July 2024 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2024:0187-1: important: Security update for opera
by opensuse-security＠opensuse.org 06 Jul '24

06 Jul '24

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0187-1 Rating: important References: Cross-References: CVE-2024-5493 CVE-2024-5494 CVE-2024-5495 CVE-2024-5496 CVE-2024-5497 CVE-2024-5498 CVE-2024-5499 Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 111.0.5168.43 * DNA-115228 Adblocker is blocking ads when turned off * DNA-116605 Crash at opera::BrowserContentsView:: NonClientHitTestPoint(gfx::Point const&) * DNA-116855 Cannot close tab island’s tab when popup was hovered * DNA-116885 Add chrome.cookies api permission to Rich Hints * DNA-116948 [Linux] Theme toggle in settings is not working - Update to 111.0.5168.25 * CHR-9754 Update Chromium on desktop-stable-125-5168 to 125.0.6422.142 * DNA-116089 [Win/Lin] Fullscreen view has rounded corners * DNA-116208 The red dot on the Aria’s icon is misaligned * DNA-116693 X (twitter) logo is not available on opera:about page * DNA-116737 [Bookmarks] Bookmarks bar favicon have light theme color in new window * DNA-116769 Extension popup – pin icon is replaced * DNA-116850 Fix full package installer link * DNA-116852 Promote 111 to stable * DNA-116491 Site info popup is cut with dropdown opened * DNA-116661 [opera:settings] IPFS/IPNS Gateway box has the wrong design * DNA-116789 Translations for O111 * DNA-116813 [React emoji picker] Flag emojis are not load correctly * DNA-116893 Put 'Show emojis in tab tooltip' in Settings * DNA-116918 Translations for 'Show emojis in tab tooltip' - Complete Opera 111 changelog at: https://blogs.opera.com/desktop/changelog-for-111 - The update to chromium 125.0.6422.142 fixes following issues: CVE-2024-5493, CVE-2024-5494, CVE-2024-5495, CVE-2024-5496, CVE-2024-5497, CVE-2024-5498, CVE-2024-5499 - Update to 110.0.5130.64 * CHR-9748 Update Chromium on desktop-stable-124-5130 to 124.0.6367.243 * DNA-116317 Create outline or shadow around emojis on tab strip * DNA-116320 Create animation for emoji disappearing from tab strip * DNA-116564 Assign custom emoji from emoji picker * DNA-116690 Make chrome://emoji-picker attachable by webdriver * DNA-116732 Introduce stat event for setting / unsetting emoji on a tab * DNA-116753 Emoji picker does not follow browser theme * DNA-116755 Record tab emojis added / removed * DNA-116777 Enable #tab-art on all streams - Update to 110.0.5130.49 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-116706 [gpu-crash] Crash at SkGpuShaderImageFilter:: onFilterImage(skif::Context const&) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2024-187=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-111.0.5168.43-lp155.3.51.1 References: https://www.suse.com/security/cve/CVE-2024-5493.html https://www.suse.com/security/cve/CVE-2024-5494.html https://www.suse.com/security/cve/CVE-2024-5495.html https://www.suse.com/security/cve/CVE-2024-5496.html https://www.suse.com/security/cve/CVE-2024-5497.html https://www.suse.com/security/cve/CVE-2024-5498.html https://www.suse.com/security/cve/CVE-2024-5499.html

1 0

SUSE-RU-2024:2306-1: moderate: Recommended update for libvirt
by OPENSUSE-UPDATES 05 Jul '24

