June 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:2179-1: moderate: Recommended update for sssd
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for sssd Announcement ID: SUSE-RU-2024:2179-1 Rating: moderate References: * bsc#1226407 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for sssd fixes the following issue: * Reenable pam_sss after upgrade, was removed by sssd-common postun (bsc#1226407) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2179=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2179=1 openSUSE-SLE-15.6-2024-2179=1 ## Package List: * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * sssd-ad-2.9.3-150600.3.6.2 * sssd-ldap-2.9.3-150600.3.6.2 * sssd-ipa-2.9.3-150600.3.6.2 * sssd-kcm-2.9.3-150600.3.6.2 * libipa_hbac-devel-2.9.3-150600.3.6.2 * sssd-ipa-debuginfo-2.9.3-150600.3.6.2 * sssd-2.9.3-150600.3.6.2 * sssd-dbus-2.9.3-150600.3.6.2 * sssd-tools-2.9.3-150600.3.6.2 * sssd-ad-debuginfo-2.9.3-150600.3.6.2 * libsss_simpleifp0-2.9.3-150600.3.6.2 * libipa_hbac0-2.9.3-150600.3.6.2 * python3-sssd-config-2.9.3-150600.3.6.2 * libsss_idmap-devel-2.9.3-150600.3.6.2 * libsss_nss_idmap0-debuginfo-2.9.3-150600.3.6.2 * libsss_idmap0-2.9.3-150600.3.6.2 * libsss_simpleifp-devel-2.9.3-150600.3.6.2 * sssd-dbus-debuginfo-2.9.3-150600.3.6.2 * sssd-debugsource-2.9.3-150600.3.6.2 * libsss_idmap0-debuginfo-2.9.3-150600.3.6.2 * sssd-proxy-debuginfo-2.9.3-150600.3.6.2 * libsss_nss_idmap-devel-2.9.3-150600.3.6.2 * sssd-krb5-common-debuginfo-2.9.3-150600.3.6.2 * sssd-winbind-idmap-2.9.3-150600.3.6.2 * libipa_hbac0-debuginfo-2.9.3-150600.3.6.2 * libsss_nss_idmap0-2.9.3-150600.3.6.2 * sssd-ldap-debuginfo-2.9.3-150600.3.6.2 * libsss_certmap-devel-2.9.3-150600.3.6.2 * libsss_simpleifp0-debuginfo-2.9.3-150600.3.6.2 * python3-sssd-config-debuginfo-2.9.3-150600.3.6.2 * sssd-debuginfo-2.9.3-150600.3.6.2 * sssd-krb5-common-2.9.3-150600.3.6.2 * sssd-kcm-debuginfo-2.9.3-150600.3.6.2 * libsss_certmap0-2.9.3-150600.3.6.2 * sssd-krb5-2.9.3-150600.3.6.2 * libsss_certmap0-debuginfo-2.9.3-150600.3.6.2 * sssd-winbind-idmap-debuginfo-2.9.3-150600.3.6.2 * sssd-tools-debuginfo-2.9.3-150600.3.6.2 * sssd-proxy-2.9.3-150600.3.6.2 * sssd-krb5-debuginfo-2.9.3-150600.3.6.2 * Basesystem Module 15-SP6 (x86_64) * sssd-32bit-2.9.3-150600.3.6.2 * sssd-32bit-debuginfo-2.9.3-150600.3.6.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * sssd-ad-2.9.3-150600.3.6.2 * sssd-ldap-2.9.3-150600.3.6.2 * python3-ipa_hbac-debuginfo-2.9.3-150600.3.6.2 * sssd-ipa-2.9.3-150600.3.6.2 * sssd-kcm-2.9.3-150600.3.6.2 * python3-sss_nss_idmap-2.9.3-150600.3.6.2 * libipa_hbac-devel-2.9.3-150600.3.6.2 * python3-sss-murmur-2.9.3-150600.3.6.2 * sssd-ipa-debuginfo-2.9.3-150600.3.6.2 * sssd-2.9.3-150600.3.6.2 * sssd-dbus-2.9.3-150600.3.6.2 * sssd-tools-2.9.3-150600.3.6.2 * libnfsidmap-sss-debuginfo-2.9.3-150600.3.6.2 * sssd-ad-debuginfo-2.9.3-150600.3.6.2 * libsss_simpleifp0-2.9.3-150600.3.6.2 * libipa_hbac0-2.9.3-150600.3.6.2 * python3-sssd-config-2.9.3-150600.3.6.2 * libsss_idmap-devel-2.9.3-150600.3.6.2 * libsss_nss_idmap0-debuginfo-2.9.3-150600.3.6.2 * libsss_idmap0-2.9.3-150600.3.6.2 * libsss_simpleifp-devel-2.9.3-150600.3.6.2 * sssd-dbus-debuginfo-2.9.3-150600.3.6.2 * sssd-debugsource-2.9.3-150600.3.6.2 * libsss_idmap0-debuginfo-2.9.3-150600.3.6.2 * sssd-proxy-debuginfo-2.9.3-150600.3.6.2 * libsss_nss_idmap-devel-2.9.3-150600.3.6.2 * sssd-krb5-common-debuginfo-2.9.3-150600.3.6.2 * sssd-winbind-idmap-2.9.3-150600.3.6.2 * libipa_hbac0-debuginfo-2.9.3-150600.3.6.2 * libnfsidmap-sss-2.9.3-150600.3.6.2 * libsss_nss_idmap0-2.9.3-150600.3.6.2 * sssd-ldap-debuginfo-2.9.3-150600.3.6.2 * libsss_certmap-devel-2.9.3-150600.3.6.2 * libsss_simpleifp0-debuginfo-2.9.3-150600.3.6.2 * python3-sssd-config-debuginfo-2.9.3-150600.3.6.2 * python3-ipa_hbac-2.9.3-150600.3.6.2 * sssd-debuginfo-2.9.3-150600.3.6.2 * sssd-krb5-common-2.9.3-150600.3.6.2 * sssd-kcm-debuginfo-2.9.3-150600.3.6.2 * libsss_certmap0-2.9.3-150600.3.6.2 * python3-sss_nss_idmap-debuginfo-2.9.3-150600.3.6.2 * sssd-krb5-2.9.3-150600.3.6.2 * libsss_certmap0-debuginfo-2.9.3-150600.3.6.2 * sssd-winbind-idmap-debuginfo-2.9.3-150600.3.6.2 * sssd-tools-debuginfo-2.9.3-150600.3.6.2 * python3-sss-murmur-debuginfo-2.9.3-150600.3.6.2 * sssd-proxy-2.9.3-150600.3.6.2 * sssd-krb5-debuginfo-2.9.3-150600.3.6.2 * openSUSE Leap 15.6 (x86_64) * sssd-32bit-2.9.3-150600.3.6.2 * sssd-32bit-debuginfo-2.9.3-150600.3.6.2 * openSUSE Leap 15.6 (aarch64_ilp32) * sssd-64bit-debuginfo-2.9.3-150600.3.6.2 * sssd-64bit-2.9.3-150600.3.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226407

