfo-8.0.30-150400.4.43.1 * php8-fpm-debugsource-8.0.30-150400.4.43.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debugsource-8.0.30-150400.4.43.1 * php8-shmop-8.0.30-150400.4.43.1 * php8-sockets-debuginfo-8.0.30-150400.4.43.1 * php8-xsl-8.0.30-150400.4.43.1 * php8-bcmath-debuginfo-8.0.30-150400.4.43.1 * php8-intl-8.0.30-150400.4.43.1 * php8-odbc-8.0.30-150400.4.43.1 * php8-bz2-8.0.30-150400.4.43.1 * php8-opcache-debuginfo-8.0.30-150400.4.43.1 * php8-gettext-8.0.30-150400.4.43.1 * php8-pgsql-8.0.30-150400.4.43.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.43.1 * php8-sodium-debuginfo-8.0.30-150400.4.43.1 * php8-phar-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debugsource-8.0.30-150400.4.43.1 * php8-ftp-8.0.30-150400.4.43.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * php8-sysvmsg-8.0.30-150400.4.43.1 * php8-xmlwriter-8.0.30-150400.4.43.1 * php8-openssl-8.0.30-150400.4.43.1 * php8-gd-8.0.30-150400.4.43.1 * php8-xsl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debuginfo-8.0.30-150400.4.43.1 * php8-zlib-8.0.30-150400.4.43.1 * php8-ldap-8.0.30-150400.4.43.1 * php8-debugsource-8.0.30-150400.4.43.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-8.0.30-150400.4.43.1 * php8-gettext-debuginfo-8.0.30-150400.4.43.1 * php8-tidy-8.0.30-150400.4.43.1 * php8-dom-8.0.30-150400.4.43.1 * php8-xmlreader-8.0.30-150400.4.43.1 * php8-curl-debuginfo-8.0.30-150400.4.43.1 * php8-pdo-8.0.30-150400.4.43.1 * php8-openssl-debuginfo-8.0.30-150400.4.43.1 * php8-sockets-8.0.30-150400.4.43.1 * php8-curl-8.0.30-150400.4.43.1 * php8-posix-8.0.30-150400.4.43.1 * php8-debuginfo-8.0.30-150400.4.43.1 * php8-fileinfo-8.0.30-150400.4.43.1 * php8-cli-debuginfo-8.0.30-150400.4.43.1 * php8-ctype-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-8.0.30-150400.4.43.1 * php8-opcache-8.0.30-150400.4.43.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.43.1 * php8-dba-debuginfo-8.0.30-150400.4.43.1 * php8-pcntl-debuginfo-8.0.30-150400.4.43.1 * php8-8.0.30-150400.4.43.1 * php8-calendar-8.0.30-150400.4.43.1 * php8-tokenizer-8.0.30-150400.4.43.1 * php8-sysvshm-8.0.30-150400.4.43.1 * php8-pcntl-8.0.30-150400.4.43.1 * php8-zlib-debuginfo-8.0.30-150400.4.43.1 * php8-zip-8.0.30-150400.4.43.1 * php8-ftp-debuginfo-8.0.30-150400.4.43.1 * php8-iconv-debuginfo-8.0.30-150400.4.43.1 * php8-soap-8.0.30-150400.4.43.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.43.1 * php8-embed-8.0.30-150400.4.43.1 * php8-exif-8.0.30-150400.4.43.1 * php8-sodium-8.0.30-150400.4.43.1 * php8-intl-debuginfo-8.0.30-150400.4.43.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.43.1 * php8-pgsql-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-debuginfo-8.0.30-150400.4.43.1 * php8-soap-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-debuginfo-8.0.30-150400.4.43.1 * php8-mysql-8.0.30-150400.4.43.1 * php8-readline-debuginfo-8.0.30-150400.4.43.1 * php8-devel-8.0.30-150400.4.43.1 * php8-ldap-debuginfo-8.0.30-150400.4.43.1 * php8-zip-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-8.0.30-150400.4.43.1 * php8-gd-debuginfo-8.0.30-150400.4.43.1 * php8-dba-8.0.30-150400.4.43.1 * php8-enchant-8.0.30-150400.4.43.1 * php8-fpm-debuginfo-8.0.30-150400.4.43.1 * php8-sqlite-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.43.1 * php8-bz2-debuginfo-8.0.30-150400.4.43.1 * php8-test-8.0.30-150400.4.43.1 * php8-iconv-8.0.30-150400.4.43.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.43.1 * php8-shmop-debuginfo-8.0.30-150400.4.43.1 * php8-enchant-debuginfo-8.0.30-150400.4.43.1 * php8-mbstring-debuginfo-8.0.30-150400.4.43.1 * php8-snmp-8.0.30-150400.4.43.1 * php8-tidy-debuginfo-8.0.30-150400.4.43.1 * php8-odbc-debuginfo-8.0.30-150400.4.43.1 * php8-phar-8.0.30-150400.4.43.1 * php8-snmp-debuginfo-8.0.30-150400.4.43.1 * php8-bcmath-8.0.30-150400.4.43.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.43.1 * php8-gmp-8.0.30-150400.4.43.1 * php8-sqlite-8.0.30-150400.4.43.1 * php8-fpm-8.0.30-150400.4.43.1 * php8-readline-8.0.30-150400.4.43.1 * php8-cli-8.0.30-150400.4.43.1 * php8-dom-debuginfo-8.0.30-150400.4.43.1 * php8-sysvsem-8.0.30-150400.4.43.1 * php8-posix-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-8.0.30-150400.4.43.1 * php8-exif-debuginfo-8.0.30-150400.4.43.1 * php8-calendar-debuginfo-8.0.30-150400.4.43.1 * php8-fpm-debugsource-8.0.30-150400.4.43.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.43.1 * php8-fastcgi-debugsource-8.0.30-150400.4.43.1 * php8-shmop-8.0.30-150400.4.43.1 * php8-sockets-debuginfo-8.0.30-150400.4.43.1 * php8-xsl-8.0.30-150400.4.43.1 * php8-bcmath-debuginfo-8.0.30-150400.4.43.1 * php8-intl-8.0.30-150400.4.43.1 * php8-odbc-8.0.30-150400.4.43.1 * php8-bz2-8.0.30-150400.4.43.1 * php8-opcache-debuginfo-8.0.30-150400.4.43.1 * php8-gettext-8.0.30-150400.4.43.1 * php8-pgsql-8.0.30-150400.4.43.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.43.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.43.1 * php8-sodium-debuginfo-8.0.30-150400.4.43.1 * php8-phar-debuginfo-8.0.30-150400.4.43.1 * php8-embed-debugsource-8.0.30-150400.4.43.1 * php8-ftp-8.0.30-150400.4.43.1 ## References: * https://www.suse.com/security/cve/CVE-2024-5458.html * https://bugzilla.suse.com/show_bug.cgi?id=1226073

1 0

SUSE-SU-2024:2040-1: important: Security update for booth
by OPENSUSE-UPDATES 17 Jun '24

17 Jun '24

# Security update for booth Announcement ID: SUSE-SU-2024:2040-1 Rating: important References: * bsc#1226032 Cross-References: * CVE-2024-3049 CVSS scores: * CVE-2024-3049 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-3049 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for booth fixes the following issues: * CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2040=1 openSUSE-SLE-15.6-2024-2040=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2024-2040=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * booth-debugsource-1.1+git0.09b0074-150600.3.3.1 * booth-debuginfo-1.1+git0.09b0074-150600.3.3.1 * booth-1.1+git0.09b0074-150600.3.3.1 * booth-test-1.1+git0.09b0074-150600.3.3.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * booth-debugsource-1.1+git0.09b0074-150600.3.3.1 * booth-debuginfo-1.1+git0.09b0074-150600.3.3.1 * booth-1.1+git0.09b0074-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-3049.html * https://bugzilla.suse.com/show_bug.cgi?id=1226032

1 0

SUSE-SU-2024:2042-1: important: Security update for booth
by OPENSUSE-UPDATES 17 Jun '24

17 Jun '24

# Security update for booth Announcement ID: SUSE-SU-2024:2042-1 Rating: important References: * bsc#1226032 Cross-References: * CVE-2024-3049 CVSS scores: * CVE-2024-3049 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-3049 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for booth fixes the following issues: * CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2042=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-2042=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * booth-1.0+20210519.bfb2f92-150400.3.6.1 * booth-debuginfo-1.0+20210519.bfb2f92-150400.3.6.1 * booth-debugsource-1.0+20210519.bfb2f92-150400.3.6.1 * booth-test-1.0+20210519.bfb2f92-150400.3.6.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * booth-1.0+20210519.bfb2f92-150400.3.6.1 * booth-debuginfo-1.0+20210519.bfb2f92-150400.3.6.1 * booth-debugsource-1.0+20210519.bfb2f92-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-3049.html * https://bugzilla.suse.com/show_bug.cgi?id=1226032

1 0

SUSE-RU-2024:2044-1: moderate: Recommended update for netavark
by OPENSUSE-UPDATES 17 Jun '24

17 Jun '24

# Recommended update for netavark Announcement ID: SUSE-RU-2024:2044-1 Rating: moderate References: * jsc#MSC-800 Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature can now be installed. ## Description: This update for netavark and aardvark-dns fixes the following issues: * Update to version 1.11.0 * Remove redundant source: cargo_config ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2044=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-2044=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-2044=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2044=1 openSUSE-SLE-15.5-2024-2044=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2044=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * netavark-1.11.0-150500.3.6.1 * aardvark-dns-1.11.0-150500.3.6.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * netavark-1.11.0-150500.3.6.1 * aardvark-dns-1.11.0-150500.3.6.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * netavark-1.11.0-150500.3.6.1 * aardvark-dns-1.11.0-150500.3.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * netavark-1.11.0-150500.3.6.1 * aardvark-dns-1.11.0-150500.3.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * netavark-1.11.0-150500.3.6.1 * aardvark-dns-1.11.0-150500.3.6.1 ## References: * https://jira.suse.com/browse/MSC-800

1 0

SUSE-SU-2024:2032-1: moderate: Security update for mariadb
by OPENSUSE-UPDATES 14 Jun '24

14 Jun '24

# Security update for mariadb Announcement ID: SUSE-SU-2024:2032-1 Rating: moderate References: * bsc#1225983 Cross-References: * CVE-2024-21096 CVSS scores: * CVE-2024-21096 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * Galera for Ericsson 15 SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for mariadb fixes the following issues: * CVE-2024-21096: Fixed mysqldump unspecified vulnerability (bsc#1225983). * Update to 10.11.8. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2032=1 openSUSE-SLE-15.6-2024-2032=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2032=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2032=1 * Galera for Ericsson 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-ERICSSON-2024-2032=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * mariadb-rpm-macros-10.11.8-150600.4.3.1 * mariadb-tools-10.11.8-150600.4.3.1 * mariadb-tools-debuginfo-10.11.8-150600.4.3.1 * mariadb-bench-debuginfo-10.11.8-150600.4.3.1 * mariadb-test-10.11.8-150600.4.3.1 * mariadb-10.11.8-150600.4.3.1 * mariadb-debuginfo-10.11.8-150600.4.3.1 * mariadb-test-debuginfo-10.11.8-150600.4.3.1 * libmariadbd-devel-10.11.8-150600.4.3.1 * mariadb-client-debuginfo-10.11.8-150600.4.3.1 * mariadb-galera-10.11.8-150600.4.3.1 * mariadb-client-10.11.8-150600.4.3.1 * mariadb-bench-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * libmariadbd19-10.11.8-150600.4.3.1 * libmariadbd19-debuginfo-10.11.8-150600.4.3.1 * openSUSE Leap 15.6 (noarch) * mariadb-errormessages-10.11.8-150600.4.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * mariadb-debuginfo-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * mariadb-galera-10.11.8-150600.4.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * mariadb-tools-10.11.8-150600.4.3.1 * mariadb-tools-debuginfo-10.11.8-150600.4.3.1 * mariadb-10.11.8-150600.4.3.1 * mariadb-debuginfo-10.11.8-150600.4.3.1 * libmariadbd-devel-10.11.8-150600.4.3.1 * mariadb-client-debuginfo-10.11.8-150600.4.3.1 * mariadb-client-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * libmariadbd19-10.11.8-150600.4.3.1 * libmariadbd19-debuginfo-10.11.8-150600.4.3.1 * Server Applications Module 15-SP6 (noarch) * mariadb-errormessages-10.11.8-150600.4.3.1 * Galera for Ericsson 15 SP6 (x86_64) * mariadb-debuginfo-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * mariadb-galera-10.11.8-150600.4.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21096.html * https://bugzilla.suse.com/show_bug.cgi?id=1225983

1 0

SUSE-SU-2024:2031-1: important: Security update for podman
by OPENSUSE-UPDATES 14 Jun '24

14 Jun '24

# Security update for podman Announcement ID: SUSE-SU-2024:2031-1 Rating: important References: * bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786 * CVE-2024-3727 CVSS scores: * CVE-2024-3727 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for podman fixes the following issues: * Update to version 4.9.5 * CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122) * CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2031=1 openSUSE-SLE-15.5-2024-2031=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2031=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2031=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-2031=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-2031=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * podmansh-4.9.5-150500.3.12.1 * podman-4.9.5-150500.3.12.1 * podman-debuginfo-4.9.5-150500.3.12.1 * podman-remote-debuginfo-4.9.5-150500.3.12.1 * podman-remote-4.9.5-150500.3.12.1 * openSUSE Leap 15.5 (noarch) * podman-docker-4.9.5-150500.3.12.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * podmansh-4.9.5-150500.3.12.1 * podman-4.9.5-150500.3.12.1 * podman-debuginfo-4.9.5-150500.3.12.1 * podman-remote-debuginfo-4.9.5-150500.3.12.1 * podman-remote-4.9.5-150500.3.12.1 * openSUSE Leap 15.6 (noarch) * podman-docker-4.9.5-150500.3.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * podmansh-4.9.5-150500.3.12.1 * podman-4.9.5-150500.3.12.1 * podman-debuginfo-4.9.5-150500.3.12.1 * podman-remote-debuginfo-4.9.5-150500.3.12.1 * podman-remote-4.9.5-150500.3.12.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.12.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * podmansh-4.9.5-150500.3.12.1 * podman-4.9.5-150500.3.12.1 * podman-debuginfo-4.9.5-150500.3.12.1 * podman-remote-debuginfo-4.9.5-150500.3.12.1 * podman-remote-4.9.5-150500.3.12.1 * Containers Module 15-SP5 (noarch) * podman-docker-4.9.5-150500.3.12.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * podmansh-4.9.5-150500.3.12.1 * podman-4.9.5-150500.3.12.1 * podman-debuginfo-4.9.5-150500.3.12.1 * podman-remote-debuginfo-4.9.5-150500.3.12.1 * podman-remote-4.9.5-150500.3.12.1 * Containers Module 15-SP6 (noarch) * podman-docker-4.9.5-150500.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24786.html * https://www.suse.com/security/cve/CVE-2024-3727.html * https://bugzilla.suse.com/show_bug.cgi?id=1224122 * https://bugzilla.suse.com/show_bug.cgi?id=1226136

1 0

SUSE-RU-2024:1566-2: moderate: Recommended update for catatonit
by OPENSUSE-UPDATES 14 Jun '24

14 Jun '24

# Recommended update for catatonit Announcement ID: SUSE-RU-2024:1566-2 Rating: moderate References: Affected Products: * Containers Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for catatonit fixes the following issues: * Update to catatonit v0.2.0 * Change license to GPL-2.0-or-later ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1566=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-1566=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * catatonit-debuginfo-0.2.0-150500.3.3.1 * catatonit-0.2.0-150500.3.3.1 * catatonit-debugsource-0.2.0-150500.3.3.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * catatonit-debuginfo-0.2.0-150500.3.3.1 * catatonit-0.2.0-150500.3.3.1 * catatonit-debugsource-0.2.0-150500.3.3.1

1 0

openSUSE-RU-2024:0160-1: moderate: Recommended update for plasma5-workspace
by maintenance＠opensuse.org 13 Jun '24

13 Jun '24

openSUSE Recommended Update: Recommended update for plasma5-workspace ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0160-1 Rating: moderate References: #1226110 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: plasma5-workspace was updated to fix the following issue: - Fixed a regression introduced by the preceding change (kde#487912, boo#1226110): Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-160=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): gmenudbusmenuproxy-5.27.9-bp155.2.9.1 plasma5-session-wayland-5.27.9-bp155.2.9.1 plasma5-workspace-5.27.9-bp155.2.9.1 plasma5-workspace-devel-5.27.9-bp155.2.9.1 plasma5-workspace-libs-5.27.9-bp155.2.9.1 xembedsniproxy-5.27.9-bp155.2.9.1 - openSUSE Backports SLE-15-SP5 (noarch): plasma5-session-5.27.9-bp155.2.9.1 plasma5-workspace-lang-5.27.9-bp155.2.9.1 References: https://bugzilla.suse.com/1226110

1 0

SUSE-RU-2024:2021-1: moderate: Recommended update for iputils
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Recommended update for iputils Announcement ID: SUSE-RU-2024:2021-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for iputils fixes the following issue: * After upstream merged the fix, update git commit hashes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2021=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2021=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2021=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2021=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2021=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2021=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2021=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-2021=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2021=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * rarpd-debuginfo-20211215-150400.3.11.1 * iputils-debuginfo-20211215-150400.3.11.1 * rarpd-20211215-150400.3.11.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rarpd-20211215-150400.3.11.1 * iputils-debuginfo-20211215-150400.3.11.1 * rarpd-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * rarpd-20211215-150400.3.11.1 * iputils-debuginfo-20211215-150400.3.11.1 * rarpd-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1

1 0

SUSE-RU-2024:2022-1: moderate: Recommended update for chrony
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Recommended update for chrony Announcement ID: SUSE-RU-2024:2022-1 Rating: moderate References: * bsc#1213551 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for chrony fixes the following issues: * Use shorter NTS-KE retry interval when network is down (bsc#1213551) * Use make quickcheck instead of make check to avoid more than 1h build times and failures due to timeouts. This was the default before 3.2 but it changed to make tests more reliable ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2022=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2022=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2022=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2022=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2022=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2022=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2022=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2022=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2022=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2022=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2022=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2022=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2022=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2022=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2022=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2022=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2022=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2022=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2022=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2022=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * openSUSE Leap 15.4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-openSUSE-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * openSUSE Leap Micro 5.3 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * openSUSE Leap Micro 5.4 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * openSUSE Leap 15.5 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-openSUSE-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * openSUSE Leap 15.6 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-openSUSE-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.3 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.4 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.5 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * Basesystem Module 15-SP5 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * Basesystem Module 15-SP6 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Manager Proxy 4.3 (x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Manager Proxy 4.3 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Manager Retail Branch Server 4.3 (x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Manager Retail Branch Server 4.3 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Manager Server 4.3 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213551

1 0

SUSE-RU-2024:2023-1: moderate: Recommended update for socat
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Recommended update for socat Announcement ID: SUSE-RU-2024:2023-1 Rating: moderate References: * bsc#1160293 * jsc#PED-8413 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has one fix can now be installed. ## Description: This update for socat fixes the following issues: socat is updated to 1.8.0.0: Primary feature is enabling TLS 1.3 support. (jsc#PED-8413) * Support for network namespaces (option netns) * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following) * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL * New script socat-mux.sh allows n-to-1 / 1-to-n communications * New script socat-broker.sh allows group communications * Experimental socks5 client feature * Address ACCEPT-FD for systemd "inetd" mode * UDP-Lite and DCCP address types * Addresses SOCKETPAIR and SHELL * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets * Simple statistics output with Socat option --statistics and with SIGUSR1 * A couple of new options, many fixes and corrections, see file CHANGES Update to 1.7.4.4: * FIX: In error.c msg2() there was a stack overflow on long messages: The terminating \0 Byte was written behind the last position. * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets arrived. * FIX: a couple of weaknesses and errors when accessing invalid or incompatible file system entries with UNIX domain, file, and generic addresses. * FIX: bad parser error message on "socat /tmp/x\"x/x -" Update to 1.7.4.3: * fixes the TCP_INFO issue that broke building on non-Linux platforms. * building on AIX works again. * A few more corrections and improvements have been added Update to version 1.7.4.2: * Fixes a lot of bugs, e.g., for options -r and -R. * Further bugfixes, see the CHANGES file Update to 1.7.4.1: Security: * Buffer size option (-b) is internally doubled for CR-CRLF conversion, but not checked for integer overflow. This could lead to heap based buffer overflow, assuming the attacker could provide this parameter. * Many further bugfixes and new features, see the CHANGES file ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2023=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2023=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2023=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2023=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2023=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2023=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2023=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2023=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2023=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2023=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2023=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2023=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2023=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2023=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2023=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-extra-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1160293 * https://jira.suse.com/browse/PED-8413

1 0

SUSE-RU-2024:2024-1: moderate: Recommended update for jitterentropy
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Recommended update for jitterentropy Announcement ID: SUSE-RU-2024:2024-1 Rating: moderate References: * bsc#1209627 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for jitterentropy fixes the following issues: * Fixed a stack corruption on s390x: [bsc#1209627] * Output size of the STCKE command on s390x is 16 bytes, compared to 8 bytes of the STCK command. Fix a stack corruption in the s390x version of jent_get_nstime(). Add some more detailed information on the STCKE command. Updated to 3.4.1 * add FIPS 140 hints to man page * simplify the test tool to search for optimal configurations * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0 * enhancement: add ARM64 assembler code to read high-res timer ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2024=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2024=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2024=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2024=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2024=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2024=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2024=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2024=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2024=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2024=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2024=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * jitterentropy-devel-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * jitterentropy-devel-static-3.4.1-150000.1.12.1 * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * openSUSE Leap 15.5 (x86_64) * libjitterentropy3-32bit-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-32bit-3.4.1-150000.1.12.1 * libjitterentropy3-32bit-3.4.1-150000.1.12.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * jitterentropy-devel-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * jitterentropy-devel-static-3.4.1-150000.1.12.1 * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * openSUSE Leap 15.6 (x86_64) * libjitterentropy3-32bit-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-32bit-3.4.1-150000.1.12.1 * libjitterentropy3-32bit-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x) * jitterentropy-devel-static-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x) * jitterentropy-devel-static-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * jitterentropy-devel-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * jitterentropy-devel-static-3.4.1-150000.1.12.1 * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * Basesystem Module 15-SP5 (x86_64) * libjitterentropy3-32bit-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-32bit-3.4.1-150000.1.12.1 * libjitterentropy3-32bit-3.4.1-150000.1.12.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * jitterentropy-devel-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * jitterentropy-devel-static-3.4.1-150000.1.12.1 * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * Basesystem Module 15-SP6 (x86_64) * libjitterentropy3-32bit-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-32bit-3.4.1-150000.1.12.1 * libjitterentropy3-32bit-3.4.1-150000.1.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1209627

1 0

SUSE-SU-2024:1571-2: important: Security update for python-pymongo
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Security update for python-pymongo Announcement ID: SUSE-SU-2024:1571-2 Rating: important References: * bsc#1222492 Cross-References: * CVE-2024-21506 CVSS scores: * CVE-2024-21506 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for python-pymongo fixes the following issues: * CVE-2024-21506: Fixed out-of-bounds read in the BSON module (bsc#1222492) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1571=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1571=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python3-pymongo-3.11.0-150300.3.3.1 * python-pymongo-debugsource-3.11.0-150300.3.3.1 * python-pymongo-debuginfo-3.11.0-150300.3.3.1 * python3-pymongo-debuginfo-3.11.0-150300.3.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-pymongo-3.11.0-150300.3.3.1 * python-pymongo-debugsource-3.11.0-150300.3.3.1 * python-pymongo-debuginfo-3.11.0-150300.3.3.1 * python3-pymongo-debuginfo-3.11.0-150300.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21506.html * https://bugzilla.suse.com/show_bug.cgi?id=1222492

1 0

SUSE-SU-2024:2028-1: moderate: Security update for tiff
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Security update for tiff Announcement ID: SUSE-SU-2024:2028-1 Rating: moderate References: * bsc#1212233 Cross-References: * CVE-2023-3164 CVSS scores: * CVE-2023-3164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-3164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for tiff fixes the following issues: * CVE-2023-3164: Fixed a heap buffer overflow in tiffcrop. (bsc#1212233) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2028=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2028=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2028=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2028=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2028=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2028=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2028=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2028=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2028=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2028=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2028=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2028=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2028=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.44.1 * tiff-debuginfo-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff-devel-4.0.9-150000.45.44.1 * Basesystem Module 15-SP5 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.44.1 * libtiff5-32bit-4.0.9-150000.45.44.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * Basesystem Module 15-SP6 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.44.1 * libtiff5-32bit-4.0.9-150000.45.44.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * tiff-4.0.9-150000.45.44.1 * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * openSUSE Leap 15.5 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.44.1 * libtiff5-32bit-4.0.9-150000.45.44.1 * libtiff-devel-32bit-4.0.9-150000.45.44.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.44.1 * tiff-4.0.9-150000.45.44.1 * tiff-debuginfo-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff-devel-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3164.html * https://bugzilla.suse.com/show_bug.cgi?id=1212233

1 0

SUSE-SU-2024:2029-1: moderate: Security update for python-scikit-learn
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Security update for python-scikit-learn Announcement ID: SUSE-SU-2024:2029-1 Rating: moderate References: * bsc#1226185 Cross-References: * CVE-2024-5206 CVSS scores: * CVE-2024-5206 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for python-scikit-learn fixes the following issues: -CVE-2024-5206: Fixed a possible sensitive data leak in TfidfVectorizer. (bsc#1226185) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2029=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2029=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2029=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2029=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2029=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python3-scikit-learn-debuginfo-0.23.2-150300.3.3.1 * python3-scikit-learn-0.23.2-150300.3.3.1 * python-scikit-learn-debugsource-0.23.2-150300.3.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-scikit-learn-debuginfo-0.23.2-150300.3.3.1 * python3-scikit-learn-0.23.2-150300.3.3.1 * python-scikit-learn-debugsource-0.23.2-150300.3.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python3-scikit-learn-debuginfo-0.23.2-150300.3.3.1 * python3-scikit-learn-0.23.2-150300.3.3.1 * python-scikit-learn-debugsource-0.23.2-150300.3.3.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-scikit-learn-debuginfo-0.23.2-150300.3.3.1 * python3-scikit-learn-0.23.2-150300.3.3.1 * python-scikit-learn-debugsource-0.23.2-150300.3.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-scikit-learn-debuginfo-0.23.2-150300.3.3.1 * python3-scikit-learn-0.23.2-150300.3.3.1 * python-scikit-learn-debugsource-0.23.2-150300.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-5206.html * https://bugzilla.suse.com/show_bug.cgi?id=1226185

1 0

openSUSE-RU-2024:0158-1: moderate: Recommended update for OpenBoard
by maintenance＠opensuse.org 13 Jun '24

13 Jun '24

openSUSE Recommended Update: Recommended update for OpenBoard ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0158-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for OpenBoard fixes the following issues: - Fixes a problem with latest plasma5 security patches Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-158=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): OpenBoard-1.7.1-bp155.3.9.1 References:

1 0

SUSE-SU-2024:2020-1: important: Security update for openssl-3
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Security update for openssl-3 Announcement ID: SUSE-SU-2024:2020-1 Rating: important References: * bsc#1225551 Cross-References: * CVE-2024-4741 CVSS scores: * CVE-2024-4741 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2020=1 openSUSE-SLE-15.5-2024-2020=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2020=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libopenssl3-3.0.8-150500.5.36.1 * libopenssl-3-devel-3.0.8-150500.5.36.1 * openssl-3-debuginfo-3.0.8-150500.5.36.1 * openssl-3-debugsource-3.0.8-150500.5.36.1 * libopenssl3-debuginfo-3.0.8-150500.5.36.1 * openssl-3-3.0.8-150500.5.36.1 * openSUSE Leap 15.5 (x86_64) * libopenssl-3-devel-32bit-3.0.8-150500.5.36.1 * libopenssl3-32bit-3.0.8-150500.5.36.1 * libopenssl3-32bit-debuginfo-3.0.8-150500.5.36.1 * openSUSE Leap 15.5 (noarch) * openssl-3-doc-3.0.8-150500.5.36.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl3-64bit-debuginfo-3.0.8-150500.5.36.1 * libopenssl-3-devel-64bit-3.0.8-150500.5.36.1 * libopenssl3-64bit-3.0.8-150500.5.36.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libopenssl3-3.0.8-150500.5.36.1 * libopenssl-3-devel-3.0.8-150500.5.36.1 * openssl-3-debuginfo-3.0.8-150500.5.36.1 * openssl-3-debugsource-3.0.8-150500.5.36.1 * libopenssl3-debuginfo-3.0.8-150500.5.36.1 * openssl-3-3.0.8-150500.5.36.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4741.html * https://bugzilla.suse.com/show_bug.cgi?id=1225551

1 0

SUSE-SU-2024:2005-1: important: Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by OPENSUSE-UPDATES 12 Jun '24

