July 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:2674-1: important: Recommended update for wicked
by OPENSUSE-UPDATES 31 Jul '24

31 Jul '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:2674-1 Rating: important References: * bsc#1225976 * bsc#1226125 * bsc#1226664 * jsc#PED-8715 Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that contains one feature and has three fixes can now be installed. ## Description: This update for wicked fixes the following issues: * Update to version 0.6.76 * compat-suse: warn user and create missing parent config of infiniband children * client: fix origin in loaded xml-config with obsolete port references but missing port interface config, causing a no-carrier of master (bsc#1226125) * ipv6: fix setup on ipv6.disable=1 kernel cmdline (bsc#1225976) * wireless: add frequency-list in station mode (jsc#PED-8715) * client: fix crash while hierarchy traversing due to loop in e.g. systemd- nspawn containers (bsc#1226664) * man: add supported bonding options to ifcfg-bonding(5) man page * arputil: Document minimal interval for getopts * man: (re)generate man pages from md sources * client: warn on interface wait time reached * compat-suse: fix dummy type detection from ifname to not cause conflicts with e.g. correct vlan config on dummy0.42 interfaces * compat-suse: fix infiniband and infiniband child type detection from ifname ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2674=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2674=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2674=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2674=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2674=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-2674=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2674=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2674=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * wicked-service-0.6.76-150300.4.35.1 * wicked-debugsource-0.6.76-150300.4.35.1 * wicked-debuginfo-0.6.76-150300.4.35.1 * wicked-0.6.76-150300.4.35.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * wicked-service-0.6.76-150300.4.35.1 * wicked-debugsource-0.6.76-150300.4.35.1 * wicked-debuginfo-0.6.76-150300.4.35.1 * wicked-0.6.76-150300.4.35.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * wicked-service-0.6.76-150300.4.35.1 * wicked-debugsource-0.6.76-150300.4.35.1 * wicked-debuginfo-0.6.76-150300.4.35.1 * wicked-0.6.76-150300.4.35.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * wicked-service-0.6.76-150300.4.35.1 * wicked-debugsource-0.6.76-150300.4.35.1 * wicked-debuginfo-0.6.76-150300.4.35.1 * wicked-0.6.76-150300.4.35.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * wicked-service-0.6.76-150300.4.35.1 * wicked-debugsource-0.6.76-150300.4.35.1 * wicked-debuginfo-0.6.76-150300.4.35.1 * wicked-0.6.76-150300.4.35.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * wicked-service-0.6.76-150300.4.35.1 * wicked-debugsource-0.6.76-150300.4.35.1 * wicked-debuginfo-0.6.76-150300.4.35.1 * wicked-0.6.76-150300.4.35.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * wicked-service-0.6.76-150300.4.35.1 * wicked-debugsource-0.6.76-150300.4.35.1 * wicked-debuginfo-0.6.76-150300.4.35.1 * wicked-0.6.76-150300.4.35.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * wicked-service-0.6.76-150300.4.35.1 * wicked-debugsource-0.6.76-150300.4.35.1 * wicked-debuginfo-0.6.76-150300.4.35.1 * wicked-0.6.76-150300.4.35.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1225976 * https://bugzilla.suse.com/show_bug.cgi?id=1226125 * https://bugzilla.suse.com/show_bug.cgi?id=1226664 * https://jira.suse.com/browse/PED-8715

1 0

SUSE-RU-2024:2678-1: important: Recommended update for wicked
by OPENSUSE-UPDATES 31 Jul '24

31 Jul '24

# Recommended update for wicked Announcement ID: SUSE-RU-2024:2678-1 Rating: important References: * bsc#1225976 * bsc#1226125 * bsc#1226664 * jsc#PED-8715 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has three fixes can now be installed. ## Description: This update for wicked fixes the following issues: * Update to version 0.6.76 * compat-suse: warn user and create missing parent config of infiniband children * client: fix origin in loaded xml-config with obsolete port references but missing port interface config, causing a no-carrier of master (bsc#1226125) * ipv6: fix setup on ipv6.disable=1 kernel cmdline (bsc#1225976) * wireless: add frequency-list in station mode (jsc#PED-8715) * client: fix crash while hierarchy traversing due to loop in e.g. systemd- nspawn containers (bsc#1226664) * man: add supported bonding options to ifcfg-bonding(5) man page * arputil: Document minimal interval for getopts * man: (re)generate man pages from md sources * client: warn on interface wait time reached * compat-suse: fix dummy type detection from ifname to not cause conflicts with e.g. correct vlan config on dummy0.42 interfaces * compat-suse: fix infiniband and infiniband child type detection from ifname ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2678=1 openSUSE-SLE-15.5-2024-2678=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-2678=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2678=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2678=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * wicked-debugsource-0.6.76-150500.3.33.1 * wicked-0.6.76-150500.3.33.1 * wicked-service-0.6.76-150500.3.33.1 * wicked-nbft-0.6.76-150500.3.33.1 * wicked-debuginfo-0.6.76-150500.3.33.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * wicked-service-0.6.76-150500.3.33.1 * wicked-debuginfo-0.6.76-150500.3.33.1 * wicked-debugsource-0.6.76-150500.3.33.1 * wicked-0.6.76-150500.3.33.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * wicked-service-0.6.76-150500.3.33.1 * wicked-debuginfo-0.6.76-150500.3.33.1 * wicked-debugsource-0.6.76-150500.3.33.1 * wicked-0.6.76-150500.3.33.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wicked-debugsource-0.6.76-150500.3.33.1 * wicked-0.6.76-150500.3.33.1 * wicked-service-0.6.76-150500.3.33.1 * wicked-nbft-0.6.76-150500.3.33.1 * wicked-debuginfo-0.6.76-150500.3.33.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1225976 * https://bugzilla.suse.com/show_bug.cgi?id=1226125 * https://bugzilla.suse.com/show_bug.cgi?id=1226664 * https://jira.suse.com/browse/PED-8715

1 0

SUSE-RU-2024:2581-2: moderate: Recommended update for sssd
by OPENSUSE-UPDATES 31 Jul '24

31 Jul '24

# Recommended update for sssd Announcement ID: SUSE-RU-2024:2581-2 Rating: moderate References: * bsc#1226157 Affected Products: * openSUSE Leap 15.6 An update that has one fix can now be installed. ## Description: This update for sssd fixes the following issue: * Revert the change dropping the default configuration file. If /usr/etc exists will be installed there, otherwise in /etc (bsc#1226157) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2581=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * sssd-ldap-2.9.3-150600.3.9.2 * libsss_idmap0-debuginfo-2.9.3-150600.3.9.2 * python3-sss-murmur-2.9.3-150600.3.9.2 * sssd-krb5-common-2.9.3-150600.3.9.2 * sssd-proxy-debuginfo-2.9.3-150600.3.9.2 * sssd-winbind-idmap-2.9.3-150600.3.9.2 * libsss_nss_idmap0-debuginfo-2.9.3-150600.3.9.2 * python3-sss-murmur-debuginfo-2.9.3-150600.3.9.2 * sssd-krb5-common-debuginfo-2.9.3-150600.3.9.2 * sssd-kcm-2.9.3-150600.3.9.2 * sssd-ipa-debuginfo-2.9.3-150600.3.9.2 * python3-ipa_hbac-debuginfo-2.9.3-150600.3.9.2 * libsss_certmap-devel-2.9.3-150600.3.9.2 * sssd-proxy-2.9.3-150600.3.9.2 * sssd-dbus-2.9.3-150600.3.9.2 * python3-sss_nss_idmap-debuginfo-2.9.3-150600.3.9.2 * libsss_simpleifp-devel-2.9.3-150600.3.9.2 * sssd-tools-2.9.3-150600.3.9.2 * libsss_idmap-devel-2.9.3-150600.3.9.2 * libipa_hbac-devel-2.9.3-150600.3.9.2 * libsss_nss_idmap0-2.9.3-150600.3.9.2 * python3-sss_nss_idmap-2.9.3-150600.3.9.2 * libsss_nss_idmap-devel-2.9.3-150600.3.9.2 * sssd-kcm-debuginfo-2.9.3-150600.3.9.2 * libipa_hbac0-2.9.3-150600.3.9.2 * sssd-debuginfo-2.9.3-150600.3.9.2 * sssd-krb5-2.9.3-150600.3.9.2 * sssd-ad-2.9.3-150600.3.9.2 * libsss_simpleifp0-2.9.3-150600.3.9.2 * python3-sssd-config-debuginfo-2.9.3-150600.3.9.2 * sssd-dbus-debuginfo-2.9.3-150600.3.9.2 * python3-sssd-config-2.9.3-150600.3.9.2 * sssd-debugsource-2.9.3-150600.3.9.2 * sssd-2.9.3-150600.3.9.2 * libipa_hbac0-debuginfo-2.9.3-150600.3.9.2 * python3-ipa_hbac-2.9.3-150600.3.9.2 * sssd-ad-debuginfo-2.9.3-150600.3.9.2 * libnfsidmap-sss-2.9.3-150600.3.9.2 * sssd-ldap-debuginfo-2.9.3-150600.3.9.2 * libsss_idmap0-2.9.3-150600.3.9.2 * libnfsidmap-sss-debuginfo-2.9.3-150600.3.9.2 * sssd-tools-debuginfo-2.9.3-150600.3.9.2 * libsss_certmap0-2.9.3-150600.3.9.2 * sssd-ipa-2.9.3-150600.3.9.2 * sssd-krb5-debuginfo-2.9.3-150600.3.9.2 * sssd-winbind-idmap-debuginfo-2.9.3-150600.3.9.2 * libsss_simpleifp0-debuginfo-2.9.3-150600.3.9.2 * libsss_certmap0-debuginfo-2.9.3-150600.3.9.2 * openSUSE Leap 15.6 (x86_64) * sssd-32bit-2.9.3-150600.3.9.2 * sssd-32bit-debuginfo-2.9.3-150600.3.9.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226157

1 0

SUSE-SU-2024:2659-1: important: Security update for shadow
by OPENSUSE-UPDATES 30 Jul '24

30 Jul '24

# Security update for shadow Announcement ID: SUSE-SU-2024:2659-1 Rating: important References: * bsc#916845 Cross-References: * CVE-2013-4235 CVSS scores: * CVE-2013-4235 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2013-4235 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Micro 5.5 An update that solves one vulnerability can now be installed. ## Description: This update for shadow fixes the following issues: * CVE-2013-4235: Fixed a race condition when copying and removing directory trees (bsc#916845). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-2659=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2659=1 ## Package List: * openSUSE Leap Micro 5.5 (noarch) * login_defs-4.8.1-150500.3.6.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * shadow-4.8.1-150500.3.6.1 * shadow-debugsource-4.8.1-150500.3.6.1 * shadow-debuginfo-4.8.1-150500.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * shadow-4.8.1-150500.3.6.1 * shadow-debugsource-4.8.1-150500.3.6.1 * shadow-debuginfo-4.8.1-150500.3.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * login_defs-4.8.1-150500.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2013-4235.html * https://bugzilla.suse.com/show_bug.cgi?id=916845

1 0

SUSE-SU-2024:2669-1: moderate: Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t
by OPENSUSE-UPDATES 30 Jul '24

30 Jul '24

# Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t Announcement ID: SUSE-SU-2024:2669-1 Rating: moderate References: Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for kubevirt, virt-api-container, virt-controller-container, virt- exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator- container, virt-pr-helper-container fixes the following issues: * Update to version 1.2.2 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.2 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.0 \- Use predefined configuration files for libvirt \- Install psmisc (provides killall for tests) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2669=1 SUSE-2024-2669=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-2669=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2669=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-2669=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kubevirt-virt-exportserver-1.2.2-150500.8.21.1 * kubevirt-manifests-1.2.2-150500.8.21.1 * kubevirt-virt-operator-1.2.2-150500.8.21.1 * kubevirt-virt-exportserver-debuginfo-1.2.2-150500.8.21.1 * kubevirt-virt-handler-debuginfo-1.2.2-150500.8.21.1 * kubevirt-virtctl-debuginfo-1.2.2-150500.8.21.1 * kubevirt-virt-exportproxy-debuginfo-1.2.2-150500.8.21.1 * kubevirt-virt-handler-1.2.2-150500.8.21.1 * kubevirt-virt-launcher-1.2.2-150500.8.21.1 * kubevirt-virt-controller-1.2.2-150500.8.21.1 * kubevirt-pr-helper-conf-1.2.2-150500.8.21.1 * kubevirt-virt-launcher-debuginfo-1.2.2-150500.8.21.1 * kubevirt-virt-api-1.2.2-150500.8.21.1 * kubevirt-container-disk-debuginfo-1.2.2-150500.8.21.1 * kubevirt-virt-controller-debuginfo-1.2.2-150500.8.21.1 * kubevirt-virt-exportproxy-1.2.2-150500.8.21.1 * kubevirt-virt-operator-debuginfo-1.2.2-150500.8.21.1 * kubevirt-container-disk-1.2.2-150500.8.21.1 * kubevirt-tests-debuginfo-1.2.2-150500.8.21.1 * obs-service-kubevirt_containers_meta-1.2.2-150500.8.21.1 * kubevirt-tests-1.2.2-150500.8.21.1 * kubevirt-virt-api-debuginfo-1.2.2-150500.8.21.1 * kubevirt-virtctl-1.2.2-150500.8.21.1 * openSUSE Leap Micro 5.5 (x86_64) * kubevirt-virtctl-1.2.2-150500.8.21.1 * kubevirt-virtctl-debuginfo-1.2.2-150500.8.21.1 * kubevirt-manifests-1.2.2-150500.8.21.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * kubevirt-virtctl-1.2.2-150500.8.21.1 * kubevirt-virtctl-debuginfo-1.2.2-150500.8.21.1 * kubevirt-manifests-1.2.2-150500.8.21.1 * Containers Module 15-SP5 (x86_64) * kubevirt-virtctl-1.2.2-150500.8.21.1 * kubevirt-virtctl-debuginfo-1.2.2-150500.8.21.1 * kubevirt-manifests-1.2.2-150500.8.21.1

1 0

SUSE-RU-2024:2645-1: moderate: Recommended update for libqt5-qtbase
by OPENSUSE-UPDATES 30 Jul '24

30 Jul '24

# Recommended update for libqt5-qtbase Announcement ID: SUSE-RU-2024:2645-1 Rating: moderate References: * bsc#1227513 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for libqt5-qtbase fixes the following issues: * Fixed a regression in the ODBC driver (bsc#1227513) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2645=1 SUSE-2024-2645=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2645=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2645=1 ## Package List: * openSUSE Leap 15.6 (x86_64) * libQt5Network5-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5DBus-devel-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Widgets-devel-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent-devel-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Gui5-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Widgets5-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Core5-32bit-5.15.12+kde151-150600.3.3.1 * libQt5OpenGLExtensions-devel-static-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent5-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Test5-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5DBus-devel-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-mysql-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Gui5-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Bootstrap-devel-static-32bit-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport-devel-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-sqlite-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-postgresql-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Xml5-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5PlatformSupport-devel-static-32bit-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-examples-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Core-devel-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-postgresql-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Network5-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent5-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-sqlite-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-mysql-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Gui-devel-32bit-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL5-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-examples-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Xml-devel-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Test5-32bit-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport5-32bit-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL5-32bit-5.15.12+kde151-150600.3.3.1 * libQt5DBus5-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Test-devel-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Core5-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Network-devel-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-unixODBC-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Xml5-32bit-5.15.12+kde151-150600.3.3.1 * libQt5Widgets5-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5DBus5-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-unixODBC-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL-devel-32bit-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport5-32bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql-devel-32bit-5.15.12+kde151-150600.3.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libQt5Test5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Gui-devel-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport-devel-5.15.12+kde151-150600.3.3.1 * libQt5Core5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5PlatformHeaders-devel-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-platformtheme-gtk3-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-unixODBC-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-postgresql-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-sqlite-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Gui5-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-unixODBC-5.15.12+kde151-150600.3.3.1 * libQt5DBus-devel-debuginfo-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-debugsource-5.15.12+kde151-150600.3.3.1 * libQt5Core5-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Xml5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-mysql-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL-devel-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5DBus-devel-5.15.12+kde151-150600.3.3.1 * libQt5DBus5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5OpenGLExtensions-devel-static-5.15.12+kde151-150600.3.3.1 * libQt5PlatformSupport-devel-static-5.15.12+kde151-150600.3.3.1 * libQt5Test-devel-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-platformtheme-gtk3-debuginfo-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-platformtheme-xdgdesktopportal-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Gui5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Network-devel-5.15.12+kde151-150600.3.3.1 * libQt5Widgets-devel-5.15.12+kde151-150600.3.3.1 * libQt5Core-devel-5.15.12+kde151-150600.3.3.1 * libQt5DBus5-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-examples-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-examples-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql-devel-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-devel-5.15.12+kde151-150600.3.3.1 * libQt5KmsSupport-devel-static-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-sqlite-5.15.12+kde151-150600.3.3.1 * libQt5Network5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-postgresql-5.15.12+kde151-150600.3.3.1 * libQt5Widgets5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-mysql-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport5-5.15.12+kde151-150600.3.3.1 * libQt5Bootstrap-devel-static-5.15.12+kde151-150600.3.3.1 * libQt5Widgets5-5.15.12+kde151-150600.3.3.1 * libQt5Network5-5.15.12+kde151-150600.3.3.1 * libQt5Xml-devel-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent-devel-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-common-devel-5.15.12+kde151-150600.3.3.1 * libQt5Test5-5.15.12+kde151-150600.3.3.1 * libQt5Xml5-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL5-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-debuginfo-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-platformtheme-xdgdesktopportal-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent5-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-common-devel-debuginfo-5.15.12+kde151-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * libQt5KmsSupport-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Gui-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Network-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5DBus-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Core-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Widgets-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5PlatformSupport-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Test-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Sql-private-headers-devel-5.15.12+kde151-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libQt5Gui-devel-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Xml5-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-sqlite-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5OpenGLExtensions-devel-static-64bit-5.15.12+kde151-150600.3.3.1 * libQt5PlatformSupport-devel-static-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Test-devel-64bit-5.15.12+kde151-150600.3.3.1 * libQt5DBus5-64bit-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-examples-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-mysql-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-postgresql-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Bootstrap-devel-static-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql-devel-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Test5-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Core5-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Test5-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Widgets-devel-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Gui5-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5DBus5-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Core-devel-64bit-5.15.12+kde151-150600.3.3.1 * libQt5DBus-devel-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Widgets5-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-postgresql-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent5-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Widgets5-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5DBus-devel-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Network5-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Network5-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL-devel-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent5-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Network-devel-64bit-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport5-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-unixODBC-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-mysql-64bit-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL5-64bit-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport5-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-examples-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Gui5-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-unixODBC-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Core5-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport-devel-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Xml5-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-sqlite-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent-devel-64bit-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-64bit-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL5-64bit-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Xml-devel-64bit-5.15.12+kde151-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libQt5Test5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Gui-devel-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport-devel-5.15.12+kde151-150600.3.3.1 * libQt5Core5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5PlatformHeaders-devel-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-sqlite-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Gui5-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-debugsource-5.15.12+kde151-150600.3.3.1 * libQt5DBus-devel-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Core5-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Xml5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Test-devel-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL-devel-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5DBus-devel-5.15.12+kde151-150600.3.3.1 * libQt5DBus5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5PlatformSupport-devel-static-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-5.15.12+kde151-150600.3.3.1 * libQt5Gui5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Network-devel-5.15.12+kde151-150600.3.3.1 * libQt5Widgets-devel-5.15.12+kde151-150600.3.3.1 * libQt5Core-devel-5.15.12+kde151-150600.3.3.1 * libQt5DBus5-5.15.12+kde151-150600.3.3.1 * libQt5Sql-devel-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-devel-5.15.12+kde151-150600.3.3.1 * libQt5KmsSupport-devel-static-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-sqlite-5.15.12+kde151-150600.3.3.1 * libQt5Network5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Widgets5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport5-5.15.12+kde151-150600.3.3.1 * libQt5Widgets5-5.15.12+kde151-150600.3.3.1 * libQt5Network5-5.15.12+kde151-150600.3.3.1 * libQt5Xml-devel-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent-devel-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-common-devel-5.15.12+kde151-150600.3.3.1 * libQt5Test5-5.15.12+kde151-150600.3.3.1 * libQt5Xml5-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL5-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Concurrent5-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-common-devel-debuginfo-5.15.12+kde151-150600.3.3.1 * Basesystem Module 15-SP6 (noarch) * libQt5KmsSupport-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Gui-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Network-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5PrintSupport-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5DBus-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Core-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5OpenGL-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Widgets-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5PlatformSupport-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Test-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-private-headers-devel-5.15.12+kde151-150600.3.3.1 * libQt5Sql-private-headers-devel-5.15.12+kde151-150600.3.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libqt5-qtbase-debugsource-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-mysql-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-platformtheme-gtk3-debuginfo-5.15.12+kde151-150600.3.3.1 * libqt5-qtbase-platformtheme-gtk3-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-postgresql-5.15.12+kde151-150600.3.3.1 * libQt5OpenGLExtensions-devel-static-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-unixODBC-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-postgresql-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-mysql-debuginfo-5.15.12+kde151-150600.3.3.1 * libQt5Sql5-unixODBC-5.15.12+kde151-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1227513

1 0

SUSE-RU-2024:2620-1: moderate: Recommended update for ant, lucene, mysql-connector-java, univocity-parsers
by OPENSUSE-UPDATES 30 Jul '24

