August 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:2210-1: moderate: Recommended update for release-notes-sle_hpc
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Recommended update for release-notes-sle_hpc Announcement ID: SUSE-RU-2024:2210-1 Rating: moderate References: * bsc#933411 Affected Products: * HPC Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP6 * SUSE Linux Enterprise Server 15 SP6 An update that has one fix can now be installed. ## Description: This update for release-notes-sle_hpc fixes the following issue: * Version update set to maintained (bsc#933411) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2210=1 * HPC Module 15-SP6 zypper in -t patch SUSE-SLE-Module-HPC-15-SP6-2024-2210=1 * SUSE Linux Enterprise High Performance Computing 15 SP6 zypper in -t patch SUSE-SLE-Product-HPC-15-SP6-2024-2210=1 ## Package List: * openSUSE Leap 15.6 (noarch) * release-notes-sle_hpc-15.600000000.20240417-150600.3.3.5 * HPC Module 15-SP6 (noarch) * release-notes-sle_hpc-15.600000000.20240417-150600.3.3.5 * SUSE Linux Enterprise High Performance Computing 15 SP6 (noarch) * release-notes-sle_hpc-15.600000000.20240417-150600.3.3.5 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=933411

1 0

SUSE-RU-2024:2243-1: moderate: Recommended update for tboot
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Recommended update for tboot Announcement ID: SUSE-RU-2024:2243-1 Rating: moderate References: * jsc#SLE-8505 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature can now be installed. ## Description: This update for tboot fixes the following issues: * Version bump to upstream version v1.11.4 (jsc#SLE-8505) * v1.11.4 * Increase the TBOOT log size from 32 KB to 64 KB. For some Intel server platforms, it was noticed that TBOOT_SERIAL_LOG memory section was too small to hold all of the print logs, produced by TBOOT. Due to this reason TBOOT log section memory size had to be increase to 64KB. * v1.11.3 * Fix the hanging TBOOT issue, which appeared during the RLPs wake up process on the Intel's multisocket platform. This problem appeared during the AP stacks allocations for these RLPs. TBOOT allocated memory for them depending on the woken-up CPUs X2 APIC values. When some of them exceeded the NR_CPUS (1024), then the RLP wake up process execution halted. For the current moment, the maximal X2 APID value was increased from 1024 to 8192. This kind of solution fixed the given problem. * v1.11.2 * Fix the RAM memory allocation algorithm for the initrd. * v1.11.1 * Revert log memory range extension (caused memory overlaps and boot failures) * v1.11.0 * Fixed TPM handling to flush objects after integrity measurement (Intel PTT limitations) * Extended low memory range for logs (HCC CPUs had issue with not enough memory) * "agile" removed from PCR Extend policy options (requested deprecation) * Added handling for flexible ACM Info Table format * lcptools: CPPFLAGS use by environment in build * lcptools: removed **DATE** refs to make build reproducible * Only platform-matching SINIT modules can be selected * txt-acminfo: Map TXT heap using mmap * Typo fix in man page * v1.10.5 * Fixed mlehash.c to bring back functionality and make it GCC12 compliant * Reverted change for replacing EFI memory to bring back Tboot in-memory logs * v1.10.4 * Fix hash printing for SHA384, SHA512 and SM3 * Touch ups for GCC12 * Set GDT to map CS and DS to 4GB before jumping to Linux * make efi_memmap_reserve handle gaps like e820_protect_region * Ensure that growth of Multiboot tags does not go beyond original area * Replace EFI memory map in Multiboot2 info * Fix endianness of pcr_info->pcr_selection.size_of_select * Don't ignore locality in PCR file * Fix composite hashing algorithm for PCONF elements to match lcptools-1 * v1.10.3 * Add UNI-VGA license information * Remove poly1305 object files on clean * Support higher resolution monitors * Use SHA256 as default hashing algorithm in lcp2_mlehash and tb_polgen * Add OpenSSL 3.0.0 support in lcptools-v2 * Increase number of supported CPUs to 1024 to accommodate for larger units ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2243=1 openSUSE-SLE-15.6-2024-2243=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2243=1 ## Package List: * openSUSE Leap 15.6 (x86_64 i586) * tboot-debuginfo-20240625_1.11.4-150600.11.3.1 * tboot-20240625_1.11.4-150600.11.3.1 * tboot-debugsource-20240625_1.11.4-150600.11.3.1 * Basesystem Module 15-SP6 (x86_64) * tboot-debuginfo-20240625_1.11.4-150600.11.3.1 * tboot-20240625_1.11.4-150600.11.3.1 * tboot-debugsource-20240625_1.11.4-150600.11.3.1 ## References: * https://jira.suse.com/browse/SLE-8505