12 Jun '24

# Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-SU-2024:2005-1 Rating: important References: * bsc#1223356 Cross-References: * CVE-2024-0090 * CVE-2024-0091 * CVE-2024-0092 CVSS scores: * CVE-2024-0090 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2024-0091 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-0092 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves three vulnerabilities can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Security Update 550.90.07: * CVE-2024-0090: Fixed out of bounds write (bsc#1223356). * CVE-2024-0092: Fixed incorrect exception handling (bsc#1223356). * CVE-2024-0091: Fixed untrusted pointer dereference (bsc#1223356). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2005=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2005=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2005=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2005=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2005=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2005=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2005=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2005=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2005=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2005=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2005=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2005=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2005=1 ## Package List: * openSUSE Leap 15.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * openSUSE Leap 15.4 (x86_64) * nvidia-open-driver-G06-signed-azure-devel-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.90.07_k5.14.21_150400.14.75-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-azure-550.90.07_k5.14.21_150400.14.75-150400.9.62.1 * openSUSE Leap 15.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-default-devel-550.90.07-150400.9.62.1 * openSUSE Leap 15.4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-64kb-devel-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-64kb-devel-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-default-devel-550.90.07-150400.9.62.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-64kb-devel-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-default-devel-550.90.07-150400.9.62.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-default-devel-550.90.07-150400.9.62.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-64kb-devel-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-default-devel-550.90.07-150400.9.62.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-default-devel-550.90.07-150400.9.62.1 * SUSE Manager Proxy 4.3 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Manager Proxy 4.3 (x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-default-devel-550.90.07-150400.9.62.1 * SUSE Manager Retail Branch Server 4.3 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-default-devel-550.90.07-150400.9.62.1 * SUSE Manager Server 4.3 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150400.9.33.1 * SUSE Manager Server 4.3 (x86_64) * nvidia-open-driver-G06-signed-debugsource-550.90.07-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150400.24.119-150400.9.62.1 * nvidia-open-driver-G06-signed-default-devel-550.90.07-150400.9.62.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0090.html * https://www.suse.com/security/cve/CVE-2024-0091.html * https://www.suse.com/security/cve/CVE-2024-0092.html * https://bugzilla.suse.com/show_bug.cgi?id=1223356

1 0

SUSE-RU-2024:2006-1: moderate: Recommended update for ethtool
by OPENSUSE-UPDATES 12 Jun '24

12 Jun '24

# Recommended update for ethtool Announcement ID: SUSE-RU-2024:2006-1 Rating: moderate References: * bsc#1222079 * bsc#1224590 * jsc#PED-5946 * jsc#PED-8451 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains two features and has two fixes can now be installed. ## Description: This update for ethtool fixes the following issues: * ethtool was upgraded to version 6.4 (jsc#PED-5946, jsc#PED-8451): * For the full list of changes between 5.14 and 6.4 see upstream changelog (file NEWS) * Fixed SFP module diagnostic information (bsc#1222079) * Additional bug fixes (bsc#1224590): * Added missing header files for source distribution * Fixed SFF-8472 transceiver module identification * Allow nl_sset return -EOPNOTSUPP to fallback to do_sset * Fixed netlink support for coalesce tx aggr params * Fixed bug in rmgr when searching for empty slot ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2006=1 openSUSE-SLE-15.6-2024-2006=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2006=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * ethtool-6.4-150600.7.3.2 * ethtool-debugsource-6.4-150600.7.3.2 * ethtool-debuginfo-6.4-150600.7.3.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * ethtool-6.4-150600.7.3.2 * ethtool-debugsource-6.4-150600.7.3.2 * ethtool-debuginfo-6.4-150600.7.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222079 * https://bugzilla.suse.com/show_bug.cgi?id=1224590 * https://jira.suse.com/browse/PED-5946 * https://jira.suse.com/browse/PED-8451

1 0

SUSE-RU-2024:2007-1: moderate: Recommended update for yast2-country
by OPENSUSE-UPDATES 12 Jun '24

12 Jun '24

# Recommended update for yast2-country Announcement ID: SUSE-RU-2024:2007-1 Rating: moderate References: * bsc#1224387 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for yast2-country fixes the following issue: * Rename Europe/Kiev to Europe/Kyiv as per 2022b release of tz code and data by ICANN (bsc#1224387) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2007=1 openSUSE-SLE-15.5-2024-2007=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2007=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * yast2-country-4.5.6-150500.3.3.2 * yast2-country-data-4.5.6-150500.3.3.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * yast2-country-4.5.6-150500.3.3.2 * yast2-country-data-4.5.6-150500.3.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1224387

1 0

SUSE-RU-2024:1998-1: moderate: Recommended update for yast2-registration
by OPENSUSE-UPDATES 12 Jun '24

12 Jun '24

# Recommended update for yast2-registration Announcement ID: SUSE-RU-2024:1998-1 Rating: moderate References: * bsc#1223301 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for yast2-registration fixes the following issue: * Ensure add_on_others in autoyast profile are added (bsc#1223301) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1998=1 openSUSE-SLE-15.6-2024-1998=1 * SUSE Linux Enterprise High Performance Computing 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-1998=1 * SUSE Linux Enterprise Server 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-1998=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-1998=1 * SUSE Linux Enterprise Desktop 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-1998=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1998=1 ## Package List: * openSUSE Leap 15.6 (noarch) * yast2-registration-4.6.2-150600.3.3.2 * SUSE Linux Enterprise High Performance Computing 15 SP6 (noarch) * yast2-registration-4.6.2-150600.3.3.2 * SUSE Linux Enterprise Server 15 SP6 (noarch) * yast2-registration-4.6.2-150600.3.3.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * yast2-registration-4.6.2-150600.3.3.2 * SUSE Linux Enterprise Desktop 15 SP6 (noarch) * yast2-registration-4.6.2-150600.3.3.2 * Basesystem Module 15-SP6 (noarch) * yast2-registration-4.6.2-150600.3.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223301

1 0

SUSE-RU-2024:1999-1: moderate: Recommended update for yast2-registration
by OPENSUSE-UPDATES 12 Jun '24

12 Jun '24

# Recommended update for yast2-registration Announcement ID: SUSE-RU-2024:1999-1 Rating: moderate References: * bsc#1223301 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for yast2-registration fixes the following issue: * Ensure add_on_others in autoyast profile are added (bsc#1223301) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1999=1 SUSE-2024-1999=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-1999=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-1999=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-1999=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-1999=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1999=1 ## Package List: * openSUSE Leap 15.5 (noarch) * yast2-registration-4.5.10-150500.3.6.2 * SUSE Linux Enterprise High Performance Computing 15 SP5 (noarch) * yast2-registration-4.5.10-150500.3.6.2 * SUSE Linux Enterprise Server 15 SP5 (noarch) * yast2-registration-4.5.10-150500.3.6.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * yast2-registration-4.5.10-150500.3.6.2 * SUSE Linux Enterprise Desktop 15 SP5 (noarch) * yast2-registration-4.5.10-150500.3.6.2 * Basesystem Module 15-SP5 (noarch) * yast2-registration-4.5.10-150500.3.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223301

1 0

SUSE-RU-2024:2000-1: moderate: Recommended update for Java
by OPENSUSE-UPDATES 12 Jun '24

12 Jun '24

# Recommended update for Java Announcement ID: SUSE-RU-2024:2000-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for Java fixes the following issues: javadoc-parser: * Deliver javadoc-parser RPM package to meet new dependency requirements (no source changes) maven-filtering was updated to version 3.3.2: * Build against the plexus-build-api0 package containing sonatype plexus build api * Version 3.3.2: * Changes: * pick correct hamcrest dependency * Prefer commons lang to plexus utils * MSHARED-1214: move tag back to HEAD * MSHARED-1216: Use caching output stream * Bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /src/test/resources * Fix typos and grammar * Fix 'licenced' typo in PR template * refactor IncrementalResourceFilteringTest * MSHARED-1340: Require Maven 3.6.3+ * Bump commons-io:commons-io from 2.11.0 to 2.15.1 * Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.14.0 * MSHARED-1339: Bump org.apache.maven.shared:maven-shared-components from 39 to 41 * MSHARED-1290: Fix PropertyUtils cycle detection results in false positives * MSHARED-1285: use an up-to-date scanner instead the newscanner * Bump org.codehaus.plexus:plexus-testing from 1.2.0 to 1.3.0 * Bump org.codehaus.plexus:plexus-interpolation from 1.26 to 1.27 * Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.0 * Bump release-drafter/release-drafter from 5 to 6 * Bump org.junit.jupiter:junit-jupiter-api from 5.10.1 to 5.10.2 * MSHARED-1351: Fix console message when origin is baseDir * MSHARED-1050: Fix ConcurrentModificationException for maven-filtering * MSHARED-1330: Always overwrite files * Version 3.3.1: * Changes: * MSHARED-1175: Copying x resources from rel/path to rel/path * MSHARED-1213: Bug: filtering existing but 0 byte file * MSHARED-1199: Upgrade parent pom to 39 * MSHARED-1112: Ignore setting permissions on non existing dest files/symlinks * MSHARED-1144: remove rendundant error message * Version 3.3.0: * Changes: * Fixed cloning of MavenResourcesExecution's instances using copyOf() method * MRESOURCES-258: Copying and filtering logic is delegated to FileUtils * replace deprecated methods * replace deprecated code in favor of Java 7 core and apache commons libraries declare dependencies * MSHARED-1080: Parent POM 36, Java8, drop legacy. maven-plugin-tools: * Build against the plexus-build-api0 package containing sonatype plexus build api * Added dependency on plexus-xml where relevant modello was updated to version 2.4.0: * Build against the new codehaus plexus build api 1.2.0 * Build all modello plugins * Version 2.4.0: * New features and improvements: * Keep license structure * Support addition of license header to generated files * Make generated code - Java 8 based by default * threadsafety * Bugs fixed: * Revert snakeyaml to 1.33 (as 2.x is not fully compatible with 1.x). * Version 2.3.0: * Changes: * Kill off dead Plexus * Fix for #366 * Version 2.2.0: * Changes: * Parse javadoc tags in xdoc generator (only @since is supported atm) * Use generic in Xpp3Reader for JDK 5+ * Get rid of usage deprecated Reader/WriterFactory * Make spotless plugin work with Java 21 * Support java source property being discovered as 1.x * Fix thread safety issues by not using singletons for generators * Improve discovering javaSource based on maven.compiler properties, default as 8 * Switch Plexus Annotation to JSR-330 * Make spotless plugin work with Java 21 * Add dependency on plexus-xml where relevant plexus-build-api was updated to version 1.2.0: * Version 1.2.0: * Potentially breaking changes: * change package to org.codehaus.plexus.build * New features and improvements: * Convert to JSR 330 component * Bump sisu-maven-plugin from 0.3.5 to 0.9.0.M2 * Switch to parent 13 and reformat * Use a CachingOutputStream when using the build context * Reuse plexus-pom action for CI * Add README and LICENSE * Remove ThreadBuildContext * Bugs fixed: * Store Objects in the DefaultContext in a map * Let the DefaultBuildContext delegate to the legacy build-api plexus-build-api0 was implemented at version 0.0.8: * New package plexus-xml: * Deliver plexus-xml RPM package to meet new dependency requirements (no source changes) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2000=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2000=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2000=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2000=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2000=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2000=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2000=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2000=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2000=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2000=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2000=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2000=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2000=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2000=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2000=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2000=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * SUSE Enterprise Storage 7.1 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * openSUSE Leap 15.5 (noarch) * maven-plugin-tools-api-3.13.0-150200.3.12.2 * plexus-build-api-javadoc-1.2.0-150200.3.7.1 * maven-plugin-tools-beanshell-3.13.0-150200.3.12.2 * plexus-xml-javadoc-3.0.0-150200.5.5.1 * javadoc-parser-0.3.1-150200.5.5.1 * maven-plugin-tools-javadoc-3.13.0-150200.3.12.2 * maven-plugin-tools-generators-3.13.0-150200.3.12.2 * javadoc-parser-javadoc-0.3.1-150200.5.5.1 * maven-plugin-tools-ant-3.13.0-150200.3.12.2 * plexus-build-api0-0.0.8-150200.5.5.2 * plexus-build-api0-javadoc-0.0.8-150200.5.5.2 * maven-script-ant-3.13.0-150200.3.12.2 * modello-maven-plugin-2.4.0-150200.3.10.1 * maven-plugin-tools-java-3.13.0-150200.3.12.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * maven-plugin-plugin-3.13.0-150200.3.12.1 * maven-plugin-tools-model-3.13.0-150200.3.12.2 * modello-maven-plugin-javadoc-2.4.0-150200.3.10.1 * plexus-xml-3.0.0-150200.5.5.1 * maven-script-beanshell-3.13.0-150200.3.12.2 * maven-plugin-plugin-javadoc-3.13.0-150200.3.12.1 * maven-plugin-tools-annotations-3.13.0-150200.3.12.2 * modello-javadoc-2.4.0-150200.3.10.1 * plexus-build-api-1.2.0-150200.3.7.1 * maven-plugin-plugin-bootstrap-3.13.0-150200.3.12.1 * maven-filtering-javadoc-3.3.2-150200.3.7.2 * modello-2.4.0-150200.3.10.1 * openSUSE Leap 15.6 (noarch) * maven-plugin-tools-api-3.13.0-150200.3.12.2 * plexus-build-api-javadoc-1.2.0-150200.3.7.1 * maven-plugin-tools-beanshell-3.13.0-150200.3.12.2 * plexus-xml-javadoc-3.0.0-150200.5.5.1 * javadoc-parser-0.3.1-150200.5.5.1 * maven-plugin-tools-javadoc-3.13.0-150200.3.12.2 * maven-plugin-tools-generators-3.13.0-150200.3.12.2 * javadoc-parser-javadoc-0.3.1-150200.5.5.1 * maven-plugin-tools-ant-3.13.0-150200.3.12.2 * plexus-build-api0-0.0.8-150200.5.5.2 * plexus-build-api0-javadoc-0.0.8-150200.5.5.2 * maven-script-ant-3.13.0-150200.3.12.2 * modello-maven-plugin-2.4.0-150200.3.10.1 * maven-plugin-tools-java-3.13.0-150200.3.12.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * maven-plugin-plugin-3.13.0-150200.3.12.1 * maven-plugin-tools-model-3.13.0-150200.3.12.2 * modello-maven-plugin-javadoc-2.4.0-150200.3.10.1 * plexus-xml-3.0.0-150200.5.5.1 * maven-script-beanshell-3.13.0-150200.3.12.2 * maven-plugin-plugin-javadoc-3.13.0-150200.3.12.1 * maven-plugin-tools-annotations-3.13.0-150200.3.12.2 * modello-javadoc-2.4.0-150200.3.10.1 * plexus-build-api-1.2.0-150200.3.7.1 * maven-plugin-plugin-bootstrap-3.13.0-150200.3.12.1 * maven-filtering-javadoc-3.3.2-150200.3.7.2 * modello-2.4.0-150200.3.10.1 * Development Tools Module 15-SP5 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * Development Tools Module 15-SP6 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * plexus-build-api0-0.0.8-150200.5.5.2 * maven-filtering-3.3.2-150200.3.7.2 * maven-plugin-annotations-3.13.0-150200.3.12.2 * plexus-xml-3.0.0-150200.5.5.1 * plexus-build-api-1.2.0-150200.3.7.1

1 0

SUSE-SU-2024:2003-1: important: Security update for cups
by OPENSUSE-UPDATES 12 Jun '24

12 Jun '24

# Security update for cups Announcement ID: SUSE-SU-2024:2003-1 Rating: important References: * bsc#1223179 * bsc#1225365 Cross-References: * CVE-2024-35235 CVSS scores: * CVE-2024-35235 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for cups fixes the following issues: * CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. (bsc#1225365) * Handle local 'Negotiate' authentication response for cli clients (bsc#1223179) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2003=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2003=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2003=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2003=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2003=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2003=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2003=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2003=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2003=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2003=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2003=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-2003=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2003=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2003=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2003=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2003=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2003=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2003=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2003=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2003=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2003=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2003=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2003=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2003=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2003=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2003=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2003=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2003=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2003=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2003=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2003=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2003=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * openSUSE Leap 15.5 (x86_64) * cups-devel-32bit-2.2.7-150000.3.59.1 * libcupscgi1-32bit-2.2.7-150000.3.59.1 * libcupsimage2-32bit-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-32bit-2.2.7-150000.3.59.1 * libcupsppdc1-32bit-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-32bit-2.2.7-150000.3.59.1 * libcupsmime1-32bit-debuginfo-2.2.7-150000.3.59.1 * libcups2-32bit-2.2.7-150000.3.59.1 * libcupsmime1-32bit-2.2.7-150000.3.59.1 * libcupscgi1-32bit-debuginfo-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * openSUSE Leap 15.6 (x86_64) * cups-devel-32bit-2.2.7-150000.3.59.1 * libcupscgi1-32bit-2.2.7-150000.3.59.1 * libcupsimage2-32bit-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-32bit-2.2.7-150000.3.59.1 * libcupsppdc1-32bit-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-32bit-2.2.7-150000.3.59.1 * libcupsmime1-32bit-debuginfo-2.2.7-150000.3.59.1 * libcups2-32bit-2.2.7-150000.3.59.1 * libcupsmime1-32bit-2.2.7-150000.3.59.1 * libcupscgi1-32bit-debuginfo-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * Desktop Applications Module 15-SP5 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * Desktop Applications Module 15-SP6 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libcupscgi1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * cups-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * libcups2-32bit-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Manager Proxy 4.3 (x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Manager Server 4.3 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcupsmime1-2.2.7-150000.3.59.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * cups-ddk-debuginfo-2.2.7-150000.3.59.1 * libcupscgi1-2.2.7-150000.3.59.1 * cups-2.2.7-150000.3.59.1 * libcupscgi1-debuginfo-2.2.7-150000.3.59.1 * libcupsppdc1-2.2.7-150000.3.59.1 * cups-client-debuginfo-2.2.7-150000.3.59.1 * cups-devel-2.2.7-150000.3.59.1 * cups-ddk-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * libcupsimage2-2.2.7-150000.3.59.1 * cups-client-2.2.7-150000.3.59.1 * libcupsmime1-debuginfo-2.2.7-150000.3.59.1 * libcupsimage2-debuginfo-2.2.7-150000.3.59.1 * SUSE Enterprise Storage 7.1 (x86_64) * libcups2-32bit-2.2.7-150000.3.59.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * cups-debuginfo-2.2.7-150000.3.59.1 * cups-debugsource-2.2.7-150000.3.59.1 * libcups2-debuginfo-2.2.7-150000.3.59.1 * libcups2-2.2.7-150000.3.59.1 * cups-config-2.2.7-150000.3.59.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35235.html * https://bugzilla.suse.com/show_bug.cgi?id=1223179 * https://bugzilla.suse.com/show_bug.cgi?id=1225365

1 0

openSUSE-SU-2024:0157-1: important: Security update for nano
by opensuse-security＠opensuse.org 11 Jun '24

11 Jun '24

openSUSE Security Update: Security update for nano ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0157-1 Rating: important References: #1226099 Cross-References: CVE-2024-5742 CVSS scores: CVE-2024-5742 (SUSE): 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for nano fixes the following issues: - CVE-2024-5742: Avoid privilege escalations via symlink attacks on emergency save file (boo#1226099) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-157=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): nano-7.2-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): nano-lang-7.2-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-5742.html https://bugzilla.suse.com/1226099

1 0

SUSE-RU-2024:1993-1: moderate: Recommended update for sssd
by OPENSUSE-UPDATES 11 Jun '24

11 Jun '24

# Recommended update for sssd Announcement ID: SUSE-RU-2024:1993-1 Rating: moderate References: * bsc#1223050 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for sssd fixes the following issues: * Use the name from the cached entries when updating them to avoid capitalization problems (bsc#1223050) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1993=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1993=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1993=1 openSUSE-SLE-15.5-2024-1993=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libsss_idmap0-debuginfo-2.5.2-150500.10.20.2 * sssd-common-debuginfo-2.5.2-150500.10.20.2 * sssd-debugsource-2.5.2-150500.10.20.2 * libsss_nss_idmap0-2.5.2-150500.10.20.2 * sssd-krb5-common-debuginfo-2.5.2-150500.10.20.2 * libsss_idmap0-2.5.2-150500.10.20.2 * sssd-2.5.2-150500.10.20.2 * sssd-common-2.5.2-150500.10.20.2 * sssd-ldap-2.5.2-150500.10.20.2 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.20.2 * libsss_certmap0-2.5.2-150500.10.20.2 * sssd-ldap-debuginfo-2.5.2-150500.10.20.2 * libsss_certmap0-debuginfo-2.5.2-150500.10.20.2 * sssd-krb5-common-2.5.2-150500.10.20.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-sssd-config-2.5.2-150500.10.20.2 * sssd-dbus-debuginfo-2.5.2-150500.10.20.2 * sssd-ipa-debuginfo-2.5.2-150500.10.20.2 * sssd-ad-debuginfo-2.5.2-150500.10.20.2 * sssd-krb5-debuginfo-2.5.2-150500.10.20.2 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.20.2 * sssd-tools-debuginfo-2.5.2-150500.10.20.2 * sssd-ipa-2.5.2-150500.10.20.2 * libsss_certmap0-2.5.2-150500.10.20.2 * libipa_hbac0-debuginfo-2.5.2-150500.10.20.2 * sssd-dbus-2.5.2-150500.10.20.2 * sssd-winbind-idmap-2.5.2-150500.10.20.2 * libsss_idmap0-debuginfo-2.5.2-150500.10.20.2 * libsss_nss_idmap-devel-2.5.2-150500.10.20.2 * libsss_idmap-devel-2.5.2-150500.10.20.2 * libipa_hbac0-2.5.2-150500.10.20.2 * sssd-common-2.5.2-150500.10.20.2 * sssd-kcm-debuginfo-2.5.2-150500.10.20.2 * sssd-ldap-2.5.2-150500.10.20.2 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.20.2 * sssd-debugsource-2.5.2-150500.10.20.2 * libsss_certmap-devel-2.5.2-150500.10.20.2 * sssd-kcm-2.5.2-150500.10.20.2 * sssd-ldap-debuginfo-2.5.2-150500.10.20.2 * sssd-krb5-common-2.5.2-150500.10.20.2 * libipa_hbac-devel-2.5.2-150500.10.20.2 * sssd-proxy-2.5.2-150500.10.20.2 * sssd-common-debuginfo-2.5.2-150500.10.20.2 * sssd-tools-2.5.2-150500.10.20.2 * libsss_simpleifp0-2.5.2-150500.10.20.2 * libsss_nss_idmap0-2.5.2-150500.10.20.2 * sssd-krb5-common-debuginfo-2.5.2-150500.10.20.2 * sssd-2.5.2-150500.10.20.2 * sssd-ad-2.5.2-150500.10.20.2 * sssd-krb5-2.5.2-150500.10.20.2 * libsss_idmap0-2.5.2-150500.10.20.2 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.20.2 * libsss_simpleifp-devel-2.5.2-150500.10.20.2 * libsss_certmap0-debuginfo-2.5.2-150500.10.20.2 * python3-sssd-config-debuginfo-2.5.2-150500.10.20.2 * sssd-proxy-debuginfo-2.5.2-150500.10.20.2 * Basesystem Module 15-SP5 (x86_64) * sssd-common-32bit-debuginfo-2.5.2-150500.10.20.2 * sssd-common-32bit-2.5.2-150500.10.20.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * python3-sssd-config-2.5.2-150500.10.20.2 * sssd-dbus-debuginfo-2.5.2-150500.10.20.2 * sssd-ipa-debuginfo-2.5.2-150500.10.20.2 * sssd-ad-debuginfo-2.5.2-150500.10.20.2 * python3-sss-murmur-2.5.2-150500.10.20.2 * sssd-krb5-debuginfo-2.5.2-150500.10.20.2 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.20.2 * sssd-tools-debuginfo-2.5.2-150500.10.20.2 * libnfsidmap-sss-debuginfo-2.5.2-150500.10.20.2 * sssd-ipa-2.5.2-150500.10.20.2 * libsss_certmap0-2.5.2-150500.10.20.2 * libipa_hbac0-debuginfo-2.5.2-150500.10.20.2 * sssd-dbus-2.5.2-150500.10.20.2 * sssd-winbind-idmap-2.5.2-150500.10.20.2 * libsss_idmap0-debuginfo-2.5.2-150500.10.20.2 * libsss_nss_idmap-devel-2.5.2-150500.10.20.2 * libsss_idmap-devel-2.5.2-150500.10.20.2 * libipa_hbac0-2.5.2-150500.10.20.2 * sssd-common-2.5.2-150500.10.20.2 * sssd-kcm-debuginfo-2.5.2-150500.10.20.2 * sssd-ldap-2.5.2-150500.10.20.2 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.20.2 * sssd-debugsource-2.5.2-150500.10.20.2 * libsss_certmap-devel-2.5.2-150500.10.20.2 * python3-sss_nss_idmap-2.5.2-150500.10.20.2 * sssd-kcm-2.5.2-150500.10.20.2 * sssd-ldap-debuginfo-2.5.2-150500.10.20.2 * python3-sss_nss_idmap-debuginfo-2.5.2-150500.10.20.2 * sssd-krb5-common-2.5.2-150500.10.20.2 * libipa_hbac-devel-2.5.2-150500.10.20.2 * sssd-proxy-2.5.2-150500.10.20.2 * sssd-common-debuginfo-2.5.2-150500.10.20.2 * sssd-tools-2.5.2-150500.10.20.2 * libsss_simpleifp0-2.5.2-150500.10.20.2 * libsss_nss_idmap0-2.5.2-150500.10.20.2 * python3-ipa_hbac-debuginfo-2.5.2-150500.10.20.2 * sssd-krb5-common-debuginfo-2.5.2-150500.10.20.2 * sssd-2.5.2-150500.10.20.2 * sssd-ad-2.5.2-150500.10.20.2 * sssd-krb5-2.5.2-150500.10.20.2 * python3-ipa_hbac-2.5.2-150500.10.20.2 * libsss_idmap0-2.5.2-150500.10.20.2 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.20.2 * libsss_simpleifp-devel-2.5.2-150500.10.20.2 * libnfsidmap-sss-2.5.2-150500.10.20.2 * python3-sss-murmur-debuginfo-2.5.2-150500.10.20.2 * libsss_certmap0-debuginfo-2.5.2-150500.10.20.2 * python3-sssd-config-debuginfo-2.5.2-150500.10.20.2 * sssd-proxy-debuginfo-2.5.2-150500.10.20.2 * openSUSE Leap 15.5 (x86_64) * sssd-common-32bit-debuginfo-2.5.2-150500.10.20.2 * sssd-common-32bit-2.5.2-150500.10.20.2 * openSUSE Leap 15.5 (aarch64_ilp32) * sssd-common-64bit-2.5.2-150500.10.20.2 * sssd-common-64bit-debuginfo-2.5.2-150500.10.20.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223050

1 0

SUSE-RU-2024:1994-1: moderate: Recommended update for iputils
by OPENSUSE-UPDATES 11 Jun '24

11 Jun '24

# Recommended update for iputils Announcement ID: SUSE-RU-2024:1994-1 Rating: moderate References: Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for iputils fixes the following issue: * After upstream merged the fix, update git commit hashes. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1994=1 openSUSE-SLE-15.5-2024-1994=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1994=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1994=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1994=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1994=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * iputils-debugsource-20221126-150500.3.8.2 * iputils-debuginfo-20221126-150500.3.8.2 * iputils-20221126-150500.3.8.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * iputils-debugsource-20221126-150500.3.8.2 * iputils-debuginfo-20221126-150500.3.8.2 * iputils-20221126-150500.3.8.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * iputils-debugsource-20221126-150500.3.8.2 * iputils-debuginfo-20221126-150500.3.8.2 * iputils-20221126-150500.3.8.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * iputils-debugsource-20221126-150500.3.8.2 * iputils-debuginfo-20221126-150500.3.8.2 * iputils-20221126-150500.3.8.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * iputils-debugsource-20221126-150500.3.8.2 * iputils-debuginfo-20221126-150500.3.8.2 * iputils-20221126-150500.3.8.2

1 0

SUSE-SU-2024:1980-1: low: Security update for poppler
by OPENSUSE-UPDATES 11 Jun '24

