September 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:3375-1: important: Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
by OPENSUSE-UPDATES 23 Sep '24

23 Sep '24

# Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3375-1 Rating: important References: * bsc#1220145 * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225310 * bsc#1225313 Cross-References: * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52846 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26766 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35950 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: * CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3375=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3375=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_116-default-6-150400.9.8.2 * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-6-150400.9.8.2 * kernel-livepatch-SLE15-SP4_Update_25-debugsource-6-150400.9.8.2 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_116-default-6-150400.9.8.2 * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-6-150400.9.8.2 * kernel-livepatch-SLE15-SP4_Update_25-debugsource-6-150400.9.8.2 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225313

1 0

openSUSE-RU-2024:0310-1: moderate: Recommended update for virtme
by maintenance＠opensuse.org 22 Sep '24

22 Sep '24

openSUSE Recommended Update: Recommended update for virtme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0310-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for virtme fixes the following issues: - Workaround python packaging deficiency Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-310=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): virtme-1.28-bp155.5.28.1 References:

1 0

openSUSE-RU-2024:0309-1: moderate: Recommended update for emptyepsilon
by maintenance＠opensuse.org 22 Sep '24

22 Sep '24

openSUSE Recommended Update: Recommended update for emptyepsilon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0309-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for emptyepsilon fixes the following issues: Version 2024.08.09: * Add a quick&dirty way to get callback errors * Clamp the warp and jump commands * fix voice path scenario 51 * fix voice path scenario 48 * Fix the wiggle console with just 1 text line Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-309=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 s390x x86_64): emptyepsilon-2024.08.09-bp156.3.3.1 References:

1 0

openSUSE-RU-2024:0308-1: moderate: Recommended update for python-ldap
by maintenance＠opensuse.org 21 Sep '24

21 Sep '24

openSUSE Recommended Update: Recommended update for python-ldap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0308-1 Rating: moderate References: #1229549 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-ldap fixes the following issues: - Enable sle15_python_module_pythons (boo#1229549) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-308=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): python311-ldap-3.4.4-bp156.5.1 References: https://bugzilla.suse.com/1229549

1 0

SUSE-SU-2024:3354-1: important: Security update for wpa_supplicant
by OPENSUSE-UPDATES 20 Sep '24

20 Sep '24

# Security update for wpa_supplicant Announcement ID: SUSE-SU-2024:3354-1 Rating: important References: * bsc#1219975 Cross-References: * CVE-2023-52160 CVSS scores: * CVE-2023-52160 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-52160 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: * CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3354=1 openSUSE-SLE-15.6-2024-3354=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3354=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * wpa_supplicant-2.10-150600.7.3.1 * wpa_supplicant-debugsource-2.10-150600.7.3.1 * wpa_supplicant-gui-debuginfo-2.10-150600.7.3.1 * wpa_supplicant-debuginfo-2.10-150600.7.3.1 * wpa_supplicant-gui-2.10-150600.7.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-2.10-150600.7.3.1 * wpa_supplicant-debugsource-2.10-150600.7.3.1 * wpa_supplicant-debuginfo-2.10-150600.7.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52160.html * https://bugzilla.suse.com/show_bug.cgi?id=1219975

1 0

SUSE-RU-2024:3356-1: moderate: Optional update for coolkey
by OPENSUSE-UPDATES 20 Sep '24

20 Sep '24

# Optional update for coolkey Announcement ID: SUSE-RU-2024:3356-1 Rating: moderate References: * jsc#PED-10649 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that contains one feature can now be installed. ## Description: This update of coolkey adds it to PackageHub x86_64. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3356=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3356=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3356=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3356=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3356=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3356=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3356=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3356=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3356=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3356=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-3356=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3356=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3356=1 ## Package List: * openSUSE Leap Micro 5.5 (aarch64 x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * coolkey-devel-1.1.0-150000.3.2.1 * openSUSE Leap 15.5 (x86_64) * coolkey-32bit-debuginfo-1.1.0-150000.3.2.1 * coolkey-32bit-1.1.0-150000.3.2.1 * openSUSE Leap 15.6 (aarch64 ppc64le x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * coolkey-devel-1.1.0-150000.3.2.1 * openSUSE Leap 15.6 (x86_64) * coolkey-32bit-debuginfo-1.1.0-150000.3.2.1 * coolkey-32bit-1.1.0-150000.3.2.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * coolkey-devel-1.1.0-150000.3.2.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * coolkey-devel-1.1.0-150000.3.2.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 x86_64) * coolkey-1.1.0-150000.3.2.1 * coolkey-debugsource-1.1.0-150000.3.2.1 * coolkey-debuginfo-1.1.0-150000.3.2.1 ## References: * https://jira.suse.com/browse/PED-10649