1 0

SUSE-SU-2024:2180-1: important: Security update for vte
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for vte Announcement ID: SUSE-SU-2024:2180-1 Rating: important References: * bsc#1226134 Cross-References: * CVE-2024-37535 CVSS scores: * CVE-2024-37535 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for vte fixes the following issues: * CVE-2024-37535: Fixed a bug that allowed an attacker to cause a denial of service (memory consumption) via a window resize escape. (bsc#1226134) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2180=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2180=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2180=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2180=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2180=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2180=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2180=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2180=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-2180=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2180=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2180=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2180=1 ## Package List: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * vte-lang-0.66.2-150400.3.5.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * vte-lang-0.66.2-150400.3.5.1 * SUSE Manager Proxy 4.3 (x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * vte-debugsource-0.66.2-150400.3.5.1 * vte-tools-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * glade-catalog-vte-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * vte-tools-debuginfo-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * openSUSE Leap 15.4 (noarch) * vte-lang-0.66.2-150400.3.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * vte-tools-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * glade-catalog-vte-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * vte-tools-debuginfo-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * openSUSE Leap 15.5 (noarch) * vte-lang-0.66.2-150400.3.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * Desktop Applications Module 15-SP5 (noarch) * vte-lang-0.66.2-150400.3.5.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * vte-lang-0.66.2-150400.3.5.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * vte-lang-0.66.2-150400.3.5.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * vte-debugsource-0.66.2-150400.3.5.1 * libvte-2_91-0-0.66.2-150400.3.5.1 * vte-devel-0.66.2-150400.3.5.1 * vte-debuginfo-0.66.2-150400.3.5.1 * typelib-1_0-Vte-2.91-0.66.2-150400.3.5.1 * libvte-2_91-0-debuginfo-0.66.2-150400.3.5.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * vte-lang-0.66.2-150400.3.5.1 ## References: * https://www.suse.com/security/cve/CVE-2024-37535.html * https://bugzilla.suse.com/show_bug.cgi?id=1226134