11 Jun '24

# Security update for poppler Announcement ID: SUSE-SU-2024:1980-1 Rating: low References: * bsc#1223375 Cross-References: * CVE-2024-4141 CVSS scores: * CVE-2024-4141 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for poppler fixes the following issues: * CVE-2024-4141: Fixed out-of-bounds array write (bsc#1223375). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1980=1 openSUSE-SLE-15.5-2024-1980=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1980=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1980=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libpoppler-glib8-debuginfo-23.01.0-150500.3.8.1 * poppler-qt6-debugsource-23.01.0-150500.3.8.1 * libpoppler-glib-devel-23.01.0-150500.3.8.1 * libpoppler-qt5-1-debuginfo-23.01.0-150500.3.8.1 * libpoppler126-debuginfo-23.01.0-150500.3.8.1 * libpoppler-cpp0-debuginfo-23.01.0-150500.3.8.1 * poppler-tools-debuginfo-23.01.0-150500.3.8.1 * poppler-qt5-debugsource-23.01.0-150500.3.8.1 * libpoppler-qt5-devel-23.01.0-150500.3.8.1 * libpoppler-qt6-3-23.01.0-150500.3.8.1 * poppler-tools-23.01.0-150500.3.8.1 * libpoppler-qt6-3-debuginfo-23.01.0-150500.3.8.1 * libpoppler-qt6-devel-23.01.0-150500.3.8.1 * libpoppler-devel-23.01.0-150500.3.8.1 * libpoppler-cpp0-23.01.0-150500.3.8.1 * libpoppler126-23.01.0-150500.3.8.1 * libpoppler-qt5-1-23.01.0-150500.3.8.1 * typelib-1_0-Poppler-0_18-23.01.0-150500.3.8.1 * poppler-debugsource-23.01.0-150500.3.8.1 * libpoppler-glib8-23.01.0-150500.3.8.1 * openSUSE Leap 15.5 (x86_64) * libpoppler-qt5-1-32bit-debuginfo-23.01.0-150500.3.8.1 * libpoppler126-32bit-23.01.0-150500.3.8.1 * libpoppler-cpp0-32bit-debuginfo-23.01.0-150500.3.8.1 * libpoppler-glib8-32bit-23.01.0-150500.3.8.1 * libpoppler-cpp0-32bit-23.01.0-150500.3.8.1 * libpoppler-qt5-1-32bit-23.01.0-150500.3.8.1 * libpoppler126-32bit-debuginfo-23.01.0-150500.3.8.1 * libpoppler-glib8-32bit-debuginfo-23.01.0-150500.3.8.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libpoppler126-64bit-23.01.0-150500.3.8.1 * libpoppler126-64bit-debuginfo-23.01.0-150500.3.8.1 * libpoppler-qt5-1-64bit-23.01.0-150500.3.8.1 * libpoppler-qt5-1-64bit-debuginfo-23.01.0-150500.3.8.1 * libpoppler-glib8-64bit-23.01.0-150500.3.8.1 * libpoppler-cpp0-64bit-debuginfo-23.01.0-150500.3.8.1 * libpoppler-glib8-64bit-debuginfo-23.01.0-150500.3.8.1 * libpoppler-cpp0-64bit-23.01.0-150500.3.8.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libpoppler-glib8-debuginfo-23.01.0-150500.3.8.1 * libpoppler-glib-devel-23.01.0-150500.3.8.1 * libpoppler126-debuginfo-23.01.0-150500.3.8.1 * libpoppler-cpp0-debuginfo-23.01.0-150500.3.8.1 * poppler-tools-debuginfo-23.01.0-150500.3.8.1 * poppler-tools-23.01.0-150500.3.8.1 * libpoppler-devel-23.01.0-150500.3.8.1 * libpoppler-cpp0-23.01.0-150500.3.8.1 * libpoppler126-23.01.0-150500.3.8.1 * typelib-1_0-Poppler-0_18-23.01.0-150500.3.8.1 * poppler-debugsource-23.01.0-150500.3.8.1 * libpoppler-glib8-23.01.0-150500.3.8.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libpoppler-qt5-1-debuginfo-23.01.0-150500.3.8.1 * libpoppler-cpp0-debuginfo-23.01.0-150500.3.8.1 * poppler-qt5-debugsource-23.01.0-150500.3.8.1 * libpoppler-qt5-devel-23.01.0-150500.3.8.1 * libpoppler-devel-23.01.0-150500.3.8.1 * libpoppler-cpp0-23.01.0-150500.3.8.1 * libpoppler-qt5-1-23.01.0-150500.3.8.1 * poppler-debugsource-23.01.0-150500.3.8.1 * SUSE Package Hub 15 15-SP5 (x86_64) * libpoppler-glib8-32bit-debuginfo-23.01.0-150500.3.8.1 * libpoppler126-32bit-23.01.0-150500.3.8.1 * libpoppler126-32bit-debuginfo-23.01.0-150500.3.8.1 * libpoppler-glib8-32bit-23.01.0-150500.3.8.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4141.html * https://bugzilla.suse.com/show_bug.cgi?id=1223375

1 0

SUSE-SU-2024:1981-1: moderate: Security update for iperf
by OPENSUSE-UPDATES 11 Jun '24

11 Jun '24

# Security update for iperf Announcement ID: SUSE-SU-2024:1981-1 Rating: moderate References: * bsc#1224262 Cross-References: * CVE-2024-26306 CVSS scores: * CVE-2024-26306 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for iperf fixes the following issues: * Update to version 3.17.1 * CVE-2024-26306: Fixed a vulnerability that could led to marvin attack if the authentication option is used. (bsc#1224262) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1981=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1981=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1981=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1981=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1981=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libiperf0-debuginfo-3.17.1-150000.3.9.1 * iperf-debuginfo-3.17.1-150000.3.9.1 * iperf-devel-3.17.1-150000.3.9.1 * libiperf0-3.17.1-150000.3.9.1 * iperf-3.17.1-150000.3.9.1 * iperf-debugsource-3.17.1-150000.3.9.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libiperf0-debuginfo-3.17.1-150000.3.9.1 * iperf-debuginfo-3.17.1-150000.3.9.1 * iperf-devel-3.17.1-150000.3.9.1 * libiperf0-3.17.1-150000.3.9.1 * iperf-3.17.1-150000.3.9.1 * iperf-debugsource-3.17.1-150000.3.9.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libiperf0-debuginfo-3.17.1-150000.3.9.1 * iperf-debuginfo-3.17.1-150000.3.9.1 * iperf-devel-3.17.1-150000.3.9.1 * libiperf0-3.17.1-150000.3.9.1 * iperf-3.17.1-150000.3.9.1 * iperf-debugsource-3.17.1-150000.3.9.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * libiperf0-debuginfo-3.17.1-150000.3.9.1 * iperf-debuginfo-3.17.1-150000.3.9.1 * iperf-devel-3.17.1-150000.3.9.1 * libiperf0-3.17.1-150000.3.9.1 * iperf-3.17.1-150000.3.9.1 * iperf-debugsource-3.17.1-150000.3.9.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libiperf0-debuginfo-3.17.1-150000.3.9.1 * iperf-debuginfo-3.17.1-150000.3.9.1 * libiperf0-3.17.1-150000.3.9.1 * iperf-3.17.1-150000.3.9.1 * iperf-debugsource-3.17.1-150000.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26306.html * https://bugzilla.suse.com/show_bug.cgi?id=1224262

1 0

SUSE-SU-2024:1982-1: important: Security update for bind
by OPENSUSE-UPDATES 11 Jun '24

11 Jun '24

# Security update for bind Announcement ID: SUSE-SU-2024:1982-1 Rating: important References: * bsc#1219823 * bsc#1219826 * bsc#1219851 * bsc#1219852 * bsc#1219854 Cross-References: * CVE-2023-4408 * CVE-2023-50387 * CVE-2023-50868 * CVE-2023-5517 * CVE-2023-6516 CVSS scores: * CVE-2023-4408 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-50387 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-50387 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-50868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5517 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-6516 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2023-4408: Fixed denial of service during DNS message parsing with different names (bsc#1219851) * CVE-2023-50387: Fixed denial of service during DNS messages validation with DNSSEC signatures (bsc#1219823) * CVE-2023-50868: Fixed denial of service during NSEC3 closest encloser proof preparation (bsc#1219826) * CVE-2023-5517: Fixed denial of service caused by specific queries with nxdomain-redirect enabled (bsc#1219852) * CVE-2023-6516: Fixed denial of service caused by specific queries that continuously triggered cache database maintenance (bsc#1219854) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1982=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1982=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1982=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1982=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1982=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1982=1 ## Package List: * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libns1604-debuginfo-9.16.6-150300.22.44.1 * bind-debugsource-9.16.6-150300.22.44.1 * libisccfg1600-debuginfo-9.16.6-150300.22.44.1 * bind-utils-9.16.6-150300.22.44.1 * libisc1606-debuginfo-9.16.6-150300.22.44.1 * libisc1606-9.16.6-150300.22.44.1 * libdns1605-9.16.6-150300.22.44.1 * libisccfg1600-9.16.6-150300.22.44.1 * libisccc1600-debuginfo-9.16.6-150300.22.44.1 * libbind9-1600-9.16.6-150300.22.44.1 * bind-utils-debuginfo-9.16.6-150300.22.44.1 * libirs1601-9.16.6-150300.22.44.1 * bind-9.16.6-150300.22.44.1 * bind-debuginfo-9.16.6-150300.22.44.1 * libdns1605-debuginfo-9.16.6-150300.22.44.1 * libirs1601-debuginfo-9.16.6-150300.22.44.1 * bind-chrootenv-9.16.6-150300.22.44.1 * libirs-devel-9.16.6-150300.22.44.1 * libns1604-9.16.6-150300.22.44.1 * bind-devel-9.16.6-150300.22.44.1 * libbind9-1600-debuginfo-9.16.6-150300.22.44.1 * libisccc1600-9.16.6-150300.22.44.1 * SUSE Enterprise Storage 7.1 (noarch) * bind-doc-9.16.6-150300.22.44.1 * python3-bind-9.16.6-150300.22.44.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libns1604-debuginfo-9.16.6-150300.22.44.1 * bind-debugsource-9.16.6-150300.22.44.1 * libisccfg1600-debuginfo-9.16.6-150300.22.44.1 * bind-utils-9.16.6-150300.22.44.1 * libisc1606-debuginfo-9.16.6-150300.22.44.1 * libisc1606-9.16.6-150300.22.44.1 * libdns1605-9.16.6-150300.22.44.1 * libisccfg1600-9.16.6-150300.22.44.1 * libisccc1600-debuginfo-9.16.6-150300.22.44.1 * libbind9-1600-9.16.6-150300.22.44.1 * bind-utils-debuginfo-9.16.6-150300.22.44.1 * libirs1601-9.16.6-150300.22.44.1 * bind-9.16.6-150300.22.44.1 * bind-debuginfo-9.16.6-150300.22.44.1 * libdns1605-debuginfo-9.16.6-150300.22.44.1 * libirs1601-debuginfo-9.16.6-150300.22.44.1 * bind-chrootenv-9.16.6-150300.22.44.1 * libirs-devel-9.16.6-150300.22.44.1 * libns1604-9.16.6-150300.22.44.1 * bind-devel-9.16.6-150300.22.44.1 * libbind9-1600-debuginfo-9.16.6-150300.22.44.1 * libisccc1600-9.16.6-150300.22.44.1 * openSUSE Leap 15.3 (noarch) * bind-doc-9.16.6-150300.22.44.1 * python3-bind-9.16.6-150300.22.44.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libisc1606-debuginfo-9.16.6-150300.22.44.1 * libisc1606-9.16.6-150300.22.44.1 * bind-debugsource-9.16.6-150300.22.44.1 * libirs1601-9.16.6-150300.22.44.1 * libisccfg1600-debuginfo-9.16.6-150300.22.44.1 * bind-debuginfo-9.16.6-150300.22.44.1 * libdns1605-debuginfo-9.16.6-150300.22.44.1 * libirs1601-debuginfo-9.16.6-150300.22.44.1 * libirs-devel-9.16.6-150300.22.44.1 * libdns1605-9.16.6-150300.22.44.1 * libisccfg1600-9.16.6-150300.22.44.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libns1604-debuginfo-9.16.6-150300.22.44.1 * bind-debugsource-9.16.6-150300.22.44.1 * libisccfg1600-debuginfo-9.16.6-150300.22.44.1 * bind-utils-9.16.6-150300.22.44.1 * libisc1606-debuginfo-9.16.6-150300.22.44.1 * libisc1606-9.16.6-150300.22.44.1 * libdns1605-9.16.6-150300.22.44.1 * libisccfg1600-9.16.6-150300.22.44.1 * libisccc1600-debuginfo-9.16.6-150300.22.44.1 * libbind9-1600-9.16.6-150300.22.44.1 * bind-utils-debuginfo-9.16.6-150300.22.44.1 * libirs1601-9.16.6-150300.22.44.1 * bind-9.16.6-150300.22.44.1 * bind-debuginfo-9.16.6-150300.22.44.1 * libdns1605-debuginfo-9.16.6-150300.22.44.1 * libirs1601-debuginfo-9.16.6-150300.22.44.1 * bind-chrootenv-9.16.6-150300.22.44.1 * libirs-devel-9.16.6-150300.22.44.1 * libns1604-9.16.6-150300.22.44.1 * bind-devel-9.16.6-150300.22.44.1 * libbind9-1600-debuginfo-9.16.6-150300.22.44.1 * libisccc1600-9.16.6-150300.22.44.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * bind-doc-9.16.6-150300.22.44.1 * python3-bind-9.16.6-150300.22.44.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libns1604-debuginfo-9.16.6-150300.22.44.1 * bind-debugsource-9.16.6-150300.22.44.1 * libisccfg1600-debuginfo-9.16.6-150300.22.44.1 * bind-utils-9.16.6-150300.22.44.1 * libisc1606-debuginfo-9.16.6-150300.22.44.1 * libisc1606-9.16.6-150300.22.44.1 * libdns1605-9.16.6-150300.22.44.1 * libisccfg1600-9.16.6-150300.22.44.1 * libisccc1600-debuginfo-9.16.6-150300.22.44.1 * libbind9-1600-9.16.6-150300.22.44.1 * bind-utils-debuginfo-9.16.6-150300.22.44.1 * libirs1601-9.16.6-150300.22.44.1 * bind-9.16.6-150300.22.44.1 * bind-debuginfo-9.16.6-150300.22.44.1 * libdns1605-debuginfo-9.16.6-150300.22.44.1 * libirs1601-debuginfo-9.16.6-150300.22.44.1 * bind-chrootenv-9.16.6-150300.22.44.1 * libirs-devel-9.16.6-150300.22.44.1 * libns1604-9.16.6-150300.22.44.1 * bind-devel-9.16.6-150300.22.44.1 * libbind9-1600-debuginfo-9.16.6-150300.22.44.1 * libisccc1600-9.16.6-150300.22.44.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * bind-doc-9.16.6-150300.22.44.1 * python3-bind-9.16.6-150300.22.44.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libns1604-debuginfo-9.16.6-150300.22.44.1 * bind-debugsource-9.16.6-150300.22.44.1 * libisccfg1600-debuginfo-9.16.6-150300.22.44.1 * bind-utils-9.16.6-150300.22.44.1 * libisc1606-debuginfo-9.16.6-150300.22.44.1 * libisc1606-9.16.6-150300.22.44.1 * libdns1605-9.16.6-150300.22.44.1 * libisccfg1600-9.16.6-150300.22.44.1 * libisccc1600-debuginfo-9.16.6-150300.22.44.1 * libbind9-1600-9.16.6-150300.22.44.1 * bind-utils-debuginfo-9.16.6-150300.22.44.1 * libirs1601-9.16.6-150300.22.44.1 * bind-9.16.6-150300.22.44.1 * bind-debuginfo-9.16.6-150300.22.44.1 * libdns1605-debuginfo-9.16.6-150300.22.44.1 * libirs1601-debuginfo-9.16.6-150300.22.44.1 * bind-chrootenv-9.16.6-150300.22.44.1 * libirs-devel-9.16.6-150300.22.44.1 * libns1604-9.16.6-150300.22.44.1 * bind-devel-9.16.6-150300.22.44.1 * libbind9-1600-debuginfo-9.16.6-150300.22.44.1 * libisccc1600-9.16.6-150300.22.44.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * bind-doc-9.16.6-150300.22.44.1 * python3-bind-9.16.6-150300.22.44.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4408.html * https://www.suse.com/security/cve/CVE-2023-50387.html * https://www.suse.com/security/cve/CVE-2023-50868.html * https://www.suse.com/security/cve/CVE-2023-5517.html * https://www.suse.com/security/cve/CVE-2023-6516.html * https://bugzilla.suse.com/show_bug.cgi?id=1219823 * https://bugzilla.suse.com/show_bug.cgi?id=1219826 * https://bugzilla.suse.com/show_bug.cgi?id=1219851 * https://bugzilla.suse.com/show_bug.cgi?id=1219852 * https://bugzilla.suse.com/show_bug.cgi?id=1219854

1 0

SUSE-SU-2024:1984-1: moderate: Security update for aws-nitro-enclaves-cli
by OPENSUSE-UPDATES 11 Jun '24

11 Jun '24

# Security update for aws-nitro-enclaves-cli Announcement ID: SUSE-SU-2024:1984-1 Rating: moderate References: * bsc#1218501 Cross-References: * CVE-2023-50711 CVSS scores: * CVE-2023-50711 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L * CVE-2023-50711 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for aws-nitro-enclaves-cli fixes the following issues: * CVE-2023-50711: Fixed out of bounds memory accesses in embedded vmm-sys-util (bsc#1218501). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1984=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1984=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1984=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1984=1 ## Package List: * openSUSE Leap 15.4 (aarch64 x86_64) * aws-nitro-enclaves-cli-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-cli-debugsource-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-binaryblobs-upstream-debuginfo-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-cli-debuginfo-1.3.0~git1.db34c02-150400.3.6.1 * system-group-ne-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-binaryblobs-upstream-1.3.0~git1.db34c02-150400.3.6.1 * openSUSE Leap 15.5 (aarch64 x86_64) * aws-nitro-enclaves-cli-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-cli-debugsource-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-binaryblobs-upstream-debuginfo-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-cli-debuginfo-1.3.0~git1.db34c02-150400.3.6.1 * system-group-ne-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-binaryblobs-upstream-1.3.0~git1.db34c02-150400.3.6.1 * Public Cloud Module 15-SP4 (aarch64 x86_64) * aws-nitro-enclaves-cli-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-cli-debugsource-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-binaryblobs-upstream-debuginfo-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-cli-debuginfo-1.3.0~git1.db34c02-150400.3.6.1 * system-group-ne-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-binaryblobs-upstream-1.3.0~git1.db34c02-150400.3.6.1 * Public Cloud Module 15-SP5 (aarch64 x86_64) * aws-nitro-enclaves-cli-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-cli-debugsource-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-binaryblobs-upstream-debuginfo-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-cli-debuginfo-1.3.0~git1.db34c02-150400.3.6.1 * system-group-ne-1.3.0~git1.db34c02-150400.3.6.1 * aws-nitro-enclaves-binaryblobs-upstream-1.3.0~git1.db34c02-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50711.html * https://bugzilla.suse.com/show_bug.cgi?id=1218501

1 0

SUSE-SU-2024:1985-1: moderate: Security update for mariadb
by OPENSUSE-UPDATES 11 Jun '24

11 Jun '24

# Security update for mariadb Announcement ID: SUSE-SU-2024:1985-1 Rating: moderate References: * bsc#1217405 * bsc#1225983 Cross-References: * CVE-2023-22084 * CVE-2024-21096 CVSS scores: * CVE-2023-22084 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2023-22084 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-21096 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * Galera for Ericsson 15 SP4 * Galera for Ericsson 15 SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for mariadb fixes the following issues: * CVE-2024-21096: Fixed mysqldump unspecified vulnerability (bsc#1225983). * CVE-2023-22084: Fixed a vulnerability allows high privileged attacker with network access via multiple protocols to compromise the server (bsc#1217405). * Update to 10.6.18. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1985=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1985=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1985=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1985=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1985=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1985=1 * Galera for Ericsson 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-ERICSSON-2024-1985=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1985=1 * Galera for Ericsson 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-ERICSSON-2024-1985=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1985=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1985=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1985=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1985=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * mariadb-bench-debuginfo-10.6.18-150400.3.33.1 * mariadb-debugsource-10.6.18-150400.3.33.1 * mariadb-test-debuginfo-10.6.18-150400.3.33.1 * mariadb-rpm-macros-10.6.18-150400.3.33.1 * libmariadbd-devel-10.6.18-150400.3.33.1 * mariadb-tools-10.6.18-150400.3.33.1 * mariadb-tools-debuginfo-10.6.18-150400.3.33.1 * mariadb-client-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-10.6.18-150400.3.33.1 * mariadb-galera-10.6.18-150400.3.33.1 * mariadb-test-10.6.18-150400.3.33.1 * mariadb-client-10.6.18-150400.3.33.1 * mariadb-bench-10.6.18-150400.3.33.1 * mariadb-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * openSUSE Leap 15.4 (noarch) * mariadb-errormessages-10.6.18-150400.3.33.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * mariadb-bench-debuginfo-10.6.18-150400.3.33.1 * mariadb-debugsource-10.6.18-150400.3.33.1 * mariadb-test-debuginfo-10.6.18-150400.3.33.1 * mariadb-rpm-macros-10.6.18-150400.3.33.1 * libmariadbd-devel-10.6.18-150400.3.33.1 * mariadb-tools-10.6.18-150400.3.33.1 * mariadb-tools-debuginfo-10.6.18-150400.3.33.1 * mariadb-client-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-10.6.18-150400.3.33.1 * mariadb-galera-10.6.18-150400.3.33.1 * mariadb-test-10.6.18-150400.3.33.1 * mariadb-client-10.6.18-150400.3.33.1 * mariadb-bench-10.6.18-150400.3.33.1 * mariadb-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * openSUSE Leap 15.5 (noarch) * mariadb-errormessages-10.6.18-150400.3.33.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * mariadb-galera-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * mariadb-debugsource-10.6.18-150400.3.33.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * mariadb-debugsource-10.6.18-150400.3.33.1 * libmariadbd-devel-10.6.18-150400.3.33.1 * mariadb-tools-10.6.18-150400.3.33.1 * mariadb-tools-debuginfo-10.6.18-150400.3.33.1 * mariadb-client-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-10.6.18-150400.3.33.1 * mariadb-client-10.6.18-150400.3.33.1 * mariadb-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * Server Applications Module 15-SP5 (noarch) * mariadb-errormessages-10.6.18-150400.3.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * mariadb-debugsource-10.6.18-150400.3.33.1 * libmariadbd-devel-10.6.18-150400.3.33.1 * mariadb-tools-10.6.18-150400.3.33.1 * mariadb-tools-debuginfo-10.6.18-150400.3.33.1 * mariadb-client-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-10.6.18-150400.3.33.1 * mariadb-client-10.6.18-150400.3.33.1 * mariadb-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * mariadb-errormessages-10.6.18-150400.3.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * mariadb-debugsource-10.6.18-150400.3.33.1 * libmariadbd-devel-10.6.18-150400.3.33.1 * mariadb-tools-10.6.18-150400.3.33.1 * mariadb-tools-debuginfo-10.6.18-150400.3.33.1 * mariadb-client-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-10.6.18-150400.3.33.1 * mariadb-client-10.6.18-150400.3.33.1 * mariadb-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * mariadb-errormessages-10.6.18-150400.3.33.1 * Galera for Ericsson 15 SP4 (x86_64) * mariadb-galera-10.6.18-150400.3.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * mariadb-debugsource-10.6.18-150400.3.33.1 * libmariadbd-devel-10.6.18-150400.3.33.1 * mariadb-tools-10.6.18-150400.3.33.1 * mariadb-tools-debuginfo-10.6.18-150400.3.33.1 * mariadb-client-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-10.6.18-150400.3.33.1 * mariadb-client-10.6.18-150400.3.33.1 * mariadb-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * mariadb-errormessages-10.6.18-150400.3.33.1 * Galera for Ericsson 15 SP5 (x86_64) * mariadb-galera-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * mariadb-debugsource-10.6.18-150400.3.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * mariadb-debugsource-10.6.18-150400.3.33.1 * libmariadbd-devel-10.6.18-150400.3.33.1 * mariadb-tools-10.6.18-150400.3.33.1 * mariadb-tools-debuginfo-10.6.18-150400.3.33.1 * mariadb-client-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-10.6.18-150400.3.33.1 * mariadb-client-10.6.18-150400.3.33.1 * mariadb-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * mariadb-errormessages-10.6.18-150400.3.33.1 * SUSE Manager Proxy 4.3 (x86_64) * mariadb-debugsource-10.6.18-150400.3.33.1 * libmariadbd-devel-10.6.18-150400.3.33.1 * mariadb-tools-10.6.18-150400.3.33.1 * mariadb-tools-debuginfo-10.6.18-150400.3.33.1 * mariadb-client-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-10.6.18-150400.3.33.1 * mariadb-client-10.6.18-150400.3.33.1 * mariadb-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * SUSE Manager Proxy 4.3 (noarch) * mariadb-errormessages-10.6.18-150400.3.33.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * mariadb-debugsource-10.6.18-150400.3.33.1 * libmariadbd-devel-10.6.18-150400.3.33.1 * mariadb-tools-10.6.18-150400.3.33.1 * mariadb-tools-debuginfo-10.6.18-150400.3.33.1 * mariadb-client-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-10.6.18-150400.3.33.1 * mariadb-client-10.6.18-150400.3.33.1 * mariadb-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * mariadb-errormessages-10.6.18-150400.3.33.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * mariadb-debugsource-10.6.18-150400.3.33.1 * libmariadbd-devel-10.6.18-150400.3.33.1 * mariadb-tools-10.6.18-150400.3.33.1 * mariadb-tools-debuginfo-10.6.18-150400.3.33.1 * mariadb-client-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-debuginfo-10.6.18-150400.3.33.1 * libmariadbd19-10.6.18-150400.3.33.1 * mariadb-client-10.6.18-150400.3.33.1 * mariadb-10.6.18-150400.3.33.1 * mariadb-debuginfo-10.6.18-150400.3.33.1 * SUSE Manager Server 4.3 (noarch) * mariadb-errormessages-10.6.18-150400.3.33.1 ## References: * https://www.suse.com/security/cve/CVE-2023-22084.html * https://www.suse.com/security/cve/CVE-2024-21096.html * https://bugzilla.suse.com/show_bug.cgi?id=1217405 * https://bugzilla.suse.com/show_bug.cgi?id=1225983

1 0

SUSE-SU-2024:1990-1: important: Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by OPENSUSE-UPDATES 11 Jun '24

11 Jun '24

# Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-SU-2024:1990-1 Rating: important References: * bsc#1223356 Cross-References: * CVE-2024-0090 * CVE-2024-0091 * CVE-2024-0092 CVSS scores: * CVE-2024-0090 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2024-0091 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-0092 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Security Update 550.90.07: * CVE-2024-0090: Fixed out of bounds write (bsc#1223356). * CVE-2024-0092: Fixed incorrect exception handling (bsc#1223356). * CVE-2024-0091: Fixed untrusted pointer dereference (bsc#1223356). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1990=1 openSUSE-SLE-15.5-2024-1990=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1990=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1990=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1990=1 ## Package List: * openSUSE Leap 15.5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150500.11.29.1 * openSUSE Leap 15.5 (x86_64) * nvidia-open-driver-G06-signed-azure-devel-550.90.07-150500.3.47.1 * nvidia-open-driver-G06-signed-kmp-azure-550.90.07_k5.14.21_150500.33.54-150500.3.47.1 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.90.07_k5.14.21_150500.33.54-150500.3.47.1 * openSUSE Leap 15.5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150500.55.65-150500.3.47.1 * nvidia-open-driver-G06-signed-debugsource-550.90.07-150500.3.47.1 * nvidia-open-driver-G06-signed-default-devel-550.90.07-150500.3.47.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150500.55.65-150500.3.47.1 * openSUSE Leap 15.5 (aarch64) * nvidia-open-driver-G06-signed-64kb-devel-550.90.07-150500.3.47.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.90.07_k5.14.21_150500.55.65-150500.3.47.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.90.07_k5.14.21_150500.55.65-150500.3.47.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150500.11.29.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150500.55.65-150500.3.47.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150500.55.65-150500.3.47.1 * Basesystem Module 15-SP5 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.90.07-150500.11.29.1 * Basesystem Module 15-SP5 (aarch64) * nvidia-open-driver-G06-signed-64kb-devel-550.90.07-150500.3.47.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.90.07_k5.14.21_150500.55.65-150500.3.47.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.90.07_k5.14.21_150500.55.65-150500.3.47.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.90.07_k5.14.21_150500.55.65-150500.3.47.1 * nvidia-open-driver-G06-signed-debugsource-550.90.07-150500.3.47.1 * nvidia-open-driver-G06-signed-default-devel-550.90.07-150500.3.47.1 * nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150500.55.65-150500.3.47.1 * Public Cloud Module 15-SP5 (x86_64) * nvidia-open-driver-G06-signed-azure-devel-550.90.07-150500.3.47.1 * nvidia-open-driver-G06-signed-kmp-azure-550.90.07_k5.14.21_150500.33.54-150500.3.47.1 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.90.07_k5.14.21_150500.33.54-150500.3.47.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0090.html * https://www.suse.com/security/cve/CVE-2024-0091.html * https://www.suse.com/security/cve/CVE-2024-0092.html * https://bugzilla.suse.com/show_bug.cgi?id=1223356

1 0

SUSE-SU-2024:1974-1: moderate: Security update for rmt-server
by OPENSUSE-UPDATES 11 Jun '24

11 Jun '24

# Security update for rmt-server Announcement ID: SUSE-SU-2024:1974-1 Rating: moderate References: * bsc#1203171 * bsc#1225997 * jsc#PED-7982 * jsc#PED-8018 Cross-References: * CVE-2024-28103 CVSS scores: * CVE-2024-28103 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability, contains two features and has one security fix can now be installed. ## Description: This update for rmt-server fixes the following issues: * Update to version 2.17 * CVE-2024-28103: Fixed Permissions-Policy that was only served on responses with an HTML related Content-Type. (bsc#1225997) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1974=1 openSUSE-SLE-15.5-2024-1974=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1974=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1974=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-1974=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1974=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-1974=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rmt-server-2.17-150500.3.16.1 * rmt-server-pubcloud-2.17-150500.3.16.1 * rmt-server-debuginfo-2.17-150500.3.16.1 * rmt-server-debugsource-2.17-150500.3.16.1 * rmt-server-config-2.17-150500.3.16.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * rmt-server-2.17-150500.3.16.1 * rmt-server-pubcloud-2.17-150500.3.16.1 * rmt-server-debuginfo-2.17-150500.3.16.1 * rmt-server-debugsource-2.17-150500.3.16.1 * rmt-server-config-2.17-150500.3.16.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.17-150500.3.16.1 * rmt-server-debugsource-2.17-150500.3.16.1 * rmt-server-pubcloud-2.17-150500.3.16.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.17-150500.3.16.1 * rmt-server-debugsource-2.17-150500.3.16.1 * rmt-server-pubcloud-2.17-150500.3.16.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rmt-server-2.17-150500.3.16.1 * rmt-server-debuginfo-2.17-150500.3.16.1 * rmt-server-debugsource-2.17-150500.3.16.1 * rmt-server-config-2.17-150500.3.16.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * rmt-server-2.17-150500.3.16.1 * rmt-server-debuginfo-2.17-150500.3.16.1 * rmt-server-debugsource-2.17-150500.3.16.1 * rmt-server-config-2.17-150500.3.16.1 ## References: * https://www.suse.com/security/cve/CVE-2024-28103.html * https://bugzilla.suse.com/show_bug.cgi?id=1203171 * https://bugzilla.suse.com/show_bug.cgi?id=1225997 * https://jira.suse.com/browse/PED-7982 * https://jira.suse.com/browse/PED-8018