1 0

SUSE-SU-2024:3357-1: important: Security update for python310
by OPENSUSE-UPDATES 20 Sep '24

20 Sep '24

# Security update for python310 Announcement ID: SUSE-SU-2024:3357-1 Rating: important References: * bsc#1229596 * bsc#1229704 * bsc#1230227 Cross-References: * CVE-2024-6232 * CVE-2024-7592 * CVE-2024-8088 CVSS scores: * CVE-2024-6232 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2024-6232 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-6232 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-7592 ( SUSE ): 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2024-7592 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8088 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-8088 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves three vulnerabilities can now be installed. ## Description: This update for python310 fixes the following issues: * Update to version 3.10.15 * CVE-2024-8088: Fixed denial of service in zipfile. (bsc#1229704) * CVE-2024-7592: Fixed uncontrolled CPU resource consumption when in http.cookies module. (bsc#1229596) * CVE-2024-6232: Fixed ReDos via excessive backtracking while parsing header values. (bsc#1230227) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3357=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3357=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3357=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3357=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3357=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3357=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3357=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3357=1 ## Package List: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * python310-base-3.10.15-150400.4.57.1 * libpython3_10-1_0-debuginfo-3.10.15-150400.4.57.1 * python310-base-debuginfo-3.10.15-150400.4.57.1 * python310-dbm-debuginfo-3.10.15-150400.4.57.1 * libpython3_10-1_0-3.10.15-150400.4.57.1 * python310-dbm-3.10.15-150400.4.57.1 * python310-core-debugsource-3.10.15-150400.4.57.1 * python310-curses-3.10.15-150400.4.57.1 * python310-curses-debuginfo-3.10.15-150400.4.57.1 * python310-devel-3.10.15-150400.4.57.1 * python310-tk-debuginfo-3.10.15-150400.4.57.1 * python310-3.10.15-150400.4.57.1 * python310-idle-3.10.15-150400.4.57.1 * python310-debugsource-3.10.15-150400.4.57.1 * python310-debuginfo-3.10.15-150400.4.57.1 * python310-tools-3.10.15-150400.4.57.1 * python310-tk-3.10.15-150400.4.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python310-base-3.10.15-150400.4.57.1 * libpython3_10-1_0-debuginfo-3.10.15-150400.4.57.1 * python310-base-debuginfo-3.10.15-150400.4.57.1 * python310-dbm-debuginfo-3.10.15-150400.4.57.1 * libpython3_10-1_0-3.10.15-150400.4.57.1 * python310-dbm-3.10.15-150400.4.57.1 * python310-core-debugsource-3.10.15-150400.4.57.1 * python310-curses-3.10.15-150400.4.57.1 * python310-curses-debuginfo-3.10.15-150400.4.57.1 * python310-devel-3.10.15-150400.4.57.1 * python310-tk-debuginfo-3.10.15-150400.4.57.1 * python310-3.10.15-150400.4.57.1 * python310-idle-3.10.15-150400.4.57.1 * python310-debugsource-3.10.15-150400.4.57.1 * python310-debuginfo-3.10.15-150400.4.57.1 * python310-tools-3.10.15-150400.4.57.1 * python310-tk-3.10.15-150400.4.57.