June 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:1952-1: moderate: Recommended update for socat
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Recommended update for socat Announcement ID: SUSE-RU-2024:1952-1 Rating: moderate References: * bsc#1160293 * jsc#PED-8413 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature and has one fix can now be installed. ## Description: This update for socat fixes the following issues: Update to 1.8.0.0: * Support for network namespaces (option netns) * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following) * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL * New script socat-mux.sh allows n-to-1 / 1-to-n communications * New script socat-broker.sh allows group communications * Experimental socks5 client feature * Address ACCEPT-FD for systemd "inetd" mode * UDP-Lite and DCCP address types * Addresses SOCKETPAIR and SHELL * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets * Simple statistics output with Socat option --statistics and with SIGUSR1 * A couple of new options, many fixes and corrections, see file CHANGES * Note: This version introduces "socat1", linking to "socat" Update to 1.7.4.4: * FIX: In error.c msg2() there was a stack overflow on long messages: The terminating \0 Byte was written behind the last position. * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets arrived. * FIX: a couple of weaknesses and errors when accessing invalid or incompatible file system entries with UNIX domain, file, and generic addresses. * FIX: bad parser error message on "socat /tmp/x\"x/x -" Update to 1.7.4.3: * fixes the TCP_INFO issue that broke building on non-Linux platforms. Update to version 1.7.4.2: * Fixes a lot of bugs, e.g., for options -r and -R. * Further bugfixes, see the CHANGES file Update to 1.7.4.1: Security: * Buffer size option (-b) is internally doubled for CR-CRLF conversion, but not checked for integer overflow. This could lead to heap based buffer overflow, assuming the attacker could provide this parameter. * Many further bugfixes and new features, see the CHANGES file Update to version 1.7.3.4: * bugfix release, see the CHANGES file for all changes Update to version 1.7.3.3: * bugfix release, see the CHANGES file for all changes * We HAVE_SSLv23_*_method, just not as functions, but macros add the relevant defines in the command line so support for autonegotiation of the highest TLS version is restored. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1952=1 openSUSE-SLE-15.6-2024-1952=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1952=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * socat-debugsource-1.8.0.0-150600.20.3.1 * socat-1.8.0.0-150600.20.3.1 * socat-debuginfo-1.8.0.0-150600.20.3.1 * socat-extra-1.8.0.0-150600.20.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * socat-debugsource-1.8.0.0-150600.20.3.1 * socat-1.8.0.0-150600.20.3.1 * socat-debuginfo-1.8.0.0-150600.20.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1160293 * https://jira.suse.com/browse/PED-8413

1 0

openSUSE-RU-2024:0153-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 07 Jun '24

07 Jun '24

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0153-1 Rating: moderate References: Affected Products: openSUSE Leap 15.6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for yast2-theme is a source rebuild only. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6: zypper in -t patch openSUSE-2024-153=1 Package List: - openSUSE Leap 15.6 (noarch): yast2-theme-4.6.0-lp156.2.2.1 yast2-theme-breeze-4.6.0-lp156.2.2.1 yast2-theme-oxygen-4.6.0-lp156.2.2.1 References:

1 0

SUSE-SU-2024:1937-1: moderate: Security update for python-docker
by OPENSUSE-UPDATES 07 Jun '24

07 Jun '24

# Security update for python-docker Announcement ID: SUSE-SU-2024:1937-1 Rating: moderate References: * bsc#1224788 Cross-References: * CVE-2024-35195 CVSS scores: * CVE-2024-35195 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-docker fixes the following issues: * CVE-2024-35195: Fixed missing certificate verification (bsc#1224788). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1937=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1937=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1937=1 ## Package List: * Public Cloud Module 15-SP5 (noarch) * python311-docker-7.0.0-150400.8.7.1 * openSUSE Leap 15.4 (noarch) * python311-docker-7.0.0-150400.8.7.1 * Public Cloud Module 15-SP4 (noarch) * python311-docker-7.0.0-150400.8.7.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35195.html * https://bugzilla.suse.com/show_bug.cgi?id=1224788

1 0

openSUSE-SU-2024:0152-1: important: Security update for plasma5-workspace
by opensuse-security＠opensuse.org 06 Jun '24