1 0

SUSE-SU-2024:1938-1: moderate: Security update for python-docker
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Security update for python-docker Announcement ID: SUSE-SU-2024:1938-1 Rating: moderate References: * bsc#1224788 Cross-References: * CVE-2024-35195 CVSS scores: * CVE-2024-35195 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for python-docker fixes the following issues: * CVE-2024-35195: Fix failure with updated python-requests. (bsc#1224788) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1938=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1938=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1938=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1938=1 ## Package List: * openSUSE Leap 15.5 (noarch) * python3-docker-4.2.0-150200.3.5.1 * openSUSE Leap 15.6 (noarch) * python3-docker-4.2.0-150200.3.5.1 * SUSE Package Hub 15 15-SP5 (noarch) * python3-docker-4.2.0-150200.3.5.1 * SUSE Package Hub 15 15-SP6 (noarch) * python3-docker-4.2.0-150200.3.5.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35195.html * https://bugzilla.suse.com/show_bug.cgi?id=1224788

1 0

SUSE-SU-2024:1939-1: moderate: Security update for python-idna
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Security update for python-idna Announcement ID: SUSE-SU-2024:1939-1 Rating: moderate References: * bsc#1222842 Cross-References: * CVE-2024-3651 CVSS scores: * CVE-2024-3651 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Python 3 Module 15-SP5 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-idna fixes the following issues: * CVE-2024-3651: Fixed a denial of service via resource consumption through specially crafted inputs to idna.encode() (bsc#1222842) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1939=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1939=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1939=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1939=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-1939=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-1939=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-idna-3.4-150400.11.10.1 * openSUSE Leap 15.5 (noarch) * python311-idna-3.4-150400.11.10.1 * openSUSE Leap 15.6 (noarch) * python311-idna-3.4-150400.11.10.1 * Public Cloud Module 15-SP4 (noarch) * python311-idna-3.4-150400.11.10.1 * Python 3 Module 15-SP5 (noarch) * python311-idna-3.4-150400.11.10.1 * Python 3 Module 15-SP6 (noarch) * python311-idna-3.4-150400.11.10.1 ## References: * https://www.suse.com/security/cve/CVE-2024-3651.html * https://bugzilla.suse.com/show_bug.cgi?id=1222842

1 0

SUSE-SU-2024:0613-2: important: Security update for libxml2
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Security update for libxml2 Announcement ID: SUSE-SU-2024:0613-2 Rating: important References: * bsc#1219576 Cross-References: * CVE-2024-25062 CVSS scores: * CVE-2024-25062 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-25062 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for libxml2 fixes the following issues: * CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-613=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-613=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-613=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-613=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-613=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-613=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-613=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-613=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-613=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-613=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-613=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-613=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-613=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-613=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-613=1 ## Package List: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * python311-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-devel-2.9.14-150400.5.28.1 * python311-libxml2-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-32bit-2.9.14-150400.5.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * python311-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-devel-2.9.14-150400.5.28.1 * python311-libxml2-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-32bit-2.9.14-150400.5.28.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * python311-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-32bit-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-32bit-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-devel-2.9.14-150400.5.28.1 * python311-libxml2-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * python311-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-python-debugsource-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-devel-2.9.14-150400.5.28.1 * python311-libxml2-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * openSUSE Leap 15.4 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.28.1 * libxml2-devel-32bit-2.9.14-150400.5.28.1 * libxml2-2-32bit-2.9.14-150400.5.28.1 * openSUSE Leap 15.4 (noarch) * libxml2-doc-2.9.14-150400.5.28.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libxml2-devel-64bit-2.9.14-150400.5.28.1 * libxml2-2-64bit-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-64bit-2.9.14-150400.5.28.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-python-debugsource-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-python-debugsource-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-python-debugsource-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-python-debugsource-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-python-debugsource-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-python-debugsource-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * python311-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-devel-2.9.14-150400.5.28.1 * python311-libxml2-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-32bit-2.9.14-150400.5.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * python311-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-devel-2.9.14-150400.5.28.1 * python311-libxml2-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-32bit-2.9.14-150400.5.28.1 * SUSE Manager Proxy 4.3 (x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-32bit-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-32bit-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-devel-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-32bit-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-32bit-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-devel-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * python3-libxml2-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-debuginfo-2.9.14-150400.5.28.1 * python3-libxml2-2.9.14-150400.5.28.1 * libxml2-2-2.9.14-150400.5.28.1 * libxml2-tools-debuginfo-2.9.14-150400.5.28.1 * libxml2-debugsource-2.9.14-150400.5.28.1 * libxml2-devel-2.9.14-150400.5.28.1 * libxml2-tools-2.9.14-150400.5.28.1 * SUSE Manager Server 4.3 (x86_64) * libxml2-2-32bit-debuginfo-2.9.14-150400.5.28.1 * libxml2-2-32bit-2.9.14-150400.5.28.1 ## References: * https://www.suse.com/security/cve/CVE-2024-25062.html * https://bugzilla.suse.com/show_bug.cgi?id=1219576

1 0

SUSE-RU-2024:1940-1: moderate: Recommended update for suseconnect-ng
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Recommended update for suseconnect-ng Announcement ID: SUSE-RU-2024:1940-1 Rating: moderate References: * bsc#1220679 * bsc#1223107 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for suseconnect-ng fixes the following issues: * Version update * Fix certificate import for Yast when using a registration proxy with self- signed SSL certificate (bsc#1223107) * Allow "\--rollback" flag to run on readonly filesystem (bsc#1220679) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1940=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1940=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1940=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1940=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1940=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1940=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1940=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1940=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1940=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1940=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1940=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1940=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1940=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1940=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1940=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libsuseconnect-1.9.0-150400.3.31.2 * suseconnect-ruby-bindings-1.9.0-150400.3.31.2 * suseconnect-ng-1.9.0-150400.3.31.2 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * suseconnect-ng-1.9.0-150400.3.31.2 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libsuseconnect-1.9.0-150400.3.31.2 * suseconnect-ruby-bindings-1.9.0-150400.3.31.2 * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libsuseconnect-1.9.0-150400.3.31.2 * suseconnect-ruby-bindings-1.9.0-150400.3.31.2 * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libsuseconnect-1.9.0-150400.3.31.2 * suseconnect-ruby-bindings-1.9.0-150400.3.31.2 * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libsuseconnect-1.9.0-150400.3.31.2 * suseconnect-ruby-bindings-1.9.0-150400.3.31.2 * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libsuseconnect-1.9.0-150400.3.31.2 * suseconnect-ruby-bindings-1.9.0-150400.3.31.2 * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Manager Proxy 4.3 (x86_64) * libsuseconnect-1.9.0-150400.3.31.2 * suseconnect-ruby-bindings-1.9.0-150400.3.31.2 * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libsuseconnect-1.9.0-150400.3.31.2 * suseconnect-ruby-bindings-1.9.0-150400.3.31.2 * suseconnect-ng-1.9.0-150400.3.31.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libsuseconnect-1.9.0-150400.3.31.2 * suseconnect-ruby-bindings-1.9.0-150400.3.31.2 * suseconnect-ng-1.9.0-150400.3.31.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220679 * https://bugzilla.suse.com/show_bug.cgi?id=1223107

1 0

SUSE-SU-2024:1943-1: important: Security update for util-linux
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Security update for util-linux Announcement ID: SUSE-SU-2024:1943-1 Rating: important References: * bsc#1218609 * bsc#1220117 * bsc#1221831 * bsc#1223605 Cross-References: * CVE-2024-28085 CVSS scores: * CVE-2024-28085 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has three security fixes can now be installed. ## Description: This update for util-linux fixes the following issues: * CVE-2024-28085: Properly neutralize escape sequences in wall to avoid potential account takeover. (bsc#1221831) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1943=1 SUSE-2024-1943=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1943=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-1943=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libblkid-devel-2.39.3-150600.4.3.1 * libfdisk1-2.39.3-150600.4.3.1 * python-libmount-debugsource-2.39.3-150600.4.3.1 * libsmartcols1-debuginfo-2.39.3-150600.4.3.1 * util-linux-2.39.3-150600.4.3.1 * libuuid-devel-static-2.39.3-150600.4.3.1 * libfdisk-devel-static-2.39.3-150600.4.3.1 * uuidd-debuginfo-2.39.3-150600.4.3.1 * libuuid1-debuginfo-2.39.3-150600.4.3.1 * libblkid1-debuginfo-2.39.3-150600.4.3.1 * python3-libmount-2.39.3-150600.4.3.1 * libblkid-devel-static-2.39.3-150600.4.3.1 * util-linux-tty-tools-2.39.3-150600.4.3.1 * libmount-devel-static-2.39.3-150600.4.3.1 * libfdisk-devel-2.39.3-150600.4.3.1 * python3-libmount-debuginfo-2.39.3-150600.4.3.1 * util-linux-systemd-2.39.3-150600.4.3.1 * libuuid1-2.39.3-150600.4.3.1 * util-linux-debuginfo-2.39.3-150600.4.3.1 * libuuid-devel-2.39.3-150600.4.3.1 * libfdisk1-debuginfo-2.39.3-150600.4.3.1 * uuidd-2.39.3-150600.4.3.1 * libmount-devel-2.39.3-150600.4.3.1 * libblkid1-2.39.3-150600.4.3.1 * libsmartcols-devel-2.39.3-150600.4.3.1 * libmount1-2.39.3-150600.4.3.1 * util-linux-tty-tools-debuginfo-2.39.3-150600.4.3.1 * libsmartcols1-2.39.3-150600.4.3.1 * util-linux-debugsource-2.39.3-150600.4.3.1 * util-linux-systemd-debuginfo-2.39.3-150600.4.3.1 * util-linux-systemd-debugsource-2.39.3-150600.4.3.1 * libsmartcols-devel-static-2.39.3-150600.4.3.1 * libmount1-debuginfo-2.39.3-150600.4.3.1 * openSUSE Leap 15.6 (x86_64) * libsmartcols1-32bit-debuginfo-2.39.3-150600.4.3.1 * libsmartcols1-32bit-2.39.3-150600.4.3.1 * libmount1-32bit-2.39.3-150600.4.3.1 * libfdisk-devel-32bit-2.39.3-150600.4.3.1 * libuuid1-32bit-2.39.3-150600.4.3.1 * libmount-devel-32bit-2.39.3-150600.4.3.1 * libmount1-32bit-debuginfo-2.39.3-150600.4.3.1 * libsmartcols-devel-32bit-2.39.3-150600.4.3.1 * libuuid1-32bit-debuginfo-2.39.3-150600.4.3.1 * libblkid1-32bit-debuginfo-2.39.3-150600.4.3.1 * libuuid-devel-32bit-2.39.3-150600.4.3.1 * libblkid-devel-32bit-2.39.3-150600.4.3.1 * libfdisk1-32bit-debuginfo-2.39.3-150600.4.3.1 * libblkid1-32bit-2.39.3-150600.4.3.1 * libfdisk1-32bit-2.39.3-150600.4.3.1 * openSUSE Leap 15.6 (noarch) * util-linux-lang-2.39.3-150600.4.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libsmartcols1-64bit-debuginfo-2.39.3-150600.4.3.1 * libfdisk1-64bit-debuginfo-2.39.3-150600.4.3.1 * libmount1-64bit-2.39.3-150600.4.3.1 * libsmartcols-devel-64bit-2.39.3-150600.4.3.1 * libblkid1-64bit-debuginfo-2.39.3-150600.4.3.1 * libmount1-64bit-debuginfo-2.39.3-150600.4.3.1 * libmount-devel-64bit-2.39.3-150600.4.3.1 * libuuid1-64bit-2.39.3-150600.4.3.1 * libblkid1-64bit-2.39.3-150600.4.3.1 * libfdisk1-64bit-2.39.3-150600.4.3.1 * libsmartcols1-64bit-2.39.3-150600.4.3.1 * libuuid1-64bit-debuginfo-2.39.3-150600.4.3.1 * libuuid-devel-64bit-2.39.3-150600.4.3.1 * libblkid-devel-64bit-2.39.3-150600.4.3.1 * libfdisk-devel-64bit-2.39.3-150600.4.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libblkid-devel-2.39.3-150600.4.3.1 * libfdisk1-2.39.3-150600.4.3.1 * libsmartcols1-debuginfo-2.39.3-150600.4.3.1 * util-linux-2.39.3-150600.4.3.1 * libuuid-devel-static-2.39.3-150600.4.3.1 * libuuid1-debuginfo-2.39.3-150600.4.3.1 * libblkid1-debuginfo-2.39.3-150600.4.3.1 * libblkid-devel-static-2.39.3-150600.4.3.1 * util-linux-tty-tools-2.39.3-150600.4.3.1 * libfdisk-devel-2.39.3-150600.4.3.1 * util-linux-systemd-2.39.3-150600.4.3.1 * libuuid1-2.39.3-150600.4.3.1 * util-linux-debuginfo-2.39.3-150600.4.3.1 * libuuid-devel-2.39.3-150600.4.3.1 * libfdisk1-debuginfo-2.39.3-150600.4.3.1 * libmount-devel-2.39.3-150600.4.3.1 * libblkid1-2.39.3-150600.4.3.1 * libsmartcols-devel-2.39.3-150600.4.3.1 * libmount1-2.39.3-150600.4.3.1 * util-linux-tty-tools-debuginfo-2.39.3-150600.4.3.1 * libsmartcols1-2.39.3-150600.4.3.1 * util-linux-debugsource-2.39.3-150600.4.3.1 * util-linux-systemd-debuginfo-2.39.3-150600.4.3.1 * util-linux-systemd-debugsource-2.39.3-150600.4.3.1 * libmount1-debuginfo-2.39.3-150600.4.3.1 * Basesystem Module 15-SP6 (noarch) * util-linux-lang-2.39.3-150600.4.3.1 * Basesystem Module 15-SP6 (x86_64) * libmount1-32bit-2.39.3-150600.4.3.1 * libuuid1-32bit-2.39.3-150600.4.3.1 * libuuid1-32bit-debuginfo-2.39.3-150600.4.3.1 * libblkid1-32bit-debuginfo-2.39.3-150600.4.3.1 * libmount1-32bit-debuginfo-2.39.3-150600.4.3.1 * libblkid1-32bit-2.39.3-150600.4.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * uuidd-debuginfo-2.39.3-150600.4.3.1 * util-linux-systemd-debugsource-2.39.3-150600.4.3.1 * util-linux-systemd-debuginfo-2.39.3-150600.4.3.1 * uuidd-2.39.3-150600.4.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-28085.html * https://bugzilla.suse.com/show_bug.cgi?id=1218609 * https://bugzilla.suse.com/show_bug.cgi?id=1220117 * https://bugzilla.suse.com/show_bug.cgi?id=1221831 * https://bugzilla.suse.com/show_bug.cgi?id=1223605

1 0

SUSE-SU-2024:1968-1: moderate: Security update for python-Brotli
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Security update for python-Brotli Announcement ID: SUSE-SU-2024:1968-1 Rating: moderate References: * bsc#1175825 Cross-References: * CVE-2020-8927 CVSS scores: * CVE-2020-8927 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2020-8927 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * openSUSE Leap 15.5 * Python 3 Module 15-SP6 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for python-Brotli fixes the following issues: * CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB. (bsc#1175825) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1968=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-1968=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1968=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-Brotli-debugsource-1.0.7-150200.3.3.1 * python3-Brotli-1.0.7-150200.3.3.1 * python3-Brotli-debuginfo-1.0.7-150200.3.3.1 * python-Brotli-debuginfo-1.0.7-150200.3.3.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python-Brotli-debugsource-1.0.7-150200.3.3.1 * python3-Brotli-1.0.7-150200.3.3.1 * python3-Brotli-debuginfo-1.0.7-150200.3.3.1 * python-Brotli-debuginfo-1.0.7-150200.3.3.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python-Brotli-debugsource-1.0.7-150200.3.3.1 * python3-Brotli-1.0.7-150200.3.3.1 * python3-Brotli-debuginfo-1.0.7-150200.3.3.1 * python-Brotli-debuginfo-1.0.7-150200.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2020-8927.html * https://bugzilla.suse.com/show_bug.cgi?id=1175825

1 0

SUSE-SU-2024:1971-1: important: Security update for frr
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Security update for frr Announcement ID: SUSE-SU-2024:1971-1 Rating: important References: * bsc#1222526 * bsc#1222528 * bsc#1223786 Cross-References: * CVE-2024-31950 * CVE-2024-31951 * CVE-2024-34088 CVSS scores: * CVE-2024-31950 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-31951 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-34088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for frr fixes the following issues: * CVE-2024-34088: Fixed null pointer via get_edge() function can trigger a denial of service (bsc#1223786). * CVE-2024-31951: Fixed buffer overflow in ospf_te_parse_ext_link (bsc#1222528). * CVE-2024-31950: Fixed buffer overflow and daemon crash in ospf_te_parse_ri (bsc#1222526). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1971=1 openSUSE-SLE-15.5-2024-1971=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1971=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1971=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-1971=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libfrr0-8.4-150500.4.23.1 * libfrrcares0-debuginfo-8.4-150500.4.23.1 * libfrrospfapiclient0-debuginfo-8.4-150500.4.23.1 * frr-debugsource-8.4-150500.4.23.1 * libfrr_pb0-8.4-150500.4.23.1 * libfrrzmq0-8.4-150500.4.23.1 * libfrrzmq0-debuginfo-8.4-150500.4.23.1 * libfrrcares0-8.4-150500.4.23.1 * libfrrfpm_pb0-8.4-150500.4.23.1 * libfrrospfapiclient0-8.4-150500.4.23.1 * libfrr_pb0-debuginfo-8.4-150500.4.23.1 * libfrrsnmp0-8.4-150500.4.23.1 * frr-8.4-150500.4.23.1 * libfrr0-debuginfo-8.4-150500.4.23.1 * libfrrfpm_pb0-debuginfo-8.4-150500.4.23.1 * libmlag_pb0-8.4-150500.4.23.1 * libfrrsnmp0-debuginfo-8.4-150500.4.23.1 * frr-debuginfo-8.4-150500.4.23.1 * frr-devel-8.4-150500.4.23.1 * libmlag_pb0-debuginfo-8.4-150500.4.23.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libfrr0-8.4-150500.4.23.1 * libfrrcares0-debuginfo-8.4-150500.4.23.1 * libfrrospfapiclient0-debuginfo-8.4-150500.4.23.1 * frr-debugsource-8.4-150500.4.23.1 * libfrr_pb0-8.4-150500.4.23.1 * libfrrzmq0-8.4-150500.4.23.1 * libfrrzmq0-debuginfo-8.4-150500.4.23.1 * libfrrcares0-8.4-150500.4.23.1 * libfrrfpm_pb0-8.4-150500.4.23.1 * libfrrospfapiclient0-8.4-150500.4.23.1 * libfrr_pb0-debuginfo-8.4-150500.4.23.1 * libfrrsnmp0-8.4-150500.4.23.1 * frr-8.4-150500.4.23.1 * libfrr0-debuginfo-8.4-150500.4.23.1 * libfrrfpm_pb0-debuginfo-8.4-150500.4.23.1 * libmlag_pb0-8.4-150500.4.23.1 * libfrrsnmp0-debuginfo-8.4-150500.4.23.1 * frr-debuginfo-8.4-150500.4.23.1 * frr-devel-8.4-150500.4.23.1 * libmlag_pb0-debuginfo-8.4-150500.4.23.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libfrr0-8.4-150500.4.23.1 * libfrrcares0-debuginfo-8.4-150500.4.23.1 * libfrrospfapiclient0-debuginfo-8.4-150500.4.23.1 * frr-debugsource-8.4-150500.4.23.1 * libfrr_pb0-8.4-150500.4.23.1 * libfrrzmq0-8.4-150500.4.23.1 * libfrrzmq0-debuginfo-8.4-150500.4.23.1 * libfrrcares0-8.4-150500.4.23.1 * libfrrfpm_pb0-8.4-150500.4.23.1 * libfrrospfapiclient0-8.4-150500.4.23.1 * libfrr_pb0-debuginfo-8.4-150500.4.23.1 * libfrrsnmp0-8.4-150500.4.23.1 * frr-8.4-150500.4.23.1 * libfrr0-debuginfo-8.4-150500.4.23.1 * libfrrfpm_pb0-debuginfo-8.4-150500.4.23.1 * libmlag_pb0-8.4-150500.4.23.1 * libfrrsnmp0-debuginfo-8.4-150500.4.23.1 * frr-debuginfo-8.4-150500.4.23.1 * frr-devel-8.4-150500.4.23.1 * libmlag_pb0-debuginfo-8.4-150500.4.23.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libfrr0-8.4-150500.4.23.1 * libfrrcares0-debuginfo-8.4-150500.4.23.1 * libfrrospfapiclient0-debuginfo-8.4-150500.4.23.1 * frr-debugsource-8.4-150500.4.23.1 * libfrr_pb0-8.4-150500.4.23.1 * libfrrzmq0-8.4-150500.4.23.1 * libfrrzmq0-debuginfo-8.4-150500.4.23.1 * libfrrcares0-8.4-150500.4.23.1 * libfrrfpm_pb0-8.4-150500.4.23.1 * libfrrospfapiclient0-8.4-150500.4.23.1 * libfrr_pb0-debuginfo-8.4-150500.4.23.1 * libfrrsnmp0-8.4-150500.4.23.1 * frr-8.4-150500.4.23.1 * libfrr0-debuginfo-8.4-150500.4.23.1 * libfrrfpm_pb0-debuginfo-8.4-150500.4.23.1 * libmlag_pb0-8.4-150500.4.23.1 * libfrrsnmp0-debuginfo-8.4-150500.4.23.1 * frr-debuginfo-8.4-150500.4.23.1 * frr-devel-8.4-150500.4.23.1 * libmlag_pb0-debuginfo-8.4-150500.4.23.1 ## References: * https://www.suse.com/security/cve/CVE-2024-31950.html * https://www.suse.com/security/cve/CVE-2024-31951.html * https://www.suse.com/security/cve/CVE-2024-34088.html * https://bugzilla.suse.com/show_bug.cgi?id=1222526 * https://bugzilla.suse.com/show_bug.cgi?id=1222528 * https://bugzilla.suse.com/show_bug.cgi?id=1223786

1 0

SUSE-RU-2024:1964-1: moderate: Recommended update for kiwi-templates-Minimal-s390x
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Recommended update for kiwi-templates-Minimal-s390x Announcement ID: SUSE-RU-2024:1964-1 Rating: moderate References: * bsc#1223257 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for kiwi-templates-Minimal-s390x fixes the following issue: * [s390x] firewalld is not running after firstboot (bsc#1223257) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1964=1 openSUSE-SLE-15.5-2024-1964=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1964=1 ## Package List: * openSUSE Leap 15.5 (noarch) * kiwi-templates-Minimal-s390x-15.5-150500.5.9.2 * Development Tools Module 15-SP5 (noarch) * kiwi-templates-Minimal-s390x-15.5-150500.5.9.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223257

1 0

SUSE-SU-2024:1966-1: moderate: Security update for aws-nitro-enclaves-cli
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Security update for aws-nitro-enclaves-cli Announcement ID: SUSE-SU-2024:1966-1 Rating: moderate References: * bsc#1218501 Cross-References: * CVE-2023-50711 CVSS scores: * CVE-2023-50711 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L * CVE-2023-50711 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for aws-nitro-enclaves-cli fixes the following issues: * CVE-2023-50711: Fixed out of bounds memory accesses in embedded vmm-sys-util (bsc#1218501). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-1966=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1966=1 openSUSE-SLE-15.6-2024-1966=1 ## Package List: * Public Cloud Module 15-SP6 (aarch64 x86_64) * aws-nitro-enclaves-cli-debugsource-1.3.0~git1.db34c02-150600.10.3.1 * aws-nitro-enclaves-binaryblobs-upstream-debuginfo-1.3.0~git1.db34c02-150600.10.3.1 * aws-nitro-enclaves-cli-debuginfo-1.3.0~git1.db34c02-150600.10.3.1 * system-group-ne-1.3.0~git1.db34c02-150600.10.3.1 * aws-nitro-enclaves-cli-1.3.0~git1.db34c02-150600.10.3.1 * aws-nitro-enclaves-binaryblobs-upstream-1.3.0~git1.db34c02-150600.10.3.1 * openSUSE Leap 15.6 (aarch64 x86_64) * aws-nitro-enclaves-cli-debugsource-1.3.0~git1.db34c02-150600.10.3.1 * aws-nitro-enclaves-binaryblobs-upstream-debuginfo-1.3.0~git1.db34c02-150600.10.3.1 * aws-nitro-enclaves-cli-debuginfo-1.3.0~git1.db34c02-150600.10.3.1 * system-group-ne-1.3.0~git1.db34c02-150600.10.3.1 * aws-nitro-enclaves-cli-1.3.0~git1.db34c02-150600.10.3.1 * aws-nitro-enclaves-binaryblobs-upstream-1.3.0~git1.db34c02-150600.10.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50711.html * https://bugzilla.suse.com/show_bug.cgi?id=1218501

1 0

openSUSE-SU-2024:0156-1: important: Security update for opera
by opensuse-security＠opensuse.org 10 Jun '24

10 Jun '24

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0156-1 Rating: important References: Cross-References: CVE-2024-3832 CVE-2024-3833 CVE-2024-3834 CVE-2024-3837 CVE-2024-3838 CVE-2024-3839 CVE-2024-3840 CVE-2024-3841 CVE-2024-3843 CVE-2024-3844 CVE-2024-3845 CVE-2024-3846 CVE-2024-3847 CVE-2024-3914 CVE-2024-4671 CVE-2024-5274 CVSS scores: CVE-2024-3834 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-3837 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-3838 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2024-3839 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2024-4671 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2024-5274 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.6:NonFree ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This update for opera fixes the following issues: Update to 110.0.5130.64 * CHR-9748 Update Chromium on desktop-stable-124-5130 to 124.0.6367.243 * DNA-116317 Create outline or shadow around emojis on tab strip * DNA-116320 Create animation for emoji disappearing from tab strip * DNA-116564 Assign custom emoji from emoji picker * DNA-116690 Make chrome://emoji-picker attachable by webdriver * DNA-116732 Introduce stat event for setting / unsetting emoji on a tab * DNA-116753 Emoji picker does not follow browser theme * DNA-116755 Record tab emojis added / removed * DNA-116777 Enable #tab-art on all streams Update to 110.0.5130.49 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-116706 [gpu-crash] Crash at SkGpuShaderImageFilter:: onFilterImage(skif::Context const&) Update to 110.0.5130.39 * DNA-115603 [Rich Hints] Pass trigger source to the Rich Hint * DNA-116680 Import 0-day fix for CVE-2024-5274 Update to 110.0.5130.35 * CHR-9721 Update Chromium on desktop-stable-124-5130 to 124.0.6367.202 * DNA-114787 Crash at views::View::DoRemoveChildView(views:: View*, bool, bool, views::View*) * DNA-115640 Tab island is not properly displayed after drag&drop in light theme * DNA-116191 Fix link in RTV Euro CoS * DNA-116218 Crash at SkGpuShaderImageFilter::onFilterImage (skif::Context const&) * DNA-116241 Update affiliation link for media expert "Continue On" * DNA-116256 Crash at TabHoverCardController::UpdateHoverCard (opera::TabDataView*, TabHoverCardController::UpdateType, bool) * DNA-116270 Show 'Suggestions' inside expanding Speed Dial field * DNA-116474 Implement the no dynamic hover approach * DNA-116493 Make sure that additional elements like (Sync your browser) etc. doesn’t shift content down on page * DNA-116515 Import 0-day fix from Chromium "[wasm-gc] Only normalize JSObject targets in SetOrCopyDataProperties" * DNA-116543 Twitter migrate to x.com * DNA-116552 Change max width of the banner * DNA-116569 Twitter in Panel loading for the first time opens two Tabs automatically * DNA-116587 Translate settings strings for every language The update to chromium 124.0.6367.202 fixes following issues: CVE-2024-4671 Update to 110.0.5130.23 * CHR-9706 Update Chromium on desktop-stable-124-5130 to 124.0.6367.62 * DNA-116450 Promote 110 to stable - Complete Opera 110 changelog at: https://blogs.opera.com/desktop/changelog-for-110/ - The update to chromium 124.0.6367.62 fixes following issues: CVE-2024-3832, CVE-2024-3833, CVE-2024-3914, CVE-2024-3834, CVE-2024-3837, CVE-2024-3838, CVE-2024-3839, CVE-2024-3840, CVE-2024-3841, CVE-2024-3843, CVE-2024-3844, CVE-2024-3845, CVE-2024-3846, CVE-2024-3847 - Update to 109.0.5097.80 * DNA-115738 Crash at extensions::ExtensionRegistry:: GetExtensionById(std::__Cr::basic_string const&, int) * DNA-115797 [Flow] Never ending loading while connecting to flow * DNA-116315 Chat GPT in Sidebar Panel doesn’t work - Update to 109.0.5097.59 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-115810 Enable #drag-multiple-tabs on all streams Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6:NonFree: zypper in -t patch openSUSE-2024-156=1 Package List: - openSUSE Leap 15.6:NonFree (x86_64): opera-110.0.5130.64-lp156.2.6.1 References: https://www.suse.com/security/cve/CVE-2024-3832.html https://www.suse.com/security/cve/CVE-2024-3833.html https://www.suse.com/security/cve/CVE-2024-3834.html https://www.suse.com/security/cve/CVE-2024-3837.html https://www.suse.com/security/cve/CVE-2024-3838.html https://www.suse.com/security/cve/CVE-2024-3839.html https://www.suse.com/security/cve/CVE-2024-3840.html https://www.suse.com/security/cve/CVE-2024-3841.html https://www.suse.com/security/cve/CVE-2024-3843.html https://www.suse.com/security/cve/CVE-2024-3844.html https://www.suse.com/security/cve/CVE-2024-3845.html https://www.suse.com/security/cve/CVE-2024-3846.html https://www.suse.com/security/cve/CVE-2024-3847.html https://www.suse.com/security/cve/CVE-2024-3914.html https://www.suse.com/security/cve/CVE-2024-4671.html https://www.suse.com/security/cve/CVE-2024-5274.html