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python310-doc-3.10.15-150400.4.57.1 * python310-base-3.10.15-150400.4.57.1 * python310-testsuite-debuginfo-3.10.15-150400.4.57.1 * python310-dbm-debuginfo-3.10.15-150400.4.57.1 * python310-core-debugsource-3.10.15-150400.4.57.1 * python310-idle-3.10.15-150400.4.57.1 * python310-debugsource-3.10.15-150400.4.57.1 * python310-testsuite-3.10.15-150400.4.57.1 * python310-dbm-3.10.15-150400.4.57.1 * python310-curses-3.10.15-150400.4.57.1 * python310-devel-3.10.15-150400.4.57.1 * python310-tk-debuginfo-3.10.15-150400.4.57.1 * python310-tk-3.10.15-150400.4.57.1 * libpython3_10-1_0-3.10.15-150400.4.57.1 * python310-curses-debuginfo-3.10.15-150400.4.57.1 * python310-tools-3.10.15-150400.4.57.1 * python310-doc-devhelp-3.10.15-150400.4.57.1 * libpython3_10-1_0-debuginfo-3.10.15-150400.4.57.1 * python310-base-debuginfo-3.10.15-150400.4.57.1 * python310-3.10.15-150400.4.57.1 * python310-debuginfo-3.10.15-150400.4.57.1 * openSUSE Leap 15.4 (x86_64) * libpython3_10-1_0-32bit-3.10.15-150400.4.57.1 * python310-32bit-3.10.15-150400.4.57.1 * python310-base-32bit-debuginfo-3.10.15-150400.4.57.1 * python310-32bit-debuginfo-3.10.15-150400.4.57.1 * libpython3_10-1_0-32bit-debuginfo-3.10.15-150400.4.57.1 * python310-base-32bit-3.10.15-150400.4.57.1 * openSUSE Leap 15.4 (aarch64_ilp32) * python310-64bit-3.10.15-150400.4.57.1 * python310-base-64bit-3.10.15-150400.4.57.1 * libpython3_10-1_0-64bit-debuginfo-3.10.15-150400.4.57.1 * python310-64bit-debuginfo-3.10.15-150400.4.57.1 * python310-base-64bit-debuginfo-3.10.15-150400.4.57.1 * libpython3_10-1_0-64bit-3.10.15-150400.4.57.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python310-doc-3.10.15-150400.4.57.1 * python310-base-3.10.15-150400.4.57.1 * python310-testsuite-debuginfo-3.10.15-150400.4.57.1 * python310-dbm-debuginfo-3.10.15-150400.4.57.1 * python310-core-debugsource-3.10.15-150400.4.57.1 * python310-idle-3.10.15-150400.4.57.1 * python310-debugsource-3.10.15-150400.4.57.1 * python310-testsuite-3.10.15-150400.4.57.1 * python310-dbm-3.10.15-150400.4.57.1 * python310-curses-3.10.15-150400.4.57.1 * python310-devel-3.10.15-150400.4.57.1 * python310-tk-debuginfo-3.10.15-150400.4.57.1 * python310-tk-3.10.15-150400.4.57.1 * libpython3_10-1_0-3.10.15-150400.4.57.1 * python310-curses-debuginfo-3.10.15-150400.4.57.1 * python310-tools-3.10.15-150400.4.57.1 * python310-doc-devhelp-3.10.15-150400.4.57.1 * libpython3_10-1_0-debuginfo-3.10.15-150400.4.57.1 * python310-base-debuginfo-3.10.15-150400.4.57.1 * python310-3.10.15-150400.4.57.1 * python310-debuginfo-3.10.15-150400.4.57.1 * openSUSE Leap 15.5 (x86_64) * libpython3_10-1_0-32bit-3.10.15-150400.4.57.1 * python310-32bit-3.10.15-150400.4.57.1 * python310-base-32bit-debuginfo-3.10.15-150400.4.57.1 * python310-32bit-debuginfo-3.10.15-150400.4.57.1 * libpython3_10-1_0-32bit-debuginfo-3.10.15-150400.4.57.1 * python310-base-32bit-3.10.15-150400.4.57.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python310-doc-3.10.15-150400.4.57.1 * python310-base-3.10.15-150400.4.57.1 * python310-testsuite-debuginfo-3.10.15-150400.4.57.1 * python310-dbm-debuginfo-3.10.15-150400.4.57.1 * python310-core-debugsource-3.10.15-150400.4.57.1 * python310-idle-3.10.15-150400.4.57.1 * python310-debugsource-3.10.15-150400.4.57.1 * python310-testsuite-3.10.15-150400.4.57.1 * python310-dbm-3.10.15-150400.4.57.1 * python310-curses-3.10.15-150400.4.57.1 * python310-devel-3.10.15-150400.4.57.1 * python310-tk-debuginfo-3.10.15-150400.4.57.1 * python310-tk-3.10.15-150400.4.57.1 * libpython3_10-1_0-3.10.15-150400.4.57.1 * python310-curses-debuginfo-3.10.15-150400.4.57.1 * python310-tools-3.10.15-150400.4.57.1 * python310-doc-devhelp-3.10.15-150400.4.57.1 * libpython3_10-1_0-debuginfo-3.10.15-150400.4.57.1 * python310-base-debuginfo-3.10.15-150400.4.57.1 * python310-3.10.15-150400.4.57.1 * python310-debuginfo-3.10.15-150400.4.57.1 * openSUSE Leap 15.6 (x86_64) * libpython3_10-1_0-32bit-3.10.15-150400.4.57.1 * python310-32bit-3.10.15-150400.4.57.1 * python310-base-32bit-debuginfo-3.10.15-150400.4.57.1 * python310-32bit-debuginfo-3.10.15-150400.4.57.1 * libpython3_10-1_0-32bit-debuginfo-3.10.15-150400.4.57.1 * python310-base-32bit-3.10.15-150400.4.57.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python310-base-3.10.15-150400.4.57.1 * libpython3_10-1_0-debuginfo-3.10.15-150400.4.57.1 * python310-base-debuginfo-3.10.15-150400.4.57.1 * python310-dbm-debuginfo-3.10.15-150400.4.57.1 * libpython3_10-1_0-3.10.15-150400.4.57.1 * python310-dbm-3.10.15-150400.4.57.1 * python310-core-debugsource-3.10.15-150400.4.57.1 * python310-curses-3.10.15-150400.4.57.1 * python310-curses-debuginfo-3.10.15-150400.4.57.1 * python310-devel-3.10.15-150400.4.57.1 * python310-tk-debuginfo-3.10.15-150400.4.57.1 * python310-3.10.15-150400.4.57.1 * python310-idle-3.10.15-150400.4.57.1 * python310-debugsource-3.10.15-150400.4.57.1 * python310-debuginfo-3.10.15-150400.4.57.1 * python310-tools-3.10.15-150400.4.57.1 * python310-tk-3.10.15-150400.4.57.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python310-base-3.10.15-150400.4.57.1 * libpython3_10-1_0-debuginfo-3.10.15-150400.4.57.1 * python310-base-debuginfo-3.10.15-150400.4.57.1 * python310-dbm-debuginfo-3.10.15-150400.4.57.1 * libpython3_10-1_0-3.10.15-150400.4.57.1 * python310-dbm-3.10.15-150400.4.57.1 * python310-core-debugsource-3.10.15-150400.4.57.1 * python310-curses-3.10.15-150400.4.57.1 * python310-curses-debuginfo-3.10.15-150400.4.57.1 * python310-devel-3.10.15-150400.4.57.1 * python310-tk-debuginfo-3.10.15-150400.4.57.1 * python310-3.10.15-150400.4.57.1 * python310-idle-3.10.15-150400.4.57.1 * python310-debugsource-3.10.15-150400.4.57.1 * python310-debuginfo-3.10.15-150400.4.57.1 * python310-tools-3.10.15-150400.4.57.1 * python310-tk-3.10.15-150400.4.57.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * python310-base-3.10.15-150400.4.57.1 * libpython3_10-1_0-debuginfo-3.10.15-150400.4.57.1 * python310-base-debuginfo-3.10.15-150400.4.57.1 * python310-dbm-debuginfo-3.10.15-150400.4.57.1 * libpython3_10-1_0-3.10.15-150400.4.57.1 * python310-dbm-3.10.15-150400.4.57.1 * python310-core-debugsource-3.10.15-150400.4.57.1 * python310-curses-3.10.15-150400.4.57.1 * python310-curses-debuginfo-3.10.15-150400.4.57.1 * python310-devel-3.10.15-150400.4.57.1 * python310-tk-debuginfo-3.10.15-150400.4.57.1 * python310-3.10.15-150400.4.57.1 * python310-idle-3.10.15-150400.4.57.1 * python310-debugsource-3.10.15-150400.4.57.1 * python310-debuginfo-3.10.15-150400.4.57.1 * python310-tools-3.10.15-150400.4.57.1 * python310-tk-3.10.15-150400.4.57.1 ## References: * https://www.suse.com/security/cve/CVE-2024-6232.html * https://www.suse.com/security/cve/CVE-2024-7592.html * https://www.suse.com/security/cve/CVE-2024-8088.html * https://bugzilla.suse.com/show_bug.cgi?id=1229596 * https://bugzilla.suse.com/show_bug.cgi?id=1229704 * https://bugzilla.suse.com/show_bug.cgi?id=1230227

