August 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:1862-1: moderate: Security update for python
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Security update for python Announcement ID: SUSE-SU-2024:1862-1 Rating: moderate References: * bsc#1214675 * bsc#1219306 * bsc#1219559 * bsc#1220970 * bsc#1221854 * bsc#1222537 Cross-References: * CVE-2022-48560 * CVE-2023-27043 * CVE-2023-52425 * CVE-2024-0450 CVSS scores: * CVE-2022-48560 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-48560 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-52425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-0450 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves four vulnerabilities and has two security fixes can now be installed. ## Description: This update for python fixes the following issues: * CVE-2023-52425: Fixed using the system libexpat (bsc#1219559). * CVE-2023-27043: Modifed fix for unicode string handling in email.utils.parseaddr() (bsc#1222537). * CVE-2022-48560: Fixed use-after-free in Python via heappushpop in heapq (bsc#1214675). * CVE-2024-0450: Detect the vulnerability of the "quoted-overlap" zipbomb (bsc#1221854). Bug fixes: * Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306). * Build with -std=gnu89 to build correctly with gcc14 (bsc#1220970). * Switch from %patchN style to the %patch -P N one. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1862=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1862=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1862=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1862=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-debugsource-2.7.18-150000.65.1 * python-devel-2.7.18-150000.65.1 * python-base-debugsource-2.7.18-150000.65.1 * python-debuginfo-2.7.18-150000.65.1 * libpython2_7-1_0-2.7.18-150000.65.1 * python-idle-2.7.18-150000.65.1 * python-demo-2.7.18-150000.65.1 * python-tk-debuginfo-2.7.18-150000.65.1 * python-gdbm-debuginfo-2.7.18-150000.65.1 * python-2.7.18-150000.65.1 * python-base-2.7.18-150000.65.1 * python-curses-2.7.18-150000.65.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.65.1 * python-base-debuginfo-2.7.18-150000.65.1 * python-curses-debuginfo-2.7.18-150000.65.1 * python-xml-2.7.18-150000.65.1 * python-tk-2.7.18-150000.65.1 * python-gdbm-2.7.18-150000.65.1 * python-xml-debuginfo-2.7.18-150000.65.1 * openSUSE Leap 15.5 (x86_64) * python-32bit-2.7.18-150000.65.1 * python-32bit-debuginfo-2.7.18-150000.65.1 * python-base-32bit-debuginfo-2.7.18-150000.65.1 * python-base-32bit-2.7.18-150000.65.1 * libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.65.1 * libpython2_7-1_0-32bit-2.7.18-150000.65.1 * openSUSE Leap 15.5 (noarch) * python-doc-2.7.18-150000.65.1 * python-doc-pdf-2.7.18-150000.65.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python-debugsource-2.7.18-150000.65.1 * python-devel-2.7.18-150000.65.1 * python-base-debugsource-2.7.18-150000.65.1 * python-debuginfo-2.7.18-150000.65.1 * libpython2_7-1_0-2.7.18-150000.65.1 * python-idle-2.7.18-150000.65.1 * python-demo-2.7.18-150000.65.1 * python-tk-debuginfo-2.7.18-150000.65.1 * python-gdbm-debuginfo-2.7.18-150000.65.1 * python-2.7.18-150000.65.1 * python-base-2.7.18-150000.65.1 * python-curses-2.7.18-150000.65.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.65.1 * python-base-debuginfo-2.7.18-150000.65.1 * python-curses-debuginfo-2.7.18-150000.65.1 * python-xml-2.7.18-150000.65.1 * python-tk-2.7.18-150000.65.1 * python-gdbm-2.7.18-150000.65.1 * python-xml-debuginfo-2.7.18-150000.65.1 * openSUSE Leap 15.6 (x86_64) * python-32bit-2.7.18-150000.65.1 * python-32bit-debuginfo-2.7.18-150000.65.1 * python-base-32bit-debuginfo-2.7.18-150000.65.1 * python-base-32bit-2.7.18-150000.65.1 * libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.65.1 * libpython2_7-1_0-32bit-2.7.18-150000.65.1 * openSUSE Leap 15.6 (noarch) * python-doc-2.7.18-150000.65.1 * python-doc-pdf-2.7.18-150000.65.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * python-debugsource-2.7.18-150000.65.1 * python-devel-2.7.18-150000.65.1 * python-base-debugsource-2.7.18-150000.65.1 * python-debuginfo-2.7.18-150000.65.1 * libpython2_7-1_0-2.7.18-150000.65.1 * python-gdbm-debuginfo-2.7.18-150000.65.1 * python-2.7.18-150000.65.1 * python-base-2.7.18-150000.65.1 * python-curses-2.7.18-150000.65.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.65.1 * python-base-debuginfo-2.7.18-150000.65.1 * python-curses-debuginfo-2.7.18-150000.65.1 * python-xml-2.7.18-150000.65.1 * python-gdbm-2.7.18-150000.65.1 * python-xml-debuginfo-2.7.18-150000.65.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * python-debugsource-2.7.18-150000.65.1 * python-base-debugsource-2.7.18-150000.65.1 * python-debuginfo-2.7.18-150000.65.1 * libpython2_7-1_0-2.7.18-150000.65.1 * python-gdbm-debuginfo-2.7.18-150000.65.1 * python-2.7.18-150000.65.1 * python-base-2.7.18-150000.65.1 * python-curses-2.7.18-150000.65.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.65.1 * python-base-debuginfo-2.7.18-150000.65.1 * python-curses-debuginfo-2.7.18-150000.65.1 * python-xml-2.7.18-150000.65.1 * python-gdbm-2.7.18-150000.65.1 * python-xml-debuginfo-2.7.18-150000.65.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48560.html * https://www.suse.com/security/cve/CVE-2023-27043.html * https://www.suse.com/security/cve/CVE-2023-52425.html * https://www.suse.com/security/cve/CVE-2024-0450.html * https://bugzilla.suse.com/show_bug.cgi?id=1214675 * https://bugzilla.suse.com/show_bug.cgi?id=1219306 * https://bugzilla.suse.com/show_bug.cgi?id=1219559 * https://bugzilla.suse.com/show_bug.cgi?id=1220970 * https://bugzilla.suse.com/show_bug.cgi?id=1221854 * https://bugzilla.suse.com/show_bug.cgi?id=1222537