06 Jun '24

openSUSE Security Update: Security update for plasma5-workspace ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0152-1 Rating: important References: #1225774 Cross-References: CVE-2024-36041 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for plasma5-workspace fixes the following issues: - CVE-2024-36041: Fixed an authentication issue where unauthorized users can access session manager (boo#1225774). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-152=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le x86_64): gmenudbusmenuproxy-5.27.9-bp155.2.6.1 plasma5-session-wayland-5.27.9-bp155.2.6.1 plasma5-workspace-5.27.9-bp155.2.6.1 plasma5-workspace-devel-5.27.9-bp155.2.6.1 plasma5-workspace-libs-5.27.9-bp155.2.6.1 xembedsniproxy-5.27.9-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): plasma5-session-5.27.9-bp155.2.6.1 plasma5-workspace-lang-5.27.9-bp155.2.6.1 References: https://www.suse.com/security/cve/CVE-2024-36041.html https://bugzilla.suse.com/1225774

1 0

SUSE-RU-2024:1934-1: moderate: Recommended update for sles15-image
by OPENSUSE-UPDATES 06 Jun '24

06 Jun '24

# Recommended update for sles15-image Announcement ID: SUSE-RU-2024:1934-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.6 An update that can now be installed. ## Description: This update for sles15-image fixes the following issues: * update to SUSE LLC and use https (it's 2024) * use more specific lifecycle url * remove deprecated label duplication as those labels are inherited into all derived containers as well causing confusion * set supportlevel to released and L3 * use the base-container-images landing page * rename kiwi file to match package name * move artifacthub.io labels outside labelling helper to avoid duplication ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-1934=1 ## Package List: * openSUSE Leap 15.6 (noarch) * container:sles15-image-15.0.0-47.3.1

1 0

SUSE-RU-2024:1933-1: moderate: Recommended update for libvirt
by OPENSUSE-UPDATES 06 Jun '24

06 Jun '24

# Recommended update for libvirt Announcement ID: SUSE-RU-2024:1933-1 Rating: moderate References: * bsc#1220714 * bsc#1224327 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for libvirt fixes the following issues: * rpc: Don't warn about "max_client_requests" in single-threaded daemons (bsc#1224327) * security: Ensure file exists before attempting to restore label (bsc#1220714) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1933=1 openSUSE-SLE-15.5-2024-1933=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1933=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1933=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1933=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libvirt-daemon-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-lxc-9.0.0-150500.6.23.1 * libvirt-nss-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-config-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-lxc-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-debuginfo-9.0.0-150500.6.23.1 * libvirt-client-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-lxc-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1 * libvirt-daemon-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-hooks-9.0.0-150500.6.23.1 * libvirt-client-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-debuginfo-9.0.0-150500.6.23.1 * wireshark-plugin-libvirt-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1 * libvirt-libs-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1 * libvirt-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-gluster-debuginfo-9.0.0-150500.6.23.1 * libvirt-libs-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-9.0.0-150500.6.23.1 * libvirt-nss-9.0.0-150500.6.23.1 * libvirt-daemon-config-nwfilter-9.0.0-150500.6.23.1 * libvirt-devel-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1 * wireshark-plugin-libvirt-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-gluster-9.0.0-150500.6.23.1 * libvirt-client-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (x86_64) * libvirt-devel-32bit-9.0.0-150500.6.23.1 * libvirt-daemon-driver-libxl-9.0.0-150500.6.23.1 * libvirt-client-32bit-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-libxl-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-xen-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (noarch) * libvirt-doc-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-rbd-debuginfo-9.0.0-150500.6.23.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libvirt-client-64bit-debuginfo-9.0.0-150500.6.23.1 * libvirt-devel-64bit-9.0.0-150500.6.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libvirt-daemon-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1 * libvirt-daemon-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-debuginfo-9.0.0-150500.6.23.1 * libvirt-client-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1 * libvirt-libs-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1 * libvirt-libs-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1 * libvirt-client-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-rbd-debuginfo-9.0.0-150500.6.23.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libvirt-libs-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-libs-debuginfo-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libvirt-daemon-debuginfo-9.0.0-150500.6.23.1 * libvirt-nss-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-config-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-debuginfo-9.0.0-150500.6.23.1 * libvirt-client-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-9.0.0-150500.6.23.1 * libvirt-debugsource-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1 * libvirt-daemon-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-nodedev-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-hooks-9.0.0-150500.6.23.1 * libvirt-client-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-interface-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-mpath-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1 * libvirt-nss-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1 * libvirt-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1 * libvirt-daemon-driver-qemu-debuginfo-9.0.0-150500.6.23.1 * libvirt-lock-sanlock-9.0.0-150500.6.23.1 * libvirt-daemon-config-nwfilter-9.0.0-150500.6.23.1 * libvirt-devel-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-qemu-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-core-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-driver-secret-9.0.0-150500.6.23.1 * libvirt-daemon-driver-network-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1 * libvirt-client-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1 * libvirt-daemon-driver-storage-rbd-debuginfo-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (noarch) * libvirt-doc-9.0.0-150500.6.23.1 * Server Applications Module 15-SP5 (x86_64) * libvirt-daemon-driver-libxl-9.0.0-150500.6.23.1 * libvirt-daemon-driver-libxl-debuginfo-9.0.0-150500.6.23.1 * libvirt-daemon-xen-9.0.0-150500.6.23.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220714 * https://bugzilla.suse.com/show_bug.cgi?id=1224327

