August 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:1764-2: moderate: Recommended update for jackson
by OPENSUSE-UPDATES 28 Aug '24

28 Aug '24

# Recommended update for jackson Announcement ID: SUSE-RU-2024:1764-2 Rating: moderate References: Affected Products: * openSUSE Leap 15.6 An update that can now be installed. ## Description: This update for jackson fixes the following issues: jackson-annotations was upgraded to version 2.16.1: * Added new OptBoolean valued property in @JsonTypeInfo to allow per-type configuration of strict type id handling * Allow per-type configuration of strict type id handling * Added JsonTypeInfo.Value object (backport from 3.0) * Added new JsonTypeInfo.Id.SIMPLE_NAME jackson-bom was upgraded to version 2.16.1: * Added dependency for jackson-module-android-record. This new module offers support for Record type on Android platform, where Java records are supported through "de-sugaring" jackson-core was upgraded to version 2.16.1: * NPE in Version.equals() if snapshot-info null * NPE in "FastDoubleParser", method "JavaBigDecimalParser.parseBigDecimal()" * JsonPointer.append(JsonPointer.tail()) includes the original pointer * Change StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION default to false in Jackson 2.16 * Improve error message for StreamReadConstraints violations * JsonFactory implementations should respect CANONICALIZE_FIELD_NAMES * Root cause for failing test for testMangledIntsBytes() in ParserErrorHandlingTest * Allow all array elements in JsonPointerBasedFilter * Indicate explicitly blocked sources as "REDACTED" instead of "UNKNOWN" in JsonLocation * Start using AssertJ in unit tests * Allow configuring spaces before and/or after the colon in DefaultPrettyPrinter (for Canonical JSON) * Add configurable limit for the maximum number of bytes/chars of content to parse before failing * Add configurable limit for the maximum length of Object property names to parse before failing * Add configurable processing limits for JSON generator (StreamWriteConstraints) * Compare _snapshotInfo in Version * Add JsonGeneratorDecorator to allow decorating JsonGenerators * Add full set of BufferRecyclerPool implementations * Add configurable error report behavior via ErrorReportConfiguration * Make ByteSourceJsonBootstrapper use StringReader for < 8KiB byte[] inputs * Allow pluggable buffer recycling via new RecyclerPool extension point * Change parsing error message to mention -INF jackson-databind was upgraded to version 2.16.1: * JsonSetter(contentNulls = FAIL) is ignored in delegating @JsonCreator argument * Primitive array deserializer not being captured by DeserializerModifier * JsonNode.findValues() and findParents() missing expected values in 2.16.0 * Incorrect deserialization for BigDecimal numbers * Add a way to configure caches Jackson uses * Mix-ins do not work for Enums * Map deserialization results in different numeric classes based on json ordering (BigDecimal / Double) when used in combination with @JsonSubTypes * Generic class with generic field of runtime type Double is deserialized as BigDecimal when used with @JsonTypeInfo and JsonTypeInfo.As.EXISTING_PROPERTY * Combination of @JsonUnwrapped and @JsonAnySetter results in BigDecimal instead of Double * @JsonIgnoreProperties not working with @JsonValue * Deprecated JsonNode.with(String) suggests using JsonNode.withObject(String) but it is not the same thing * Difference in the handling of ObjectId-property inJsonIdentityInfo depending on the deserialization route * Add new OptBoolean valued property in @JsonTypeInfo, handling, to allow per- polymorphic type loose Type Id handling * Fixed regression in 2.15.0 that reaks deserialization for records when mapper.setVisibility(PropertyAccessor.ALL, Visibility.NONE) * Incorrect target type when disabling coercion, trying to deserialize String from Array/Object * @JsonProperty on constructor parameter changes default field serialization order * Create new JavaType subtype IterationType (extending