30 Jul '24

# Recommended update for ant, lucene, mysql-connector-java, univocity-parsers Announcement ID: SUSE-RU-2024:2620-1 Rating: moderate References: Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that can now be installed. ## Description: This update for ant, lucene, mysql-connector-java, univocity-parsers fixes the following issues: ant: * Add forgotten open-test-reporting/events to ant.d/junitlauncher lucene was updated from version 8.5.0 to 8.11.2: * API Changes: * SimpleFSDirectory is deprecated in favor of NIOFSDirectory. * Removed ability to set DocumentsWriterPerThreadPool on IndexWriterConfig. The DocumentsWriterPerThreadPool is a packaged protected final class which made it impossible to customize. * MergeScheduler#merge doesn't accept a parameter if a new merge was found anymore. * SortFields are now responsible for writing themselves into index headers if they are used as index sorts. * Deprecate SimpleBindings#add(SortField). * MergeScheduler is now decoupled from IndexWriter. Instead it accepts a MergeSource interface that offers the basic methods to acquire pending merges, run the merge and do accounting around it. * QueryVisitor.consumeTermsMatching() now takes a Supplier<ByteRunAutomaton> to enable queries that build large automata to provide them lazily. TermsInSetQuery switches to using this method to report matching terms. * DocValues.emptySortedNumeric() no longer takes a maxDoc parameter * CodecUtil#checkFooter(IndexInput, Throwable) now throws a CorruptIndexException if checksums mismatch or if checksums can't be verified. * TieredMergePolicy#setMaxMergeAtOnceExplicit is deprecated and the number of segments that get merged via explicit merges is unlimited by default. * Lucene's facet module's DocValuesOrdinalsReader.decode method is now public, making it easier for applications to decode facet ordinals into their corresponding labels * Field comparators for numeric fields and _doc were moved to their own package. TopFieldCollector sets TotalHits.relation to GREATER_THAN_OR_EQUAL_TO, as soon as the requested total hits threshold is reached, even though in some cases no skipping optimization is applied and all hits are collected. * IndexingChain now accepts individual primitives rather than a DocumentsWriterPerThread instance in order to create a new DocConsumer. * Removed deprecation warning from IndexWriter#getFieldNames(). * Change the getValue method from IntTaxonomyFacets to be protected instead of private. Users can now access the count of an ordinal directly without constructing an extra FacetLabel. Also use variable length arguments for the getOrdinal call in TaxonomyReader. * DrillSideways allows sub-classes to provide "drill down" FacetsCollectors. They may provide a null collector if they choose to bypass "drill down" facet collection. * Add a new Directory reader open API from indexCommit and a custom comparator for sorting leaf readers * Replaced the ScoreCachingWrappingScorer ctor with a static factory method that ensures unnecessary wrapping doesn't occur. * New Features: * Grouping by range based on values from DoubleValuesSource and LongValuesSource * Add IndexWriter merge-on-commit feature to selectively merge small segments on commit, subject to a configurable timeout, to improve search performance by reducing the number of small segments for searching * Add IndexWriter merge-on-refresh feature to selectively merge small segments on getReader, subject to a configurable timeout, to improve search performance by reducing the number of small segments for searching. * Doc values now allow configuring how to trade compression for retrieval speed. * Add FacetsConfig option to control which drill-down terms are indexed for a FacetLabel * RegExpQuery added case insensitive matching option. * Add CJKWidthCharFilter and its factory * Add utility class to retrieve facet labels from the taxonomy index for a facet field so such fields do not also have to be redundantly stored * Allow sorting an index after it was created. With SortingCodecReader, existing unsorted segments can be wrapped and merged into a fresh index using IndexWriter#addIndices API. * Custom order for leaves in IndexReader and IndexWriter * Added smoothingScore method and default implementation to Scorable abstract class. The smoothing score allows scorers to calculate a score for a document where the search term or subquery is not present. The smoothing score acts like an idf so that documents that do not have terms or subqueries that are more frequent in the index are not penalized as much as documents that do not have less frequent terms or subqueries and prevents scores which are the product or terms or subqueries from going to zero. Added the implementation of the Indri AND and the IndriDirichletSimilarity from the academic Indri search engine: http://www.lemurproject.org/indri.php. * New LatLonPoint query that accepts an array of LatLonGeometries. * New XYPoint query that accepts an array of XYGeometries. * TypeAsSynonymFilter has been enhanced support ignoring some types, and to allow the generated synonyms to copy some or all flags from the original token * A token filter to drop tokens that match all specified flags. * PatternTypingFilter has been added to allow setting a type attribute on tokens based on a configured set of regular expressions * FeatureField supports newLinearQuery that for scoring uses raw indexed values of features without any transformation. * LatLonPoint query support for spatial relationships. * New tool for creating a deterministic index to enable benchmarking changes on a consistent multi-segment index even when they require re-indexing. * New facet counting implementation for general string doc value fields (SortedSetDocValues / SortedDocValues) not created through FacetsConfig * The SimpleText codec now writes skip lists. * Analyzer and stemmer for Telugu language * Improvements: * Use same code-path for updateDocuments and updateDocument in IndexWriter and DocumentsWriter. * Update dictionary version for Ukrainian analyzer to 4.9.1 * PerFieldDocValuesFormat should not get the DocValuesFormat on a field that has no doc values. * Removed ThreadState abstraction from DocumentsWriter which allows pooling of DWPT directly and improves the approachability of the IndexWriter code. * Add an ID to SegmentCommitInfo in order to compare commits for equality and make snapshots incremental on generational files. * TotalHits' relation will be EQUAL_TO when the number of hits is lower than TopDocsColector's numHits * Metadata of the terms dictionary moved to its own file, with the '.tmd' extension. This allows checksums of metadata to be verified when opening indices and helps saveseeks when opening an index. * SegmentInfos#readCommit now always returns a CorruptIndexException if the content of the file is invalid. * Make FunctionScoreQuery use ScoreMode.COMPLETE for creating the inner query weight when ScoreMode.TOP_DOCS is requested. * Make FacetsConfig.DELIM_CHAR publicly accessible * UniformSplit supports encodable fields metadata. * Improved truncation detection for points. * Let MultiCollector handle minCompetitiveScore * Add a new ExpressionValueSource which will enforce only one value per name per hit in dependencies, ExpressionFunctionValues will no longer recompute already computed values * Fix CheckIndex to print an invalid non-zero norm as unsigned long when detecting corruption. * FieldInfo#checkConsistency called twice from Lucene50(60)FieldInfosFormat#read; Removed the (redundant?) assert and do these checks for real. * In BooleanQuery rewrite, always remove MatchAllDocsQuery filter clauses when possible. * Improve coverage for Asserting* test classes: make sure to handle singleton doc values, and sometimes exercise Weight#scorer instead of Weight#bulkScorer for top-level queries. * Include StoredFieldsWriter in DWPT accounting to ensure that it's heap consumption is taken into account when IndexWriter stalls or should flush DWPTs. * Include TermVectorsWriter in DWPT accounting to ensure that it's heap consumption is taken into account when IndexWriter stalls or should flush DWPTs. * In query shapes over shape fields, skip points while traversing the BKD tree when the relationship with the document is already known. * Use more compact datastructures to represent sorted doc-values in memory when sorting a segment before flush and in SortingCodecReader. * WordDelimiterGraphFilter should order tokens at the same position by endOffset to emit longer tokens first. The same graph is produced. * Optimize facet counting for single-valued SSDV / StringValueFacetCounts. * GlobalOrdinalsWithScore should not compute occurrences when the provided min is 1. * ICUNormalizer2CharFilter no longer requires normalization-inert characters as boundaries for incremental processing, vastly improving worst-case performance. * ExitableTermsEnum should sample timeout and interruption check before calling next(). * Make CheckIndex concurrent by parallelizing index check across segments. * Add compression to terms dict from SortedSet/Sorted DocValues. * Binary doc values fields now expose their configured compression mode in the attributes of the field info. * BM25FQuery was extended to handle similarities beyond BM25Similarity. It was renamed to CombinedFieldQuery to reflect its more general scope. * Reduce index size by increasing allowable exceptions in PForUtil from 3 to 7. * Hunspell support improvements: add API for spell-checking and suggestions, support compound words, fix various behavior differences between Java and C++ implementations, improve performance * The BEST_SPEED compression mode now trades more compression ratio in exchange of faster reads. * Enable bulk merge for stored fields with index sort. * Allow DrillSideways users to provide their own CollectorManager without also requiring them to provide an ExecutorService. * Extend DrillSideways to support exposing FacetCollectors directly. * Support for multi-value fields in LongRangeFacetCounts and DoubleRangeFacetCounts. * Added QueryProfilerIndexSearcher and ProfilerCollector to support debugging query execution strategy and timing. * Operations.getCommonSuffix/Prefix(Automaton) is now much more efficient, from a worst case exponential down to quadratic cost in the number of states + transitions in the Automaton. These methods no longer use the costly determinize method, removing the risk of TooComplexToDeterminizeException * Operations.determinize now throws TooComplexToDeterminizeException based on too much "effort" spent determinizing rather than a precise state count on the resulting returned automaton, to better handle adversarial cases like det(rev(regexp("(.*a){2000}"))) that spend lots of effort but result in smallish eventual returned automata. * Stop sorting determinize powersets unnecessarily. * Evaluate score in DrillSidewaysScorer.doQueryFirstScoring * Decrease default for LRUQueryCache's skipCacheFactor to 10. This prevents caching a query clause when it is much more expensive than running the top- level query. * Make QueryCache respect Accountable queries * Optimizations: * UniformSplit keeps FST off-heap. * DoubleValuesSource and QueryValueSource now use a TwoPhaseIterator if one is provided by the Query. * UsageTrackingQueryCachingPolicy no longer caches DocValuesFieldExistsQuery. * FST.Arc.BitTable reads directly FST bytes. Arc is lightweight again and FSTEnum traversal faster. * Fail precommit on unparameterised log messages and examine for wasted work/objects * Speed up geometry queries by specialising Component2D spatial operations. Instead of using a generic relate method for all relations, we use specialize methods for each one. In addition, the type of triangle is computed at deserialization time, therefore we can be more selective when decoding points of a triangle. * Build always trees with full leaves and lower the default value for maxPointsPerLeafNode to 512. * Points now write their index in a separate file. * Add an ability for field comparators to skip non-competitive documents. Creating a TopFieldCollector with totalHitsThreshold less than Integer.MAX_VALUE instructs Lucene to skip non-competitive documents whenever possible. For numeric sort fields the skipping functionality works when the same field is indexed both with doc values and points. To indicate that the same data is stored in these points and doc values SortField#setCanUsePoints method should be used. * ConstantValuesSource now shares a single DoubleValues instance across all segments * Stored fields now get higer compression ratios on highly compressible data. * FunctionMatchQuery now accepts a "matchCost" optimization hint. * Indexing with an index sort is now faster by not compressing temporary representations of the data. * Enhance DocComparator to provide an iterator over competitive documents when searching with "after". This iterator can quickly position on the desired "after" document skipping all documents and segments before "after". * QueryParser: re-use the LookaheadSuccess exception. * WANDScorer now supports queries that have a 'minimumNumberShouldMatch' configured. * Reduced memory usage for OrdinalMap when a segment has all values. * Faster decoding of postings for some numbers of bits per value. * Substantially improve RAM efficiency of how MemoryIndex stores postings in memory, and reduced a bit of RAM overhead in IndexWriter's internal postings book-keeping * Speed up merging of stored fields and term vectors for smaller segments. * Performance improvement for BKD index building * Improved memory efficiency of IndexWriter's RAM buffer, in particular in the case of many fields and many indexing threads. * Lucene90DocValuesFormat was using too many bits per value when compressing via gcd, unnecessarily wasting index storage. * Rewrite empty DisjunctionMaxQuery to MatchNoDocsQuery. * Slightly faster segment merging for sorted indices. * Improve IntroSorter with 3-ways partitioning * FacetsCollector will not request scores if it does not use them * Bugs fixed: * Fix corruption of the new gen field infos when doc values updates are applied on a segment created externally and added to the index with IndexWriter#addIndexes(Directory). * Holding levenshtein automata on FuzzyQuery can end up blowing up query caches which use query objects as cache keys, so building the automata is now delayed to search time again. * Fix wrong NGramFilterFactory argument name for preserveOriginal option * DocValuesRewriteMethod.visit wasn't visiting its embedded query * DocTermsIndexDocValues assumed it was operating on a SortedDocValues (single valued) field when it could be multi-valued used with a SortedSetSelector * Ensure IW processes all internal events before it closes itself on a rollback. * Return default value from objectVal when doc doesn't match the query in QueryValueSource * Fix for potential NPE in TermFilteredPresearcher for empty fields * Wait for #addIndexes merges when aborting merges. * Ensure CMS updates it's thread accounting datastructures consistently. CMS today releases it's lock after finishing a merge before it re-acquires it to update the thread accounting datastructures. This causes threading issues where concurrently finishing threads fail to pick up pending merges causing potential thread starvation on forceMerge calls * Single-document monitor runs were using the less efficient MultiDocumentBatch implementation. * Fix equality check in ExpressionValueSource#rewrite. This fixes rewriting of inner value sources. * IndexWriter incorrectly calls closeMergeReaders twice when the merged segment is 100% deleted. * Tessellator might build illegal polygons when several holes share the shame vertex. * Tessellator might build illegal polygons when several holes share are connected to the same vertex. * Fix ordered intervals over interleaved terms * The UnifiedHighlighter was closing the underlying reader when there were multiple term-vector fields. This was a regression in 8.6.0. * Prevent DWPTDeleteQueue from referencing itself and leaking memory. The queue passed an implicit this reference to the next queue instance on flush which leaked about 500byte of memory on each full flush, commit or getReader call. * Fix a regression where the unified highlighter didn't produce highlights on fuzzy queries that correspond to exact matches. * Fix NRTCachingDirectory to use Directory#fileLength to check if a file already exists instead of opening an IndexInput on the file which might throw a AccessDeniedException in some Directory implementations. * Fixed a bug in IndexSortSortedNumericDocValuesRangeQuery where it could violate the DocIdSetIterator contract. * Include field in ComplexPhraseQuery's toString() * Fix TermRangeQuery when there is no upper bound and the lower bound is the empty string excluded. This would previously match no strings at all while it should match all non-empty strings. * Fix NPE in SpanWeight#explain when no scoring is required and SpanWeight has null Similarity.SimScorer. * DocumentsWriter was only stalling threads for 1 second allowing documents to be indexed even the DocumentsWriter wasn't able to keep up flushing. Unless IW can't make progress due to an ill behaving DWPT this issue was barely noticeable. * Japanese tokenizer should discard the compound token instead of disabling the decomposition of long tokens when discardCompoundToken is activated. * Make Component2D#withinPoint implementations consistent with ShapeQuery logic. * Wrap boolean queries generated by shape fields with a Constant score query. * Fix per-field memory leak in IndexWriter.deleteAll(). Reset next available internal field number to 0 on FieldInfos.clear(), to avoid wasting FieldInfo references. * BM25FQuery - Mask encoded norm long value in array lookup. * When encoding triangles in ShapeField, make sure generated triangles are CCW by rotating triangle points before checking triangle orientation. * Fix deadlock in TermsEnum.EMPTY that occurs when trying to initialize TermsEnum and BaseTermsEnum at the same time * NPE on a degenerate query in MinimumShouldMatchIntervalsSource $MinimumMatchesIterator.getSubMatches(). * DoubleValuesSource.fromQuery (also used by FunctionScoreQuery.boostByQuery) could throw an exception when the query implements TwoPhaseIterator and when the score is requested repeatedly. * BytesRefHash.equals/find is now thread safe, fixing a Luwak/Monitor bug causing registered queries to sometimes fail to match. * Fix Circle2D intersectsLine t-value (distance) range clamp * Fixed parameter use in RadixSelector. * LongValueFacetCounts should count each document at most once when determining the total count for a dimension. Prior to this fix, multi-value docs could contribute a > 1 count to the dimension count. * Fixed performance regression for boolean queries that configure a minimum number of matching clauses. * FlattenGraphFilter is now more robust when handling incoming holes in the input token graph * Duplicate long values in a document field should only be counted once when using SortedNumericDocValuesFields * Do not throw NullPointerException while trying to handle another exception in ReplicaNode.start * Fix DrillSideways correctness bug * Fix edge case failure in TestStringValueFacetCounts * CombinedFieldQuery can fail with an exception when document is missing some fields. * Respect ignoreCase in CommonGramsFilterFactory * DocComparator should not skip docs with the same docID on multiple sorts with search after * Fix CombinedFieldQuery equals and hashCode, which ensures query rewrites don't drop CombinedFieldQuery clauses. * Correct CombinedFieldQuery scoring when there is a single field. * Counting bug fixed in StringValueFacetCounts. * Ensure DrillSidewaysQuery instances never get cached. * Skip deleted docs when accumulating facet counts for all docs * KoreanTokenizer should check the max backtrace gap on whitespaces. * Sort optimization can wrongly skip the first document of each segment * MultiCollector now handles single leaf collector that wants to skip low- scoring hits but the combined score mode doesn't allow it * Missing calculating the bytes used of DocsWithFieldSet in NormValuesWriter * Missing calculating the bytes used of DocsWithFieldSet and currentValues in SortedSetDocValuesWriter * Sort optimization with search_after can wrongly skip documents whose values are equal to the last value of the previous page * Sort optimization with a chunked bulk scorer can wrongly skip documents * ConcurrentSortedSetDocValuesFacetCounts shouldn't share liveDocs Bits across threads * NumericLeafComparator to define getPointValues * Ensure that the minimum competitive score does not decrease in concurrent search * Highlighter: WeightedSpanTermExtractor.extractWeightedSpanTerms to Query#rewrite multiple times if necessary * Make sure SparseFixedBitSet#or updates ramBytesUsed * Documentation: * Add a performance warning to AttributeSource.captureState javadocs * Changes in runtime behaviour: * SortingCodecReader now doesn't cache doc values fields anymore. Previously, SortingCodecReader used to cache all doc values fields after they were loaded into memory. This reader should only be used to sort segments after the fact using IndexWriter#addIndices. * Other changes: * Always keep FST off-heap. FSTLoadMode, Reader attributes and openedFromWriter removed. * Checksums of the terms index are now verified when LeafReader#checkIntegrity is called rather than when opening the index. * Update Javadoc about normalizeEntry in the Kuromoji DictionaryBuilder. * Make TestLatLonMultiPolygonShapeQueries more resilient for CONTAINS queries. * Adjust TestLucene60PointsFormat#testEstimatePointCount2Dims so it does not fail when a point is shared by multiple leaves. * ByteBufferIndexInput was refactored to work on top of the ByteBuffer API. * Make LineFileDocs's random seeking more efficient, making tests using LineFileDocs faster * Refactors SimpleBindings to improve type safety and cycle detection * Change the way the multi-dimensional BKD tree builder generates the intermediate tree representation to be equal to the one dimensional case to avoid unnecessary tree and leaves rotation. * poll_mirrors.py release script can handle HTTPS mirrors. * Fix or suppress 13 resource leak precommit warnings in lucene/replicator * Always keep BKD index off-heap. BKD reader does not implement Accountable any more. * Refactor BKD point configuration into its own class. * Make TestXYMultiPolygonShapeQueries more resilient for CONTAINS queries. * Move LockFactory stress test to be a unit/integration test. * Removes some unused code and replaces the Point implementation on ShapeField/ShapeQuery random tests. * Removed the pure Maven build. It is no longer possible to build artifacts using Maven (this feature was no longer working correctly). Due to migration to Gradle for Lucene/Solr 9.0, the maintenance of the Maven build was no longer reasonable. POM files are generated for deployment to Maven Central only. Please use "ant generate-maven-artifacts" to produce and deploy artifacts to any repository. * Migrate Maven tasks to use "maven-resolver-ant-tasks" instead of the no longer maintained "maven-ant-tasks". * Upgrade jetty to 9.4.41 * Fix WANDScorer assertion error. * Add docs/links to GermanAnalyzer describing how to decompound nouns * Update Jetty to 9.4.34 mysql-connector-java was updated to version 8.4.0: * Removed OpenTelemetry support, which was added upstream * Avoid producing dupplicate maven data * Changes in version 8.4.0: * Added support for VECTOR data type. * Fixed tests failing due to removal of deprecated features. * Fixed join condition for retrieval of imported primary keys. * GPL License Exception Update. * Updated SyntaxRegressionTest.java. * Replaced StringBuffer with StringBuilder in ValueEncoders * Fixed DatabaseMetaData that specifies incorrect extra name characters. * Fixed setting the FetchSize on a Statement object does not affect. * Fixed GETPARAMETERBINDINGS() ON A PS RETURNS NPE WHEN NOT ALL PARAMETERS ARE BOUND. * Removed support for FIDO authentication * Only call Messages.getString(...) when it's needed (when the SQLException is thrown) * CLIENT HANG WHEN LOADBALANCESTRATEGY IS BESTRESPONSETIME. * Includes changes from 8.3.0: * Fixed redundant "Reset stmt" when setting useServerPrepStmts&cachePrepStmts to true * Fixed COMMENT PARSING IS NOT PROPER IN CONNECTOR JDBC. * Fixed setting a large timeout leads to errors when executing SQL. * Upgrade 3rd party libraries and tools. * Upgrade Protocol Buffers dependency to protobuf*java-3.25.1. * Fixed issue with mysql-connector-j 8.0.33 connector (XDEVAPI) - getsession is slow. * Fixed CallableStatement::getParameterMetaData reports incorrect parameterCount. * Fixed executeUpdate throws SQLException on queries that are only comments. * getWarnings() of StatementImpl contains all warnings. * Fixed Unexpected list of permitted ciphers. * Fixed jdbc.MysqlParameterMetadata#isNullable doesnt check whether to be simple. * Fixed Parameter metadata inferred incorrectly when procedure or function doesn't exist. * Fixed execution of a stored procedure if exists function with same name. * Changes in version 8.2.0: * Added the missing implementation for Connection.releaseSavepoint() * Connector/J now supports WebAuthn Authentication. See Connecting Using Web Authentication (WebAuthn) Authentication for details. * The auto-deserialization function for BLOB objects, deprecated since release 8.1.0, is now removed. * The SessionStateChanges objects failed to provide proper values for section state changes. This was because Connector/J parsed the OK_Packet incorrectly, and this patch fixes the issue. * Using javax.sql.rowset.CachedRowSet#getDate() or javax.sql.rowset.CachedRowSet#getTimestamp() on DATETIME fields resulted in a ClassCastException. It was because the default return type of DATETIME fields by ResultSet.getObject() was java.time.LocalDateTime instead of java.sql.Timestamp. To prevent the exception, a new connection property, treatMysqlDatetimeAsTimestamp, now allows the return type of DATETIME by ResultSet.getObject() to be changed to java.sql.Timestamp * Obtaining a connection from a MysqlConnectionPoolDataSource made Connector/J reset its connection state unless the connection property paranoid was set to be true. During the reset, the autocommit mode of the session was restored to the default value specified on the server by the system variable autocommit, while the JDBC specification mandates that autocommit be always enabled for a freshly created connection. With this patch, the connection reset will always enable autocommit in the situation. * Changes in version 8.1.0: * Deprecated autoDeserialize feature. * Fix KeyManagementException: FIPS mode: only SunJSSE TrustManagers may be used. * Fixed Issue in JDBC PreparedStatement on adding NO_BACKSLASH_ESCAPES in sql_mode. univocity-parsers: * Add Automatic-Module-Name to the manifest ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2620=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2620=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2620=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2620=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2620=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2620=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2620=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2620=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2620=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2620=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2620=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2620=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2620=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2620=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2620=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2620=1 ## Package List: * openSUSE Leap 15.6 (noarch) * ant-junit5-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-xz-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * lucene-backward-codecs-8.11.2-150200.4.7.1 * lucene-memory-8.11.2-150200.4.7.1 * lucene-monitor-8.11.2-150200.4.7.1 * ant-junit-1.10.14-150200.4.28.1 * lucene-codecs-8.11.2-150200.4.7.1 * univocity-parsers-javadoc-2.9.1-150200.3.7.8 * ant-scripts-1.10.14-150200.4.28.1 * lucene-classification-8.11.2-150200.4.7.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-xalan2-1.10.14-150200.4.28.1 * ant-testutil-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * lucene-analyzers-smartcn-8.11.2-150200.4.7.1 * lucene-analyzers-common-8.11.2-150200.4.7.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * univocity-parsers-2.9.1-150200.3.7.8 * ant-apache-resolver-1.10.14-150200.4.28.1 * lucene-grouping-8.11.2-150200.4.7.1 * lucene-queryparser-8.11.2-150200.4.7.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * lucene-sandbox-8.11.2-150200.4.7.1 * ant-imageio-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * lucene-highlighter-8.11.2-150200.4.7.1 * ant-jdepend-1.10.14-150200.4.28.1 * lucene-join-8.11.2-150200.4.7.1 * mysql-connector-java-8.4.0-150200.3.21.1 * ant-jsch-1.10.14-150200.4.28.1 * lucene-analyzers-stempel-8.11.2-150200.4.7.1 * ant-commons-net-1.10.14-150200.4.28.1 * lucene-core-8.11.2-150200.4.7.1 * ant-swing-1.10.14-150200.4.28.1 * lucene-queries-8.11.2-150200.4.7.1 * lucene-spatial3d-8.11.2-150200.4.7.1 * ant-manual-1.10.14-150200.4.28.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * lucene-misc-8.11.2-150200.4.7.1 * Development Tools Module 15-SP5 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * Development Tools Module 15-SP6 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Package Hub 15 15-SP5 (noarch) * lucene-queryparser-8.11.2-150200.4.7.1 * lucene-sandbox-8.11.2-150200.4.7.1 * lucene-core-8.11.2-150200.4.7.1 * lucene-analyzers-smartcn-8.11.2-150200.4.7.1 * lucene-analyzers-common-8.11.2-150200.4.7.1 * lucene-queries-8.11.2-150200.4.7.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * lucene-misc-8.11.2-150200.4.7.1 * SUSE Package Hub 15 15-SP6 (noarch) * ant-junit5-1.10.14-150200.4.28.1 * lucene-queryparser-8.11.2-150200.4.7.1 * lucene-sandbox-8.11.2-150200.4.7.1 * ant-jsch-1.10.14-150200.4.28.1 * ant-xz-1.10.14-150200.4.28.1 * ant-apache-xalan2-1.10.14-150200.4.28.1 * ant-commons-net-1.10.14-150200.4.28.1 * lucene-core-8.11.2-150200.4.7.1 * ant-testutil-1.10.14-150200.4.28.1 * lucene-analyzers-smartcn-8.11.2-150200.4.7.1 * lucene-analyzers-common-8.11.2-150200.4.7.1 * lucene-queries-8.11.2-150200.4.7.1 * univocity-parsers-2.9.1-150200.3.7.8 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * lucene-misc-8.11.2-150200.4.7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * SUSE Enterprise Storage 7.1 (noarch) * ant-apache-resolver-1.10.14-150200.4.28.1 * ant-scripts-1.10.14-150200.4.28.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * ant-swing-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * ant-jdepend-1.10.14-150200.4.28.1 * ant-junit-1.10.14-150200.4.28.1 * ant-manual-1.10.14-150200.4.28.1 * openSUSE Leap 15.5 (noarch) * ant-junit5-1.10.14-150200.4.28.1 * ant-javamail-1.10.14-150200.4.28.1 * ant-xz-1.10.14-150200.4.28.1 * ant-apache-log4j-1.10.14-150200.4.28.1 * ant-apache-regexp-1.10.14-150200.4.28.1 * ant-antlr-1.10.14-150200.4.28.1 * lucene-backward-codecs-8.11.2-150200.4.7.1 * lucene-memory-8.11.2-150200.4.7.1 * lucene-monitor-8.11.2-150200.4.7.1 * ant-junit-1.10.14-150200.4.28.1 * lucene-codecs-8.11.2-150200.4.7.1 * univocity-parsers-javadoc-2.9.1-150200.3.7.8 * ant-scripts-1.10.14-150200.4.28.1 * lucene-classification-8.11.2-150200.4.7.1 * ant-jmf-1.10.14-150200.4.28.1 * ant-apache-xalan2-1.10.14-150200.4.28.1 * ant-testutil-1.10.14-150200.4.28.1 * ant-apache-bsf-1.10.14-150200.4.28.1 * lucene-analyzers-smartcn-8.11.2-150200.4.7.1 * lucene-analyzers-common-8.11.2-150200.4.7.1 * ant-apache-bcel-1.10.14-150200.4.28.1 * univocity-parsers-2.9.1-150200.3.7.8 * ant-apache-resolver-1.10.14-150200.4.28.1 * lucene-grouping-8.11.2-150200.4.7.1 * lucene-queryparser-8.11.2-150200.4.7.1 * ant-commons-logging-1.10.14-150200.4.28.1 * ant-1.10.14-150200.4.28.1 * lucene-sandbox-8.11.2-150200.4.7.1 * ant-imageio-1.10.14-150200.4.28.1 * ant-apache-oro-1.10.14-150200.4.28.1 * ant-jakartamail-1.10.14-150200.4.28.1 * lucene-highlighter-8.11.2-150200.4.7.1 * ant-jdepend-1.10.14-150200.4.28.1 * lucene-join-8.11.2-150200.4.7.1 * mysql-connector-java-8.4.0-150200.3.21.1 * ant-jsch-1.10.14-150200.4.28.1 * lucene-analyzers-stempel-8.11.2-150200.4.7.1 * ant-commons-net-1.10.14-150200.4.28.1 * lucene-core-8.11.2-150200.4.7.1 * ant-swing-1.10.14-150200.4.28.1 * lucene-queries-8.11.2-150200.4.7.1 * lucene-spatial3d-8.11.2-150200.4.7.1 * ant-manual-1.10.14-150200.4.28.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * lucene-misc-8.11.2-150200.4.7.1

1 0

SUSE-RU-2024:2622-1: moderate: Recommended update for openssl-1_1-livepatches
by OPENSUSE-UPDATES 30 Jul '24

30 Jul '24

# Recommended update for openssl-1_1-livepatches Announcement ID: SUSE-RU-2024:2622-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that can now be installed. ## Description: This update for openssl-1_1-livepatches fixes the following issues: * Use strong externalization for ssl3_setup_read_buffer and ssl3_release_read_buffer * Use strong externalization for ossl_statem_fatal. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2622=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2622=1 ## Package List: * openSUSE Leap 15.4 (x86_64) * openssl-1_1-livepatches-debuginfo-0.4-150400.3.14.1 * openssl-1_1-livepatches-0.4-150400.3.14.1 * openssl-1_1-livepatches-debugsource-0.4-150400.3.14.1 * SUSE Linux Enterprise Live Patching 15-SP4 (x86_64) * openssl-1_1-livepatches-0.4-150400.3.14.1

1 0

SUSE-SU-2024:2630-1: important: Security update for shadow
by OPENSUSE-UPDATES 30 Jul '24