1 0

openSUSE-RU-2024:0151-1: moderate: Recommended update for kanidm
by maintenance＠opensuse.org 05 Jun '24

05 Jun '24

openSUSE Recommended Update: Recommended update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0151-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kanidm fixes the following issues: - Update to version 1.2.2~git0.c4153c9: * Resolve incorrect handling of tokens in logout flow (#2795) (#2803) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-151=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.2.2~git0.c4153c9-bp155.26.1 kanidm-clients-1.2.2~git0.c4153c9-bp155.26.1 kanidm-docs-1.2.2~git0.c4153c9-bp155.26.1 kanidm-server-1.2.2~git0.c4153c9-bp155.26.1 kanidm-unixd-clients-1.2.2~git0.c4153c9-bp155.26.1 References:

1 0

SUSE-RU-2024:1928-1: moderate: Recommended update for SAPHanaSR
by OPENSUSE-UPDATES 05 Jun '24

05 Jun '24

# Recommended update for SAPHanaSR Announcement ID: SUSE-RU-2024:1928-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SAP Applications Module 15-SP2 * SAP Applications Module 15-SP3 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SAP Applications Module 15-SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for SAPHanaSR fixes the following issues: SAPHanaSR was updated to version 0.162.4: * Version 0.162.4: * Unified `global.ini` examples * Added demo script SAPHanaSR-upgrade-to-angi-demo * Updated `man` pages: * SAPHanaSR_basic_cluster.7 * SAPHanaSR_maintenance_examples.7 * SAPHanaSR_upgrade_to_angi.7 * SAPHanaSR-manageProvider.8 * SAPHanaSR-upgrade-to-angi-demo.8 * SAPHanaSR.py.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1928=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1928=1 * SAP Applications Module 15-SP2 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2024-1928=1 * SAP Applications Module 15-SP3 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2024-1928=1 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-1928=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-1928=1 * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2024-1928=1 ## Package List: * openSUSE Leap 15.5 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * openSUSE Leap 15.6 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP2 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP3 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP4 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP5 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1 * SAP Applications Module 15-SP6 (noarch) * SAPHanaSR-doc-0.162.4-150000.4.44.1 * SAPHanaSR-0.162.4-150000.4.44.1

1 0

SUSE-SU-2024:1925-1: important: Security update for python-PyMySQL
by OPENSUSE-UPDATES 05 Jun '24

05 Jun '24

# Security update for python-PyMySQL Announcement ID: SUSE-SU-2024:1925-1 Rating: important References: * bsc#1225070 Cross-References: * CVE-2024-36039 CVSS scores: * CVE-2024-36039 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability can now be installed. ## Description: This update for python-PyMySQL fixes the following issues: * CVE-2024-36039: Fixed SQL injection when used with untrusted JSON input (bsc#1225070). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1925=1 SUSE-2024-1925=1 ## Package List: * openSUSE Leap 15.6 (noarch) * python311-PyMySQL-1.1.0-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-36039.html * https://bugzilla.suse.com/show_bug.cgi?id=1225070