1 0

SUSE-SU-2024:1863-1: moderate: Security update for python-Jinja2
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Security update for python-Jinja2 Announcement ID: SUSE-SU-2024:1863-1 Rating: moderate References: * bsc#1218722 * bsc#1223980 Cross-References: * CVE-2024-22195 * CVE-2024-34064 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-34064 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-Jinja2 fixes the following issues: * Fixed HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-34064, bsc#1223980, CVE-2024-22195, bsc#1218722) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1863=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1863=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1863=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1863=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-1863=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1863=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-1863=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1863=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1863=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1863=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1863=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1863=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1863=1 ## Package List: * openSUSE Leap Micro 5.3 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 * openSUSE Leap Micro 5.4 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 * openSUSE Leap 15.5 (noarch) * python-Jinja2-emacs-2.10.1-150000.3.13.1 * python-Jinja2-vim-2.10.1-150000.3.13.1 * python3-Jinja2-2.10.1-150000.3.13.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 * Basesystem Module 15-SP5 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 * Basesystem Module 15-SP6 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * python3-Jinja2-2.10.1-150000.3.13.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2024-34064.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1223980

1 0

SUSE-SU-2024:1864-1: moderate: Security update for python-Jinja2
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Security update for python-Jinja2 Announcement ID: SUSE-SU-2024:1864-1 Rating: moderate References: * bsc#1218722 * bsc#1223980 Cross-References: * CVE-2024-22195 * CVE-2024-34064 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-34064 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Python 3 Module 15-SP5 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-Jinja2 fixes the following issues: * Fixed HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-34064, bsc#1223980, CVE-2024-22195, bsc#1218722) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1864=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1864=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1864=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-1864=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-1864=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-Jinja2-3.1.2-150400.12.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-Jinja2-3.1.2-150400.12.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python311-Jinja2-3.1.2-150400.12.6.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-Jinja2-3.1.2-150400.12.6.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-Jinja2-3.1.2-150400.12.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2024-34064.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1223980