1 0

SUSE-SU-2024:2168-1: important: Security update for gnome-settings-daemon
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for gnome-settings-daemon Announcement ID: SUSE-SU-2024:2168-1 Rating: important References: * bsc#1226423 Cross-References: * CVE-2024-38394 CVSS scores: * CVE-2024-38394 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for gnome-settings-daemon fixes the following issues: * CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy (bsc#1226423). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2168=1 SUSE-2024-2168=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-2168=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * gnome-settings-daemon-debugsource-41.0-150500.4.3.1 * gnome-settings-daemon-devel-41.0-150500.4.3.1 * gnome-settings-daemon-41.0-150500.4.3.1 * gnome-settings-daemon-debuginfo-41.0-150500.4.3.1 * openSUSE Leap 15.5 (noarch) * gnome-settings-daemon-lang-41.0-150500.4.3.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gnome-settings-daemon-debugsource-41.0-150500.4.3.1 * gnome-settings-daemon-devel-41.0-150500.4.3.1 * gnome-settings-daemon-41.0-150500.4.3.1 * gnome-settings-daemon-debuginfo-41.0-150500.4.3.1 * Desktop Applications Module 15-SP5 (noarch) * gnome-settings-daemon-lang-41.0-150500.4.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-38394.html * https://bugzilla.suse.com/show_bug.cgi?id=1226423

1 0

SUSE-SU-2024:2170-1: important: Security update for gnome-settings-daemon
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for gnome-settings-daemon Announcement ID: SUSE-SU-2024:2170-1 Rating: important References: * bsc#1226423 Cross-References: * CVE-2024-38394 CVSS scores: * CVE-2024-38394 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for gnome-settings-daemon fixes the following issues: * CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy (bsc#1226423). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2170=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2170=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2170=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2170=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2170=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2170=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * gnome-settings-daemon-41.0-150400.3.3.1 * gnome-settings-daemon-debuginfo-41.0-150400.3.3.1 * gnome-settings-daemon-debugsource-41.0-150400.3.3.1 * gnome-settings-daemon-devel-41.0-150400.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * gnome-settings-daemon-lang-41.0-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-38394.html * https://bugzilla.suse.com/show_bug.cgi?id=1226423

1 0

SUSE-SU-2024:2171-1: important: Security update for libarchive
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for libarchive Announcement ID: SUSE-SU-2024:2171-1 Rating: important References: * bsc#1225971 Cross-References: * CVE-2024-20696 CVSS scores: * CVE-2024-20696 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for libarchive fixes the following issues: * CVE-2024-20696: Fixed heap based out-of-bounds write (bsc#1225971). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2171=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2171=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2171=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2171=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2171=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2171=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2171=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2171=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2171=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2171=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2171=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2171=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2171=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2171=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2171=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2171=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2171=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2171=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2171=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * openSUSE Leap 15.4 (x86_64) * libarchive13-32bit-3.5.1-150400.3.15.1 * libarchive13-32bit-debuginfo-3.5.1-150400.3.15.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libarchive13-64bit-3.5.1-150400.3.15.1 * libarchive13-64bit-debuginfo-3.5.1-150400.3.15.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * openSUSE Leap 15.5 (x86_64) * libarchive13-32bit-3.5.1-150400.3.15.1 * libarchive13-32bit-debuginfo-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libarchive-devel-3.5.1-150400.3.15.1 * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libarchive13-debuginfo-3.5.1-150400.3.15.1 * bsdtar-debuginfo-3.5.1-150400.3.15.1 * libarchive-devel-3.5.1-150400.3.15.1 * bsdtar-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Manager Proxy 4.3 (x86_64) * libarchive-devel-3.5.1-150400.3.15.1 * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libarchive-devel-3.5.1-150400.3.15.1 * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libarchive-devel-3.5.1-150400.3.15.1 * libarchive13-debuginfo-3.5.1-150400.3.15.1 * libarchive-debugsource-3.5.1-150400.3.15.1 * libarchive13-3.5.1-150400.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2024-20696.html * https://bugzilla.suse.com/show_bug.cgi?id=1225971

