June 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:2032-1: moderate: Security update for mariadb
by OPENSUSE-UPDATES 14 Jun '24

14 Jun '24

# Security update for mariadb Announcement ID: SUSE-SU-2024:2032-1 Rating: moderate References: * bsc#1225983 Cross-References: * CVE-2024-21096 CVSS scores: * CVE-2024-21096 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * Galera for Ericsson 15 SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for mariadb fixes the following issues: * CVE-2024-21096: Fixed mysqldump unspecified vulnerability (bsc#1225983). * Update to 10.11.8. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2032=1 openSUSE-SLE-15.6-2024-2032=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2032=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2032=1 * Galera for Ericsson 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-ERICSSON-2024-2032=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * mariadb-rpm-macros-10.11.8-150600.4.3.1 * mariadb-tools-10.11.8-150600.4.3.1 * mariadb-tools-debuginfo-10.11.8-150600.4.3.1 * mariadb-bench-debuginfo-10.11.8-150600.4.3.1 * mariadb-test-10.11.8-150600.4.3.1 * mariadb-10.11.8-150600.4.3.1 * mariadb-debuginfo-10.11.8-150600.4.3.1 * mariadb-test-debuginfo-10.11.8-150600.4.3.1 * libmariadbd-devel-10.11.8-150600.4.3.1 * mariadb-client-debuginfo-10.11.8-150600.4.3.1 * mariadb-galera-10.11.8-150600.4.3.1 * mariadb-client-10.11.8-150600.4.3.1 * mariadb-bench-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * libmariadbd19-10.11.8-150600.4.3.1 * libmariadbd19-debuginfo-10.11.8-150600.4.3.1 * openSUSE Leap 15.6 (noarch) * mariadb-errormessages-10.11.8-150600.4.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * mariadb-debuginfo-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * mariadb-galera-10.11.8-150600.4.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * mariadb-tools-10.11.8-150600.4.3.1 * mariadb-tools-debuginfo-10.11.8-150600.4.3.1 * mariadb-10.11.8-150600.4.3.1 * mariadb-debuginfo-10.11.8-150600.4.3.1 * libmariadbd-devel-10.11.8-150600.4.3.1 * mariadb-client-debuginfo-10.11.8-150600.4.3.1 * mariadb-client-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * libmariadbd19-10.11.8-150600.4.3.1 * libmariadbd19-debuginfo-10.11.8-150600.4.3.1 * Server Applications Module 15-SP6 (noarch) * mariadb-errormessages-10.11.8-150600.4.3.1 * Galera for Ericsson 15 SP6 (x86_64) * mariadb-debuginfo-10.11.8-150600.4.3.1 * mariadb-debugsource-10.11.8-150600.4.3.1 * mariadb-galera-10.11.8-150600.4.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21096.html * https://bugzilla.suse.com/show_bug.cgi?id=1225983

1 0

SUSE-SU-2024:2031-1: important: Security update for podman
by OPENSUSE-UPDATES 14 Jun '24

14 Jun '24

# Security update for podman Announcement ID: SUSE-SU-2024:2031-1 Rating: important References: * bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786 * CVE-2024-3727 CVSS scores: * CVE-2024-3727 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for podman fixes the following issues: * Update to version 4.9.5 * CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122) * CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2031=1 openSUSE-SLE-15.5-2024-2031=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2031=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2031=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-2031=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-2031=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * podmansh-4.9.5-150500.3.12.1 * podman-4.9.5-150500.3.12.1 * podman-debuginfo-4.9.5-150500.3.12.1 * podman-remote-debuginfo-4.9.5-150500.3.12.1 * podman-remote-4.9.5-150500.3.12.1 * openSUSE Leap 15.5 (noarch) * podman-docker-4.9.5-150500.3.12.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * podmansh-4.9.5-150500.3.12.1 * podman-4.9.5-150500.3.12.1 * podman-debuginfo-4.9.5-150500.3.12.1 * podman-remote-debuginfo-4.9.5-150500.3.12.1 * podman-remote-4.9.5-150500.3.12.1 * openSUSE Leap 15.6 (noarch) * podman-docker-4.9.5-150500.3.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * podmansh-4.9.5-150500.3.12.1 * podman-4.9.5-150500.3.12.1 * podman-debuginfo-4.9.5-150500.3.12.1 * podman-remote-debuginfo-4.9.5-150500.3.12.1 * podman-remote-4.9.5-150500.3.12.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.12.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * podmansh-4.9.5-150500.3.12.1 * podman-4.9.5-150500.3.12.1 * podman-debuginfo-4.9.5-150500.3.12.1 * podman-remote-debuginfo-4.9.5-150500.3.12.1 * podman-remote-4.9.5-150500.3.12.1 * Containers Module 15-SP5 (noarch) * podman-docker-4.9.5-150500.3.12.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * podmansh-4.9.5-150500.3.12.1 * podman-4.9.5-150500.3.12.1 * podman-debuginfo-4.9.5-150500.3.12.1 * podman-remote-debuginfo-4.9.5-150500.3.12.1 * podman-remote-4.9.5-150500.3.12.1 * Containers Module 15-SP6 (noarch) * podman-docker-4.9.5-150500.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24786.html * https://www.suse.com/security/cve/CVE-2024-3727.html * https://bugzilla.suse.com/show_bug.cgi?id=1224122 * https://bugzilla.suse.com/show_bug.cgi?id=1226136

