September 2024 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2024:0303-1: moderate: Security update for htmldoc
by opensuse-security＠opensuse.org 16 Sep '24

16 Sep '24

openSUSE Security Update: Security update for htmldoc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0303-1 Rating: moderate References: #1230022 Cross-References: CVE-2024-45508 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for htmldoc fixes the following issues: - CVE-2024-45508: Fixed an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node [boo#1230022]. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-303=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): htmldoc-1.9.16-bp156.3.3.1 References: https://www.suse.com/security/cve/CVE-2024-45508.html https://bugzilla.suse.com/1230022

1 0

openSUSE-SU-2024:0304-1: moderate: Security update for htmldoc
by opensuse-security＠opensuse.org 16 Sep '24

16 Sep '24

openSUSE Security Update: Security update for htmldoc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0304-1 Rating: moderate References: #1230022 Cross-References: CVE-2024-45508 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for htmldoc fixes the following issues: - CVE-2024-45508: Fixed an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node [boo#1230022]. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-304=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): htmldoc-1.9.16-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-45508.html https://bugzilla.suse.com/1230022

1 0

SUSE-RU-2024:3253-1: moderate: Recommended update for resource-agents
by OPENSUSE-UPDATES 16 Sep '24

16 Sep '24

# Recommended update for resource-agents Announcement ID: SUSE-RU-2024:3253-1 Rating: moderate References: * bsc#1226140 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for resource-agents fixes the following issue: * Resource agent azure-events-az has been updated to support retry handling for periods of internal metadata service unavailability, and provide more resilient pacemaker operation (bsc#1226140). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3253=1 openSUSE-SLE-15.6-2024-3253=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2024-3253=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * resource-agents-4.13.0+git6.ae50f94f-150600.4.6.2 * resource-agents-debugsource-4.13.0+git6.ae50f94f-150600.4.6.2 * resource-agents-zfs-4.13.0+git6.ae50f94f-150600.4.6.2 * ldirectord-4.13.0+git6.ae50f94f-150600.4.6.2 * resource-agents-debuginfo-4.13.0+git6.ae50f94f-150600.4.6.2 * openSUSE Leap 15.6 (noarch) * monitoring-plugins-metadata-4.13.0+git6.ae50f94f-150600.4.6.2 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * resource-agents-4.13.0+git6.ae50f94f-150600.4.6.2 * resource-agents-debugsource-4.13.0+git6.ae50f94f-150600.4.6.2 * ldirectord-4.13.0+git6.ae50f94f-150600.4.6.2 * resource-agents-debuginfo-4.13.0+git6.ae50f94f-150600.4.6.2 * SUSE Linux Enterprise High Availability Extension 15 SP6 (noarch) * monitoring-plugins-metadata-4.13.0+git6.ae50f94f-150600.4.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226140

1 0

SUSE-RU-2024:3254-1: moderate: Recommended update for resource-agents
by OPENSUSE-UPDATES 16 Sep '24

16 Sep '24

# Recommended update for resource-agents Announcement ID: SUSE-RU-2024:3254-1 Rating: moderate References: * bsc#1226140 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for resource-agents fixes the following issue: * Resource agent azure-events-az has been updated to support retry handling for periods of internal metadata service unavailability, and provide more resilient pacemaker operation (bsc#1226140). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3254=1 openSUSE-SLE-15.5-2024-3254=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-3254=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * resource-agents-debugsource-4.12.0+git30.7fd7c8fa-150500.3.12.2 * resource-agents-4.12.0+git30.7fd7c8fa-150500.3.12.2 * resource-agents-zfs-4.12.0+git30.7fd7c8fa-150500.3.12.2 * ldirectord-4.12.0+git30.7fd7c8fa-150500.3.12.2 * resource-agents-debuginfo-4.12.0+git30.7fd7c8fa-150500.3.12.2 * openSUSE Leap 15.5 (noarch) * monitoring-plugins-metadata-4.12.0+git30.7fd7c8fa-150500.3.12.2 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * resource-agents-debugsource-4.12.0+git30.7fd7c8fa-150500.3.12.2 * resource-agents-4.12.0+git30.7fd7c8fa-150500.3.12.2 * resource-agents-debuginfo-4.12.0+git30.7fd7c8fa-150500.3.12.2 * ldirectord-4.12.0+git30.7fd7c8fa-150500.3.12.2 * SUSE Linux Enterprise High Availability Extension 15 SP5 (noarch) * monitoring-plugins-metadata-4.12.0+git30.7fd7c8fa-150500.3.12.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226140