1 0

SUSE-SU-2024:1961-1: moderate: Security update for squid
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Security update for squid Announcement ID: SUSE-SU-2024:1961-1 Rating: moderate References: * bsc#1225417 Cross-References: * CVE-2024-33427 CVSS scores: * CVE-2024-33427 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service (bsc#1225417). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1961=1 openSUSE-SLE-15.6-2024-1961=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-1961=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * squid-debuginfo-6.9-150600.3.3.2 * squid-debugsource-6.9-150600.3.3.2 * squid-6.9-150600.3.3.2 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * squid-debuginfo-6.9-150600.3.3.2 * squid-debugsource-6.9-150600.3.3.2 * squid-6.9-150600.3.3.2 ## References: * https://www.suse.com/security/cve/CVE-2024-33427.html * https://bugzilla.suse.com/show_bug.cgi?id=1225417

1 0

SUSE-SU-2024:1963-1: important: Security update for apache2
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Security update for apache2 Announcement ID: SUSE-SU-2024:1963-1 Rating: important References: * bsc#1221401 * bsc#1222330 * bsc#1222332 Cross-References: * CVE-2023-38709 * CVE-2024-24795 * CVE-2024-27316 CVSS scores: * CVE-2023-38709 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-24795 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-27316 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27316 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for apache2 fixes the following issues: * CVE-2023-38709: Fixed HTTP response splitting (bsc#1222330). * CVE-2024-24795: Fixed HTTP response splitting in multiple modules (bsc#1222332). * CVE-2024-27316: Fixed HTTP/2 CONTINUATION frames can be utilized for DoS attacks (bsc#1221401). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1963=1 openSUSE-SLE-15.6-2024-1963=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1963=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1963=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-1963=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * apache2-prefork-debuginfo-2.4.58-150600.5.3.1 * apache2-event-2.4.58-150600.5.3.1 * apache2-debuginfo-2.4.58-150600.5.3.1 * apache2-debugsource-2.4.58-150600.5.3.1 * apache2-utils-2.4.58-150600.5.3.1 * apache2-worker-2.4.58-150600.5.3.1 * apache2-2.4.58-150600.5.3.1 * apache2-utils-debugsource-2.4.58-150600.5.3.1 * apache2-devel-2.4.58-150600.5.3.1 * apache2-event-debugsource-2.4.58-150600.5.3.1 * apache2-utils-debuginfo-2.4.58-150600.5.3.1 * apache2-prefork-debugsource-2.4.58-150600.5.3.1 * apache2-worker-debugsource-2.4.58-150600.5.3.1 * apache2-event-debuginfo-2.4.58-150600.5.3.1 * apache2-prefork-2.4.58-150600.5.3.1 * apache2-worker-debuginfo-2.4.58-150600.5.3.1 * openSUSE Leap 15.6 (noarch) * apache2-manual-2.4.58-150600.5.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-prefork-debuginfo-2.4.58-150600.5.3.1 * apache2-debuginfo-2.4.58-150600.5.3.1 * apache2-debugsource-2.4.58-150600.5.3.1 * apache2-2.4.58-150600.5.3.1 * apache2-prefork-debugsource-2.4.58-150600.5.3.1 * apache2-prefork-2.4.58-150600.5.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-event-2.4.58-150600.5.3.1 * apache2-debuginfo-2.4.58-150600.5.3.1 * apache2-debugsource-2.4.58-150600.5.3.1 * apache2-event-debugsource-2.4.58-150600.5.3.1 * apache2-event-debuginfo-2.4.58-150600.5.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-utils-2.4.58-150600.5.3.1 * apache2-worker-2.4.58-150600.5.3.1 * apache2-utils-debugsource-2.4.58-150600.5.3.1 * apache2-devel-2.4.58-150600.5.3.1 * apache2-utils-debuginfo-2.4.58-150600.5.3.1 * apache2-worker-debugsource-2.4.58-150600.5.3.1 * apache2-worker-debuginfo-2.4.58-150600.5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38709.html * https://www.suse.com/security/cve/CVE-2024-24795.html * https://www.suse.com/security/cve/CVE-2024-27316.html * https://bugzilla.suse.com/show_bug.cgi?id=1221401 * https://bugzilla.suse.com/show_bug.cgi?id=1222330 * https://bugzilla.suse.com/show_bug.cgi?id=1222332

1 0

SUSE-RU-2024:1956-1: moderate: Recommended update for google-errorprone, guava
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Recommended update for google-errorprone, guava Announcement ID: SUSE-RU-2024:1956-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for google-errorprone, guava fixes the following issues: guava: * guava was updated to version 33.1.0: * Changes of version 33.1.0: * Updated our Error Prone dependency to 2.26.1, which includes a JPMS-ready jar of annotations. If you use the Error Prone annotations in a modular build of your own code, you may need to add a requires line for them. * base: Added a Duration overload for Suppliers.memoizeWithExpiration. * base: Deprecated the remaining two overloads of Throwables.propagateIfPossible. They won't be deleted, but we recommend migrating off them. * cache: Fixed a bug that could cause false "recursive load" reports during refresh. * graph: Changed the return types of transitiveClosure() and reachableNodes() to Immutable* types. reachableNodes() already returned an immutable object (even though that was not reflected in the declared return type); transitiveClosure() used to return a mutable object. The old signatures remain available, so this change does not break binary compatibility. * graph: Changed the behavior of views returned by graph accessor methods that take a graph element as input: They now throw IllegalStateException when that element is removed from the graph. * hash: Optimized Checksum-based hash functions for Java 9+. * testing: Exposed FakeTicker Duration methods to Android users. * util.concurrent: Deprecated the constructors of UncheckedExecutionException and ExecutionError that don't accept a cause. We won't remove these constructors, but we recommend migrating off them, as users of those classes often assume that instances will contain a cause. * util.concurrent: Improved the correctness of racy accesses for J2ObjC users. * Changes of version 33.0.0: * This version of guava-android contains some package-private methods whose signature includes the Java 8 Collector API. This is a test to identify any problems before we expose those methods publicly to users. Please report any problems that you encounter. * Changed various classes to catch Exception instead of RuntimeException even when only RuntimeException is theoretically possible. This can help code that throws undeclared exceptions, as some bytecode rewriters (e.g., Robolectric) and languages (e.g., Kotlin) do. * Added an Automatic-Module-Name to failureaccess, Guava's one strong runtime dependency. * reflect: In guava-android only, removed Invokable.getAnnotatedReturnType() and Parameter.getAnnotatedType(). These methods never worked in an Android VM, and to reflect that, they were born @Deprecated, @Beta, and @DoNotCall. They're now preventing us from rolling out some new Android compatibility testing. This is the only binary-incompatible change in this release, and it should have no effect in practice. Still, we bump the major version number to follow Semantic Versioning. * util.concurrent: Changed our implementations to avoid eagerly initializing loggers during class loading. This can help performance, especially under Android. * Changes of version 32.1.3: * Changed Gradle Metadata to include dependency versions directly. This may address "Could not find some-dependency" errors that some users have reported (which might be a result of users' excluding guava-parent). * collect: Changed Multisets.unmodifiableMultiset(set) .removeIf(predicate) to throw an exception always, even if nothing matches predicate. * graph: Fixed the behavior of Graph/ValueGraph views for a node when that node is removed from the graph. * io: Fixed Files.createTempDir and FileBackedOutputStream under Windows services, a rare use case. (The fix actually covers only Java 9+ because Java 8 would require an additional approach. Let us know if you need support under Java 8.) * net: Made MediaType.parse allow and skip over whitespace around the / and = separator tokens in addition to the ; separator, for which it was already being allowed. * util.concurrent: Tweaked Futures.getChecked constructor-selection behavior: The method continues to prefer to call constructors with a String parameter, but now it breaks ties based on whether the constructor has a Throwable parameter. Beyond that, the choice of constructor remains undefined. (For this and other reasons, we discourage the use of getChecked.) * Changes of version 32.1.2: * Removed the section of our Gradle metadata that caused Gradle to report conflicts with listenablefuture. * Changed our Maven project to avoid affecting which version of Mockito our Gradle users see. * collect: Under J2CL, exposed ImmutableList and ImmutableSet methods copyOf and of for JavaScript usage. * net: Optimized InternetDomainName construction. * Changes of version 32.1.1: * Fixed our broken Gradle metadata from 32.1.0. Sorry again for the trouble. If you use Gradle, please still read the release notes from that version: You may still see errors from the new checking that the metadata enables, and the release notes discuss how to fix those errors. * Changes of version 32.1.0: * collect: Tweaked more nullness annotations. * hash: Enhanced crc32c() to use Java's hardware-accelerated implementation where available. * util.concurrent: Added Duration-based default methods to ListeningExecutorService. * Began updating Javadoc to focus less on APIs that have been superseded by additions to the JDK. We're also looking to add more documentation that directs users to JDK equivalents for our APIs. Further PRs welcome! * Fixed some problems with using Guava from a Java Agent. (But we don't test that configuration, and we don't know how well we'll be able to keep it working.) * Fixed BootstrapMethodError when using CacheBuilder from a custom system class loader. (As with the previous item, we're not sure how well we'll be able to keep this use case working.) * Suppressed a harmless unusable-by-js warning seen by users of guava-gwt. * Fix version mismatch in the ant build files. * The binaries are compatible with java 1.8 google-errorprone, google-errorprone-annotations: * google-errorprone and google-errorprone-annotations were updated to version 2.26.1: * Changes of version 2.26.1: * Fixes the module name: from 'com.google.errorprone.annotation' to 'com.google.errorprone.annotations'. Amends the OSGi build not to include 'Automatic-Module-Name' in the MANIFEST.MF for the 'annotations' project. * Changes of version 2.26.0: * The 'annotations' artifact now includes a module-info.java for Java Platform Module System support. * Disabled checks passed to -XepPatchChecks are now ignored, instead of causing a crash. * New checks: * SystemConsoleNull: Null-checking System.console() is not a reliable way to detect if the console is connected to a terminal. * EnumOrdinal: Discourage uses of Enum.ordinal() * Closed issues: * Add module-info.java * 2.19.x: Exception thrown when a disabled check is passed to -XepPatchChecks * Ignore disabled checks passed to -XepPatchChecks * feat: add jpms definition for annotations * Add the 'compile' goal for 'compile-java9' * Changes of version 2.25.0: * New checks: * JUnitIncompatibleType: Detects incompatible types passed to an assertion, similar to TruthIncompatibleType * RedundantSetterCall: Detects fields set twice in the same chained expression. Generalization of previous ProtoRedundantSet check to also handle AutoValue. * Closed issues: * Crash in UnnecessaryStringBuilder * Fix typos * Add support for specifying badEnclosingTypes for BadImport via flags * Some BugPattern docs are missing code examples * Remove incorrect statement from BugPattern index doc * Do not report NonFinalStaticField findings for fields modified in @BeforeAll methods * Changes of version 2.24.1: * Add an assertion to try to help debug * Changes of version 2.24.0: * New checks: * MultipleNullnessAnnotations: Discourage multiple nullness annotations * NullableTypeParameter: Discourage nullness annotations on type parameters * NullableWildcard: Discourage nullness annotations on wildcards * SuperCallToObjectMethod: Generalization of SuperEqualsIsObjectEquals, now covers hashCode * Changes of version 2.23.0: * New checks: DuplicateDateFormatField, NonFinalStaticField, StringCharset, StringFormatWithLiteral, SuperEqualsIsObjectEquals * Bug fixes and improvements * Changes of version 2.22.0: * New checks: * ClosingStandardOutputStreams: Prevents accidentally closing System.{out,err} with try-with-resources * TruthContainsExactlyElementsInUsage: containsExactly is preferred over containsExactlyElementsIn when creating new iterables * UnnecessaryAsync: detects unnecessary use of async primitives in local (and hence single-threaded) scopes * ReturnAtTheEndOfVoidFunction: detects unnecessary return statements at the end of void functions * MultimapKeys: Suggests using keySet() instead of iterating over Multimap.keys(), which does not collapse duplicates * Bug fixes and improvements: * Don't complain about literal IP addresses in AddressSelection * Prevent SuggestedFixes#renameMethod from modifying return type declaration * Fix UnusedVariable false positives for private record parameters * When running in conservative mode, no longer assume that implementations of Map.get, etc. return null * CanIgnoreReturnValueSuggester: Support additional exempting method annotations * UnusedVariable: exclude junit5's @RegisterExtension * Support running all available patch checks * Upgrade java-diff-utils 4.0 -> 4.12 * Flag unused Refaster template parameters * Support @SuppressWarnings("all") * Prevent Refaster UMemberSelect from matching method parameters * MissingDefault : Don't require // fall out comments on expression switches * Skip UnnecessaryLambda findings for usages in enhanced for loops * Fix bug where nested MissingBraces violations' suggested fixes result in broken code * Add support for specifying exemptPrefixes/exemptNames for UnusedVariable via flags * UnusedMethod: Added exempting variable annotations * Changes of version 2.21.1: * Handle overlapping ranges in suppressedRegions * Add AddressSelection to discourage APIs that convert a hostname to a single address * Changes of version 2.21.0: * New Checkers: * AttemptedNegativeZero: Prevents accidental use of -0, which is the same as 0. The floating-point negative zero is -0.0. * ICCProfileGetInstance: Warns on uses of ICC_Profile.getInstance(String), due to JDK-8191622. * MutableGuiceModule: Fields in Guice modules should be final. * NullableOptional: Discourages @Nullable-annotated Optionals. * OverridingMethodInconsistentArgumentNamesChecker: Arguments of overriding method are inconsistent with overridden method. * Fixed issues: * Avoid MemberName IOOBE on lambda parameters inside overriding methods * Improve LockOnNonEnclosingClassLiteral documentation * Security scan reported high CVE for com.google.guava:guava:31.1-jre * Upgrade guava to 32.0.1 * Proposal: checker to prevent other checkers from calling javac methods that changed across JDKs * Add support in ASTHelpersSuggestions for getEnclosedElements * Changes of version 2.20.0: * This release is compatible with early-access builds of JDK 21. * New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder, BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain, LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation, NamedLikeContextualKeyword, NonApiType * Fixes issues: * Introduce MissingRefasterAnnotation checker * Fix minor typo in URepeated * Drop unused constant Template#AUTOBOXING_DEFAULT * Introduce command-line flag -XepAllSuggestionsAsWarnings * JDK21 compatibility * Add OSGi runtime metadata to error-prone's MANIFEST.MF files * Use EISOP Checker Framework version 3.34.0-eisop1 * NotJavadoc pattern does not allow Javadoc on module declarations * ErrorProneInjector incorrectly picks up the no-args constructor * Several high CVEs related to dependency com.google.protobuf:protobuf-java:3.19.2 * Upgrade protobuf-java to 3.19.6 * Changes of version 2.19.1: * This release fixes a binary compatibility issue when running on JDK 11 * Changes of version 2.19.0: * New Checkers: NotJavadoc, StringCaseLocaleUsage, UnnecessaryTestMethodPrefix * Fixes issues: * Exclude inner classes annotated with @Nested from ClassCanBeStatic rule * Optimize VisitorState#getSymbolFromName * ClassCanBeStatic: Exclude JUnit @Nested classes * BadImport: flag static import of newInstance methods * Support given for enforcing DirectInvocationOnMock: issue 3396 * Handle yield statement case in ASTHelpers#targetType * Should ASTHelpers.getSymbol(Tree) be annotated with @Nullable? * Fix '@' character in javadoc code snippets * Replace guava cache with caffeine * Discourage APIs locale-dependent APIs like String.to{Lower,Upper}Case * Introduce StringCaseLocaleUsage check * Changes of version 2.18.0: * New Checkers: InjectOnBugCheckers, LabelledBreakTarget, UnusedLabel, YodaCondition * Fixes issues: * @SuppressWarnings("InlineFormatString") doesn't work * Refaster: support method invocation type argument inlining * java.lang.IllegalArgumentException: Cannot edit synthetic AST nodes with specific record constructor * Rename class to match filename * Optimize VisitorState#getSymbolFromName * refactor: refactor bad smell UnusedLabel * LambdaFunctionalInterface crash with IllegalArgumentException when processing an enum constructor taking a lambda * Fix JDK 20-ea build compatibility * UngroupedOverloads: ignore generated constructors * [errorprone 2.17.0] NPE in StatementSwitchToExpressionSwitch.analyzeSwitchTree * StatementSwitchToExpressionSwitch: handle empty statement blocks * StatementSwitchToExpressionSwitch: only trigger on compatible target versions * Fix Finalize bugpattern to match protected finalize() * Make MemoizeConstantVisitorStateLookups check suppressible * Changes of version 2.17.0: * New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter, ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem, StatementSwitchToExpressionSwitch, UnqualifiedYield * Fixed issues: * InvalidParam warning on Javadoc for Java record components * UnusedMethod flags @JsonValue methods as unused * UnusedMethod: Add more JPA lifecycle annotations or make annotations configurable * UnusedMethod: Support additional exempting method annotations * Have InvalidParam support records * Fix -XepDisableAllWarnings flag when passed on its own * ASTHelpersSuggestions does not flag call to packge() on com.sun.tools.javac.code.Symbol.ClassSymbol * @SupressWarnings on record compact constructor causes crash * Changes of version 2.16.0: * New Checkers: ASTHelpersSuggestions, CanIgnoreReturnValueSuggester, LenientFormatStringValidation, UnnecessarilyUsedValue * Fixed issues: * Avoid using non-ASCII Unicode characters outside of comments and literals * NullPointerException thrown during analysis * NPE analysing new style switch statement (2.14.0) * ImmutableChecker handles null types * Drop pre-JDK 11 logic from Refaster's Inliner class * Changes of version 2.15.0: * New Checkers: BuilderReturnThis, CanIgnoreReturnValueSuggester, CannotMockFinalClass, CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject, MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses, NullArgumentForNonNullParameter, SelfAlwaysReturnsThis, UnsafeWildcard, UnusedTypeParameter * Changes of version 2.14.0: * New checkers: BanJNDI, EmptyTopLevelDeclaration, ErroneousBitwiseExpression, FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption, NullableOnContainingClass * Changes of version 2.13.1: * Fix a crash in UnnecessaryBoxedVariable * Include the unicode character in the diagnostic message * Changes of version 2.13.0: * Handle all annotations with the simple name Generated in -XepDisableWarningsInGeneratedCode * Reconcile BugChecker#isSuppressed with suppression handling in ErrorProneScanner * Fix a bug in enclosingPackage * Improve performance of fix application * Implicitly treat @AutoBuilder setter methods as @CanIgnoreReturnValue. * Remove some obsolete checks (PublicConstructorForAbstractClass, HashCodeToString) * Changes of version 2.12.1: * This release adds an infrastructure optimization to AppliedFix source code processing. * Changes of version 2.12.0: * New checks: BoxedPrimitiveEquality, DoubleBraceInitialization, IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod, LongDoubleConversion, RobolectricShadowDirectlyOn, StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion, Varifier * Do not require maven-javadoc-plugin as it's not being used ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1956=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1956=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1956=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1956=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1956=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1956=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1956=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1956=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1956=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1956=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1956=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-1956=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1956=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1956=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1956=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1956=1 ## Package List: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Enterprise Storage 7.1 (noarch) * guava-33.1.0-150200.3.10.1 * openSUSE Leap 15.5 (noarch) * guava-javadoc-33.1.0-150200.3.10.1 * google-errorprone-annotation-2.26.1-150200.5.6.1 * google-errorprone-parent-2.26.1-150200.5.6.1 * google-errorprone-docgen_processor-2.26.1-150200.5.6.1 * google-errorprone-javadoc-2.26.1-150200.5.6.1 * guava-33.1.0-150200.3.10.1 * google-errorprone-type_annotations-2.26.1-150200.5.6.1 * guava-testlib-33.1.0-150200.3.10.1 * openSUSE Leap 15.6 (noarch) * guava-javadoc-33.1.0-150200.3.10.1 * google-errorprone-annotation-2.26.1-150200.5.6.1 * google-errorprone-parent-2.26.1-150200.5.6.1 * google-errorprone-docgen_processor-2.26.1-150200.5.6.1 * google-errorprone-javadoc-2.26.1-150200.5.6.1 * guava-33.1.0-150200.3.10.1 * google-errorprone-type_annotations-2.26.1-150200.5.6.1 * guava-testlib-33.1.0-150200.3.10.1 * Development Tools Module 15-SP5 (noarch) * guava-33.1.0-150200.3.10.1 * Development Tools Module 15-SP6 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * guava-33.1.0-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * guava-33.1.0-150200.3.10.1

1 0

SUSE-FU-2024:1957-1: moderate: Feature update for sap-convergent-resource-agents
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Feature update for sap-convergent-resource-agents Announcement ID: SUSE-FU-2024:1957-1 Rating: moderate References: * jsc#PED-7175 * jsc#PED-7176 Affected Products: * openSUSE Leap 15.4 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SAP Applications Module 15-SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains two features can now be installed. ## Description: This update for sap-convergent-resource-agents fixes the following issues: * Implementation of `sap-convergent-resource-agents` a new resource agent to control the Convergent Mediation control zone components. This package is supported only in the context of SAP RISE (jsc#PED-7175, jsc#PED-7176) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1957=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-1957=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-1957=1 * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2024-1957=1 ## Package List: * openSUSE Leap 15.4 (noarch) * sap-convergent-resource-agents-1.0.0-150400.9.3.2 * SAP Applications Module 15-SP4 (noarch) * sap-convergent-resource-agents-1.0.0-150400.9.3.2 * SAP Applications Module 15-SP5 (noarch) * sap-convergent-resource-agents-1.0.0-150400.9.3.2 * SAP Applications Module 15-SP6 (noarch) * sap-convergent-resource-agents-1.0.0-150400.9.3.2 ## References: * https://jira.suse.com/browse/PED-7175 * https://jira.suse.com/browse/PED-7176

1 0

SUSE-RU-2024:1958-1: moderate: Recommended update for bcc
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Recommended update for bcc Announcement ID: SUSE-RU-2024:1958-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for bcc fixes the following issue: * Remove bcc-devel's requirement on llvm-devel ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1958=1 openSUSE-SLE-15.6-2024-1958=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-1958=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * bcc-tools-0.29.1-150600.5.3.2 * bcc-debugsource-0.29.1-150600.5.3.2 * bcc-debuginfo-0.29.1-150600.5.3.2 * libbcc0-debuginfo-0.29.1-150600.5.3.2 * bcc-devel-0.29.1-150600.5.3.2 * libbcc0-0.29.1-150600.5.3.2 * bcc-tools-debuginfo-0.29.1-150600.5.3.2 * openSUSE Leap 15.6 (noarch) * bcc-docs-0.29.1-150600.5.3.2 * python3-bcc-0.29.1-150600.5.3.2 * bcc-examples-0.29.1-150600.5.3.2 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * bcc-tools-0.29.1-150600.5.3.2 * bcc-debugsource-0.29.1-150600.5.3.2 * bcc-debuginfo-0.29.1-150600.5.3.2 * libbcc0-debuginfo-0.29.1-150600.5.3.2 * bcc-devel-0.29.1-150600.5.3.2 * libbcc0-0.29.1-150600.5.3.2 * bcc-tools-debuginfo-0.29.1-150600.5.3.2 * Development Tools Module 15-SP6 (noarch) * bcc-docs-0.29.1-150600.5.3.2 * python3-bcc-0.29.1-150600.5.3.2 * bcc-examples-0.29.1-150600.5.3.2

1 0

SUSE-RU-2024:1959-1: moderate: Recommended update for libserf
by OPENSUSE-UPDATES 10 Jun '24

10 Jun '24

# Recommended update for libserf Announcement ID: SUSE-RU-2024:1959-1 Rating: moderate References: * bsc#1221211 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for libserf fixes the following issues: * Fix build with openSSL 3 by removing usage of ERR_GET_FUNC (bsc#1221211) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1959=1 SUSE-2024-1959=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1959=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libserf-devel-1.3.9-150600.18.3.2 * libserf-1-1-1.3.9-150600.18.3.2 * libserf-1-1-debuginfo-1.3.9-150600.18.3.2 * libserf-debugsource-1.3.9-150600.18.3.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libserf-devel-1.3.9-150600.18.3.2 * libserf-1-1-1.3.9-150600.18.3.2 * libserf-1-1-debuginfo-1.3.9-150600.18.3.2 * libserf-debugsource-1.3.9-150600.18.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221211

1 0

openSUSE-RU-2024:0154-1: important: Recommended update for glib2-branding-openSUSE
by maintenance＠opensuse.org 08 Jun '24

08 Jun '24

openSUSE Recommended Update: Recommended update for glib2-branding-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0154-1 Rating: important References: Affected Products: openSUSE Leap 15.6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for glib2-branding-openSUSE rebuilds it due to the last glib2 version upgrade. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6: zypper in -t patch openSUSE-2024-154=1 Package List: - openSUSE Leap 15.6 (noarch): gio-branding-openSUSE-42.1-lp156.9.2.2 References:

1 0

SUSE-SU-2024:1947-1: moderate: Security update for openssl-3
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Security update for openssl-3 Announcement ID: SUSE-SU-2024:1947-1 Rating: moderate References: * bsc#1222548 * bsc#1224388 Cross-References: * CVE-2024-2511 * CVE-2024-4603 CVSS scores: * CVE-2024-2511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-4603 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548). * CVE-2024-4603: Fixed DSA parameter checks for excessive sizes before validating (bsc#1224388). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1947=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1947=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1947=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1947=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1947=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1947=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1947=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1947=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1947=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1947=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1947=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1947=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1947=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1947=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1947=1 ## Package List: * SUSE Manager Proxy 4.3 (x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * openSUSE Leap 15.4 (x86_64) * libopenssl-3-devel-32bit-3.0.8-150400.4.54.1 * libopenssl3-32bit-3.0.8-150400.4.54.1 * libopenssl3-32bit-debuginfo-3.0.8-150400.4.54.1 * openSUSE Leap 15.4 (noarch) * openssl-3-doc-3.0.8-150400.4.54.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl3-64bit-3.0.8-150400.4.54.1 * libopenssl-3-devel-64bit-3.0.8-150400.4.54.1 * libopenssl3-64bit-debuginfo-3.0.8-150400.4.54.1 * openSUSE Leap Micro 5.3 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * openSUSE Leap Micro 5.4 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libopenssl3-debuginfo-3.0.8-150400.4.54.1 * openssl-3-3.0.8-150400.4.54.1 * libopenssl-3-devel-3.0.8-150400.4.54.1 * openssl-3-debuginfo-3.0.8-150400.4.54.1 * libopenssl3-3.0.8-150400.4.54.1 * openssl-3-debugsource-3.0.8-150400.4.54.1 ## References: * https://www.suse.com/security/cve/CVE-2024-2511.html * https://www.suse.com/security/cve/CVE-2024-4603.html * https://bugzilla.suse.com/show_bug.cgi?id=1222548 * https://bugzilla.suse.com/show_bug.cgi?id=1224388

1 0

SUSE-SU-2024:1949-1: moderate: Security update for openssl-1_1
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2024:1949-1 Rating: moderate References: * bsc#1222548 Cross-References: * CVE-2024-2511 CVSS scores: * CVE-2024-2511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1949=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1949=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1949=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1949=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1949=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1949=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1949=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1949=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1949=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1949=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1949=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1949=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1949=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1949=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1949=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * openSUSE Leap 15.4 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * openSUSE Leap 15.4 (noarch) * openssl-1_1-doc-1.1.1l-150400.7.66.2 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl-1_1-devel-64bit-1.1.1l-150400.7.66.2 * libopenssl1_1-64bit-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-64bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-64bit-1.1.1l-150400.7.66.2 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Manager Proxy 4.3 (x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * openssl-1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debugsource-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-1.1.1l-150400.7.66.2 * libopenssl1_1-1.1.1l-150400.7.66.2 * openssl-1_1-debuginfo-1.1.1l-150400.7.66.2 * libopenssl1_1-debuginfo-1.1.1l-150400.7.66.2 * SUSE Manager Server 4.3 (x86_64) * libopenssl1_1-32bit-1.1.1l-150400.7.66.2 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.66.2 * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.66.2 ## References: * https://www.suse.com/security/cve/CVE-2024-2511.html * https://bugzilla.suse.com/show_bug.cgi?id=1222548