1 0

SUSE-SU-2024:3358-1: important: Security update for ffmpeg-4
by OPENSUSE-UPDATES 20 Sep '24

20 Sep '24

# Security update for ffmpeg-4 Announcement ID: SUSE-SU-2024:3358-1 Rating: important References: * bsc#1226892 * bsc#1226897 * bsc#1226898 * bsc#1226899 * bsc#1226900 * bsc#1226901 * bsc#1229026 * jsc#PED-10024 Cross-References: * CVE-2023-22656 * CVE-2023-45221 * CVE-2023-47169 * CVE-2023-47282 * CVE-2023-48368 * CVE-2024-7055 CVSS scores: * CVE-2023-22656 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2023-45221 ( SUSE ): 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2023-47169 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2023-47282 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L * CVE-2023-48368 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H * CVE-2024-7055 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves six vulnerabilities, contains one feature and has one security fix can now be installed. ## Description: This update for ffmpeg-4 fixes the following issues: * Dropped support for libmfx to fix the following CVEs: * libmfx: improper input validation (CVE-2023-48368, bsc#1226897) * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898) * libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899) * libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900) * libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901) * CVE-2024-7055: heap-based buffer overflow in pnmdec.c from the libavcodec library. (bsc#1229026) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3358=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3358=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3358=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3358=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3358=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3358=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3358=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3358=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-3358=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libavformat58_76-4.4-150400.3.42.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.42.1 * libavdevice58_13-4.4-150400.3.42.1 * libavutil56_70-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-private-devel-4.4-150400.3.42.1 * libavformat58_76-debuginfo-4.4-150400.3.42.1 * libavfilter7_110-4.4-150400.3.42.1 * ffmpeg-4-4.4-150400.3.42.1 * ffmpeg-4-debuginfo-4.4-150400.3.42.1 * libswscale5_9-4.4-150400.3.42.1 * libavcodec58_134-4.4-150400.3.42.1 * libswscale5_9-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-debugsource-4.4-150400.3.42.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.42.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.42.1 * libavutil56_70-4.4-150400.3.42.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.42.1 * libavdevice58_13-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.42.1 * ffmpeg-4-libpostproc-devel-4.4-150400.3.42.1 * libavcodec58_134-debuginfo-4.4-150400.3.42.1 * libavresample4_0-4.4-150400.3.42.1 * libswresample3_9-4.4-150400.3.42.1 * ffmpeg-4-libavutil-devel-4.4-150400.3.42.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.42.1 * libavfilter7_110-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-4.4-150400.3.42.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.42.1 * libswresample3_9-debuginfo-4.4-150400.3.42.1 * libavresample4_0-debuginfo-4.4-150400.3.42.1 * openSUSE Leap 15.4 (x86_64) * libavresample4_0-32bit-4.4-150400.3.42.1 * libswresample3_9-32bit-4.4-150400.3.42.1 * libavfilter7_110-32bit-debuginfo-4.4-150400.3.42.1 * libavformat58_76-32bit-4.4-150400.3.42.1 * libpostproc55_9-32bit-4.4-150400.3.42.1 * libswresample3_9-32bit-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-32bit-debuginfo-4.4-150400.3.42.1 * libswscale5_9-32bit-4.4-150400.3.42.1 * libswscale5_9-32bit-debuginfo-4.4-150400.3.42.1 * libavresample4_0-32bit-debuginfo-4.4-150400.3.42.1 * libavutil56_70-32bit-debuginfo-4.4-150400.3.42.1 * libavformat58_76-32bit-debuginfo-4.4-150400.3.42.1 * libavutil56_70-32bit-4.4-150400.3.42.1 * libavdevice58_13-32bit-debuginfo-4.4-150400.3.42.1 * libavdevice58_13-32bit-4.4-150400.3.42.1 * libavfilter7_110-32bit-4.4-150400.3.42.1 * libavcodec58_134-32bit-debuginfo-4.4-150400.3.42.1 * libavcodec58_134-32bit-4.4-150400.3.42.