1 0

SUSE-RU-2024:1924-1: moderate: Recommended update for obs-service-replace_using_package_version
by OPENSUSE-UPDATES 05 Jun '24

05 Jun '24

# Recommended update for obs-service-replace_using_package_version Announcement ID: SUSE-RU-2024:1924-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 An update that can now be installed. ## Description: This update for obs-service-replace_using_package_version fixes the following issues: obs-service-replace_using_package_version was updated to version 1702495728.72fe58b: * Changes in version 1702495728.72fe58b: * Bump version: 0.0.8 to 0.0.9 * Bump actions/setup-python from 4.7.1 to 5.0.0 * Workaround integration test failures due to PEP 668 marker * Bump actions/setup-python from 4.6.1 to 4.7.1 * Bump actions/checkout from 3 to 4 * Report the package name that is missing (#56) * Bump pytest-container from 0.1.1 to 0.2.0 * Drop mock dependency, stdlib has it * Bump actions/setup-python from 4.5.0 to 4.6.1 * Bump version: 0.0.7 to 0.0.8 * Changes in version 1681202780.6d8bb3c: * Run unit & install test only for the system python * Add python 3.11 tox environment * Switch to using rpm.labelCompare instead of parse_version * Fix copyright strings * Fix test_find_package_version * Bump mock from 4.0.3 to 5.0.1 * Bump pytest-xdist from 2.5.0 to 3.0.2 * Bump tox from 3.25.1 to 3.28.0 * Bump Gr1N/setup-poetry from 7 to 8 * Bump pytest-container from 0.0.2 to 0.1.1 * Bump actions/setup-python from 4.3.0 to 4.5.0 * Changes in version 1680160876.6dcaef0: * Bump version: 0.0.6 to 0.0.7 * Fix default value for empty or missing version * Bump flake8 from 5.0.1 to 5.0.4 * Changes in version 1668090256.71deb28: * Bump version: 0.0.5 to 0.0.6 * Link to the official poetry installation guide * Update replace_using_package_version.service * Update README.md * Update integration_tests/test_version_extraction.py * Update replace_using_package_version.service * Attempt to read version from obsinfo if no version is found * Add Leap 15.4 & SLE 15 SP4 to the CI * Changes in version 1668085498.ab6de1e: * Bump version: 0.0.4 to 0.0.5 * Remove the rpm signkeys in the CI environment * Adapt tests to mock subprocess.check_output * Ignore stderr on successful command executions * Changes in version 1667988064.d72b7ba: * Bump version: 0.0.3 to 0.0.4 * Update obs-service-replace_using_package_version.spec * Adapt spec to the current project setup * Bump actions/setup-python from 3 to 4.3.0 * Bump pytest-cov from 3.0.0 to 4.0.0 * Bump flake8 from 4.0.1 to 5.0.1 * Bump tox from 3.24.5 to 3.25.1 * Bump actions/cache from 2 to 3 * Bump actions/checkout from 2 to 3 * Bump actions/setup-python from 2 to 3 * Bump pytest from 6.2.5 to 7.0.1 * Switch from custom run_command to using check_output * Remove additional space from pyproject.toml * Replace travis CI badge with GitHub Actions badge * Make the file parameter default to the build recipe * Add integration tests using pytest_container * Bump coverage from 6.3 to 6.3.1 * Switch from travis-ci to github actions * Remove trailing whitespace * Switch to poetry instead of using setup.py * Correct spelling & gramar in .service * Add missing closing description element to .service * Follow the python package naming conventions ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1924=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1924=1 ## Package List: * openSUSE Leap 15.5 (noarch) * obs-service-replace_using_package_version-0.0.9-150000.3.9.1 * openSUSE Leap 15.6 (noarch) * obs-service-replace_using_package_version-0.0.9-150000.3.9.1

1 0