1 0

SUSE-SU-2024:1950-1: moderate: Security update for glib2
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Security update for glib2 Announcement ID: SUSE-SU-2024:1950-1 Rating: moderate References: * bsc#1224044 Cross-References: * CVE-2024-34397 CVSS scores: * CVE-2024-34397 ( SUSE ): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for glib2 fixes the following issues: Update to version 2.78.6: * Fix a regression with IBus caused by the fix for CVE-2024-34397 Changes in version 2.78.5: * Fix CVE-2024-34397: GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing. (bsc#1224044) * Bugs fixed: * gvfs-udisks2-volume-monitor SIGSEGV in g_content_type_guess_for_tree() due to filename with bad encoding * gcontenttype: Make filename valid utf-8 string before processing. * gdbusconnection: Don't deliver signals if the sender doesn't match. Changes in version 2.78.4: * Bugs fixed: * Fix generated RST anchors for methods, signals and properties. * docs/reference: depend on a native gtk-doc. * gobject_gdb.py: Do not break bt on optimized build. * gregex: clean up usage of _GRegex.jit_status. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1950=1 openSUSE-SLE-15.6-2024-1950=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1950=1 ## Package List: * openSUSE Leap 15.6 (noarch) * gio-branding-upstream-2.78.6-150600.4.3.1 * gio-branding-SLE-15-150600.35.2.1 * glib2-lang-2.78.6-150600.4.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * glib2-devel-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-2.78.6-150600.4.3.1 * libgobject-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgthread-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgio-2_0-0-2.78.6-150600.4.3.1 * libgmodule-2_0-0-2.78.6-150600.4.3.1 * libglib-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgobject-2_0-0-2.78.6-150600.4.3.1 * glib2-tests-devel-debuginfo-2.78.6-150600.4.3.1 * glib2-devel-2.78.6-150600.4.3.1 * libglib-2_0-0-2.78.6-150600.4.3.1 * libgthread-2_0-0-2.78.6-150600.4.3.1 * glib2-tests-devel-2.78.6-150600.4.3.1 * glib2-debugsource-2.78.6-150600.4.3.1 * libgio-2_0-0-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-debuginfo-2.78.6-150600.4.3.1 * glib2-devel-static-2.78.6-150600.4.3.1 * glib2-doc-2.78.6-150600.4.3.1 * openSUSE Leap 15.6 (x86_64) * glib2-devel-32bit-2.78.6-150600.4.3.1 * libgio-2_0-0-32bit-2.78.6-150600.4.3.1 * libgthread-2_0-0-32bit-2.78.6-150600.4.3.1 * libgobject-2_0-0-32bit-2.78.6-150600.4.3.1 * libgio-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libgobject-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * glib2-devel-32bit-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-32bit-2.78.6-150600.4.3.1 * glib2-tools-32bit-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-32bit-2.78.6-150600.4.3.1 * libglib-2_0-0-32bit-2.78.6-150600.4.3.1 * libgthread-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libglib-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * glib2-devel-64bit-2.78.6-150600.4.3.1 * libgmodule-2_0-0-64bit-debuginfo-2.78.6-150600.4.3.1 * libglib-2_0-0-64bit-2.78.6-150600.4.3.1 * glib2-devel-64bit-debuginfo-2.78.6-150600.4.3.1 * libgio-2_0-0-64bit-2.78.6-150600.4.3.1 * libgthread-2_0-0-64bit-debuginfo-2.78.6-150600.4.3.1 * libglib-2_0-0-64bit-debuginfo-2.78.6-150600.4.3.1 * libgio-2_0-0-64bit-debuginfo-2.78.6-150600.4.3.1 * libgthread-2_0-0-64bit-2.78.6-150600.4.3.1 * glib2-tools-64bit-debuginfo-2.78.6-150600.4.3.1 * libgobject-2_0-0-64bit-2.78.6-150600.4.3.1 * libgobject-2_0-0-64bit-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-64bit-2.78.6-150600.4.3.1 * libgmodule-2_0-0-64bit-2.78.6-150600.4.3.1 * Basesystem Module 15-SP6 (noarch) * gio-branding-SLE-15-150600.35.2.1 * glib2-lang-2.78.6-150600.4.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * glib2-devel-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-2.78.6-150600.4.3.1 * libgobject-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgthread-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgio-2_0-0-2.78.6-150600.4.3.1 * libgmodule-2_0-0-2.78.6-150600.4.3.1 * libglib-2_0-0-debuginfo-2.78.6-150600.4.3.1 * libgobject-2_0-0-2.78.6-150600.4.3.1 * libglib-2_0-0-2.78.6-150600.4.3.1 * glib2-devel-2.78.6-150600.4.3.1 * libgthread-2_0-0-2.78.6-150600.4.3.1 * glib2-debugsource-2.78.6-150600.4.3.1 * libgio-2_0-0-debuginfo-2.78.6-150600.4.3.1 * glib2-tools-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-debuginfo-2.78.6-150600.4.3.1 * Basesystem Module 15-SP6 (x86_64) * libgio-2_0-0-32bit-2.78.6-150600.4.3.1 * libgobject-2_0-0-32bit-2.78.6-150600.4.3.1 * libgio-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libgobject-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-32bit-2.78.6-150600.4.3.1 * libglib-2_0-0-32bit-2.78.6-150600.4.3.1 * libglib-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 * libgmodule-2_0-0-32bit-debuginfo-2.78.6-150600.4.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-34397.html * https://bugzilla.suse.com/show_bug.cgi?id=1224044

1 0

SUSE-RU-2024:1952-1: moderate: Recommended update for socat
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Recommended update for socat Announcement ID: SUSE-RU-2024:1952-1 Rating: moderate References: * bsc#1160293 * jsc#PED-8413 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature and has one fix can now be installed. ## Description: This update for socat fixes the following issues: Update to 1.8.0.0: * Support for network namespaces (option netns) * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following) * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL * New script socat-mux.sh allows n-to-1 / 1-to-n communications * New script socat-broker.sh allows group communications * Experimental socks5 client feature * Address ACCEPT-FD for systemd "inetd" mode * UDP-Lite and DCCP address types * Addresses SOCKETPAIR and SHELL * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets * Simple statistics output with Socat option --statistics and with SIGUSR1 * A couple of new options, many fixes and corrections, see file CHANGES * Note: This version introduces "socat1", linking to "socat" Update to 1.7.4.4: * FIX: In error.c msg2() there was a stack overflow on long messages: The terminating \0 Byte was written behind the last position. * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets arrived. * FIX: a couple of weaknesses and errors when accessing invalid or incompatible file system entries with UNIX domain, file, and generic addresses. * FIX: bad parser error message on "socat /tmp/x\"x/x -" Update to 1.7.4.3: * fixes the TCP_INFO issue that broke building on non-Linux platforms. Update to version 1.7.4.2: * Fixes a lot of bugs, e.g., for options -r and -R. * Further bugfixes, see the CHANGES file Update to 1.7.4.1: Security: * Buffer size option (-b) is internally doubled for CR-CRLF conversion, but not checked for integer overflow. This could lead to heap based buffer overflow, assuming the attacker could provide this parameter. * Many further bugfixes and new features, see the CHANGES file Update to version 1.7.3.4: * bugfix release, see the CHANGES file for all changes Update to version 1.7.3.3: * bugfix release, see the CHANGES file for all changes * We HAVE_SSLv23_*_method, just not as functions, but macros add the relevant defines in the command line so support for autonegotiation of the highest TLS version is restored. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1952=1 openSUSE-SLE-15.6-2024-1952=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1952=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * socat-debugsource-1.8.0.0-150600.20.3.1 * socat-1.8.0.0-150600.20.3.1 * socat-debuginfo-1.8.0.0-150600.20.3.1 * socat-extra-1.8.0.0-150600.20.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * socat-debugsource-1.8.0.0-150600.20.3.1 * socat-1.8.0.0-150600.20.3.1 * socat-debuginfo-1.8.0.0-150600.20.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1160293 * https://jira.suse.com/browse/PED-8413

1 0

openSUSE-RU-2024:0153-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 07 Jun '24

07 Jun '24

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0153-1 Rating: moderate References: Affected Products: openSUSE Leap 15.6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for yast2-theme is a source rebuild only. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6: zypper in -t patch openSUSE-2024-153=1 Package List: - openSUSE Leap 15.6 (noarch): yast2-theme-4.6.0-lp156.2.2.1 yast2-theme-breeze-4.6.0-lp156.2.2.1 yast2-theme-oxygen-4.6.0-lp156.2.2.1 References:

1 0

SUSE-SU-2024:1937-1: moderate: Security update for python-docker
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Security update for python-docker Announcement ID: SUSE-SU-2024:1937-1 Rating: moderate References: * bsc#1224788 Cross-References: * CVE-2024-35195 CVSS scores: * CVE-2024-35195 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-docker fixes the following issues: * CVE-2024-35195: Fixed missing certificate verification (bsc#1224788). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1937=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1937=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1937=1 ## Package List: * Public Cloud Module 15-SP5 (noarch) * python311-docker-7.0.0-150400.8.7.1 * openSUSE Leap 15.4 (noarch) * python311-docker-7.0.0-150400.8.7.1 * Public Cloud Module 15-SP4 (noarch) * python311-docker-7.0.0-150400.8.7.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35195.html * https://bugzilla.suse.com/show_bug.cgi?id=1224788

1 0

openSUSE-SU-2024:0152-1: important: Security update for plasma5-workspace
by opensuse-security＠opensuse.org 06 Jun '24

06 Jun '24

openSUSE Security Update: Security update for plasma5-workspace ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0152-1 Rating: important References: #1225774 Cross-References: CVE-2024-36041 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for plasma5-workspace fixes the following issues: - CVE-2024-36041: Fixed an authentication issue where unauthorized users can access session manager (boo#1225774). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-152=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): gmenudbusmenuproxy-5.27.9-bp155.2.6.1 plasma5-session-wayland-5.27.9-bp155.2.6.1 plasma5-workspace-5.27.9-bp155.2.6.1 plasma5-workspace-devel-5.27.9-bp155.2.6.1 plasma5-workspace-libs-5.27.9-bp155.2.6.1 xembedsniproxy-5.27.9-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): plasma5-session-5.27.9-bp155.2.6.1 plasma5-workspace-lang-5.27.9-bp155.2.6.1 References: https://www.suse.com/security/cve/CVE-2024-36041.html https://bugzilla.suse.com/1225774

1 0

SUSE-RU-2024:1934-1: moderate: Recommended update for sles15-image
by OPENSUSE-UPDATES 06 Jun '24

06 Jun '24

# Recommended update for sles15-image Announcement ID: SUSE-RU-2024:1934-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.6 An update that can now be installed. ## Description: This update for sles15-image fixes the following issues: * update to SUSE LLC and use https (it's 2024) * use more specific lifecycle url * remove deprecated label duplication as those labels are inherited into all derived containers as well causing confusion * set supportlevel to released and L3 * use the base-container-images landing page * rename kiwi file to match package name * move artifacthub.io labels outside labelling helper to avoid duplication ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1934=1 ## Package List: * openSUSE Leap 15.6 (noarch) * container:sles15-image-15.0.0-47.3.1

1 0

SUSE-RU-2024:1933-1: moderate: Recommended update for libvirt
by OPENSUSE-UPDATES 06 Jun '24

06 Jun '24

# Recommended update for libvirt Announcement ID: SUSE-RU-2024:1933-1 Rating: moderate References: * bsc#1220714 * bsc#1224327 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for libvirt fixes the following issues: * rpc: Don't warn about "max_client_requests" in single-threaded daemons (bsc#1224327) * security: Ensure file exists before attempting to restore label (bsc#1220714) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1933=1 openSUSE-SLE-15.5-2024-1933=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1933=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1933=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1933=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libvirt-daemon-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-lxc-9.0.0-150500.6.23.1 * libvirt-nss-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-config-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-lxc-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-debuginfo-9.0.0-150500.6.23.1 * libvirt-client-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-lxc-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1 * libvirt-daemon-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-hooks-9.0.0-150500.6.23.1 * libvirt-client-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-debuginfo-9.0.0-150500.6.23.1 * wireshark-plugin-libvirt-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1 * libvirt-libs-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1 * libvirt-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-gluster-debuginfo-9.0.0-150500.6.23.1 * libvirt-libs-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-9.0.0-150500.6.23.1 * libvirt-nss-9.0.0-150500.6.23.1 * libvirt-daemon-config-nwfilter-9.0.0-150500.6.23.1 * libvirt-devel-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1 * wireshark-plugin-libvirt-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-gluster-9.0.0-150500.6.23.1 * libvirt-client-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (x86_64) * libvirt-devel-32bit-9.0.0-150500.6.23.1 * libvirt-daemon-driver-libxl-9.0.0-150500.6.23.1 * libvirt-client-32bit-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-libxl-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-xen-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (noarch) * libvirt-doc-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-rbd-debuginfo-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libvirt-client-64bit-debuginfo-9.0.0-150500.6.23.1 * libvirt-devel-64bit-9.0.0-150500.6.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libvirt-daemon-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1 * libvirt-daemon-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-debuginfo-9.0.0-150500.6.23.1 * libvirt-client-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1 * libvirt-libs-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1 * libvirt-libs-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1 * libvirt-client-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-rbd-debuginfo-9.0.0-150500.6.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libvirt-libs-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-libs-debuginfo-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libvirt-daemon-debuginfo-9.0.0-150500.6.23.1 * libvirt-nss-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-config-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-debuginfo-9.0.0-150500.6.23.1 * libvirt-client-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1 * libvirt-daemon-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-hooks-9.0.0-150500.6.23.1 * libvirt-client-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1 * libvirt-nss-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1 * libvirt-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-9.0.0-150500.6.23.1 * libvirt-daemon-config-nwfilter-9.0.0-150500.6.23.1 * libvirt-devel-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1 * libvirt-client-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-rbd-debuginfo-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (noarch) * libvirt-doc-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (x86_64) * libvirt-daemon-driver-libxl-9.0.0-150500.6.23.1 * libvirt-daemon-driver-libxl-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-xen-9.0.0-150500.6.23.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220714 * https://bugzilla.suse.com/show_bug.cgi?id=1224327

1 0

openSUSE-RU-2024:0151-1: moderate: Recommended update for kanidm
by maintenance＠opensuse.org 05 Jun '24

05 Jun '24

openSUSE Recommended Update: Recommended update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0151-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kanidm fixes the following issues: - Update to version 1.2.2~git0.c4153c9: * Resolve incorrect handling of tokens in logout flow (#2795) (#2803) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-151=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.2.2~git0.c4153c9-bp155.26.1 kanidm-clients-1.2.2~git0.c4153c9-bp155.26.1 kanidm-docs-1.2.2~git0.c4153c9-bp155.26.1 kanidm-server-1.2.2~git0.c4153c9-bp155.26.1 kanidm-unixd-clients-1.2.2~git0.c4153c9-bp155.26.1 References:

1 0

SUSE-RU-2024:1928-1: moderate: Recommended update for SAPHanaSR
by OPENSUSE-UPDATES 05 Jun '24

05 Jun '24

# Recommended update for SAPHanaSR Announcement ID: SUSE-RU-2024:1928-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SAP Applications Module 15-SP2 * SAP Applications Module 15-SP3 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SAP Applications Module 15-SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for SAPHanaSR fixes the following issues: SAPHanaSR was updated to version 0.162.4: * Version 0.162.4: * Unified `global.ini` examples * Added demo script SAPHanaSR-upgrade-to-angi-demo * Updated `man` pages: * SAPHanaSR_basic_cluster.7 * SAPHanaSR_maintenance_examples.7 * SAPHanaSR_upgrade_to_angi.7 * SAPHanaSR-manageProvider.8 * SAPHanaSR-upgrade-to-angi-demo.8 * SAPHanaSR.py.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1928=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1928=1 * SAP Applications Module 15-SP2 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2024-1928=1 * SAP Applications Module 15-SP3 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2024-1928=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-1928=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-1928=1 * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2024-1928=1 ## Package List: * openSUSE Leap 15.5 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * openSUSE Leap 15.6 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP2 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP3 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP4 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP5 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP6 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1

1 0

SUSE-SU-2024:1925-1: important: Security update for python-PyMySQL
by OPENSUSE-UPDATES 05 Jun '24

05 Jun '24

# Security update for python-PyMySQL Announcement ID: SUSE-SU-2024:1925-1 Rating: important References: * bsc#1225070 Cross-References: * CVE-2024-36039 CVSS scores: * CVE-2024-36039 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability can now be installed. ## Description: This update for python-PyMySQL fixes the following issues: * CVE-2024-36039: Fixed SQL injection when used with untrusted JSON input (bsc#1225070). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1925=1 SUSE-2024-1925=1 ## Package List: * openSUSE Leap 15.6 (noarch) * python311-PyMySQL-1.1.0-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-36039.html * https://bugzilla.suse.com/show_bug.cgi?id=1225070

1 0

SUSE-RU-2024:1924-1: moderate: Recommended update for obs-service-replace_using_package_version
by OPENSUSE-UPDATES 05 Jun '24

05 Jun '24

# Recommended update for obs-service-replace_using_package_version Announcement ID: SUSE-RU-2024:1924-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 An update that can now be installed. ## Description: This update for obs-service-replace_using_package_version fixes the following issues: obs-service-replace_using_package_version was updated to version 1702495728.72fe58b: * Changes in version 1702495728.72fe58b: * Bump version: 0.0.8 to 0.0.9 * Bump actions/setup-python from 4.7.1 to 5.0.0 * Workaround integration test failures due to PEP 668 marker * Bump actions/setup-python from 4.6.1 to 4.7.1 * Bump actions/checkout from 3 to 4 * Report the package name that is missing (#56) * Bump pytest-container from 0.1.1 to 0.2.0 * Drop mock dependency, stdlib has it * Bump actions/setup-python from 4.5.0 to 4.6.1 * Bump version: 0.0.7 to 0.0.8 * Changes in version 1681202780.6d8bb3c: * Run unit & install test only for the system python * Add python 3.11 tox environment * Switch to using rpm.labelCompare instead of parse_version * Fix copyright strings * Fix test_find_package_version * Bump mock from 4.0.3 to 5.0.1 * Bump pytest-xdist from 2.5.0 to 3.0.2 * Bump tox from 3.25.1 to 3.28.0 * Bump Gr1N/setup-poetry from 7 to 8 * Bump pytest-container from 0.0.2 to 0.1.1 * Bump actions/setup-python from 4.3.0 to 4.5.0 * Changes in version 1680160876.6dcaef0: * Bump version: 0.0.6 to 0.0.7 * Fix default value for empty or missing version * Bump flake8 from 5.0.1 to 5.0.4 * Changes in version 1668090256.71deb28: * Bump version: 0.0.5 to 0.0.6 * Link to the official poetry installation guide * Update replace_using_package_version.service * Update README.md * Update integration_tests/test_version_extraction.py * Update replace_using_package_version.service * Attempt to read version from obsinfo if no version is found * Add Leap 15.4 & SLE 15 SP4 to the CI * Changes in version 1668085498.ab6de1e: * Bump version: 0.0.4 to 0.0.5 * Remove the rpm signkeys in the CI environment * Adapt tests to mock subprocess.check_output * Ignore stderr on successful command executions * Changes in version 1667988064.d72b7ba: * Bump version: 0.0.3 to 0.0.4 * Update obs-service-replace_using_package_version.spec * Adapt spec to the current project setup * Bump actions/setup-python from 3 to 4.3.0 * Bump pytest-cov from 3.0.0 to 4.0.0 * Bump flake8 from 4.0.1 to 5.0.1 * Bump tox from 3.24.5 to 3.25.1 * Bump actions/cache from 2 to 3 * Bump actions/checkout from 2 to 3 * Bump actions/setup-python from 2 to 3 * Bump pytest from 6.2.5 to 7.0.1 * Switch from custom run_command to using check_output * Remove additional space from pyproject.toml * Replace travis CI badge with GitHub Actions badge * Make the file parameter default to the build recipe * Add integration tests using pytest_container * Bump coverage from 6.3 to 6.3.1 * Switch from travis-ci to github actions * Remove trailing whitespace * Switch to poetry instead of using setup.py * Correct spelling & gramar in .service * Add missing closing description element to .service * Follow the python package naming conventions ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1924=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1924=1 ## Package List: * openSUSE Leap 15.5 (noarch) * obs-service-replace_using_package_version-0.0.9-150000.3.9.1 * openSUSE Leap 15.6 (noarch) * obs-service-replace_using_package_version-0.0.9-150000.3.9.1

1 0

SUSE-SU-2024:1922-1: moderate: Security update for mariadb104
by OPENSUSE-UPDATES 04 Jun '24

04 Jun '24

# Security update for mariadb104 Announcement ID: SUSE-SU-2024:1922-1 Rating: moderate References: * bsc#1217405 Cross-References: * CVE-2023-22084 CVSS scores: * CVE-2023-22084 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2023-22084 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability can now be installed. ## Description: This update for mariadb104 fixes the following issues: * Update to 10.4.33: * CVE-2023-22084: Fixed a bug that allowed high privileged attackers with network access via multiple protocols to compromise the server. (bsc#1217405) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1922=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * mariadb104-debuginfo-10.4.33-150100.3.8.1 * mariadb104-bench-debuginfo-10.4.33-150100.3.8.1 * mariadb104-10.4.33-150100.3.8.1 * mariadb104-bench-10.4.33-150100.3.8.1 * mariadb104-client-debuginfo-10.4.33-150100.3.8.1 * mariadb104-rpm-macros-10.4.33-150100.3.8.1 * mariadb104-test-10.4.33-150100.3.8.1 * mariadb104-client-10.4.33-150100.3.8.1 * mariadb104-test-debuginfo-10.4.33-150100.3.8.1 * mariadb104-galera-10.4.33-150100.3.8.1 * mariadb104-debugsource-10.4.33-150100.3.8.1 * mariadb104-tools-10.4.33-150100.3.8.1 * mariadb104-tools-debuginfo-10.4.33-150100.3.8.1 * libmariadbd104-devel-10.4.33-150100.3.8.1 * openSUSE Leap 15.6 (noarch) * mariadb104-errormessages-10.4.33-150100.3.8.1 ## References: * https://www.suse.com/security/cve/CVE-2023-22084.html * https://bugzilla.suse.com/show_bug.cgi?id=1217405

1 0

SUSE-SU-2024:1923-1: important: Security update for unbound
by OPENSUSE-UPDATES 04 Jun '24

04 Jun '24

# Security update for unbound Announcement ID: SUSE-SU-2024:1923-1 Rating: important References: * bsc#1202031 * bsc#1202033 * bsc#1203643 * bsc#1219823 * bsc#1219826 * jsc#PED-8333 Cross-References: * CVE-2022-30698 * CVE-2022-30699 * CVE-2022-3204 * CVE-2023-50387 * CVE-2023-50868 CVSS scores: * CVE-2022-30698 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2022-30698 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2022-30699 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2022-30699 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2022-3204 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-3204 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-50387 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-50387 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-50868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves five vulnerabilities and contains one feature can now be installed. ## Description: This update for unbound fixes the following issues: unbound was updated to 1.20.0: * A lot of bugfixes and added features. For a complete list take a look at the changelog located at: /usr/share/doc/packages/unbound/Changelog or https://www.nlnetlabs.nl/projects/unbound/download/ Some Noteworthy Changes: * Removed DLV. The DLV has been decommisioned since unbound 1.5.4 and has been advised to stop using it since. The use of dlv options displays a warning. * Remove EDNS lame procedure, do not re-query without EDNS after timeout. * Add DNS over HTTPS * libunbound has been upgraded to major version 8 Security Fixes: * CVE-2023-50387: DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers. [bsc#1219823] * CVE-2023-50868: NSEC3 closest encloser proof can exhaust CPU. [bsc#1219826] * CVE-2022-30698: Novel "ghost domain names" attack by introducing subdomain delegations. [bsc#1202033] * CVE-2022-30699: Novel "ghost domain names" attack by updating almost expired delegation information. [bsc#1202031] * CVE-2022-3204: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack). [bsc#1203643] Packaging Changes: * Use prefixes instead of sudo in unbound.service * Remove no longer necessary BuildRequires: libfstrm-devel and libprotobuf-c- devel ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1923=1 openSUSE-SLE-15.6-2024-1923=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1923=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1923=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libunbound-devel-mini-debugsource-1.20.0-150600.23.3.1 * unbound-1.20.0-150600.23.3.1 * libunbound8-1.20.0-150600.23.3.1 * libunbound-devel-mini-debuginfo-1.20.0-150600.23.3.1 * libunbound8-debuginfo-1.20.0-150600.23.3.1 * unbound-anchor-debuginfo-1.20.0-150600.23.3.1 * unbound-debugsource-1.20.0-150600.23.3.1 * unbound-debuginfo-1.20.0-150600.23.3.1 * unbound-devel-1.20.0-150600.23.3.1 * unbound-python-1.20.0-150600.23.3.1 * unbound-anchor-1.20.0-150600.23.3.1 * unbound-python-debuginfo-1.20.0-150600.23.3.1 * libunbound-devel-mini-1.20.0-150600.23.3.1 * openSUSE Leap 15.6 (noarch) * unbound-munin-1.20.0-150600.23.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.20.0-150600.23.3.1 * libunbound8-1.20.0-150600.23.3.1 * unbound-anchor-debuginfo-1.20.0-150600.23.3.1 * libunbound8-debuginfo-1.20.0-150600.23.3.1 * unbound-devel-1.20.0-150600.23.3.1 * unbound-debuginfo-1.20.0-150600.23.3.1 * unbound-anchor-1.20.0-150600.23.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * unbound-1.20.0-150600.23.3.1 * unbound-debugsource-1.20.0-150600.23.3.1 * unbound-python-1.20.0-150600.23.3.1 * unbound-debuginfo-1.20.0-150600.23.3.1 * unbound-python-debuginfo-1.20.0-150600.23.3.1 ## References: * https://www.suse.com/security/cve/CVE-2022-30698.html * https://www.suse.com/security/cve/CVE-2022-30699.html * https://www.suse.com/security/cve/CVE-2022-3204.html * https://www.suse.com/security/cve/CVE-2023-50387.html * https://www.suse.com/security/cve/CVE-2023-50868.html * https://bugzilla.suse.com/show_bug.cgi?id=1202031 * https://bugzilla.suse.com/show_bug.cgi?id=1202033 * https://bugzilla.suse.com/show_bug.cgi?id=1203643 * https://bugzilla.suse.com/show_bug.cgi?id=1219823 * https://bugzilla.suse.com/show_bug.cgi?id=1219826 * https://jira.suse.com/browse/PED-8333

1 0

SUSE-RU-2024:1921-1: important: Recommended update for azure-cli
by OPENSUSE-UPDATES 04 Jun '24

04 Jun '24

# Recommended update for azure-cli Announcement ID: SUSE-RU-2024:1921-1 Rating: important References: * bsc#1224326 Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for azure-cli fixes the following issues: * Add Obsoletes for deprecated azure-cli-taskhelp package to fix dependency issues (bsc#1224326) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1921=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1921=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1921=1 ## Package List: * openSUSE Leap 15.4 (noarch) * azure-cli-2.58.0-150400.14.9.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * azure-cli-test-2.58.0-150400.14.9.1 * Public Cloud Module 15-SP4 (noarch) * azure-cli-2.58.0-150400.14.9.1 * Public Cloud Module 15-SP5 (noarch) * azure-cli-2.58.0-150400.14.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1224326

1 0

openSUSE-SU-2024:0150-1: moderate: Security update for libhtp
by opensuse-security＠opensuse.org 04 Jun '24

04 Jun '24

openSUSE Security Update: Security update for libhtp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0150-1 Rating: moderate References: #1220403 Cross-References: CVE-2024-23837 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libhtp fixes the following issues: - CVE-2024-23837: excessive processing time of HTTP headers can lead to denial of service (boo#1220403) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-150=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libhtp-devel-0.5.42-bp155.2.3.1 libhtp2-0.5.42-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-23837.html https://bugzilla.suse.com/1220403

1 0

openSUSE-SU-2024:0149-1: important: Security update for python-python-jose
by opensuse-security＠opensuse.org 03 Jun '24

03 Jun '24

openSUSE Security Update: Security update for python-python-jose ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0149-1 Rating: important References: #1223422 Cross-References: CVE-2024-33664 CVSS scores: CVE-2024-33664 (SUSE): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-python-jose fixes the following issues: - CVE-2024-33664: Fixed a denial of service via decoding of a JSON Web Encryption token with a high compression ratio (boo#1223422) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-149=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-python-jose-3.0.1-bp155.3.6.1 References: https://www.suse.com/security/cve/CVE-2024-33664.html https://bugzilla.suse.com/1223422

1 0

SUSE-SU-2024:1900-1: low: Security update for poppler
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Security update for poppler Announcement ID: SUSE-SU-2024:1900-1 Rating: low References: * bsc#1223375 Cross-References: * CVE-2024-4141 CVSS scores: * CVE-2024-4141 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for poppler fixes the following issues: * CVE-2024-4141: Fixed out-of-bounds array write (bsc#1223375). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1900=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1900=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libpoppler-glib8-debuginfo-22.01.0-150400.3.19.1 * poppler-tools-22.01.0-150400.3.19.1 * libpoppler-cpp0-22.01.0-150400.3.19.1 * libpoppler117-22.01.0-150400.3.19.1 * libpoppler-qt6-devel-22.01.0-150400.3.19.1 * poppler-qt6-debugsource-22.01.0-150400.3.19.1 * libpoppler-qt6-3-22.01.0-150400.3.19.1 * poppler-debugsource-22.01.0-150400.3.19.1 * libpoppler-qt5-1-22.01.0-150400.3.19.1 * libpoppler-qt6-3-debuginfo-22.01.0-150400.3.19.1 * typelib-1_0-Poppler-0_18-22.01.0-150400.3.19.1 * libpoppler-glib-devel-22.01.0-150400.3.19.1 * poppler-qt5-debugsource-22.01.0-150400.3.19.1 * libpoppler-glib8-22.01.0-150400.3.19.1 * libpoppler-cpp0-debuginfo-22.01.0-150400.3.19.1 * libpoppler-qt5-devel-22.01.0-150400.3.19.1 * libpoppler-qt5-1-debuginfo-22.01.0-150400.3.19.1 * poppler-tools-debuginfo-22.01.0-150400.3.19.1 * libpoppler117-debuginfo-22.01.0-150400.3.19.1 * libpoppler-devel-22.01.0-150400.3.19.1 * openSUSE Leap 15.4 (x86_64) * libpoppler-qt5-1-32bit-22.01.0-150400.3.19.1 * libpoppler117-32bit-debuginfo-22.01.0-150400.3.19.1 * libpoppler-cpp0-32bit-22.01.0-150400.3.19.1 * libpoppler117-32bit-22.01.0-150400.3.19.1 * libpoppler-qt5-1-32bit-debuginfo-22.01.0-150400.3.19.1 * libpoppler-glib8-32bit-22.01.0-150400.3.19.1 * libpoppler-cpp0-32bit-debuginfo-22.01.0-150400.3.19.1 * libpoppler-glib8-32bit-debuginfo-22.01.0-150400.3.19.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpoppler-qt5-1-64bit-22.01.0-150400.3.19.1 * libpoppler-qt5-1-64bit-debuginfo-22.01.0-150400.3.19.1 * libpoppler-glib8-64bit-22.01.0-150400.3.19.1 * libpoppler117-64bit-debuginfo-22.01.0-150400.3.19.1 * libpoppler-glib8-64bit-debuginfo-22.01.0-150400.3.19.1 * libpoppler117-64bit-22.01.0-150400.3.19.1 * libpoppler-cpp0-64bit-22.01.0-150400.3.19.1 * libpoppler-cpp0-64bit-debuginfo-22.01.0-150400.3.19.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * poppler-debugsource-22.01.0-150400.3.19.1 * libpoppler117-22.01.0-150400.3.19.1 * libpoppler117-debuginfo-22.01.0-150400.3.19.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4141.html * https://bugzilla.suse.com/show_bug.cgi?id=1223375