05 Jul '24

# Recommended update for libvirt Announcement ID: SUSE-RU-2024:2306-1 Rating: moderate References: * bsc#1226492 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for libvirt fixes the following issue: * qemu: Fix migration with custom XML (bsc#1226492) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2306=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2306=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2306=1 openSUSE-SLE-15.6-2024-2306=1 ## Package List: * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libvirt-libs-debuginfo-10.0.0-150600.8.6.2 * libvirt-libs-10.0.0-150600.8.6.2 * libvirt-debugsource-10.0.0-150600.8.6.2 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libvirt-daemon-hooks-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-qemu-10.0.0-150600.8.6.2 * libvirt-daemon-lock-10.0.0-150600.8.6.2 * libvirt-daemon-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-network-10.0.0-150600.8.6.2 * libvirt-client-10.0.0-150600.8.6.2 * libvirt-daemon-driver-secret-10.0.0-150600.8.6.2 * libvirt-nss-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-core-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-core-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-mpath-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-nwfilter-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-mpath-10.0.0-150600.8.6.2 * libvirt-daemon-10.0.0-150600.8.6.2 * libvirt-daemon-driver-nodedev-10.0.0-150600.8.6.2 * libvirt-daemon-driver-nodedev-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-iscsi-10.0.0-150600.8.6.2 * libvirt-daemon-driver-secret-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-proxy-10.0.0-150600.8.6.2 * libvirt-devel-10.0.0-150600.8.6.2 * libvirt-daemon-plugin-lockd-10.0.0-150600.8.6.2 * libvirt-daemon-common-10.0.0-150600.8.6.2 * libvirt-daemon-config-network-10.0.0-150600.8.6.2 * libvirt-daemon-driver-network-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-logical-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-plugin-sanlock-10.0.0-150600.8.6.2 * libvirt-debugsource-10.0.0-150600.8.6.2 * libvirt-daemon-qemu-10.0.0-150600.8.6.2 * libvirt-daemon-driver-interface-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-disk-10.0.0-150600.8.6.2 * libvirt-client-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-lock-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-log-10.0.0-150600.8.6.2 * libvirt-daemon-proxy-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-common-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-disk-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-log-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-plugin-sanlock-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-iscsi-debuginfo-10.0.0-150600.8.6.2 * libvirt-client-qemu-10.0.0-150600.8.6.2 * libvirt-daemon-plugin-lockd-debuginfo-10.0.0-150600.8.6.2 * libvirt-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-logical-10.0.0-150600.8.6.2 * libvirt-daemon-driver-interface-10.0.0-150600.8.6.2 * libvirt-nss-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-scsi-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-qemu-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-scsi-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-iscsi-direct-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-10.0.0-150600.8.6.2 * libvirt-daemon-driver-nwfilter-10.0.0-150600.8.6.2 * libvirt-daemon-config-nwfilter-10.0.0-150600.8.6.2 * Server Applications Module 15-SP6 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-rbd-debuginfo-10.0.0-150600.8.6.2 * Server Applications Module 15-SP6 (noarch) * libvirt-doc-10.0.0-150600.8.6.2 * Server Applications Module 15-SP6 (x86_64) * libvirt-daemon-driver-libxl-10.0.0-150600.8.6.2 * libvirt-daemon-driver-libxl-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-xen-10.0.0-150600.8.6.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libvirt-daemon-hooks-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-qemu-10.0.0-150600.8.6.2 * libvirt-daemon-driver-lxc-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-lock-10.0.0-150600.8.6.2 * libvirt-daemon-driver-network-10.0.0-150600.8.6.2 * libvirt-client-10.0.0-150600.8.6.2 * libvirt-daemon-driver-secret-10.0.0-150600.8.6.2 * libvirt-nss-debuginfo-10.0.0-150600.8.6.2 * wireshark-plugin-libvirt-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-core-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-core-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-mpath-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-nwfilter-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-mpath-10.0.0-150600.8.6.2 * libvirt-daemon-10.0.0-150600.8.6.2 * libvirt-daemon-driver-nodedev-10.0.0-150600.8.6.2 * libvirt-daemon-driver-nodedev-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-iscsi-10.0.0-150600.8.6.2 * libvirt-daemon-driver-secret-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-proxy-10.0.0-150600.8.6.2 * libvirt-devel-10.0.0-150600.8.6.2 * libvirt-daemon-plugin-lockd-10.0.0-150600.8.6.2 * libvirt-daemon-common-10.0.0-150600.8.6.2 * libvirt-daemon-config-network-10.0.0-150600.8.6.2 * libvirt-daemon-driver-network-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-logical-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-plugin-sanlock-10.0.0-150600.8.6.2 * libvirt-debugsource-10.0.0-150600.8.6.2 * libvirt-daemon-qemu-10.0.0-150600.8.6.2 * libvirt-daemon-driver-interface-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-lxc-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-disk-10.0.0-150600.8.6.2 * libvirt-client-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-lock-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-log-10.0.0-150600.8.6.2 * libvirt-daemon-proxy-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-common-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-disk-debuginfo-10.0.0-150600.8.6.2 * libvirt-libs-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-log-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-plugin-sanlock-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-iscsi-debuginfo-10.0.0-150600.8.6.2 * libvirt-client-qemu-10.0.0-150600.8.6.2 * libvirt-daemon-plugin-lockd-debuginfo-10.0.0-150600.8.6.2 * libvirt-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-logical-10.0.0-150600.8.6.2 * libvirt-daemon-driver-interface-10.0.0-150600.8.6.2 * libvirt-daemon-driver-lxc-10.0.0-150600.8.6.2 * libvirt-nss-10.0.0-150600.8.6.2 * wireshark-plugin-libvirt-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-scsi-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-qemu-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-scsi-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-iscsi-direct-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-10.0.0-150600.8.6.2 * libvirt-daemon-driver-nwfilter-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-gluster-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-gluster-10.0.0-150600.8.6.2 * libvirt-libs-10.0.0-150600.8.6.2 * libvirt-daemon-config-nwfilter-10.0.0-150600.8.6.2 * openSUSE Leap 15.6 (x86_64) * libvirt-daemon-driver-libxl-10.0.0-150600.8.6.2 * libvirt-client-32bit-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-driver-libxl-debuginfo-10.0.0-150600.8.6.2 * libvirt-daemon-xen-10.0.0-150600.8.6.2 * libvirt-devel-32bit-10.0.0-150600.8.6.2 * openSUSE Leap 15.6 (noarch) * libvirt-doc-10.0.0-150600.8.6.2 * openSUSE Leap 15.6 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-10.0.0-150600.8.6.2 * libvirt-daemon-driver-storage-rbd-debuginfo-10.0.0-150600.8.6.2 * openSUSE Leap 15.6 (aarch64_ilp32) * libvirt-client-64bit-debuginfo-10.0.0-150600.8.6.2 * libvirt-devel-64bit-10.0.0-150600.8.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226492