1 0

SUSE-RU-2024:2956-1: moderate: Recommended update for tracker-miners
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Recommended update for tracker-miners Announcement ID: SUSE-RU-2024:2956-1 Rating: moderate References: * bsc#1228952 Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 An update that has one fix can now be installed. ## Description: This update for tracker-miners fixes the following issue: * fix coredump due to sandbox violation (bsc#1228952). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2956=1 openSUSE-SLE-15.6-2024-2956=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2956=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-2956=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * tracker-miners-debuginfo-3.6.2-150600.4.3.2 * tracker-miner-files-3.6.2-150600.4.3.2 * tracker-miners-3.6.2-150600.4.3.2 * tracker-miner-files-debuginfo-3.6.2-150600.4.3.2 * tracker-miners-debugsource-3.6.2-150600.4.3.2 * openSUSE Leap 15.6 (noarch) * tracker-miners-lang-3.6.2-150600.4.3.2 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * tracker-miners-debuginfo-3.6.2-150600.4.3.2 * tracker-miner-files-3.6.2-150600.4.3.2 * tracker-miners-3.6.2-150600.4.3.2 * tracker-miner-files-debuginfo-3.6.2-150600.4.3.2 * tracker-miners-debugsource-3.6.2-150600.4.3.2 * SUSE Linux Enterprise Workstation Extension 15 SP6 (noarch) * tracker-miners-lang-3.6.2-150600.4.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1228952

1 0

SUSE-RU-2024:2957-1: moderate: Recommended update for ldb, samba
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Recommended update for ldb, samba Announcement ID: SUSE-RU-2024:2957-1 Rating: moderate References: * bsc#1228732 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for ldb, samba fixes the following issues: * Many qsort() comparisons are non-transitive, which can lead to out-of-bounds access in some circumstances. * Fix a crash when joining offline and 'kerberos method' includes keytab (bsc#1228732). * Fix reading the password from STDIN or environment vars if it was already given in the command line (bsc#1228732). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0. * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022). * Panic in dreplsrv_op_pull_source_apply_changes_trigger. * winbindd, net ads join and other things don't work on an ipv6 only host. * Smbcacls incorrectly propagates inheritance with Inherit-Only flag. * http library doesn't support 'chunked transfer encoding'. * fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close() * samba-gpupdate: Correctly implement site support. * libgpo: Segfault in python bindings. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2957=1 openSUSE-SLE-15.6-2024-2957=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2957=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2024-2957=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libsamba-policy0-python3-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-debugsource-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libldb2-2.8.1-150600.3.3.4 * samba-gpupdate-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-devel-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-libs-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-python3-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * ldb-tools-debuginfo-2.8.1-150600.3.3.4 * samba-client-libs-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libsamba-policy0-python3-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-tool-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-ldb-ldap-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-python3-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-test-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * ctdb-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libldb2-debuginfo-2.8.1-150600.3.3.4 * samba-libs-python3-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-ldb-ldap-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * ctdb-pcp-pmda-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libsamba-policy-python3-devel-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * ldb-debugsource-2.8.1-150600.3.3.4 * ldb-tools-2.8.1-150600.3.3.4 * samba-test-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * python3-ldb-devel-2.8.1-150600.3.3.4 * samba-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-libs-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * python3-ldb-2.8.1-150600.3.3.4 * python3-ldb-debuginfo-2.8.1-150600.3.3.4 * samba-libs-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-libs-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * ctdb-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libldb-devel-2.8.1-150600.3.3.4 * libsamba-policy-devel-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * ctdb-pcp-pmda-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-python3-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * openSUSE Leap 15.6 (x86_64) * samba-winbind-libs-32bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-32bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-32bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libsamba-policy0-python3-32bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-libs-32bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-libs-32bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-python3-32bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-32bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libsamba-policy0-python3-32bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libldb2-32bit-2.8.1-150600.3.3.4 * samba-client-libs-32bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-python3-32bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-32bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-devel-32bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * python3-ldb-32bit-debuginfo-2.8.1-150600.3.3.4 * python3-ldb-32bit-2.8.1-150600.3.3.4 * libldb2-32bit-debuginfo-2.8.1-150600.3.3.4 * openSUSE Leap 15.6 (noarch) * samba-doc-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * openSUSE Leap 15.6 (aarch64 x86_64) * samba-ceph-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-ceph-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * openSUSE Leap 15.6 (aarch64_ilp32) * python3-ldb-64bit-2.8.1-150600.3.3.4 * libsamba-policy0-python3-64bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-libs-64bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-libs-64bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-libs-64bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-devel-64bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-64bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-libs-64bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-64bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-python3-64bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-python3-64bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libldb2-64bit-debuginfo-2.8.1-150600.3.3.4 * samba-libs-64bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libsamba-policy0-python3-64bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libldb2-64bit-2.8.1-150600.3.3.4 * python3-ldb-64bit-debuginfo-2.8.1-150600.3.3.4 * samba-client-64bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libsamba-policy0-python3-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-debugsource-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libldb2-2.8.1-150600.3.3.4 * samba-gpupdate-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-devel-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-libs-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-python3-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * ldb-tools-debuginfo-2.8.1-150600.3.3.4 * samba-client-libs-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libsamba-policy0-python3-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-tool-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-ldb-ldap-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-python3-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libldb2-debuginfo-2.8.1-150600.3.3.4 * samba-libs-python3-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-ldb-ldap-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libsamba-policy-python3-devel-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * ldb-debugsource-2.8.1-150600.3.3.4 * ldb-tools-2.8.1-150600.3.3.4 * samba-libs-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * python3-ldb-devel-2.8.1-150600.3.3.4 * samba-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-libs-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * python3-ldb-2.8.1-150600.3.3.4 * python3-ldb-debuginfo-2.8.1-150600.3.3.4 * samba-libs-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-libs-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libldb-devel-2.8.1-150600.3.3.4 * libsamba-policy-devel-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-python3-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * Basesystem Module 15-SP6 (aarch64 x86_64) * samba-ceph-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-ceph-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * Basesystem Module 15-SP6 (x86_64) * samba-winbind-libs-32bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-client-libs-32bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-winbind-libs-32bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-32bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libldb2-32bit-2.8.1-150600.3.3.4 * samba-client-libs-32bit-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-libs-32bit-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * libldb2-32bit-debuginfo-2.8.1-150600.3.3.4 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * ctdb-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * ctdb-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-debugsource-4.19.7+git.357.1d7950ebd62-150600.3.3.2 * samba-debuginfo-4.19.7+git.357.1d7950ebd62-150600.3.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1228732