1 0

SUSE-SU-2024:1906-1: moderate: Security update for 389-ds
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Security update for 389-ds Announcement ID: SUSE-SU-2024:1906-1 Rating: moderate References: * bsc#1219836 Cross-References: * CVE-2024-1062 CVSS scores: * CVE-2024-1062 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for 389-ds fixes the following issues: * Update to version 2.2.8~git65.347aae6: * CVE-2024-1062: Resolved possible denial of service when audit logging is enabled. (bsc#1219836) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1906=1 openSUSE-SLE-15.6-2024-1906=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-1906=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * 389-ds-debuginfo-2.2.8~git65.347aae6-150600.8.3.1 * 389-ds-snmp-debuginfo-2.2.8~git65.347aae6-150600.8.3.1 * 389-ds-snmp-2.2.8~git65.347aae6-150600.8.3.1 * libsvrcore0-debuginfo-2.2.8~git65.347aae6-150600.8.3.1 * 389-ds-devel-2.2.8~git65.347aae6-150600.8.3.1 * 389-ds-debugsource-2.2.8~git65.347aae6-150600.8.3.1 * lib389-2.2.8~git65.347aae6-150600.8.3.1 * libsvrcore0-2.2.8~git65.347aae6-150600.8.3.1 * 389-ds-2.2.8~git65.347aae6-150600.8.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * 389-ds-debuginfo-2.2.8~git65.347aae6-150600.8.3.1 * libsvrcore0-debuginfo-2.2.8~git65.347aae6-150600.8.3.1 * 389-ds-devel-2.2.8~git65.347aae6-150600.8.3.1 * 389-ds-debugsource-2.2.8~git65.347aae6-150600.8.3.1 * lib389-2.2.8~git65.347aae6-150600.8.3.1 * libsvrcore0-2.2.8~git65.347aae6-150600.8.3.1 * 389-ds-2.2.8~git65.347aae6-150600.8.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-1062.html * https://bugzilla.suse.com/show_bug.cgi?id=1219836

1 0

SUSE-SU-2024:1907-1: important: Security update for ffmpeg-4
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Security update for ffmpeg-4 Announcement ID: SUSE-SU-2024:1907-1 Rating: important References: * bsc#1186586 * bsc#1223437 Cross-References: * CVE-2020-22021 * CVE-2023-51794 CVSS scores: * CVE-2020-22021 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2020-22021 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-51794 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for ffmpeg-4 fixes the following issues: * CVE-2020-22021: Fixed a buffer overflow vulnerability in filter_edges() (bsc#1186586) * CVE-2023-51794: Fixed a heap buffer overflow in libavfilter. (bsc#1223437) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1907=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1907=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1907=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1907=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1907=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1907=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1907=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1907=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1907=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libavresample4_0-4.4-150400.3.32.1 * libavcodec58_134-debuginfo-4.4-150400.3.32.1 * libavformat58_76-debuginfo-4.4-150400.3.32.1 * libavutil56_70-4.4-150400.3.32.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.32.1 * ffmpeg-4-debuginfo-4.4-150400.3.32.1 * libswscale5_9-4.4-150400.3.32.1 * libavfilter7_110-4.4-150400.3.32.1 * libpostproc55_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.32.1 * libavfilter7_110-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libavutil-devel-4.4-150400.3.32.1 * libavresample4_0-debuginfo-4.4-150400.3.32.1 * libswresample3_9-4.4-150400.3.32.1 * ffmpeg-4-4.4-150400.3.32.1 * libavdevice58_13-4.4-150400.3.32.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.32.1 * libpostproc55_9-4.4-150400.3.32.1 * ffmpeg-4-private-devel-4.4-150400.3.32.1 * ffmpeg-4-debugsource-4.4-150400.3.32.1 * libavformat58_76-4.4-150400.3.32.1 * ffmpeg-4-libpostproc-devel-4.4-150400.3.32.1 * libavdevice58_13-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.32.1 * libavutil56_70-debuginfo-4.4-150400.3.32.1 * libswscale5_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.32.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.32.1 * libswresample3_9-debuginfo-4.4-150400.3.32.1 * libavcodec58_134-4.4-150400.3.32.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.32.1 * openSUSE Leap 15.4 (x86_64) * libavfilter7_110-32bit-4.4-150400.3.32.1 * libavresample4_0-32bit-debuginfo-4.4-150400.3.32.1 * libswresample3_9-32bit-debuginfo-4.4-150400.3.32.1 * libavdevice58_13-32bit-4.4-150400.3.32.1 * libpostproc55_9-32bit-debuginfo-4.4-150400.3.32.1 * libavcodec58_134-32bit-4.4-150400.3.32.1 * libavdevice58_13-32bit-debuginfo-4.4-150400.3.32.1 * libavutil56_70-32bit-debuginfo-4.4-150400.3.32.1 * libswscale5_9-32bit-4.4-150400.3.32.1 * libavresample4_0-32bit-4.4-150400.3.32.1 * libavutil56_70-32bit-4.4-150400.3.32.1 * libavcodec58_134-32bit-debuginfo-4.4-150400.3.32.1 * libswscale5_9-32bit-debuginfo-4.4-150400.3.32.1 * libavformat58_76-32bit-4.4-150400.3.32.1 * libavfilter7_110-32bit-debuginfo-4.4-150400.3.32.1 * libavformat58_76-32bit-debuginfo-4.4-150400.3.32.1 * libpostproc55_9-32bit-4.4-150400.3.32.1 * libswresample3_9-32bit-4.4-150400.3.32.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libswresample3_9-64bit-debuginfo-4.4-150400.3.32.1 * libavfilter7_110-64bit-4.4-150400.3.32.1 * libavformat58_76-64bit-4.4-150400.3.32.1 * libavresample4_0-64bit-debuginfo-4.4-150400.3.32.1 * libavdevice58_13-64bit-debuginfo-4.4-150400.3.32.1 * libavdevice58_13-64bit-4.4-150400.3.32.1 * libavcodec58_134-64bit-4.4-150400.3.32.1 * libavformat58_76-64bit-debuginfo-4.4-150400.3.32.1 * libavfilter7_110-64bit-debuginfo-4.4-150400.3.32.1 * libswresample3_9-64bit-4.4-150400.3.32.1 * libavresample4_0-64bit-4.4-150400.3.32.1 * libavcodec58_134-64bit-debuginfo-4.4-150400.3.32.1 * libpostproc55_9-64bit-debuginfo-4.4-150400.3.32.1 * libavutil56_70-64bit-debuginfo-4.4-150400.3.32.1 * libpostproc55_9-64bit-4.4-150400.3.32.1 * libswscale5_9-64bit-4.4-150400.3.32.1 * libswscale5_9-64bit-debuginfo-4.4-150400.3.32.1 * libavutil56_70-64bit-4.4-150400.3.32.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libavresample4_0-4.4-150400.3.32.1 * libavcodec58_134-debuginfo-4.4-150400.3.32.1 * libavformat58_76-debuginfo-4.4-150400.3.32.1 * libavutil56_70-4.4-150400.3.32.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.32.1 * ffmpeg-4-debuginfo-4.4-150400.3.32.1 * libswscale5_9-4.4-150400.3.32.1 * libavfilter7_110-4.4-150400.3.32.1 * libpostproc55_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.32.1 * libavfilter7_110-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libavutil-devel-4.4-150400.3.32.1 * libavresample4_0-debuginfo-4.4-150400.3.32.1 * libswresample3_9-4.4-150400.3.32.1 * ffmpeg-4-4.4-150400.3.32.1 * libavdevice58_13-4.4-150400.3.32.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.32.1 * libpostproc55_9-4.4-150400.3.32.1 * ffmpeg-4-private-devel-4.4-150400.3.32.1 * ffmpeg-4-debugsource-4.4-150400.3.32.1 * libavformat58_76-4.4-150400.3.32.1 * ffmpeg-4-libpostproc-devel-4.4-150400.3.32.1 * libavdevice58_13-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.32.1 * libavutil56_70-debuginfo-4.4-150400.3.32.1 * libswscale5_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.32.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.32.1 * libswresample3_9-debuginfo-4.4-150400.3.32.1 * libavcodec58_134-4.4-150400.3.32.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.32.1 * openSUSE Leap 15.5 (x86_64) * libavfilter7_110-32bit-4.4-150400.3.32.1 * libavresample4_0-32bit-debuginfo-4.4-150400.3.32.1 * libswresample3_9-32bit-debuginfo-4.4-150400.3.32.1 * libavdevice58_13-32bit-4.4-150400.3.32.1 * libpostproc55_9-32bit-debuginfo-4.4-150400.3.32.1 * libavcodec58_134-32bit-4.4-150400.3.32.1 * libavdevice58_13-32bit-debuginfo-4.4-150400.3.32.1 * libavutil56_70-32bit-debuginfo-4.4-150400.3.32.1 * libswscale5_9-32bit-4.4-150400.3.32.1 * libavresample4_0-32bit-4.4-150400.3.32.1 * libavutil56_70-32bit-4.4-150400.3.32.1 * libavcodec58_134-32bit-debuginfo-4.4-150400.3.32.1 * libswscale5_9-32bit-debuginfo-4.4-150400.3.32.1 * libavformat58_76-32bit-4.4-150400.3.32.1 * libavfilter7_110-32bit-debuginfo-4.4-150400.3.32.1 * libavformat58_76-32bit-debuginfo-4.4-150400.3.32.1 * libpostproc55_9-32bit-4.4-150400.3.32.1 * libswresample3_9-32bit-4.4-150400.3.32.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libavresample4_0-4.4-150400.3.32.1 * libavcodec58_134-debuginfo-4.4-150400.3.32.1 * libavformat58_76-debuginfo-4.4-150400.3.32.1 * libavutil56_70-4.4-150400.3.32.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.32.1 * ffmpeg-4-debuginfo-4.4-150400.3.32.1 * libswscale5_9-4.4-150400.3.32.1 * libavfilter7_110-4.4-150400.3.32.1 * libpostproc55_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.32.1 * libavfilter7_110-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libavutil-devel-4.4-150400.3.32.1 * libavresample4_0-debuginfo-4.4-150400.3.32.1 * libswresample3_9-4.4-150400.3.32.1 * ffmpeg-4-4.4-150400.3.32.1 * libavdevice58_13-4.4-150400.3.32.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.32.1 * libpostproc55_9-4.4-150400.3.32.1 * ffmpeg-4-private-devel-4.4-150400.3.32.1 * ffmpeg-4-debugsource-4.4-150400.3.32.1 * libavformat58_76-4.4-150400.3.32.1 * ffmpeg-4-libpostproc-devel-4.4-150400.3.32.1 * libavdevice58_13-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.32.1 * libavutil56_70-debuginfo-4.4-150400.3.32.1 * libswscale5_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.32.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.32.1 * libswresample3_9-debuginfo-4.4-150400.3.32.1 * libavcodec58_134-4.4-150400.3.32.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libpostproc55_9-4.4-150400.3.32.1 * libavcodec58_134-debuginfo-4.4-150400.3.32.1 * libswresample3_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-debugsource-4.4-150400.3.32.1 * libavformat58_76-debuginfo-4.4-150400.3.32.1 * libswresample3_9-4.4-150400.3.32.1 * libavutil56_70-4.4-150400.3.32.1 * libavcodec58_134-4.4-150400.3.32.1 * ffmpeg-4-debuginfo-4.4-150400.3.32.1 * libavformat58_76-4.4-150400.3.32.1 * libpostproc55_9-debuginfo-4.4-150400.3.32.1 * libavutil56_70-debuginfo-4.4-150400.3.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libpostproc55_9-4.4-150400.3.32.1 * libavcodec58_134-debuginfo-4.4-150400.3.32.1 * libswresample3_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-debugsource-4.4-150400.3.32.1 * libavformat58_76-debuginfo-4.4-150400.3.32.1 * libswresample3_9-4.4-150400.3.32.1 * libavutil56_70-4.4-150400.3.32.1 * libavcodec58_134-4.4-150400.3.32.1 * ffmpeg-4-debuginfo-4.4-150400.3.32.1 * libavformat58_76-4.4-150400.3.32.1 * libpostproc55_9-debuginfo-4.4-150400.3.32.1 * libavutil56_70-debuginfo-4.4-150400.3.32.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libswscale5_9-debuginfo-4.4-150400.3.32.1 * libpostproc55_9-4.4-150400.3.32.1 * libavcodec58_134-debuginfo-4.4-150400.3.32.1 * libswresample3_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-debugsource-4.4-150400.3.32.1 * libavformat58_76-debuginfo-4.4-150400.3.32.1 * libswresample3_9-4.4-150400.3.32.1 * libavutil56_70-4.4-150400.3.32.1 * libavcodec58_134-4.4-150400.3.32.1 * ffmpeg-4-debuginfo-4.4-150400.3.32.1 * libswscale5_9-4.4-150400.3.32.1 * libavformat58_76-4.4-150400.3.32.1 * libpostproc55_9-debuginfo-4.4-150400.3.32.1 * libavutil56_70-debuginfo-4.4-150400.3.32.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libpostproc55_9-4.4-150400.3.32.1 * libavcodec58_134-debuginfo-4.4-150400.3.32.1 * libswresample3_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-debugsource-4.4-150400.3.32.1 * libavformat58_76-debuginfo-4.4-150400.3.32.1 * libswresample3_9-4.4-150400.3.32.1 * libavutil56_70-4.4-150400.3.32.1 * libavcodec58_134-4.4-150400.3.32.1 * ffmpeg-4-debuginfo-4.4-150400.3.32.1 * libavformat58_76-4.4-150400.3.32.1 * libpostproc55_9-debuginfo-4.4-150400.3.32.1 * libavutil56_70-debuginfo-4.4-150400.3.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libpostproc55_9-4.4-150400.3.32.1 * libavcodec58_134-debuginfo-4.4-150400.3.32.1 * libswresample3_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-debugsource-4.4-150400.3.32.1 * libavformat58_76-debuginfo-4.4-150400.3.32.1 * libswresample3_9-4.4-150400.3.32.1 * libavutil56_70-4.4-150400.3.32.1 * libavcodec58_134-4.4-150400.3.32.1 * ffmpeg-4-debuginfo-4.4-150400.3.32.1 * libavformat58_76-4.4-150400.3.32.1 * libpostproc55_9-debuginfo-4.4-150400.3.32.1 * libavutil56_70-debuginfo-4.4-150400.3.32.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * libswscale5_9-debuginfo-4.4-150400.3.32.1 * libavcodec58_134-debuginfo-4.4-150400.3.32.1 * libswresample3_9-debuginfo-4.4-150400.3.32.1 * ffmpeg-4-debugsource-4.4-150400.3.32.1 * libavformat58_76-debuginfo-4.4-150400.3.32.1 * libswresample3_9-4.4-150400.3.32.1 * libavutil56_70-4.4-150400.3.32.1 * libavcodec58_134-4.4-150400.3.32.1 * ffmpeg-4-debuginfo-4.4-150400.3.32.1 * libswscale5_9-4.4-150400.3.32.1 * libavformat58_76-4.4-150400.3.32.1 * libavutil56_70-debuginfo-4.4-150400.3.32.1 ## References: * https://www.suse.com/security/cve/CVE-2020-22021.html * https://www.suse.com/security/cve/CVE-2023-51794.html * https://bugzilla.suse.com/show_bug.cgi?id=1186586 * https://bugzilla.suse.com/show_bug.cgi?id=1223437

1 0

SUSE-SU-2024:1908-1: important: Security update for ffmpeg
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Security update for ffmpeg Announcement ID: SUSE-SU-2024:1908-1 Rating: important References: * bsc#1223437 Cross-References: * CVE-2023-51794 CVSS scores: * CVE-2023-51794 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for ffmpeg fixes the following issues: * CVE-2023-51794: Fixed a heap buffer overflow in libavfilter. (bsc#1223437) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-1908=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1908=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1908=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1908=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1908=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1908=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1908=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1908=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1908=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1908=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1908=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1908=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1908=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1908=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-1908=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-1908=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1908=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1908=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1908=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-1908=1 ## Package List: * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libavfilter6-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libavfilter6-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libavdevice57-debuginfo-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * ffmpeg-3.4.2-150200.11.47.1 * libavdevice57-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * libavfilter6-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libavfilter6-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libavdevice57-debuginfo-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * ffmpeg-3.4.2-150200.11.47.1 * libavdevice57-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * libavcodec-devel-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * libavformat-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * libavformat-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libavcodec-devel-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * libavformat-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libavcodec-devel-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavfilter6-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libavfilter6-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * ffmpeg-private-devel-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavdevice-devel-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * libavcodec-devel-3.4.2-150200.11.47.1 * libavdevice57-debuginfo-3.4.2-150200.11.47.1 * libavfilter-devel-3.4.2-150200.11.47.1 * ffmpeg-3.4.2-150200.11.47.1 * libavdevice57-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * libavformat-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * openSUSE Leap 15.5 (x86_64) * libavresample3-32bit-3.4.2-150200.11.47.1 * libavcodec57-32bit-3.4.2-150200.11.47.1 * libpostproc54-32bit-3.4.2-150200.11.47.1 * libpostproc54-32bit-debuginfo-3.4.2-150200.11.47.1 * libavfilter6-32bit-3.4.2-150200.11.47.1 * libavutil55-32bit-3.4.2-150200.11.47.1 * libswscale4-32bit-debuginfo-3.4.2-150200.11.47.1 * libavutil55-32bit-debuginfo-3.4.2-150200.11.47.1 * libswresample2-32bit-3.4.2-150200.11.47.1 * libavcodec57-32bit-debuginfo-3.4.2-150200.11.47.1 * libavformat57-32bit-debuginfo-3.4.2-150200.11.47.1 * libavdevice57-32bit-debuginfo-3.4.2-150200.11.47.1 * libswscale4-32bit-3.4.2-150200.11.47.1 * libswresample2-32bit-debuginfo-3.4.2-150200.11.47.1 * libavresample3-32bit-debuginfo-3.4.2-150200.11.47.1 * libavdevice57-32bit-3.4.2-150200.11.47.1 * libavfilter6-32bit-debuginfo-3.4.2-150200.11.47.1 * libavformat57-32bit-3.4.2-150200.11.47.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavfilter6-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libavfilter6-debuginfo-3.4.2-150200.11.47.1 * libavformat57-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * ffmpeg-private-devel-3.4.2-150200.11.47.1 * libavformat57-3.4.2-150200.11.47.1 * libavdevice-devel-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * libavcodec-devel-3.4.2-150200.11.47.1 * libavdevice57-debuginfo-3.4.2-150200.11.47.1 * libavfilter-devel-3.4.2-150200.11.47.1 * ffmpeg-3.4.2-150200.11.47.1 * libavdevice57-3.4.2-150200.11.47.1 * libavresample3-debuginfo-3.4.2-150200.11.47.1 * libavresample-devel-3.4.2-150200.11.47.1 * libavformat-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libavresample3-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * openSUSE Leap 15.6 (x86_64) * libavresample3-32bit-3.4.2-150200.11.47.1 * libavcodec57-32bit-3.4.2-150200.11.47.1 * libpostproc54-32bit-3.4.2-150200.11.47.1 * libpostproc54-32bit-debuginfo-3.4.2-150200.11.47.1 * libavfilter6-32bit-3.4.2-150200.11.47.1 * libavutil55-32bit-3.4.2-150200.11.47.1 * libswscale4-32bit-debuginfo-3.4.2-150200.11.47.1 * libavutil55-32bit-debuginfo-3.4.2-150200.11.47.1 * libswresample2-32bit-3.4.2-150200.11.47.1 * libavcodec57-32bit-debuginfo-3.4.2-150200.11.47.1 * libavformat57-32bit-debuginfo-3.4.2-150200.11.47.1 * libavdevice57-32bit-debuginfo-3.4.2-150200.11.47.1 * libswscale4-32bit-3.4.2-150200.11.47.1 * libswresample2-32bit-debuginfo-3.4.2-150200.11.47.1 * libavresample3-32bit-debuginfo-3.4.2-150200.11.47.1 * libavdevice57-32bit-3.4.2-150200.11.47.1 * libavfilter6-32bit-debuginfo-3.4.2-150200.11.47.1 * libavformat57-32bit-3.4.2-150200.11.47.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libavcodec57-debuginfo-3.4.2-150200.11.47.1 * libavutil55-3.4.2-150200.11.47.1 * ffmpeg-debugsource-3.4.2-150200.11.47.1 * libavutil55-debuginfo-3.4.2-150200.11.47.1 * libswscale4-3.4.2-150200.11.47.1 * libswresample-devel-3.4.2-150200.11.47.1 * libpostproc-devel-3.4.2-150200.11.47.1 * libswscale4-debuginfo-3.4.2-150200.11.47.1 * libswscale-devel-3.4.2-150200.11.47.1 * libpostproc54-debuginfo-3.4.2-150200.11.47.1 * libavcodec57-3.4.2-150200.11.47.1 * libpostproc54-3.4.2-150200.11.47.1 * libavutil-devel-3.4.2-150200.11.47.1 * ffmpeg-debuginfo-3.4.2-150200.11.47.1 * libswresample2-debuginfo-3.4.2-150200.11.47.1 * libswresample2-3.4.2-150200.11.47.1 ## References: * https://www.suse.com/security/cve/CVE-2023-51794.html * https://bugzilla.suse.com/show_bug.cgi?id=1223437

1 0

SUSE-SU-2024:1909-1: important: Security update for ffmpeg-4
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Security update for ffmpeg-4 Announcement ID: SUSE-SU-2024:1909-1 Rating: important References: * bsc#1186586 * bsc#1223437 Cross-References: * CVE-2020-22021 * CVE-2023-51794 CVSS scores: * CVE-2020-22021 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2020-22021 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-51794 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for ffmpeg-4 fixes the following issues: * CVE-2020-22021: Fixed buffer overflow vulnerability in filter_edges function in libavfilter/vf_yadif.c (bsc#1186586). * CVE-2023-51794: Fixed a heap buffer overflow in libavfilter. (bsc#1223437) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1909=1 openSUSE-SLE-15.6-2024-1909=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1909=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-1909=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * ffmpeg-4-4.4-150600.13.5.1 * libswresample3_9-4.4-150600.13.5.1 * ffmpeg-4-private-devel-4.4-150600.13.5.1 * libavfilter7_110-4.4-150600.13.5.1 * libavutil56_70-debuginfo-4.4-150600.13.5.1 * ffmpeg-4-debuginfo-4.4-150600.13.5.1 * libswscale5_9-debuginfo-4.4-150600.13.5.1 * ffmpeg-4-libswresample-devel-4.4-150600.13.5.1 * libavutil56_70-4.4-150600.13.5.1 * ffmpeg-4-debugsource-4.4-150600.13.5.1 * ffmpeg-4-libavformat-devel-4.4-150600.13.5.1 * ffmpeg-4-libavfilter-devel-4.4-150600.13.5.1 * ffmpeg-4-libavdevice-devel-4.4-150600.13.5.1 * libavresample4_0-4.4-150600.13.5.1 * ffmpeg-4-libavcodec-devel-4.4-150600.13.5.1 * libpostproc55_9-debuginfo-4.4-150600.13.5.1 * libavfilter7_110-debuginfo-4.4-150600.13.5.1 * libavdevice58_13-debuginfo-4.4-150600.13.5.1 * libavdevice58_13-4.4-150600.13.5.1 * libavformat58_76-4.4-150600.13.5.1 * ffmpeg-4-libavutil-devel-4.4-150600.13.5.1 * libavformat58_76-debuginfo-4.4-150600.13.5.1 * libswscale5_9-4.4-150600.13.5.1 * libavresample4_0-debuginfo-4.4-150600.13.5.1 * libavcodec58_134-4.4-150600.13.5.1 * ffmpeg-4-libavresample-devel-4.4-150600.13.5.1 * libpostproc55_9-4.4-150600.13.5.1 * libswresample3_9-debuginfo-4.4-150600.13.5.1 * ffmpeg-4-libpostproc-devel-4.4-150600.13.5.1 * libavcodec58_134-debuginfo-4.4-150600.13.5.1 * ffmpeg-4-libswscale-devel-4.4-150600.13.5.1 * openSUSE Leap 15.6 (x86_64) * libswresample3_9-32bit-4.4-150600.13.5.1 * libavdevice58_13-32bit-debuginfo-4.4-150600.13.5.1 * libswscale5_9-32bit-4.4-150600.13.5.1 * libavcodec58_134-32bit-debuginfo-4.4-150600.13.5.1 * libavresample4_0-32bit-debuginfo-4.4-150600.13.5.1 * libavutil56_70-32bit-4.4-150600.13.5.1 * libavformat58_76-32bit-debuginfo-4.4-150600.13.5.1 * libavutil56_70-32bit-debuginfo-4.4-150600.13.5.1 * libavfilter7_110-32bit-4.4-150600.13.5.1 * libavfilter7_110-32bit-debuginfo-4.4-150600.13.5.1 * libavcodec58_134-32bit-4.4-150600.13.5.1 * libpostproc55_9-32bit-debuginfo-4.4-150600.13.5.1 * libavresample4_0-32bit-4.4-150600.13.5.1 * libpostproc55_9-32bit-4.4-150600.13.5.1 * libavformat58_76-32bit-4.4-150600.13.5.1 * libswscale5_9-32bit-debuginfo-4.4-150600.13.5.1 * libswresample3_9-32bit-debuginfo-4.4-150600.13.5.1 * libavdevice58_13-32bit-4.4-150600.13.5.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libavdevice58_13-64bit-debuginfo-4.4-150600.13.5.1 * libavformat58_76-64bit-4.4-150600.13.5.1 * libavresample4_0-64bit-4.4-150600.13.5.1 * libpostproc55_9-64bit-4.4-150600.13.5.1 * libavcodec58_134-64bit-4.4-150600.13.5.1 * libswscale5_9-64bit-debuginfo-4.4-150600.13.5.1 * libavformat58_76-64bit-debuginfo-4.4-150600.13.5.1 * libswresample3_9-64bit-debuginfo-4.4-150600.13.5.1 * libavfilter7_110-64bit-debuginfo-4.4-150600.13.5.1 * libavcodec58_134-64bit-debuginfo-4.4-150600.13.5.1 * libavdevice58_13-64bit-4.4-150600.13.5.1 * libswscale5_9-64bit-4.4-150600.13.5.1 * libavutil56_70-64bit-debuginfo-4.4-150600.13.5.1 * libpostproc55_9-64bit-debuginfo-4.4-150600.13.5.1 * libavutil56_70-64bit-4.4-150600.13.5.1 * libavresample4_0-64bit-debuginfo-4.4-150600.13.5.1 * libswresample3_9-64bit-4.4-150600.13.5.1 * libavfilter7_110-64bit-4.4-150600.13.5.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * ffmpeg-4-4.4-150600.13.5.1 * libswresample3_9-4.4-150600.13.5.1 * ffmpeg-4-private-devel-4.4-150600.13.5.1 * libavfilter7_110-4.4-150600.13.5.1 * libavutil56_70-debuginfo-4.4-150600.13.5.1 * ffmpeg-4-debuginfo-4.4-150600.13.5.1 * libswscale5_9-debuginfo-4.4-150600.13.5.1 * ffmpeg-4-libswresample-devel-4.4-150600.13.5.1 * libavutil56_70-4.4-150600.13.5.1 * ffmpeg-4-debugsource-4.4-150600.13.5.1 * ffmpeg-4-libavformat-devel-4.4-150600.13.5.1 * ffmpeg-4-libavfilter-devel-4.4-150600.13.5.1 * ffmpeg-4-libavdevice-devel-4.4-150600.13.5.1 * libavresample4_0-4.4-150600.13.5.1 * ffmpeg-4-libavcodec-devel-4.4-150600.13.5.1 * libpostproc55_9-debuginfo-4.4-150600.13.5.1 * libavfilter7_110-debuginfo-4.4-150600.13.5.1 * libavdevice58_13-debuginfo-4.4-150600.13.5.1 * libavdevice58_13-4.4-150600.13.5.1 * libavformat58_76-4.4-150600.13.5.1 * ffmpeg-4-libavutil-devel-4.4-150600.13.5.1 * libavformat58_76-debuginfo-4.4-150600.13.5.1 * libswscale5_9-4.4-150600.13.5.1 * libavresample4_0-debuginfo-4.4-150600.13.5.1 * libavcodec58_134-4.4-150600.13.5.1 * ffmpeg-4-libavresample-devel-4.4-150600.13.5.1 * libpostproc55_9-4.4-150600.13.5.1 * libswresample3_9-debuginfo-4.4-150600.13.5.1 * ffmpeg-4-libpostproc-devel-4.4-150600.13.5.1 * libavcodec58_134-debuginfo-4.4-150600.13.5.1 * ffmpeg-4-libswscale-devel-4.4-150600.13.5.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * libavutil56_70-debuginfo-4.4-150600.13.5.1 * ffmpeg-4-debuginfo-4.4-150600.13.5.1 * libavcodec58_134-4.4-150600.13.5.1 * libswresample3_9-4.4-150600.13.5.1 * libswscale5_9-debuginfo-4.4-150600.13.5.1 * libavutil56_70-4.4-150600.13.5.1 * ffmpeg-4-debugsource-4.4-150600.13.5.1 * libavformat58_76-4.4-150600.13.5.1 * libswresample3_9-debuginfo-4.4-150600.13.5.1 * libavformat58_76-debuginfo-4.4-150600.13.5.1 * libswscale5_9-4.4-150600.13.5.1 * libavcodec58_134-debuginfo-4.4-150600.13.5.1 ## References: * https://www.suse.com/security/cve/CVE-2020-22021.html * https://www.suse.com/security/cve/CVE-2023-51794.html * https://bugzilla.suse.com/show_bug.cgi?id=1186586 * https://bugzilla.suse.com/show_bug.cgi?id=1223437