1 0

SUSE-RU-2024:1566-2: moderate: Recommended update for catatonit
by OPENSUSE-UPDATES 14 Jun '24

14 Jun '24

# Recommended update for catatonit Announcement ID: SUSE-RU-2024:1566-2 Rating: moderate References: Affected Products: * Containers Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for catatonit fixes the following issues: * Update to catatonit v0.2.0 * Change license to GPL-2.0-or-later ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1566=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-1566=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * catatonit-debuginfo-0.2.0-150500.3.3.1 * catatonit-0.2.0-150500.3.3.1 * catatonit-debugsource-0.2.0-150500.3.3.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * catatonit-debuginfo-0.2.0-150500.3.3.1 * catatonit-0.2.0-150500.3.3.1 * catatonit-debugsource-0.2.0-150500.3.3.1

1 0

openSUSE-RU-2024:0160-1: moderate: Recommended update for plasma5-workspace
by maintenance＠opensuse.org 13 Jun '24

13 Jun '24

openSUSE Recommended Update: Recommended update for plasma5-workspace ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0160-1 Rating: moderate References: #1226110 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: plasma5-workspace was updated to fix the following issue: - Fixed a regression introduced by the preceding change (kde#487912, boo#1226110): Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-160=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): gmenudbusmenuproxy-5.27.9-bp155.2.9.1 plasma5-session-wayland-5.27.9-bp155.2.9.1 plasma5-workspace-5.27.9-bp155.2.9.1 plasma5-workspace-devel-5.27.9-bp155.2.9.1 plasma5-workspace-libs-5.27.9-bp155.2.9.1 xembedsniproxy-5.27.9-bp155.2.9.1 - openSUSE Backports SLE-15-SP5 (noarch): plasma5-session-5.27.9-bp155.2.9.1 plasma5-workspace-lang-5.27.9-bp155.2.9.1 References: https://bugzilla.suse.com/1226110

1 0

SUSE-RU-2024:2021-1: moderate: Recommended update for iputils
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Recommended update for iputils Announcement ID: SUSE-RU-2024:2021-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for iputils fixes the following issue: * After upstream merged the fix, update git commit hashes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2021=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2021=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2021=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2021=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2021=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2021=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2021=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-2021=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2021=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * rarpd-debuginfo-20211215-150400.3.11.1 * iputils-debuginfo-20211215-150400.3.11.1 * rarpd-20211215-150400.3.11.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * iputils-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * iputils-20211215-150400.3.11.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rarpd-20211215-150400.3.11.1 * iputils-debuginfo-20211215-150400.3.11.1 * rarpd-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * rarpd-20211215-150400.3.11.1 * iputils-debuginfo-20211215-150400.3.11.1 * rarpd-debuginfo-20211215-150400.3.11.1 * iputils-debugsource-20211215-150400.3.11.1