1 0

SUSE-SU-2024:2307-1: important: Security update for krb5
by OPENSUSE-UPDATES 05 Jul '24

05 Jul '24

# Security update for krb5 Announcement ID: SUSE-SU-2024:2307-1 Rating: important References: * bsc#1227186 * bsc#1227187 Cross-References: * CVE-2024-37370 * CVE-2024-37371 CVSS scores: * CVE-2024-37370 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2024-37371 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for krb5 fixes the following issues: * CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with invalid fields were errouneously accepted (bsc#1227186). * CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid length fields (bsc#1227187). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2307=1 openSUSE-SLE-15.6-2024-2307=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2307=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2307=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * krb5-plugin-preauth-pkinit-debuginfo-1.20.1-150600.11.3.1 * krb5-mini-1.20.1-150600.11.3.1 * krb5-mini-debugsource-1.20.1-150600.11.3.1 * krb5-plugin-preauth-pkinit-1.20.1-150600.11.3.1 * krb5-client-debuginfo-1.20.1-150600.11.3.1 * krb5-debugsource-1.20.1-150600.11.3.1 * krb5-plugin-kdb-ldap-debuginfo-1.20.1-150600.11.3.1 * krb5-1.20.1-150600.11.3.1 * krb5-server-1.20.1-150600.11.3.1 * krb5-server-debuginfo-1.20.1-150600.11.3.1 * krb5-devel-1.20.1-150600.11.3.1 * krb5-plugin-preauth-otp-debuginfo-1.20.1-150600.11.3.1 * krb5-mini-debuginfo-1.20.1-150600.11.3.1 * krb5-debuginfo-1.20.1-150600.11.3.1 * krb5-plugin-preauth-spake-1.20.1-150600.11.3.1 * krb5-plugin-kdb-ldap-1.20.1-150600.11.3.1 * krb5-client-1.20.1-150600.11.3.1 * krb5-plugin-preauth-otp-1.20.1-150600.11.3.1 * krb5-mini-devel-1.20.1-150600.11.3.1 * krb5-plugin-preauth-spake-debuginfo-1.20.1-150600.11.3.1 * openSUSE Leap 15.6 (x86_64) * krb5-32bit-debuginfo-1.20.1-150600.11.3.1 * krb5-devel-32bit-1.20.1-150600.11.3.1 * krb5-32bit-1.20.1-150600.11.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * krb5-64bit-debuginfo-1.20.1-150600.11.3.1 * krb5-64bit-1.20.1-150600.11.3.1 * krb5-devel-64bit-1.20.1-150600.11.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * krb5-plugin-preauth-pkinit-debuginfo-1.20.1-150600.11.3.1 * krb5-plugin-preauth-pkinit-1.20.1-150600.11.3.1 * krb5-client-debuginfo-1.20.1-150600.11.3.1 * krb5-debugsource-1.20.1-150600.11.3.1 * krb5-1.20.1-150600.11.3.1 * krb5-devel-1.20.1-150600.11.3.1 * krb5-plugin-preauth-otp-debuginfo-1.20.1-150600.11.3.1 * krb5-client-1.20.1-150600.11.3.1 * krb5-plugin-preauth-otp-1.20.1-150600.11.3.1 * krb5-debuginfo-1.20.1-150600.11.3.1 * Basesystem Module 15-SP6 (x86_64) * krb5-32bit-debuginfo-1.20.1-150600.11.3.1 * krb5-32bit-1.20.1-150600.11.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * krb5-debugsource-1.20.1-150600.11.3.1 * krb5-server-debuginfo-1.20.1-150600.11.3.1 * krb5-server-1.20.1-150600.11.3.1 * krb5-plugin-kdb-ldap-debuginfo-1.20.1-150600.11.3.1 * krb5-plugin-kdb-ldap-1.20.1-150600.11.3.1 * krb5-debuginfo-1.20.1-150600.11.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-37370.html * https://www.suse.com/security/cve/CVE-2024-37371.html * https://bugzilla.suse.com/show_bug.cgi?id=1227186 * https://bugzilla.suse.com/show_bug.cgi?id=1227187