1 0

SUSE-RU-2024:3256-1: moderate: Recommended update for resource-agents
by OPENSUSE-UPDATES 16 Sep '24

16 Sep '24

# Recommended update for resource-agents Announcement ID: SUSE-RU-2024:3256-1 Rating: moderate References: * bsc#1226140 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for resource-agents fixes the following issue: * Resource agent azure-events-az has been updated to support retry handling for periods of internal metadata service unavailability, and provide more resilient pacemaker operation (bsc#1226140). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3256=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-3256=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * ldirectord-4.10.0+git40.0f4de473-150400.3.31.2 * resource-agents-debugsource-4.10.0+git40.0f4de473-150400.3.31.2 * resource-agents-4.10.0+git40.0f4de473-150400.3.31.2 * resource-agents-debuginfo-4.10.0+git40.0f4de473-150400.3.31.2 * openSUSE Leap 15.4 (noarch) * monitoring-plugins-metadata-4.10.0+git40.0f4de473-150400.3.31.2 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * ldirectord-4.10.0+git40.0f4de473-150400.3.31.2 * resource-agents-debugsource-4.10.0+git40.0f4de473-150400.3.31.2 * resource-agents-4.10.0+git40.0f4de473-150400.3.31.2 * resource-agents-debuginfo-4.10.0+git40.0f4de473-150400.3.31.2 * SUSE Linux Enterprise High Availability Extension 15 SP4 (noarch) * monitoring-plugins-metadata-4.10.0+git40.0f4de473-150400.3.31.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226140

1 0

SUSE-SU-2024:3257-1: important: Security update for 389-ds
by OPENSUSE-UPDATES 16 Sep '24

16 Sep '24

# Security update for 389-ds Announcement ID: SUSE-SU-2024:3257-1 Rating: important References: * bsc#1225507 * bsc#1225512 * bsc#1226277 Cross-References: * CVE-2024-2199 * CVE-2024-3657 * CVE-2024-5953 CVSS scores: * CVE-2024-2199 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-3657 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-3657 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-5953 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-5953 ( NVD ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for 389-ds fixes the following issues: * Update to version 1.4.4.20~git3.e7ac6d87: * CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. (bsc#1225512) * CVE-2024-5953: Malformed userPassword hashes may cause a denial of service. (bsc#1226277) * CVE-2024-2199: Malformed userPassword may cause crash at do_modify in slapd/modify.c. (bsc#1225507) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3257=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3257=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3257=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3257=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3257=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-snmp-debuginfo-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * libsvrcore0-debuginfo-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-debuginfo-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-debugsource-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * libsvrcore0-debuginfo-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-debuginfo-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-debugsource-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * libsvrcore0-debuginfo-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-debuginfo-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-debugsource-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * libsvrcore0-debuginfo-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-debuginfo-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-debugsource-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * libsvrcore0-debuginfo-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-debuginfo-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1 * 389-ds-debugsource-1.4.4.20~git3.e7ac6d87-150300.3.35.1 ## References: * https://www.suse.com/security/cve/CVE-2024-2199.html * https://www.suse.com/security/cve/CVE-2024-3657.html * https://www.suse.com/security/cve/CVE-2024-5953.html * https://bugzilla.suse.com/show_bug.cgi?id=1225507 * https://bugzilla.suse.com/show_bug.cgi?id=1225512 * https://bugzilla.suse.com/show_bug.cgi?id=1226277

1 0

SUSE-RU-2024:3258-1: important: Recommended update for rmt-server
by OPENSUSE-UPDATES 16 Sep '24