1 0

SUSE-SU-2024:2776-1: moderate: Security update for dri3proto, presentproto, wayland-protocols, xwayland
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Security update for dri3proto, presentproto, wayland-protocols, xwayland Announcement ID: SUSE-SU-2024:2776-1 Rating: moderate References: * bsc#1219892 * bsc#1222309 * bsc#1222310 * bsc#1222312 * bsc#1222442 * jsc#PED-9498 Cross-References: * CVE-2024-31080 * CVE-2024-31081 * CVE-2024-31083 CVSS scores: * CVE-2024-31080 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-31081 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-31083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves three vulnerabilities, contains one feature and has two security fixes can now be installed. ## Description: This update for dri3proto, presentproto, wayland-protocols, xwayland fixes the following issues: Changes in presentproto: * update to version 1.4 (patch generated from xorgproto-2024.1 sources) Changes in wayland-protocols: * Update to version 1.36: * xdg-dialog: fix missing namespace in protocol name * Changes from version 1.35: * cursor-shape-v1: Does not advertises the list of supported cursors * xdg-shell: add missing enum attribute to set_constraint_adjustment * xdg-shell: recommend against drawing decorations when tiled * tablet-v2: mark as stable * staging: add alpha-modifier protocol * Update to 1.36 * Fix to the xdg dialog protocol * tablet-v2 protocol is now stable * alpha-modifier: new protocol * Bug fix to the cursor shape documentation * The xdg-shell protocol now also explicitly recommends against drawing decorations outside of the window geometry when tiled * Update to 1.34: * xdg-dialog: new protocol * xdg-toplevel-drag: new protocol * Fix typo in ext-foreign-toplevel-list-v1 * tablet-v2: clarify that name/id events are optional * linux-drm-syncobj-v1: new protocol * linux-explicit-synchronization-v1: add linux-drm-syncobj note * Update to version 1.33: * xdg-shell: Clarify what a toplevel by default includes * linux-dmabuf: sync changes from unstable to stable * linux-dmabuf: require all planes to use the same modifier * presentation-time: stop referring to Linux/glibc * security-context-v1: Make sandbox engine names use reverse-DNS * xdg-decoration: remove ambiguous wording in configure event * xdg-decoration: fix configure event summary * linux-dmabuf: mark as stable * linux-dmabuf: add note about implicit sync * security-context-v1: Document what can be done with the open sockets * security-context-v1: Document out of band metadata for flatpak Changes in dri3proto: * update to version 1.4 (patch generated from xorgproto-2024.1 sources) Changes in xwayland: * Update to bugfix release 24.1.1 for the current stable 24.1 branch of Xwayland * xwayland: fix segment fault in `xwl_glamor_gbm_init_main_dev` * os: Explicitly include X11/Xmd.h for CARD32 definition to fix building on i686 * present: On *BSD, epoll-shim is needed to emulate eventfd() * xwayland: Stop on first unmapped child * xwayland/window-buffers: Promote xwl_window_buffer * xwayland/window-buffers: Add xwl_window_buffer_release() * xwayland/glamor/gbm: Copy explicit sync code to GLAMOR/GBM * xwayland/window-buffers: Use synchronization from GLAMOR/GBM * xwayland/window-buffers: Do not always set syncpnts * xwayland/window-buffers: Move code to submit pixmaps * xwayland/window-buffers: Set syncpnts for all pixmaps * xwayland: Move xwl_window disposal to its own function * xwayland: Make sure we do not leak xwl_window on destroy * wayland/window-buffers: Move buffer disposal to its own function * xwayland/window-buffers: optionally force disposal * wayland: Force disposal of windows buffers for root on destroy * xwayland: Check for pointer in xwl_seat_leave_ptr() * xwayland: remove includedir from pkgconfig * disable DPMS on sle15 due to missing proto package * Update to feature release 24.1.0 * This fixes a couple of regressions introduced in the previous release candidate versions along with a fix for XTEST emulation with EI. * xwayland: Send ei_device_frame on device_scroll_discrete * xwayland: Restore the ResizeWindow handler * xwayland: Handle rootful resize in ResizeWindow * xwayland: Move XRandR emulation to the ResizeWindow hook * xwayland: Use correct xwl_window lookup function in xwl_set_shape * eglstreams has been dropped * Update to bug fix relesae 23.2.7 * m4: drop autoconf leftovers * xwayland: Send ei_device_frame on device_scroll_discrete * xwayland: Call drmFreeDevice for dma-buf default feedback * xwayland: Use drmDevicesEqual in xwl_dmabuf_feedback_tranche_done * dri3: Free formats in cache_formats_and_modifiers * xwayland/glamor: Handle depth 15 in gbm_format_for_depth * Revert "xwayland/glamor: Avoid implicit redirection with depth 32 parent windows" * xwayland: Check for outputs before lease devices * xwayland: Do not remove output on withdraw if leased * Update to 23.2.6 * This is a quick bug fix release to address a regression introduced by the fix for CVE-2024-31083 in xwayland-23.2.5. * Security update 23.2.5 This release contains the 3 security fixes that actually apply to Xwayland reported in the security advisory of April 3rd 2024 * CVE-2024-31080 * CVE-2024-31081 * CVE-2024-31083 Additionally, it also contains a couple of other fixes, a copy/paste error in the DeviceStateNotify event and a fix to enable buttons with pointer gestures for backward compatibility with legacy X11 clients. * Don't provide xorg-x11-server-source * xwayland sources are not meant for a generic server. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2776=1 openSUSE-SLE-15.6-2024-2776=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2776=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2776=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2776=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2776=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-2776=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * xwayland-devel-24.1.1-150600.5.3.1 * xwayland-debuginfo-24.1.1-150600.5.3.1 * xwayland-debugsource-24.1.1-150600.5.3.1 * xwayland-24.1.1-150600.5.3.1 * presentproto-devel-1.3-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * wayland-protocols-devel-1.36-150600.4.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * dri3proto-devel-1.2-150100.6.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * dri3proto-devel-1.2-150100.6.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * dri3proto-devel-1.2-150100.6.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * dri3proto-devel-1.2-150100.6.3.1 * presentproto-devel-1.3-150600.3.3.1 * SUSE Package Hub 15 15-SP6 (noarch) * wayland-protocols-devel-1.36-150600.4.3.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * xwayland-debugsource-24.1.1-150600.5.3.1 * xwayland-24.1.1-150600.5.3.1 * xwayland-debuginfo-24.1.1-150600.5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-31080.html * https://www.suse.com/security/cve/CVE-2024-31081.html * https://www.suse.com/security/cve/CVE-2024-31083.html * https://bugzilla.suse.com/show_bug.cgi?id=1219892 * https://bugzilla.suse.com/show_bug.cgi?id=1222309 * https://bugzilla.suse.com/show_bug.cgi?id=1222310 * https://bugzilla.suse.com/show_bug.cgi?id=1222312 * https://bugzilla.suse.com/show_bug.cgi?id=1222442 * https://jira.suse.com/browse/PED-9498