1 0

SUSE-SU-2024:1865-1: moderate: Security update for wireshark
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Security update for wireshark Announcement ID: SUSE-SU-2024:1865-1 Rating: moderate References: * bsc#1224259 * bsc#1224274 * bsc#1224276 Cross-References: * CVE-2024-4853 * CVE-2024-4854 * CVE-2024-4855 CVSS scores: * CVE-2024-4853 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-4854 ( SUSE ): 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-4855 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for wireshark fixes the following issues: Update to version 3.6.22: * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops (bsc#1224274) * CVE-2024-4853: The editcap command line utility could crash when chopping bytes from the beginning of a packet (bsc#1224259) * CVE-2024-4855: The editcap command line utility could crash when injecting secrets while writing multiple files (bsc#1224276) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-1865=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1865=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1865=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1865=1 ## Package List: * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wireshark-debuginfo-3.6.23-150000.3.115.1 * wireshark-ui-qt-3.6.23-150000.3.115.1 * wireshark-debugsource-3.6.23-150000.3.115.1 * wireshark-ui-qt-debuginfo-3.6.23-150000.3.115.1 * wireshark-devel-3.6.23-150000.3.115.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libwsutil13-debuginfo-3.6.23-150000.3.115.1 * wireshark-debuginfo-3.6.23-150000.3.115.1 * libwiretap12-3.6.23-150000.3.115.1 * wireshark-3.6.23-150000.3.115.1 * libwireshark15-3.6.23-150000.3.115.1 * libwiretap12-debuginfo-3.6.23-150000.3.115.1 * wireshark-ui-qt-3.6.23-150000.3.115.1 * wireshark-debugsource-3.6.23-150000.3.115.1 * wireshark-ui-qt-debuginfo-3.6.23-150000.3.115.1 * libwsutil13-3.6.23-150000.3.115.1 * libwireshark15-debuginfo-3.6.23-150000.3.115.1 * wireshark-devel-3.6.23-150000.3.115.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libwsutil13-debuginfo-3.6.23-150000.3.115.1 * wireshark-debuginfo-3.6.23-150000.3.115.1 * libwiretap12-3.6.23-150000.3.115.1 * wireshark-3.6.23-150000.3.115.1 * libwireshark15-3.6.23-150000.3.115.1 * libwiretap12-debuginfo-3.6.23-150000.3.115.1 * wireshark-debugsource-3.6.23-150000.3.115.1 * libwsutil13-3.6.23-150000.3.115.1 * libwireshark15-debuginfo-3.6.23-150000.3.115.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * wireshark-debugsource-3.6.23-150000.3.115.1 * wireshark-debuginfo-3.6.23-150000.3.115.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4853.html * https://www.suse.com/security/cve/CVE-2024-4854.html * https://www.suse.com/security/cve/CVE-2024-4855.html * https://bugzilla.suse.com/show_bug.cgi?id=1224259 * https://bugzilla.suse.com/show_bug.cgi?id=1224274 * https://bugzilla.suse.com/show_bug.cgi?id=1224276

1 0

SUSE-SU-2024:1866-1: moderate: Security update for python-aiohttp
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Security update for python-aiohttp Announcement ID: SUSE-SU-2024:1866-1 Rating: moderate References: * bsc#1223098 Cross-References: * CVE-2024-27306 CVSS scores: * CVE-2024-27306 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Python 3 Module 15-SP5 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-aiohttp fixes the following issues: * CVE-2024-27306: Fixed XSS on index pages for static file handling (bsc#1223098) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1866=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1866=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1866=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1866=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-1866=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-1866=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-aiohttp-debuginfo-3.9.3-150400.10.21.1 * python-aiohttp-debugsource-3.9.3-150400.10.21.1 * python311-aiohttp-3.9.3-150400.10.21.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-debuginfo-3.9.3-150400.10.21.1 * python-aiohttp-debugsource-3.9.3-150400.10.21.1 * python311-aiohttp-3.9.3-150400.10.21.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-debuginfo-3.9.3-150400.10.21.1 * python-aiohttp-debugsource-3.9.3-150400.10.21.1 * python311-aiohttp-3.9.3-150400.10.21.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-3.9.3-150400.10.21.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-debuginfo-3.9.3-150400.10.21.1 * python-aiohttp-debugsource-3.9.3-150400.10.21.1 * python311-aiohttp-3.9.3-150400.10.21.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-debuginfo-3.9.3-150400.10.21.1 * python-aiohttp-debugsource-3.9.3-150400.10.21.1 * python311-aiohttp-3.9.3-150400.10.21.1 ## References: * https://www.suse.com/security/cve/CVE-2024-27306.html * https://bugzilla.suse.com/show_bug.cgi?id=1223098