1 0

SUSE-SU-2024:1910-1: important: Security update for gstreamer-plugins-base
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Security update for gstreamer-plugins-base Announcement ID: SUSE-SU-2024:1910-1 Rating: important References: * bsc#1224806 Cross-References: * CVE-2024-4453 CVSS scores: * CVE-2024-4453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for gstreamer-plugins-base fixes the following issues: * CVE-2024-4453: Fixed lack of proper validation of user-supplied data when parsing EXIF metadata (bsc#1224806) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1910=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1910=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1910=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1910=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1910=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1910=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1910=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1910=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1910=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1910=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1910=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1910=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1910=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1910=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1910=1 ## Package List: * SUSE Manager Retail Branch Server 4.3 (x86_64) * libgstrtp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstAllocators-1_0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-devel-1.20.1-150400.3.8.2 * typelib-1_0-GstApp-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLX11-1_0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstRtp-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstTag-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstRtsp-1_0-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLEGL-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstSdp-1_0-1.20.1-150400.3.8.2 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstAudio-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstGL-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstfft-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstGLWayland-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstVideo-1_0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstPbutils-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-1.20.1-150400.3.8.2 * libgstfft-1_0-0-debuginfo-1.20.1-150400.3.8.2 * SUSE Manager Retail Branch Server 4.3 (noarch) * gstreamer-plugins-base-lang-1.20.1-150400.3.8.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libgstrtp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstAllocators-1_0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-devel-1.20.1-150400.3.8.2 * typelib-1_0-GstApp-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLX11-1_0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstRtp-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstTag-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstRtsp-1_0-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLEGL-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstSdp-1_0-1.20.1-150400.3.8.2 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstAudio-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstGL-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstfft-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstGLWayland-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstVideo-1_0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstPbutils-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-1.20.1-150400.3.8.2 * libgstfft-1_0-0-debuginfo-1.20.1-150400.3.8.2 * SUSE Manager Server 4.3 (noarch) * gstreamer-plugins-base-lang-1.20.1-150400.3.8.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libgstrtp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstAllocators-1_0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-devel-1.20.1-150400.3.8.2 * typelib-1_0-GstApp-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLX11-1_0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstRtp-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstTag-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstRtsp-1_0-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLEGL-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstSdp-1_0-1.20.1-150400.3.8.2 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstAudio-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstGL-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstfft-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstGLWayland-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstVideo-1_0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstPbutils-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-1.20.1-150400.3.8.2 * libgstfft-1_0-0-debuginfo-1.20.1-150400.3.8.2 * openSUSE Leap 15.4 (x86_64) * libgstsdp-1_0-0-32bit-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-32bit-1.20.1-150400.3.8.2 * libgstapp-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-32bit-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-32bit-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgstgl-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgstfft-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgstapp-1_0-0-32bit-1.20.1-150400.3.8.2 * gstreamer-plugins-base-devel-32bit-1.20.1-150400.3.8.2 * libgstriff-1_0-0-32bit-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-32bit-1.20.1-150400.3.8.2 * gstreamer-plugins-base-32bit-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-32bit-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-32bit-1.20.1-150400.3.8.2 * libgstriff-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-32bit-1.20.1-150400.3.8.2 * libgstfft-1_0-0-32bit-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-32bit-debuginfo-1.20.1-150400.3.8.2 * libgstgl-1_0-0-32bit-1.20.1-150400.3.8.2 * libgsttag-1_0-0-32bit-1.20.1-150400.3.8.2 * openSUSE Leap 15.4 (noarch) * gstreamer-plugins-base-lang-1.20.1-150400.3.8.2 * openSUSE Leap 15.4 (aarch64_ilp32) * libgstaudio-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-64bit-1.20.1-150400.3.8.2 * libgstgl-1_0-0-64bit-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-64bit-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-devel-64bit-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-64bit-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-64bit-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-64bit-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-64bit-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * libgstgl-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * libgstriff-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-64bit-1.20.1-150400.3.8.2 * libgsttag-1_0-0-64bit-1.20.1-150400.3.8.2 * libgstfft-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-64bit-1.20.1-150400.3.8.2 * libgstriff-1_0-0-64bit-1.20.1-150400.3.8.2 * libgstapp-1_0-0-64bit-1.20.1-150400.3.8.2 * libgstapp-1_0-0-64bit-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-64bit-debuginfo-1.20.1-150400.3.8.2 * libgstfft-1_0-0-64bit-1.20.1-150400.3.8.2 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libgstrtp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstAllocators-1_0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-devel-1.20.1-150400.3.8.2 * typelib-1_0-GstApp-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLX11-1_0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstRtp-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstTag-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstRtsp-1_0-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLEGL-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstSdp-1_0-1.20.1-150400.3.8.2 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstAudio-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstGL-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstfft-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstGLWayland-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstVideo-1_0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstPbutils-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-1.20.1-150400.3.8.2 * libgstfft-1_0-0-debuginfo-1.20.1-150400.3.8.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * gstreamer-plugins-base-lang-1.20.1-150400.3.8.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libgstrtp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstAllocators-1_0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-devel-1.20.1-150400.3.8.2 * typelib-1_0-GstApp-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLX11-1_0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstRtp-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstTag-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstRtsp-1_0-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLEGL-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstSdp-1_0-1.20.1-150400.3.8.2 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstAudio-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstGL-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstfft-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstGLWayland-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstVideo-1_0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstPbutils-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-1.20.1-150400.3.8.2 * libgstfft-1_0-0-debuginfo-1.20.1-150400.3.8.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * gstreamer-plugins-base-lang-1.20.1-150400.3.8.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libgstrtp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstAllocators-1_0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-devel-1.20.1-150400.3.8.2 * typelib-1_0-GstApp-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLX11-1_0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstRtp-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstTag-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstRtsp-1_0-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLEGL-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstSdp-1_0-1.20.1-150400.3.8.2 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstAudio-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstGL-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstfft-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstGLWayland-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstVideo-1_0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstPbutils-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-1.20.1-150400.3.8.2 * libgstfft-1_0-0-debuginfo-1.20.1-150400.3.8.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * gstreamer-plugins-base-lang-1.20.1-150400.3.8.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libgstrtp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstAllocators-1_0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-devel-1.20.1-150400.3.8.2 * typelib-1_0-GstApp-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLX11-1_0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstRtp-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstTag-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstRtsp-1_0-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLEGL-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstSdp-1_0-1.20.1-150400.3.8.2 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstAudio-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstGL-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstfft-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstGLWayland-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstVideo-1_0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstPbutils-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-1.20.1-150400.3.8.2 * libgstfft-1_0-0-debuginfo-1.20.1-150400.3.8.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * gstreamer-plugins-base-lang-1.20.1-150400.3.8.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libgstrtp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstAllocators-1_0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-devel-1.20.1-150400.3.8.2 * typelib-1_0-GstApp-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLX11-1_0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstRtp-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstTag-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstRtsp-1_0-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLEGL-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstSdp-1_0-1.20.1-150400.3.8.2 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstAudio-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstGL-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstfft-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstGLWayland-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstVideo-1_0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstPbutils-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-1.20.1-150400.3.8.2 * libgstfft-1_0-0-debuginfo-1.20.1-150400.3.8.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * gstreamer-plugins-base-lang-1.20.1-150400.3.8.2 * SUSE Manager Proxy 4.3 (x86_64) * libgstrtp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstAllocators-1_0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-debuginfo-1.20.1-150400.3.8.2 * gstreamer-plugins-base-devel-1.20.1-150400.3.8.2 * typelib-1_0-GstApp-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLX11-1_0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstRtp-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstTag-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstRtsp-1_0-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgsttag-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-1.20.1-150400.3.8.2 * typelib-1_0-GstGLEGL-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstSdp-1_0-1.20.1-150400.3.8.2 * libgsttag-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstpbutils-1_0-0-1.20.1-150400.3.8.2 * libgstallocators-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstAudio-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstGL-1_0-1.20.1-150400.3.8.2 * libgstapp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstfft-1_0-0-1.20.1-150400.3.8.2 * libgstgl-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstGLWayland-1_0-1.20.1-150400.3.8.2 * typelib-1_0-GstVideo-1_0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-1.20.1-150400.3.8.2 * libgstrtp-1_0-0-debuginfo-1.20.1-150400.3.8.2 * typelib-1_0-GstPbutils-1_0-1.20.1-150400.3.8.2 * gstreamer-plugins-base-debugsource-1.20.1-150400.3.8.2 * libgstgl-1_0-0-1.20.1-150400.3.8.2 * libgstsdp-1_0-0-1.20.1-150400.3.8.2 * libgstaudio-1_0-0-1.20.1-150400.3.8.2 * libgstriff-1_0-0-1.20.1-150400.3.8.2 * libgstvideo-1_0-0-debuginfo-1.20.1-150400.3.8.2 * libgstrtsp-1_0-0-1.20.1-150400.3.8.2 * libgstfft-1_0-0-debuginfo-1.20.1-150400.3.8.2 * SUSE Manager Proxy 4.3 (noarch) * gstreamer-plugins-base-lang-1.20.1-150400.3.8.2 ## References: * https://www.suse.com/security/cve/CVE-2024-4453.html * https://bugzilla.suse.com/show_bug.cgi?id=1224806

1 0

SUSE-RU-2024:1912-1: low: Recommended update for python-recommonmark
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Recommended update for python-recommonmark Announcement ID: SUSE-RU-2024:1912-1 Rating: low References: * jsc#PED-8481 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 An update that contains one feature can now be installed. ## Description: This update for python-recommonmark fixes the following issues: * Rename changelog and the SPEC file to python3- form (jsc#PED-8481). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1912=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1912=1 ## Package List: * openSUSE Leap 15.5 (noarch) * python3-recommonmark-0.5.0-150100.3.3.1 * openSUSE Leap 15.6 (noarch) * python3-recommonmark-0.5.0-150100.3.3.1 ## References: * https://jira.suse.com/browse/PED-8481

1 0

SUSE-RU-2024:1915-1: moderate: Recommended update for xfsprogs
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Recommended update for xfsprogs Announcement ID: SUSE-RU-2024:1915-1 Rating: moderate References: Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that can now be installed. ## Description: This update for xfsprogs fixes the following issue: * update to 6.7.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1915=1 openSUSE-SLE-15.6-2024-1915=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1915=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1915=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * xfsprogs-scrub-6.7.0-150600.3.3.1 * libhandle1-debuginfo-6.7.0-150600.3.3.1 * xfsprogs-debugsource-6.7.0-150600.3.3.1 * xfsprogs-debuginfo-6.7.0-150600.3.3.1 * xfsprogs-6.7.0-150600.3.3.1 * libhandle1-6.7.0-150600.3.3.1 * xfsprogs-devel-6.7.0-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libhandle1-debuginfo-6.7.0-150600.3.3.1 * xfsprogs-debugsource-6.7.0-150600.3.3.1 * xfsprogs-debuginfo-6.7.0-150600.3.3.1 * xfsprogs-6.7.0-150600.3.3.1 * libhandle1-6.7.0-150600.3.3.1 * xfsprogs-devel-6.7.0-150600.3.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * xfsprogs-scrub-6.7.0-150600.3.3.1 * xfsprogs-debugsource-6.7.0-150600.3.3.1 * xfsprogs-debuginfo-6.7.0-150600.3.3.1

1 0

SUSE-RU-2024:1919-1: moderate: Recommended update for HANA-Firewall
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Recommended update for HANA-Firewall Announcement ID: SUSE-RU-2024:1919-1 Rating: moderate References: * bsc#1221231 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SAP Applications Module 15-SP2 * SAP Applications Module 15-SP3 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SAP Applications Module 15-SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for HANA-Firewall fixes the following issue: * HANA-Firewall creates insufficient configuration (bsc#1221231) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1919=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1919=1 * SAP Applications Module 15-SP2 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2024-1919=1 * SAP Applications Module 15-SP3 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2024-1919=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-1919=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-1919=1 * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2024-1919=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * HANA-Firewall-2.0.4-150000.3.9.3 * HANA-Firewall-debuginfo-2.0.4-150000.3.9.3 * openSUSE Leap 15.6 (ppc64le x86_64) * HANA-Firewall-2.0.4-150000.3.9.3 * HANA-Firewall-debuginfo-2.0.4-150000.3.9.3 * SAP Applications Module 15-SP2 (ppc64le x86_64) * HANA-Firewall-2.0.4-150000.3.9.3 * HANA-Firewall-debuginfo-2.0.4-150000.3.9.3 * SAP Applications Module 15-SP3 (ppc64le x86_64) * HANA-Firewall-2.0.4-150000.3.9.3 * HANA-Firewall-debuginfo-2.0.4-150000.3.9.3 * SAP Applications Module 15-SP4 (ppc64le x86_64) * HANA-Firewall-2.0.4-150000.3.9.3 * HANA-Firewall-debuginfo-2.0.4-150000.3.9.3 * SAP Applications Module 15-SP5 (ppc64le x86_64) * HANA-Firewall-2.0.4-150000.3.9.3 * HANA-Firewall-debuginfo-2.0.4-150000.3.9.3 * SAP Applications Module 15-SP6 (ppc64le x86_64) * HANA-Firewall-2.0.4-150000.3.9.3 * HANA-Firewall-debuginfo-2.0.4-150000.3.9.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221231

1 0

SUSE-OU-2024:1920-1: low: Optional update for update-test-trivial
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Optional update for update-test-trivial Announcement ID: SUSE-OU-2024:1920-1 Rating: low References: Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for update-test-trivial fixes the following issue: * Test maintenance workflow for new products. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1920=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1920=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1920=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * update-test-32bit-pkg-32bit-5.1-150200.39.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * update-test-security-5.1-150200.39.1 * update-test-relogin-suggested-5.1-150200.39.1 * update-test-feature-5.1-150200.39.1 * update-test-affects-package-manager-5.1-150200.39.1 * update-test-reboot-needed-5.1-150200.39.1 * update-test-broken-5.1-150200.39.1 * update-test-retracted-5.1-150200.39.1 * update-test-trivial-5.1-150200.39.1 * update-test-interactive-5.1-150200.39.1 * update-test-32bit-pkg-5.1-150200.39.1 * update-test-optional-5.1-150200.39.1 * openSUSE Leap 15.6 (x86_64) * update-test-32bit-pkg-32bit-5.1-150200.39.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * update-test-security-5.1-150200.39.1 * update-test-relogin-suggested-5.1-150200.39.1 * update-test-feature-5.1-150200.39.1 * update-test-affects-package-manager-5.1-150200.39.1 * update-test-reboot-needed-5.1-150200.39.1 * update-test-broken-5.1-150200.39.1 * update-test-retracted-5.1-150200.39.1 * update-test-trivial-5.1-150200.39.1 * update-test-interactive-5.1-150200.39.1 * update-test-32bit-pkg-5.1-150200.39.1 * update-test-optional-5.1-150200.39.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * update-test-security-5.1-150200.39.1 * update-test-relogin-suggested-5.1-150200.39.1 * update-test-feature-5.1-150200.39.1 * update-test-affects-package-manager-5.1-150200.39.1 * update-test-reboot-needed-5.1-150200.39.1 * update-test-broken-5.1-150200.39.1 * update-test-retracted-5.1-150200.39.1 * update-test-trivial-5.1-150200.39.1 * update-test-interactive-5.1-150200.39.1 * update-test-32bit-pkg-5.1-150200.39.1 * update-test-optional-5.1-150200.39.1 * Basesystem Module 15-SP6 (aarch64_ilp32) * update-test-32bit-pkg-64bit-5.1-150200.39.1 * Basesystem Module 15-SP6 (x86_64) * update-test-32bit-pkg-32bit-5.1-150200.39.1

1 0

SUSE-SU-2024:1896-1: moderate: Security update for squid
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Security update for squid Announcement ID: SUSE-SU-2024:1896-1 Rating: moderate References: * bsc#1225417 Cross-References: * CVE-2024-33427 CVSS scores: * CVE-2024-33427 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service (bsc#1225417). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1896=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1896=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1896=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * squid-5.7-150400.3.29.2 * squid-debugsource-5.7-150400.3.29.2 * squid-debuginfo-5.7-150400.3.29.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.29.2 * squid-debugsource-5.7-150400.3.29.2 * squid-debuginfo-5.7-150400.3.29.2 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.29.2 * squid-debugsource-5.7-150400.3.29.2 * squid-debuginfo-5.7-150400.3.29.2 ## References: * https://www.suse.com/security/cve/CVE-2024-33427.html * https://bugzilla.suse.com/show_bug.cgi?id=1225417

1 0

SUSE-RU-2024:1897-1: moderate: Recommended update for postfix
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Recommended update for postfix Announcement ID: SUSE-RU-2024:1897-1 Rating: moderate References: * bsc#1223264 * bsc#1224207 Affected Products: * Basesystem Module 15-SP6 * Legacy Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed. ## Description: This update for postfix fixes the following issues: * config.postfix needs updating (bsc#1224207) * chkconfig to systemctl * Link Cyrus lmtp only if this exsists * /usr/lib64/sasl2 does not need to exist * Fetch timezone via readlink from /etc/localtime * Set inet_interfaces to loopback-only instead of localhost as proposed in man 5 postconf (bsc#1223264) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1897=1 openSUSE-SLE-15.6-2024-1897=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1897=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-1897=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-1897=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * postfix-bdb-3.8.4-150600.3.3.1 * postfix-bdb-lmdb-debuginfo-3.8.4-150600.3.3.1 * postfix-3.8.4-150600.3.3.1 * postfix-ldap-debuginfo-3.8.4-150600.3.3.1 * postfix-mysql-debuginfo-3.8.4-150600.3.3.1 * postfix-debugsource-3.8.4-150600.3.3.1 * postfix-mysql-3.8.4-150600.3.3.1 * postfix-postgresql-3.8.4-150600.3.3.1 * postfix-debuginfo-3.8.4-150600.3.3.1 * postfix-postgresql-debuginfo-3.8.4-150600.3.3.1 * postfix-bdb-debugsource-3.8.4-150600.3.3.1 * postfix-bdb-debuginfo-3.8.4-150600.3.3.1 * postfix-ldap-3.8.4-150600.3.3.1 * postfix-bdb-lmdb-3.8.4-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * postfix-doc-3.8.4-150600.3.3.1 * postfix-devel-3.8.4-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postfix-3.8.4-150600.3.3.1 * postfix-ldap-debuginfo-3.8.4-150600.3.3.1 * postfix-debugsource-3.8.4-150600.3.3.1 * postfix-debuginfo-3.8.4-150600.3.3.1 * postfix-ldap-3.8.4-150600.3.3.1 * Basesystem Module 15-SP6 (noarch) * postfix-doc-3.8.4-150600.3.3.1 * postfix-devel-3.8.4-150600.3.3.1 * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postfix-bdb-3.8.4-150600.3.3.1 * postfix-bdb-lmdb-debuginfo-3.8.4-150600.3.3.1 * postfix-bdb-debugsource-3.8.4-150600.3.3.1 * postfix-bdb-debuginfo-3.8.4-150600.3.3.1 * postfix-bdb-lmdb-3.8.4-150600.3.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postfix-mysql-3.8.4-150600.3.3.1 * postfix-debuginfo-3.8.4-150600.3.3.1 * postfix-mysql-debuginfo-3.8.4-150600.3.3.1 * postfix-debugsource-3.8.4-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223264 * https://bugzilla.suse.com/show_bug.cgi?id=1224207

1 0

SUSE-RU-2024:1898-1: moderate: Recommended update for iputils
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Recommended update for iputils Announcement ID: SUSE-RU-2024:1898-1 Rating: moderate References: * bsc#1224877 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for iputils fixes the following issues: * Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877) * "arping: Fix 1s delay on exit for unsolicited arpings", Backport upstream fix (bsc#1224877) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1898=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1898=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1898=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1898=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1898=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1898=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1898=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1898=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-1898=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1898=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1898=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1898=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1898=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1898=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1898=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1898=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1898=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * iputils-debuginfo-20211215-150400.3.8.2 * rarpd-debuginfo-20211215-150400.3.8.2 * rarpd-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * rarpd-debuginfo-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * rarpd-20211215-150400.3.8.2 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * rarpd-debuginfo-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * rarpd-20211215-150400.3.8.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * rarpd-debuginfo-20211215-150400.3.8.2 * rarpd-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * rarpd-debuginfo-20211215-150400.3.8.2 * rarpd-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * rarpd-debuginfo-20211215-150400.3.8.2 * rarpd-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * rarpd-debuginfo-20211215-150400.3.8.2 * rarpd-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * SUSE Manager Proxy 4.3 (x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * rarpd-debuginfo-20211215-150400.3.8.2 * rarpd-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * rarpd-debuginfo-20211215-150400.3.8.2 * rarpd-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * iputils-debuginfo-20211215-150400.3.8.2 * rarpd-debuginfo-20211215-150400.3.8.2 * rarpd-20211215-150400.3.8.2 * iputils-debugsource-20211215-150400.3.8.2 * iputils-20211215-150400.3.8.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1224877

1 0

openSUSE-SU-2024:0148-1: important: Security update for chromium
by opensuse-security＠opensuse.org 03 Jun '24

03 Jun '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0148-1 Rating: important References: #1225690 Cross-References: CVE-2024-5493 CVE-2024-5494 CVE-2024-5495 CVE-2024-5496 CVE-2024-5497 CVE-2024-5498 CVE-2024-5499 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 125.0.6422.141 (boo#1225690) * CVE-2024-5493: Heap buffer overflow in WebRTC * CVE-2024-5494: Use after free in Dawn * CVE-2024-5495: Use after free in Dawn * CVE-2024-5496: Use after free in Media Session * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs * CVE-2024-5498: Use after free in Presentation API * CVE-2024-5499: Out of bounds write in Streams API Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-148=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-125.0.6422.141-bp155.2.91.1 chromium-125.0.6422.141-bp155.2.91.1 References: https://www.suse.com/security/cve/CVE-2024-5493.html https://www.suse.com/security/cve/CVE-2024-5494.html https://www.suse.com/security/cve/CVE-2024-5495.html https://www.suse.com/security/cve/CVE-2024-5496.html https://www.suse.com/security/cve/CVE-2024-5497.html https://www.suse.com/security/cve/CVE-2024-5498.html https://www.suse.com/security/cve/CVE-2024-5499.html https://bugzilla.suse.com/1225690

1 0

SUSE-RU-2024:1891-1: moderate: Recommended update for csp-billing-adapter
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Recommended update for csp-billing-adapter Announcement ID: SUSE-RU-2024:1891-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that can now be installed. ## Description: This update for csp-billing-adapter fixes the following issues: * csp-billing-adapter was updated to version 0.10.0: * Added free trial feature ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1891=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1891=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1891=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1891=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-1891=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python3-csp-billing-adapter-0.10.0-150400.9.14.1 * csp-billing-adapter-service-0.10.0-150400.9.14.1 * openSUSE Leap 15.6 (noarch) * python3-csp-billing-adapter-0.10.0-150400.9.14.1 * csp-billing-adapter-service-0.10.0-150400.9.14.1 * Public Cloud Module 15-SP4 (noarch) * python3-csp-billing-adapter-0.10.0-150400.9.14.1 * csp-billing-adapter-service-0.10.0-150400.9.14.1 * Public Cloud Module 15-SP5 (noarch) * python3-csp-billing-adapter-0.10.0-150400.9.14.1 * csp-billing-adapter-service-0.10.0-150400.9.14.1 * Public Cloud Module 15-SP6 (noarch) * python3-csp-billing-adapter-0.10.0-150400.9.14.1 * csp-billing-adapter-service-0.10.0-150400.9.14.1

1 0

SUSE-SU-2024:1895-1: important: Security update for glibc
by OPENSUSE-UPDATES 03 Jun '24

03 Jun '24

# Security update for glibc Announcement ID: SUSE-SU-2024:1895-1 Rating: important References: * bsc#1221940 * bsc#1223423 * bsc#1223424 * bsc#1223425 Cross-References: * CVE-2024-33599 * CVE-2024-33600 * CVE-2024-33601 * CVE-2024-33602 CVSS scores: * CVE-2024-33599 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-33600 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-33601 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-33602 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2024-33599: Fixed a stack-based buffer overflow in netgroup cache in nscd (bsc#1223423) * CVE-2024-33600: Avoid null pointer crashes after notfound response in nscd (bsc#1223424) * CVE-2024-33600: Do not send missing not-found response in addgetnetgrentX in nscd (bsc#1223424) * CVE-2024-33601, CVE-2024-33602: Fixed use of two buffers in addgetnetgrentX ( bsc#1223425) * CVE-2024-33602: Use time_t for return type of addgetnetgrentX (bsc#1223425) * Avoid creating userspace live patching prologue for _start routine (bsc#1221940) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1895=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1895=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1895=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1895=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1895=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1895=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1895=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1895=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1895=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1895=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1895=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1895=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1895=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1895=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1895=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1895=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1895=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1895=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1895=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1895=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1895=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1895=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1895=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1895=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1895=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1895=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586 i686) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * glibc-extra-debuginfo-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * openSUSE Leap 15.3 (noarch) * glibc-info-2.31-150300.83.1 * glibc-html-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * openSUSE Leap 15.3 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-utils-32bit-debuginfo-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-utils-32bit-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-devel-32bit-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * glibc-devel-static-32bit-2.31-150300.83.1 * glibc-profile-32bit-2.31-150300.83.1 * openSUSE Leap 15.3 (aarch64_ilp32) * glibc-profile-64bit-2.31-150300.83.1 * glibc-64bit-debuginfo-2.31-150300.83.1 * glibc-utils-64bit-2.31-150300.83.1 * glibc-64bit-2.31-150300.83.1 * glibc-locale-base-64bit-debuginfo-2.31-150300.83.1 * glibc-devel-64bit-debuginfo-2.31-150300.83.1 * glibc-locale-base-64bit-2.31-150300.83.1 * glibc-utils-64bit-debuginfo-2.31-150300.83.1 * glibc-devel-static-64bit-2.31-150300.83.1 * glibc-devel-64bit-2.31-150300.83.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * openSUSE Leap 15.5 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-utils-32bit-debuginfo-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-utils-32bit-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-devel-32bit-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * glibc-devel-static-32bit-2.31-150300.83.1 * glibc-profile-32bit-2.31-150300.83.1 * openSUSE Leap 15.5 (noarch) * glibc-info-2.31-150300.83.1 * glibc-html-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * Basesystem Module 15-SP5 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * Basesystem Module 15-SP5 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * glibc-debugsource-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * Development Tools Module 15-SP5 (x86_64) * glibc-devel-32bit-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-devel-32bit-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-devel-32bit-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-devel-32bit-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-32bit-2.31-150300.83.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-devel-32bit-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-devel-32bit-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-devel-32bit-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-devel-32bit-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * SUSE Manager Proxy 4.3 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Manager Proxy 4.3 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Manager Server 4.3 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Manager Server 4.3 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-devel-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-extra-2.31-150300.83.1 * glibc-extra-debuginfo-2.31-150300.83.1 * glibc-utils-src-debugsource-2.31-150300.83.1 * nscd-debuginfo-2.31-150300.83.1 * glibc-utils-2.31-150300.83.1 * nscd-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-devel-static-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-utils-debuginfo-2.31-150300.83.1 * glibc-profile-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Enterprise Storage 7.1 (noarch) * glibc-info-2.31-150300.83.1 * glibc-lang-2.31-150300.83.1 * glibc-i18ndata-2.31-150300.83.1 * SUSE Enterprise Storage 7.1 (x86_64) * glibc-locale-base-32bit-2.31-150300.83.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-debuginfo-2.31-150300.83.1 * glibc-32bit-2.31-150300.83.1 * glibc-devel-32bit-2.31-150300.83.1 * glibc-devel-32bit-debuginfo-2.31-150300.83.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * glibc-locale-base-debuginfo-2.31-150300.83.1 * glibc-debugsource-2.31-150300.83.1 * glibc-devel-2.31-150300.83.1 * glibc-2.31-150300.83.1 * glibc-locale-base-2.31-150300.83.1 * glibc-debuginfo-2.31-150300.83.1 * glibc-locale-2.31-150300.83.1 ## References: * https://www.suse.com/security/cve/CVE-2024-33599.html * https://www.suse.com/security/cve/CVE-2024-33600.html * https://www.suse.com/security/cve/CVE-2024-33601.html * https://www.suse.com/security/cve/CVE-2024-33602.html * https://bugzilla.suse.com/show_bug.cgi?id=1221940 * https://bugzilla.suse.com/show_bug.cgi?id=1223423 * https://bugzilla.suse.com/show_bug.cgi?id=1223424 * https://bugzilla.suse.com/show_bug.cgi?id=1223425

1 0