1 0

SUSE-RU-2024:2777-1: moderate: Recommended update for rust, rust1.80
by OPENSUSE-UPDATES 19 Aug '24

19 Aug '24

# Recommended update for rust, rust1.80 Announcement ID: SUSE-RU-2024:2777-1 Rating: moderate References: * jsc#SLE-18626 Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature can now be installed. ## Description: This update for rust, rust1.80 fixes the following issues: # Version 1.80.0 (2024-07-25) ## Language * Document maximum allocation size * Allow zero-byte offsets and ZST read/writes on arbitrary pointers * Support C23's variadics without a named parameter * Stabilize `exclusive_range_pattern` feature * Guarantee layout and ABI of `Result` in some scenarios ## Compiler * Update cc crate to v1.0.97 allowing additional spectre mitigations on MSVC targets * Allow field reordering on types marked `repr(packed(1))` * Add a lint against never type fallback affecting unsafe code * Disallow cast with trailing braced macro in let-else * Expand `for_loops_over_fallibles` lint to lint on fallibles behind references. * self-contained linker: retry linking without `-fuse-ld=lld` on CCs that don't support it * Do not parse CVarArgs (`...`) as a type in trait bounds * Improvements to LLDB formatting * For the wasm32-wasip2 target default to PIC and do not use `-fuse-ld=lld` * Add x86_64-unknown-linux-none as a tier 3 target * Lint on `foo.into_iter()` resolving to `&Box<[T]>: IntoIterator` ## Libraries * Add `size_of` and `size_of_val` and `align_of` and `align_of_val` to the prelude * Abort a process when FD ownership is violated * io::Write::write_fmt: panic if the formatter fails when the stream does not fail * Panic if `PathBuf::set_extension` would add a path separator * Add assert_unsafe_precondition to unchecked_{add,sub,neg,mul,shl,shr} methods * Update `c_char` on AIX to use the correct type * `offset_of!` no longer returns a temporary * Handle sigma in `str.to_lowercase` correctly * Raise `DEFAULT_MIN_STACK_SIZE` to at least 64KiB ## Stabilized APIs * `impl Default for Rc<CStr>` https://doc.rust- lang.org/beta/alloc/rc/struct.Rc.html#impl-Default-for-Rc%3CCStr%3E * `impl Default for Rc<str>` https://doc.rust- lang.org/beta/alloc/rc/struct.Rc.html#impl-Default-for-Rc%3Cstr%3E * `impl Default for Rc<[T]>` https://doc.rust- lang.org/beta/alloc/rc/struct.Rc.html#impl-Default-for-Rc%3C%5BT%5D%3E * `impl Default for Arc<str>` https://doc.rust- lang.org/beta/alloc/sync/struct.Arc.html#impl-Default-for-Arc%3Cstr%3E * `impl Default for Arc<CStr>` https://doc.rust- lang.org/beta/alloc/sync/struct.Arc.html#impl-Default-for-Arc%3CCStr%3E * `impl Default for Arc<[T]>` https://doc.rust- lang.org/beta/alloc/sync/struct.Arc.html#impl-Default-for-Arc%3C%5BT%5D%3E * `impl IntoIterator for Box<[T]>` https://doc.rust- lang.org/beta/alloc/boxed/struct.Box.html#impl-IntoIterator-for- Box%3C%5BI%5D,+A%3E * `impl FromIterator<String> for Box<str>` https://doc.rust- lang.org/beta/alloc/boxed/struct.Box.html#impl-FromIterator%3CString%3E-for- Box%3Cstr%3E) * `impl FromIterator<char> for Box<str>` https://doc.rust- lang.org/beta/alloc/boxed/struct.Box.html#impl-FromIterator%3Cchar%3E-for- Box%3Cstr%3E * `LazyCell` https://doc.rust-lang.org/beta/core/cell/struct.LazyCell.html * `LazyLock` https://doc.rust-lang.org/beta/std/sync/struct.LazyLock.html * `Duration::div_duration_f32` https://doc.rust- lang.org/beta/std/time/struct.Duration.html#method.div_duration_f32 * `Duration::div_duration_f64` https://doc.rust- lang.org/beta/std/time/struct.Duration.html#method.div_duration_f64 * `Option::take_if` https://doc.rust- lang.org/beta/std/option/enum.Option.html#method.take_if * `Seek::seek_relative` https://doc.rust- lang.org/beta/std/io/trait.Seek.html#method.seek_relative * `BinaryHeap::as_slice` https://doc.rust- lang.org/beta/std/collections/struct.BinaryHeap.html#method.as_slice * `NonNull::offset` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.offset * `NonNull::byte_offset` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.byte_offset * `NonNull::add` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.add * `NonNull::byte_add` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.byte_add * `NonNull::sub` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.sub * `NonNull::byte_sub` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.byte_sub * `NonNull::offset_from` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.offset_from * `NonNull::byte_offset_from` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.byte_offset_from * `NonNull::read` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.read * `NonNull::read_volatile` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.read_volatile * `NonNull::read_unaligned` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.read_unaligned * `NonNull::write` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.write * `NonNull::write_volatile` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.write_volatile * `NonNull::write_unaligned` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.write_unaligned * `NonNull::write_bytes` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.write_bytes * `NonNull::copy_to` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.copy_to * `NonNull::copy_to_nonoverlapping` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.copy_to_nonoverlapping * `NonNull::copy_from` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.copy_from * `NonNull::copy_from_nonoverlapping` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.copy_from_nonoverlapping * `NonNull::replace` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.replace * `NonNull::swap` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.swap * `NonNull::drop_in_place` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.drop_in_place * `NonNull::align_offset` https://doc.rust- lang.org/beta/std/ptr/struct.NonNull.html#method.align_offset * `<[T]>::split_at_checked` https://doc.rust- lang.org/beta/std/primitive.slice.html#method.split_at_checked * `<[T]>::split_at_mut_checked` https://doc.rust- lang.org/beta/std/primitive.slice.html#method.split_at_mut_checked * `str::split_at_checked` https://doc.rust- lang.org/beta/std/primitive.str.html#method.split_at_checked * `str::split_at_mut_checked` https://doc.rust- lang.org/beta/std/primitive.str.html#method.split_at_mut_checked * `str::trim_ascii` https://doc.rust- lang.org/beta/std/primitive.str.html#method.trim_ascii * `str::trim_ascii_start` https://doc.rust- lang.org/beta/std/primitive.str.html#method.trim_ascii_start * `str::trim_ascii_end` https://doc.rust- lang.org/beta/std/primitive.str.html#method.trim_ascii_end * `<[u8]>::trim_ascii` https://doc.rust- lang.org/beta/core/primitive.slice.html#method.trim_ascii * `<[u8]>::trim_ascii_start` https://doc.rust- lang.org/beta/core/primitive.slice.html#method.trim_ascii_start * `<[u8]>::trim_ascii_end` https://doc.rust- lang.org/beta/core/primitive.slice.html#method.trim_ascii_end * `Ipv4Addr::BITS` https://doc.rust- lang.org/beta/core/net/struct.Ipv4Addr.html#associatedconstant.BITS * `Ipv4Addr::to_bits` https://doc.rust- lang.org/beta/core/net/struct.Ipv4Addr.html#method.to_bits * `Ipv4Addr::from_bits` https://doc.rust- lang.org/beta/core/net/struct.Ipv4Addr.html#method.from_bits * `Ipv6Addr::BITS` https://doc.rust- lang.org/beta/core/net/struct.Ipv6Addr.html#associatedconstant.BITS * `Ipv6Addr::to_bits` https://doc.rust- lang.org/beta/core/net/struct.Ipv6Addr.html#method.to_bits * `Ipv6Addr::from_bits` https://doc.rust- lang.org/beta/core/net/struct.Ipv6Addr.html#method.from_bits * `Vec::<[T; N]>::into_flattened` https://doc.rust- lang.org/beta/alloc/vec/struct.Vec.html#method.into_flattened * `<[[T; N]]>::as_flattened` https://doc.rust- lang.org/beta/core/primitive.slice.html#method.as_flattened * `<[[T; N]]>::as_flattened_mut` https://doc.rust- lang.org/beta/core/primitive.slice.html#method.as_flattened_mut These APIs are now stable in const contexts: * `<[T]>::last_chunk` https://doc.rust- lang.org/beta/core/primitive.slice.html#method.last_chunk * `BinaryHeap::new` https://doc.rust- lang.org/beta/std/collections/struct.BinaryHeap.html#method.new ## Cargo * Stabilize `-Zcheck-cfg` as always enabled * Warn, rather than fail publish, if a target is excluded * Add special `check-cfg` lint config for the `unexpected_cfgs` lint * Stabilize `cargo update --precise <yanked>` * Don't change file permissions on `Cargo.toml` when using `cargo add` * Support using `cargo fix` on IPv6-only networks ## Rustdoc * Allow searching for references * Stabilize `custom_code_classes_in_docs` feature * fix: In cross-crate scenarios show enum variants on type aliases of enums ## Compatibility Notes * rustfmt estimates line lengths differently when using non-ascii characters * Type aliases are now handled correctly in orphan check * Allow instructing rustdoc to read from stdin via `-` * `std::env::{set_var, remove_var}` can no longer be converted to safe function pointers and no longer implement the `Fn` family of traits * Warn (or error) when `Self` constructor from outer item is referenced in inner nested item * Turn `indirect_structural_match` and `pointer_structural_match` lints into hard errors * Make `where_clause_object_safety` lint a regular object safety violation * Turn `proc_macro_back_compat` lint into a hard error. * Detect unused structs even when implementing private traits * `std::sync::ReentrantLockGuard<T>` is no longer `Sync` if `T: !Sync` ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2777=1 openSUSE-SLE-15.5-2024-2777=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-2777=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-2777=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2777=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * cargo-1.80.0-150500.27.18.1 * rust-1.80.0-150500.27.18.1 * cargo1.80-debuginfo-1.80.0-150500.11.3.1 * rust1.80-debuginfo-1.80.0-150500.11.3.1 * cargo1.80-1.80.0-150500.11.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586 nosrc) * rust1.80-1.80.0-150500.11.3.1 * openSUSE Leap 15.5 (noarch) * rust1.80-src-1.80.0-150500.11.3.1 * openSUSE Leap 15.5 (nosrc) * rust1.80-test-1.80.0-150500.11.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * cargo-1.80.0-150500.27.18.1 * rust-1.80.0-150500.27.18.1 * cargo1.80-debuginfo-1.80.0-150500.11.3.1 * rust1.80-debuginfo-1.80.0-150500.11.3.1 * cargo1.80-1.80.0-150500.11.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.80-1.80.0-150500.11.3.1 * openSUSE Leap 15.6 (noarch) * rust1.80-src-1.80.0-150500.11.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cargo-1.80.0-150500.27.18.1 * rust-1.80.0-150500.27.18.1 * cargo1.80-debuginfo-1.80.0-150500.11.3.1 * rust1.80-debuginfo-1.80.0-150500.11.3.1 * cargo1.80-1.80.0-150500.11.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.80-1.80.0-150500.11.3.1 * Development Tools Module 15-SP5 (noarch) * rust1.80-src-1.80.0-150500.11.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * cargo-1.80.0-150500.27.18.1 * rust-1.80.0-150500.27.18.1 * cargo1.80-debuginfo-1.80.0-150500.11.3.1 * rust1.80-debuginfo-1.80.0-150500.11.3.1 * cargo1.80-1.80.0-150500.11.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.80-1.80.0-150500.11.3.1 * Development Tools Module 15-SP6 (noarch) * rust1.80-src-1.80.0-150500.11.3.1 ## References: * https://jira.suse.com/browse/SLE-18626