SimpleType) * Use JsonTypeInfo.Value for annotation handling * Add JsonNodeFeature.WRITE_PROPERTIES_SORTED for sorting ObjectNode properties on serialization (for Canonical JSON) * Optimize ObjectNode findValue(s) and findParent(s) fast paths * Locale "" is deserialised as null if ACCEPT_EMPTY_STRING_AS_NULL_OBJECT is enabled * Add guardrail setting for TypeParser handling of type parameters * Use @JsonProperty for Enum values also when READ_ENUMS USING_TO_STRING enabled * Fix Enum deserialization to use @JsonProperty, @JsonAlias even if EnumNamingStrategy used * Use @JsonProperty and lowercase feature when serializing Enums despite using toString() * Use @JsonProperty over EnumNamingStrategy for Enum serialization * Actually cache EnumValues#internalMap * ObjectMapper.valueToTree() will ignore the configuration SerializationFeature.WRAP_ROOT_VALUE * Provide the "ObjectMapper.treeToValue(TreeNode, TypeReference)" method * Expose NativeImageUtil.isRunningInNativeImage() method * Add JsonTypeInfo.Id.SIMPLE_NAME which defaults type id to Class.getSimpleName() * Impossible to deserialize custom Throwable sub-classes that do not have single-String constructors * java.desktop module is no longer optional * ClassUtil fails with java.lang.reflect.InaccessibleObjectException trying to setAccessible on OptionalInt with JDK 17+ * Support sequenced collections (JDK 21) * Add withObjectProperty(String), withArrayProperty(String) in JsonNode * Change JsonNode.withObject(String) to work similar to withArray() wrt argument * Log WARN if deprecated subclasses of PropertyNamingStrategy is used * NPE when transforming a tree to a model class object, at ArrayNode.elements() * Deprecated ObjectReader.withType(Type) has no direct replacement; need forType(Type) * Add new DefaultTyping.NON_FINAL_AND_ENUMS to allow Default Typing for Enums * Do not rewind position when serializing direct ByteBuffer * Exception when deserialization of private record with default constructor * BeanDeserializer updates currentValue incorrectly when deserialising empty Object jackson-dataformats-binary was upgraded to version 2.16.1: * (ion) NullPointerException in IonParser.nextToken() * (smile) Remove Smile-specific buffer-recycling jackson-modules-base was upgraded to version 2.16.1: * (afterburner) Disable when running in native-image * (afterburner) IncompatibleClassChangeError when deserializing a class implementing an interface with default get/set implementations * (blackbird) BlackBird proxy object error in Java 17 * (blackbird) Disable when running in native-image * (guice) Add guice7 (jakarta.inject) module jackson-parent was upgraded to version 2.16: * Upgrade to oss-parent 56 (tons of plugin updates to resolve Maven warnings, new Moditect plugin) jackson-parent, fasterxml-oss-parent: * Added to SUSE Manager 4.3 as it is needed by `jackson-modules-base` ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1764=1 ## Package List: * openSUSE Leap 15.6 (noarch) * jackson-module-mrbean-2.16.1-150200.5.11.1 * jackson-annotations-javadoc-2.16.1-150200.3.14.4 * jackson-dataformat-cbor-2.16.1-150200.3.13.6 * jackson-core-2.16.1-150200.3.14.7 * jackson-dataformats-binary-javadoc-2.16.1-150200.3.13.6 * jackson-dataformats-binary-2.16.1-150200.3.13.6 * jackson-module-paranamer-2.16.1-150200.5.11.1 * jackson-module-jaxb-annotations-2.16.1-150200.5.11.1 * jackson-modules-base-2.16.1-150200.5.11.1 * fasterxml-oss-parent-38-150200.3.2.1 * jackson-modules-base-javadoc-2.16.1-150200.5.11.1 * jackson-module-no-ctor-deser-2.16.1-150200.5.11.1 * jackson-core-javadoc-2.16.1-150200.3.14.7 * jackson-bom-2.16.1-150200.3.11.1 * jackson-dataformat-smile-2.16.1-150200.3.13.6 * jackson-module-guice-2.16.1-150200.5.11.1 * jackson-module-blackbird-2.16.1-150200.5.11.1 * jackson-parent-2.16-150200.3.10.1 * jackson-databind-2.16.1-150200.3.18.1 * jackson-databind-javadoc-2.16.1-150200.3.18.1 * jackson-module-osgi-2.16.1-150200.5.11.1 * jackson-annotations-2.16.1-150200.3.14.4 * jackson-module-afterburner-2.16.1-150200.5.11.1