1 0

SUSE-RU-2024:2022-1: moderate: Recommended update for chrony
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Recommended update for chrony Announcement ID: SUSE-RU-2024:2022-1 Rating: moderate References: * bsc#1213551 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for chrony fixes the following issues: * Use shorter NTS-KE retry interval when network is down (bsc#1213551) * Use make quickcheck instead of make check to avoid more than 1h build times and failures due to timeouts. This was the default before 3.2 but it changed to make tests more reliable ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2022=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2022=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2022=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2022=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2022=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2022=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2022=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2022=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2022=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2022=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2022=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2022=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2022=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2022=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2022=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2022=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2022=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2022=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2022=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2022=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * openSUSE Leap 15.4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-openSUSE-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * openSUSE Leap Micro 5.3 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * openSUSE Leap Micro 5.4 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * openSUSE Leap 15.5 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-openSUSE-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * openSUSE Leap 15.6 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-openSUSE-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.3 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.4 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Micro 5.5 (noarch) * chrony-pool-suse-4.1-150400.21.5.7 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * Basesystem Module 15-SP5 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * Basesystem Module 15-SP6 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Manager Proxy 4.3 (x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Manager Proxy 4.3 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Manager Retail Branch Server 4.3 (x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Manager Retail Branch Server 4.3 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * chrony-debugsource-4.1-150400.21.5.7 * chrony-4.1-150400.21.5.7 * chrony-debuginfo-4.1-150400.21.5.7 * SUSE Manager Server 4.3 (noarch) * chrony-pool-empty-4.1-150400.21.5.7 * chrony-pool-suse-4.1-150400.21.5.7 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213551

1 0

SUSE-RU-2024:2023-1: moderate: Recommended update for socat
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Recommended update for socat Announcement ID: SUSE-RU-2024:2023-1 Rating: moderate References: * bsc#1160293 * jsc#PED-8413 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has one fix can now be installed. ## Description: This update for socat fixes the following issues: socat is updated to 1.8.0.0: Primary feature is enabling TLS 1.3 support. (jsc#PED-8413) * Support for network namespaces (option netns) * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following) * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL * New script socat-mux.sh allows n-to-1 / 1-to-n communications * New script socat-broker.sh allows group communications * Experimental socks5 client feature * Address ACCEPT-FD for systemd "inetd" mode * UDP-Lite and DCCP address types * Addresses SOCKETPAIR and SHELL * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets * Simple statistics output with Socat option --statistics and with SIGUSR1 * A couple of new options, many fixes and corrections, see file CHANGES Update to 1.7.4.4: * FIX: In error.c msg2() there was a stack overflow on long messages: The terminating \0 Byte was written behind the last position. * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets arrived. * FIX: a couple of weaknesses and errors when accessing invalid or incompatible file system entries with UNIX domain, file, and generic addresses. * FIX: bad parser error message on "socat /tmp/x\"x/x -" Update to 1.7.4.3: * fixes the TCP_INFO issue that broke building on non-Linux platforms. * building on AIX works again. * A few more corrections and improvements have been added Update to version 1.7.4.2: * Fixes a lot of bugs, e.g., for options -r and -R. * Further bugfixes, see the CHANGES file Update to 1.7.4.1: Security: * Buffer size option (-b) is internally doubled for CR-CRLF conversion, but not checked for integer overflow. This could lead to heap based buffer overflow, assuming the attacker could provide this parameter. * Many further bugfixes and new features, see the CHANGES file ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2023=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2023=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2023=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2023=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2023=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2023=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2023=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2023=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2023=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2023=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2023=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2023=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2023=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2023=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2023=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-extra-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * socat-debuginfo-1.8.0.0-150400.14.3.1 * socat-debugsource-1.8.0.0-150400.14.3.1 * socat-1.8.0.0-150400.14.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1160293 * https://jira.suse.com/browse/PED-8413