1 0

openSUSE-SU-2024:0254-1: important: Security update for chromium, gn, rust-bindgen
by opensuse-security＠opensuse.org 19 Aug '24

19 Aug '24

openSUSE Security Update: Security update for chromium, gn, rust-bindgen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0254-1 Rating: important References: #1228628 #1228940 #1228941 #1228942 Cross-References: CVE-2024-6988 CVE-2024-6989 CVE-2024-6990 CVE-2024-6991 CVE-2024-6992 CVE-2024-6993 CVE-2024-6994 CVE-2024-6995 CVE-2024-6996 CVE-2024-6997 CVE-2024-6998 CVE-2024-6999 CVE-2024-7000 CVE-2024-7001 CVE-2024-7003 CVE-2024-7004 CVE-2024-7005 CVE-2024-7255 CVE-2024-7256 CVE-2024-7532 CVE-2024-7533 CVE-2024-7534 CVE-2024-7535 CVE-2024-7536 CVE-2024-7550 CVSS scores: CVE-2024-6988 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-6989 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-6990 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-6991 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-6994 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-6995 (NVD) : 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CVE-2024-6996 (NVD) : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2024-6997 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-6998 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-6999 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2024-7000 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-7001 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2024-7003 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2024-7004 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2024-7005 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2024-7255 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-7532 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-7533 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-7534 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-7535 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-7536 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-7550 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: This update for chromium, gn, rust-bindgen fixes the following issues: - Chromium 127.0.6533.119 (boo#1228941) * CVE-2024-7532: Out of bounds memory access in ANGLE * CVE-2024-7533: Use after free in Sharing * CVE-2024-7550: Type Confusion in V8 * CVE-2024-7534: Heap buffer overflow in Layout * CVE-2024-7535: Inappropriate implementation in V8 * CVE-2024-7536: Use after free in WebAudio - Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942) * CVE-2024-6988: Use after free in Downloads * CVE-2024-6989: Use after free in Loader * CVE-2024-6991: Use after free in Dawn * CVE-2024-6992: Out of bounds memory access in ANGLE * CVE-2024-6993: Inappropriate implementation in Canvas * CVE-2024-6994: Heap buffer overflow in Layout * CVE-2024-6995: Inappropriate implementation in Fullscreen * CVE-2024-6996: Race in Frames * CVE-2024-6997: Use after free in Tabs * CVE-2024-6998: Use after free in User Education * CVE-2024-6999: Inappropriate implementation in FedCM * CVE-2024-7000: Use after free in CSS. Reported by Anonymous * CVE-2024-7001: Inappropriate implementation in HTML * CVE-2024-7003: Inappropriate implementation in FedCM * CVE-2024-7004: Insufficient validation of untrusted input in Safe Browsing * CVE-2024-7005: Insufficient validation of untrusted input in Safe Browsing * CVE-2024-6990: Uninitialized Use in Dawn * CVE-2024-7255: Out of bounds read in WebTransport * CVE-2024-7256: Insufficient data validation in Dawn gh: - Update to version 0.20240730: * Rust: link_output, depend_output and runtime_outputs for dylibs * Add missing reference section to function_toolchain.cc * Do not cleanup args.gn imports located in the output directory. * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule * Do not add native dependencies to the library search path * Support linking frameworks and swiftmodules in Rust targets * [desc] Silence print() statements when outputing json * infra: Move CI/try builds to Ubuntu-22.04 * [MinGW] Fix mingw building issues * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template * Allow multiple --ide switches * [src] Add "#include <limits>" in the //src/base/files/file_enumerator_win.cc * Get updates to infra/recipes.py from upstream * Revert "Teach gn to handle systems with > 64 processors" * [apple] Rename the code-signing properties of create_bundle * Fix a typo in "gn help refs" output * Revert "[bundle] Use "phony" builtin tool for create_bundle targets" * [bundle] Use "phony" builtin tool for create_bundle targets * [ios] Simplify handling of assets catalog * [swift] List all outputs as deps of "source_set" stamp file * [swift] Update `gn check ...` to consider the generated header * [swift] Set `restat = 1` to swift build rules * Fix build with gcc12 * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude() * [swift] Remove problematic use of "stamp" tool * Implement new --ninja-outputs-file option. * Add NinjaOutputsWriter class * Move InvokePython() function to its own source file. * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat * Enable C++ runtime assertions in debug mode. * Fix regression in MakeRelativePath() * fix: Fix Windows MakeRelativePath. * Add long path support for windows * Ensure read_file() files are considered by "gn analyze" * apply 2to3 to for some Python scripts * Add rustflags to desc and help output * strings: support case insensitive check only in StartsWith/EndsWith * add .git-blame-ignore-revs * use std::{string,string_view}::{starts_with,ends_with} * apply clang-format to all C++ sources * add forward declaration in rust_values.h * Add `root_patterns` list to build configuration. * Use c++20 in GN build * update windows sdk to 2024-01-11 * update windows sdk * Add linux-riscv64. * Update OWNERS list. * remove unused function * Ignore build warning -Werror=redundant-move * Fix --as=buildfile `gn desc deps` output. * Update recipe engine to 9dea1246. * treewide: Fix spelling mistakes Added rust-bindgen: - Version 0.69.1 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-254=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): gn-0.20240730-bp155.5.6.1 gn-debuginfo-0.20240730-bp155.5.6.1 gn-debugsource-0.20240730-bp155.5.6.1 rust-bindgen-0.69.1-bp155.2.1 rust-bindgen-debuginfo-0.69.1-bp155.2.1 rust-bindgen-debugsource-0.69.1-bp155.2.1 - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-127.0.6533.119-bp155.2.102.1 chromium-127.0.6533.119-bp155.2.102.1 References: https://www.suse.com/security/cve/CVE-2024-6988.html https://www.suse.com/security/cve/CVE-2024-6989.html https://www.suse.com/security/cve/CVE-2024-6990.html https://www.suse.com/security/cve/CVE-2024-6991.html https://www.suse.com/security/cve/CVE-2024-6992.html https://www.suse.com/security/cve/CVE-2024-6993.html https://www.suse.com/security/cve/CVE-2024-6994.html https://www.suse.com/security/cve/CVE-2024-6995.html https://www.suse.com/security/cve/CVE-2024-6996.html https://www.suse.com/security/cve/CVE-2024-6997.html https://www.suse.com/security/cve/CVE-2024-6998.html https://www.suse.com/security/cve/CVE-2024-6999.html https://www.suse.com/security/cve/CVE-2024-7000.html https://www.suse.com/security/cve/CVE-2024-7001.html https://www.suse.com/security/cve/CVE-2024-7003.html https://www.suse.com/security/cve/CVE-2024-7004.html https://www.suse.com/security/cve/CVE-2024-7005.html https://www.suse.com/security/cve/CVE-2024-7255.html https://www.suse.com/security/cve/CVE-2024-7256.html https://www.suse.com/security/cve/CVE-2024-7532.html https://www.suse.com/security/cve/CVE-2024-7533.html https://www.suse.com/security/cve/CVE-2024-7534.html https://www.suse.com/security/cve/CVE-2024-7535.html https://www.suse.com/security/cve/CVE-2024-7536.html https://www.suse.com/security/cve/CVE-2024-7550.html https://bugzilla.suse.com/1228628 https://bugzilla.suse.com/1228940 https://bugzilla.suse.com/1228941 https://bugzilla.suse.com/1228942