30 Jul '24

# Security update for shadow Announcement ID: SUSE-SU-2024:2630-1 Rating: important References: * bsc#916845 Cross-References: * CVE-2013-4235 CVSS scores: * CVE-2013-4235 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2013-4235 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for shadow fixes the following issues: * CVE-2013-4235: Fixed a race condition when copying and removing directory trees (bsc#916845). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2630=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2630=1 openSUSE-SLE-15.6-2024-2630=1 ## Package List: * Basesystem Module 15-SP6 (noarch) * login_defs-4.8.1-150600.17.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * shadow-debuginfo-4.8.1-150600.17.3.1 * shadow-debugsource-4.8.1-150600.17.3.1 * shadow-4.8.1-150600.17.3.1 * openSUSE Leap 15.6 (noarch) * login_defs-4.8.1-150600.17.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * shadow-debuginfo-4.8.1-150600.17.3.1 * shadow-debugsource-4.8.1-150600.17.3.1 * shadow-4.8.1-150600.17.3.1 ## References: * https://www.suse.com/security/cve/CVE-2013-4235.html * https://bugzilla.suse.com/show_bug.cgi?id=916845

1 0

SUSE-SU-2024:2633-1: important: Security update for gtk3
by OPENSUSE-UPDATES 30 Jul '24

30 Jul '24

# Security update for gtk3 Announcement ID: SUSE-SU-2024:2633-1 Rating: important References: * bsc#1228120 Cross-References: * CVE-2024-6655 CVSS scores: * CVE-2024-6655 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for gtk3 fixes the following issues: * CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2633=1 openSUSE-SLE-15.6-2024-2633=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2633=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2633=1 ## Package List: * openSUSE Leap 15.6 (noarch) * gtk3-lang-3.24.38+111-150600.3.3.1 * gtk3-devel-doc-3.24.38+111-150600.3.3.1 * gtk3-branding-upstream-3.24.38+111-150600.3.3.1 * gtk3-schema-3.24.38+111-150600.3.3.1 * gettext-its-gtk3-3.24.38+111-150600.3.3.1 * gtk3-data-3.24.38+111-150600.3.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * typelib-1_0-Gtk-3_0-3.24.38+111-150600.3.3.1 * gtk3-immodule-thai-3.24.38+111-150600.3.3.1 * gtk3-immodule-xim-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-tools-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-amharic-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-amharic-3.24.38+111-150600.3.3.1 * gtk3-immodule-vietnamese-debuginfo-3.24.38+111-150600.3.3.1 * libgtk-3-0-3.24.38+111-150600.3.3.1 * gtk3-immodule-thai-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-inuktitut-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-vietnamese-3.24.38+111-150600.3.3.1 * gtk3-devel-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-broadway-3.24.38+111-150600.3.3.1 * gtk3-immodule-xim-3.24.38+111-150600.3.3.1 * gtk3-debugsource-3.24.38+111-150600.3.3.1 * gtk3-tools-3.24.38+111-150600.3.3.1 * gtk3-immodule-multipress-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-devel-3.24.38+111-150600.3.3.1 * gtk3-immodule-broadway-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-multipress-3.24.38+111-150600.3.3.1 * gtk3-immodule-tigrigna-3.24.38+111-150600.3.3.1 * gtk3-immodule-inuktitut-3.24.38+111-150600.3.3.1 * gtk3-immodule-tigrigna-debuginfo-3.24.38+111-150600.3.3.1 * libgtk-3-0-debuginfo-3.24.38+111-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * gtk3-immodule-vietnamese-32bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-thai-32bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-multipress-32bit-3.24.38+111-150600.3.3.1 * gtk3-devel-32bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-multipress-32bit-debuginfo-3.24.38+111-150600.3.3.1 * libgtk-3-0-32bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-devel-32bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-amharic-32bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-xim-32bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-xim-32bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-tools-32bit-debuginfo-3.24.38+111-150600.3.3.1 * libgtk-3-0-32bit-3.24.38+111-150600.3.3.1 * gtk3-tools-32bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-amharic-32bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-tigrigna-32bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-thai-32bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-inuktitut-32bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-tigrigna-32bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-vietnamese-32bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-inuktitut-32bit-debuginfo-3.24.38+111-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * gtk3-immodule-thai-64bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-vietnamese-64bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-amharic-64bit-3.24.38+111-150600.3.3.1 * gtk3-devel-64bit-3.24.38+111-150600.3.3.1 * gtk3-tools-64bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-thai-64bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-inuktitut-64bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-multipress-64bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-tigrigna-64bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-multipress-64bit-3.24.38+111-150600.3.3.1 * libgtk-3-0-64bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-inuktitut-64bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-tools-64bit-3.24.38+111-150600.3.3.1 * libgtk-3-0-64bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-vietnamese-64bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-xim-64bit-3.24.38+111-150600.3.3.1 * gtk3-immodule-xim-64bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-amharic-64bit-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-immodule-tigrigna-64bit-3.24.38+111-150600.3.3.1 * gtk3-devel-64bit-debuginfo-3.24.38+111-150600.3.3.1 * Basesystem Module 15-SP6 (noarch) * gtk3-lang-3.24.38+111-150600.3.3.1 * gtk3-schema-3.24.38+111-150600.3.3.1 * gtk3-data-3.24.38+111-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libgtk-3-0-3.24.38+111-150600.3.3.1 * typelib-1_0-Gtk-3_0-3.24.38+111-150600.3.3.1 * gtk3-tools-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-debugsource-3.24.38+111-150600.3.3.1 * gtk3-devel-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-tools-3.24.38+111-150600.3.3.1 * libgtk-3-0-debuginfo-3.24.38+111-150600.3.3.1 * gtk3-devel-3.24.38+111-150600.3.3.1 * Desktop Applications Module 15-SP6 (noarch) * gtk3-devel-doc-3.24.38+111-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-6655.html * https://bugzilla.suse.com/show_bug.cgi?id=1228120

1 0

SUSE-SU-2024:2638-1: moderate: Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont
by OPENSUSE-UPDATES 30 Jul '24

30 Jul '24

# Security update for cdi-apiserver-container, cdi-cloner-container, cdi- controller-container, cdi-importer-container, cdi-operator-container, cdi- uploadproxy-container, cdi-uploadserver-container, cont Announcement ID: SUSE-SU-2024:2638-1 Rating: moderate References: Affected Products: * Containers Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller- container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy- container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.59.0 * Release notes https://github.com/kubevirt/containerized-data- importer/releases/tag/v1.59.0 * Release notes https://github.com/kubevirt/containerized-data- importer/releases/tag/v1.58.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-2638=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2638=1 openSUSE-SLE-15.6-2024-2638=1 ## Package List: * Containers Module 15-SP6 (x86_64) * containerized-data-importer-manifests-1.59.0-150600.3.6.1 * openSUSE Leap 15.6 (x86_64) * containerized-data-importer-cloner-1.59.0-150600.3.6.1 * containerized-data-importer-uploadserver-debuginfo-1.59.0-150600.3.6.1 * containerized-data-importer-operator-debuginfo-1.59.0-150600.3.6.1 * containerized-data-importer-controller-1.59.0-150600.3.6.1 * containerized-data-importer-operator-1.59.0-150600.3.6.1 * containerized-data-importer-uploadproxy-1.59.0-150600.3.6.1 * containerized-data-importer-uploadserver-1.59.0-150600.3.6.1 * containerized-data-importer-importer-1.59.0-150600.3.6.1 * obs-service-cdi_containers_meta-1.59.0-150600.3.6.1 * containerized-data-importer-manifests-1.59.0-150600.3.6.1 * containerized-data-importer-importer-debuginfo-1.59.0-150600.3.6.1 * containerized-data-importer-uploadproxy-debuginfo-1.59.0-150600.3.6.1 * containerized-data-importer-controller-debuginfo-1.59.0-150600.3.6.1 * containerized-data-importer-api-1.59.0-150600.3.6.1 * containerized-data-importer-cloner-debuginfo-1.59.0-150600.3.6.1 * containerized-data-importer-api-debuginfo-1.59.0-150600.3.6.1

1 0

SUSE-SU-2024:2639-1: moderate: Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t
by OPENSUSE-UPDATES 30 Jul '24

30 Jul '24

# Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t Announcement ID: SUSE-SU-2024:2639-1 Rating: moderate References: Affected Products: * Containers Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for kubevirt, virt-api-container, virt-controller-container, virt- exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator- container, virt-pr-helper-container fixes the following issues: * Update to version 1.2.2 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.2 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.0 * Use predefined configuration files for libvirt * Install psmisc (provides killall for tests) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2639=1 openSUSE-SLE-15.6-2024-2639=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-2639=1 ## Package List: * openSUSE Leap 15.6 (x86_64) * kubevirt-tests-1.2.2-150600.5.6.1 * kubevirt-virt-api-1.2.2-150600.5.6.1 * kubevirt-container-disk-1.2.2-150600.5.6.1 * kubevirt-virt-exportproxy-1.2.2-150600.5.6.1 * kubevirt-virt-exportserver-1.2.2-150600.5.6.1 * kubevirt-pr-helper-conf-1.2.2-150600.5.6.1 * kubevirt-virt-api-debuginfo-1.2.2-150600.5.6.1 * kubevirt-virt-launcher-debuginfo-1.2.2-150600.5.6.1 * kubevirt-virt-launcher-1.2.2-150600.5.6.1 * kubevirt-virt-handler-debuginfo-1.2.2-150600.5.6.1 * kubevirt-virt-controller-1.2.2-150600.5.6.1 * kubevirt-virt-handler-1.2.2-150600.5.6.1 * kubevirt-virt-exportproxy-debuginfo-1.2.2-150600.5.6.1 * kubevirt-virt-controller-debuginfo-1.2.2-150600.5.6.1 * kubevirt-virt-operator-1.2.2-150600.5.6.1 * kubevirt-virt-operator-debuginfo-1.2.2-150600.5.6.1 * kubevirt-virt-exportserver-debuginfo-1.2.2-150600.5.6.1 * kubevirt-virtctl-debuginfo-1.2.2-150600.5.6.1 * kubevirt-container-disk-debuginfo-1.2.2-150600.5.6.1 * kubevirt-tests-debuginfo-1.2.2-150600.5.6.1 * kubevirt-virtctl-1.2.2-150600.5.6.1 * obs-service-kubevirt_containers_meta-1.2.2-150600.5.6.1 * kubevirt-manifests-1.2.2-150600.5.6.1 * Containers Module 15-SP6 (x86_64) * kubevirt-virtctl-1.2.2-150600.5.6.1 * kubevirt-manifests-1.2.2-150600.5.6.1 * kubevirt-virtctl-debuginfo-1.2.2-150600.5.6.1

1 0

openSUSE-RU-2024:0228-1: moderate: Recommended update for python-csvkit
by maintenance＠opensuse.org 29 Jul '24

29 Jul '24

openSUSE Recommended Update: Recommended update for python-csvkit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0228-1 Rating: moderate References: #1227705 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-csvkit fixes the following issues: - Add missing Requires. (boo#1227705) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-228=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-csvkit-1.0.5-bp155.3.3.1 References: https://bugzilla.suse.com/1227705

1 0

SUSE-RU-2024:2613-1: moderate: Recommended update for qclib
by OPENSUSE-UPDATES 29 Jul '24

29 Jul '24

# Recommended update for qclib Announcement ID: SUSE-RU-2024:2613-1 Rating: moderate References: * bsc#1214466 * bsc#1216212 * bsc#1216257 * bsc#1217923 * bsc#1219227 * bsc#1222143 * bsc#1222282 * bsc#1222675 * bsc#1223090 * bsc#1226609 * jsc#PED-3223 * jsc#PED-3275 * jsc#PED-3284 * jsc#PED-3285 * jsc#PED-4604 * jsc#PED-578 * jsc#PED-5783 * jsc#PED-585 * jsc#PED-626 * jsc#PED-6539 * jsc#PED-6649 * jsc#PED-6785 * jsc#PED-7136 * jsc#PED-7138 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 An update that contains 14 features and has 10 fixes can now be installed. ## Description: This update for qclib fixes the following issues: * Upgrade qclib to version 2.4.1 for SP4 LTSS (bsc#1214466) * Applied a patch to change the _PATH_MOUNTED (bsc#1222143) Upgrade to version 2.4.1 (jsc#PED-3285) * Handle systems with `/sys/kernel/security/lockdown` enabled * Consistency check: Fix accounting of reserved cores and CPUs * Trace: Fix display of version information * Doxygen config: Remove unused options * Applied a patch to work under kernel lockdown (bsc#1216212,bsc#1214466) Upgrade to version 2.4.0 (jsc#PED-3284, jsc#PED-3285): * Recognize single frame models and rackable models * zname: Add support for option --json * qc_dump: Add trace and JSON dump to .tgz Upgraded to version 2.3.2 (jsc#PED-585, jsc#PED-626) * Recognize IBM LinuxONE Emperor 4 * Recognize IBM z16 s390-tools was updated to 2.30.1: * Added print for 'qc_type_name', amended the layers (bsc#1226609) * s390-tools-genprotimg-data needs to require filesystem in order to ensure we are not installed before potential UsrMerge migration code was running (boo#1223090). * Added recommends s390-tools-genprotimg-data * Updated to enable Secure Execution in the Cloud (bsc#1222675) * Creates a s390-tools-genprotimg-data-*.noarch.rpm package which includes s390x bootload binaries for x86_64: * /lib/s390-tools/stage3.bin * /usr/share/s390-tools/genprotimg/stage3a.bin * /usr/share/s390-tools/genprotimg/stage3b_reloc.bin * Excludes the above binaries from the (main) s390-tools-*.s390x.rpm * Requires: s390-tools-genprotimg-data * SE-tooling: New IBM host-key subject locality (s390-tools) (bsc#1222282) * Provide groups as required by RPM 4.19 Upgrade s390-tools to version 2.31 (jsc#PED-3275, jsc#PED-3223): * General: * common.mak: Set default C/C++ standard to gnu11/gnu++11 * Add new tools / libraries: * pvapconfig: Tool to automatically configure APQNs in SE KVM guests * s390-tools: Provide pre-commit configuration * Changes of existing tools: * cpuplugd: Adjust to CPU 0 being no longer hotpluggable * dbginfo.sh: Check for Dynamic Partition Mode * dbginfo.sh: Update man page and copyright * rust/pv: Add user-data signing and verifying * rust/pvsecret: Add user defined signatures and verifications * zdev/dracut: Consolidate device configuration * Bug Fixes: * dbginfo.sh: Fix relative path on script copy * libkmipclient: Fix build with libxml2-2.12.0 * pvsecret: Fix panic if empty file is used as host key document * rust/pv: Fix 'elided_lifetimes_in_associated_constant' warning * Updated read_values.c (bsc#1219227) * Amended read_values for '-S' option (bsc#1217923) Upgrade s390-tools to version 2.30: (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604, jsc#PED-6649, jsc#PED-7138 ) * Add new tools / libraries: * lspai: Tool to display PAI counter sets * s390-tools: Provide a ShellCheck configuration * Changes of existing tools / libraries: * cpumf/pai: Add command line option for realtime scheduling * dbginfo.sh: enhance ethtool collection for ROCE * libutil/util_lockfile: add routine to return owning pid of file lock * lszcrypt: Improve lszcrypt output on SE guests * rust: Use a single workspace for all rust tools * zdev: limit the derivation of ZDEV_SITE_ID * zdump/df_s390: Update 'zgetdump -i' output with zlib info * zdump/dfi_s390: Support reading compressed s390_ext dumps * zipl/boot: Integrate zlib compression to single volume DASD dumper * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x * zipl: Add --no-compress option to zipl command * zkey: Also check for deconfigured and check-stopped cards * Bug Fixes: * ap_tools/ap-check: handle get-attributes between pre and post event * libutil: fix util_file_read_*() using wrong format specifiers * rust/pv: fix Invalid write of size Provide s390-tools on x86_64 to enable Secure Execution in the Cloud (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138) * Selected tools from the s390-tools package need to be made available on x86_64. This will enable the integration of IBM Z machines running Secure Execution in a cloud environment where users don't necessarily need to have an s390x environment. * genprotimg - (for building secure images) * pvsecret - * pvattest - (for external attestation) * pvextract-hdr - * Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest) * General: * s390-tools now supports tools written in Rust. * Add compdb Makefile target to create 'compile_commands.json' to support LSP * backends in IDEs and editors * Add new tools / libraries: * rust/pv: Library for pv tools written in rust * rust/pvsecret: Tool to manage UV-secrets * Changes of existing tools: * dbginfo.sh: Global IFS variable * genprotimg: Add support for add-secret requests * genprotimg: Build debuginfo files for bootloader * hyptop: Add real SMT utilization field * hyptop: Allow users to set speedup factor * pvattest: Add yaml-output for verify command * zipl: Build debuginfo files for bootloader * Bug Fixes: * dump2tar: Fix truncated paths * zdev/dracut: fix kdump build to integrate with site support Update to v2.28.0: * Changes of existing tools: * chzcrypt: Support for SE AP pass-through support * genprotimg: Add support for non-s390x architectures * lszcrypt: Support for SE AP pass-through support * zdev: Add support for autoquiesce related sysfs attributes * Bug Fixes: * ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs * ap_tools/ap-check: Hold ap config file lock over get attributes * s390-tools: Fix build for ppc64le * zdev: Add missing label in the udev-rules * zdev: Add proper value input for the ZDEV_SITE_ID key * zdev: Use rename-file to avoid any symlinks created * zipl/dump: fix ngdump dracut helper script Update to v2.27.0: * Changes of existing tools: * s390-tools cross-compile and non-s390x support: * pkg-config is now mandatory for the build process * Add PKG_CONFIG Makefile variable to select pkg-config program; * default pkg-config or $(CROSS_COMPILE)pkg-config if * CROSS_COMPILE is set * Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the architecture that will run the produced (executable) objects * Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the architecture of the build system. For each Makefile variable like CC, LINK, CPP, ... there is a suffixed version of it - e.g. CC_FOR_BUILD. This is useful for cross compiling, and this naming convention is very similar to the Meson convention (see https://mesonbuild.com/Reference-tables.html#environment-variables-per-mach…) * Limit build targets for non-s390x architectures (pvattest) * dasdfmt: Fall back to full format if space release fails * dbginfo.sh: Add nstat for network and SNMP stats * dbginfo.sh: Rework crypto data collection * hyptop: Show thread util by default * zipl: Add support for list-directed IPL dump from ECKD DASD * Bug Fixes: * lszcrypt: Fix argument parsing * zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment * ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev * pvextract-hdr: Fix parsing issues on little-endian systems Updat to v2.26.0: * Remove tools / libraries: * Remove vmconvert and libvmdump in favor of vmdump file support in zdump * Changes of existing tools: * ipl_tools: Add support for list-directed IPL from ECKD DASD * lszcrypt: Display hardware filtering support capability * vmur: Remove option -c for dump file conversion (See zdump changes) * zdev: Add zfcp ber_stop parameter handling * zdump: Add vmdump dfi for vmdump format to elf format * zkey: Support EP11 host library version * Bug Fixes: * zipl: Move dump parmline processing and verification * zipl/genprotimg: Various build improvements * Update read_values.c to support the new IBM z Processors * Updated SUSE's tools and their corresponding man pages (bsc#1216257) * ctc_configure * dasd_configure.opensuse * dasd_configure.8 * dasd_configure.suse * mkdump.pl.opensuse * mkdump.pl.suse * qeth_configure * qeth_configure.8 * zfcp_disk_configure * zfcp_disk_configure.8 * zfcp_host_configure.8 * zfcp_host_configure * Updated cputype script * Amended cputype to support the new IBM z Processors ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2613=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2613=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2613=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2613=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2613=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2613=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (s390x) * libkmipclient1-2.31.0-150400.7.27.1 * s390-tools-debuginfo-2.31.0-150400.7.27.1 * libekmfweb1-debuginfo-2.31.0-150400.7.27.1 * libkmipclient1-debuginfo-2.31.0-150400.7.27.1 * s390-tools-2.31.0-150400.7.27.1 * libekmfweb1-2.31.0-150400.7.27.1 * s390-tools-debugsource-2.31.0-150400.7.27.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * s390-tools-genprotimg-data-2.31.0-150400.7.27.1 * SUSE Linux Enterprise Micro 5.4 (s390x) * libkmipclient1-2.31.0-150400.7.27.1 * s390-tools-debuginfo-2.31.0-150400.7.27.1 * libekmfweb1-debuginfo-2.31.0-150400.7.27.1 * libkmipclient1-debuginfo-2.31.0-150400.7.27.1 * s390-tools-2.31.0-150400.7.27.1 * libekmfweb1-2.31.0-150400.7.27.1 * s390-tools-debugsource-2.31.0-150400.7.27.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * s390-tools-genprotimg-data-2.31.0-150400.7.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (s390x) * libkmipclient1-2.31.0-150400.7.27.1 * s390-tools-debuginfo-2.31.0-150400.7.27.1 * libkmipclient1-debuginfo-2.31.0-150400.7.27.1 * s390-tools-2.31.0-150400.7.27.1 * libqc2-debuginfo-2.4.1-150400.3.3.1 * osasnmpd-debuginfo-2.31.0-150400.7.27.1 * libqc2-2.4.1-150400.3.3.1 * qclib-devel-static-2.4.1-150400.3.3.1 * qclib-debugsource-2.4.1-150400.3.3.1 * osasnmpd-2.31.0-150400.7.27.1 * s390-tools-chreipl-fcp-mpath-2.31.0-150400.7.27.1 * s390-tools-hmcdrvfs-debuginfo-2.31.0-150400.7.27.1 * qclib-2.4.1-150400.3.3.1 * libekmfweb1-debuginfo-2.31.0-150400.7.27.1 * libekmfweb1-2.31.0-150400.7.27.1 * qclib-debuginfo-2.4.1-150400.3.3.1 * qclib-devel-2.4.1-150400.3.3.1 * s390-tools-zdsfs-debuginfo-2.31.0-150400.7.27.1 * s390-tools-zdsfs-2.31.0-150400.7.27.1 * libekmfweb1-devel-2.31.0-150400.7.27.1 * s390-tools-hmcdrvfs-2.31.0-150400.7.27.1 * s390-tools-debugsource-2.31.0-150400.7.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * s390-tools-genprotimg-data-2.31.0-150400.7.27.1 * openSUSE Leap 15.4 (s390x x86_64) * s390-tools-debuginfo-2.31.0-150400.7.27.1 * s390-tools-debugsource-2.31.0-150400.7.27.1 * s390-tools-2.31.0-150400.7.27.1 * openSUSE Leap 15.4 (s390x) * s390-tools-zdsfs-debuginfo-2.31.0-150400.7.27.1 * s390-tools-zdsfs-2.31.0-150400.7.27.1 * qclib-2.4.1-150400.3.3.1 * qclib-devel-static-2.4.1-150400.3.3.1 * libekmfweb1-devel-2.31.0-150400.7.27.1 * qclib-debugsource-2.4.1-150400.3.3.1 * libkmipclient1-2.31.0-150400.7.27.1 * osasnmpd-2.31.0-150400.7.27.1 * libekmfweb1-debuginfo-2.31.0-150400.7.27.1 * libkmipclient1-debuginfo-2.31.0-150400.7.27.1 * libkmipclient1-devel-2.31.0-150400.7.27.1 * osasnmpd-debuginfo-2.31.0-150400.7.27.1 * s390-tools-hmcdrvfs-2.31.0-150400.7.27.1 * s390-tools-chreipl-fcp-mpath-2.31.0-150400.7.27.1 * libekmfweb1-2.31.0-150400.7.27.1 * s390-tools-hmcdrvfs-debuginfo-2.31.0-150400.7.27.1 * libqc2-debuginfo-2.4.1-150400.3.3.1 * libqc2-2.4.1-150400.3.3.1 * qclib-debuginfo-2.4.1-150400.3.3.1 * qclib-devel-2.4.1-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * s390-tools-genprotimg-data-2.31.0-150400.7.27.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (s390x) * libkmipclient1-2.31.0-150400.7.27.1 * s390-tools-debuginfo-2.31.0-150400.7.27.1 * libekmfweb1-debuginfo-2.31.0-150400.7.27.1 * libkmipclient1-debuginfo-2.31.0-150400.7.27.1 * s390-tools-2.31.0-150400.7.27.1 * libekmfweb1-2.31.0-150400.7.27.1 * s390-tools-debugsource-2.31.0-150400.7.27.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * s390-tools-genprotimg-data-2.31.0-150400.7.27.1 * SUSE Linux Enterprise Micro 5.3 (s390x) * libkmipclient1-2.31.0-150400.7.27.1 * s390-tools-debuginfo-2.31.0-150400.7.27.1 * libekmfweb1-debuginfo-2.31.0-150400.7.27.1 * libkmipclient1-debuginfo-2.31.0-150400.7.27.1 * s390-tools-2.31.0-150400.7.27.1 * libekmfweb1-2.31.0-150400.7.27.1 * s390-tools-debugsource-2.31.0-150400.7.27.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * s390-tools-genprotimg-data-2.31.0-150400.7.27.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1214466 * https://bugzilla.suse.com/show_bug.cgi?id=1216212 * https://bugzilla.suse.com/show_bug.cgi?id=1216257 * https://bugzilla.suse.com/show_bug.cgi?id=1217923 * https://bugzilla.suse.com/show_bug.cgi?id=1219227 * https://bugzilla.suse.com/show_bug.cgi?id=1222143 * https://bugzilla.suse.com/show_bug.cgi?id=1222282 * https://bugzilla.suse.com/show_bug.cgi?id=1222675 * https://bugzilla.suse.com/show_bug.cgi?id=1223090 * https://bugzilla.suse.com/show_bug.cgi?id=1226609 * https://jira.suse.com/browse/PED-3223 * https://jira.suse.com/browse/PED-3275 * https://jira.suse.com/browse/PED-3284 * https://jira.suse.com/browse/PED-3285 * https://jira.suse.com/browse/PED-4604 * https://jira.suse.com/browse/PED-578 * https://jira.suse.com/browse/PED-5783 * https://jira.suse.com/browse/PED-585 * https://jira.suse.com/browse/PED-626 * https://jira.suse.com/browse/PED-6539 * https://jira.suse.com/browse/PED-6649 * https://jira.suse.com/browse/PED-6785 * https://jira.suse.com/browse/PED-7136 * https://jira.suse.com/browse/PED-7138

1 0

openSUSE-SU-2024:0227-1: moderate: Security update for gh
by opensuse-security＠opensuse.org 27 Jul '24