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libswresample3_9-64bit-4.4-150400.3.42.1 * libswscale5_9-64bit-debuginfo-4.4-150400.3.42.1 * libavdevice58_13-64bit-debuginfo-4.4-150400.3.42.1 * libavutil56_70-64bit-debuginfo-4.4-150400.3.42.1 * libavdevice58_13-64bit-4.4-150400.3.42.1 * libavfilter7_110-64bit-4.4-150400.3.42.1 * libavfilter7_110-64bit-debuginfo-4.4-150400.3.42.1 * libavcodec58_134-64bit-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-64bit-4.4-150400.3.42.1 * libavcodec58_134-64bit-4.4-150400.3.42.1 * libpostproc55_9-64bit-debuginfo-4.4-150400.3.42.1 * libavresample4_0-64bit-debuginfo-4.4-150400.3.42.1 * libswresample3_9-64bit-debuginfo-4.4-150400.3.42.1 * libavformat58_76-64bit-4.4-150400.3.42.1 * libavformat58_76-64bit-debuginfo-4.4-150400.3.42.1 * libswscale5_9-64bit-4.4-150400.3.42.1 * libavresample4_0-64bit-4.4-150400.3.42.1 * libavutil56_70-64bit-4.4-150400.3.42.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libavformat58_76-4.4-150400.3.42.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.42.1 * libavdevice58_13-4.4-150400.3.42.1 * libavutil56_70-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-private-devel-4.4-150400.3.42.1 * libavformat58_76-debuginfo-4.4-150400.3.42.1 * libavfilter7_110-4.4-150400.3.42.1 * ffmpeg-4-4.4-150400.3.42.1 * ffmpeg-4-debuginfo-4.4-150400.3.42.1 * libswscale5_9-4.4-150400.3.42.1 * libavcodec58_134-4.4-150400.3.42.1 * libswscale5_9-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-debugsource-4.4-150400.3.42.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.42.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.42.1 * libavutil56_70-4.4-150400.3.42.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.42.1 * libavdevice58_13-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.42.1 * ffmpeg-4-libpostproc-devel-4.4-150400.3.42.1 * libavcodec58_134-debuginfo-4.4-150400.3.42.1 * libavresample4_0-4.4-150400.3.42.1 * libswresample3_9-4.4-150400.3.42.1 * ffmpeg-4-libavutil-devel-4.4-150400.3.42.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.42.1 * libavfilter7_110-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-4.4-150400.3.42.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.42.1 * libswresample3_9-debuginfo-4.4-150400.3.42.1 * libavresample4_0-debuginfo-4.4-150400.3.42.1 * openSUSE Leap 15.5 (x86_64) * libavresample4_0-32bit-4.4-150400.3.42.1 * libswresample3_9-32bit-4.4-150400.3.42.1 * libavfilter7_110-32bit-debuginfo-4.4-150400.3.42.1 * libavformat58_76-32bit-4.4-150400.3.42.1 * libpostproc55_9-32bit-4.4-150400.3.42.1 * libswresample3_9-32bit-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-32bit-debuginfo-4.4-150400.3.42.1 * libswscale5_9-32bit-4.4-150400.3.42.1 * libswscale5_9-32bit-debuginfo-4.4-150400.3.42.1 * libavresample4_0-32bit-debuginfo-4.4-150400.3.42.1 * libavutil56_70-32bit-debuginfo-4.4-150400.3.42.1 * libavformat58_76-32bit-debuginfo-4.4-150400.3.42.1 * libavutil56_70-32bit-4.4-150400.3.42.1 * libavdevice58_13-32bit-debuginfo-4.4-150400.3.42.1 * libavdevice58_13-32bit-4.4-150400.3.42.1 * libavfilter7_110-32bit-4.4-150400.3.42.1 * libavcodec58_134-32bit-debuginfo-4.4-150400.3.42.1 * libavcodec58_134-32bit-4.4-150400.3.42.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libavformat58_76-4.4-150400.3.42.1 * ffmpeg-4-libswscale-devel-4.4-150400.3.42.1 * libavdevice58_13-4.4-150400.3.42.1 * libavutil56_70-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-private-devel-4.4-150400.3.42.1 * libavformat58_76-debuginfo-4.4-150400.3.42.1 * libavfilter7_110-4.4-150400.3.42.1 * ffmpeg-4-4.4-150400.3.42.1 * ffmpeg-4-debuginfo-4.4-150400.3.42.1 * libswscale5_9-4.4-150400.3.42.1 * libavcodec58_134-4.4-150400.3.42.1 * libswscale5_9-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-debugsource-4.4-150400.3.42.1 * ffmpeg-4-libavfilter-devel-4.4-150400.3.42.1 * ffmpeg-4-libavcodec-devel-4.4-150400.3.42.1 * libavutil56_70-4.4-150400.3.42.1 * ffmpeg-4-libavformat-devel-4.4-150400.3.42.1 * libavdevice58_13-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-libswresample-devel-4.4-150400.3.42.1 * ffmpeg-4-libpostproc-devel-4.4-150400.3.42.1 * libavcodec58_134-debuginfo-4.4-150400.3.42.1 * libavresample4_0-4.4-150400.3.42.1 * libswresample3_9-4.4-150400.3.42.1 * ffmpeg-4-libavutil-devel-4.4-150400.3.42.1 * ffmpeg-4-libavresample-devel-4.4-150400.3.42.1 * libavfilter7_110-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-4.4-150400.3.42.1 * ffmpeg-4-libavdevice-devel-4.4-150400.3.42.1 * libswresample3_9-debuginfo-4.4-150400.3.42.1 * libavresample4_0-debuginfo-4.4-150400.3.42.