1 0

SUSE-RU-2024:3057-1: moderate: Recommended update for go1.21
by OPENSUSE-UPDATES 28 Aug '24

28 Aug '24

# Recommended update for go1.21 Announcement ID: SUSE-RU-2024:3057-1 Rating: moderate References: * bsc#1212475 Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for go1.21 fixes the following issue: * go1.21.13 (released 2024-08-06) includes fixes to the go command, the covdata command, and the bytes package (bsc#1212475). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3057=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3057=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3057=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3057=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3057=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3057=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3057=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3057=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3057=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.21-race-1.21.13-150000.1.42.2 * go1.21-1.21.13-150000.1.42.2 * go1.21-doc-1.21.13-150000.1.42.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * go1.21-race-1.21.13-150000.1.42.2 * go1.21-1.21.13-150000.1.42.2 * go1.21-doc-1.21.13-150000.1.42.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * go1.21-1.21.13-150000.1.42.2 * go1.21-doc-1.21.13-150000.1.42.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * go1.21-race-1.21.13-150000.1.42.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.21-1.21.13-150000.1.42.2 * go1.21-doc-1.21.13-150000.1.42.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * go1.21-race-1.21.13-150000.1.42.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.21-race-1.21.13-150000.1.42.2 * go1.21-1.21.13-150000.1.42.2 * go1.21-doc-1.21.13-150000.1.42.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * go1.21-race-1.21.13-150000.1.42.2 * go1.21-1.21.13-150000.1.42.2 * go1.21-doc-1.21.13-150000.1.42.2 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.21-race-1.21.13-150000.1.42.2 * go1.21-1.21.13-150000.1.42.2 * go1.21-doc-1.21.13-150000.1.42.2 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * go1.21-race-1.21.13-150000.1.42.2 * go1.21-1.21.13-150000.1.42.2 * go1.21-doc-1.21.13-150000.1.42.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.21-race-1.21.13-150000.1.42.2 * go1.21-1.21.13-150000.1.42.2 * go1.21-doc-1.21.13-150000.1.42.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1212475

1 0

SUSE-RU-2024:3059-1: moderate: Recommended update for udisks2
by OPENSUSE-UPDATES 28 Aug '24

28 Aug '24

# Recommended update for udisks2 Announcement ID: SUSE-RU-2024:3059-1 Rating: moderate References: * bsc#1228290 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for udisks2 fixes the following issue: * Code patch: fix double free inside the g_static_resource_fini() atexit handler (bsc#1228290). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3059=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3059=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3059=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3059=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3059=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3059=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3059=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3059=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3059=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3059=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3059=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3059=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3059=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3059=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3059=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3059=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3059=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3059=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3059=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libudisks2-0_vdo-debuginfo-2.9.2-150400.3.6.2 * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * libudisks2-0_lsm-2.9.2-150400.3.6.2 * libudisks2-0_zram-2.9.2-150400.3.6.2 * libudisks2-0_bcache-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_zram-debuginfo-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * libudisks2-0_lsm-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_vdo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0_bcache-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * openSUSE Leap 15.4 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libudisks2-0_vdo-debuginfo-2.9.2-150400.3.6.2 * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * libudisks2-0_lsm-2.9.2-150400.3.6.2 * libudisks2-0_zram-2.9.2-150400.3.6.2 * libudisks2-0_bcache-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_zram-debuginfo-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * libudisks2-0_lsm-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_vdo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0_bcache-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * openSUSE Leap 15.5 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libudisks2-0_vdo-debuginfo-2.9.2-150400.3.6.2 * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * libudisks2-0_lsm-2.9.2-150400.3.6.2 * libudisks2-0_zram-2.9.2-150400.3.6.2 * libudisks2-0_bcache-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_zram-debuginfo-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * libudisks2-0_lsm-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_vdo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0_bcache-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * openSUSE Leap 15.6 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * libudisks2-0_btrfs-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0_lvm2-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * Basesystem Module 15-SP5 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * Basesystem Module 15-SP6 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * SUSE Manager Proxy 4.3 (x86_64) * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Manager Proxy 4.3 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Manager Retail Branch Server 4.3 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * typelib-1_0-UDisks-2_0-2.9.2-150400.3.6.2 * udisks2-debugsource-2.9.2-150400.3.6.2 * udisks2-debuginfo-2.9.2-150400.3.6.2 * libudisks2-0-devel-2.9.2-150400.3.6.2 * libudisks2-0-2.9.2-150400.3.6.2 * udisks2-2.9.2-150400.3.6.2 * libudisks2-0-debuginfo-2.9.2-150400.3.6.2 * SUSE Manager Server 4.3 (noarch) * udisks2-lang-2.9.2-150400.3.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1228290