1 0

SUSE-RU-2024:2172-1: moderate: Recommended update for iproute2
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for iproute2 Announcement ID: SUSE-RU-2024:2172-1 Rating: moderate References: * bsc#1204562 * jsc#PED-6820 * jsc#PED-6844 * jsc#PED-8358 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains three features and has one fix can now be installed. ## Description: This update for iproute2 fixes the following issues: iproute2 was updated to version 6.4 (jsc#PED-6820 jsc#PED-6844, jsc#PED-8358): * Fixed display of bound but unconnected sockets (bsc#1204562) * Changes in version 6.4: * bridge: mdb: added underlay destination IP support, UDP destination port support, destination VNI support, source VNI support, outgoing interface support * macvlan: added the "bclim" parameter * Changes in version 6.3: * New release of iproute2 corresponding to the 6.3 kernel. No large feature improvements only incremental improvements to the bridge mdb support, mostly just bug fixes. * Changes in version 6.2: * f_flower: Introduce L2TPv3 support * bridge: fdb: Add support for locked FDB entries * bridge: link: Add MAC Authentication Bypass (MAB) support * ip: Support --json on `ip neigh get` * tc: Add JSON output to tc-class * Changes in version 6.1: * man: ss.8: fix a typo * testsuite: fix build failure * genl: remove unused vars in Makefile * json: do not escape single quotes * ip-monitor: Do not error out when RTNLGRP_STATS is not available * ip-link: man: Document existence of netns argument in add command * macsec: add Extended Packet Number support * macsec: add user manual description for extended packet number feature * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes * ip: add NLM_F_ECHO support * libnetlink: add offset for nl_dump_ext_ack_done * tc/tc_monitor: print netlink extack message * rtnetlink: add new function rtnl_echo_talk() * ip: fix return value for rtnl_talk failures * iplink_bridge: Add no_linklocal_learn option support * devlink: use dl_no_arg instead of checking dl_argc == 0 * devlink: remove dl_argv_parse_put * mnlg: remove unnused mnlg_socket structure * utils: extract CTRL_ATTR_MAXATTR and save it * devlink: expose nested devlink for a line card object * devlink: load port-ifname map on demand * devlink: fix parallel flash notifications processing * devlink: move use_iec into struct dl * devlink: fix typo in variable name in ifname_map_cb() * devlink: load ifname map on demand from ifname_map_rev_lookup() as well * dcb: unblock mnl_socket_recvfrom if not message received * libnetlink: Fix memory leak in __rtnl_talk_iov() * tc_util: Fix no error return when large parent id used * tc_util: Change datatype for maj to avoid overflow issue * ss: man: add missing entries for MPTCP * ss: man: add missing entries for TIPC * ss: usage: add missing parameters * ss: re-add TIPC query support * devlink: Fix setting parent for 'rate add' * link: display 'allmulti' counter * seg6: add support for flavors in SRv6 End* behaviors * tc: ct: Fix invalid pointer dereference * uapi: update from 6.1 pre rc1 * u32: fix json formatting of flowid * tc_stab: remove dead code * uapi: update for in.h and ip.h * remove #if 0 code * tc: add json support to size table * tc: put size table options in json object * tc/basic: fix json output filter * iplink: support JSON in MPLS output * tc: print errors on stderr * ip: print mpls errors on stderr * tc: make prefix const * man: add missing tc class show * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays * ip link: add sub-command to view and change DSA conduit interface * Changes in version 6.0: * ipstats: Add param.h for musl * Update kernel headers * libbpf: add xdp program name support * iplink: bond_slave: add per port prio support * seg6: add support for SRv6 Headend Reduced Encapsulation * lib: Introduce ppp protocols * f_flower: Introduce PPPoE support * Changes in version 5.19: * ip/iplink_virt_wifi: add support for virt_wifi * Update kernel headers * libnetlink: Add filtering to rtnl_statsdump_req_filter() * ipstats: Add a "set" command * ipstats: Add a group "link" * libbpf: Use bpf_object__load instead of bpf_object__load_xattr * uapi: change name for zerocopy sendfile in tls * bridge: vxlan device vnifilter support * f_flower: Add num of vlans parameter * Changes in version 5.18: * The build issues with libbpf should be fixed now. * Building with clang is now supported. * There are still some warnings with gcc-12 that will need to be fixed in the upstream kernel headers. * Changes in version 5.17: * lib/fs: fix memory leak in get_task_name() * bridge: Remove vlan listing from `bridge link` * bond: add arp_missed_max option * libnetlink: fix socket leak in rtnl_open_byproto() * dcb: Fix error reporting when accessing "dcb app" * tc_util: Fix parsing action control with space and slash * lib: fix ax25.h include for musl * uapi: add missing rose and ax25 files * rdma: Fix res_print_uint() and add res_print_u64() * tc: Add support for ce_threshold_value/mask in fq_codel * Add tmpfiles.d conf for /run/netns * Changes in version 5.16: * devlink: Fix cmd_dev_param_set() to check configuration mode * ip: add AMT support * iplink_can: fix configuration ranges in print_usage() and add unit * tc: flower: Fix buffer overflow on large labels * ip/ipnexthop: fix unsigned overflow in parse_nh_group_type_res() * tc/m_vlan: fix print_vlan() conditional on TCA_VLAN_ACT_PUSH_ETH * iplink_can: add new CAN FD bittiming parameters: Transmitter Delay Compensation (TDC) * Changes in version 5.15: * lib: bpf_legacy: fix bpffs mount when /sys/fs/bpf exists * man: devlink-port: fix the devlink port add synopsis * man: devlink-port: fix pfnum for devlink port add * iptuntap: fix multi-queue flag display * mptcp: unbreak JSON endpoint list * ipneigh: add support to print brief output of neigh cache in tabular format * ip/bond: add LACP active support * ip/tunnel: always print all known attributes * Add, show, link, remove IOAM namespaces and schemas * New IOAM6 encap type for routes * tc/skbmod: Introduce SKBMOD_F_ECN option * tc/f_flower: fix port range parsing ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2172=1 openSUSE-SLE-15.6-2024-2172=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2172=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * iproute2-arpd-debuginfo-6.4-150600.7.3.1 * libnetlink-devel-6.4-150600.7.3.1 * iproute2-debugsource-6.4-150600.7.3.1 * iproute2-arpd-6.4-150600.7.3.1 * iproute2-6.4-150600.7.3.1 * iproute2-bash-completion-6.4-150600.7.3.1 * iproute2-debuginfo-6.4-150600.7.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * iproute2-arpd-debuginfo-6.4-150600.7.3.1 * libnetlink-devel-6.4-150600.7.3.1 * iproute2-debugsource-6.4-150600.7.3.1 * iproute2-arpd-6.4-150600.7.3.1 * iproute2-6.4-150600.7.3.1 * iproute2-bash-completion-6.4-150600.7.3.1 * iproute2-debuginfo-6.4-150600.7.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1204562 * https://jira.suse.com/browse/PED-6820 * https://jira.suse.com/browse/PED-6844 * https://jira.suse.com/browse/PED-8358

1 0

SUSE-SU-2024:2174-1: moderate: Security update for wget
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Security update for wget Announcement ID: SUSE-SU-2024:2174-1 Rating: moderate References: * bsc#1226419 Cross-References: * CVE-2024-38428 CVSS scores: * CVE-2024-38428 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for wget fixes the following issues: * CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2174=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2174=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2174=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.20.1 * wget-debuginfo-1.20.3-150000.3.20.1 * wget-1.20.3-150000.3.20.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.20.1 * wget-debuginfo-1.20.3-150000.3.20.1 * wget-1.20.3-150000.3.20.1 * openSUSE Leap 15.5 (noarch) * wget-lang-1.20.3-150000.3.20.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * wget-debugsource-1.20.3-150000.3.20.1 * wget-debuginfo-1.20.3-150000.3.20.1 * wget-1.20.3-150000.3.20.1 ## References: * https://www.suse.com/security/cve/CVE-2024-38428.html * https://bugzilla.suse.com/show_bug.cgi?id=1226419