1 0

SUSE-RU-2024:2024-1: moderate: Recommended update for jitterentropy
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Recommended update for jitterentropy Announcement ID: SUSE-RU-2024:2024-1 Rating: moderate References: * bsc#1209627 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for jitterentropy fixes the following issues: * Fixed a stack corruption on s390x: [bsc#1209627] * Output size of the STCKE command on s390x is 16 bytes, compared to 8 bytes of the STCK command. Fix a stack corruption in the s390x version of jent_get_nstime(). Add some more detailed information on the STCKE command. Updated to 3.4.1 * add FIPS 140 hints to man page * simplify the test tool to search for optimal configurations * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0 * enhancement: add ARM64 assembler code to read high-res timer ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2024=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2024=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2024=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2024=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2024=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2024=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2024=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2024=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2024=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2024=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2024=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * jitterentropy-devel-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * jitterentropy-devel-static-3.4.1-150000.1.12.1 * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * openSUSE Leap 15.5 (x86_64) * libjitterentropy3-32bit-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-32bit-3.4.1-150000.1.12.1 * libjitterentropy3-32bit-3.4.1-150000.1.12.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * jitterentropy-devel-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * jitterentropy-devel-static-3.4.1-150000.1.12.1 * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * openSUSE Leap 15.6 (x86_64) * libjitterentropy3-32bit-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-32bit-3.4.1-150000.1.12.1 * libjitterentropy3-32bit-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x) * jitterentropy-devel-static-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x) * jitterentropy-devel-static-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * jitterentropy-devel-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * jitterentropy-devel-static-3.4.1-150000.1.12.1 * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * Basesystem Module 15-SP5 (x86_64) * libjitterentropy3-32bit-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-32bit-3.4.1-150000.1.12.1 * libjitterentropy3-32bit-3.4.1-150000.1.12.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * jitterentropy-devel-3.4.1-150000.1.12.1 * libjitterentropy3-3.4.1-150000.1.12.1 * jitterentropy-devel-static-3.4.1-150000.1.12.1 * libjitterentropy3-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-debugsource-3.4.1-150000.1.12.1 * Basesystem Module 15-SP6 (x86_64) * libjitterentropy3-32bit-debuginfo-3.4.1-150000.1.12.1 * jitterentropy-devel-32bit-3.4.1-150000.1.12.1 * libjitterentropy3-32bit-3.4.1-150000.1.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1209627

1 0

SUSE-SU-2024:1571-2: important: Security update for python-pymongo
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Security update for python-pymongo Announcement ID: SUSE-SU-2024:1571-2 Rating: important References: * bsc#1222492 Cross-References: * CVE-2024-21506 CVSS scores: * CVE-2024-21506 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for python-pymongo fixes the following issues: * CVE-2024-21506: Fixed out-of-bounds read in the BSON module (bsc#1222492) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1571=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1571=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python3-pymongo-3.11.0-150300.3.3.1 * python-pymongo-debugsource-3.11.0-150300.3.3.1 * python-pymongo-debuginfo-3.11.0-150300.3.3.1 * python3-pymongo-debuginfo-3.11.0-150300.3.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-pymongo-3.11.0-150300.3.3.1 * python-pymongo-debugsource-3.11.0-150300.3.3.1 * python-pymongo-debuginfo-3.11.0-150300.3.3.1 * python3-pymongo-debuginfo-3.11.0-150300.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21506.html * https://bugzilla.suse.com/show_bug.cgi?id=1222492

1 0

SUSE-SU-2024:2028-1: moderate: Security update for tiff
by OPENSUSE-UPDATES 13 Jun '24

13 Jun '24

# Security update for tiff Announcement ID: SUSE-SU-2024:2028-1 Rating: moderate References: * bsc#1212233 Cross-References: * CVE-2023-3164 CVSS scores: * CVE-2023-3164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-3164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for tiff fixes the following issues: * CVE-2023-3164: Fixed a heap buffer overflow in tiffcrop. (bsc#1212233) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2028=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2028=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2028=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2028=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2028=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2028=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2028=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2028=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2028=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2028=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2028=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2028=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2028=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.44.1 * tiff-debuginfo-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff-devel-4.0.9-150000.45.44.1 * Basesystem Module 15-SP5 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.44.1 * libtiff5-32bit-4.0.9-150000.45.44.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * Basesystem Module 15-SP6 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.44.1 * libtiff5-32bit-4.0.9-150000.45.44.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * tiff-4.0.9-150000.45.44.1 * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * openSUSE Leap 15.5 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.44.1 * libtiff5-32bit-4.0.9-150000.45.44.1 * libtiff-devel-32bit-4.0.9-150000.45.44.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libtiff5-debuginfo-4.0.9-150000.45.44.1 * tiff-4.0.9-150000.45.44.1 * tiff-debuginfo-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff-devel-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * tiff-debuginfo-4.0.9-150000.45.44.1 * tiff-debugsource-4.0.9-150000.45.44.1 * libtiff5-4.0.9-150000.45.44.1 * libtiff5-debuginfo-4.0.9-150000.45.44.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3164.html * https://bugzilla.suse.com/show_bug.cgi?id=1212233

1 0