1 0

SUSE-SU-2024:2309-1: important: Security update for go1.22
by OPENSUSE-UPDATES 05 Jul '24

05 Jul '24

# Security update for go1.22 Announcement ID: SUSE-SU-2024:2309-1 Rating: important References: * bsc#1218424 * bsc#1227314 Cross-References: * CVE-2024-24791 CVSS scores: * CVE-2024-24791 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for go1.22 fixes the following issues: Updated to version 1.22.5 (bsc#1218424): * CVE-2024-24791: Fixed a potential denial of service due to improper handling of HTTP 100-continue headers (bsc#1227314). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2309=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2309=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2309=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2309=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * go1.22-1.22.5-150000.1.21.1 * go1.22-doc-1.22.5-150000.1.21.1 * go1.22-race-1.22.5-150000.1.21.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.22-1.22.5-150000.1.21.1 * go1.22-doc-1.22.5-150000.1.21.1 * go1.22-race-1.22.5-150000.1.21.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * go1.22-1.22.5-150000.1.21.1 * go1.22-doc-1.22.5-150000.1.21.1 * go1.22-race-1.22.5-150000.1.21.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.22-1.22.5-150000.1.21.1 * go1.22-doc-1.22.5-150000.1.21.1 * go1.22-race-1.22.5-150000.1.21.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24791.html * https://bugzilla.suse.com/show_bug.cgi?id=1218424 * https://bugzilla.suse.com/show_bug.cgi?id=1227314

1 0

SUSE-SU-2024:2302-1: important: Security update for krb5
by OPENSUSE-UPDATES 04 Jul '24