16 Sep '24

# Recommended update for rmt-server Announcement ID: SUSE-RU-2024:3258-1 Rating: important References: Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for rmt-server contains the following fixes: * Version 2.19 * Fix for mirroring products that contain special characters (eg.: '$') in their path * rmt-server-pubcloud: * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400) * Validate repository and registy access for hybrid systems * Include new script to fix yum-utils issue (jsc#SLL-369) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3258=1 openSUSE-SLE-15.5-2024-3258=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3258=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-3258=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-3258=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-3258=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-3258=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rmt-server-config-2.19-150500.3.22.1 * rmt-server-2.19-150500.3.22.1 * rmt-server-debugsource-2.19-150500.3.22.1 * rmt-server-pubcloud-2.19-150500.3.22.1 * rmt-server-debuginfo-2.19-150500.3.22.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * rmt-server-config-2.19-150500.3.22.1 * rmt-server-2.19-150500.3.22.1 * rmt-server-debugsource-2.19-150500.3.22.1 * rmt-server-pubcloud-2.19-150500.3.22.1 * rmt-server-debuginfo-2.19-150500.3.22.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.19-150500.3.22.1 * rmt-server-pubcloud-2.19-150500.3.22.1 * rmt-server-debugsource-2.19-150500.3.22.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.19-150500.3.22.1 * rmt-server-pubcloud-2.19-150500.3.22.1 * rmt-server-debugsource-2.19-150500.3.22.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.19-150500.3.22.1 * rmt-server-config-2.19-150500.3.22.1 * rmt-server-2.19-150500.3.22.1 * rmt-server-debugsource-2.19-150500.3.22.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.19-150500.3.22.1 * rmt-server-config-2.19-150500.3.22.1 * rmt-server-2.19-150500.3.22.1 * rmt-server-debugsource-2.19-150500.3.22.1

1 0

SUSE-RU-2024:3259-1: important: Recommended update for rmt-server
by OPENSUSE-UPDATES 16 Sep '24

16 Sep '24

# Recommended update for rmt-server Announcement ID: SUSE-RU-2024:3259-1 Rating: important References: Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that can now be installed. ## Description: This update for rmt-server contains the following fixes: * Version 2.19 * Fix for mirroring products that contain special characters (eg.: '$') in their path * rmt-server-pubcloud: * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400) * Validate repository and registy access for hybrid systems * Include new script to fix yum-utils issue (jsc#SLL-369) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3259=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3259=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3259=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3259=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-3259=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3259=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3259=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3259=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3259=1 ## Package List: * SUSE Manager Proxy 4.3 (x86_64) * rmt-server-debuginfo-2.19-150400.3.31.3 * rmt-server-2.19-150400.3.31.3 * rmt-server-debugsource-2.19-150400.3.31.3 * rmt-server-config-2.19-150400.3.31.3 * SUSE Manager Retail Branch Server 4.3 (x86_64) * rmt-server-debuginfo-2.19-150400.3.31.3 * rmt-server-2.19-150400.3.31.3 * rmt-server-debugsource-2.19-150400.3.31.3 * rmt-server-config-2.19-150400.3.31.3 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * rmt-server-debuginfo-2.19-150400.3.31.3 * rmt-server-2.19-150400.3.31.3 * rmt-server-debugsource-2.19-150400.3.31.3 * rmt-server-config-2.19-150400.3.31.3 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * rmt-server-config-2.19-150400.3.31.3 * rmt-server-debugsource-2.19-150400.3.31.3 * rmt-server-pubcloud-2.19-150400.3.31.3 * rmt-server-debuginfo-2.19-150400.3.31.3 * rmt-server-2.19-150400.3.31.3 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.19-150400.3.31.3 * rmt-server-pubcloud-2.19-150400.3.31.3 * rmt-server-debugsource-2.19-150400.3.31.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rmt-server-debuginfo-2.19-150400.3.31.3 * rmt-server-2.19-150400.3.31.3 * rmt-server-debugsource-2.19-150400.3.31.3 * rmt-server-config-2.19-150400.3.31.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rmt-server-debuginfo-2.19-150400.3.31.3 * rmt-server-2.19-150400.3.31.3 * rmt-server-debugsource-2.19-150400.3.31.3 * rmt-server-config-2.19-150400.3.31.3 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-2.19-150400.3.31.3 * rmt-server-2.19-150400.3.31.3 * rmt-server-debugsource-2.19-150400.3.31.3 * rmt-server-config-2.19-150400.3.31.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rmt-server-debuginfo-2.19-150400.3.31.3 * rmt-server-2.19-150400.3.31.3 * rmt-server-debugsource-2.19-150400.3.31.3 * rmt-server-config-2.19-150400.3.31.3