1 0

SUSE-SU-2024:1867-1: moderate: Security update for fwupdate
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Security update for fwupdate Announcement ID: SUSE-SU-2024:1867-1 Rating: moderate References: * bsc#1209188 * bsc#1221301 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two security fixes can now be installed. ## Description: This update of fwupdate fixes the following issues: * rebuild the package with the new secure boot key (bsc#1209188). * Update the email address of security team in SBAT (bsc#1221301) * elf_aarch64_efi.lds: set the memory permission explicitly to avoid ld warning like "LOAD segment with RWX permissions" ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1867=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1867=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1867=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1867=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1867=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1867=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1867=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1867=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1867=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1867=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1867=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1867=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1867=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1867=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1867=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1867=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1867=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-1867=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1867=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1867=1 * SUSE Enterprise Storage 7 zypper in -t patch SUSE-Storage-7-2024-1867=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * openSUSE Leap 15.6 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise Micro 5.5 (x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * Basesystem Module 15-SP5 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * Basesystem Module 15-SP6 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Manager Proxy 4.3 (x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Manager Server 4.3 (x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 * SUSE Enterprise Storage 7 (aarch64 x86_64) * fwupdate-12-150100.11.15.2 * libfwup1-debuginfo-12-150100.11.15.2 * fwupdate-efi-12-150100.11.15.2 * fwupdate-debuginfo-12-150100.11.15.2 * fwupdate-debugsource-12-150100.11.15.2 * fwupdate-efi-debuginfo-12-150100.11.15.2 * libfwup1-12-150100.11.15.2 * fwupdate-devel-12-150100.11.15.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1209188 * https://bugzilla.suse.com/show_bug.cgi?id=1221301

1 0

SUSE-SU-2024:1872-1: moderate: Security update for python-tqdm
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Security update for python-tqdm Announcement ID: SUSE-SU-2024:1872-1 Rating: moderate References: * bsc#1223880 Cross-References: * CVE-2024-34062 CVSS scores: * CVE-2024-34062 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Python 3 Module 15-SP5 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-tqdm fixes the following issues: Update to version 4.66.4: * rich: fix completion * cli: eval safety (CVE-2024-34062, bsc#1223880) * pandas: add DataFrame.progress_map * notebook: fix HTML padding * keras: fix resuming training when verbose>=2 * fix format_num negative fractions missing leading zero * fix Python 3.12 DeprecationWarning on import ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-1872=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1872=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1872=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1872=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-1872=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-1872=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1872=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1872=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1872=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1872=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1872=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python-tqdm-bash-completion-4.66.4-150400.9.12.1 * python311-tqdm-4.66.4-150400.9.12.1 * openSUSE Leap 15.5 (noarch) * python-tqdm-bash-completion-4.66.4-150400.9.12.1 * python311-tqdm-4.66.4-150400.9.12.1 * openSUSE Leap 15.6 (noarch) * python-tqdm-bash-completion-4.66.4-150400.9.12.1 * python311-tqdm-4.66.4-150400.9.12.1 * Public Cloud Module 15-SP4 (noarch) * python311-tqdm-4.66.4-150400.9.12.1 * Python 3 Module 15-SP5 (noarch) * python-tqdm-bash-completion-4.66.4-150400.9.12.1 * python311-tqdm-4.66.4-150400.9.12.1 * Python 3 Module 15-SP6 (noarch) * python-tqdm-bash-completion-4.66.4-150400.9.12.1 * python311-tqdm-4.66.4-150400.9.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python-tqdm-bash-completion-4.66.4-150400.9.12.1 * python311-tqdm-4.66.4-150400.9.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python-tqdm-bash-completion-4.66.4-150400.9.12.1 * python311-tqdm-4.66.4-150400.9.12.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * python-tqdm-bash-completion-4.66.4-150400.9.12.1 * python311-tqdm-4.66.4-150400.9.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * python-tqdm-bash-completion-4.66.4-150400.9.12.1 * python311-tqdm-4.66.4-150400.9.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python-tqdm-bash-completion-4.66.4-150400.9.12.1 * python311-tqdm-4.66.4-150400.9.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-34062.html * https://bugzilla.suse.com/show_bug.cgi?id=1223880