04 Jul '24

# Security update for krb5 Announcement ID: SUSE-SU-2024:2302-1 Rating: important References: * bsc#1227186 * bsc#1227187 Cross-References: * CVE-2024-37370 * CVE-2024-37371 CVSS scores: * CVE-2024-37370 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2024-37371 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for krb5 fixes the following issues: * CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with invalid fields were errouneously accepted (bsc#1227186). * CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid length fields (bsc#1227187). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2302=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2302=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-2302=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2302=1 openSUSE-SLE-15.5-2024-2302=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * krb5-debugsource-1.20.1-150500.3.9.1 * krb5-debuginfo-1.20.1-150500.3.9.1 * krb5-1.20.1-150500.3.9.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * krb5-plugin-preauth-otp-1.20.1-150500.3.9.1 * krb5-plugin-preauth-otp-debuginfo-1.20.1-150500.3.9.1 * krb5-1.20.1-150500.3.9.1 * krb5-debuginfo-1.20.1-150500.3.9.1 * krb5-plugin-preauth-pkinit-1.20.1-150500.3.9.1 * krb5-plugin-preauth-pkinit-debuginfo-1.20.1-150500.3.9.1 * krb5-client-1.20.1-150500.3.9.1 * krb5-devel-1.20.1-150500.3.9.1 * krb5-client-debuginfo-1.20.1-150500.3.9.1 * krb5-debugsource-1.20.1-150500.3.9.1 * Basesystem Module 15-SP5 (x86_64) * krb5-32bit-debuginfo-1.20.1-150500.3.9.1 * krb5-32bit-1.20.1-150500.3.9.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * krb5-server-debuginfo-1.20.1-150500.3.9.1 * krb5-plugin-kdb-ldap-debuginfo-1.20.1-150500.3.9.1 * krb5-debuginfo-1.20.1-150500.3.9.1 * krb5-plugin-kdb-ldap-1.20.1-150500.3.9.1 * krb5-server-1.20.1-150500.3.9.1 * krb5-debugsource-1.20.1-150500.3.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * krb5-plugin-preauth-otp-1.20.1-150500.3.9.1 * krb5-plugin-preauth-otp-debuginfo-1.20.1-150500.3.9.1 * krb5-mini-debuginfo-1.20.1-150500.3.9.1 * krb5-plugin-preauth-spake-debuginfo-1.20.1-150500.3.9.1 * krb5-plugin-kdb-ldap-debuginfo-1.20.1-150500.3.9.1 * krb5-server-debuginfo-1.20.1-150500.3.9.1 * krb5-mini-devel-1.20.1-150500.3.9.1 * krb5-1.20.1-150500.3.9.1 * krb5-debuginfo-1.20.1-150500.3.9.1 * krb5-plugin-preauth-pkinit-1.20.1-150500.3.9.1 * krb5-mini-debugsource-1.20.1-150500.3.9.1 * krb5-plugin-kdb-ldap-1.20.1-150500.3.9.1 * krb5-plugin-preauth-pkinit-debuginfo-1.20.1-150500.3.9.1 * krb5-client-1.20.1-150500.3.9.1 * krb5-mini-1.20.1-150500.3.9.1 * krb5-devel-1.20.1-150500.3.9.1 * krb5-client-debuginfo-1.20.1-150500.3.9.1 * krb5-debugsource-1.20.1-150500.3.9.1 * krb5-plugin-preauth-spake-1.20.1-150500.3.9.1 * krb5-server-1.20.1-150500.3.9.1 * openSUSE Leap 15.5 (x86_64) * krb5-32bit-debuginfo-1.20.1-150500.3.9.1 * krb5-devel-32bit-1.20.1-150500.3.9.1 * krb5-32bit-1.20.1-150500.3.9.1 * openSUSE Leap 15.5 (aarch64_ilp32) * krb5-devel-64bit-1.20.1-150500.3.9.1 * krb5-64bit-debuginfo-1.20.1-150500.3.9.1 * krb5-64bit-1.20.1-150500.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-37370.html * https://www.suse.com/security/cve/CVE-2024-37371.html * https://bugzilla.suse.com/show_bug.cgi?id=1227186 * https://bugzilla.suse.com/show_bug.cgi?id=1227187

1 0

SUSE-SU-2024:2303-1: important: Security update for krb5
by OPENSUSE-UPDATES 04 Jul '24