1 0

SUSE-RU-2024:3260-1: important: Recommended update for rmt-server
by OPENSUSE-UPDATES 16 Sep '24

16 Sep '24

# Recommended update for rmt-server Announcement ID: SUSE-RU-2024:3260-1 Rating: important References: Affected Products: * openSUSE Leap 15.3 * Public Cloud Module 15-SP3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that can now be installed. ## Description: This update for rmt-server contains the following fixes: * Version 2.19 * Fix for mirroring products that contain special characters (eg.: '$') in their path * rmt-server-pubcloud: * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400) * Validate repository and registy access for hybrid systems * Include new script to fix yum-utils issue (jsc#SLL-369) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3260=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-3260=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3260=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3260=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3260=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3260=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * rmt-server-2.19-150300.3.43.3 * rmt-server-pubcloud-2.19-150300.3.43.3 * rmt-server-config-2.19-150300.3.43.3 * rmt-server-debugsource-2.19-150300.3.43.3 * rmt-server-debuginfo-2.19-150300.3.43.3 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * rmt-server-pubcloud-2.19-150300.3.43.3 * rmt-server-debuginfo-2.19-150300.3.43.3 * rmt-server-debugsource-2.19-150300.3.43.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * rmt-server-2.19-150300.3.43.3 * rmt-server-config-2.19-150300.3.43.3 * rmt-server-debuginfo-2.19-150300.3.43.3 * rmt-server-debugsource-2.19-150300.3.43.3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * rmt-server-2.19-150300.3.43.3 * rmt-server-config-2.19-150300.3.43.3 * rmt-server-debuginfo-2.19-150300.3.43.3 * rmt-server-debugsource-2.19-150300.3.43.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * rmt-server-2.19-150300.3.43.3 * rmt-server-config-2.19-150300.3.43.3 * rmt-server-debuginfo-2.19-150300.3.43.3 * rmt-server-debugsource-2.19-150300.3.43.3 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * rmt-server-2.19-150300.3.43.3 * rmt-server-config-2.19-150300.3.43.3 * rmt-server-debuginfo-2.19-150300.3.43.3 * rmt-server-debugsource-2.19-150300.3.43.3

1 0

openSUSE-SU-2024:0302-1: important: Security update for chromium
by opensuse-security＠opensuse.org 16 Sep '24

16 Sep '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0302-1 Rating: important References: #1230391 Cross-References: CVE-2024-8636 CVE-2024-8637 CVE-2024-8638 CVE-2024-8639 Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391) * CVE-2024-8636: Heap buffer overflow in Skia * CVE-2024-8637: Use after free in Media Router * CVE-2024-8638: Type Confusion in V8 * CVE-2024-8639: Use after free in Autofill Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-302=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-302=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 x86_64): chromedriver-128.0.6613.137-bp156.2.26.1 chromedriver-debuginfo-128.0.6613.137-bp156.2.26.1 chromium-128.0.6613.137-bp156.2.26.1 chromium-debuginfo-128.0.6613.137-bp156.2.26.1 - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-128.0.6613.137-bp155.2.114.1 chromium-128.0.6613.137-bp155.2.114.1 References: https://www.suse.com/security/cve/CVE-2024-8636.html https://www.suse.com/security/cve/CVE-2024-8637.html https://www.suse.com/security/cve/CVE-2024-8638.html https://www.suse.com/security/cve/CVE-2024-8639.html https://bugzilla.suse.com/1230391

1 0