27 Jul '24

openSUSE Security Update: Security update for gh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0227-1 Rating: moderate References: #1227035 Cross-References: CVE-2024-6104 CVSS scores: CVE-2024-6104 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2024-6104 (SUSE): 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gh fixes the following issues: Update to version 2.53.0: * CVE-2024-6104: gh: hashicorp/go-retryablehttp: url might write sensitive information to log file (boo#1227035) * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test due to https://github.com/cli/cli/issues/8928 * Rename package directory and files * Rename package name to `update_branch` * Rename `gh pr update` to `gh pr update-branch` * Add test case for merge conflict error * Handle merge conflict error * Return error if PR is not mergeable * Replace literals with consts for `Mergeable` field values * Add separate type for `PullRequest.Mergeable` field * Remove unused flag * Print message on stdout instead of stderr * Raise error if editor is used in non-tty mode * Add tests for JSON field support on issue and pr view commands * docs: Update documentation for `gh repo create` to clarify owner * Ensure PR does not panic when stateReason is requested * Add `createdAt` field to tests * Add `createdAt` field to `Variable` type * Add test for exporting as JSON * Add test for JSON output * Only populate selected repo information for JSON output * Add test to verify JSON exporter gets set * Add `--json` option support * Use `Variable` type defined in `shared` package * Add tests for JSON output * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared * Fix query parameter name * Update tests to account for ref comparison step * Improve query variable names * Check if PR branch is already up-to-date * Add `ComparePullRequestBaseBranchWith` function * Run `go mod tidy` * Add test to verify `--repo` requires non-empty selector * Require non-empty selector when `--repo` override is used * Run `go mod tidy` * Register `update` command * Add tests for `pr update` command * Add `pr update` command * Add `UpdatePullRequestBranch` method * Upgrade `shurcooL/githubv4` Update to version 2.52.0: * Attestation Verification - Buffer Fix * Remove beta note from attestation top level command * Removed beta note from `gh at download`. * Removed beta note from `gh at verify`, clarified reusable workflows use case. * add `-a` flag to `gh run list` Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-227=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): gh-2.53.0-bp155.2.12.1 - openSUSE Backports SLE-15-SP5 (noarch): gh-bash-completion-2.53.0-bp155.2.12.1 gh-fish-completion-2.53.0-bp155.2.12.1 gh-zsh-completion-2.53.0-bp155.2.12.1 References: https://www.suse.com/security/cve/CVE-2024-6104.html https://bugzilla.suse.com/1227035

1 0

openSUSE-SU-2024:0225-1: moderate: Security update for assimp
by opensuse-security＠opensuse.org 27 Jul '24

27 Jul '24

openSUSE Security Update: Security update for assimp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0225-1 Rating: moderate References: #1218474 #1228142 Cross-References: CVE-2024-40724 CVSS scores: CVE-2024-40724 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for assimp fixes the following issues: - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class (boo#1228142), Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-225=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): assimp-devel-5.2.5-bp155.2.3.1 libassimp5-5.2.5-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-40724.html https://bugzilla.suse.com/1218474 https://bugzilla.suse.com/1228142

1 0

openSUSE-SU-2024:0224-1: moderate: Security update for keybase-client
by opensuse-security＠opensuse.org 26 Jul '24

26 Jul '24

openSUSE Security Update: Security update for keybase-client ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0224-1 Rating: moderate References: #1227167 Cross-References: CVE-2024-24792 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for keybase-client fixes the following issues: - Update the Image dependency to address CVE-2024-24792 (boo#1227167). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-224=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): kbfs-6.2.8-bp155.2.6.1 kbfs-git-6.2.8-bp155.2.6.1 kbfs-tool-6.2.8-bp155.2.6.1 keybase-client-6.2.8-bp155.2.6.1 References: https://www.suse.com/security/cve/CVE-2024-24792.html https://bugzilla.suse.com/1227167

1 0

openSUSE-SU-2024:0223-1: important: Security update for opera
by opensuse-security＠opensuse.org 26 Jul '24

26 Jul '24

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0223-1 Rating: important References: Cross-References: CVE-2024-5493 CVE-2024-5494 CVE-2024-5495 CVE-2024-5496 CVE-2024-5497 CVE-2024-5498 CVE-2024-5499 CVE-2024-5830 CVE-2024-5831 CVE-2024-5832 CVE-2024-5833 CVE-2024-5834 CVE-2024-5835 CVE-2024-5836 CVE-2024-5837 CVE-2024-5838 CVE-2024-5839 CVE-2024-5840 CVE-2024-5841 CVE-2024-5842 CVE-2024-5843 CVE-2024-5844 CVE-2024-5845 CVE-2024-5846 CVE-2024-5847 CVE-2024-6290 CVE-2024-6291 CVE-2024-6292 CVE-2024-6293 CVSS scores: CVE-2024-5830 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5831 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5832 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5833 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5834 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5835 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5836 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5837 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5838 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5839 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2024-5840 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2024-5841 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5842 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5843 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2024-5844 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5845 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5846 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5847 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.6:NonFree ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 112.0.5197.25 * CHR-9787 Update Chromium on desktop-stable-126-5197 to 126.0.6478.127 - The update to chromium 126.0.6478.127 fixes following issues: CVE-2024-6290, CVE-2024-6291, CVE-2024-6292, CVE-2024-6293 - Update to 112.0.5197.24 * CHR-9762 Update Chromium on desktop-stable-126-5197 to 126.0.6478.62 * DNA-117001 Crash at base::internal::check_is_test_impl (base::NotFatalUntil) * DNA-117050 [Settings][Sync] Synchronization options aren't visible * DNA-117076 [Player] Background of the icons has changed and the Tidal icon is now missing * DNA-117109 Browser freezes when trying to remove a tab * DNA-117181 Translations for O112 * DNA-117202 Crash at syncer::SyncServiceImpl::NotifyObservers() * DNA-117295 Remove emoji names field in picker * DNA-117347 Start page is not rendered on first switch to workspace after its creation * DNA-117431 Promote 112 to stable - Complete Opera 112 changelog at: https://blogs.opera.com/desktop/changelog-for-112 - The update to chromium >= 126.0.6478.54 fixes following issues: CVE-2024-5830, CVE-2024-5831, CVE-2024-5832, CVE-2024-5833, CVE-2024-5834, CVE-2024-5835, CVE-2024-5836, CVE-2024-5837, CVE-2024-5838, CVE-2024-5839, CVE-2024-5840, CVE-2024-5841, CVE-2024-5842, CVE-2024-5843, CVE-2024-5844, CVE-2024-5845, CVE-2024-5846, CVE-2024-5847 - Update to 111.0.5168.55 * DNA-116749 Unnecessary icons in the advanced sync settings * DNA-116961 Evaluate #vtvd-as-platform-sw-decoder in the field * DNA-117003 #vtvd-as-platform-sw-decoder is not registered in media unittests Update to 111.0.5168.43 * DNA-115228 Adblocker is blocking ads when turned off * DNA-116605 Crash at opera::BrowserContentsView:: NonClientHitTestPoint(gfx::Point const&) * DNA-116855 Cannot close tab island’s tab when popup was hovered * DNA-116885 Add chrome.cookies api permission to Rich Hints * DNA-116948 [Linux] Theme toggle in settings is not working Update to 111.0.5168.25 * CHR-9754 Update Chromium on desktop-stable-125-5168 to 125.0.6422.142 * DNA-116089 [Win/Lin] Fullscreen view has rounded corners * DNA-116208 The red dot on the Aria’s icon is misaligned * DNA-116693 X (twitter) logo is not available on opera:about page * DNA-116737 [Bookmarks] Bookmarks bar favicon have light theme color in new window * DNA-116769 Extension popup – pin icon is replaced * DNA-116850 Fix full package installer link * DNA-116852 Promote 111 to stable * DNA-116491 Site info popup is cut with dropdown opened * DNA-116661 [opera:settings] IPFS/IPNS Gateway box has the wrong design * DNA-116789 Translations for O111 * DNA-116813 [React emoji picker] Flag emojis are not load correctly * DNA-116893 Put 'Show emojis in tab tooltip' in Settings * DNA-116918 Translations for 'Show emojis in tab tooltip' - Complete Opera 111 changelog at: https://blogs.opera.com/desktop/changelog-for-111 - The update to chromium 125.0.6422.142 fixes following issues: CVE-2024-5493, CVE-2024-5494, CVE-2024-5495, CVE-2024-5496, CVE-2024-5497, CVE-2024-5498, CVE-2024-5499 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6:NonFree: zypper in -t patch openSUSE-2024-223=1 Package List: - openSUSE Leap 15.6:NonFree (x86_64): opera-112.0.5197.25-lp156.2.11.1 References: https://www.suse.com/security/cve/CVE-2024-5493.html https://www.suse.com/security/cve/CVE-2024-5494.html https://www.suse.com/security/cve/CVE-2024-5495.html https://www.suse.com/security/cve/CVE-2024-5496.html https://www.suse.com/security/cve/CVE-2024-5497.html https://www.suse.com/security/cve/CVE-2024-5498.html https://www.suse.com/security/cve/CVE-2024-5499.html https://www.suse.com/security/cve/CVE-2024-5830.html https://www.suse.com/security/cve/CVE-2024-5831.html https://www.suse.com/security/cve/CVE-2024-5832.html https://www.suse.com/security/cve/CVE-2024-5833.html https://www.suse.com/security/cve/CVE-2024-5834.html https://www.suse.com/security/cve/CVE-2024-5835.html https://www.suse.com/security/cve/CVE-2024-5836.html https://www.suse.com/security/cve/CVE-2024-5837.html https://www.suse.com/security/cve/CVE-2024-5838.html https://www.suse.com/security/cve/CVE-2024-5839.html https://www.suse.com/security/cve/CVE-2024-5840.html https://www.suse.com/security/cve/CVE-2024-5841.html https://www.suse.com/security/cve/CVE-2024-5842.html https://www.suse.com/security/cve/CVE-2024-5843.html https://www.suse.com/security/cve/CVE-2024-5844.html https://www.suse.com/security/cve/CVE-2024-5845.html https://www.suse.com/security/cve/CVE-2024-5846.html https://www.suse.com/security/cve/CVE-2024-5847.html https://www.suse.com/security/cve/CVE-2024-6290.html https://www.suse.com/security/cve/CVE-2024-6291.html https://www.suse.com/security/cve/CVE-2024-6292.html https://www.suse.com/security/cve/CVE-2024-6293.html

1 0

openSUSE-SU-2024:0222-1: important: Security update for python-nltk
by opensuse-security＠opensuse.org 26 Jul '24

26 Jul '24

openSUSE Security Update: Security update for python-nltk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0222-1 Rating: important References: #1227174 Cross-References: CVE-2024-39705 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-nltk fixes the following issues: - CVE-2024-39705: Fixed remote code execution through unsafe pickle usage (boo#1227174). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-222=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-nltk-3.7-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2024-39705.html https://bugzilla.suse.com/1227174

1 0

openSUSE-SU-2024:0218-1: important: Security update for exim
by opensuse-security＠opensuse.org 25 Jul '24

25 Jul '24

openSUSE Security Update: Security update for exim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0218-1 Rating: important References: #1227423 Cross-References: CVE-2024-39929 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for exim fixes the following issues: - CVE-2024-39929: Fixed incorrect parsing of multiline rfc2231 header filename (boo#1227423). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-218=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): exim-4.97.1-bp155.5.12.1 eximon-4.97.1-bp155.5.12.1 eximstats-html-4.97.1-bp155.5.12.1 References: https://www.suse.com/security/cve/CVE-2024-39929.html https://bugzilla.suse.com/1227423

1 0

openSUSE-SU-2024:0214-1: moderate: Security update for python-sentry-sdk
by opensuse-security＠opensuse.org 23 Jul '24

23 Jul '24

openSUSE Security Update: Security update for python-sentry-sdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0214-1 Rating: moderate References: #1228128 Cross-References: CVE-2024-40647 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-sentry-sdk fixes the following issues: - CVE-2024-40647: Do not leak environment variables to child processes. (bsc#1228128) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-214=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-sentry-sdk-0.14.4-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2024-40647.html https://bugzilla.suse.com/1228128

1 0

openSUSE-RU-2024:0217-1: moderate: Recommended update for gh
by maintenance＠opensuse.org 23 Jul '24

23 Jul '24

openSUSE Recommended Update: Recommended update for gh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0217-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gh fixes the following issues: Update to version 2.51.0: * Gracefully degrade when fetching annotations fails due to 403 (#9113) * replaced deprecated --json-result flag with --format=json in the gh at docstring. * Specify rpm repository to avoid conflicts with community repositories * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137) * Ensure signed RPMs have attestations Update to version 2.50.0: * Add build provenance for gh CLI releases (#9087) * Add integration tests for `gh attestation verify` shared workflow use case (#9107) * Update readme about MacOS pkg * Remove `v` prefix when `pkgmacos` is called * Integrate argument array to remove duplicate code * Added native min os version blocking * Fix distribution.xml + min macos version requirements * Fix directory already exists * Add a `gh variable get FOO` command (#9106) * Add comment to pr diff regex * Update regex in changedFilesNames to handle quoted paths * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905) * Change minimum build script macOS version * Cleanup pkgmacos build script * Removed redundant specifications * Undo goreleaser change * feat: add support for stateReason in `gh pr view` (#9080) * Update choice title * Update pkg title * remove no-op if clause that returns 'No Aliases' * Conditionalize references, remove redundant alias * list the various alias permutations for the command and subcommands * Remove TODO and add comment on LoginFlow tests * Comment the purpose of the helper config contract * Test git credentials are configured in LoginFlow * Add HelperConfig contract test and FakeHelperConfig * Inject GitCredentialFlow to LoginFlow as test seam * Removed unused param flagDryRun from upgradeFunc * Added summary TTY message to tests * Added TTY message to summarize checking extension upgrades * Add Helper test for Windows * Add tests for gitcredentials Updater * Fix mistaken git installation error check * Move gitcredentials HelperConfig and add tests * Comment the new gitcredentials package * Comment the git credential flow * Remove unnecessary credential setup private method * Use tighter interface in setup-git * Rename gitcredentials Configure to ConfigureOurs * Make gitcredential helper smarter * Move fetching configured helper into gitcredentials * Extract units for configuring and updating git credential helpers * Implement ExportData to filter json fields * fix: rename fields list * feat: add json output for PR checks * Fix doc bug for gh run watch Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-217=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): gh-2.51.0-bp155.2.9.2 - openSUSE Backports SLE-15-SP5 (noarch): gh-bash-completion-2.51.0-bp155.2.9.2 gh-fish-completion-2.51.0-bp155.2.9.2 gh-zsh-completion-2.51.0-bp155.2.9.2 References:

1 0

SUSE-RU-2024:2602-1: moderate: Recommended update for mutter
by OPENSUSE-UPDATES 23 Jul '24

23 Jul '24

# Recommended update for mutter Announcement ID: SUSE-RU-2024:2602-1 Rating: moderate References: * bsc#1219718 Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for mutter fixes the following issue: * Implement linux-drm-syncobj-v1 to fix blink in Chromium and other Xwayland apps (bsc#1219718) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2602=1 openSUSE-SLE-15.6-2024-2602=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2602=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * mutter-45.3-150600.5.9.1 * mutter-debuginfo-45.3-150600.5.9.1 * mutter-devel-45.3-150600.5.9.1 * mutter-debugsource-45.3-150600.5.9.1 * openSUSE Leap 15.6 (noarch) * mutter-lang-45.3-150600.5.9.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * mutter-45.3-150600.5.9.1 * mutter-debuginfo-45.3-150600.5.9.1 * mutter-devel-45.3-150600.5.9.1 * mutter-debugsource-45.3-150600.5.9.1 * Desktop Applications Module 15-SP6 (noarch) * mutter-lang-45.3-150600.5.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219718

1 0

SUSE-SU-2024:2597-1: important: Security update for apache2
by OPENSUSE-UPDATES 23 Jul '24

23 Jul '24

# Security update for apache2 Announcement ID: SUSE-SU-2024:2597-1 Rating: important References: * bsc#1227268 * bsc#1227269 * bsc#1227272 Cross-References: * CVE-2024-36387 * CVE-2024-38475 * CVE-2024-38476 CVSS scores: * CVE-2024-36387 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-38475 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2024-38476 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for apache2 fixes the following issues: * CVE-2024-36387: Fixed DoS by null pointer in websocket over HTTP/2 (bsc#1227272) * CVE-2024-38475: Fixed improper escaping of output in mod_rewrite (bsc#1227268) * CVE-2024-38476: Fixed server may use exploitable/malicious backend application output to run local handlers via internal redirect (bsc#1227269) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2597=1 openSUSE-SLE-15.6-2024-2597=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2597=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2597=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2597=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * apache2-event-2.4.58-150600.5.18.1 * apache2-worker-debuginfo-2.4.58-150600.5.18.1 * apache2-utils-2.4.58-150600.5.18.1 * apache2-worker-2.4.58-150600.5.18.1 * apache2-event-debuginfo-2.4.58-150600.5.18.1 * apache2-debuginfo-2.4.58-150600.5.18.1 * apache2-event-debugsource-2.4.58-150600.5.18.1 * apache2-prefork-2.4.58-150600.5.18.1 * apache2-worker-debugsource-2.4.58-150600.5.18.1 * apache2-prefork-debuginfo-2.4.58-150600.5.18.1 * apache2-2.4.58-150600.5.18.1 * apache2-prefork-debugsource-2.4.58-150600.5.18.1 * apache2-utils-debuginfo-2.4.58-150600.5.18.1 * apache2-utils-debugsource-2.4.58-150600.5.18.1 * apache2-debugsource-2.4.58-150600.5.18.1 * apache2-devel-2.4.58-150600.5.18.1 * openSUSE Leap 15.6 (noarch) * apache2-manual-2.4.58-150600.5.18.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-prefork-2.4.58-150600.5.18.1 * apache2-debuginfo-2.4.58-150600.5.18.1 * apache2-prefork-debuginfo-2.4.58-150600.5.18.1 * apache2-2.4.58-150600.5.18.1 * apache2-prefork-debugsource-2.4.58-150600.5.18.1 * apache2-debugsource-2.4.58-150600.5.18.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-event-2.4.58-150600.5.18.1 * apache2-event-debugsource-2.4.58-150600.5.18.1 * apache2-debuginfo-2.4.58-150600.5.18.1 * apache2-debugsource-2.4.58-150600.5.18.1 * apache2-event-debuginfo-2.4.58-150600.5.18.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-worker-debuginfo-2.4.58-150600.5.18.1 * apache2-utils-2.4.58-150600.5.18.1 * apache2-worker-2.4.58-150600.5.18.1 * apache2-worker-debugsource-2.4.58-150600.5.18.1 * apache2-utils-debuginfo-2.4.58-150600.5.18.1 * apache2-utils-debugsource-2.4.58-150600.5.18.1 * apache2-devel-2.4.58-150600.5.18.1 ## References: * https://www.suse.com/security/cve/CVE-2024-36387.html * https://www.suse.com/security/cve/CVE-2024-38475.html * https://www.suse.com/security/cve/CVE-2024-38476.html * https://bugzilla.suse.com/show_bug.cgi?id=1227268 * https://bugzilla.suse.com/show_bug.cgi?id=1227269 * https://bugzilla.suse.com/show_bug.cgi?id=1227272

1 0

SUSE-SU-2024:2572-1: moderate: Security update for python312
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Security update for python312 Announcement ID: SUSE-SU-2024:2572-1 Rating: moderate References: * bsc#1225660 * bsc#1226447 * bsc#1226448 * bsc#1227152 * bsc#1227378 Cross-References: * CVE-2024-0397 * CVE-2024-4030 * CVE-2024-4032 CVSS scores: * CVE-2024-0397 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2024-4030 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-4032 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities and has two security fixes can now be installed. ## Description: This update for python312 fixes the following issues: * CVE-2024-4032: Corrected information about public and private IPv4 and IPv6 address ranges (bsc#1226448). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2572=1 SUSE-2024-2572=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-2572=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python312-dbm-debuginfo-3.12.4-150600.3.3.1 * libpython3_12-1_0-debuginfo-3.12.4-150600.3.3.1 * python312-base-3.12.4-150600.3.3.1 * python312-idle-3.12.4-150600.3.3.1 * python312-tools-3.12.4-150600.3.3.1 * python312-dbm-3.12.4-150600.3.3.1 * python312-debuginfo-3.12.4-150600.3.3.1 * python312-3.12.4-150600.3.3.1 * python312-devel-3.12.4-150600.3.3.1 * python312-testsuite-3.12.4-150600.3.3.1 * libpython3_12-1_0-3.12.4-150600.3.3.1 * python312-testsuite-debuginfo-3.12.4-150600.3.3.1 * python312-debugsource-3.12.4-150600.3.3.1 * python312-doc-3.12.4-150600.3.3.1 * python312-tk-3.12.4-150600.3.3.1 * python312-curses-3.12.4-150600.3.3.1 * python312-core-debugsource-3.12.4-150600.3.3.1 * python312-curses-debuginfo-3.12.4-150600.3.3.1 * python312-base-debuginfo-3.12.4-150600.3.3.1 * python312-doc-devhelp-3.12.4-150600.3.3.1 * python312-tk-debuginfo-3.12.4-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * libpython3_12-1_0-32bit-3.12.4-150600.3.3.1 * python312-32bit-3.12.4-150600.3.3.1 * python312-32bit-debuginfo-3.12.4-150600.3.3.1 * python312-base-32bit-debuginfo-3.12.4-150600.3.3.1 * python312-base-32bit-3.12.4-150600.3.3.1 * libpython3_12-1_0-32bit-debuginfo-3.12.4-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python312-base-64bit-debuginfo-3.12.4-150600.3.3.1 * libpython3_12-1_0-64bit-debuginfo-3.12.4-150600.3.3.1 * python312-base-64bit-3.12.4-150600.3.3.1 * python312-64bit-3.12.4-150600.3.3.1 * python312-64bit-debuginfo-3.12.4-150600.3.3.1 * libpython3_12-1_0-64bit-3.12.4-150600.3.3.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python312-debuginfo-3.12.4-150600.3.3.1 * python312-dbm-debuginfo-3.12.4-150600.3.3.1 * python312-3.12.4-150600.3.3.1 * python312-devel-3.12.4-150600.3.3.1 * python312-core-debugsource-3.12.4-150600.3.3.1 * libpython3_12-1_0-debuginfo-3.12.4-150600.3.3.1 * python312-dbm-3.12.4-150600.3.3.1 * python312-tk-debuginfo-3.12.4-150600.3.3.1 * python312-base-3.12.4-150600.3.3.1 * python312-curses-debuginfo-3.12.4-150600.3.3.1 * libpython3_12-1_0-3.12.4-150600.3.3.1 * python312-idle-3.12.4-150600.3.3.1 * python312-base-debuginfo-3.12.4-150600.3.3.1 * python312-tk-3.12.4-150600.3.3.1 * python312-tools-3.12.4-150600.3.3.1 * python312-debugsource-3.12.4-150600.3.3.1 * python312-curses-3.12.4-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0397.html * https://www.suse.com/security/cve/CVE-2024-4030.html * https://www.suse.com/security/cve/CVE-2024-4032.html * https://bugzilla.suse.com/show_bug.cgi?id=1225660 * https://bugzilla.suse.com/show_bug.cgi?id=1226447 * https://bugzilla.suse.com/show_bug.cgi?id=1226448 * https://bugzilla.suse.com/show_bug.cgi?id=1227152 * https://bugzilla.suse.com/show_bug.cgi?id=1227378

1 0

SUSE-RU-2024:2573-1: moderate: Recommended update for libkcapi
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Recommended update for libkcapi Announcement ID: SUSE-RU-2024:2573-1 Rating: moderate References: * bsc#1222768 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for libkcapi fixes the following issues: * FIPS: kcapi-hasher: zeroise temporary values for FIPS 140-3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2573=1 openSUSE-SLE-15.6-2024-2573=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2573=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libkcapi-devel-0.13.0-150600.17.3.1 * libkcapi-tools-debuginfo-0.13.0-150600.17.3.1 * libkcapi-debuginfo-0.13.0-150600.17.3.1 * libkcapi0-0.13.0-150600.17.3.1 * libkcapi0-debuginfo-0.13.0-150600.17.3.1 * libkcapi-tools-0.13.0-150600.17.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libkcapi-devel-0.13.0-150600.17.3.1 * libkcapi-tools-debuginfo-0.13.0-150600.17.3.1 * libkcapi-debuginfo-0.13.0-150600.17.3.1 * libkcapi0-0.13.0-150600.17.3.1 * libkcapi0-debuginfo-0.13.0-150600.17.3.1 * libkcapi-tools-0.13.0-150600.17.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222768