1 0

SUSE-RU-2024:2176-1: moderate: Recommended update for grpc, libzypp, protobuf, python-grpcio. re2, zypper
by OPENSUSE-UPDATES 24 Jun '24

24 Jun '24

# Recommended update for grpc, libzypp, protobuf, python-grpcio. re2, zypper Announcement ID: SUSE-RU-2024:2176-1 Rating: moderate References: * bsc#1222261 * bsc#1222343 * bsc#1222348 Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that has three fixes can now be installed. ## Description: This update for grpc, libzypp, protobuf, python-grpcio, re2, zypper fixes the following issues: * rebuild packages using protobuf against newer protobuf and abseil-cpp libraries. (bsc#1222261) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2176=1 openSUSE-SLE-15.5-2024-2176=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2176=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2176=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2176=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-2176=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2176=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2176=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2176=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2176=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2176=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2176=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2176=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-2176=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-2176=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * protobuf-debugsource-25.1-150500.12.2.2 * libphonenumber-devel-8.12.23-150500.6.2.1 * libre2-11-debuginfo-20240201-150500.12.2.1 * libgrpc37-debuginfo-1.60.0-150500.11.5.16 * libprotobuf25_1_0-25.1-150500.12.2.2 * zypper-debugsource-1.14.73-150500.6.2.1 * abseil-cpp-devel-20240116.1-150500.13.7.8 * libgrpc1_60-1.60.0-150500.11.5.16 * libupb37-1.60.0-150500.11.5.16 * re2-debugsource-20240201-150500.12.2.1 * protobuf-devel-25.1-150500.12.2.2 * libgrpc++1_60-debuginfo-1.60.0-150500.11.5.16 * protobuf-java-25.1-150500.12.2.2 * python311-grpcio-debuginfo-1.60.1-150500.12.3.16 * libgrpc1_60-debuginfo-1.60.0-150500.11.5.16 * zypper-1.14.73-150500.6.2.1 * libphonenumber8-8.12.23-150500.6.2.1 * libprotoc25_1_0-25.1-150500.12.2.2 * libzypp-17.34.1-150500.6.2.1 * libprotobuf25_1_0-debuginfo-25.1-150500.12.2.2 * re2-devel-20240201-150500.12.2.1 * libupb37-debuginfo-1.60.0-150500.11.5.16 * libzypp-debuginfo-17.34.1-150500.6.2.1 * libphonenumber8-debuginfo-8.12.23-150500.6.2.1 * libzypp-debugsource-17.34.1-150500.6.2.1 * libabsl2401_0_0-debuginfo-20240116.1-150500.13.7.8 * grpc-devel-1.60.0-150500.11.5.16 * libgrpc37-1.60.0-150500.11.5.16 * libgrpc++1_60-1.60.0-150500.11.5.16 * grpc-debuginfo-1.60.0-150500.11.5.16 * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * libzypp-devel-17.34.1-150500.6.2.1 * libprotoc25_1_0-debuginfo-25.1-150500.12.2.2 * libzypp-devel-doc-17.34.1-150500.6.2.1 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * python-grpcio-debugsource-1.60.1-150500.12.3.16 * libabsl2401_0_0-20240116.1-150500.13.7.8 * grpc-debugsource-1.60.0-150500.11.5.16 * python311-protobuf-4.25.1-150500.12.2.2 * grpc-devel-debuginfo-1.60.0-150500.11.5.16 * python311-grpcio-1.60.1-150500.12.3.16 * upb-devel-1.60.0-150500.11.5.16 * libphonenumber-debugsource-8.12.23-150500.6.2.1 * libre2-11-20240201-150500.12.2.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.2.2 * protobuf-devel-debuginfo-25.1-150500.12.2.2 * zypper-debuginfo-1.14.73-150500.6.2.1 * openSUSE Leap 15.5 (x86_64) * libprotoc25_1_0-32bit-25.1-150500.12.2.2 * libabsl2401_0_0-32bit-20240116.1-150500.13.7.8 * libre2-11-32bit-20240201-150500.12.2.1 * libprotobuf25_1_0-32bit-debuginfo-25.1-150500.12.2.2 * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150500.12.2.2 * libprotobuf25_1_0-32bit-25.1-150500.12.2.2 * libre2-11-32bit-debuginfo-20240201-150500.12.2.1 * libprotoc25_1_0-32bit-debuginfo-25.1-150500.12.2.2 * libabsl2401_0_0-32bit-debuginfo-20240116.1-150500.13.7.8 * libprotobuf-lite25_1_0-32bit-25.1-150500.12.2.2 * openSUSE Leap 15.5 (noarch) * zypper-log-1.14.73-150500.6.2.1 * grpc-source-1.60.0-150500.11.5.16 * zypper-aptitude-1.14.73-150500.6.2.1 * zypper-needs-restarting-1.14.73-150500.6.2.