1 0

SUSE-RU-2024:3053-1: moderate: Recommended update for selinux-policy
by OPENSUSE-UPDATES 28 Aug '24

28 Aug '24

# Recommended update for selinux-policy Announcement ID: SUSE-RU-2024:3053-1 Rating: moderate References: * bsc#1229701 Affected Products: * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Micro 5.5 An update that has one fix can now be installed. ## Description: This update for selinux-policy fixes the following issues: Update to version 20230511+git17.e258ac27: * Fix mkhomedir_helper label to match on sbin (bsc#1229701) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3053=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3053=1 ## Package List: * openSUSE Leap Micro 5.5 (noarch) * selinux-policy-devel-20230511+git17.e258ac27-150500.3.18.1 * selinux-policy-targeted-20230511+git17.e258ac27-150500.3.18.1 * selinux-policy-20230511+git17.e258ac27-150500.3.18.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * selinux-policy-devel-20230511+git17.e258ac27-150500.3.18.1 * selinux-policy-targeted-20230511+git17.e258ac27-150500.3.18.1 * selinux-policy-20230511+git17.e258ac27-150500.3.18.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1229701

1 0

SUSE-SU-2024:3041-1: important: Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
by OPENSUSE-UPDATES 27 Aug '24

27 Aug '24

# Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3041-1 Rating: important References: * bsc#1225202 * bsc#1225302 Cross-References: * CVE-2021-47378 * CVE-2021-47402 CVSS scores: * CVE-2021-47378 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47402 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_150 fixes several issues. The following security issues were fixed: * CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) * CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp (bsc#1225202). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-3038=1 SUSE-SLE- Module-Live-Patching-15-SP2-2024-3041=1 SUSE-SLE-Module-Live- Patching-15-SP2-2024-3042=1 SUSE-SLE-Module-Live-Patching-15-SP2-2024-3049=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3045=1 SUSE-2024-3050=1 SUSE-2024-3046=1 SUSE-2024-3047=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3047=1 SUSE-SLE- Module-Live-Patching-15-SP3-2024-3045=1 SUSE-SLE-Module-Live- Patching-15-SP3-2024-3050=1 SUSE-SLE-Module-Live-Patching-15-SP3-2024-3046=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150200_24_175-default-12-150200.2.1 * kernel-livepatch-5_3_18-150200_24_160-default-debuginfo-14-150200.2.1 * kernel-livepatch-5_3_18-150200_24_160-default-14-150200.2.1 * kernel-livepatch-5_3_18-150200_24_175-default-debuginfo-12-150200.2.1 * kernel-livepatch-SLE15-SP2_Update_43-debugsource-11-150200.2.1 * kernel-livepatch-5_3_18-150200_24_163-default-13-150200.2.1 * kernel-livepatch-SLE15-SP2_Update_40-debugsource-13-150200.2.1 * kernel-livepatch-5_3_18-150200_24_172-default-11-150200.2.1 * kernel-livepatch-SLE15-SP2_Update_39-debugsource-14-150200.2.1 * kernel-livepatch-SLE15-SP2_Update_44-debugsource-12-150200.2.1 * kernel-livepatch-5_3_18-150200_24_172-default-debuginfo-11-150200.2.1 * kernel-livepatch-5_3_18-150200_24_163-default-debuginfo-13-150200.2.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_40-debugsource-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-default-10-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-default-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-default-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-default-debuginfo-11-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_41-debugsource-10-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-default-13-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_39-debugsource-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-default-debuginfo-10-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_37-debugsource-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-default-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-default-debuginfo-11-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_147-preempt-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-preempt-debuginfo-10-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-preempt-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-preempt-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-preempt-debuginfo-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-preempt-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-preempt-debuginfo-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-preempt-10-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_147-default-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-default-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-default-10-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-default-11-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47378.html * https://www.suse.com/security/cve/CVE-2021-47402.html * https://bugzilla.suse.com/show_bug.cgi?id=1225202 * https://bugzilla.suse.com/show_bug.cgi?id=1225302