1 0

SUSE-SU-2024:2574-1: moderate: Security update for nodejs20
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Security update for nodejs20 Announcement ID: SUSE-SU-2024:2574-1 Rating: moderate References: * bsc#1227554 * bsc#1227560 * bsc#1227561 * bsc#1227562 * bsc#1227563 Cross-References: * CVE-2024-22018 * CVE-2024-22020 * CVE-2024-27980 * CVE-2024-36137 * CVE-2024-36138 * CVE-2024-37372 CVSS scores: * CVE-2024-22018 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N * CVE-2024-22020 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H * CVE-2024-36137 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP6 An update that solves six vulnerabilities can now be installed. ## Description: This update for nodejs20 fixes the following issues: Update to 20.15.1: * CVE-2024-36138: Fixed CVE-2024-27980 fix bypass (bsc#1227560) * CVE-2024-22020: Fixed a bypass of network import restriction via data URL (bsc#1227554) * CVE-2024-22018: Fixed fs.lstat bypasses permission model (bsc#1227562) * CVE-2024-36137: Fixed fs.fchown/fchmod bypasses permission model (bsc#1227561) * CVE-2024-37372: Fixed Permission model improperly processes UNC paths (bsc#1227563) Changes in 20.15.0: * test_runner: support test plans * inspector: introduce the --inspect-wait flag * zlib: expose zlib.crc32() * cli: allow running wasm in limited vmem with --disable-wasm-trap-handler Changes in 20.14.0 * src,permission: throw async errors on async APIs * test_runner: support forced exit Changes in 20.13.1: * buffer: improve base64 and base64url performance * crypto: deprecate implicitly shortened GCM tags * events,doc: mark CustomEvent as stable * fs: add stacktrace to fs/promises * report: add --report-exclude-network option * src: add uv_get_available_memory to report and process * stream: support typed arrays * util: support array of formats in util.styleText * v8: implement v8.queryObjects() for memory leak regression testing * watch: mark as stable ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2574=1 openSUSE-SLE-15.6-2024-2574=1 * Web and Scripting Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP6-2024-2574=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * npm20-20.15.1-150600.3.3.2 * nodejs20-debugsource-20.15.1-150600.3.3.2 * nodejs20-devel-20.15.1-150600.3.3.2 * nodejs20-20.15.1-150600.3.3.2 * corepack20-20.15.1-150600.3.3.2 * nodejs20-debuginfo-20.15.1-150600.3.3.2 * openSUSE Leap 15.6 (noarch) * nodejs20-docs-20.15.1-150600.3.3.2 * Web and Scripting Module 15-SP6 (aarch64 ppc64le s390x x86_64) * npm20-20.15.1-150600.3.3.2 * nodejs20-debugsource-20.15.1-150600.3.3.2 * nodejs20-devel-20.15.1-150600.3.3.2 * nodejs20-20.15.1-150600.3.3.2 * nodejs20-debuginfo-20.15.1-150600.3.3.2 * Web and Scripting Module 15-SP6 (noarch) * nodejs20-docs-20.15.1-150600.3.3.2 ## References: * https://www.suse.com/security/cve/CVE-2024-22018.html * https://www.suse.com/security/cve/CVE-2024-22020.html * https://www.suse.com/security/cve/CVE-2024-27980.html * https://www.suse.com/security/cve/CVE-2024-36137.html * https://www.suse.com/security/cve/CVE-2024-36138.html * https://www.suse.com/security/cve/CVE-2024-37372.html * https://bugzilla.suse.com/show_bug.cgi?id=1227554 * https://bugzilla.suse.com/show_bug.cgi?id=1227560 * https://bugzilla.suse.com/show_bug.cgi?id=1227561 * https://bugzilla.suse.com/show_bug.cgi?id=1227562 * https://bugzilla.suse.com/show_bug.cgi?id=1227563

1 0

SUSE-SU-2024:2575-1: moderate: Security update for kernel-firmware
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Security update for kernel-firmware Announcement ID: SUSE-SU-2024:2575-1 Rating: moderate References: * bsc#1219458 * bsc#1222319 * bsc#1225600 * bsc#1225601 Cross-References: * CVE-2023-38417 * CVE-2023-47210 CVSS scores: * CVE-2023-38417 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-47210 ( SUSE ): 4.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities and has two security fixes can now be installed. ## Description: This update for kernel-firmware fixes the following issues: * CVE-2023-38417: Fixed improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before version 23.20 (bsc#1225600) * CVE-2023-47210: Fixed improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20 (bsc#1225601) * Update to version 20240712 (git commit ed874ed83cac): * amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics * qcom: add gpu firmwares for x1e80100 chipset (bsc#1219458) * linux-firmware: add firmware for qat_402xx devices * amdgpu: update raven firmware * amdgpu: update SMU 13.0.10 firmware * amdgpu: update SDMA 6.0.3 firmware * amdgpu: update PSP 13.0.10 firmware * amdgpu: update GC 11.0.3 firmware * amdgpu: update vega20 firmware * amdgpu: update PSP 13.0.5 firmware * amdgpu: update PSP 13.0.8 firmware * amdgpu: update vega12 firmware * amdgpu: update vega10 firmware * amdgpu: update VCN 4.0.0 firmware * amdgpu: update SDMA 6.0.0 firmware * amdgpu: update PSP 13.0.0 firmware * amdgpu: update GC 11.0.0 firmware * amdgpu: update picasso firmware * amdgpu: update beige goby firmware * amdgpu: update vangogh firmware * amdgpu: update dimgrey cavefish firmware * amdgpu: update navy flounder firmware * amdgpu: update PSP 13.0.11 firmware * amdgpu: update GC 11.0.4 firmware * amdgpu: update green sardine firmware * amdgpu: update VCN 4.0.2 firmware * amdgpu: update SDMA 6.0.1 firmware * amdgpu: update PSP 13.0.4 firmware * amdgpu: update GC 11.0.1 firmware * amdgpu: update sienna cichlid firmware * amdgpu: update VPE 6.1.1 firmware * amdgpu: update VCN 4.0.6 firmware * amdgpu: update SDMA 6.1.1 firmware * amdgpu: update PSP 14.0.1 firmware * amdgpu: update GC 11.5.1 firmware * amdgpu: update VCN 4.0.5 firmware * amdgpu: update SDMA 6.1.0 firmware * amdgpu: update PSP 14.0.0 firmware * amdgpu: update GC 11.5.0 firmware * amdgpu: update navi14 firmware * amdgpu: update renoir firmware * amdgpu: update navi12 firmware * amdgpu: update PSP 13.0.6 firmware * amdgpu: update GC 9.4.3 firmware * amdgpu: update yellow carp firmware * amdgpu: update VCN 4.0.4 firmware * amdgpu: update SMU 13.0.7 firmware * amdgpu: update SDMA 6.0.2 firmware * amdgpu: update PSP 13.0.7 firmware * amdgpu: update GC 11.0.2 firmware * amdgpu: update navi10 firmware * amdgpu: update raven2 firmware * amdgpu: update aldebaran firmware * linux-firmware: Update AMD cpu microcode * linux-firmware: Add ISH firmware file for Intel Lunar Lake platform * amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics * cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 * amdgpu: Update ISP FW for isp v4.1.1 * Update to version 20240622 (git commit 7d931f8afa51): * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 * qcom: Add AIC100 firmware files * Update to version 20240618 (git commit 7d931f8afa51): * amlogic: Update bluetooth firmware binary * linux-firmware: Update firmware file for Intel BlazarU core * linux-firmware: Update firmware file for Intel Bluetooth Magnetor core * linux-firmware: Update firmware file for Intel Bluetooth Solar core * linux-firmware: Update firmware file for Intel Bluetooth Pulsar core * rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB * rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB * amdgpu: update DMCUB to v0.0.222.0 for DCN314 * iwlwifi: add ty/So/Ma firmwares for core88-87 release * iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release * linux-firmware: add new cc33xx firmware for cc33xx chips * cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop * cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops * linux-firmware: Add firmware for Lenovo Thinkbooks * amdgpu: update yellow carp firmware * amdgpu: update VCN 4.0.4 firmware * amdgpu: update SDMA 6.0.2 firmware * amdgpu: update PSP 13.0.7 firmware * amdgpu: update GC 11.0.2 firmware * amdgpu: update navi10 firmware * amdgpu: update raven2 firmware * amdgpu: update raven firmware * amdgpu: update SMU 13.0.10 firmware * amdgpu: update SDMA 6.0.3 firmware * amdgpu: update PSP 13.0.10 firmware * amdgpu: update GC 11.0.3 firmware * amdgpu: update VCN 3.1.2 firmware * amdgpu: update PSP 13.0.5 firmware * amdgpu: update psp 13.0.8 firmware * amdgpu: update vega20 firmware * amdgpu: update vega12 firmware * amdgpu: update vega10 firmware * amdgpu: update VCN 4.0.0 firmware * amdgpu: update smu 13.0.0 firmware * amdgpu: update SDMA 6.0.0 firmware * amdgpu: update PSP 13.0.0 firmware * amdgpu: update GC 11.0.0 firmware * amdgpu: update picasso firmware * amdgpu: update beige goby firmware * amdgpu: update vangogh firmware * amdgpu: update dimgrey cavefish firmware * amdgpu: update green sardine firmware * amdgpu: update navy flounder firmware * amdgpu: update PSP 13.0.11 firmware * amdgpu: update GC 11.0.4 firmware * amdgpu: update VCN 4.0.2 firmware * amdgpu: update SDMA 6.0.1 firmware * amdgpu: update PSP 13.0.4 firmware * amdgpu: update GC 11.0.1 firmware * amdgpu: update sienna cichlid firmware * amdgpu: update VCN 4.0.5 firmware * amdgpu: update PSP 14.0.0 firmware * amdgpu: update GC 11.5.0 firmware * amdgpu: update navi14 firmware * amdgpu: update SMU 13.0.6 firmware * amdgpu: update PSP 13.0.6 firmware * amdgpu: update GC 9.4.3 firmware * amdgpu: update renoir firmware * amdgpu: update navi12 firmware * amdgpu: update aldebaran firmware * amdgpu: add support for PSP 14.0.1 * amdgpu: add support for VPE 6.1.1 * amdgpu: add support for VCN 4.0.6 * amdgpu: add support for SDMA 6.1.1 * amdgpu: add support for GC 11.5.1 * amdgpu: Add support for DCN 3.5.1 * QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00639 * cnm: update chips&media wave521c firmware. * linux-firmware: Add ordinary firmware for RTL8821AU device * Update to version 20240519 (git commit aae8224390e2): * amdgpu: add new ISP 4.1.1 firmware * Update to version 20240510 (git commit 7c2303328d8e): * linux-firmware: Amphion: Update vpu firmware * linux-firmware: Update firmware file for Intel BlazarU core * linux-firmware: Update firmware file for Intel Bluetooth Magnetor core * linux-firmware: Update firmware file for Intel Bluetooth Solar core * linux-firmware: Update firmware file for Intel Bluetooth Solar core * i915: Add BMG DMC v2.06 * linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 * linux-firmware: Update firmware tuning for HP Consumer Laptop * amdgpu: DMCUB updates for various AMDGPU ASICs * rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B * rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops * linux-firmware: Add firmware and tuning for Lenovo Y770S * Update to version 20240426 (git commit 2398d264f953): * amdgpu: DMCUB updates for various AMDGPU ASICs * linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops * i915: Update Xe2LPD DMC to v2.20 * linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 * linux-firmware: Add firmware for Lenovo Thinkbook 13X * ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop * amdgpu: add DMCUB 3.5 firmware * amdgpu: add VPE 6.1.0 firmware * amdgpu: add VCN 4.0.5 firmware * amdgpu: add UMSCH 4.0.0 firmware * amdgpu: add SDMA 6.1.0 firmware * amdgpu: add PSP 14.0.0 firmware * amdgpu: add GC 11.5.0 firmware * amdgpu: update license date * Update to version 20240419 (git commit 7eab37522984): * Montage: update firmware for Mont-TSSE * linux-firmware: Add tuning parameter configs for CS35L41 Firmware * linux-firmware: Fix firmware names for Laptop SSID 104316a3 * linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) * linux-firmware: update firmware for MT7922 WiFi device * iwlwifi: add gl FW for core87-44 release * iwlwifi: add ty/So/Ma firmwares for core87-44 release * iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release * nvidia: Update Tegra210 XUSB firmware to v50.29 * amdgpu: update beige goby firmware * amdgpu: update dimgrey cavefish firmware * amdgpu: update psp 13.0.11 firmware * amdgpu: update gc 11.0.4 firmware * amdgpu: update navy flounder firmware * amdgpu: update renoir firmware * amdgpu: update vcn 4.0.2 firmware * amdgpu: update sdma 6.0.1 firmware * amdgpu: update psp 13.0.4 firmware * amdgpu: update gc 11.0.1 firmware * amdgpu: update sienna cichlid firmware * amdgpu: update vega20 firmware * amdgpu: update yellow carp firmware * amdgpu: update green sardine firmware * amdgpu: update vega12 firmware * amdgpu: update raven2 firmware * amdgpu: update vcn 4.0.4 firmware * amdgpu: update smu 13.0.7 firmware * amdgpu: update sdma 6.0.2 firmware * amdgpu: update ipsp 13.0.7 firmware * amdgpu: update gc 11.0.2 firmware * amdgpu: update vega10 firmware * amdgpu: update raven firmware * amdgpu: update navi14 firmware * amdgpu: update smu 13.0.10 firmware * amdgpu: update sdma 6.0.3 firmware * amdgpu: update psp 13.0.10 firmware * amdgpu: update gc 11.0.3 firmware * amdgpu: update vcn 3.1.2 firmware * amdgpu: update psp 13.0.5 firmware * amdgpu: update gc 10.3.6 firmware * amdgpu: update navi12 firmware * amdgpu: update arcturus firmware * amdgpu: update vangogh firmware * amdgpu: update navi10 firmware * amdgpu: update vcn 4.0.3 firmware * amdgpu: update smu 13.0.6 firmware * amdgpu: update psp 13.0.6 firmware * amdgpu: update gc 9.4.3 firmware * amdgpu: update vcn 4.0.0 firmware * amdgpu: update smu 13.0.0 firmware * amdgpu: update sdma 6.0.0 firmware * amdgpu: update psp 13.0.0 firmware * amdgpu: update gc 11.0.0 firmware * amdgpu: update firmware * amdgpu: update aldebaran firmware * amdgpu: update psp 13.0.8 firmware * amdgpu: update gc 10.3.7 firmware * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 * ath10k: WCN3990: hw1.0: add qcm2290 firmware API file * ath10k: WCN3990: hw1.0: move firmware back from qcom/ location * i915: Add DG2 HuC 7.10.15 * amdgpu: DMCUB updates for various AMDGPU ASICs * linux-firmware: update firmware for en8811h 2.5G ethernet phy * rtw89: 8852c: update fw to v0.27.56.14 * rtw89: 8922a: add firmware v0.35.18.0 * rtw88: Add RTL8703B firmware v11.0.0 * Drop duplicated WHENCE from kernel-firmware-* subpackages (bsc#1222319) * Update to version 20240322 (git commit 9a6a0cc195c1): * mekdiatek: Update mt8186 SOF firmware to v2.0.1 * linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops * Montage: update firmware for Mont-TSSE * WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B * Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 * Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 * Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 * Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 * Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 * amdgpu: DMCUB updates for various AMDGPU ASICs * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 * imx: sdma: update firmware to v3.6/v4.6 * Update to version 20240312 (git commit 4a404b5bfdb9): * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) * iwlwifi: update 9000-family firmwares to core85-89 * rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA * linux-firmware: update firmware for MT7921 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) * linux-firmware: update firmware for MT7922 WiFi device * linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops * Update to version 20240229 (git commit 977332782302): * amdgpu: Update VCN firmware binaries * Intel IPU2: Add firmware files * brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet * i915: Add Xe2LPD DMC v2.18 * i915: Update MTL DMC v2.21 * Update to version 20240220 (git commit 73b4429fae36): * linux-firmware: update firmware for en8811h 2.5G ethernet phy * linux-firmware: add firmware for MT7996 * xe: First GuC release for LNL and Xe * i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL * linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) * brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet * ice: update ice DDP package to 1.3.36.0 * Intel IPU3 ImgU: Move firmware file under intel/ipu * Intel IPU6: Move firmware binaries under ipu/ * check_whence: Add a check for duplicate link entries * WHENCE: Clean up section separators * linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models * panthor: Add initial firmware for Gen10 Arm Mali GPUs * amdgpu: DMCUB Updates for DCN321: 7.0.38.0 * amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 * qcom: update venus firmware file for v5.4 * Montage: add firmware for Mont-TSSE * amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 * linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware * linux-firmware: Fix filenames for some CS35L41 firmwares for HP ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2575=1 openSUSE-SLE-15.6-2024-2575=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2575=1 ## Package List: * openSUSE Leap 15.6 (noarch) * kernel-firmware-ath12k-20240712-150600.3.3.1 * kernel-firmware-marvell-20240712-150600.3.3.1 * kernel-firmware-nfp-20240712-150600.3.3.1 * kernel-firmware-dpaa2-20240712-150600.3.3.1 * kernel-firmware-chelsio-20240712-150600.3.3.1 * kernel-firmware-prestera-20240712-150600.3.3.1 * kernel-firmware-realtek-20240712-150600.3.3.1 * kernel-firmware-bnx2-20240712-150600.3.3.1 * kernel-firmware-bluetooth-20240712-150600.3.3.1 * kernel-firmware-mellanox-20240712-150600.3.3.1 * kernel-firmware-liquidio-20240712-150600.3.3.1 * kernel-firmware-ath10k-20240712-150600.3.3.1 * ucode-amd-20240712-150600.3.3.1 * kernel-firmware-ueagle-20240712-150600.3.3.1 * kernel-firmware-mediatek-20240712-150600.3.3.1 * kernel-firmware-mwifiex-20240712-150600.3.3.1 * kernel-firmware-atheros-20240712-150600.3.3.1 * kernel-firmware-qcom-20240712-150600.3.3.1 * kernel-firmware-network-20240712-150600.3.3.1 * kernel-firmware-radeon-20240712-150600.3.3.1 * kernel-firmware-i915-20240712-150600.3.3.1 * kernel-firmware-iwlwifi-20240712-150600.3.3.1 * kernel-firmware-serial-20240712-150600.3.3.1 * kernel-firmware-usb-network-20240712-150600.3.3.1 * kernel-firmware-amdgpu-20240712-150600.3.3.1 * kernel-firmware-nvidia-20240712-150600.3.3.1 * kernel-firmware-intel-20240712-150600.3.3.1 * kernel-firmware-ti-20240712-150600.3.3.1 * kernel-firmware-ath11k-20240712-150600.3.3.1 * kernel-firmware-media-20240712-150600.3.3.1 * kernel-firmware-qlogic-20240712-150600.3.3.1 * kernel-firmware-all-20240712-150600.3.3.1 * kernel-firmware-20240712-150600.3.3.1 * kernel-firmware-sound-20240712-150600.3.3.1 * kernel-firmware-platform-20240712-150600.3.3.1 * kernel-firmware-brcm-20240712-150600.3.3.1 * Basesystem Module 15-SP6 (noarch) * kernel-firmware-ath12k-20240712-150600.3.3.1 * kernel-firmware-marvell-20240712-150600.3.3.1 * kernel-firmware-nfp-20240712-150600.3.3.1 * kernel-firmware-dpaa2-20240712-150600.3.3.1 * kernel-firmware-chelsio-20240712-150600.3.3.1 * kernel-firmware-prestera-20240712-150600.3.3.1 * kernel-firmware-realtek-20240712-150600.3.3.1 * kernel-firmware-bnx2-20240712-150600.3.3.1 * kernel-firmware-bluetooth-20240712-150600.3.3.1 * kernel-firmware-mellanox-20240712-150600.3.3.1 * kernel-firmware-liquidio-20240712-150600.3.3.1 * kernel-firmware-ath10k-20240712-150600.3.3.1 * ucode-amd-20240712-150600.3.3.1 * kernel-firmware-ueagle-20240712-150600.3.3.1 * kernel-firmware-mediatek-20240712-150600.3.3.1 * kernel-firmware-mwifiex-20240712-150600.3.3.1 * kernel-firmware-atheros-20240712-150600.3.3.1 * kernel-firmware-qcom-20240712-150600.3.3.1 * kernel-firmware-network-20240712-150600.3.3.1 * kernel-firmware-radeon-20240712-150600.3.3.1 * kernel-firmware-i915-20240712-150600.3.3.1 * kernel-firmware-iwlwifi-20240712-150600.3.3.1 * kernel-firmware-serial-20240712-150600.3.3.1 * kernel-firmware-usb-network-20240712-150600.3.3.1 * kernel-firmware-amdgpu-20240712-150600.3.3.1 * kernel-firmware-nvidia-20240712-150600.3.3.1 * kernel-firmware-intel-20240712-150600.3.3.1 * kernel-firmware-ti-20240712-150600.3.3.1 * kernel-firmware-ath11k-20240712-150600.3.3.1 * kernel-firmware-media-20240712-150600.3.3.1 * kernel-firmware-qlogic-20240712-150600.3.3.1 * kernel-firmware-all-20240712-150600.3.3.1 * kernel-firmware-sound-20240712-150600.3.3.1 * kernel-firmware-platform-20240712-150600.3.3.1 * kernel-firmware-brcm-20240712-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38417.html * https://www.suse.com/security/cve/CVE-2023-47210.html * https://bugzilla.suse.com/show_bug.cgi?id=1219458 * https://bugzilla.suse.com/show_bug.cgi?id=1222319 * https://bugzilla.suse.com/show_bug.cgi?id=1225600 * https://bugzilla.suse.com/show_bug.cgi?id=1225601

1 0

SUSE-SU-2024:2576-1: moderate: Security update for gnome-shell
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Security update for gnome-shell Announcement ID: SUSE-SU-2024:2576-1 Rating: moderate References: * bsc#1215485 * bsc#1225567 Cross-References: * CVE-2023-43090 * CVE-2024-36472 CVSS scores: * CVE-2023-43090 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-43090 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-36472 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for gnome-shell fixes the following issues: * CVE-2024-36472: Fixed portal helper automatically launched without user confirmation (bsc#1225567) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2576=1 openSUSE-SLE-15.6-2024-2576=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2576=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-2576=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * gnome-extensions-45.3-150600.5.6.1 * gnome-shell-45.3-150600.5.6.1 * gnome-shell-debugsource-45.3-150600.5.6.1 * gnome-shell-calendar-debuginfo-45.3-150600.5.6.1 * gnome-shell-debuginfo-45.3-150600.5.6.1 * gnome-shell-devel-45.3-150600.5.6.1 * gnome-shell-calendar-45.3-150600.5.6.1 * openSUSE Leap 15.6 (noarch) * gnome-shell-lang-45.3-150600.5.6.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gnome-extensions-45.3-150600.5.6.1 * gnome-shell-45.3-150600.5.6.1 * gnome-shell-debugsource-45.3-150600.5.6.1 * gnome-shell-debuginfo-45.3-150600.5.6.1 * gnome-shell-devel-45.3-150600.5.6.1 * Desktop Applications Module 15-SP6 (noarch) * gnome-shell-lang-45.3-150600.5.6.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * gnome-shell-calendar-debuginfo-45.3-150600.5.6.1 * gnome-shell-debuginfo-45.3-150600.5.6.1 * gnome-shell-debugsource-45.3-150600.5.6.1 * gnome-shell-calendar-45.3-150600.5.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-43090.html * https://www.suse.com/security/cve/CVE-2024-36472.html * https://bugzilla.suse.com/show_bug.cgi?id=1215485 * https://bugzilla.suse.com/show_bug.cgi?id=1225567

1 0

SUSE-SU-2024:2578-1: important: Security update for java-21-openjdk
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Security update for java-21-openjdk Announcement ID: SUSE-SU-2024:2578-1 Rating: important References: * bsc#1227298 * bsc#1228046 * bsc#1228047 * bsc#1228048 * bsc#1228051 * bsc#1228052 Cross-References: * CVE-2024-21131 * CVE-2024-21138 * CVE-2024-21140 * CVE-2024-21145 * CVE-2024-21147 CVSS scores: * CVE-2024-21131 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-21138 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21140 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-21145 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-21147 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities and has one security fix can now be installed. ## Description: This update for java-21-openjdk fixes the following issues: Updated to version 21.0.4+7 (July 2024 CPU): * CVE-2024-21131: Fixed a potential UTF8 size overflow (bsc#1228046). * CVE-2024-21138: Fixed an infinite loop due to excessive symbol length (bsc#1228047). * CVE-2024-21140: Fixed a pre-loop limit overflow in Range Check Elimination (bsc#1228048). * CVE-2024-21147: Fixed an out-of-bounds access in 2D image handling (bsc#1228052). * CVE-2024-21145: Fixed an index overflow in RangeCheckElimination (bsc#1228051). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2578=1 openSUSE-SLE-15.6-2024-2578=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2578=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * java-21-openjdk-21.0.4.0-150600.3.3.1 * java-21-openjdk-headless-debuginfo-21.0.4.0-150600.3.3.1 * java-21-openjdk-jmods-21.0.4.0-150600.3.3.1 * java-21-openjdk-debugsource-21.0.4.0-150600.3.3.1 * java-21-openjdk-headless-21.0.4.0-150600.3.3.1 * java-21-openjdk-src-21.0.4.0-150600.3.3.1 * java-21-openjdk-debuginfo-21.0.4.0-150600.3.3.1 * java-21-openjdk-devel-21.0.4.0-150600.3.3.1 * java-21-openjdk-devel-debuginfo-21.0.4.0-150600.3.3.1 * java-21-openjdk-demo-21.0.4.0-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * java-21-openjdk-javadoc-21.0.4.0-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * java-21-openjdk-21.0.4.0-150600.3.3.1 * java-21-openjdk-headless-debuginfo-21.0.4.0-150600.3.3.1 * java-21-openjdk-debugsource-21.0.4.0-150600.3.3.1 * java-21-openjdk-headless-21.0.4.0-150600.3.3.1 * java-21-openjdk-debuginfo-21.0.4.0-150600.3.3.1 * java-21-openjdk-devel-21.0.4.0-150600.3.3.1 * java-21-openjdk-devel-debuginfo-21.0.4.0-150600.3.3.1 * java-21-openjdk-demo-21.0.4.0-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21131.html * https://www.suse.com/security/cve/CVE-2024-21138.html * https://www.suse.com/security/cve/CVE-2024-21140.html * https://www.suse.com/security/cve/CVE-2024-21145.html * https://www.suse.com/security/cve/CVE-2024-21147.html * https://bugzilla.suse.com/show_bug.cgi?id=1227298 * https://bugzilla.suse.com/show_bug.cgi?id=1228046 * https://bugzilla.suse.com/show_bug.cgi?id=1228047 * https://bugzilla.suse.com/show_bug.cgi?id=1228048 * https://bugzilla.suse.com/show_bug.cgi?id=1228051 * https://bugzilla.suse.com/show_bug.cgi?id=1228052