04 Jul '24

# Security update for krb5 Announcement ID: SUSE-SU-2024:2303-1 Rating: important References: * bsc#1227186 * bsc#1227187 Cross-References: * CVE-2024-37370 * CVE-2024-37371 CVSS scores: * CVE-2024-37370 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2024-37371 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for krb5 fixes the following issues: * CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with invalid fields were errouneously accepted (bsc#1227186). * CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid length fields (bsc#1227187). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-2303=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2303=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2303=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2303=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-2303=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-2303=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2303=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2303=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-otp-1.19.2-150300.19.1 * krb5-1.19.2-150300.19.1 * krb5-debugsource-1.19.2-150300.19.1 * krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.19.1 * krb5-plugin-kdb-ldap-1.19.2-150300.19.1 * krb5-server-1.19.2-150300.19.1 * krb5-client-1.19.2-150300.19.1 * krb5-server-debuginfo-1.19.2-150300.19.1 * krb5-mini-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-spake-1.19.2-150300.19.1 * krb5-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.19.1 * krb5-mini-debugsource-1.19.2-150300.19.1 * krb5-mini-devel-1.19.2-150300.19.1 * krb5-devel-1.19.2-150300.19.1 * krb5-mini-1.19.2-150300.19.1 * krb5-plugin-preauth-pkinit-1.19.2-150300.19.1 * krb5-client-debuginfo-1.19.2-150300.19.1 * openSUSE Leap 15.3 (x86_64) * krb5-devel-32bit-1.19.2-150300.19.1 * krb5-32bit-1.19.2-150300.19.1 * krb5-32bit-debuginfo-1.19.2-150300.19.1 * openSUSE Leap 15.3 (aarch64_ilp32) * krb5-64bit-debuginfo-1.19.2-150300.19.1 * krb5-devel-64bit-1.19.2-150300.19.1 * krb5-64bit-1.19.2-150300.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-otp-1.19.2-150300.19.1 * krb5-debugsource-1.19.2-150300.19.1 * krb5-1.19.2-150300.19.1 * krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.19.1 * krb5-plugin-kdb-ldap-1.19.2-150300.19.1 * krb5-server-1.19.2-150300.19.1 * krb5-client-1.19.2-150300.19.1 * krb5-server-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-spake-1.19.2-150300.19.1 * krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.19.1 * krb5-debuginfo-1.19.2-150300.19.1 * krb5-devel-1.19.2-150300.19.1 * krb5-plugin-preauth-pkinit-1.19.2-150300.19.1 * krb5-client-debuginfo-1.19.2-150300.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * krb5-32bit-1.19.2-150300.19.1 * krb5-32bit-debuginfo-1.19.2-150300.19.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-otp-1.19.2-150300.19.1 * krb5-debugsource-1.19.2-150300.19.1 * krb5-1.19.2-150300.19.1 * krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.19.1 * krb5-plugin-kdb-ldap-1.19.2-150300.19.1 * krb5-server-1.19.2-150300.19.1 * krb5-client-1.19.2-150300.19.1 * krb5-server-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-spake-1.19.2-150300.19.1 * krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.19.1 * krb5-debuginfo-1.19.2-150300.19.1 * krb5-devel-1.19.2-150300.19.1 * krb5-plugin-preauth-pkinit-1.19.2-150300.19.1 * krb5-client-debuginfo-1.19.2-150300.19.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * krb5-32bit-1.19.2-150300.19.1 * krb5-32bit-debuginfo-1.19.2-150300.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-otp-1.19.2-150300.19.1 * krb5-debugsource-1.19.2-150300.19.1 * krb5-1.19.2-150300.19.1 * krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.19.1 * krb5-plugin-kdb-ldap-1.19.2-150300.19.1 * krb5-server-1.19.2-150300.19.1 * krb5-client-1.19.2-150300.19.1 * krb5-server-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-spake-1.19.2-150300.19.1 * krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.19.1 * krb5-debuginfo-1.19.2-150300.19.1 * krb5-devel-1.19.2-150300.19.1 * krb5-plugin-preauth-pkinit-1.19.2-150300.19.1 * krb5-client-debuginfo-1.19.2-150300.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * krb5-32bit-1.19.2-150300.19.1 * krb5-32bit-debuginfo-1.19.2-150300.19.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-otp-1.19.2-150300.19.1 * krb5-debugsource-1.19.2-150300.19.1 * krb5-1.19.2-150300.19.1 * krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.19.1 * krb5-plugin-kdb-ldap-1.19.2-150300.19.1 * krb5-server-1.19.2-150300.19.1 * krb5-client-1.19.2-150300.19.1 * krb5-server-debuginfo-1.19.2-150300.19.1 * krb5-plugin-preauth-spake-1.19.2-150300.19.1 * krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.19.1 * krb5-debuginfo-1.19.2-150300.19.1 * krb5-devel-1.19.2-150300.19.1 * krb5-plugin-preauth-pkinit-1.19.2-150300.19.1 * krb5-client-debuginfo-1.19.2-150300.19.1 * SUSE Enterprise Storage 7.1 (x86_64) * krb5-32bit-1.19.2-150300.19.1 * krb5-32bit-debuginfo-1.19.2-150300.19.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * krb5-debugsource-1.19.2-150300.19.1 * krb5-1.19.2-150300.19.1 * krb5-debuginfo-1.19.2-150300.19.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * krb5-debugsource-1.19.2-150300.19.1 * krb5-1.19.2-150300.19.1 * krb5-debuginfo-1.19.2-150300.19.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * krb5-debugsource-1.19.2-150300.19.1 * krb5-1.19.2-150300.19.1 * krb5-debuginfo-1.19.2-150300.19.1 ## References: * https://www.suse.com/security/cve/CVE-2024-37370.html * https://www.suse.com/security/cve/CVE-2024-37371.html * https://bugzilla.suse.com/show_bug.cgi?id=1227186 * https://bugzilla.suse.com/show_bug.cgi?id=1227187