1 0

SUSE-SU-2024:3039-1: important: Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
by OPENSUSE-UPDATES 27 Aug '24

27 Aug '24

# Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3039-1 Rating: important References: * bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225202 * bsc#1225211 * bsc#1225302 * bsc#1225310 Cross-References: * CVE-2021-47378 * CVE-2021-47383 * CVE-2021-47402 * CVE-2023-1829 * CVE-2024-26828 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35950 CVSS scores: * CVE-2021-47378 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47402 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves eight vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: * CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) * CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp (bsc#1225202). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-3039=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3051=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3051=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150200_24_191-default-debuginfo-5-150200.5.6.1 * kernel-livepatch-5_3_18-150200_24_191-default-5-150200.5.6.1 * kernel-livepatch-SLE15-SP2_Update_48-debugsource-5-150200.5.6.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_44-debugsource-5-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_161-default-5-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_161-default-debuginfo-5-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_161-preempt-debuginfo-5-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_161-preempt-5-150300.7.6.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_161-default-5-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47378.html * https://www.suse.com/security/cve/CVE-2021-47383.html * https://www.suse.com/security/cve/CVE-2021-47402.html * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225202 * https://bugzilla.suse.com/show_bug.cgi?id=1225211 * https://bugzilla.suse.com/show_bug.cgi?id=1225302 * https://bugzilla.suse.com/show_bug.cgi?id=1225310

1 0

SUSE-SU-2024:3048-1: important: Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
by OPENSUSE-UPDATES 27 Aug '24

27 Aug '24

# Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3048-1 Rating: important References: * bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223683 * bsc#1225013 * bsc#1225202 * bsc#1225211 * bsc#1225302 * bsc#1225310 Cross-References: * CVE-2021-46955 * CVE-2021-47378 * CVE-2021-47383 * CVE-2021-47402 * CVE-2022-48651 * CVE-2023-1829 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35950 CVSS scores: * CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2021-47378 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47402 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: * CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) * CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp (bsc#1225202). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3048=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3048=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_158-default-6-150300.7.6.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_158-default-6-150300.7.6.1 * kernel-livepatch-SLE15-SP3_Update_43-debugsource-6-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_158-default-debuginfo-6-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_158-preempt-debuginfo-6-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_158-preempt-6-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-46955.html * https://www.suse.com/security/cve/CVE-2021-47378.html * https://www.suse.com/security/cve/CVE-2021-47383.html * https://www.suse.com/security/cve/CVE-2021-47402.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220537 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225202 * https://bugzilla.suse.com/show_bug.cgi?id=1225211 * https://bugzilla.suse.com/show_bug.cgi?id=1225302 * https://bugzilla.suse.com/show_bug.cgi?id=1225310

1 0

SUSE-SU-2024:3031-1: moderate: Security update for keepalived
by OPENSUSE-UPDATES 27 Aug '24