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libavformat58_76-4.4-150400.3.42.1 * libavutil56_70-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-4.4-150400.3.42.1 * libavcodec58_134-4.4-150400.3.42.1 * libavformat58_76-debuginfo-4.4-150400.3.42.1 * libswresample3_9-debuginfo-4.4-150400.3.42.1 * libavcodec58_134-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-debugsource-4.4-150400.3.42.1 * ffmpeg-4-debuginfo-4.4-150400.3.42.1 * libswresample3_9-4.4-150400.3.42.1 * libavutil56_70-4.4-150400.3.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libavformat58_76-4.4-150400.3.42.1 * libavutil56_70-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-4.4-150400.3.42.1 * libavcodec58_134-4.4-150400.3.42.1 * libavformat58_76-debuginfo-4.4-150400.3.42.1 * libswresample3_9-debuginfo-4.4-150400.3.42.1 * libavcodec58_134-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-debugsource-4.4-150400.3.42.1 * ffmpeg-4-debuginfo-4.4-150400.3.42.1 * libswresample3_9-4.4-150400.3.42.1 * libavutil56_70-4.4-150400.3.42.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libavformat58_76-4.4-150400.3.42.1 * libavutil56_70-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-4.4-150400.3.42.1 * libavcodec58_134-4.4-150400.3.42.1 * libavformat58_76-debuginfo-4.4-150400.3.42.1 * libswresample3_9-debuginfo-4.4-150400.3.42.1 * libswscale5_9-debuginfo-4.4-150400.3.42.1 * libavcodec58_134-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-debugsource-4.4-150400.3.42.1 * ffmpeg-4-debuginfo-4.4-150400.3.42.1 * libswresample3_9-4.4-150400.3.42.1 * libavutil56_70-4.4-150400.3.42.1 * libswscale5_9-4.4-150400.3.42.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libavformat58_76-4.4-150400.3.42.1 * libavutil56_70-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-4.4-150400.3.42.1 * libavcodec58_134-4.4-150400.3.42.1 * libavformat58_76-debuginfo-4.4-150400.3.42.1 * libswresample3_9-debuginfo-4.4-150400.3.42.1 * libavcodec58_134-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-debugsource-4.4-150400.3.42.1 * ffmpeg-4-debuginfo-4.4-150400.3.42.1 * libswresample3_9-4.4-150400.3.42.1 * libavutil56_70-4.4-150400.3.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libavformat58_76-4.4-150400.3.42.1 * libavutil56_70-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-debuginfo-4.4-150400.3.42.1 * libpostproc55_9-4.4-150400.3.42.1 * libavcodec58_134-4.4-150400.3.42.1 * libavformat58_76-debuginfo-4.4-150400.3.42.1 * libswresample3_9-debuginfo-4.4-150400.3.42.1 * libavcodec58_134-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-debugsource-4.4-150400.3.42.1 * ffmpeg-4-debuginfo-4.4-150400.3.42.1 * libswresample3_9-4.4-150400.3.42.1 * libavutil56_70-4.4-150400.3.42.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * libavformat58_76-4.4-150400.3.42.1 * libavutil56_70-debuginfo-4.4-150400.3.42.1 * libavcodec58_134-4.4-150400.3.42.1 * libavformat58_76-debuginfo-4.4-150400.3.42.1 * libswresample3_9-debuginfo-4.4-150400.3.42.1 * libswscale5_9-debuginfo-4.4-150400.3.42.1 * libavcodec58_134-debuginfo-4.4-150400.3.42.1 * ffmpeg-4-debugsource-4.4-150400.3.42.1 * ffmpeg-4-debuginfo-4.4-150400.3.42.1 * libswresample3_9-4.4-150400.3.42.1 * libavutil56_70-4.4-150400.3.42.1 * libswscale5_9-4.4-150400.3.42.1 ## References: * https://www.suse.com/security/cve/CVE-2023-22656.html * https://www.suse.com/security/cve/CVE-2023-45221.html * https://www.suse.com/security/cve/CVE-2023-47169.html * https://www.suse.com/security/cve/CVE-2023-47282.html * https://www.suse.com/security/cve/CVE-2023-48368.html * https://www.suse.com/security/cve/CVE-2024-7055.html * https://bugzilla.suse.com/show_bug.cgi?id=1226892 * https://bugzilla.suse.com/show_bug.cgi?id=1226897 * https://bugzilla.suse.com/show_bug.cgi?id=1226898 * https://bugzilla.suse.com/show_bug.cgi?id=1226899 * https://bugzilla.suse.com/show_bug.cgi?id=1226900 * https://bugzilla.suse.com/show_bug.cgi?id=1226901 * https://bugzilla.suse.com/show_bug.cgi?id=1229026 * https://jira.suse.com/browse/PED-10024