1 0

openSUSE-RU-2024:0186-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 04 Jul '24

04 Jul '24

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0186-1 Rating: moderate References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for yast2-theme fixes no direct issue, it just refreshes the current OSS update channel. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2024-186=1 Package List: - openSUSE Leap 15.5 (noarch): yast2-theme-4.5.0-lp155.2.6.1 yast2-theme-breeze-4.5.0-lp155.2.6.1 yast2-theme-oxygen-4.5.0-lp155.2.6.1 References:

1 0

SUSE-SU-2024:2299-1: important: Security update for apache2-mod_auth_openidc
by OPENSUSE-UPDATES 04 Jul '24

04 Jul '24

# Security update for apache2-mod_auth_openidc Announcement ID: SUSE-SU-2024:2299-1 Rating: important References: * bsc#1219911 * bsc#1227261 Cross-References: * CVE-2024-24814 CVSS scores: * CVE-2024-24814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for apache2-mod_auth_openidc fixes the following issues: * CVE-2024-24814: Fixed a bug that can led to DoS when `OIDCSessionType client-cookie` is set and a crafted Cookie header is supplied. (bsc#1219911) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2299=1 SUSE-2024-2299=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-2299=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * apache2-mod_auth_openidc-2.3.8-150600.16.5.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150600.16.5.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150600.16.5.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-mod_auth_openidc-2.3.8-150600.16.5.1 * apache2-mod_auth_openidc-debugsource-2.3.8-150600.16.5.1 * apache2-mod_auth_openidc-debuginfo-2.3.8-150600.16.5.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24814.html * https://bugzilla.suse.com/show_bug.cgi?id=1219911 * https://bugzilla.suse.com/show_bug.cgi?id=1227261

1 0

openSUSE-SU-2024:0185-1: important: Security update for python-Js2Py
by opensuse-security＠opensuse.org 04 Jul '24

04 Jul '24

openSUSE Security Update: Security update for python-Js2Py ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0185-1 Rating: important References: #1226660 Cross-References: CVE-2024-28397 CVSS scores: CVE-2024-28397 (SUSE): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Js2Py fixes the following issues: - CVE-2024-28397: Fixed an issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call. (boo#1226660, gh#PiotrDabkowski/Js2Py#323) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-185=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): python3-Js2Py-0.70-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2024-28397.html https://bugzilla.suse.com/1226660

1 0

SUSE-SU-2024:2275-2: important: Security update for openssh
by OPENSUSE-UPDATES 04 Jul '24

04 Jul '24

# Security update for openssh Announcement ID: SUSE-SU-2024:2275-2 Rating: important References: * bsc#1226642 Cross-References: * CVE-2024-6387 CVSS scores: * CVE-2024-6387 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability can now be installed. ## Description: This update for openssh fixes the following issues: * CVE-2024-6387: Fixed race condition in a signal handler (bsc#1226642) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2275=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * openssh-clients-debuginfo-9.6p1-150600.6.3.1 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.3.1 * openssh-askpass-gnome-9.6p1-150600.6.3.1 * openssh-helpers-debuginfo-9.6p1-150600.6.3.1 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.3.1 * openssh-clients-9.6p1-150600.6.3.1 * openssh-helpers-9.6p1-150600.6.3.1 * openssh-9.6p1-150600.6.3.1 * openssh-debuginfo-9.6p1-150600.6.3.1 * openssh-fips-9.6p1-150600.6.3.1 * openssh-debugsource-9.6p1-150600.6.3.1 * openssh-server-9.6p1-150600.6.3.1 * openssh-common-debuginfo-9.6p1-150600.6.3.1 * openssh-cavs-debuginfo-9.6p1-150600.6.3.1 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.3.1 * openssh-server-debuginfo-9.6p1-150600.6.3.1 * openssh-common-9.6p1-150600.6.3.1 * openssh-cavs-9.6p1-150600.6.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-6387.html * https://bugzilla.suse.com/show_bug.cgi?id=1226642

1 0