27 Aug '24

# Security update for keepalived Announcement ID: SUSE-SU-2024:3031-1 Rating: moderate References: * bsc#1228123 Cross-References: * CVE-2024-41184 CVSS scores: * CVE-2024-41184 ( SUSE ): 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for keepalived fixes the following issues: * CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3031=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3031=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3031=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3031=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3031=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-3031=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * keepalived-2.2.2-150400.3.10.1 * keepalived-debugsource-2.2.2-150400.3.10.1 * keepalived-debuginfo-2.2.2-150400.3.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * keepalived-2.2.2-150400.3.10.1 * keepalived-debugsource-2.2.2-150400.3.10.1 * keepalived-debuginfo-2.2.2-150400.3.10.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * keepalived-2.2.2-150400.3.10.1 * keepalived-debugsource-2.2.2-150400.3.10.1 * keepalived-debuginfo-2.2.2-150400.3.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * keepalived-2.2.2-150400.3.10.1 * keepalived-debugsource-2.2.2-150400.3.10.1 * keepalived-debuginfo-2.2.2-150400.3.10.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * keepalived-2.2.2-150400.3.10.1 * keepalived-debugsource-2.2.2-150400.3.10.1 * keepalived-debuginfo-2.2.2-150400.3.10.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * keepalived-2.2.2-150400.3.10.1 * keepalived-debugsource-2.2.2-150400.3.10.1 * keepalived-debuginfo-2.2.2-150400.3.10.1 ## References: * https://www.suse.com/security/cve/CVE-2024-41184.html * https://bugzilla.suse.com/show_bug.cgi?id=1228123

1 0

SUSE-SU-2024:3030-1: important: Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3)
by OPENSUSE-UPDATES 27 Aug '24

27 Aug '24

# Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3030-1 Rating: important References: * bsc#1225202 * bsc#1225302 Cross-References: * CVE-2021-47378 * CVE-2021-47402 CVSS scores: * CVE-2021-47378 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47402 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_141 fixes several issues. The following security issues were fixed: * CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) * CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp (bsc#1225202). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-3030=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3036=1 SUSE-2024-3035=1 SUSE-2024-3033=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3036=1 SUSE-SLE- Module-Live-Patching-15-SP3-2024-3035=1 SUSE-SLE-Module-Live- Patching-15-SP3-2024-3033=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150200_24_178-default-9-150200.2.1 * kernel-livepatch-SLE15-SP2_Update_45-debugsource-9-150200.2.1 * kernel-livepatch-5_3_18-150200_24_178-default-debuginfo-9-150200.2.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_133-default-13-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_35-debugsource-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-default-debuginfo-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-default-12-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_36-debugsource-13-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_38-debugsource-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_133-default-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_130-default-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_130-default-debuginfo-14-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_133-preempt-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_130-preempt-debuginfo-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_133-preempt-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_130-preempt-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-preempt-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-preempt-debuginfo-12-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_130-default-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-default-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_133-default-13-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47378.html * https://www.suse.com/security/cve/CVE-2021-47402.html * https://bugzilla.suse.com/show_bug.cgi?id=1225202 * https://bugzilla.suse.com/show_bug.cgi?id=1225302

1 0

SUSE-SU-2024:3032-1: important: Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
by OPENSUSE-UPDATES 27 Aug '24

27 Aug '24

# Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6) Announcement ID: SUSE-SU-2024:3032-1 Rating: important References: * bsc#1224991 * bsc#1225850 Cross-References: * CVE-2023-52772 * CVE-2024-36921 CVSS scores: * CVE-2023-52772 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52772 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36921 ( SUSE ): 8.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: * CVE-2024-36921: wifi: iwlwifi: mvm: guard against invalid STA ID removal (bsc#1225850). * CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224991). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3032=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2024-3032=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_21-default-3-150600.4.7.1 * kernel-livepatch-SLE15-SP6_Update_0-debugsource-3-150600.4.7.1 * kernel-livepatch-6_4_0-150600_21-default-debuginfo-3-150600.4.7.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_21-default-3-150600.4.7.1 * kernel-livepatch-SLE15-SP6_Update_0-debugsource-3-150600.4.7.1 * kernel-livepatch-6_4_0-150600_21-default-debuginfo-3-150600.4.7.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52772.html * https://www.suse.com/security/cve/CVE-2024-36921.html * https://bugzilla.suse.com/show_bug.cgi?id=1224991 * https://bugzilla.suse.com/show_bug.cgi?id=1225850

1 0