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libprotobuf25_1_0-64bit-25.1-150500.12.2.2 * libre2-11-64bit-20240201-150500.12.2.1 * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150500.12.2.2 * libprotoc25_1_0-64bit-debuginfo-25.1-150500.12.2.2 * libprotobuf-lite25_1_0-64bit-25.1-150500.12.2.2 * libabsl2401_0_0-64bit-20240116.1-150500.13.7.8 * libre2-11-64bit-debuginfo-20240201-150500.12.2.1 * libprotobuf25_1_0-64bit-debuginfo-25.1-150500.12.2.2 * libabsl2401_0_0-64bit-debuginfo-20240116.1-150500.13.7.8 * libprotoc25_1_0-64bit-25.1-150500.12.2.2 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libzypp-17.34.1-150500.6.2.1 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libzypp-17.34.1-150500.6.2.1 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libzypp-17.34.1-150500.6.2.1 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libzypp-17.34.1-150500.6.2.1 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * protobuf-debugsource-25.1-150500.12.2.2 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * libzypp-debuginfo-17.34.1-150500.6.2.1 * libzypp-debugsource-17.34.1-150500.6.2.1 * zypper-debugsource-1.14.73-150500.6.2.1 * zypper-1.14.73-150500.6.2.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.2.2 * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * zypper-debuginfo-1.14.73-150500.6.2.1 * libzypp-17.34.1-150500.6.2.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * zypper-needs-restarting-1.14.73-150500.6.2.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.2.2 * libre2-11-debuginfo-20240201-150500.12.2.1 * libgrpc37-debuginfo-1.60.0-150500.11.5.16 * libprotobuf25_1_0-25.1-150500.12.2.2 * zypper-debugsource-1.14.73-150500.6.2.1 * abseil-cpp-devel-20240116.1-150500.13.7.8 * libgrpc1_60-1.60.0-150500.11.5.16 * libupb37-1.60.0-150500.11.5.16 * re2-debugsource-20240201-150500.12.2.1 * libgrpc++1_60-debuginfo-1.60.0-150500.11.5.16 * libgrpc1_60-debuginfo-1.60.0-150500.11.5.16 * zypper-1.14.73-150500.6.2.1 * libprotoc25_1_0-25.1-150500.12.2.2 * libzypp-17.34.1-150500.6.2.1 * libprotobuf25_1_0-debuginfo-25.1-150500.12.2.2 * re2-devel-20240201-150500.12.2.1 * libupb37-debuginfo-1.60.0-150500.11.5.16 * libzypp-debuginfo-17.34.1-150500.6.2.1 * libzypp-debugsource-17.34.1-150500.6.2.1 * grpc-devel-1.60.0-150500.11.5.16 * libabsl2401_0_0-debuginfo-20240116.1-150500.13.7.8 * libgrpc37-1.60.0-150500.11.5.16 * libgrpc++1_60-1.60.0-150500.11.5.16 * grpc-debuginfo-1.60.0-150500.11.5.16 * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * libzypp-devel-17.34.1-150500.6.2.1 * libprotoc25_1_0-debuginfo-25.1-150500.12.2.2 * libprotobuf-lite25_1_0-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * grpc-debugsource-1.60.0-150500.11.5.16 * libre2-11-20240201-150500.12.2.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.2.2 * zypper-debuginfo-1.14.73-150500.6.2.1 * Basesystem Module 15-SP5 (noarch) * zypper-log-1.14.73-150500.6.2.1 * zypper-needs-restarting-1.14.73-150500.6.2.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.2.2 * libabsl2401_0_0-20240116.1-150500.13.7.8 * protobuf-devel-25.1-150500.12.2.2 * libabsl2401_0_0-debuginfo-20240116.1-150500.13.7.8 * abseil-cpp-devel-20240116.1-150500.13.7.8 * protobuf-devel-debuginfo-25.1-150500.12.2.2 * libprotoc25_1_0-25.1-150500.12.2.2 * libprotoc25_1_0-debuginfo-25.1-150500.12.2.2 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * libabsl2401_0_0-debuginfo-20240116.1-150500.13.7.8 * libabsl2401_0_0-20240116.1-150500.13.7.8 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.2.2 * libphonenumber8-8.12.23-150500.6.2.