1 0

SUSE-RU-2024:1873-1: moderate: Recommended update for linuxrc
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Recommended update for linuxrc Announcement ID: SUSE-RU-2024:1873-1 Rating: moderate References: * bsc#1218621 * bsc#1222289 * bsc#1223326 * jsc#SLE-22578 * jsc#SLE-24584 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains two features and has three fixes can now be installed. ## Description: This update for linuxrc fixes the following issues: * add 'repo' URL scheme to linuxrc (jsc#SLE-22578, jsc#SLE-24584, bsc#1223326, gh#openSUSE/linuxrc#332) * ensure the device is passed to hd and disk Zypp schemes (jsc#SLE-22578, jsc#SLE-24584) * add relative flag to url struct * add 'repo' URL scheme to linuxrc (jsc#SLE-22578, jsc#SLE-24584, bsc#1223326) * write /etc/locale.conf and /etc/vconsole.conf (bsc#1218621, bsc#1222289, gh#openSUSE/linuxrc#332) * update year in copyright message ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-1873=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1873=1 openSUSE-SLE-15.5-2024-1873=1 ## Package List: * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * linuxrc-7.0.32.8-150500.3.9.4 * linuxrc-debuginfo-7.0.32.8-150500.3.9.4 * linuxrc-debugsource-7.0.32.8-150500.3.9.4 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * linuxrc-7.0.32.8-150500.3.9.4 * linuxrc-debuginfo-7.0.32.8-150500.3.9.4 * linuxrc-debugsource-7.0.32.8-150500.3.9.4 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1218621 * https://bugzilla.suse.com/show_bug.cgi?id=1222289 * https://bugzilla.suse.com/show_bug.cgi?id=1223326 * https://jira.suse.com/browse/SLE-22578 * https://jira.suse.com/browse/SLE-24584

1 0

SUSE-RU-2024:2013-1: moderate: Recommended update for gnome-browser-connector
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Recommended update for gnome-browser-connector Announcement ID: SUSE-RU-2024:2013-1 Rating: moderate References: * bsc#1223902 Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for gnome-browser-connector fixes the following issues: * Fixed support for Python 3.6 (bsc#1223902) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2013=1 openSUSE-SLE-15.6-2024-2013=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2013=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * gnome-browser-connector-42.1-150600.3.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gnome-browser-connector-42.1-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223902