1 0

SUSE-SU-2024:2579-1: important: Security update for git
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Security update for git Announcement ID: SUSE-SU-2024:2579-1 Rating: important References: * bsc#1219660 Cross-References: * CVE-2024-24577 CVSS scores: * CVE-2024-24577 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L * CVE-2024-24577 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for git fixes the following issues: * CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2579=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2579=1 openSUSE-SLE-15.6-2024-2579=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2579=1 ## Package List: * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * git-cvs-2.43.0-150600.3.6.1 * git-email-2.43.0-150600.3.6.1 * perl-Git-2.43.0-150600.3.6.1 * git-2.43.0-150600.3.6.1 * git-web-2.43.0-150600.3.6.1 * git-debuginfo-2.43.0-150600.3.6.1 * git-debugsource-2.43.0-150600.3.6.1 * git-daemon-debuginfo-2.43.0-150600.3.6.1 * git-svn-2.43.0-150600.3.6.1 * git-arch-2.43.0-150600.3.6.1 * gitk-2.43.0-150600.3.6.1 * git-daemon-2.43.0-150600.3.6.1 * git-gui-2.43.0-150600.3.6.1 * Development Tools Module 15-SP6 (noarch) * git-doc-2.43.0-150600.3.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * git-credential-libsecret-2.43.0-150600.3.6.1 * git-cvs-2.43.0-150600.3.6.1 * git-email-2.43.0-150600.3.6.1 * git-core-debuginfo-2.43.0-150600.3.6.1 * perl-Git-2.43.0-150600.3.6.1 * git-2.43.0-150600.3.6.1 * git-web-2.43.0-150600.3.6.1 * git-credential-libsecret-debuginfo-2.43.0-150600.3.6.1 * git-debuginfo-2.43.0-150600.3.6.1 * git-p4-2.43.0-150600.3.6.1 * git-core-2.43.0-150600.3.6.1 * git-debugsource-2.43.0-150600.3.6.1 * git-daemon-debuginfo-2.43.0-150600.3.6.1 * git-svn-2.43.0-150600.3.6.1 * git-arch-2.43.0-150600.3.6.1 * gitk-2.43.0-150600.3.6.1 * git-daemon-2.43.0-150600.3.6.1 * git-gui-2.43.0-150600.3.6.1 * openSUSE Leap 15.6 (noarch) * git-doc-2.43.0-150600.3.6.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * git-core-2.43.0-150600.3.6.1 * git-debugsource-2.43.0-150600.3.6.1 * git-core-debuginfo-2.43.0-150600.3.6.1 * git-debuginfo-2.43.0-150600.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24577.html * https://bugzilla.suse.com/show_bug.cgi?id=1219660

1 0

SUSE-RU-2024:2580-1: moderate: Recommended update for dpdk
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Recommended update for dpdk Announcement ID: SUSE-RU-2024:2580-1 Rating: moderate References: * bsc#1219990 * jsc#PED-8465 Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature and has one fix can now be installed. ## Description: This update for dpdk fixes the following issue: * dpdk_nic_bind python: No such file or directory (bsc#1219990)(PED-8465) * Add requires for "which" as dpdk-tools has its dependency ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2580=1 openSUSE-SLE-15.6-2024-2580=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2580=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le x86_64) * dpdk-devel-static-22.11.1-150600.3.3.2 * dpdk-debuginfo-22.11.1-150600.3.3.2 * dpdk-debugsource-22.11.1-150600.3.3.2 * dpdk-tools-22.11.1-150600.3.3.2 * dpdk-examples-debuginfo-22.11.1-150600.3.3.2 * dpdk-kmp-default-debuginfo-22.11.1_k6.4.0_150600.23.7-150600.3.3.2 * libdpdk-23-22.11.1-150600.3.3.2 * dpdk-examples-22.11.1-150600.3.3.2 * dpdk-devel-22.11.1-150600.3.3.2 * dpdk-22.11.1-150600.3.3.2 * dpdk-kmp-default-22.11.1_k6.4.0_150600.23.7-150600.3.3.2 * libdpdk-23-debuginfo-22.11.1-150600.3.3.2 * openSUSE Leap 15.6 (noarch) * dpdk-doc-22.11.1-150600.3.3.2 * dpdk-thunderx-doc-22.11.1-150600.3.3.2 * openSUSE Leap 15.6 (aarch64) * dpdk-thunderx-debugsource-22.11.1-150600.3.3.2 * dpdk-thunderx-kmp-default-22.11.1_k6.4.0_150600.23.7-150600.3.3.2 * dpdk-thunderx-devel-static-22.11.1-150600.3.3.2 * dpdk-thunderx-22.11.1-150600.3.3.2 * dpdk-thunderx-devel-22.11.1-150600.3.3.2 * dpdk-thunderx-debuginfo-22.11.1-150600.3.3.2 * dpdk-thunderx-kmp-default-debuginfo-22.11.1_k6.4.0_150600.23.7-150600.3.3.2 * dpdk-thunderx-tools-22.11.1-150600.3.3.2 * dpdk-thunderx-examples-debuginfo-22.11.1-150600.3.3.2 * dpdk-thunderx-examples-22.11.1-150600.3.3.2 * Server Applications Module 15-SP6 (aarch64 ppc64le x86_64) * dpdk-debuginfo-22.11.1-150600.3.3.2 * dpdk-debugsource-22.11.1-150600.3.3.2 * dpdk-tools-22.11.1-150600.3.3.2 * dpdk-kmp-default-debuginfo-22.11.1_k6.4.0_150600.23.7-150600.3.3.2 * libdpdk-23-22.11.1-150600.3.3.2 * dpdk-devel-22.11.1-150600.3.3.2 * dpdk-22.11.1-150600.3.3.2 * dpdk-kmp-default-22.11.1_k6.4.0_150600.23.7-150600.3.3.2 * libdpdk-23-debuginfo-22.11.1-150600.3.3.2 * Server Applications Module 15-SP6 (aarch64) * dpdk-thunderx-debugsource-22.11.1-150600.3.3.2 * dpdk-thunderx-22.11.1-150600.3.3.2 * dpdk-thunderx-devel-22.11.1-150600.3.3.2 * dpdk-thunderx-debuginfo-22.11.1-150600.3.3.2 * dpdk-thunderx-kmp-default-debuginfo-22.11.1_k6.4.0_150600.23.7-150600.3.3.2 * dpdk-thunderx-kmp-default-22.11.1_k6.4.0_150600.23.7-150600.3.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1219990 * https://jira.suse.com/browse/PED-8465

1 0

SUSE-RU-2024:2581-1: moderate: Recommended update for sssd
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Recommended update for sssd Announcement ID: SUSE-RU-2024:2581-1 Rating: moderate References: * bsc#1226157 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for sssd fixes the following issue: * Revert the change dropping the default configuration file. If /usr/etc exists will be installed there, otherwise in /etc (bsc#1226157) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2581=1 openSUSE-SLE-15.6-2024-2581=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2581=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libipa_hbac-devel-2.9.3-150600.3.9.2 * libsss_simpleifp0-2.9.3-150600.3.9.2 * sssd-krb5-common-debuginfo-2.9.3-150600.3.9.2 * sssd-ipa-debuginfo-2.9.3-150600.3.9.2 * libsss_certmap-devel-2.9.3-150600.3.9.2 * libipa_hbac0-2.9.3-150600.3.9.2 * libnfsidmap-sss-2.9.3-150600.3.9.2 * python3-ipa_hbac-debuginfo-2.9.3-150600.3.9.2 * sssd-ldap-debuginfo-2.9.3-150600.3.9.2 * sssd-dbus-debuginfo-2.9.3-150600.3.9.2 * sssd-ad-2.9.3-150600.3.9.2 * sssd-kcm-debuginfo-2.9.3-150600.3.9.2 * sssd-debuginfo-2.9.3-150600.3.9.2 * python3-sssd-config-2.9.3-150600.3.9.2 * sssd-debugsource-2.9.3-150600.3.9.2 * libsss_certmap0-2.9.3-150600.3.9.2 * sssd-krb5-debuginfo-2.9.3-150600.3.9.2 * sssd-proxy-2.9.3-150600.3.9.2 * sssd-krb5-2.9.3-150600.3.9.2 * libsss_certmap0-debuginfo-2.9.3-150600.3.9.2 * sssd-ad-debuginfo-2.9.3-150600.3.9.2 * sssd-tools-2.9.3-150600.3.9.2 * sssd-winbind-idmap-debuginfo-2.9.3-150600.3.9.2 * libsss_nss_idmap-devel-2.9.3-150600.3.9.2 * sssd-tools-debuginfo-2.9.3-150600.3.9.2 * python3-sss_nss_idmap-2.9.3-150600.3.9.2 * libipa_hbac0-debuginfo-2.9.3-150600.3.9.2 * sssd-winbind-idmap-2.9.3-150600.3.9.2 * libnfsidmap-sss-debuginfo-2.9.3-150600.3.9.2 * libsss_nss_idmap0-2.9.3-150600.3.9.2 * libsss_idmap0-2.9.3-150600.3.9.2 * libsss_nss_idmap0-debuginfo-2.9.3-150600.3.9.2 * python3-sss-murmur-2.9.3-150600.3.9.2 * python3-sss-murmur-debuginfo-2.9.3-150600.3.9.2 * libsss_simpleifp-devel-2.9.3-150600.3.9.2 * sssd-proxy-debuginfo-2.9.3-150600.3.9.2 * python3-ipa_hbac-2.9.3-150600.3.9.2 * python3-sss_nss_idmap-debuginfo-2.9.3-150600.3.9.2 * sssd-2.9.3-150600.3.9.2 * libsss_simpleifp0-debuginfo-2.9.3-150600.3.9.2 * python3-sssd-config-debuginfo-2.9.3-150600.3.9.2 * libsss_idmap0-debuginfo-2.9.3-150600.3.9.2 * sssd-ipa-2.9.3-150600.3.9.2 * libsss_idmap-devel-2.9.3-150600.3.9.2 * sssd-dbus-2.9.3-150600.3.9.2 * sssd-ldap-2.9.3-150600.3.9.2 * sssd-krb5-common-2.9.3-150600.3.9.2 * sssd-kcm-2.9.3-150600.3.9.2 * openSUSE Leap 15.6 (x86_64) * sssd-32bit-2.9.3-150600.3.9.2 * sssd-32bit-debuginfo-2.9.3-150600.3.9.2 * openSUSE Leap 15.6 (aarch64_ilp32) * sssd-64bit-debuginfo-2.9.3-150600.3.9.2 * sssd-64bit-2.9.3-150600.3.9.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libipa_hbac-devel-2.9.3-150600.3.9.2 * libsss_simpleifp0-2.9.3-150600.3.9.2 * sssd-krb5-common-debuginfo-2.9.3-150600.3.9.2 * sssd-ipa-debuginfo-2.9.3-150600.3.9.2 * libsss_certmap-devel-2.9.3-150600.3.9.2 * libipa_hbac0-2.9.3-150600.3.9.2 * sssd-ldap-debuginfo-2.9.3-150600.3.9.2 * sssd-dbus-debuginfo-2.9.3-150600.3.9.2 * sssd-ad-2.9.3-150600.3.9.2 * sssd-kcm-debuginfo-2.9.3-150600.3.9.2 * sssd-debuginfo-2.9.3-150600.3.9.2 * python3-sssd-config-2.9.3-150600.3.9.2 * sssd-debugsource-2.9.3-150600.3.9.2 * libsss_certmap0-2.9.3-150600.3.9.2 * sssd-krb5-debuginfo-2.9.3-150600.3.9.2 * sssd-proxy-2.9.3-150600.3.9.2 * sssd-krb5-2.9.3-150600.3.9.2 * libsss_certmap0-debuginfo-2.9.3-150600.3.9.2 * sssd-ad-debuginfo-2.9.3-150600.3.9.2 * sssd-tools-2.9.3-150600.3.9.2 * sssd-winbind-idmap-debuginfo-2.9.3-150600.3.9.2 * libsss_nss_idmap-devel-2.9.3-150600.3.9.2 * sssd-tools-debuginfo-2.9.3-150600.3.9.2 * libipa_hbac0-debuginfo-2.9.3-150600.3.9.2 * sssd-winbind-idmap-2.9.3-150600.3.9.2 * libsss_nss_idmap0-2.9.3-150600.3.9.2 * libsss_idmap0-2.9.3-150600.3.9.2 * libsss_nss_idmap0-debuginfo-2.9.3-150600.3.9.2 * libsss_simpleifp-devel-2.9.3-150600.3.9.2 * sssd-proxy-debuginfo-2.9.3-150600.3.9.2 * sssd-2.9.3-150600.3.9.2 * libsss_simpleifp0-debuginfo-2.9.3-150600.3.9.2 * python3-sssd-config-debuginfo-2.9.3-150600.3.9.2 * libsss_idmap0-debuginfo-2.9.3-150600.3.9.2 * sssd-ipa-2.9.3-150600.3.9.2 * libsss_idmap-devel-2.9.3-150600.3.9.2 * sssd-dbus-2.9.3-150600.3.9.2 * sssd-ldap-2.9.3-150600.3.9.2 * sssd-krb5-common-2.9.3-150600.3.9.2 * sssd-kcm-2.9.3-150600.3.9.2 * Basesystem Module 15-SP6 (x86_64) * sssd-32bit-2.9.3-150600.3.9.2 * sssd-32bit-debuginfo-2.9.3-150600.3.9.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226157

1 0

SUSE-RU-2024:2582-1: moderate: Recommended update for release-notes-ha
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Recommended update for release-notes-ha Announcement ID: SUSE-RU-2024:2582-1 Rating: moderate References: * bsc#933411 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for release-notes-ha fixes the following issue: * version update, set to maintained (bsc#933411) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2582=1 SUSE-2024-2582=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2024-2582=1 ## Package List: * openSUSE Leap 15.6 (noarch) * release-notes-ha-15.6.20240417-150600.3.3.4 * SUSE Linux Enterprise High Availability Extension 15 SP6 (noarch) * release-notes-ha-15.6.20240417-150600.3.3.4 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=933411

1 0

SUSE-SU-2024:2584-1: important: Security update for libgit2
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Security update for libgit2 Announcement ID: SUSE-SU-2024:2584-1 Rating: important References: * bsc#1219660 * bsc#1219664 Cross-References: * CVE-2024-24575 * CVE-2024-24577 CVSS scores: * CVE-2024-24575 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24575 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24577 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L * CVE-2024-24577 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for libgit2 fixes the following issues: Update to 1.7.2: Security fixes: * CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660) * CVE-2024-24575: Fixed potential infinite loop condition in git_revparse_single() (bsc#1219664) Other fixes: \- A bug in the smart transport negotiation could have caused an out-of-bounds read when a remote server did not advertise capabilities. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2584=1 openSUSE-SLE-15.6-2024-2584=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2584=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libgit2-tools-1.7.2-150600.3.3.1 * libgit2-devel-1.7.2-150600.3.3.1 * libgit2-1_7-debuginfo-1.7.2-150600.3.3.1 * libgit2-debuginfo-1.7.2-150600.3.3.1 * libgit2-debugsource-1.7.2-150600.3.3.1 * libgit2-tools-debuginfo-1.7.2-150600.3.3.1 * libgit2-1_7-1.7.2-150600.3.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libgit2-tools-1.7.2-150600.3.3.1 * libgit2-devel-1.7.2-150600.3.3.1 * libgit2-1_7-debuginfo-1.7.2-150600.3.3.1 * libgit2-debuginfo-1.7.2-150600.3.3.1 * libgit2-debugsource-1.7.2-150600.3.3.1 * libgit2-tools-debuginfo-1.7.2-150600.3.3.1 * libgit2-1_7-1.7.2-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24575.html * https://www.suse.com/security/cve/CVE-2024-24577.html * https://bugzilla.suse.com/show_bug.cgi?id=1219660 * https://bugzilla.suse.com/show_bug.cgi?id=1219664

1 0

SUSE-SU-2024:2585-1: important: Security update for kernel-firmware-nvidia-gspx-G06
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Security update for kernel-firmware-nvidia-gspx-G06 Announcement ID: SUSE-SU-2024:2585-1 Rating: important References: * bsc#1223356 * bsc#1223454 * bsc#1227417 * bsc#1227419 * bsc#1227575 Cross-References: * CVE-2024-0090 * CVE-2024-0091 * CVE-2024-0092 CVSS scores: * CVE-2024-0090 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2024-0091 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-0092 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities and has two security fixes can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06 fixes the following issues: Update to version 555.42.06 for CUDA. Security Update 550.90.07: * CVE-2024-0090: Fixed out of bounds write (bsc#1223356). * CVE-2024-0092: Fixed incorrect exception handling (bsc#1223356). * CVE-2024-0091: Fixed untrusted pointer dereference (bsc#1223356). Changes in kernel-firmware-nvidia-gspx-G06: * Update to 550.100 (bsc#1227575) * Add a second flavor to be used by the kernel module versions used by CUDA. The firmware targetting CUDA contains '-cuda' in its name to track its versions separately from the graphics firmware. (bsc#1227417) Changes in nvidia-open-driver-G06-signed: * Update to 550.100 (bsc#1227575) * Fixed a bug that caused OpenGL triple buffering to behave like double buffering. * To avoid issues with missing dependencies when no CUDA repo is present make the dependecy to nvidia-compute-G06 conditional. * CUDA is not available for Tumbleweed, exclude the build of the cuda flavor. * preamble: let the -cuda flavor KMP require the -cuda flavor firmware * Add a second flavor for building the kernel module versions used by CUDA. The kmp targetting CUDA contains '-cuda' in its name to track its versions separately from the graphics kmp. (bsc#1227417) * Provide the meta package nv-prefer-signed-open-driver to make sure the latest available SUSE-build open driver is installed - independent of the latest available open driver version in he CUDA repository. Rationale: The package cuda-runtime provides the link between CUDA and the kernel driver version through a Requires: cuda-drivers >= %version This implies that a CUDA version will run withany kernel driver version equal or higher than a base version. nvidia-compute-G06 provides the glue layer between CUDA and a specific version of he kernel driver both by providing a set of base libraries and by requiring a specific kernel version. 'cuda-drivers' (provided by nvidia-compute-utils-G06) requires an unversioned nvidia- compute-G06. With this, the resolver will install the latest available and applicable nvidia-compute-G06. nv-prefer-signed-open-driver then represents the latest available open driver version and restricts the nvidia- compute-G06 version to it. (bsc#1227419) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2585=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2585=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2585=1 openSUSE-SLE-15.6-2024-2585=1 ## Package List: * Basesystem Module 15-SP6 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150600.3.7.1 * kernel-firmware-nvidia-gspx-G06-550.100-150600.3.7.1 * Basesystem Module 15-SP6 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-555.42.06_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-default-devel-555.42.06-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-debugsource-555.42.06-150600.3.7.1 * nvidia-open-driver-G06-signed-default-devel-550.100-150600.3.7.1 * nvidia-open-driver-G06-signed-kmp-default-550.100_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-555.42.06_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-debugsource-550.100-150600.3.7.1 * nv-prefer-signed-open-driver-555.42.06-150600.3.7.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.100_k6.4.0_150600.23.7-150600.3.7.1 * Basesystem Module 15-SP6 (aarch64) * nvidia-open-driver-G06-signed-cuda-kmp-64kb-555.42.06_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.100_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-64kb-devel-550.100-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-64kb-devel-555.42.06-150600.3.7.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.100_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-555.42.06_k6.4.0_150600.23.7-150600.3.7.1 * Public Cloud Module 15-SP6 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.100_k6.4.0_150600.8.5-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-azure-devel-555.42.06-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-kmp-azure-debuginfo-555.42.06_k6.4.0_150600.8.5-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-kmp-azure-555.42.06_k6.4.0_150600.8.5-150600.3.7.1 * nvidia-open-driver-G06-signed-azure-devel-550.100-150600.3.7.1 * nvidia-open-driver-G06-signed-kmp-azure-550.100_k6.4.0_150600.8.5-150600.3.7.1 * openSUSE Leap 15.6 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150600.3.7.1 * kernel-firmware-nvidia-gspx-G06-550.100-150600.3.7.1 * openSUSE Leap 15.6 (x86_64) * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.100_k6.4.0_150600.8.5-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-azure-devel-555.42.06-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-kmp-azure-debuginfo-555.42.06_k6.4.0_150600.8.5-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-kmp-azure-555.42.06_k6.4.0_150600.8.5-150600.3.7.1 * nvidia-open-driver-G06-signed-azure-devel-550.100-150600.3.7.1 * nvidia-open-driver-G06-signed-kmp-azure-550.100_k6.4.0_150600.8.5-150600.3.7.1 * openSUSE Leap 15.6 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-555.42.06_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-default-devel-555.42.06-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-debugsource-555.42.06-150600.3.7.1 * nvidia-open-driver-G06-signed-default-devel-550.100-150600.3.7.1 * nvidia-open-driver-G06-signed-kmp-default-550.100_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-555.42.06_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-debugsource-550.100-150600.3.7.1 * nv-prefer-signed-open-driver-555.42.06-150600.3.7.1 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.100_k6.4.0_150600.23.7-150600.3.7.1 * openSUSE Leap 15.6 (aarch64) * nvidia-open-driver-G06-signed-cuda-kmp-64kb-555.42.06_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.100_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-64kb-devel-550.100-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-64kb-devel-555.42.06-150600.3.7.1 * nvidia-open-driver-G06-signed-kmp-64kb-550.100_k6.4.0_150600.23.7-150600.3.7.1 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-555.42.06_k6.4.0_150600.23.7-150600.3.7.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0090.html * https://www.suse.com/security/cve/CVE-2024-0091.html * https://www.suse.com/security/cve/CVE-2024-0092.html * https://bugzilla.suse.com/show_bug.cgi?id=1223356 * https://bugzilla.suse.com/show_bug.cgi?id=1223454 * https://bugzilla.suse.com/show_bug.cgi?id=1227417 * https://bugzilla.suse.com/show_bug.cgi?id=1227419 * https://bugzilla.suse.com/show_bug.cgi?id=1227575

1 0

openSUSE-SU-2024:0212-1: important: Security update for chromium
by opensuse-security＠opensuse.org 22 Jul '24

22 Jul '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0212-1 Rating: important References: #1227979 Cross-References: CVE-2024-6772 CVE-2024-6773 CVE-2024-6774 CVE-2024-6775 CVE-2024-6776 CVE-2024-6777 CVE-2024-6778 CVE-2024-6779 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 126.0.6478.182 (boo#1227979): - CVE-2024-6772: Inappropriate implementation in V8 - CVE-2024-6773: Type Confusion in V8 - CVE-2024-6774: Use after free in Screen Capture - CVE-2024-6775: Use after free in Media Stream - CVE-2024-6776: Use after free in Audio - CVE-2024-6777: Use after free in Navigation - CVE-2024-6778: Race in DevTools - CVE-2024-6779: Out of bounds memory access in V8 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-212=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-126.0.6478.182-bp155.2.99.1 chromium-126.0.6478.182-bp155.2.99.1 References: https://www.suse.com/security/cve/CVE-2024-6772.html https://www.suse.com/security/cve/CVE-2024-6773.html https://www.suse.com/security/cve/CVE-2024-6774.html https://www.suse.com/security/cve/CVE-2024-6775.html https://www.suse.com/security/cve/CVE-2024-6776.html https://www.suse.com/security/cve/CVE-2024-6777.html https://www.suse.com/security/cve/CVE-2024-6778.html https://www.suse.com/security/cve/CVE-2024-6779.html https://bugzilla.suse.com/1227979

1 0

openSUSE-RU-2024:0208-1: moderate: Recommended update for orthanc-ohif
by maintenance＠opensuse.org 22 Jul '24

22 Jul '24

openSUSE Recommended Update: Recommended update for orthanc-ohif ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0208-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for orthanc-ohif fixes the following issues: Version 1.3: * Updated OHIF to 3.8.3 * Enabled support for segmentation and microscopy modes Note that the microscopy mode is not stable yet in OHIF! * Fixed wrong MIME type for app-config.js that prevents the OHIF viewer from loading with Orthanc 1.12.2 Version 1.1: * Download moved to https://orthanc.uclouvain.be/downloads/sources/ * Updated OHIF to 3.7.0 * The default configuration has been adapted to avoid unneccesary transcoding on Orthanc side * make the build of static assets reproducible Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-208=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): orthanc-ohif-1.3-bp155.5.1 References:

1 0

openSUSE-SU-2024:0211-1: moderate: Security update for caddy
by opensuse-security＠opensuse.org 22 Jul '24