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.2.2 * python-grpcio-debugsource-1.60.1-150500.12.3.16 * re2-debugsource-20240201-150500.12.2.1 * libre2-11-debuginfo-20240201-150500.12.2.1 * libupb37-debuginfo-1.60.0-150500.11.5.16 * libgrpc37-debuginfo-1.60.0-150500.11.5.16 * grpc-debugsource-1.60.0-150500.11.5.16 * python311-grpcio-1.60.1-150500.12.3.16 * libgrpc37-1.60.0-150500.11.5.16 * libre2-11-20240201-150500.12.2.1 * python311-grpcio-debuginfo-1.60.1-150500.12.3.16 * libgrpc1_60-debuginfo-1.60.0-150500.11.5.16 * libgrpc1_60-1.60.0-150500.11.5.16 * grpc-debuginfo-1.60.0-150500.11.5.16 * libprotoc25_1_0-25.1-150500.12.2.2 * libprotoc25_1_0-debuginfo-25.1-150500.12.2.2 * libupb37-1.60.0-150500.11.5.16 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-grpcio-1.60.1-150500.12.3.16 * python311-grpcio-debuginfo-1.60.1-150500.12.3.16 * python-grpcio-debugsource-1.60.1-150500.12.3.16 * python311-protobuf-4.25.1-150500.12.2.2 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * libabsl2401_0_0-20240116.1-150500.13.7.8 * libphonenumber8-debuginfo-8.12.23-150500.6.2.1 * libabsl2401_0_0-debuginfo-20240116.1-150500.13.7.8 * libphonenumber-debugsource-8.12.23-150500.6.2.1 * abseil-cpp-debugsource-20240116.1-150500.13.7.8 * libphonenumber8-8.12.23-150500.6.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222261 * https://bugzilla.suse.com/show_bug.cgi?id=1222343 * https://bugzilla.suse.com/show_bug.cgi?id=1222348

1 0

SUSE-SU-2024:2164-1: important: Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP4)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:2164-1 Rating: important References: * bsc#1222118 * bsc#1223059 Cross-References: * CVE-2023-52628 * CVE-2024-26852 CVSS scores: * CVE-2023-52628 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_74 fixes several issues. The following security issues were fixed: * CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2164=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2164=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_15-debugsource-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-debuginfo-12-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_15-debugsource-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_74-default-debuginfo-12-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52628.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1222118 * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0

SUSE-SU-2024:2165-1: important: Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
by OPENSUSE-UPDATES 21 Jun '24

21 Jun '24

# Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:2165-1 Rating: important References: * bsc#1223059 Cross-References: * CVE-2024-26852 CVSS scores: * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_119 fixes one issue. The following security issue was fixed: * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2165=1 SUSE-2024-2167=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2165=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-2167=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_26-debugsource-2-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-2-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_92-default-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_119-default-debuginfo-2-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-9-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_26-debugsource-2-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-2-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_92-default-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_119-default-debuginfo-2-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-9-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26852.html * https://bugzilla.suse.com/show_bug.cgi?id=1223059

1 0