1 0

SUSE-RU-2024:2014-1: moderate: Recommended update for google-cloud-sap-agent
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Recommended update for google-cloud-sap-agent Announcement ID: SUSE-RU-2024:2014-1 Rating: moderate References: * bsc#1225166 * bsc#1225558 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for google-cloud-sap-agent fixes the following issues: * Update to version 3.3 (bsc#1225166, bsc#1225558) * Build updated to use -mod=vendor during build * Updated go.mod and go.sum with dependencies for safetext, using go mod vendor for github action * Add actual values and comments to usagemetrics.go to ensure that error and action codes are only appended to the end of the list. * Remove usage metrics from configureinstance.go * Add a hard Disable for reliability metrics collection until the namespace is created and tested. * Adding metrics for time taken by each query * Add SHA224 of labels as a new label. * Remove collect_reliability_metrics from configuration.json * Small tweaks to backint log and inquire path generation * Fix for unmarshalling backint configuration. * Implementation of instant snapshot group backup workflow * Backint changes around shorten_folder_path * Rename max_diagnose_size_gb to diagnose_file_max_size_gb * Adding start and finish logs in performance diagnostics * Validate that all disks mapped to /hana/data belong to the same consistency group. * Rename backint monitoring metrics parameter * Trim folder prefix for Backint INQUIRE output. * Add the ability to test the database connection * Reduce log level of some storage messages to debug. * Finalize guest action request and response format. * Backint dashboard fix logs * Add scorecards to backint dashboard * Making proto changes for HANA Monitoring support for multiple tennats and ha setup * Add total upload/download time to log. * Add HANA indexserver.ini metrics to WLM metric collection. * Add Netweaver role metrics as part of process metrics * Rotate old support bundles. * Update the default value of confirm-data-snapshot-after-create to false. and add to usage() * Add option to confirm HANA snapshot as successful before disk snapshot is uploaded. * Change log level from warn to info for non-critical messages. * Add diagnose_folder parameter to Backint * Add a 1 GB buffer to needed bytes for diagnostic * Add labels to group snapshot backup. * Enable the show status and restart agent functions for Windows. * Add WLM metric collection for num_completion_queues and num_submit_queues. * Collect support bundle on Backint errors. * Adding usage metrics to performance diagnostics * Collect agent-only support bundle on failure of backint and hanadiskbackup. * Minor Backint improvements * Add ability collect only agent logs using agent-logs-only flag to supportbundle * Bump version to 3.3 * Add Backint metrics dashboard * DO NOT remove log files on uninstall * Adding more unit tests * Changing location of zipped file to within the final folder identified by unique timestamp. * Minor refactorings and improvements with increasing code coverage * Make sure DB instance number is recorded in System data. * Change configuration.json to 0664 to ensure world cannot write. * Add Netweaver Java discovery to SAP Agent. * Add a new version of functions to read cloud properties from metadata server. * Updating generated protos to proc-gen-go v1.34.1 * Updating runConfigureInstance method and adding unit tests for covering configure instance ote invocation * Zip the final bundle and add upload functionality * Record database SID alongside tenant DB SIDs * Reduce log severity in discovery * Add HANA version to product version data * Fix race condition in tests * Read disk mapping from instance info if source disk is not provided to hanadiskbackup * Add option to shorten the folder path in the bucket. * Add SSL support for cmdline-based querying and some bugfixes * Move recovery package to shared directory. * Update protoc-gen-go version to v1.34.0 in multiple protos * Adding FIO commands to performance diagnostics * Remove error logs when errors are being returned * Adding perfdiag to performance diagnostics * Add AppInstance data to discovery data uploads. * Introduce protos for guestactions messages and responses. Support multiple commands per message. * Update wording for HANA Insights rules. * Configureinstance updates. * Adding a check for retention policy before performing backup operation. * Remove the unused loglevel flag from logusage OTE * Change the language around the default parameters being optimized for performance in backint * Add instance role to SAP System properties * Increase wait time for index server to stop. * Integrating backint OTE into performancediagnostics * Update wording around configureinstance unsupported machine type. * Pass the right disk name to check if disk is attached * Integrating new DB Handle and hdbuserstore key support with remaining HANA DB dependant workflows * Refactor HANA and filesystems specific code to a common hanabackup package * Bumps x/net dependency to v0.23 * Append HANA Insights rule to WLM fake metrics file in script to generate WLM rule. * Integrating configure instance ote in performance diagnostics * Update disk backup OTE to parse paths even with /dev/mapper in the middle of path, not necessarily as a prefix * Adding a few missing labels to wlm-fake-metrics.yaml * Changing loglevel for onetime.Init() calls * Refactor change - Move PD related functions to gce.go * Fix agentcommunication import replace statements * Update replace functions for new open source dependencies. * Set up scaffolding for guest actions handling in SAP Agent along with UAP library code * Backint upload/download metrics sent to cloud monitoring. * Cleaning up the performance diagntics file wth recent changes * Fixes to usage strings in OTEs for optional params * Integrating new database connector with HANA Monitoring and adding support for HDBUserstore Key * Implement hdbsql commandline result parsing * SAP Discovery - Add SAP Instance Numbers to instance properties * Updating OTEs to include params for when OTE is invoked internally * Modifying flags to follow design changes * Create fake WLM metric overrides for testing * Implement constructors and query functions for querying HANA DB via hdbuserstore using cmdline * Skeleton for querying HANA DB via hdbuserstore using cmdline * Parameterize Backint Diagnose max file size. * Metadata parameter added to Backint. * Adding initial layout for performance diagnostics OTE * Create a new API CreateClient() in shared logging which returns an error in case of failures * Backint no longer writes ERROR if temporary chunk failed to delete. * Create onetime.Init() to condense reused code. * Fixing a typo in a process metrics retry logic comment * Rename workload_validation param with workload_evaluation in configure OTE * Send agent version in Write Insight requests * Ensuring /sap/cluster/resources covers all the nodes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2014=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2014=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-2014=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-2014=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-2014=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2014=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2014=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.3-150100.3.32.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.3-150100.3.32.1 * Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.3-150100.3.32.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.3-150100.3.32.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.3-150100.3.32.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.3-150100.3.32.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.3-150100.3.32.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1225166 * https://bugzilla.suse.com/show_bug.cgi?id=1225558

1 0