22 Jul '24

openSUSE Security Update: Security update for caddy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0211-1 Rating: moderate References: #1222468 Cross-References: CVE-2023-45142 CVE-2024-22189 CVSS scores: CVE-2023-45142 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-22189 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for caddy fixes the following issues: Update to version 2.8.4: * cmd: fix regression in auto-detect of Caddyfile (#6362) * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped Update to version 2.8.2: * cmd: fix auto-detetction of .caddyfile extension (#6356) * caddyhttp: properly sanitize requests for root path (#6360) * caddytls: Implement certmagic.RenewalInfoGetter Update to version 2.8.1: * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350) * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340) Update to version 2.8.0: * acmeserver: Add `sign_with_root` for Caddyfile (#6345) * caddyfile: Reject global request matchers earlier (#6339) * core: Fix bug in AppIfConfigured (fix #6336) * fix a typo (#6333) * autohttps: Move log WARN to INFO, reduce confusion (#6185) * reverseproxy: Support HTTP/3 transport to backend (#6312) * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292) * Fix lint error about deprecated method in smallstep/certificates/authority * go.mod: Upgrade dependencies * caddytls: fix permission requirement with AutomationPolicy (#6328) * caddytls: remove ClientHelloSNICtxKey (#6326) * caddyhttp: Trace individual middleware handlers (#6313) * templates: Add `pathEscape` template function and use it in file browser (#6278) * caddytls: set server name in context (#6324) * chore: downgrade minimum Go version in go.mod (#6318) * caddytest: normalize the JSON config (#6316) * caddyhttp: New experimental handler for intercepting responses (#6232) * httpcaddyfile: Set challenge ports when http_port or https_port are used * logging: Add support for additional logger filters other than hostname (#6082) * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106) * caddyhttp: Alter log message when request is unhandled (close #5182) * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307) * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308) * go.mod: CertMagic v0.21.0 * reverseproxy: Implement health_follow_redirects (#6302) * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298) * go.mod: Upgrade to quic-go v0.43.1 * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301) * caddytls: Ability to drop connections (close #6294) * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288) * caddytls: Evict internal certs from cache based on issuer (#6266) * chore: add warn logs when using deprecated fields (#6276) * caddyhttp: Fix linter warning about deprecation * go.mod: Upgrade to quic-go v0.43.0 * fileserver: Set "Vary: Accept-Encoding" header (see #5849) * events: Add debug log * reverseproxy: handle buffered data during hijack (#6274) * ci: remove `android` and `plan9` from cross-build workflow (#6268) * run `golangci-lint run --fix --fast` (#6270) * caddytls: Option to configure certificate lifetime (#6253) * replacer: Implement `file.*` global replacements (#5463) * caddyhttp: Address some Go 1.20 features (#6252) * Quell linter (false positive) * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264) * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263) * caddytls: Add Caddyfile support for on-demand permission module (close #6260) * reverseproxy: Remove long-deprecated buffering properties * reverseproxy: Reuse buffered request body even if partially drained * reverseproxy: Accept EOF when buffering * logging: Fix default access logger (#6251) * fileserver: Improve Vary handling (#5849) * cmd: Only validate config is proper JSON if config slice has data (#6250) * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249) * encode: Slight fix for the previous commit * encode: Improve Etag handling (fix #5849) * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148) * caddyfile: Populate regexp matcher names by default (#6145) * caddyhttp: record num. bytes read when response writer is hijacked (#6173) * caddyhttp: Support multiple logger names per host (#6088) * chore: fix some typos in comments (#6243) * encode: Configurable compression level for zstd (#6140) * caddytls: Remove shim code supporting deprecated lego-dns (#6231) * connection policy: add `local_ip` matcher (#6074) * reverseproxy: Wait for both ends of websocket to close (#6175) * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229) * caddytls: Still provision permission module if ask is specified * fileserver: read etags from precomputed files (#6222) * fileserver: Escape # and ? in img src (fix #6237) * reverseproxy: Implement modular CA provider for TLS transport (#6065) * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226) * cmd: Fix panic related to config filename (fix #5919) * cmd: Assume Caddyfile based on filename prefix and suffix (#5919) * admin: Make `Etag` a header, not a trailer (#6208) * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234) * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227) * gitignore: Add rule for caddyfile.go (#6225) * chore: Fix broken links in README.md (#6223) * chore: Upgrade some dependencies (#6221) * caddyhttp: Add plaintext response to `file_server browse` (#6093) * admin: Use xxhash for etag (#6207) * modules: fix some typo in conments (#6206) * caddyhttp: Replace sensitive headers with REDACTED (close #5669) * caddyhttp: close quic connections when server closes (#6202) * reverseproxy: Use xxhash instead of fnv32 for LB (#6203) * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182) * chore: remove repetitive word (#6193) * Added a null check to avoid segfault on rewrite query ops (#6191) * rewrite: `uri query` replace operation (#6165) * logging: support `ms` duration format and add docs (#6187) * replacer: use RWMutex to protect static provider (#6184) * caddyhttp: Allow `header` replacement with empty string (#6163) * vars: Make nil values act as empty string instead of `"<nil>"` (#6174) * chore: Update quic-go to v0.42.0 (#6176) * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183) * reverseproxy: configurable active health_passes and health_fails (#6154) * reverseproxy: Configurable forward proxy URL (#6114) * caddyhttp: upgrade to cel v0.20.0 (#6161) * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169) * caddyhttp: suppress flushing if the response is being buffered (#6150) * chore: encode: use FlushError instead of Flush (#6168) * encode: write status immediately when status code is informational (#6164) * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153) * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865) * rewrite: Implement `uri query` operations (#6120) * fix struct names (#6151) * fileserver: Preserve query during canonicalization redirect (#6109) * logging: Implement `log_append` handler (#6066) * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113) * logging: Implement `append` encoder, allow flatter filters config (#6069) * ci: fix the integration test `TestLeafCertLoaders` (#6149) * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108) * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) * cmd: Adjust config load logs/errors (#6032) * reverseproxy: SRV dynamic upstream failover (#5832) * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141) * core: OnExit hooks (#6128) * cmd: fix the output of the `Usage` section (#6138) * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127) * acmeserver: add policy field to define allow/deny rules (#5796) * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115) * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119) * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103) * caddyfile: Assert having a space after heredoc marker to simply check (#6117) * chore: Update Chroma to get the new Caddyfile lexer (#6118) * reverseproxy: use context.WithoutCancel (#6116) * caddyfile: Reject directives in the place of site addresses (#6104) * caddyhttp: Register post-shutdown callbacks (#5948) * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102) * caddyauth: Drop support for `scrypt` (#6091) * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100) * caddyauth: Rename `basicauth` to `basic_auth` (#6092) * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094) * caddyfile: Reject long heredoc markers (#6098) * chore: Rename CI jobs, run on M1 mac (#6089) * fix: add back text/* * fix: add more media types to the compressed by default list * acmeserver: support specifying the allowed challenge types (#5794) * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085) * caddyhttp: Test cases for `%2F` and `%252F` (#6084) * fileserver: Browse can show symlink target if enabled (#5973) * core: Support NO_COLOR env var to disable log coloring (#6078) * Update comment in setcap helper script * caddytls: Make on-demand 'ask' permission modular (#6055) * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945) * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043) * chore: enabling a few more linters (#5961) * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062) * caddyfile: Switch to slices.Equal for better performance (#6061) * tls: modularize trusted CA providers (#5784) * logging: Automatic `wrap` default for `filter` encoder (#5980) * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040) * caddyfile: Normalize & flatten all unmarshalers (#6037) * cmd: reverseproxy: log: use caddy logger (#6042) * matchers: `query` now ANDs multiple keys (#6054) * caddyfile: Add heredoc support to `fmt` command (#6056) * refactor: move automaxprocs init in caddycmd.Main() * caddyfile: Allow heredoc blank lines (#6051) * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965) * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844) * fileserver: Implement caddyfile.Unmarshaler interface (#5850) * reverseproxy: Add `tls_curves` option to HTTP transport (#5851) * caddyhttp: Security enhancements for client IP parsing (#5805) * replacer: Fix escaped closing braces (#5995) * filesystem: Globally declared filesystems, `fs` directive (#5833) * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031) * httpcaddyfile: Fix redir <to> html (#6001) * httpcaddyfile: Support client auth verifiers (#6022) * tls: add reuse_private_keys (#6025) * reverseproxy: Only change Content-Length when full request is buffered (#5830) * Switch Solaris-derivatives away from listen_unix (#6021) * chore: check against errors of `io/fs` instead of `os` (#6011) * caddyhttp: support unix sockets in `caddy respond` command (#6010) * fileserver: Add total file size to directory listing (#6003) * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997) * cmd: use automaxprocs for better perf in containers (#5711) * logging: Add `zap.Option` support (#5944) * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990) * metrics: Record request metrics on HTTP errors (#5979) * go.mod: Updated quic-go to v0.40.1 (#5983) * fileserver: Enable compression for command by default (#5855) * fileserver: New --precompressed flag (#5880) * caddyhttp: Add `uuid` to access logs when used (#5859) * proxyprotocol: use github.com/pires/go-proxyproto (#5915) * cmd: Preserve LastModified date when exporting storage (#5968) * core: Always make AppDataDir for InstanceID (#5976) * chore: cross-build for AIX (#5971) * caddytls: Sync distributed storage cleaning (#5940) * caddytls: Context to DecisionFunc (#5923) * tls: accept placeholders in string values of certificate loaders (#5963) * templates: Offically make templates extensible (#5939) * http2 uses new round-robin scheduler (#5946) * panic when reading from backend failed to propagate stream error (#5952) * chore: Bump otel to v1.21.0. (#5949) * httpredirectlistener: Only set read limit for when request is HTTP (#5917) * fileserver: Add .m4v for browse template icon * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924) * go.mod: update quic-go version to v0.40.0 (#5922) * update quic-go to v0.39.3 (#5918) * chore: Fix usage pool comment (#5916) * test: acmeserver: add smoke test for the ACME server directory (#5914) * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913) * caddyhttp: Adjust `scheme` placeholder docs (#5910) * go.mod: Upgrade quic-go to v0.39.1 * go.mod: CVE-2023-45142 Update opentelemetry (#5908) * templates: Delete headers on `httpError` to reset to clean slate (#5905) * httpcaddyfile: Remove port from logger names (#5881) * core: Apply SO_REUSEPORT to UDP sockets (#5725) * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848) * cmd: Add newline character to version string in CLI output (#5895) * core: quic listener will manage the underlying socket by itself (#5749) * templates: Clarify `include` args docs, add `.ClientIP` (#5898) * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896) * cmd: upgrade: resolve symlink of the executable (#5891) * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883) - CVEs: * CVE-2024-22189 (boo#1222468) * CVE-2023-45142 - Remove the manual user/group provides: the package uses sysusers.d; the auto-provides were not working due to the broken go_provides. - Provide user and group (due to RPM 4.19) - Update caddy.sysusers to also create a group - Update to version 2.7.6: * caddytls: Sync distributed storage cleaning (#5940) * caddytls: Context to DecisionFunc (#5923) * tls: accept placeholders in string values of certificate loaders (#5963) * templates: Offically make templates extensible (#5939) * http2 uses new round-robin scheduler (#5946) * panic when reading from backend failed to propagate stream error (#5952) * chore: Bump otel to v1.21.0. (#5949) * httpredirectlistener: Only set read limit for when request is HTTP (#5917) * fileserver: Add .m4v for browse template icon * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924) * go.mod: update quic-go version to v0.40.0 (#5922) * update quic-go to v0.39.3 (#5918) * chore: Fix usage pool comment (#5916) * test: acmeserver: add smoke test for the ACME server directory (#5914) * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913) * caddyhttp: Adjust `scheme` placeholder docs (#5910) * go.mod: Upgrade quic-go to v0.39.1 * go.mod: CVE-2023-45142 Update opentelemetry (#5908) * templates: Delete headers on `httpError` to reset to clean slate (#5905) * httpcaddyfile: Remove port from logger names (#5881) * core: Apply SO_REUSEPORT to UDP sockets (#5725) * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848) * cmd: Add newline character to version string in CLI output (#5895) * core: quic listener will manage the underlying socket by itself (#5749) * templates: Clarify `include` args docs, add `.ClientIP` (#5898) * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896) * cmd: upgrade: resolve symlink of the executable (#5891) * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883) - Update to version 2.7.5: * admin: Respond with 4xx on non-existing config path (#5870) * ci: Force the Go version for govulncheck (#5879) * fileserver: Set canonical URL on browse template (#5867) * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852) * reverseproxy: Add more debug logs (#5793) * reverseproxy: Fix `least_conn` policy regression (#5862) * reverseproxy: Add logging for dynamic A upstreams (#5857) * reverseproxy: Replace health header placeholders (#5861) * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860) * cmd: Fix exiting with custom status code, add `caddy -v` (#5874) * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828) * reverseproxy: Fix retries on "upstreams unavailable" error (#5841) * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808) * encode: Add `application/wasm*` to the default content types (#5869) * fileserver: Add command shortcuts `-l` and `-a` (#5854) * go.mod: Upgrade dependencies incl. x/net/http * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845) * reverseproxy: Allow fallthrough for response handlers without routes (#5780) * fix: caddytest.AssertResponseCode error message (#5853) * caddyhttp: Use LimitedReader for HTTPRedirectListener * fileserver: browse template SVG icons and UI tweaks (#5812) * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811) * httpcaddyfile: fix placeholder shorthands in named routes (#5791) * cmd: Prevent overwriting existing env vars with `--envfile` (#5803) * ci: Run govulncheck (#5790) * logging: query filter for array of strings (#5779) * logging: Clone array on log filters, prevent side-effects (#5786) * fileserver: Export BrowseTemplate * ci: ensure short-sha is exported correctly on all platforms (#5781) * caddyfile: Fix case where heredoc marker is empty after newline (#5769) * go.mod: Update quic-go to v0.38.0 (#5772) * chore: Appease gosec linter (#5777) * replacer: change timezone to UTC for "time.now.http" placeholders (#5774) * caddyfile: Adjust error formatting (#5765) * update quic-go to v0.37.6 (#5767) * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757) * caddyfile: Loosen heredoc parsing (#5761) * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751) * fix package typo (#5764) - Switch to sysuser for user setup Update to version 2.7.4: * go.mod: Upgrade CertMagic and quic-go * reverseproxy: Always return new upstreams (fix #5736) (#5752) * ci: use gci linter (#5708) * fileserver: Slightly more fitting icons * cmd: Require config for caddy validate (fix #5612) (#5614) * caddytls: Update docs for on-demand config * fileserver: Don't repeat error for invalid method inside error context (#5705) * ci: Update to Go 1.21 (#5719) * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720) * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718) * ci: Use gofumpt to format code (#5707) * templates: Fix httpInclude (fix #5698) Update to version 2.7.3: * go.mod: Upgrade to quic-go v0.37.3 * cmd: Split unix sockets for admin endpoint addresses (#5696) * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695) * caddyfile: check that matched key is not a substring of the replacement key (#5685) * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691) * go.mod: Upgrade quic-go to v0.37.2 (fix #5680) * fileserver: browse: Render SVG images in grid - Update to version 2.7.2: * reverseproxy: Fix hijack ordering which broke websockets (#5679) * httpcaddyfile: Fix `string does not match ~[]E` error (#5675) * encode: Fix infinite recursion (#5672) * caddyhttp: Make use of `http.ResponseController` (#5654) * go.mod: Upgrade dependencies esp. smallstep/certificates * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664) * httpcaddyfile: Allow `hostnames` & logger name overrides for log directive (#5643) * reverseproxy: Connection termination cleanup (#5663) * go.mod: Use quic-go 0.37.1 * reverseproxy: Export ipVersions type (#5648) * go.mod: Use latest CertMagic (v0.19.1) * caddyhttp: Preserve original error (fix #5652) * fileserver: add lazy image loading (#5646) * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644) * core: Refine mutex during reloads (fix #5628) (#5645) * go.mod: update quic-go to v0.36.2 (#5636) * fileserver: Tweak grid view of browse template * fileserver: add `export-template` sub-command to `file-server` (#5630) * caddyfile: Fix comparing if two tokens are on the same line (#5626) * caddytls: Reuse certificate cache through reloads (#5623) * Minor tweaks to security.md * reverseproxy: Pointer receiver * caddyhttp: Trim dot/space only on Windows (fix #5613) * update quic-go to v0.36.1 (#5611) * caddyconfig: Specify config adapter for HTTP loader (close #5607) * core: Embed net.UDPConn to gain optimizations (#5606) * chore: remove deprecated property `rlcp` in goreleaser config (#5608) * core: Skip `chmod` for abstract unix sockets (#5596) * core: Add optional unix socket file permissions (#4741) * reverseproxy: Honor `tls_except_port` for active health checks (#5591) * Appease linter * Fix compile on Windows, hopefully * core: Properly preserve unix sockets (fix #5568) * go.mod: Upgrade CertMagic for hotfix * go.mod: Upgrade some dependencies * chore: upgrade otel (#5586) * go.mod: Update quic-go to v0.36.0 (#5584) * reverseproxy: weighted_round_robin load balancing policy (#5579) * reverseproxy: Experimental streaming timeouts (#5567) * chore: remove refs of deprecated io/ioutil (#5576) * headers: Allow `>` to defer shortcut for replacements (#5574) * caddyhttp: Support custom network for HTTP/3 (#5573) * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569) * fileserver: browse: Better grid layout (#5564) * caddytls: Clarify some JSON config docs * cmd: Implement storage import/export (#5532) * go.mod: Upgrade quic-go to 0.35.1 * update quic-go to v0.35.0 (#5560) * templates: Add `readFile` action that does not evaluate templates (#5553) * caddyfile: Track import name instead of modifying filename (#5540) * core: Use SO_REUSEPORT_LB on FreeBSD (#5554) * caddyfile: Do not replace import tokens if they are part of a snippet (#5539) * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550) * fileserver: browse: minor tweaks for grid view, dark mode (#5545) * fileserver: Only set Etag if not already set (fix #5546) (#5547) * fileserver: Fix file browser breadcrumb font (#5543) * caddyhttp: Fix h3 shutdown (#5541) * fileserver: More filetypes for browse icons * fileserver: Fix file browser footer in grid mode (#5536) * cmd: Avoid spammy log messages (fix #5538) * httpcaddyfile: Sort Caddyfile slice * caddyhttp: Implement named routes, `invoke` directive (#5107) * rewrite: use escaped path, fix #5278 (#5504) * headers: Add > Caddyfile shortcut for enabling defer (#5535) * go.mod: Upgrade several dependencies * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494) * fileserver: Use EscapedPath for browse (#5534) * caddyhttp: Refactor cert Managers (fix #5415) (#5533) * Slightly more helpful error message * caddytls: Check for nil ALPN; close #5470 (#5473) * cmd: Reduce spammy logs from --watch * caddyhttp: Add a getter for Server.name (#5531) * caddytls: Configurable fallback SNI (#5527) * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849) * Add doc comment about changing admin endpoint * feature: watch include directory (#5521) * chore: remove deprecated linters (#5525) * go.mod: Upgrade CertMagic again * go.mod: Upgrade CertMagic * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487) * reverseproxy: Fix active health check header canonicalization, refactor (#5446) * reverseproxy: Add `fallback` for some policies, instead of always random (#5488) * logging: Actually honor the SoftStart parameter * logging: Soft start for net writer (close #5520) * fastcgi: Fix `capture_stderr` (#5515) * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500) * go.mod: Update some dependencies * logging: Add traceID field to access logs when tracing is active (#5507) * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509) * reverseproxy: Fix reinitialize upstream healthy metrics (#5498) * fix some comments (#5508) * templates: Add `fileStat` function (#5497) * caddyfile: Stricter parsing, error for brace on new line (#5505) * core: Return default logger if no modules loaded * celmatcher: Implement `pkix.Name` conversion to string (#5492) * chore: Adjustments to CI caching (#5495) * reverseproxy: Remove deprecated `lookup_srv` (#5396) * cmd: Support `'` quotes in envfile parsing (#5437) * Update contributing guidelines (#5466) * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929) * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468) * cmd: Create pidfile before config load (close #5477) * fileserver: Add color-scheme meta tag (#5475) * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424) * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472) * caddyhttp: Log request body bytes read (#5461) * log: Make sink logs encodable (#5441) * caddytls: Eval replacer on automation policy subjects (#5459) * headers: Support deleting all headers as first op (#5464) * replacer: Add HTTP time format (#5458) * reverseproxy: Header up/down support for CLI command (#5460) * caddyhttp: Determine real client IP if trusted proxies configured (#5104) * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462) * caddytls: Zero out throttle window first (#5443) * ci: add `--yes` to cosign arguments (#5440) * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435) * caddytls: Allow on-demand w/o ask for internal-only * caddytls: Require 'ask' endpoint for on-demand TLS * fileserver: New file browse template (#5427) * go.mod: Upgrade dependencies * tracing: Support autoprop from OTEL_PROPAGATORS (#5147) * caddyhttp: Enable 0-RTT QUIC (#5425) * encode: flush status code when hijacked. (#5419) * fileserver: Remove trailing slash on fs filenames (#5417) * core: Eliminate unnecessary shutdown delay on Unix (#5413) * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408) * context: Rename func to `AppIfConfigured` (#5397) * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401) * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404) * caddyfile: Implement heredoc support (#5385) * cmd: Expand cobra support, add short flags (#5379) * ci: Update minimum Go version to 1.19 * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min) * reverseproxy: refactor HTTP transport layer (#5369) * caddytls: Relax the warning for on-demand (#5384) * cmd: Strict unmarshal for validate (#5383) * caddyfile: Implement variadics for import args placeholders (#5249) * cmd: make `caddy fmt` hints more clear (#5378) * cmd: Adjust documentation for commands (#5377) - Update to version 2.6.4: * reverseproxy: Don't buffer chunked requests (fix #5366) (#5367) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-211=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): caddy-2.8.4-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): caddy-bash-completion-2.8.4-bp155.2.3.1 caddy-fish-completion-2.8.4-bp155.2.3.1 caddy-zsh-completion-2.8.4-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-45142.html https://www.suse.com/security/cve/CVE-2024-22189.html https://bugzilla.suse.com/1222468

1 0

openSUSE-SU-2024:0210-1: important: Security update for global
by opensuse-security＠opensuse.org 22 Jul '24

22 Jul '24

openSUSE Security Update: Security update for global ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0210-1 Rating: important References: #1226420 Cross-References: CVE-2024-38448 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for global fixes the following issues: - CVE-2024-38448: htags may allow code execution via untrusted dbpath (boo#1226420) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-210=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): global-6.6.9-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-38448.html https://bugzilla.suse.com/1226420

1 0

SUSE-RU-2024:2588-1: moderate: Recommended update for certification-sles-eal4
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Recommended update for certification-sles-eal4 Announcement ID: SUSE-RU-2024:2588-1 Rating: moderate References: * bsc#1227456 Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for certification-sles-eal4 fixes the following issues: * handle empty lines in /etc/pam.d/ files (bsc#1227456) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2588=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2588=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * certification-sles-eal4-15.6+git20240710.dc43183-150600.14.6.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * certification-sles-eal4-15.6+git20240710.dc43183-150600.14.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1227456

1 0

SUSE-SU-2024:2568-1: important: Security update for mockito, snakeyaml, testng
by OPENSUSE-UPDATES 22 Jul '24

22 Jul '24

# Security update for mockito, snakeyaml, testng Announcement ID: SUSE-SU-2024:2568-1 Rating: important References: * bsc#1205628 Cross-References: * CVE-2022-4065 CVSS scores: * CVE-2022-4065 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-4065 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-4065 ( NVD ): 5.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for mockito, snakeyaml, testng fixes the following issues: mockito was updated to version 5.11.0: * Added bundle manifest to the mockito-core artifact * Mockito 5 is making core changes to ensure compatibility with future JDK versions. * Switch the Default MockMaker to mockito-inline (not applicable to mockito- android) * Mockito 2.7.6 introduced the mockito-inline mockmaker based on the "inline bytecode" principle, offering compatibility advantages over the subclass mockmaker * This change avoids JDK restrictions, such as violating module boundaries and leaking subclass creation * Legitimate use cases for the subclass mockmaker: * Scenarios where the inline mockmaker does not function, such as on Graal VM's native image * If avoiding mocking final classes, the subclass mockmaker remains a viable option, although issues may arise on JDK 17+ * Mockito aims to support both mockmakers, allowing users to choose based on their requirements. * Update the Minimum Supported Java Version to 11 * Mockito 5 raised the minimum supported Java version to 11 * Community member @reta contributed to this change. * Users still on JDK 8 can continue using Mockito 4, with minimal API differences between versions * New type() Method on ArgumentMatcher * The ArgumentMatcher interface now includes a new type() method to support varargs methods, addressing previous limitations * Users can now differentiate between matching calls with any exact number of arguments or match any number of arguments * Mockito 5 provides a default implementation of the new method, ensuring backward compatibility. * No obligation for users to implement the new method; Mockito 5 considers Void.type by default for varargs handling * ArgumentCaptor is now fully type-aware, enabling capturing specific subclasses on a generic method. * byte-buddy does not bundle asm, but uses objectweb-asm as external library snake-yaml was updated to version 2.2: * Changes of version 2.2: * Define default scalar style as PLAIN (for polyglot Maven) * Add missing 'exports org.yaml.snakeyaml.inspector' to module-info.java * Changes of version 2.1: * Heavy Allocation in Emitter.analyzeScalar(String) due to Regex Overhead * Use identity in toString() for sequences to avoid OutOfMemoryError * NumberFormatException from SnakeYAML due to int overflow for corrupt YAML version * Document size limit should be applied to single document notthe whole input stream * Detect invalid Unicode code point (thanks to Tatu Saloranta) * Remove Trusted*Inspector classes from main sources tree * Changes of version 2.0: * Rollback to Java 7 target * Add module-info.java * Migrate to Java 8 * Remove many deprecated constructors * Remove long deprecated methods in FlowStyle * Do not allow global tags by default * Yaml.LoadAs() signature to support Class<? super T> type instead of Class<T> * CustomClassLoaderConstructor takes LoaderOptions * Check input parameters for non-null values testng was updated to version 7.10.1: * Security issues fixed: * CVE-2022-4065: Fixed Zip Slip Vulnerability (bsc#1205628) * Changes of version 7.10.1: * Fixed maven build with junit5 * Changes of version 7.10.0: * Minor discrepancy fixes * Deleting TestNG eclipse plugin specific classes * Remove deprecated JUnit related support in TestNG * Handle exceptions in emailable Reporter * Added wrapperbot and update workflow order * Support ITestNGFactory customisation * Streamlined data provider listener invocation * Streamlined Guice Module creation in concurrency. * Copy test result attributes when unexpected failures * chore: use explicit dependency versions instead of refreshVersions * Removed Ant * Support ordering of listeners * Added errorprone * Allow custom thread pool executors to be wired in. * Allow data providers to be non cacheable * Use Locks instead of synchronised keyword * Document pgp artifact signing keys * Added Unique Id for all test class instances * Added issue management workflows * Map object to configurations * Allow listeners to be disabled at runtime * Streamlined Data Provider execution * Honour inheritance when parsing listener factories * Tweaks around accessing SuiteResult * Streamlined random generation * Streamlined dependencies for configurations * Changes of version 7.9.0: * Fixed maps containing nulls can be incorrectly considered equal * Test Results as artifacts for failed runs * Fixed data races * Dont honour params specified in suite-file tag * Decouple SuiteRunner and TestRunner * Disable Native DI for BeforeSuite methods * Streamlined running Parallel Dataproviders+retries * Removed extra whitespace in log for Configuration.createMethods() * Added the link for TestNG Documentation's GitHub Repo in README.md * FirstTimeOnlyConfig methods + Listener invocations * Added overrideGroupsFromCliInParentChildXml test * Ensure thread safety for attribute access * Added @inherited to the Listeners annotation * Restrict Group inheritance to Before|AfterGroups * Ensure ITestResult injected to @AfterMethod is apt * Support suite level thread pools for data provider * Favour CompletableFuture instead of PoolService * Favour FutureTask for concurrency support * Shared Threadpool for normal/datadriven tests. * Abort for invalid combinations * Changes of version 7.8.0: * [Feature] Not exception but warning if some (not all) of the given test names are not found in suite files. * [Feature] Generate testng-results.xml per test suite * [Feature] Allow test classes to define "configfailurepolicy" at a per class level * XmlTest index is not set for test suites invoked with YAML * Listener's onAfterClass is called before @afterclass configuration methods are executed. * After upgrading to TestNG 7.5.0, setting ITestResult.status to FAILURE doesn't fail the test anymore * JUnitReportReporter should capture the test case output at the test case level * TestNG.xml doesn't honour Parallel value of a clone * before configuration and before invocation should be 'SKIP' when beforeMethod is 'skip' * Test listeners specified in parent testng.xml file are not included in testng-failed.xml file * Discrepancies with DataProvider and Retry of failed tests * Skipped Tests with DataProvider appear as failed * testng-results xml reports config skips from base classes as ignored * Feature: Check that specific object present in List * Upgraded snakeyaml to 2.0 * Changes of version 7.7.1: * Streamline overloaded assertion methods for Groovy * Changes of version 7.7.0: * Replace FindBugs by SpotBugs * Gradle: Drop forUseAtConfigurationTime() * Added ability to provide custom message to assertThrows\expectThrows methods * Only resolve hostname once * Prevent overlogging of debug msgs in Graph impl * Streamlined dataprovider invoking in abstract classes * Streamlined TestResult due to expectedExceptions * Unexpected test runs count with retry analyzer * Make PackageUtils compliant with JPMS * Ability to retry a data provider during failures * Fixing bug with DataProvider retry * Added config key for callback discrepancy behavior * Fixed FileAlreadyExistsException error on copy * JarFileUtils.delete(File f) throw actual exception (instead of FileNotFound) when file cannot be deleted #2825 * Changing assertion message of the osgitest * Enhancing the Matrix * Avoid Compilation errors on Semeru JDK flavour. * Add addition yml extension * Support getting dependencies info for a test * Honour regex in dependsOnMethods * Ensure All tests run all the time * Deprecate support for running Spock Tests * Streamline dependsOnMethods for configurations * Ensure ITestContext available for JUnit4 tests * Deprecate support for running JUnit tests * Changes of 7.6.1 * Fix Files.copy() such that parent dirs are created * Remove deprecated utility methods * Changes of version 7.6.0: * Remove redundant Parameter implementation * Upgraded to JDK11 * Move SimpleBaseTest to be Kotlin based * Restore testnames when using suites in suite. * Moving ClassHelperTests into Kotlin * IHookable and IConfigurable callback discrepancy * Minor refactoring * Add additional condition for assertEqualsNoOrder * beforeConfiguration() listener method should be invoked for skipped configurations as well * Keep the initial order of listeners * SuiteRunner could not be initial by default Configuration * Enable Dataprovider failures to be considered. * BeforeGroups should run before any matched test * Fixed possible StringIndexOutOfBoundsException exception in XmlReporter * DataProvider: possibility to unload dataprovider class, when done with it * Fixed possibilty that AfterGroups method is invoked before all tests * Fixed equals implementation for WrappedTestNGMethod * Wire-In listeners consistently * Streamline AfterClass invocation * Show FQMN for tests in console * Honour custom attribute values in TestNG default reports ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2568=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2568=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2568=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2568=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2568=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-2568=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2568=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2568=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2568=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2568=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2568=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2568=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2568=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2568=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2568=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2568=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2568=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2568=1 ## Package List: * openSUSE Leap 15.5 (noarch) * snakeyaml-2.2-150200.3.15.1 * mockito-5.11.0-150200.3.7.1 * mockito-javadoc-5.11.0-150200.3.7.1 * snakeyaml-javadoc-2.2-150200.3.15.1 * testng-javadoc-7.10.1-150200.3.10.1 * testng-7.10.1-150200.3.10.1 * openSUSE Leap 15.6 (noarch) * snakeyaml-2.2-150200.3.15.1 * mockito-5.11.0-150200.3.7.1 * mockito-javadoc-5.11.0-150200.3.7.1 * snakeyaml-javadoc-2.2-150200.3.15.1 * testng-javadoc-7.10.1-150200.3.10.1 * testng-7.10.1-150200.3.10.1 * Development Tools Module 15-SP5 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * Development Tools Module 15-SP6 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Package Hub 15 15-SP6 (noarch) * mockito-5.11.0-150200.3.7.1 * SUSE Manager Server 4.3 Module 4.3 (noarch) * snakeyaml-2.2-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 * SUSE Enterprise Storage 7.1 (noarch) * testng-7.10.1-150200.3.10.1 * snakeyaml-2.2-150200.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2022-4065.html * https://bugzilla.suse.com/show_bug.cgi?id=1205628