1 0

openSUSE-SU-2024:0252-1: important: Security update for opera
by opensuse-security＠opensuse.org 18 Aug '24

18 Aug '24

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0252-1 Rating: important References: Cross-References: CVE-2024-6772 CVE-2024-6773 CVE-2024-6774 CVE-2024-6775 CVE-2024-6776 CVE-2024-6777 CVE-2024-6778 CVE-2024-6779 Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 112.0.5197.53 * CHR-9814 Update Chromium on desktop-stable-126-5197 to 126.0.6478.226 * DNA-116974 Site settings popup size not expanding causing display issues * DNA-117115 Tab islands are extending partially after Workspace change * DNA-117708 H.264 SW decoding only possible if HW decoding is possible * DNA-117792 Crash at content::RenderWidgetHostImpl:: ForwardMouseEventWithLatencyInfo(blink:: WebMouseEvent const&, ui::LatencyInfo const&) - The update to chromium >= 126.0.6478.182 fixes following issues: CVE-2024-6772, CVE-2024-6773, CVE-2024-6774, CVE-2024-6775, CVE-2024-6776, CVE-2024-6777, CVE-2024-6778, CVE-2024-6779 - Update to 112.0.5197.30 * CHR-9416 Updating Chromium on desktop-stable-* branches Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2024-252=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-112.0.5197.53-lp155.3.57.1 References: https://www.suse.com/security/cve/CVE-2024-6772.html https://www.suse.com/security/cve/CVE-2024-6773.html https://www.suse.com/security/cve/CVE-2024-6774.html https://www.suse.com/security/cve/CVE-2024-6775.html https://www.suse.com/security/cve/CVE-2024-6776.html https://www.suse.com/security/cve/CVE-2024-6777.html https://www.suse.com/security/cve/CVE-2024-6778.html https://www.suse.com/security/cve/CVE-2024-6779.html

1 0

openSUSE-SU-2024:0253-1: moderate: Security update for python-Pillow
by opensuse-security＠opensuse.org 18 Aug '24

18 Aug '24

openSUSE Security Update: Security update for python-Pillow ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0253-1 Rating: moderate References: #1205416 Cross-References: CVE-2022-45198 CVSS scores: CVE-2022-45198 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-45198 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Pillow fixes the following issues: - CVE-2022-45198: Fixed improper handling of highly compressed GIF data (boo#1205416) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-253=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): python3-Pillow-8.4.0-bp155.3.9.1 python3-Pillow-tk-8.4.0-bp155.3.9.1 References: https://www.suse.com/security/cve/CVE-2022-45198.html https://bugzilla.suse.com/1205416

1 0

openSUSE-SU-2024:0251-1: important: Security update for python-Django
by opensuse-security＠opensuse.org 18 Aug '24

18 Aug '24

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0251-1 Rating: important References: #1207565 #1227590 #1227593 #1227594 #1227595 Cross-References: CVE-2023-23969 CVE-2024-38875 CVE-2024-39329 CVE-2024-39330 CVE-2024-39614 CVSS scores: CVE-2023-23969 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-23969 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-38875 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-39329 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2024-39330 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2024-39614 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for python-Django fixes the following issues: - CVE-2023-23969: Potential denial-of-service via Accept-Language headers (boo#1207565) - CVE-2024-38875: Potential denial-of-service attack via certain inputs with a very large number of brackets (boo#1227590) - CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords (boo#1227593) - CVE-2024-39330: Potential directory traversal in django.core.files.storage.Storage.save() (boo#1227594) - CVE-2024-39614: Potential denial-of-service through django.utils.translation.get_supported_language-variant() (boo#1227595) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-251=1 Package List: References: https://www.suse.com/security/cve/CVE-2023-23969.html https://www.suse.com/security/cve/CVE-2024-38875.html https://www.suse.com/security/cve/CVE-2024-39329.html https://www.suse.com/security/cve/CVE-2024-39330.html https://www.suse.com/security/cve/CVE-2024-39614.html https://bugzilla.suse.com/1207565 https://bugzilla.suse.com/1227590 https://bugzilla.suse.com/1227593 https://bugzilla.suse.com/1227594 https://bugzilla.suse.com/1227595

1 0