1 0

SUSE-RU-2024:3359-1: moderate: Recommended update for pgaudit, postgresql
by OPENSUSE-UPDATES 20 Sep '24

20 Sep '24

# Recommended update for pgaudit, postgresql Announcement ID: SUSE-RU-2024:3359-1 Rating: moderate References: * bsc#1230423 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that has one fix can now be installed. ## Description: This update for pgaudit, postgresql fixes the following issues: * Relax the dependency of extensions on the server version from exact major.minor to greater or equal, after Tom Lane confirmed on the PostgreSQL packagers list that ABI stability is being taken care of between minor releases. (bsc#1230423) pgaudit is rebuilt with updated postgresql requires. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3359=1 openSUSE-SLE-15.6-2024-3359=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3359=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3359=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-3359=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * postgresql12-pgaudit-debuginfo-1.4.3-150600.13.7.1 * postgresql13-pgaudit-debugsource-1.5.2-150600.13.7.1 * postgresql12-pgaudit-debugsource-1.4.3-150600.13.7.1 * postgresql15-pgaudit-1.7.0-150600.13.7.1 * postgresql15-pgaudit-debuginfo-1.7.0-150600.13.7.1 * postgresql14-pgaudit-1.6.2-150600.13.7.1 * postgresql16-pgaudit-16.0-150600.13.7.1 * postgresql15-pgaudit-debugsource-1.7.0-150600.13.7.1 * postgresql16-pgaudit-debuginfo-16.0-150600.13.7.1 * postgresql14-pgaudit-debugsource-1.6.2-150600.13.7.1 * postgresql14-pgaudit-debuginfo-1.6.2-150600.13.7.1 * postgresql13-pgaudit-1.5.2-150600.13.7.1 * postgresql16-pgaudit-debugsource-16.0-150600.13.7.1 * postgresql12-pgaudit-1.4.3-150600.13.7.1 * postgresql13-pgaudit-debuginfo-1.5.2-150600.13.7.1 * openSUSE Leap 15.6 (noarch) * postgresql-server-16-150600.17.3.2 * postgresql-pltcl-16-150600.17.3.2 * postgresql-plperl-16-150600.17.3.2 * postgresql-llvmjit-16-150600.17.3.2 * postgresql-contrib-16-150600.17.3.2 * postgresql-devel-16-150600.17.3.2 * postgresql-plpython-16-150600.17.3.2 * postgresql-docs-16-150600.17.3.2 * postgresql-test-16-150600.17.3.2 * postgresql-llvmjit-devel-16-150600.17.3.2 * postgresql-16-150600.17.3.2 * postgresql-server-devel-16-150600.17.3.2 * Basesystem Module 15-SP6 (noarch) * postgresql-16-150600.17.3.2 * SUSE Package Hub 15 15-SP6 (noarch) * postgresql-server-16-150600.17.3.2 * postgresql-pltcl-16-150600.17.3.2 * postgresql-plperl-16-150600.17.3.2 * postgresql-llvmjit-16-150600.17.3.2 * postgresql-contrib-16-150600.17.3.2 * postgresql-devel-16-150600.17.3.2 * postgresql-plpython-16-150600.17.3.2 * postgresql-docs-16-150600.17.3.2 * postgresql-test-16-150600.17.3.2 * postgresql-llvmjit-devel-16-150600.17.3.2 * postgresql-16-150600.17.3.2 * postgresql-server-devel-16-150600.17.3.2 * Server Applications Module 15-SP6 (noarch) * postgresql-server-16-150600.17.3.2 * postgresql-pltcl-16-150600.17.3.2 * postgresql-plperl-16-150600.17.3.2 * postgresql-contrib-16-150600.17.3.2 * postgresql-devel-16-150600.17.3.2 * postgresql-plpython-16-150600.17.3.2 * postgresql-docs-16-150600.17.3.2 * postgresql-server-devel-16-150600.17.3.2 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql16-pgaudit-debuginfo-16.0-150600.13.7.1 * postgresql16-pgaudit-debugsource-16.0-150600.13.7.1 * postgresql16-pgaudit-16.0-150600.13.7.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1230423

1 0

openSUSE-RU-2024:0307-1: moderate: Recommended update for tryton, trytond, trytond_account, trytond_stock, trytond_stock_supply
by maintenance＠opensuse.org 20 Sep '24

20 Sep '24

openSUSE Recommended Update: Recommended update for tryton, trytond, trytond_account, trytond_stock, trytond_stock_supply ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0307-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tryton, trytond, trytond_account, trytond_stock, trytond_stock_supply fixes the following issues: Changes in tryton: - Version 6.0.43 - Bugfix Release - Version 6.0.41 - Bugfix Release - Version 6.0.40 - Bugfix Release Changes in trytond: - Version 6.0.52 - Bugfix Release - Version 6.0.50 - Bugfix Release - Version 6.0.48 - Bugfix Release Changes in trytond_stock_supply: - Version 6.0.9 - Bugfix Release Changes in trytond_stock: - Version 6.0.28 - Bugfix Release Changes in trytond_account: - Version 6.0.27 - Bugfix Release - Version 6.0.26 - Bugfix Release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-307=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): tryton-6.0.43-bp155.2.18.1 trytond-6.0.52-bp155.2.21.1 trytond_account-6.0.27-bp155.2.15.1 trytond_stock-6.0.28-bp155.2.12.1 trytond_stock_supply-6.0.9-bp155.2.9.1 References:

1 0