1 0

openSUSE-SU-2024:0205-1: important: Security update for opera
by opensuse-security＠opensuse.org 20 Jul '24

20 Jul '24

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0205-1 Rating: important References: Cross-References: CVE-2024-5830 CVE-2024-5831 CVE-2024-5832 CVE-2024-5833 CVE-2024-5834 CVE-2024-5835 CVE-2024-5836 CVE-2024-5837 CVE-2024-5838 CVE-2024-5839 CVE-2024-5840 CVE-2024-5841 CVE-2024-5842 CVE-2024-5843 CVE-2024-5844 CVE-2024-5845 CVE-2024-5846 CVE-2024-5847 CVE-2024-6290 CVE-2024-6291 CVE-2024-6292 CVE-2024-6293 CVSS scores: CVE-2024-5830 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5831 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5832 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5833 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5834 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5835 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5836 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5837 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5838 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5839 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2024-5840 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2024-5841 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5842 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5843 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2024-5844 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5845 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5846 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5847 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 112.0.5197.25 * CHR-9787 Update Chromium on desktop-stable-126-5197 to 126.0.6478.127 - The update to chromium 126.0.6478.127 fixes following issues: CVE-2024-6290, CVE-2024-6291, CVE-2024-6292, CVE-2024-6293 - Update to 112.0.5197.24 * CHR-9762 Update Chromium on desktop-stable-126-5197 to 126.0.6478.62 * DNA-117001 Crash at base::internal::check_is_test_impl (base::NotFatalUntil) * DNA-117050 [Settings][Sync] Synchronization options aren't visible * DNA-117076 [Player] Background of the icons has changed and the Tidal icon is now missing * DNA-117109 Browser freezes when trying to remove a tab * DNA-117181 Translations for O112 * DNA-117202 Crash at syncer::SyncServiceImpl::NotifyObservers() * DNA-117295 Remove emoji names field in picker * DNA-117347 Start page is not rendered on first switch to workspace after its creation * DNA-117431 Promote 112 to stable - Complete Opera 112 changelog at: https://blogs.opera.com/desktop/changelog-for-112 - The update to chromium >= 126.0.6478.54 fixes following issues: CVE-2024-5830, CVE-2024-5831, CVE-2024-5832, CVE-2024-5833, CVE-2024-5834, CVE-2024-5835, CVE-2024-5836, CVE-2024-5837, CVE-2024-5838, CVE-2024-5839, CVE-2024-5840, CVE-2024-5841, CVE-2024-5842, CVE-2024-5843, CVE-2024-5844, CVE-2024-5845, CVE-2024-5846, CVE-2024-5847 - Update to 111.0.5168.55 * DNA-116749 Unnecessary icons in the advanced sync settings * DNA-116961 Evaluate #vtvd-as-platform-sw-decoder in the field * DNA-117003 #vtvd-as-platform-sw-decoder is not registered in media unittests Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2024-205=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-112.0.5197.25-lp155.3.54.1 References: https://www.suse.com/security/cve/CVE-2024-5830.html https://www.suse.com/security/cve/CVE-2024-5831.html https://www.suse.com/security/cve/CVE-2024-5832.html https://www.suse.com/security/cve/CVE-2024-5833.html https://www.suse.com/security/cve/CVE-2024-5834.html https://www.suse.com/security/cve/CVE-2024-5835.html https://www.suse.com/security/cve/CVE-2024-5836.html https://www.suse.com/security/cve/CVE-2024-5837.html https://www.suse.com/security/cve/CVE-2024-5838.html https://www.suse.com/security/cve/CVE-2024-5839.html https://www.suse.com/security/cve/CVE-2024-5840.html https://www.suse.com/security/cve/CVE-2024-5841.html https://www.suse.com/security/cve/CVE-2024-5842.html https://www.suse.com/security/cve/CVE-2024-5843.html https://www.suse.com/security/cve/CVE-2024-5844.html https://www.suse.com/security/cve/CVE-2024-5845.html https://www.suse.com/security/cve/CVE-2024-5846.html https://www.suse.com/security/cve/CVE-2024-5847.html https://www.suse.com/security/cve/CVE-2024-6290.html https://www.suse.com/security/cve/CVE-2024-6291.html https://www.suse.com/security/cve/CVE-2024-6292.html https://www.suse.com/security/cve/CVE-2024-6293.html

1 0

SUSE-SU-2024:2567-1: important: Security update for emacs
by OPENSUSE-UPDATES 19 Jul '24

19 Jul '24

# Security update for emacs Announcement ID: SUSE-SU-2024:2567-1 Rating: important References: * bsc#1226957 Cross-References: * CVE-2024-39331 CVSS scores: * CVE-2024-39331 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for emacs fixes the following issues: * CVE-2024-39331: Fixed evaluation of arbitrary unsafe Elisp code in Org mode (bsc#1226957). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2567=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2567=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2567=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2567=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2567=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2567=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2567=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2567=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2567=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-2567=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2567=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2567=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2567=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2567=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2567=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * emacs-x11-27.2-150400.3.17.1 * emacs-x11-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * SUSE Manager Proxy 4.3 (x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * SUSE Manager Proxy 4.3 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * SUSE Manager Server 4.3 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * emacs-x11-27.2-150400.3.17.1 * emacs-x11-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * openSUSE Leap 15.4 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * emacs-x11-27.2-150400.3.17.1 * emacs-x11-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * openSUSE Leap 15.5 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * emacs-x11-27.2-150400.3.17.1 * emacs-x11-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * openSUSE Leap 15.6 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * Basesystem Module 15-SP5 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * Basesystem Module 15-SP6 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * emacs-x11-27.2-150400.3.17.1 * emacs-x11-debuginfo-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * emacs-debuginfo-27.2-150400.3.17.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * emacs-x11-27.2-150400.3.17.1 * emacs-x11-debuginfo-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * emacs-debuginfo-27.2-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * emacs-x11-27.2-150400.3.17.1 * emacs-x11-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * emacs-x11-27.2-150400.3.17.1 * emacs-x11-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * emacs-x11-27.2-150400.3.17.1 * emacs-x11-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * emacs-debuginfo-27.2-150400.3.17.1 * emacs-nox-debuginfo-27.2-150400.3.17.1 * emacs-x11-27.2-150400.3.17.1 * emacs-x11-debuginfo-27.2-150400.3.17.1 * etags-debuginfo-27.2-150400.3.17.1 * emacs-nox-27.2-150400.3.17.1 * emacs-debugsource-27.2-150400.3.17.1 * etags-27.2-150400.3.17.1 * emacs-27.2-150400.3.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * emacs-el-27.2-150400.3.17.1 * emacs-info-27.2-150400.3.17.1 ## References: * https://www.suse.com/security/cve/CVE-2024-39331.html * https://bugzilla.suse.com/show_bug.cgi?id=1226957

1 0

SUSE-RU-2024:2565-1: moderate: Recommended update for cargo-packaging
by OPENSUSE-UPDATES 19 Jul '24

19 Jul '24

# Recommended update for cargo-packaging Announcement ID: SUSE-RU-2024:2565-1 Rating: moderate References: * bsc#1224122 Affected Products: * openSUSE Leap 15.3 An update that has one fix can now be installed. ## Description: This update for cargo-packaging fixes the following issues: * cargo-packaging to use older versions of parallel installed rust. (bsc#1224122) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2565=1 ## Package List: * openSUSE Leap 15.3 (noarch) * cargo-packaging-1.0.0~git6.d878e38-150300.7.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1224122

1 0

SUSE-RU-2024:2566-1: moderate: Recommended update for cargo-packaging
by OPENSUSE-UPDATES 19 Jul '24

19 Jul '24

# Recommended update for cargo-packaging Announcement ID: SUSE-RU-2024:2566-1 Rating: moderate References: Affected Products: * openSUSE Leap 15.5 An update that can now be installed. ## Description: This update for cargo-packaging fixes the following issues: * Resolve build failure when backported to 15-SP3 * Depend on provides of rust to allow older compiler version usage ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2566=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * cargo-packaging-1.2.0+5-150500.6.3.1

1 0

openSUSE-SU-2024:0204-1: important: Security update for chromium
by opensuse-security＠opensuse.org 18 Jul '24

18 Jul '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0204-1 Rating: important References: #1226170 #1226205 #1226504 #1226933 Cross-References: CVE-2024-5830 CVE-2024-5831 CVE-2024-5832 CVE-2024-5833 CVE-2024-5834 CVE-2024-5835 CVE-2024-5836 CVE-2024-5837 CVE-2024-5838 CVE-2024-5839 CVE-2024-5840 CVE-2024-5841 CVE-2024-5842 CVE-2024-5843 CVE-2024-5844 CVE-2024-5845 CVE-2024-5846 CVE-2024-5847 CVE-2024-6100 CVE-2024-6101 CVE-2024-6102 CVE-2024-6103 CVE-2024-6290 CVE-2024-6291 CVE-2024-6292 CVE-2024-6293 CVSS scores: CVE-2024-5830 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5831 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5832 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5833 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5834 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5835 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5836 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5837 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5838 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5839 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2024-5840 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2024-5841 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5842 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5843 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2024-5844 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5845 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5846 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-5847 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-6100 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-6101 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-6102 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-6103 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 26 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933) * CVE-2024-6290: Use after free in Dawn * CVE-2024-6291: Use after free in Swiftshader * CVE-2024-6292: Use after free in Dawn * CVE-2024-6293: Use after free in Dawn * CVE-2024-6100: Type Confusion in V8 * CVE-2024-6101: Inappropriate implementation in WebAssembly * CVE-2024-6102: Out of bounds memory access in Dawn * CVE-2024-6103: Use after free in Dawn * CVE-2024-5830: Type Confusion in V8 * CVE-2024-5831: Use after free in Dawn * CVE-2024-5832: Use after free in Dawn * CVE-2024-5833: Type Confusion in V8 * CVE-2024-5834: Inappropriate implementation in Dawn * CVE-2024-5835: Heap buffer overflow in Tab Groups * CVE-2024-5836: Inappropriate Implementation in DevTools * CVE-2024-5837: Type Confusion in V8 * CVE-2024-5838: Type Confusion in V8 * CVE-2024-5839: Inappropriate Implementation in Memory Allocator * CVE-2024-5840: Policy Bypass in CORS * CVE-2024-5841: Use after free in V8 * CVE-2024-5842: Use after free in Browser UI * CVE-2024-5843: Inappropriate implementation in Downloads * CVE-2024-5844: Heap buffer overflow in Tab Strip * CVE-2024-5845: Use after free in Audio * CVE-2024-5846: Use after free in PDFium * CVE-2024-5847: Use after free in PDFium - Amend fix_building_widevinecdm_with_chromium.patch to allow Widevine on ARM64 (boo#1226170) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-204=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-126.0.6478.126-bp155.2.94.1 chromium-126.0.6478.126-bp155.2.94.1 References: https://www.suse.com/security/cve/CVE-2024-5830.html https://www.suse.com/security/cve/CVE-2024-5831.html https://www.suse.com/security/cve/CVE-2024-5832.html https://www.suse.com/security/cve/CVE-2024-5833.html https://www.suse.com/security/cve/CVE-2024-5834.html https://www.suse.com/security/cve/CVE-2024-5835.html https://www.suse.com/security/cve/CVE-2024-5836.html https://www.suse.com/security/cve/CVE-2024-5837.html https://www.suse.com/security/cve/CVE-2024-5838.html https://www.suse.com/security/cve/CVE-2024-5839.html https://www.suse.com/security/cve/CVE-2024-5840.html https://www.suse.com/security/cve/CVE-2024-5841.html https://www.suse.com/security/cve/CVE-2024-5842.html https://www.suse.com/security/cve/CVE-2024-5843.html https://www.suse.com/security/cve/CVE-2024-5844.html https://www.suse.com/security/cve/CVE-2024-5845.html https://www.suse.com/security/cve/CVE-2024-5846.html https://www.suse.com/security/cve/CVE-2024-5847.html https://www.suse.com/security/cve/CVE-2024-6100.html https://www.suse.com/security/cve/CVE-2024-6101.html https://www.suse.com/security/cve/CVE-2024-6102.html https://www.suse.com/security/cve/CVE-2024-6103.html https://www.suse.com/security/cve/CVE-2024-6290.html https://www.suse.com/security/cve/CVE-2024-6291.html https://www.suse.com/security/cve/CVE-2024-6292.html https://www.suse.com/security/cve/CVE-2024-6293.html https://bugzilla.suse.com/1226170 https://bugzilla.suse.com/1226205 https://bugzilla.suse.com/1226504 https://bugzilla.suse.com/1226933

1 0

SUSE-SU-2024:2531-1: important: Security update for xen
by OPENSUSE-UPDATES 16 Jul '24

16 Jul '24

# Security update for xen Announcement ID: SUSE-SU-2024:2531-1 Rating: important References: * bsc#1027519 * bsc#1214718 * bsc#1221984 * bsc#1225953 * bsc#1227355 Cross-References: * CVE-2023-46842 * CVE-2024-31143 CVSS scores: * CVE-2023-46842 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2024-31143 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities and has three security fixes can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2023-46842: Fixed x86 HVM hypercalls may trigger Xen bug check (XSA-454, bsc#1221984). * CVE-2024-31143: Fixed double unlock in x86 guest IRQ handling (XSA-458, bsc#1227355). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2531=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2531=1 openSUSE-SLE-15.6-2024-2531=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2531=1 ## Package List: * Server Applications Module 15-SP6 (x86_64) * xen-debugsource-4.18.2_06-150600.3.3.1 * xen-4.18.2_06-150600.3.3.1 * xen-tools-4.18.2_06-150600.3.3.1 * xen-tools-debuginfo-4.18.2_06-150600.3.3.1 * xen-devel-4.18.2_06-150600.3.3.1 * Server Applications Module 15-SP6 (noarch) * xen-tools-xendomains-wait-disk-4.18.2_06-150600.3.3.1 * openSUSE Leap 15.6 (aarch64 x86_64 i586) * xen-debugsource-4.18.2_06-150600.3.3.1 * xen-tools-domU-4.18.2_06-150600.3.3.1 * xen-devel-4.18.2_06-150600.3.3.1 * xen-libs-4.18.2_06-150600.3.3.1 * xen-libs-debuginfo-4.18.2_06-150600.3.3.1 * xen-tools-domU-debuginfo-4.18.2_06-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * xen-libs-32bit-debuginfo-4.18.2_06-150600.3.3.1 * xen-libs-32bit-4.18.2_06-150600.3.3.1 * openSUSE Leap 15.6 (aarch64 x86_64) * xen-4.18.2_06-150600.3.3.1 * xen-doc-html-4.18.2_06-150600.3.3.1 * xen-tools-4.18.2_06-150600.3.3.1 * xen-tools-debuginfo-4.18.2_06-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * xen-tools-xendomains-wait-disk-4.18.2_06-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * xen-libs-64bit-4.18.2_06-150600.3.3.1 * xen-libs-64bit-debuginfo-4.18.2_06-150600.3.3.1 * Basesystem Module 15-SP6 (x86_64) * xen-debugsource-4.18.2_06-150600.3.3.1 * xen-tools-domU-4.18.2_06-150600.3.3.1 * xen-libs-4.18.2_06-150600.3.3.1 * xen-libs-debuginfo-4.18.2_06-150600.3.3.1 * xen-tools-domU-debuginfo-4.18.2_06-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-46842.html * https://www.suse.com/security/cve/CVE-2024-31143.html * https://bugzilla.suse.com/show_bug.cgi?id=1027519 * https://bugzilla.suse.com/show_bug.cgi?id=1214718 * https://bugzilla.suse.com/show_bug.cgi?id=1221984 * https://bugzilla.suse.com/show_bug.cgi?id=1225953 * https://bugzilla.suse.com/show_bug.cgi?id=1227355

1 0

SUSE-RU-2024:2537-1: moderate: Recommended update for google-cloud-sap-agent
by OPENSUSE-UPDATES 16 Jul '24

16 Jul '24

# Recommended update for google-cloud-sap-agent Announcement ID: SUSE-RU-2024:2537-1 Rating: moderate References: * bsc#1227134 * bsc#1227135 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for google-cloud-sap-agent contains the following fixes: * Update to version 3.4 (bsc#1227134, bsc#1227135) * Adding project to exclusion list * Add machine type to configure instance proto for WLM metric collection. * Add test channel for Guest Actions. Make default channel the registered channel. * Set backup object's customTime field as part of backint backups * Add workload discovery to configure command * Add multiple workers support in parallelreader for parallel downloading during restore. * `configureinstance` with `overrideVersion` set should log a warning and continue. * Minor log change in balanceirq * Add common function to parse parameters for guest action handlers * BalanceIRQ OTE added to Agent for SAP * Remove output from stdout for DIAGNOSE * Small hyperThreading change for configureinstance * Add initial steps to initialize the SystemDiscovery OTE in IIOTE and command mode. * Adding single worker support in parallelreader for download. * Read encryption key from file if specified in parameters file * Run configureinstance OTE only on supported instances during WLM metric collection. * Add instance ID to user agent string for SAP Agent. * Return `UsageError` as exit status instead of `Failure` in case of invalid parameters * Bumping up the agent version * Use json marshalling instead of manually parsing from map in configure handler * Move metric override modules to metricoverrides.go for general use * Updating the gcbdr proto * Updating param names to make it more clear in performance diagnostics * Add DiskSizeGb to Disk for disk creation. * Add Demo Metrics for Process Metrics * Add warning message for configureinstance overrideVersion * Add 3.3 to configureinstance versioning * Fix log message in configureinstance * Rename scope and param file to type and backint-param-file to avoid confusion * Add new OTE structure for SystemDiscovery. * Allows SAP system data to be read from an override file instead of discovered from the system. Useful for testing. * Refactor buildSupportBundleCommand by marshalling command parameters * Remove cluster member check for cluster collection * Add connectParameters as a function parameter in restoreFile function to have multiple bucket handles in parallelreader for parallel downloading. * Enable auto discovery of disks and make datadiskname and zone optional parameters * Add support for performancediagnostics OTE guest action handler * Add override version flag to configureinstance * Rename LVM volume group of restored disk to that of the target disk. * Sleep during TestCommunicateWithUAP to only execute intended code path once instead of many times. * Update grub configuration for X4 configureinstance * Extend result-bucket support to support bundle guest action * Add provisioned-iops and provisioned-throughput labels to snapshots and extract them during restore. * Configureinstance updates for SAP ECS * Add sequential in parallel download functionality for restore to SAP Agent. * Implement hanadiskbackup guest action handler * Add operation_id to UAP status labels. * Add user agent overrides for cloud monitoring * Updating generated protobufs * Update sanity check for fast collector metric * Reliability Metrics - Use the usage metrics instead of internal cloud monitoring metrics * Fix restoreFromGroupSnapshot and restoreFromSingleSnapshot logic * Implement support bundle handler. This CL follows a pattern for implementing handler which was developed in cl/636640791 * Move timeseries.go and cloudmonitoring.go to shared/ * Only stop HANA monitoring if successive errors are auth related * Use flag names for command parameters in configureHandler * Add check and apply finished metrics to configureinstance * Add snapshot / group backup name to success log message * Better handling of experimental flag in hanamonitoring * Return error if physical device is empty * Added an experiemntal flag to control role based awareness in hana monitoring * Adding role based awareness logic in HANA Monitoring * Add upload feature to support bundle * Add context to onetime logging functions * Fix logging and make confirm-data-snapshot-after-create true by default * Add debug logs for hanabackup to help troubleshoot issues. * Remove HDB User requirement when HDBUserstore key is passed for hanadiskbackup * Append labels to detached disk in hanadiskrestore * Add placeholder for parallel reader in Backint * Modify restore handlers to be able to restore from either source snapshot or group snapshot. * Modify checking preconditions and adding fakes for group snapshot restore. * Add initial support for restoring from group snapshot. * Add UAP Communication to startdaemon (gated by a configuration). * Fixing the commands in perfdiag * Refactor handleAgentCommand with guestActionsHandlers map * Add replication sites to system component proto * Build updated to use -mod=vendor during build * Updated go.mod and go.sum with dependencies for safetext, using go mod vendor for github action * Adding changes for target based config in hana monitoring * Overriding the user agent for Cloud Logging API calls * Fix typo in guestactions.proto * WLM Hana Full Backup Validation Metric collection * Add configure command to guest actions. Establish how the new proto format will be used in message handling. * Add ping check to HANA monitoring * [commandlineexecutor] Add the ability to directly pass data into Stdin, avoiding the need for intermediary piping commands, such as "echo 'data' | my_app". ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2537=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2537=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-2537=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-2537=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-2537=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2537=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2537=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.4-150100.3.35.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.4-150100.3.35.1 * Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.4-150100.3.35.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.4-150100.3.35.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.4-150100.3.35.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.4-150100.3.35.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.4-150100.3.35.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1227134 * https://bugzilla.suse.com/show_bug.cgi?id=1227135

1 0

SUSE-RU-2024:2497-1: moderate: Recommended update for lifecycle-data-sle-module-live-patching
by OPENSUSE-UPDATES 16 Jul '24

16 Jul '24

# Recommended update for lifecycle-data-sle-module-live-patching Announcement ID: SUSE-RU-2024:2497-1 Rating: moderate References: * bsc#1020320 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for lifecycle-data-sle-module-live-patching fixes the following issue: * Added data for 5_14_21-150400_24_119, 5_14_21-150400_24_122, 5_14_21-150500_55_62, 5_14_21-150500_55_65, 5_14_21-150500_55_68, 5_3_18-150200_24_191, 5_3_18-150200_24_194, 5_3_18-150300_59_161, 5_3_18-150300_59_164, 6_4_0-150600_21, 6_4_0-150600_23_7, +kernel- livepatch-5_14_21-150500_13_52-rt, _,+kernel- livepatch-5_14_21-150500_13_55-rt,_ ,+kernel- livepatch-5_14_21-150500_13_58-rt,* (bsc#1020320) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2497=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2497=1 * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-2497=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-2497=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-2497=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-2497=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2024-2497=1 ## Package List: * openSUSE Leap 15.5 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.114.2 * openSUSE Leap 15.6 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.114.2 * SUSE Linux Enterprise Live Patching 15-SP2 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.114.2 * SUSE Linux Enterprise Live Patching 15-SP3 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.114.2 * SUSE Linux Enterprise Live Patching 15-SP4 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.114.2 * SUSE Linux Enterprise Live Patching 15-SP5 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.114.2 * SUSE Linux Enterprise Live Patching 15-SP6 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.114.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1020320

1 0